2025/11/12 08:58:44 [error] 24805#24805: *7070 connect() failed (111: Connection refused) while connecting to upstream, client: 154.12.231.56, server: measureyourcause.measureyourbrand.com.au, request: "GET /postnews.php HTTP/1.1", upstream: "http://103.4.122.14:8181/postnews.php", host: "measureyourcause.measureyourbrand.com.au"
2025/11/12 09:23:13 [error] 23009#23009: *615 openat() "/home/measureyourbrand/public_html/measureyourcause.com.au/robots.txt" failed (2: No such file or directory), client: 66.249.64.100, server: measureyourcause.measureyourbrand.com.au, request: "GET /robots.txt HTTP/1.1", host: "measureyourcause.measureyourbrand.com.au"
[Thu Nov 13 17:55:44.958795 2025] [:error] [pid 62216:tid 62271] [client 150.241.107.255:56867] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/"] [unique_id "aRWrIOpyFB9M2aVQhwM0qAAAABg"]
[Thu Nov 13 17:55:45.503489 2025] [:error] [pid 62303:tid 62325] [client 150.241.107.255:57269] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/"] [unique_id "aRWrIb-hlFTtVrZw8jDoNgAAAJI"]
[Thu Nov 13 17:55:46.047223 2025] [:error] [pid 62303:tid 62322] [client 150.241.107.255:57550] [client 150.241.107.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/wlwmanifest.xml"] [unique_id "aRWrIr-hlFTtVrZw8jDoSQAAAI8"]
[Fri Nov 14 03:06:36.253869 2025] [:error] [pid 56586:tid 56614] [client 52.176.220.160:30673] [client 52.176.220.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hehe.php"] [unique_id "aRYsPK7eYD3G9deYMP5rsgAAAZc"]
[Fri Nov 14 03:06:36.867836 2025] [:error] [pid 49246:tid 49254] [client 52.176.220.160:54128] [client 52.176.220.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hehe.php"] [unique_id "aRYsPN-hdG_ZJBT6alMUnAAAAEQ"]
[Fri Nov 14 03:06:37.337665 2025] [:error] [pid 49246:tid 49262] [client 52.176.220.160:54053] [client 52.176.220.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hehe.php"] [unique_id "aRYsPd-hdG_ZJBT6alMUnwAAAEw"]
[Fri Nov 14 03:06:37.883627 2025] [:error] [pid 9109:tid 9122] [client 52.176.220.160:54114] [client 52.176.220.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hehe.php"] [unique_id "aRYsPY5iBOowiCD1bSL6MgAAAQs"]
[Sat Nov 15 23:56:55.579654 2025] [:error] [pid 27997:tid 28023] [client 34.26.203.176:40826] [client 34.26.203.176] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aRiix9pja_6cDxKbxFkGsQAAANg"]
[Sun Nov 16 04:39:49.046266 2025] [:error] [pid 52563:tid 52573] [client 20.171.157.114:10324] [client 20.171.157.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "aRjlFc-l3ey-hVJ5AuvmQgAAAMc"]
[Sun Nov 16 04:39:49.503784 2025] [:error] [pid 20556:tid 20567] [client 20.171.157.114:11215] [client 20.171.157.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "aRjlFUkbyEckbWtBcCKBVwAAAQk"]
[Sun Nov 16 04:39:49.859118 2025] [:error] [pid 52470:tid 52528] [client 20.171.157.114:10315] [client 20.171.157.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "aRjlFUg9mXF2ZFFtj1XBUQAAAFc"]
[Sun Nov 16 04:39:50.218267 2025] [:error] [pid 52470:tid 52514] [client 20.171.157.114:10327] [client 20.171.157.114] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "aRjlFkg9mXF2ZFFtj1XBUgAAAEk"]
[Mon Nov 17 01:50:59.197216 2025] [:error] [pid 55656:tid 55708] [client 4.242.217.225:25574] [client 4.242.217.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/13.php"] [unique_id "aRoPA6ZDObyEN97tsHBiIQAAAJI"]
[Mon Nov 17 01:50:59.519173 2025] [:error] [pid 55745:tid 55763] [client 4.242.217.225:25482] [client 4.242.217.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/13.php"] [unique_id "aRoPA4Zk0eT801XQsauGBgAAAFA"]
[Mon Nov 17 01:50:59.868509 2025] [:error] [pid 55655:tid 55680] [client 4.242.217.225:25539] [client 4.242.217.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/13.php"] [unique_id "aRoPAyGT_hu1vaVuRSR7VgAAABU"]
[Mon Nov 17 01:51:00.184210 2025] [:error] [pid 55745:tid 55769] [client 4.242.217.225:25569] [client 4.242.217.225] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/13.php"] [unique_id "aRoPBIZk0eT801XQsauGBwAAAFY"]
[Tue Nov 18 17:42:19.493271 2025] [:error] [pid 44624:tid 44640] [client 66.249.64.98:55385] [client 66.249.64.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/app/pg%20lucky%20neko%20%E0%B8%97%E0%B8%B8%E0%B8%99%20100.html"] [unique_id "aRw_eyllffozoBluWCVzGQAAAY0"]
[Tue Nov 18 17:42:34.576742 2025] [:error] [pid 1387:tid 1414] [client 66.249.64.98:44181] [client 66.249.64.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fishing/%E0%B8%84%E0%B9%88%E0%B8%B2%E0%B8%A2%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%AD%E0%B8%AD%E0%B8%99%E0%B9%84%E0%B8%A5%E0%B8%99%E0%B9%8C%E0%B8%A2%E0%B8%AD%E0%B8%94%E0%B8%99%E0%B8%B4%E0%B8%A2%E0%B8%A1%202025.html"] [unique_id "aRw_ikzBvalKyx3hMvVXeQAAABU"]
[Tue Nov 18 18:09:38.280814 2025] [:error] [pid 44560:tid 44592] [client 66.249.64.98:51642] [client 66.249.64.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ios/pg%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%951688.html"] [unique_id "aRxF4gnbP7etF3q5-5uQRQAAANU"]
[Tue Nov 18 18:09:51.056384 2025] [:error] [pid 44470:tid 44487] [client 66.249.64.98:55131] [client 66.249.64.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nohu/live%20tiktok%20%E0%B8%AB%E0%B8%8D%E0%B8%B4%E0%B8%87%E0%B8%82%E0%B8%B2%E0%B8%A2%E0%B8%82%E0%B8%AD%E0%B8%87.html"] [unique_id "aRxF7zv-RLYfULjlgDbClQAAAEw"]
[Wed Nov 19 03:02:24.866750 2025] [:error] [pid 14439:tid 14463] [client 20.168.23.155:47184] [client 20.168.23.155] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.168.23.155, incrementing ddos counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aRzCwFat0cKFYVAxpdD2GgAAARY"], referer: https://www.google.co.uk/
[Wed Nov 19 03:02:25.038655 2025] [:error] [pid 14439:tid 14459] [client 20.168.23.155:47206] [client 20.168.23.155] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.168.23.155, incrementing ddos counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aRzCwVat0cKFYVAxpdD2GwAAARI"], referer: https://www.google.co.uk/
[Wed Nov 19 03:02:31.345766 2025] [:error] [pid 14439:tid 14446] [client 20.168.23.155:47184] [client 20.168.23.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "aRzCx1at0cKFYVAxpdD2RAAAAQU"], referer: https://www.bing.com/
[Wed Nov 19 03:02:37.541799 2025] [:error] [pid 14439:tid 14447] [client 20.168.23.155:47349] [client 20.168.23.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aRzCzVat0cKFYVAxpdD2ZQAAAQY"], referer: https://www.google.de/
[Wed Nov 19 03:02:47.793783 2025] [:error] [pid 43880:tid 43900] [client 20.168.23.155:47345] [client 20.168.23.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aRzC1-1q1HNbKyNr9SaMoAAAAE8"], referer: https://www.google.fr/
[Wed Nov 19 10:23:04.066605 2025] [:error] [pid 6556:tid 6620] [client 66.249.64.98:35848] [client 66.249.64.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/app/Daftar%20%E0%B8%9C%E0%B8%A5%E0%B8%9A%E0%B8%AD%E0%B8%A5%E0%B8%AA%E0%B8%94vip.html"] [unique_id "aR0qCJuL7hhgrmdM1murcgAAAII"]
[Wed Nov 19 10:23:31.367022 2025] [:error] [pid 6919:tid 6935] [client 66.249.64.98:62195] [client 66.249.64.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sitemap/%E0%B8%97%E0%B8%94%E0%B8%A5%E0%B8%AD%E0%B8%87%E0%B9%80%E0%B8%A5%E0%B9%88%E0%B8%99%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B8%9F%E0%B8%A3%E0%B8%B5%20pg.html"] [unique_id "aR0qI0YFdN1s_9xJVUnoegAAAQ0"]
[Wed Nov 19 10:23:39.537786 2025] [:error] [pid 6919:tid 6943] [client 66.249.64.98:48697] [client 66.249.64.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/deposit/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95666%20%E0%B8%9D%E0%B8%B2%E0%B8%81%E0%B8%96%E0%B8%AD%E0%B8%99%E0%B8%A7%E0%B8%B4%E0%B8%99.html"] [unique_id "aR0qK0YFdN1s_9xJVUnohQAAARU"]
[Wed Nov 19 11:14:38.960653 2025] [:error] [pid 6556:tid 6623] [client 66.249.64.98:46865] [client 66.249.64.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cash/%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2%E0%B8%88%E0%B9%88%E0%B8%B2%E0%B8%A2%E0%B8%88%E0%B8%A3%E0%B8%B4%E0%B8%87.html"] [unique_id "aR02HpuL7hhgrmdM1mu9vwAAAIU"]
[Wed Nov 19 11:14:50.119785 2025] [:error] [pid 6556:tid 6631] [client 66.249.64.98:44545] [client 66.249.64.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/news/Slot%20%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%80%E0%B8%A7%E0%B9%87%E0%B8%9A%E0%B8%95%E0%B8%A3%E0%B8%87.html"] [unique_id "aR02KpuL7hhgrmdM1mu9yAAAAI0"]
[Wed Nov 19 11:18:41.006033 2025] [:error] [pid 6555:tid 6599] [client 66.249.64.98:55510] [client 66.249.64.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cash/Login%207m%20%E0%B8%9C%E0%B8%A5%E0%B8%9A%E0%B8%AD%E0%B8%A5%E0%B8%AA%E0%B8%94.html"] [unique_id "aR03EUbVJm8eMsGMTCPQzgAAAEg"]
[Wed Nov 19 11:18:51.915096 2025] [:error] [pid 6644:tid 6653] [client 66.249.64.98:42412] [client 66.249.64.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/news/Login%20%E0%B8%9C%E0%B8%A5%E0%B8%9A%E0%B8%AD%E0%B8%A5%E0%B8%84%E0%B8%B7%E0%B8%99%E0%B8%99%E0%B8%B5%E0%B9%89%E0%B8%9E%E0%B8%A3%E0%B8%B5%E0%B9%80%E0%B8%A1%E0%B8%B5%E0%B8%A2%E0%B8%A3%E0%B9%8C%E0%B8%A5%E0%B8%B5%E0%B8%81.html"] [unique_id "aR03G00i6Rf788MB6sYk9QAAAMc"]
[Wed Nov 19 11:19:17.491586 2025] [:error] [pid 6554:tid 6567] [client 66.249.64.98:63978] [client 66.249.64.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cash/3K%20Auto%20%E0%B8%A3%E0%B8%96%E0%B8%A2%E0%B8%99%E0%B8%95%E0%B9%8C%20%E0%B8%A1%E0%B8%B7%E0%B8%AD%E0%B8%AA%E0%B8%AD%E0%B8%87.html"] [unique_id "aR03Nd8rvPWLafJFqmWX1AAAAAg"]
[Wed Nov 19 11:22:18.079774 2025] [:error] [pid 26664:tid 26679] [client 66.249.64.98:50257] [client 66.249.64.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/news/%E0%B8%A2%E0%B8%B9%E0%B8%9F%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%A5%E0%B9%8A%E0%B8%AD%E0%B8%95.html"] [unique_id "aR036opWc1yoj2P7MeCAIwAAAUw"]
[Wed Nov 19 11:22:27.753981 2025] [:error] [pid 6554:tid 6570] [client 66.249.64.98:36143] [client 66.249.64.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cash/Slot%20%E0%B8%9C%E0%B8%A5%E0%B8%9A%E0%B8%AD%E0%B8%A5%E0%B8%97%E0%B8%B5%E0%B8%A1%E0%B8%8A%E0%B8%B2%E0%B8%95%E0%B8%B4%E0%B9%80%E0%B8%A1%E0%B8%B7%E0%B9%88%E0%B8%AD%E0%B8%84%E0%B8%B7%E0%B8%99.html"] [unique_id "aR03898rvPWLafJFqmWYyQAAAAo"]
[Wed Nov 19 11:22:37.118335 2025] [:error] [pid 6556:tid 6638] [client 66.249.64.98:48997] [client 66.249.64.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nohu/Daftar%20sagame6699%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B0%E0%B8%9A%E0%B8%9A.html"] [unique_id "aR03_ZuL7hhgrmdM1mvBPAAAAJQ"]
[Wed Nov 19 11:22:54.140595 2025] [:error] [pid 26664:tid 26676] [client 66.249.64.98:56306] [client 66.249.64.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cash/%E0%B8%97%E0%B8%B2%E0%B8%87%E0%B9%80%E0%B8%82%E0%B9%89%E0%B8%B2%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95777.html"] [unique_id "aR04DopWc1yoj2P7MeCAXgAAAUk"]
[Wed Nov 19 11:39:38.956954 2025] [:error] [pid 26664:tid 26690] [client 66.249.64.98:58792] [client 66.249.64.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/app/%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg%20%E0%B8%A5%E0%B9%88%E0%B8%B2%E0%B8%AA%E0%B8%B8%E0%B8%94.html"] [unique_id "aR07-opWc1yoj2P7MeCHxgAAAVY"]
[Wed Nov 19 11:39:48.649406 2025] [:error] [pid 26664:tid 26689] [client 66.249.64.98:56793] [client 66.249.64.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bonus/%E0%B8%AA%E0%B8%B9%E0%B8%95%E0%B8%A3%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95pg.html"] [unique_id "aR08BIpWc1yoj2P7MeCH3QAAAVU"]
[Wed Nov 19 11:40:25.499926 2025] [:error] [pid 6556:tid 6627] [client 66.249.64.98:60506] [client 66.249.64.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fishing/pg%20slot%20team%20%E0%B8%AA%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%95%E0%B9%81%E0%B8%95%E0%B8%81%E0%B8%87%E0%B9%88%E0%B8%B2%E0%B8%A2.html"] [unique_id "aR08KZuL7hhgrmdM1mvFfQAAAIk"]
[Thu Nov 20 17:23:35.713110 2025] [:error] [pid 40537:tid 40548] [client 20.1.200.60:6567] [client 20.1.200.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.1.200.60, incrementing ddos counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aR7eF6KlsL5kxTa3c1zS8QAAAsc"], referer: https://www.google.com/
[Thu Nov 20 17:23:37.122202 2025] [:error] [pid 40508:tid 40524] [client 20.1.200.60:6566] [client 20.1.200.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.1.200.60, incrementing ddos counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aR7eGaxXNVCMW_ksxPuJxAAAAo4"], referer: https://www.google.com/
[Thu Nov 20 17:23:42.711237 2025] [:error] [pid 40537:tid 40554] [client 20.1.200.60:6567] [client 20.1.200.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "aR7eHqKlsL5kxTa3c1zS-AAAAs0"], referer: https://www.yahoo.com/
[Thu Nov 20 17:24:10.340628 2025] [:error] [pid 40445:tid 40481] [client 20.1.200.60:1323] [client 20.1.200.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aR7eOlH-MuFcoWRjXpY_iAAAAkY"], referer: https://www.google.de/
[Thu Nov 20 17:24:51.421833 2025] [:error] [pid 40537:tid 40553] [client 20.1.200.60:6622] [client 20.1.200.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aR7eY6KlsL5kxTa3c1zTIwAAAsw"], referer: https://www.google.de/
[Thu Nov 20 17:25:22.037995 2025] [:error] [pid 55342:tid 55382] [client 20.1.200.60:1327] [client 20.1.200.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.1.200.60, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aR7egrg6x32Tvk7fIG_LbgAAAEo"], referer: https://www.google.fr/
[Thu Nov 20 17:25:22.259376 2025] [:error] [pid 55340:tid 55350] [client 20.1.200.60:4839] [client 20.1.200.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.1.200.60, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aR7egvOxD-NeMydTybCN1gAAAAU"], referer: https://www.google.fr/
[Fri Nov 21 16:50:02.601520 2025] [:error] [pid 25521:tid 25536] [client 172.98.32.79:50061] [client 172.98.32.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSAnuvhXnBMilDddn3X80AAAAM0"]
[Fri Nov 21 16:50:04.784160 2025] [:error] [pid 25431:tid 25491] [client 136.144.42.75:29849] [client 136.144.42.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aSAnvMklhXxmoIExII1KgQAAAIQ"]
[Fri Nov 21 16:50:08.378220 2025] [:error] [pid 46939:tid 46958] [client 172.98.32.81:63733] [client 172.98.32.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aSAnwO0OmVoxD4VZ_ZmMrgAAAVA"]
[Fri Nov 21 16:50:10.677347 2025] [:error] [pid 25429:tid 25445] [client 172.98.32.87:38873] [client 172.98.32.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aSAnwj4rZbRSr7vu-NO7RwAAAAw"]
[Fri Nov 21 16:50:14.197617 2025] [:error] [pid 46939:tid 46950] [client 172.98.32.93:30813] [client 172.98.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aSAnxu0OmVoxD4VZ_ZmMuAAAAUg"]
[Fri Nov 21 16:50:15.601064 2025] [:error] [pid 25554:tid 25576] [client 172.98.32.99:50649] [client 172.98.32.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSAnxx-NtB-9AzFZrk5pMgAAARI"]
[Fri Nov 21 16:50:16.504654 2025] [:error] [pid 25429:tid 25443] [client 45.132.227.63:22765] [client 45.132.227.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aSAnyD4rZbRSr7vu-NO7SQAAAAo"]
[Fri Nov 21 16:50:17.412504 2025] [:error] [pid 25554:tid 25571] [client 45.132.227.67:40111] [client 45.132.227.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aSAnyR-NtB-9AzFZrk5pMwAAAQ0"]
[Fri Nov 21 16:50:18.311928 2025] [:error] [pid 25430:tid 25476] [client 45.132.227.60:36773] [client 45.132.227.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aSAnyqpnWJcWt_4foXlWIgAAAFA"]
[Fri Nov 21 16:50:19.198015 2025] [:error] [pid 25431:tid 25510] [client 172.98.32.100:53667] [client 172.98.32.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aSAny8klhXxmoIExII1KjAAAAJc"]
[Fri Nov 21 16:50:20.692757 2025] [:error] [pid 25431:tid 25494] [client 172.98.32.94:26399] [client 172.98.32.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aSAnzMklhXxmoIExII1KjwAAAIc"]
[Fri Nov 21 16:50:22.471510 2025] [:error] [pid 25430:tid 25482] [client 45.132.227.68:20627] [client 45.132.227.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "aSAnzqpnWJcWt_4foXlWKQAAAFY"]
[Fri Nov 21 16:50:24.245453 2025] [:error] [pid 25429:tid 25452] [client 45.132.227.57:40015] [client 45.132.227.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aSAn0D4rZbRSr7vu-NO7UwAAABM"]
[Fri Nov 21 16:50:25.577816 2025] [:error] [pid 25429:tid 25450] [client 136.144.42.75:46925] [client 136.144.42.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aSAn0T4rZbRSr7vu-NO7VgAAABE"]
[Fri Nov 21 16:50:26.896078 2025] [:error] [pid 25429:tid 25437] [client 172.98.32.94:35221] [client 172.98.32.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSAn0j4rZbRSr7vu-NO7WgAAAAQ"]
[Fri Nov 21 16:50:30.382774 2025] [:error] [pid 25429:tid 25447] [client 172.98.32.87:43383] [client 172.98.32.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aSAn1j4rZbRSr7vu-NO7ZQAAAA4"]
[Fri Nov 21 16:50:31.738661 2025] [:error] [pid 25429:tid 25441] [client 172.98.32.82:31847] [client 172.98.32.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aSAn1z4rZbRSr7vu-NO7agAAAAg"]
[Fri Nov 21 16:50:33.488619 2025] [:error] [pid 25429:tid 25454] [client 172.98.32.86:58439] [client 172.98.32.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aSAn2T4rZbRSr7vu-NO7bwAAABU"]
[Fri Nov 21 16:50:34.798143 2025] [:error] [pid 25554:tid 25580] [client 45.132.227.54:51971] [client 45.132.227.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aSAn2h-NtB-9AzFZrk5pSQAAARY"]
[Fri Nov 21 16:50:38.813277 2025] [:error] [pid 25430:tid 25466] [client 172.98.32.93:43997] [client 172.98.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSAn3qpnWJcWt_4foXlWOgAAAEY"]
[Fri Nov 21 16:50:40.111399 2025] [:error] [pid 46939:tid 46948] [client 172.98.32.97:62875] [client 172.98.32.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aSAn4O0OmVoxD4VZ_ZmM-QAAAUY"]
[Fri Nov 21 16:50:41.433189 2025] [:error] [pid 25430:tid 25460] [client 45.132.227.63:64867] [client 45.132.227.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSAn4apnWJcWt_4foXlWPQAAAEA"]
[Fri Nov 21 16:50:42.294848 2025] [:error] [pid 46939:tid 46954] [client 172.98.32.94:24945] [client 172.98.32.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aSAn4u0OmVoxD4VZ_ZmNBQAAAUw"]
[Fri Nov 21 16:50:43.158822 2025] [:error] [pid 25554:tid 25564] [client 136.144.42.72:54801] [client 136.144.42.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSAn4x-NtB-9AzFZrk5pUgAAAQY"]
[Fri Nov 21 16:50:45.338343 2025] [:error] [pid 25431:tid 25496] [client 136.144.42.72:39035] [client 136.144.42.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aSAn5cklhXxmoIExII1KuAAAAIk"]
[Fri Nov 21 16:50:46.223785 2025] [:error] [pid 25521:tid 25528] [client 136.144.42.77:60785] [client 136.144.42.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aSAn5vhXnBMilDddn3X8-QAAAMU"]
[Fri Nov 21 16:50:47.082511 2025] [:error] [pid 25554:tid 25566] [client 172.98.32.80:21943] [client 172.98.32.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSAn5x-NtB-9AzFZrk5pXAAAAQg"]
[Fri Nov 21 16:50:51.492662 2025] [:error] [pid 46939:tid 46943] [client 172.98.32.78:49463] [client 172.98.32.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aSAn6-0OmVoxD4VZ_ZmNJAAAAUE"]
[Fri Nov 21 16:50:53.662749 2025] [:error] [pid 25430:tid 25462] [client 136.144.42.75:30255] [client 136.144.42.75] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.42.75, incrementing brute counter"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aSAn7apnWJcWt_4foXlWTgAAAEI"]
[Fri Nov 21 16:50:58.918015 2025] [:error] [pid 25430:tid 25464] [client 136.144.42.75:30255] [client 136.144.42.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aSAn8qpnWJcWt_4foXlWbgAAAEQ"]
[Fri Nov 21 16:51:00.679796 2025] [:error] [pid 46939:tid 46954] [client 136.144.42.78:51261] [client 136.144.42.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 136.144.42.78, incrementing brute counter"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aSAn9O0OmVoxD4VZ_ZmNOQAAAUw"]
[Fri Nov 21 16:51:01.562253 2025] [:error] [pid 46939:tid 46960] [client 136.144.42.78:51261] [client 136.144.42.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/item.php"] [unique_id "aSAn9e0OmVoxD4VZ_ZmNPQAAAVI"]
[Fri Nov 21 16:51:05.940182 2025] [:error] [pid 25521:tid 25545] [client 172.98.32.99:62873] [client 172.98.32.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aSAn-fhXnBMilDddn3X9KAAAANY"]
[Fri Nov 21 16:51:10.338201 2025] [:error] [pid 25554:tid 25578] [client 172.98.32.77:38403] [client 172.98.32.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSAn_h-NtB-9AzFZrk5pgAAAARQ"]
[Fri Nov 21 16:51:12.175358 2025] [:error] [pid 25521:tid 25540] [client 172.98.32.88:57801] [client 172.98.32.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aSAoAPhXnBMilDddn3X9NgAAANE"]
[Fri Nov 21 16:51:14.367533 2025] [:error] [pid 25430:tid 25464] [client 45.132.227.63:65119] [client 45.132.227.63] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.227.63, incrementing brute counter"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aSAoAqpnWJcWt_4foXlWewAAAEQ"]
[Fri Nov 21 16:51:14.802716 2025] [:error] [pid 25430:tid 25461] [client 45.132.227.63:65119] [client 45.132.227.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aSAoAqpnWJcWt_4foXlWfQAAAEE"]
[Fri Nov 21 16:51:23.205377 2025] [:error] [pid 25431:tid 25501] [client 136.144.42.80:52843] [client 136.144.42.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aSAoC8klhXxmoIExII1LBwAAAI4"]
[Fri Nov 21 16:51:25.377760 2025] [:error] [pid 25554:tid 25572] [client 45.132.227.64:33415] [client 45.132.227.64] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.227.64, incrementing brute counter"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aSAoDR-NtB-9AzFZrk5prwAAAQ4"]
[Fri Nov 21 16:51:27.127927 2025] [:error] [pid 25554:tid 25579] [client 45.132.227.64:33415] [client 45.132.227.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aSAoDx-NtB-9AzFZrk5p1AAAARU"]
[Fri Nov 21 16:51:29.367515 2025] [:error] [pid 25429:tid 25456] [client 45.132.227.52:37183] [client 45.132.227.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aSAoET4rZbRSr7vu-NO7zwAAABc"]
[Fri Nov 21 16:51:31.131982 2025] [:error] [pid 25521:tid 25537] [client 136.144.42.77:53613] [client 136.144.42.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aSAoE_hXnBMilDddn3X9TwAAAM4"]
[Fri Nov 21 16:51:33.314714 2025] [:error] [pid 46939:tid 46957] [client 45.132.227.65:61643] [client 45.132.227.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aSAoFe0OmVoxD4VZ_ZmNYgAAAU8"]
[Fri Nov 21 16:51:34.176213 2025] [:error] [pid 25431:tid 25496] [client 45.132.227.63:46039] [client 45.132.227.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aSAoFsklhXxmoIExII1LeAAAAIk"]
[Fri Nov 21 16:51:37.244645 2025] [:error] [pid 46939:tid 46948] [client 172.98.32.86:57175] [client 172.98.32.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aSAoGe0OmVoxD4VZ_ZmNdAAAAUY"]
[Fri Nov 21 16:51:38.577068 2025] [:error] [pid 25521:tid 25544] [client 45.132.227.65:23993] [client 45.132.227.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aSAoGvhXnBMilDddn3X9UwAAANU"]
[Fri Nov 21 16:51:40.752983 2025] [:error] [pid 25430:tid 25460] [client 172.98.32.81:56937] [client 172.98.32.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aSAoHKpnWJcWt_4foXlWmgAAAEA"]
[Fri Nov 21 16:51:43.947425 2025] [:error] [pid 25431:tid 25487] [client 136.144.42.72:59487] [client 136.144.42.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aSAoH8klhXxmoIExII1LgQAAAIA"]
[Fri Nov 21 16:51:45.678511 2025] [:error] [pid 25429:tid 25440] [client 45.132.227.52:41215] [client 45.132.227.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/click.php"] [unique_id "aSAoIT4rZbRSr7vu-NO72wAAAAc"]
[Fri Nov 21 16:51:47.858105 2025] [:error] [pid 25521:tid 25546] [client 172.98.32.83:32633] [client 172.98.32.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aSAoI_hXnBMilDddn3X9YgAAANc"]
[Fri Nov 21 16:51:51.823723 2025] [:error] [pid 25554:tid 25571] [client 172.98.32.78:32425] [client 172.98.32.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aSAoJx-NtB-9AzFZrk5qEwAAAQ0"]
[Fri Nov 21 16:51:52.688783 2025] [:error] [pid 46939:tid 46945] [client 172.98.32.76:38317] [client 172.98.32.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aSAoKO0OmVoxD4VZ_ZmNpQAAAUM"]
[Fri Nov 21 16:51:53.550604 2025] [:error] [pid 25554:tid 25565] [client 172.98.32.85:29163] [client 172.98.32.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aSAoKR-NtB-9AzFZrk5qFAAAAQc"]
[Fri Nov 21 16:51:54.411499 2025] [:error] [pid 46939:tid 46962] [client 136.144.42.80:55041] [client 136.144.42.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aSAoKu0OmVoxD4VZ_ZmNqAAAAVQ"]
[Fri Nov 21 16:51:55.722358 2025] [:error] [pid 46939:tid 46953] [client 45.132.227.65:24825] [client 45.132.227.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aSAoK-0OmVoxD4VZ_ZmNrAAAAUs"]
[Fri Nov 21 16:51:56.585635 2025] [:error] [pid 25429:tid 25453] [client 172.98.32.78:51269] [client 172.98.32.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aSAoLD4rZbRSr7vu-NO74gAAABQ"]
[Fri Nov 21 16:51:58.345959 2025] [:error] [pid 46939:tid 46966] [client 172.98.32.93:21419] [client 172.98.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aSAoLu0OmVoxD4VZ_ZmNswAAAVg"]
[Fri Nov 21 16:51:59.209684 2025] [:error] [pid 25554:tid 25580] [client 45.132.227.52:20105] [client 45.132.227.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSAoLx-NtB-9AzFZrk5qHQAAARY"]
[Fri Nov 21 16:52:00.223060 2025] [:error] [pid 25429:tid 25440] [client 172.98.32.96:24123] [client 172.98.32.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aSAoMD4rZbRSr7vu-NO75AAAAAc"]
[Fri Nov 21 16:52:01.086639 2025] [:error] [pid 25554:tid 25575] [client 136.144.42.74:45737] [client 136.144.42.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aSAoMR-NtB-9AzFZrk5qHgAAARE"]
[Fri Nov 21 16:52:02.411198 2025] [:error] [pid 46939:tid 46963] [client 45.132.227.56:22551] [client 45.132.227.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aSAoMu0OmVoxD4VZ_ZmNuQAAAVU"]
[Fri Nov 21 16:52:04.152005 2025] [:error] [pid 46939:tid 46966] [client 45.132.227.62:26239] [client 45.132.227.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aSAoNO0OmVoxD4VZ_ZmNvgAAAVg"]
[Fri Nov 21 16:52:06.776208 2025] [:error] [pid 25429:tid 25441] [client 45.132.227.67:31485] [client 45.132.227.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aSAoNj4rZbRSr7vu-NO78wAAAAg"]
[Fri Nov 21 16:52:12.139121 2025] [:error] [pid 25554:tid 25581] [client 45.132.227.65:52807] [client 45.132.227.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aSAoPB-NtB-9AzFZrk5qNQAAARc"]
[Fri Nov 21 16:52:14.308951 2025] [:error] [pid 25554:tid 25559] [client 172.98.32.100:30763] [client 172.98.32.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aSAoPh-NtB-9AzFZrk5qQQAAAQE"]
[Fri Nov 21 16:52:15.204225 2025] [:error] [pid 25431:tid 25492] [client 45.132.227.68:57367] [client 45.132.227.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aSAoP8klhXxmoIExII1LsAAAAIU"]
[Fri Nov 21 16:52:17.816724 2025] [:error] [pid 25431:tid 25507] [client 172.98.32.87:40635] [client 172.98.32.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSAoQcklhXxmoIExII1LuAAAAJQ"]
[Fri Nov 21 16:52:19.986602 2025] [proxy_fcgi:error] [pid 46939:tid 46946] [client 172.98.32.94:58279] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 16:52:20.423420 2025] [proxy_fcgi:error] [pid 46939:tid 46943] [client 172.98.32.94:58279] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 16:52:20.856659 2025] [proxy_fcgi:error] [pid 46939:tid 46964] [client 172.98.32.94:58279] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 16:52:23.056140 2025] [:error] [pid 46939:tid 46949] [client 172.98.32.94:58279] [client 172.98.32.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSAoR-0OmVoxD4VZ_ZmN7AAAAUc"]
[Fri Nov 21 16:52:23.916296 2025] [:error] [pid 25431:tid 25494] [client 172.98.32.78:32397] [client 172.98.32.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aSAoR8klhXxmoIExII1LzQAAAIc"]
[Fri Nov 21 16:52:24.792708 2025] [:error] [pid 46939:tid 46959] [client 45.132.227.68:34245] [client 45.132.227.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aSAoSO0OmVoxD4VZ_ZmN8gAAAVE"]
[Fri Nov 21 16:52:25.686263 2025] [:error] [pid 46939:tid 46944] [client 136.144.42.74:63457] [client 136.144.42.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aSAoSe0OmVoxD4VZ_ZmN9QAAAUI"]
[Fri Nov 21 16:52:26.563748 2025] [:error] [pid 25429:tid 25437] [client 45.132.227.58:63379] [client 45.132.227.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aSAoSj4rZbRSr7vu-NO8GgAAAAQ"]
[Fri Nov 21 16:52:27.429053 2025] [:error] [pid 46939:tid 46965] [client 172.98.32.95:53565] [client 172.98.32.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aSAoS-0OmVoxD4VZ_ZmN-QAAAVc"]
[Fri Nov 21 16:52:28.756736 2025] [:error] [pid 25554:tid 25571] [client 45.132.227.56:22671] [client 45.132.227.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aSAoTB-NtB-9AzFZrk5qaAAAAQ0"]
[Fri Nov 21 16:52:29.625208 2025] [:error] [pid 46939:tid 46953] [client 45.132.227.63:22095] [client 45.132.227.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aSAoTe0OmVoxD4VZ_ZmN_wAAAUs"]
[Fri Nov 21 16:52:30.484658 2025] [:error] [pid 25521:tid 25529] [client 172.98.32.95:44373] [client 172.98.32.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aSAoTvhXnBMilDddn3X9mAAAAMY"]
[Fri Nov 21 16:52:31.355284 2025] [:error] [pid 25521:tid 25538] [client 172.98.32.93:44713] [client 172.98.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aSAoT_hXnBMilDddn3X9nAAAAM8"]
[Fri Nov 21 16:52:33.091125 2025] [:error] [pid 25554:tid 25566] [client 172.98.32.93:55241] [client 172.98.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aSAoUR-NtB-9AzFZrk5qbQAAAQg"]
[Fri Nov 21 16:52:34.412418 2025] [:error] [pid 25429:tid 25456] [client 172.98.32.94:64535] [client 172.98.32.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aSAoUj4rZbRSr7vu-NO8IAAAABc"]
[Fri Nov 21 16:52:36.168044 2025] [:error] [pid 25429:tid 25449] [client 45.132.227.59:45055] [client 45.132.227.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aSAoVD4rZbRSr7vu-NO8JQAAABA"]
[Fri Nov 21 16:52:37.916432 2025] [:error] [pid 25521:tid 25545] [client 45.132.227.54:60525] [client 45.132.227.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aSAoVfhXnBMilDddn3X9pAAAANY"]
[Fri Nov 21 16:52:40.143440 2025] [:error] [pid 25431:tid 25494] [client 136.144.42.77:53177] [client 136.144.42.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aSAoWMklhXxmoIExII1L2AAAAIc"]
[Fri Nov 21 16:52:42.747338 2025] [:error] [pid 25431:tid 25498] [client 172.98.32.93:36065] [client 172.98.32.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aSAoWsklhXxmoIExII1L4QAAAIs"]
[Fri Nov 21 16:52:45.053429 2025] [:error] [pid 46939:tid 46944] [client 45.132.227.63:23401] [client 45.132.227.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aSAoXe0OmVoxD4VZ_ZmOWgAAAUI"]
[Fri Nov 21 16:52:53.899708 2025] [:error] [pid 25431:tid 25505] [client 172.98.32.79:51959] [client 172.98.32.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aSAoZcklhXxmoIExII1L9gAAAJI"]
[Fri Nov 21 16:52:54.768642 2025] [:error] [pid 25429:tid 25453] [client 172.98.32.91:32391] [client 172.98.32.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aSAoZj4rZbRSr7vu-NO8SQAAABQ"]
[Fri Nov 21 16:52:55.630625 2025] [:error] [pid 25430:tid 25478] [client 45.132.227.54:63269] [client 45.132.227.54] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.227.54, incrementing brute counter"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aSAoZ6pnWJcWt_4foXlW_AAAAFI"]
[Fri Nov 21 16:52:56.502598 2025] [:error] [pid 25430:tid 25475] [client 45.132.227.54:63269] [client 45.132.227.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aSAoaKpnWJcWt_4foXlXAAAAAE8"]
[Fri Nov 21 16:52:58.244245 2025] [:error] [pid 25429:tid 25456] [client 45.132.227.60:54691] [client 45.132.227.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aSAoaj4rZbRSr7vu-NO8TgAAABc"]
[Fri Nov 21 16:52:59.103881 2025] [:error] [pid 46939:tid 46952] [client 136.144.42.70:24625] [client 136.144.42.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aSAoa-0OmVoxD4VZ_ZmOcQAAAUo"]
[Fri Nov 21 16:53:01.736604 2025] [:error] [pid 25430:tid 25478] [client 172.98.32.85:33515] [client 172.98.32.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSAobapnWJcWt_4foXlXJAAAAFI"]
[Fri Nov 21 16:53:02.604226 2025] [:error] [pid 25431:tid 25497] [client 172.98.32.99:31665] [client 172.98.32.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aSAobsklhXxmoIExII1MBgAAAIo"]
[Fri Nov 21 16:53:05.670408 2025] [:error] [pid 25431:tid 25496] [client 172.98.32.79:29211] [client 172.98.32.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aSAoccklhXxmoIExII1MEgAAAIk"]
[Fri Nov 21 16:53:07.440399 2025] [proxy_fcgi:error] [pid 46939:tid 46958] [client 172.98.32.82:55559] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 16:53:08.305119 2025] [:error] [pid 46939:tid 46960] [client 172.98.32.82:55559] [client 172.98.32.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/function.php"] [unique_id "aSAodO0OmVoxD4VZ_ZmOwQAAAVI"]
[Fri Nov 21 16:53:09.170946 2025] [:error] [pid 25554:tid 25566] [client 45.132.227.66:47073] [client 45.132.227.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aSAodR-NtB-9AzFZrk5qpwAAAQg"]
[Fri Nov 21 16:53:10.932650 2025] [:error] [pid 25554:tid 25577] [client 172.98.32.85:59077] [client 172.98.32.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aSAodh-NtB-9AzFZrk5qrAAAARM"]
[Fri Nov 21 16:53:11.808064 2025] [:error] [pid 46939:tid 46965] [client 172.98.32.76:25115] [client 172.98.32.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aSAod-0OmVoxD4VZ_ZmOwgAAAVc"]
[Fri Nov 21 16:53:15.765149 2025] [:error] [pid 25554:tid 25574] [client 45.132.227.58:51881] [client 45.132.227.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aSAoex-NtB-9AzFZrk5qvAAAARA"]
[Fri Nov 21 16:53:16.637958 2025] [:error] [pid 25431:tid 25505] [client 136.144.42.77:34683] [client 136.144.42.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aSAofMklhXxmoIExII1MPQAAAJI"]
[Fri Nov 21 16:53:19.260689 2025] [:error] [pid 46939:tid 46943] [client 172.98.32.86:35505] [client 172.98.32.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/index.php"] [unique_id "aSAof-0OmVoxD4VZ_ZmO5AAAAUE"]
[Fri Nov 21 16:53:20.124201 2025] [:error] [pid 46939:tid 46954] [client 45.132.227.68:57937] [client 45.132.227.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSAogO0OmVoxD4VZ_ZmO7AAAAUw"]
[Fri Nov 21 16:53:20.984502 2025] [:error] [pid 25431:tid 25493] [client 45.132.227.54:52035] [client 45.132.227.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aSAogMklhXxmoIExII1MUwAAAIY"]
[Fri Nov 21 16:53:24.016413 2025] [:error] [pid 46939:tid 46965] [client 172.98.32.94:49897] [client 172.98.32.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aSAohO0OmVoxD4VZ_ZmPKAAAAVc"]
[Fri Nov 21 16:53:25.326366 2025] [:error] [pid 25431:tid 25495] [client 45.132.227.57:49775] [client 45.132.227.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aSAohcklhXxmoIExII1MXwAAAIg"]
[Fri Nov 21 16:53:30.276223 2025] [:error] [pid 46939:tid 46966] [client 45.132.227.62:62931] [client 45.132.227.62] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.227.62, incrementing brute counter"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/js/wp-login.php"] [unique_id "aSAoiu0OmVoxD4VZ_ZmPRwAAAVg"]
[Fri Nov 21 16:53:32.925149 2025] [:error] [pid 46939:tid 46958] [client 45.132.227.62:62931] [client 45.132.227.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aSAojO0OmVoxD4VZ_ZmPWAAAAVA"]
[Fri Nov 21 16:53:33.791311 2025] [:error] [pid 25521:tid 25532] [client 45.132.227.58:50093] [client 45.132.227.58] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.132.227.58, incrementing brute counter"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aSAojfhXnBMilDddn3X98gAAAMk"]
[Fri Nov 21 16:53:38.603874 2025] [proxy_fcgi:error] [pid 25521:tid 25526] [client 45.132.227.58:50093] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 16:53:46.152460 2025] [:error] [pid 25521:tid 25524] [client 45.132.227.58:50093] [client 45.132.227.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aSAomvhXnBMilDddn3X-FQAAAME"]
[Fri Nov 21 16:53:48.360600 2025] [:error] [pid 25430:tid 25478] [client 136.144.42.78:24061] [client 136.144.42.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aSAonKpnWJcWt_4foXlXmAAAAFI"]
[Fri Nov 21 16:53:50.106972 2025] [:error] [pid 25431:tid 25488] [client 172.98.32.97:62769] [client 172.98.32.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aSAonsklhXxmoIExII1MiQAAAIE"]
[Fri Nov 21 16:53:54.905734 2025] [:error] [pid 25429:tid 25450] [client 172.98.32.78:21217] [client 172.98.32.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aSAooj4rZbRSr7vu-NO8rgAAABE"]
[Fri Nov 21 16:53:56.656476 2025] [:error] [pid 25521:tid 25529] [client 45.132.227.63:41103] [client 45.132.227.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aSAopPhXnBMilDddn3X-RwAAAMY"]
[Fri Nov 21 16:53:59.411466 2025] [:error] [pid 25429:tid 25448] [client 172.98.32.89:46899] [client 172.98.32.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aSAopz4rZbRSr7vu-NO8yAAAAA8"]
[Fri Nov 21 16:54:02.039263 2025] [proxy_fcgi:error] [pid 25430:tid 25483] [client 172.98.32.87:50083] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 16:54:02.478632 2025] [proxy_fcgi:error] [pid 25430:tid 25474] [client 172.98.32.87:50083] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 16:54:02.922618 2025] [:error] [pid 25430:tid 25460] [client 172.98.32.87:50083] [client 172.98.32.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aSAoqqpnWJcWt_4foXlXpAAAAEA"]
[Fri Nov 21 16:54:03.788071 2025] [:error] [pid 46939:tid 46950] [client 136.144.42.69:25315] [client 136.144.42.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aSAoq-0OmVoxD4VZ_ZmPxQAAAUg"]
[Fri Nov 21 16:54:07.769443 2025] [:error] [pid 25429:tid 25450] [client 172.98.32.89:39043] [client 172.98.32.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aSAorz4rZbRSr7vu-NO87QAAABE"]
[Fri Nov 21 16:54:09.063759 2025] [:error] [pid 25430:tid 25483] [client 172.98.32.94:36085] [client 172.98.32.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "aSAosapnWJcWt_4foXlXtAAAAFc"]
[Fri Nov 21 16:54:11.270978 2025] [:error] [pid 25554:tid 25577] [client 172.98.32.99:35671] [client 172.98.32.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aSAosx-NtB-9AzFZrk5rOwAAARM"]
[Fri Nov 21 16:54:15.199833 2025] [:error] [pid 25554:tid 25564] [client 172.98.32.79:27169] [client 172.98.32.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aSAotx-NtB-9AzFZrk5rUAAAAQY"]
[Fri Nov 21 16:54:16.130147 2025] [proxy_fcgi:error] [pid 25431:tid 25509] [client 172.98.32.89:64613] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 16:54:17.428518 2025] [:error] [pid 25431:tid 25503] [client 172.98.32.89:64613] [client 172.98.32.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aSAoucklhXxmoIExII1NEAAAAJA"]
[Fri Nov 21 16:54:20.543444 2025] [proxy_fcgi:error] [pid 25429:tid 25437] [client 172.98.32.89:25819] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 16:54:21.426178 2025] [:error] [pid 25429:tid 25451] [client 172.98.32.89:25819] [client 172.98.32.89] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.98.32.89, incrementing brute counter"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aSAovT4rZbRSr7vu-NO9GgAAABI"]
[Fri Nov 21 16:54:23.599011 2025] [:error] [pid 25429:tid 25456] [client 172.98.32.89:25819] [client 172.98.32.89] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aSAovz4rZbRSr7vu-NO9JwAAABc"]
[Fri Nov 21 16:54:24.900651 2025] [:error] [pid 25554:tid 25576] [client 172.98.32.100:65283] [client 172.98.32.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aSAowB-NtB-9AzFZrk5rXwAAARI"]
[Fri Nov 21 16:54:27.509302 2025] [:error] [pid 25429:tid 25448] [client 172.98.32.91:43695] [client 172.98.32.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aSAowz4rZbRSr7vu-NO9NAAAAA8"]
[Fri Nov 21 16:54:30.173074 2025] [:error] [pid 25554:tid 25580] [client 172.98.32.81:22631] [client 172.98.32.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aSAoxh-NtB-9AzFZrk5rZQAAARY"]
[Fri Nov 21 16:54:31.472244 2025] [:error] [pid 25554:tid 25571] [client 45.132.227.52:38135] [client 45.132.227.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aSAoxx-NtB-9AzFZrk5raAAAAQ0"]
[Fri Nov 21 16:54:33.645070 2025] [:error] [pid 25521:tid 25545] [client 45.132.227.54:35423] [client 45.132.227.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aSAoyfhXnBMilDddn3X-nwAAANY"]
[Fri Nov 21 16:54:35.391141 2025] [proxy_fcgi:error] [pid 25521:tid 25547] [client 172.98.32.98:25195] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 16:54:35.833406 2025] [:error] [pid 25521:tid 25539] [client 172.98.32.98:25195] [client 172.98.32.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aSAoy_hXnBMilDddn3X-pQAAANA"]
[Fri Nov 21 16:54:37.144032 2025] [:error] [pid 25521:tid 25544] [client 172.98.32.84:59291] [client 172.98.32.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/db.php"] [unique_id "aSAozfhXnBMilDddn3X-qwAAANU"]
[Fri Nov 21 16:54:38.010388 2025] [:error] [pid 25521:tid 25525] [client 45.132.227.52:34255] [client 45.132.227.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aSAozvhXnBMilDddn3X-sQAAAMI"]
[Fri Nov 21 16:54:38.883246 2025] [:error] [pid 25429:tid 25451] [client 172.98.32.91:53877] [client 172.98.32.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aSAozj4rZbRSr7vu-NO9PwAAABI"]
[Fri Nov 21 16:54:39.742946 2025] [:error] [pid 25554:tid 25566] [client 172.98.32.92:44817] [client 172.98.32.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aSAozx-NtB-9AzFZrk5rbwAAAQg"]
[Fri Nov 21 16:54:40.778032 2025] [:error] [pid 25554:tid 25565] [client 172.98.32.98:33969] [client 172.98.32.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aSAo0B-NtB-9AzFZrk5rcgAAAQc"]
[Fri Nov 21 16:54:41.646410 2025] [:error] [pid 25431:tid 25496] [client 136.144.42.73:43415] [client 136.144.42.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aSAo0cklhXxmoIExII1NOQAAAIk"]
[Fri Nov 21 16:54:43.376357 2025] [:error] [pid 25430:tid 25468] [client 136.144.42.74:43707] [client 136.144.42.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aSAo06pnWJcWt_4foXlX_wAAAEg"]
[Fri Nov 21 16:54:44.239094 2025] [:error] [pid 25521:tid 25544] [client 172.98.32.77:37199] [client 172.98.32.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aSAo1PhXnBMilDddn3X-tgAAANU"]
[Fri Nov 21 16:54:45.098646 2025] [:error] [pid 25430:tid 25475] [client 172.98.32.95:62927] [client 172.98.32.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aSAo1apnWJcWt_4foXlYAAAAAE8"]
[Fri Nov 21 16:54:46.401041 2025] [:error] [pid 25431:tid 25491] [client 172.98.32.83:44271] [client 172.98.32.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aSAo1sklhXxmoIExII1NQQAAAIQ"]
[Fri Nov 21 16:54:48.140655 2025] [:error] [pid 46939:tid 46964] [client 45.132.227.57:56111] [client 45.132.227.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aSAo2O0OmVoxD4VZ_ZmQQQAAAVY"]
[Fri Nov 21 16:54:49.011234 2025] [proxy_fcgi:error] [pid 25554:tid 25567] [client 172.98.32.78:41357] AH01071: Got error 'Primary script unknown'
[Fri Nov 21 16:54:50.753821 2025] [:error] [pid 25554:tid 25572] [client 172.98.32.78:41357] [client 172.98.32.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 172.98.32.78, incrementing brute counter"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aSAo2h-NtB-9AzFZrk5rkgAAAQ4"]
[Fri Nov 21 16:54:53.376982 2025] [:error] [pid 25554:tid 25574] [client 172.98.32.78:41357] [client 172.98.32.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aSAo3R-NtB-9AzFZrk5rnAAAARA"]
[Fri Nov 21 16:54:54.254729 2025] [:error] [pid 25431:tid 25489] [client 172.98.32.85:65419] [client 172.98.32.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aSAo3sklhXxmoIExII1NSQAAAII"]
[Fri Nov 21 16:55:02.671846 2025] [:error] [pid 25431:tid 25491] [client 172.98.32.100:64819] [client 172.98.32.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSAo5sklhXxmoIExII1NYQAAAIQ"]
[Fri Nov 21 16:55:03.543003 2025] [:error] [pid 25429:tid 25447] [client 45.132.227.52:29395] [client 45.132.227.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aSAo5z4rZbRSr7vu-NO9dgAAAA4"]
[Fri Nov 21 16:55:04.409119 2025] [:error] [pid 25430:tid 25464] [client 172.98.32.97:54461] [client 172.98.32.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aSAo6KpnWJcWt_4foXlYGAAAAEQ"]
[Fri Nov 21 16:55:07.908515 2025] [:error] [pid 25554:tid 25574] [client 172.98.32.95:38071] [client 172.98.32.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aSAo6x-NtB-9AzFZrk5rzAAAARA"]
[Fri Nov 21 16:55:08.787997 2025] [:error] [pid 25431:tid 25506] [client 136.144.42.78:46663] [client 136.144.42.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aSAo7MklhXxmoIExII1NZgAAAJM"]
[Fri Nov 21 16:55:09.649182 2025] [:error] [pid 46939:tid 46943] [client 172.98.32.82:36371] [client 172.98.32.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aSAo7e0OmVoxD4VZ_ZmQdwAAAUE"]
[Fri Nov 21 16:55:12.258963 2025] [:error] [pid 46939:tid 46953] [client 136.144.42.75:23593] [client 136.144.42.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aSAo8O0OmVoxD4VZ_ZmQgAAAAUs"]
[Fri Nov 21 16:55:13.565582 2025] [:error] [pid 25430:tid 25470] [client 45.132.227.60:37975] [client 45.132.227.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aSAo8apnWJcWt_4foXlYJQAAAEo"]
[Fri Nov 21 16:55:15.309678 2025] [:error] [pid 46939:tid 46959] [client 45.132.227.53:64731] [client 45.132.227.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aSAo8-0OmVoxD4VZ_ZmQiwAAAVE"]
[Fri Nov 21 16:55:20.977351 2025] [:error] [pid 25429:tid 25441] [client 172.98.32.76:54923] [client 172.98.32.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aSAo-D4rZbRSr7vu-NO9mwAAAAg"]
[Fri Nov 21 16:55:22.713215 2025] [:error] [pid 25429:tid 25451] [client 45.132.227.59:46947] [client 45.132.227.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/about.php"] [unique_id "aSAo-j4rZbRSr7vu-NO9nwAAABI"]
[Fri Nov 21 16:55:26.186710 2025] [:error] [pid 25554:tid 25581] [client 45.132.227.55:64941] [client 45.132.227.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aSAo_h-NtB-9AzFZrk5r-AAAARc"]
[Fri Nov 21 16:55:27.918863 2025] [:error] [pid 25429:tid 25435] [client 45.132.227.65:43097] [client 45.132.227.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aSAo_z4rZbRSr7vu-NO9rwAAAAI"]
[Fri Nov 21 16:55:30.540992 2025] [:error] [pid 25429:tid 25451] [client 136.144.42.80:59165] [client 136.144.42.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aSApAj4rZbRSr7vu-NO9uwAAABI"]
[Fri Nov 21 16:55:33.576643 2025] [:error] [pid 25521:tid 25542] [client 172.98.32.77:61617] [client 172.98.32.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aSApBfhXnBMilDddn3X--QAAANM"]
[Fri Nov 21 16:55:35.329084 2025] [:error] [pid 25431:tid 25502] [client 45.132.227.57:54971] [client 45.132.227.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aSApB8klhXxmoIExII1NiAAAAI8"]
[Fri Nov 21 16:55:36.194022 2025] [:error] [pid 25430:tid 25460] [client 136.144.42.74:22913] [client 136.144.42.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aSApCKpnWJcWt_4foXlYQAAAAEA"]
[Fri Nov 21 16:55:39.242154 2025] [:error] [pid 46939:tid 46943] [client 172.98.32.76:21657] [client 172.98.32.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aSApC-0OmVoxD4VZ_ZmQ2gAAAUE"]
[Fri Nov 21 16:55:42.285782 2025] [:error] [pid 25429:tid 25456] [client 45.132.227.56:30141] [client 45.132.227.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aSApDj4rZbRSr7vu-NO90gAAABc"]
[Fri Nov 21 16:55:44.918068 2025] [:error] [pid 46939:tid 46963] [client 45.132.227.54:55393] [client 45.132.227.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aSApEO0OmVoxD4VZ_ZmQ5gAAAVU"]
[Fri Nov 21 16:55:45.791222 2025] [:error] [pid 25521:tid 25540] [client 172.98.32.90:39559] [client 172.98.32.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aSApEfhXnBMilDddn3X_BQAAANE"]
[Fri Nov 21 16:55:47.523310 2025] [:error] [pid 25521:tid 25526] [client 136.144.42.75:34277] [client 136.144.42.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aSApE_hXnBMilDddn3X_CQAAAMM"]
[Fri Nov 21 16:55:49.704612 2025] [:error] [pid 46939:tid 46959] [client 45.132.227.58:22285] [client 45.132.227.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "aSApFe0OmVoxD4VZ_ZmQ7wAAAVE"]
[Fri Nov 21 16:55:50.569164 2025] [:error] [pid 25431:tid 25494] [client 172.98.32.98:26595] [client 172.98.32.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aSApFsklhXxmoIExII1NoQAAAIc"]
[Fri Nov 21 16:55:54.072151 2025] [:error] [pid 25431:tid 25492] [client 45.132.227.62:43937] [client 45.132.227.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "aSApGsklhXxmoIExII1NqwAAAIU"]
[Fri Nov 21 16:55:55.820884 2025] [:error] [pid 25430:tid 25471] [client 172.98.32.88:28311] [client 172.98.32.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "aSApG6pnWJcWt_4foXlYVwAAAEs"]
[Fri Nov 21 16:55:56.686404 2025] [:error] [pid 25554:tid 25580] [client 172.98.32.85:54211] [client 172.98.32.85] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "aSApHB-NtB-9AzFZrk5sHwAAARY"]
[Fri Nov 21 16:55:58.420481 2025] [:error] [pid 46939:tid 46948] [client 172.98.32.83:56937] [client 172.98.32.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aSApHu0OmVoxD4VZ_ZmRAgAAAUY"]
[Fri Nov 21 16:55:59.735981 2025] [:error] [pid 25521:tid 25532] [client 136.144.42.69:58301] [client 136.144.42.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aSApH_hXnBMilDddn3X_HAAAAMk"]
[Fri Nov 21 16:56:02.792584 2025] [:error] [pid 25431:tid 25495] [client 45.132.227.60:23951] [client 45.132.227.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aSApIsklhXxmoIExII1NxQAAAIg"]
[Fri Nov 21 16:56:04.550242 2025] [:error] [pid 25521:tid 25525] [client 172.98.32.88:45251] [client 172.98.32.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aSApJPhXnBMilDddn3X_JgAAAMI"]
[Fri Nov 21 16:56:06.288249 2025] [:error] [pid 25429:tid 25440] [client 45.132.227.66:35851] [client 45.132.227.66] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aSApJj4rZbRSr7vu-NO98QAAAAc"]
[Fri Nov 21 16:56:08.629389 2025] [:error] [pid 25431:tid 25494] [client 45.132.227.63:37371] [client 45.132.227.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/as.php"] [unique_id "aSApKMklhXxmoIExII1N0QAAAIc"]
[Fri Nov 21 16:56:09.933808 2025] [:error] [pid 46939:tid 46965] [client 136.144.42.78:21227] [client 136.144.42.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aSApKe0OmVoxD4VZ_ZmRFgAAAVc"]
[Fri Nov 21 16:56:10.796732 2025] [:error] [pid 25429:tid 25446] [client 45.132.227.59:30823] [client 45.132.227.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/install.php"] [unique_id "aSApKj4rZbRSr7vu-NO9-AAAAA0"]
[Fri Nov 21 16:56:11.677328 2025] [:error] [pid 25521:tid 25545] [client 172.98.32.86:37365] [client 172.98.32.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "aSApK_hXnBMilDddn3X_KwAAANY"]
[Fri Nov 21 16:56:15.159281 2025] [:error] [pid 25554:tid 25559] [client 45.132.227.64:62217] [client 45.132.227.64] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aSApLx-NtB-9AzFZrk5sOgAAAQE"]
[Fri Nov 21 16:56:17.373840 2025] [:error] [pid 46939:tid 46942] [client 45.132.227.67:50355] [client 45.132.227.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aSApMe0OmVoxD4VZ_ZmRJwAAAUA"]
[Sat Nov 22 06:56:51.576132 2025] [:error] [pid 9547:tid 9566] [client 212.116.231.26:46784] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "aSDuM9ClOR5qk7DoMeGmDAAAAU0"]
[Sat Nov 22 06:56:52.407892 2025] [:error] [pid 53479:tid 53556] [client 212.116.231.26:47250] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "aSDuNG6cicFF3Aas-oSh1wAAAJQ"]
[Sat Nov 22 06:56:53.241841 2025] [:error] [pid 53479:tid 53539] [client 212.116.231.26:47696] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "aSDuNW6cicFF3Aas-oSh5wAAAIM"]
[Sat Nov 22 06:56:54.076661 2025] [:error] [pid 9547:tid 9574] [client 212.116.231.26:48154] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "aSDuNtClOR5qk7DoMeGmMgAAAVU"]
[Sat Nov 22 06:56:54.886372 2025] [:error] [pid 9547:tid 9569] [client 212.116.231.26:48492] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "aSDuNtClOR5qk7DoMeGmQQAAAVA"]
[Sat Nov 22 06:56:55.698677 2025] [:error] [pid 9547:tid 9568] [client 212.116.231.26:48818] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSDuN9ClOR5qk7DoMeGmTwAAAU8"]
[Sat Nov 22 06:56:56.531839 2025] [:error] [pid 53566:tid 53571] [client 212.116.231.26:49020] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSDuOMbSHDBkRbwMbd5oJgAAAMM"]
[Sat Nov 22 06:56:57.363767 2025] [:error] [pid 25856:tid 25877] [client 212.116.231.26:49218] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSDuORsTP0wy94zKUvHoRgAAARM"]
[Sat Nov 22 06:56:58.174634 2025] [:error] [pid 53566:tid 53589] [client 212.116.231.26:49372] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSDuOsbSHDBkRbwMbd5oLgAAANU"]
[Sat Nov 22 06:56:59.007672 2025] [:error] [pid 9547:tid 9559] [client 212.116.231.26:49530] [client 212.116.231.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aSDuO9ClOR5qk7DoMeGmWwAAAUY"]
[Sat Nov 22 07:18:47.781033 2025] [:error] [pid 9547:tid 9557] [client 104.209.248.60:3045] [client 104.209.248.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.209.248.60, incrementing ddos counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aSDzV9ClOR5qk7DoMeGuUAAAAUQ"], referer: https://www.google.de/
[Sat Nov 22 07:18:48.449339 2025] [:error] [pid 53477:tid 53500] [client 104.209.248.60:5309] [client 104.209.248.60] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 104.209.248.60, incrementing ddos counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aSDzWH7Lu30Ku9O40aIMuwAAABM"], referer: https://www.google.de/
[Sat Nov 22 07:18:57.385661 2025] [:error] [pid 9547:tid 9553] [client 104.209.248.60:3045] [client 104.209.248.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "aSDzYdClOR5qk7DoMeGuZgAAAUA"], referer: https://www.google.co.uk/
[Sat Nov 22 07:19:06.249466 2025] [:error] [pid 25856:tid 25874] [client 104.209.248.60:5299] [client 104.209.248.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aSDzahsTP0wy94zKUvHvpQAAARA"], referer: https://duckduckgo.com/
[Sat Nov 22 07:19:24.005948 2025] [:error] [pid 53478:tid 53521] [client 104.209.248.60:6916] [client 104.209.248.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSDzfAhUYdXBbQswAdRGzAAAAEw"], referer: https://www.google.de/
[Sat Nov 22 07:19:48.438274 2025] [:error] [pid 25856:tid 25870] [client 104.209.248.60:5638] [client 104.209.248.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.209.248.60, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aSDzlBsTP0wy94zKUvHv0wAAAQw"], referer: https://www.bing.com/
[Sat Nov 22 07:19:48.688711 2025] [:error] [pid 53566:tid 53581] [client 104.209.248.60:3439] [client 104.209.248.60] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 104.209.248.60, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aSDzlMbSHDBkRbwMbd5uAwAAAM0"], referer: https://www.bing.com/
[Sat Nov 22 11:08:07.223270 2025] [:error] [pid 25856:tid 25858] [client 45.128.199.224:23535] [client 45.128.199.224] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSEpFxsTP0wy94zKUvE--AAAAQA"]
[Sat Nov 22 11:08:08.801153 2025] [:error] [pid 9547:tid 9557] [client 45.128.199.254:37351] [client 45.128.199.254] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aSEpGNClOR5qk7DoMeEeGgAAAUQ"]
[Sat Nov 22 11:08:14.929783 2025] [:error] [pid 53478:tid 53524] [client 45.8.17.227:57221] [client 45.8.17.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aSEpHghUYdXBbQswAdSIEAAAAE8"]
[Sat Nov 22 11:08:17.743765 2025] [:error] [pid 9547:tid 9560] [client 45.128.199.21:58533] [client 45.128.199.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aSEpIdClOR5qk7DoMeEeKgAAAUc"]
[Sat Nov 22 11:08:18.592672 2025] [:error] [pid 25856:tid 25867] [client 45.128.199.12:41411] [client 45.128.199.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/chosen.php"] [unique_id "aSEpIhsTP0wy94zKUvE_BQAAAQk"]
[Sat Nov 22 11:08:19.485470 2025] [:error] [pid 25856:tid 25876] [client 45.8.17.227:55915] [client 45.8.17.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aSEpIxsTP0wy94zKUvE_BwAAARI"]
[Sat Nov 22 11:08:21.501203 2025] [:error] [pid 53479:tid 53542] [client 45.128.199.34:58393] [client 45.128.199.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aSEpJW6cicFF3Aas-oTpOwAAAIY"]
[Sat Nov 22 11:08:22.861221 2025] [:error] [pid 9547:tid 9564] [client 45.128.199.178:64895] [client 45.128.199.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aSEpJtClOR5qk7DoMeEeMgAAAUs"]
[Sat Nov 22 11:08:27.048628 2025] [:error] [pid 9547:tid 9560] [client 45.128.199.4:57971] [client 45.128.199.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSEpK9ClOR5qk7DoMeEeRgAAAUc"]
[Sat Nov 22 11:08:27.915710 2025] [:error] [pid 25856:tid 25865] [client 45.128.199.12:20835] [client 45.128.199.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aSEpKxsTP0wy94zKUvE_DwAAAQc"]
[Sat Nov 22 11:08:46.096031 2025] [:error] [pid 9547:tid 9556] [client 45.128.199.21:45193] [client 45.128.199.21] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.21, incrementing brute counter"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aSEpPtClOR5qk7DoMeEemQAAAUM"]
[Sat Nov 22 11:08:48.293330 2025] [:error] [pid 9547:tid 9577] [client 45.128.199.21:45193] [client 45.128.199.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/modules.php"] [unique_id "aSEpQNClOR5qk7DoMeEeqQAAAVg"]
[Sat Nov 22 11:08:55.126340 2025] [:error] [pid 25856:tid 25872] [client 45.128.199.33:34737] [client 45.128.199.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/codeboy1877_up.php"] [unique_id "aSEpRxsTP0wy94zKUvE_QQAAAQ4"]
[Sat Nov 22 11:09:13.424022 2025] [:error] [pid 53478:tid 53527] [client 45.128.199.15:63253] [client 45.128.199.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/lx.php"] [unique_id "aSEpWQhUYdXBbQswAdSIhgAAAFI"]
[Sat Nov 22 11:09:39.088391 2025] [:error] [pid 9547:tid 9566] [client 45.128.199.32:37555] [client 45.128.199.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/F0x.php"] [unique_id "aSEpc9ClOR5qk7DoMeEfLAAAAU0"]
[Sat Nov 22 11:09:57.092777 2025] [:error] [pid 9547:tid 9575] [client 45.128.199.177:22785] [client 45.128.199.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aSEphdClOR5qk7DoMeEfcAAAAVY"]
[Sat Nov 22 11:09:57.974910 2025] [:error] [pid 9547:tid 9562] [client 45.8.17.227:36317] [client 45.8.17.227] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.8.17.227, incrementing ddos counter"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aSEphdClOR5qk7DoMeEfdgAAAUk"]
[Sat Nov 22 11:09:59.367715 2025] [:error] [pid 9547:tid 9574] [client 45.8.17.227:36317] [client 45.8.17.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSEph9ClOR5qk7DoMeEfgAAAAVU"]
[Sat Nov 22 11:10:05.925544 2025] [:error] [pid 53566:tid 53575] [client 45.128.199.13:56283] [client 45.128.199.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSEpjcbSHDBkRbwMbd656QAAAMc"]
[Sat Nov 22 11:10:14.757062 2025] [:error] [pid 9547:tid 9554] [client 45.128.199.29:56365] [client 45.128.199.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aSEpltClOR5qk7DoMeEfwAAAAUE"]
[Sat Nov 22 11:10:15.630769 2025] [:error] [pid 53566:tid 53573] [client 45.128.199.4:51641] [client 45.128.199.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSEpl8bSHDBkRbwMbd659QAAAMU"]
[Sat Nov 22 11:10:16.504138 2025] [:error] [pid 53478:tid 53521] [client 45.128.199.181:34981] [client 45.128.199.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aSEpmAhUYdXBbQswAdSIrwAAAEw"]
[Sat Nov 22 11:10:17.410449 2025] [:error] [pid 25856:tid 25860] [client 45.128.199.10:24245] [client 45.128.199.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aSEpmRsTP0wy94zKUvE__gAAAQI"]
[Sat Nov 22 11:10:19.666790 2025] [:error] [pid 53479:tid 53553] [client 45.128.199.14:25485] [client 45.128.199.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.14, incrementing brute counter"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/wp-login.php"] [unique_id "aSEpm26cicFF3Aas-oTppwAAAJE"]
[Sat Nov 22 11:10:26.450237 2025] [:error] [pid 53479:tid 53547] [client 45.128.199.14:25485] [client 45.128.199.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aSEpom6cicFF3Aas-oTp0QAAAIs"]
[Sat Nov 22 11:10:28.645819 2025] [:error] [pid 25856:tid 25861] [client 45.128.199.34:60057] [client 45.128.199.34] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.34, incrementing brute counter"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aSEppBsTP0wy94zKUvFAPQAAAQM"]
[Sat Nov 22 11:10:32.339541 2025] [:error] [pid 25856:tid 25879] [client 45.128.199.34:60057] [client 45.128.199.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/makeasmtp.php"] [unique_id "aSEpqBsTP0wy94zKUvFATQAAARU"]
[Sat Nov 22 11:10:33.255442 2025] [:error] [pid 53479:tid 53556] [client 45.128.199.25:34127] [client 45.128.199.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/about.php"] [unique_id "aSEpqW6cicFF3Aas-oTp1gAAAJQ"]
[Sat Nov 22 11:10:36.322516 2025] [proxy_fcgi:error] [pid 53477:tid 53485] [client 45.128.199.23:51777] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 11:10:40.906192 2025] [proxy_fcgi:error] [pid 53477:tid 53501] [client 45.128.199.23:51777] AH01071: Got error 'Primary script unknown'
[Sat Nov 22 11:10:46.751035 2025] [:error] [pid 53477:tid 53496] [client 45.128.199.23:51777] [client 45.128.199.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSEptn7Lu30Ku9O40aJMMgAAAA8"]
[Sat Nov 22 11:10:49.962731 2025] [:error] [pid 9547:tid 9571] [client 45.128.199.34:57107] [client 45.128.199.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/bak.php"] [unique_id "aSEpudClOR5qk7DoMeEgawAAAVI"]
[Sat Nov 22 11:10:51.395410 2025] [:error] [pid 53479:tid 53551] [client 45.128.199.22:47315] [client 45.128.199.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSEpu26cicFF3Aas-oTqFgAAAI8"]
[Sat Nov 22 11:10:54.587329 2025] [:error] [pid 9547:tid 9574] [client 45.128.199.7:58273] [client 45.128.199.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aSEpvtClOR5qk7DoMeEgfwAAAVU"]
[Sat Nov 22 11:10:55.452462 2025] [:error] [pid 53478:tid 53526] [client 45.128.199.181:51801] [client 45.128.199.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aSEpvwhUYdXBbQswAdSJGwAAAFE"]
[Sat Nov 22 11:10:56.324015 2025] [:error] [pid 53566:tid 53591] [client 45.128.199.181:23717] [client 45.128.199.181] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.181, incrementing brute counter"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/upgrade-temp-backup/wp-login.php"] [unique_id "aSEpwMbSHDBkRbwMbd66hQAAANc"]
[Sat Nov 22 11:10:57.658928 2025] [:error] [pid 53566:tid 53592] [client 45.128.199.181:23717] [client 45.128.199.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/themes.php"] [unique_id "aSEpwcbSHDBkRbwMbd66iwAAANg"]
[Sat Nov 22 11:11:02.798307 2025] [:error] [pid 53566:tid 53568] [client 45.128.199.36:58237] [client 45.128.199.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/wp-includes_function.php"] [unique_id "aSEpxsbSHDBkRbwMbd66lQAAAMA"]
[Sat Nov 22 11:11:04.637977 2025] [:error] [pid 53479:tid 53556] [client 45.128.199.178:53131] [client 45.128.199.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/about.php"] [unique_id "aSEpyG6cicFF3Aas-oTqJAAAAJQ"]
[Sat Nov 22 11:11:07.151648 2025] [:error] [pid 53566:tid 53592] [client 45.128.199.253:47183] [client 45.128.199.253] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/codemirror/about.php"] [unique_id "aSEpy8bSHDBkRbwMbd66mgAAANg"]
[Sat Nov 22 11:11:10.736613 2025] [:error] [pid 53479:tid 53538] [client 45.128.199.14:33561] [client 45.128.199.14] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.14, incrementing brute counter"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/languages/themes/wp-login.php"] [unique_id "aSEpzm6cicFF3Aas-oTqMQAAAII"]
[Sat Nov 22 11:11:12.084015 2025] [:error] [pid 53479:tid 53543] [client 45.128.199.14:33561] [client 45.128.199.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-supports/index.php"] [unique_id "aSEp0G6cicFF3Aas-oTqNAAAAIc"]
[Sat Nov 22 11:11:12.994818 2025] [:error] [pid 53566:tid 53591] [client 45.128.199.10:35401] [client 45.128.199.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSEp0MbSHDBkRbwMbd66ogAAANc"]
[Sat Nov 22 11:11:20.485177 2025] [:error] [pid 9547:tid 9574] [client 45.128.199.28:51189] [client 45.128.199.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aSEp2NClOR5qk7DoMeEgxgAAAVU"]
[Sat Nov 22 11:11:23.951333 2025] [:error] [pid 53566:tid 53584] [client 45.128.199.8:41571] [client 45.128.199.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aSEp28bSHDBkRbwMbd66sAAAANA"]
[Sat Nov 22 11:11:24.867694 2025] [:error] [pid 53477:tid 53488] [client 45.128.199.179:44153] [client 45.128.199.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/about.php"] [unique_id "aSEp3H7Lu30Ku9O40aJMbQAAAAc"]
[Sat Nov 22 11:11:25.842371 2025] [:error] [pid 9547:tid 9565] [client 45.128.199.183:32333] [client 45.128.199.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Content/index.php"] [unique_id "aSEp3dClOR5qk7DoMeEg0wAAAUw"]
[Sat Nov 22 11:11:26.775796 2025] [:error] [pid 25856:tid 25880] [client 45.128.199.13:33819] [client 45.128.199.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aSEp3hsTP0wy94zKUvFAnQAAARY"]
[Sat Nov 22 11:11:30.445268 2025] [:error] [pid 53566:tid 53576] [client 45.128.199.24:62889] [client 45.128.199.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/autoload_classmap.php"] [unique_id "aSEp4sbSHDBkRbwMbd66uQAAAMg"]
[Sat Nov 22 11:11:32.772242 2025] [:error] [pid 53478:tid 53526] [client 45.128.199.29:39473] [client 45.128.199.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aSEp5AhUYdXBbQswAdSJRAAAAFE"]
[Sat Nov 22 11:11:34.767282 2025] [:error] [pid 53479:tid 53547] [client 45.8.17.133:29425] [client 45.8.17.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aSEp5m6cicFF3Aas-oTqVwAAAIs"]
[Sat Nov 22 11:11:36.229151 2025] [:error] [pid 9547:tid 9565] [client 45.128.199.254:33913] [client 45.128.199.254] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/autoload_classmap.php"] [unique_id "aSEp6NClOR5qk7DoMeEg6wAAAUw"]
[Sat Nov 22 11:11:39.497535 2025] [:error] [pid 25856:tid 25882] [client 45.8.17.133:30775] [client 45.8.17.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aSEp6xsTP0wy94zKUvFAsgAAARg"]
[Sat Nov 22 11:11:40.412414 2025] [:error] [pid 53566:tid 53588] [client 45.128.199.36:61341] [client 45.128.199.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/zmFM.php"] [unique_id "aSEp7MbSHDBkRbwMbd66wgAAANQ"]
[Sat Nov 22 11:11:41.739864 2025] [:error] [pid 53566:tid 53591] [client 45.128.199.7:35347] [client 45.128.199.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSEp7cbSHDBkRbwMbd66xAAAANc"]
[Sat Nov 22 11:11:44.122785 2025] [:error] [pid 9547:tid 9556] [client 45.128.199.194:21929] [client 45.128.199.194] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.128.199.194, incrementing brute counter"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aSEp8NClOR5qk7DoMeEhBgAAAUM"]
[Sat Nov 22 11:11:45.059310 2025] [:error] [pid 9547:tid 9560] [client 45.128.199.194:21929] [client 45.128.199.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/wp-login.php"] [unique_id "aSEp8dClOR5qk7DoMeEhCwAAAUc"]
[Sat Nov 22 11:11:46.186547 2025] [:error] [pid 53566:tid 53589] [client 45.128.199.10:44997] [client 45.128.199.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/wp-login.php"] [unique_id "aSEp8sbSHDBkRbwMbd66yQAAANU"]
[Sat Nov 22 11:12:04.049284 2025] [autoindex:error] [pid 53566:tid 53568] [client 45.128.199.26:42645] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Sat Nov 22 11:14:57.129159 2025] [authz_core:error] [pid 53477:tid 53482] [client 45.128.199.26:38583] AH01630: client denied by server configuration: /home/measureyourbrand/public_html/measureyourcause.com.au/system/
[Sat Nov 22 11:56:24.399514 2025] [:error] [pid 9547:tid 9577] [client 213.21.239.4:60722] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aSE0aNClOR5qk7DoMeEyGwAAAVg"]
[Sat Nov 22 12:08:30.526749 2025] [:error] [pid 25856:tid 25862] [client 213.21.239.4:34700] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aSE3PhsTP0wy94zKUvFRCgAAAQQ"]
[Sat Nov 22 12:22:48.926013 2025] [:error] [pid 25856:tid 25867] [client 213.21.239.4:56568] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.svn/wc.db"] [unique_id "aSE6mBsTP0wy94zKUvFUQAAAAQk"]
[Sat Nov 22 12:35:05.460515 2025] [:error] [pid 9547:tid 9574] [client 213.21.239.4:35326] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.svn/wc.db"] [unique_id "aSE9edClOR5qk7DoMeE7SQAAAVU"]
[Sun Nov 23 10:44:57.543725 2025] [:error] [pid 38739:tid 38769] [client 54.226.125.235:41976] [client 54.226.125.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aSJ1KQdvEgJm2n2cDmqTBAAAAEA"]
[Sun Nov 23 13:45:28.757585 2025] [:error] [pid 44652:tid 44706] [client 54.226.125.235:60868] [client 54.226.125.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aSKfeNiQFwsyXQDhwyBZEgAAAQA"]
[Sun Nov 23 16:34:13.799330 2025] [:error] [pid 44652:tid 44724] [client 140.99.1.49:20787] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSLHBdiQFwsyXQDhwyCCUgAAARI"]
[Sun Nov 23 16:34:14.430694 2025] [:error] [pid 44652:tid 44717] [client 140.99.1.42:23823] [client 140.99.1.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aSLHBtiQFwsyXQDhwyCCYwAAAQs"]
[Sun Nov 23 16:34:15.514833 2025] [:error] [pid 38824:tid 38829] [client 140.99.1.5:20447] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aSLHB08WZjXLvbHTHPeIqwAAAMI"]
[Sun Nov 23 16:34:16.085285 2025] [:error] [pid 38740:tid 38811] [client 140.99.1.20:63393] [client 140.99.1.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aSLHCA13QPZSi6O8umVlIgAAAI8"]
[Sun Nov 23 16:34:17.584637 2025] [:error] [pid 38824:tid 38832] [client 140.99.1.37:46459] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aSLHCU8WZjXLvbHTHPeI6QAAAMU"]
[Sun Nov 23 16:34:18.038633 2025] [:error] [pid 38739:tid 38783] [client 140.99.1.75:25607] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSLHCgdvEgJm2n2cDmr7vwAAAE4"]
[Sun Nov 23 16:34:18.272482 2025] [:error] [pid 44652:tid 44713] [client 140.99.1.44:27839] [client 140.99.1.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aSLHCtiQFwsyXQDhwyCCtgAAAQc"]
[Sun Nov 23 16:34:18.487612 2025] [:error] [pid 38738:tid 38750] [client 140.99.1.18:36425] [client 140.99.1.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aSLHCgytc6TL9XavPmPJbgAAAAg"]
[Sun Nov 23 16:34:18.737321 2025] [:error] [pid 44652:tid 44713] [client 140.99.1.76:47707] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aSLHCtiQFwsyXQDhwyCCyAAAAQc"]
[Sun Nov 23 16:34:18.931830 2025] [:error] [pid 38824:tid 38831] [client 140.99.1.76:61351] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aSLHCk8WZjXLvbHTHPeJBgAAAMQ"]
[Sun Nov 23 16:34:19.435380 2025] [:error] [pid 38740:tid 38803] [client 140.99.1.28:60465] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aSLHCw13QPZSi6O8umVlPgAAAIc"]
[Sun Nov 23 16:34:19.918728 2025] [:error] [pid 38738:tid 38754] [client 140.99.1.52:50385] [client 140.99.1.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "aSLHCwytc6TL9XavPmPJiwAAAAw"]
[Sun Nov 23 16:34:20.441376 2025] [:error] [pid 44652:tid 44729] [client 140.99.1.42:60311] [client 140.99.1.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aSLHDNiQFwsyXQDhwyCC8wAAARc"]
[Sun Nov 23 16:34:20.847108 2025] [:error] [pid 38738:tid 38750] [client 140.99.1.43:54405] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aSLHDAytc6TL9XavPmPJmgAAAAg"]
[Sun Nov 23 16:34:21.375334 2025] [:error] [pid 38739:tid 38774] [client 140.99.1.76:27063] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSLHDQdvEgJm2n2cDmr70QAAAEU"]
[Sun Nov 23 16:34:22.251507 2025] [:error] [pid 38738:tid 38764] [client 140.99.1.75:63027] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aSLHDgytc6TL9XavPmPJxQAAABY"]
[Sun Nov 23 16:34:22.876143 2025] [:error] [pid 44652:tid 44712] [client 140.99.1.16:49343] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aSLHDtiQFwsyXQDhwyCDJwAAAQY"]
[Sun Nov 23 16:34:23.262406 2025] [:error] [pid 38740:tid 38807] [client 140.99.1.5:48473] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aSLHDw13QPZSi6O8umVlfwAAAIs"]
[Sun Nov 23 16:34:23.655070 2025] [:error] [pid 44652:tid 44729] [client 140.99.1.38:53235] [client 140.99.1.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aSLHD9iQFwsyXQDhwyCDQQAAARc"]
[Sun Nov 23 16:34:24.266577 2025] [:error] [pid 44652:tid 44725] [client 140.99.1.11:63637] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSLHENiQFwsyXQDhwyCDWgAAARM"]
[Sun Nov 23 16:34:25.075661 2025] [:error] [pid 38824:tid 38835] [client 140.99.1.31:45607] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aSLHEU8WZjXLvbHTHPeJlQAAAMg"]
[Sun Nov 23 16:34:25.360260 2025] [:error] [pid 44652:tid 44718] [client 140.99.1.32:62155] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSLHEdiQFwsyXQDhwyCDcgAAAQw"]
[Sun Nov 23 16:34:25.624152 2025] [:error] [pid 38740:tid 38810] [client 140.99.1.68:52677] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aSLHEQ13QPZSi6O8umVloAAAAI4"]
[Sun Nov 23 16:34:25.829985 2025] [:error] [pid 38740:tid 38816] [client 140.99.1.78:39887] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSLHEQ13QPZSi6O8umVlqAAAAJQ"]
[Sun Nov 23 16:34:26.407332 2025] [:error] [pid 38824:tid 38847] [client 140.99.1.42:29467] [client 140.99.1.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aSLHEk8WZjXLvbHTHPeJtAAAANQ"]
[Sun Nov 23 16:34:26.681519 2025] [:error] [pid 38739:tid 38785] [client 140.99.1.77:31671] [client 140.99.1.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aSLHEgdvEgJm2n2cDmr8JAAAAFA"]
[Sun Nov 23 16:34:26.911487 2025] [:error] [pid 38738:tid 38749] [client 140.99.1.17:23449] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSLHEgytc6TL9XavPmPKKAAAAAc"]
[Sun Nov 23 16:34:28.320421 2025] [:error] [pid 38740:tid 38813] [client 140.99.1.9:20437] [client 140.99.1.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aSLHFA13QPZSi6O8umVl0wAAAJE"]
[Sun Nov 23 16:34:29.320027 2025] [:error] [pid 38740:tid 38813] [client 140.99.1.78:46105] [client 140.99.1.78] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.78, incrementing brute counter"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aSLHFQ13QPZSi6O8umVl5AAAAJE"]
[Sun Nov 23 16:34:30.620872 2025] [:error] [pid 38740:tid 38816] [client 140.99.1.78:46105] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aSLHFg13QPZSi6O8umVmCQAAAJQ"]
[Sun Nov 23 16:34:31.206155 2025] [:error] [pid 38824:tid 38849] [client 140.99.1.28:46623] [client 140.99.1.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.28, incrementing brute counter"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aSLHF08WZjXLvbHTHPeKZgAAANY"]
[Sun Nov 23 16:34:31.419719 2025] [:error] [pid 38824:tid 38834] [client 140.99.1.28:46623] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/item.php"] [unique_id "aSLHF08WZjXLvbHTHPeKbwAAAMc"]
[Sun Nov 23 16:34:33.106518 2025] [:error] [pid 38824:tid 38841] [client 140.99.1.20:56071] [client 140.99.1.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aSLHGU8WZjXLvbHTHPeKpwAAAM4"]
[Sun Nov 23 16:34:34.371646 2025] [:error] [pid 38739:tid 38786] [client 140.99.1.48:48019] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSLHGgdvEgJm2n2cDmr8pwAAAFE"]
[Sun Nov 23 16:34:37.625508 2025] [:error] [pid 38739:tid 38788] [client 140.99.1.31:51569] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aSLHHQdvEgJm2n2cDmr84AAAAFM"]
[Sun Nov 23 16:34:38.240357 2025] [:error] [pid 44652:tid 44728] [client 140.99.1.67:25303] [client 140.99.1.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.67, incrementing brute counter"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aSLHHtiQFwsyXQDhwyCEogAAARY"]
[Sun Nov 23 16:34:38.339600 2025] [:error] [pid 44652:tid 44720] [client 140.99.1.67:25303] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aSLHHtiQFwsyXQDhwyCEqgAAAQ4"]
[Sun Nov 23 16:34:40.989899 2025] [:error] [pid 44652:tid 44711] [client 140.99.1.62:57389] [client 140.99.1.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aSLHINiQFwsyXQDhwyCFIAAAAQU"]
[Sun Nov 23 16:34:41.670768 2025] [:error] [pid 38738:tid 38757] [client 140.99.1.47:41829] [client 140.99.1.47] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.47, incrementing brute counter"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aSLHIQytc6TL9XavPmPLVwAAAA8"]
[Sun Nov 23 16:34:42.107757 2025] [:error] [pid 38738:tid 38765] [client 140.99.1.47:41829] [client 140.99.1.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aSLHIgytc6TL9XavPmPLYAAAABc"]
[Sun Nov 23 16:34:42.413112 2025] [:error] [pid 38824:tid 38831] [client 140.99.1.32:27351] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aSLHIk8WZjXLvbHTHPeLWAAAAMQ"]
[Sun Nov 23 16:34:42.953913 2025] [:error] [pid 38824:tid 38850] [client 140.99.1.2:59277] [client 140.99.1.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aSLHIk8WZjXLvbHTHPeLYwAAANc"]
[Sun Nov 23 16:34:43.607329 2025] [:error] [pid 44652:tid 44713] [client 140.99.1.67:27137] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aSLHI9iQFwsyXQDhwyCFbAAAAQc"]
[Sun Nov 23 16:34:43.833661 2025] [:error] [pid 38739:tid 38783] [client 140.99.1.3:44311] [client 140.99.1.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aSLHIwdvEgJm2n2cDmr9agAAAE4"]
[Sun Nov 23 16:34:44.641405 2025] [:error] [pid 44652:tid 44714] [client 140.99.1.49:32127] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aSLHJNiQFwsyXQDhwyCFiQAAAQg"]
[Sun Nov 23 16:34:44.963498 2025] [:error] [pid 38824:tid 38827] [client 140.99.1.16:27051] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aSLHJE8WZjXLvbHTHPeLgwAAAMA"]
[Sun Nov 23 16:34:45.561032 2025] [:error] [pid 38738:tid 38757] [client 140.99.1.7:34799] [client 140.99.1.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aSLHJQytc6TL9XavPmPLnQAAAA8"]
[Sun Nov 23 16:34:46.197218 2025] [:error] [pid 38738:tid 38758] [client 140.99.1.67:22817] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aSLHJgytc6TL9XavPmPLrAAAABA"]
[Sun Nov 23 16:34:46.641722 2025] [:error] [pid 38738:tid 38742] [client 140.99.1.17:36883] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/click.php"] [unique_id "aSLHJgytc6TL9XavPmPLuQAAAAA"]
[Sun Nov 23 16:34:47.307723 2025] [:error] [pid 38738:tid 38748] [client 140.99.1.68:50169] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aSLHJwytc6TL9XavPmPL1AAAAAY"]
[Sun Nov 23 16:34:48.394783 2025] [:error] [pid 38738:tid 38745] [client 140.99.1.26:22721] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aSLHKAytc6TL9XavPmPMDQAAAAM"]
[Sun Nov 23 16:34:48.652690 2025] [:error] [pid 38738:tid 38760] [client 140.99.1.71:48389] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aSLHKAytc6TL9XavPmPMFwAAABI"]
[Sun Nov 23 16:34:48.845758 2025] [:error] [pid 38824:tid 38840] [client 140.99.1.74:47673] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aSLHKE8WZjXLvbHTHPeLyQAAAM0"]
[Sun Nov 23 16:34:49.075595 2025] [:error] [pid 38740:tid 38808] [client 140.99.1.33:21685] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aSLHKQ13QPZSi6O8umVnQgAAAIw"]
[Sun Nov 23 16:34:49.425991 2025] [:error] [pid 44652:tid 44716] [client 140.99.1.28:31977] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aSLHKdiQFwsyXQDhwyCGEAAAAQo"]
[Sun Nov 23 16:34:49.606685 2025] [:error] [pid 38739:tid 38784] [client 140.99.1.16:64091] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aSLHKQdvEgJm2n2cDmr-BwAAAE8"]
[Sun Nov 23 16:34:50.076083 2025] [:error] [pid 38740:tid 38797] [client 140.99.1.42:28141] [client 140.99.1.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aSLHKg13QPZSi6O8umVnYgAAAIE"]
[Sun Nov 23 16:34:50.276496 2025] [:error] [pid 38739:tid 38790] [client 140.99.1.63:43139] [client 140.99.1.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSLHKgdvEgJm2n2cDmr-JAAAAFU"]
[Sun Nov 23 16:34:50.491230 2025] [:error] [pid 44652:tid 44711] [client 140.99.1.17:60429] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aSLHKtiQFwsyXQDhwyCGMQAAAQU"]
[Sun Nov 23 16:34:50.703925 2025] [:error] [pid 38824:tid 38833] [client 140.99.1.16:54993] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aSLHKk8WZjXLvbHTHPeL8QAAAMY"]
[Sun Nov 23 16:34:52.090681 2025] [:error] [pid 38824:tid 38843] [client 140.99.1.65:26113] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aSLHLE8WZjXLvbHTHPeMDgAAANA"]
[Sun Nov 23 16:34:52.477935 2025] [:error] [pid 38738:tid 38752] [client 140.99.1.76:47347] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aSLHLAytc6TL9XavPmPMdgAAAAo"]
[Sun Nov 23 16:34:53.170894 2025] [:error] [pid 38738:tid 38762] [client 140.99.1.15:32263] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aSLHLQytc6TL9XavPmPMlAAAABQ"]
[Sun Nov 23 16:34:54.272887 2025] [:error] [pid 38824:tid 38840] [client 140.99.1.32:61285] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aSLHLk8WZjXLvbHTHPeMRgAAAM0"]
[Sun Nov 23 16:34:54.784314 2025] [:error] [pid 38738:tid 38747] [client 140.99.1.11:54269] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aSLHLgytc6TL9XavPmPMzgAAAAU"]
[Sun Nov 23 16:34:55.012635 2025] [:error] [pid 38740:tid 38817] [client 140.99.1.18:26325] [client 140.99.1.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aSLHLw13QPZSi6O8umVn2wAAAJU"]
[Sun Nov 23 16:34:56.107059 2025] [:error] [pid 38739:tid 38770] [client 140.99.1.38:50311] [client 140.99.1.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSLHMAdvEgJm2n2cDmr-xAAAAEE"]
[Sun Nov 23 16:34:58.417647 2025] [proxy_fcgi:error] [pid 38824:tid 38830] [client 140.99.1.30:46247] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:58.590625 2025] [proxy_fcgi:error] [pid 38824:tid 38846] [client 140.99.1.30:46247] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:58.769313 2025] [proxy_fcgi:error] [pid 38824:tid 38837] [client 140.99.1.30:46247] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:34:59.362569 2025] [:error] [pid 38824:tid 38834] [client 140.99.1.30:46247] [client 140.99.1.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSLHM08WZjXLvbHTHPeMtQAAAMc"]
[Sun Nov 23 16:35:02.560710 2025] [:error] [pid 38740:tid 38800] [client 140.99.1.50:33673] [client 140.99.1.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aSLHNg13QPZSi6O8umVo0wAAAIQ"]
[Sun Nov 23 16:35:02.769578 2025] [:error] [pid 38824:tid 38847] [client 140.99.1.32:25577] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aSLHNk8WZjXLvbHTHPeM-AAAANQ"]
[Sun Nov 23 16:35:03.028744 2025] [:error] [pid 38824:tid 38834] [client 140.99.1.8:21621] [client 140.99.1.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aSLHN08WZjXLvbHTHPeNAAAAAMc"]
[Sun Nov 23 16:35:03.358762 2025] [:error] [pid 38738:tid 38742] [client 140.99.1.20:27859] [client 140.99.1.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aSLHNwytc6TL9XavPmPNqAAAAAA"]
[Sun Nov 23 16:35:03.559927 2025] [:error] [pid 38738:tid 38757] [client 140.99.1.7:48553] [client 140.99.1.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aSLHNwytc6TL9XavPmPNrgAAAA8"]
[Sun Nov 23 16:35:03.891761 2025] [:error] [pid 38738:tid 38765] [client 140.99.1.33:56853] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aSLHNwytc6TL9XavPmPNtAAAABc"]
[Sun Nov 23 16:35:04.098844 2025] [:error] [pid 38738:tid 38766] [client 140.99.1.24:44451] [client 140.99.1.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aSLHOAytc6TL9XavPmPNuwAAABg"]
[Sun Nov 23 16:35:04.286188 2025] [:error] [pid 38740:tid 38809] [client 140.99.1.32:61863] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aSLHOA13QPZSi6O8umVo_AAAAI0"]
[Sun Nov 23 16:35:04.586665 2025] [:error] [pid 38824:tid 38832] [client 140.99.1.27:50645] [client 140.99.1.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aSLHOE8WZjXLvbHTHPeNMAAAAMU"]
[Sun Nov 23 16:35:05.114026 2025] [:error] [pid 38738:tid 38759] [client 140.99.1.43:57153] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aSLHOQytc6TL9XavPmPNzQAAABE"]
[Sun Nov 23 16:35:05.463689 2025] [:error] [pid 38740:tid 38818] [client 140.99.1.70:23829] [client 140.99.1.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aSLHOQ13QPZSi6O8umVpHgAAAJY"]
[Sun Nov 23 16:35:05.960864 2025] [:error] [pid 38739:tid 38784] [client 140.99.1.16:38403] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aSLHOQdvEgJm2n2cDmr_pgAAAE8"]
[Sun Nov 23 16:35:06.387346 2025] [:error] [pid 38739:tid 38793] [client 140.99.1.11:45919] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aSLHOgdvEgJm2n2cDmr_qwAAAFg"]
[Sun Nov 23 16:35:07.020027 2025] [:error] [pid 38740:tid 38813] [client 140.99.1.71:62067] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aSLHOw13QPZSi6O8umVpTgAAAJE"]
[Sun Nov 23 16:35:11.175805 2025] [:error] [pid 38740:tid 38797] [client 140.99.1.14:22073] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aSLHPw13QPZSi6O8umVpvgAAAIE"]
[Sun Nov 23 16:35:11.508021 2025] [:error] [pid 38738:tid 38744] [client 140.99.1.17:23635] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aSLHPwytc6TL9XavPmPOcQAAAAI"]
[Sun Nov 23 16:35:14.098605 2025] [:error] [pid 38824:tid 38832] [client 140.99.1.9:24699] [client 140.99.1.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aSLHQk8WZjXLvbHTHPeOGQAAAMU"]
[Sun Nov 23 16:35:14.326369 2025] [:error] [pid 44652:tid 44711] [client 140.99.1.28:25267] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aSLHQtiQFwsyXQDhwyCIIQAAAQU"]
[Sun Nov 23 16:35:14.562639 2025] [:error] [pid 38740:tid 38797] [client 140.99.1.37:47891] [client 140.99.1.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.37, incrementing brute counter"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aSLHQg13QPZSi6O8umVqKQAAAIE"]
[Sun Nov 23 16:35:14.769774 2025] [:error] [pid 38740:tid 38815] [client 140.99.1.37:47891] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aSLHQg13QPZSi6O8umVqOAAAAJM"]
[Sun Nov 23 16:35:15.257719 2025] [:error] [pid 38738:tid 38758] [client 140.99.1.17:60697] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aSLHQwytc6TL9XavPmPO2QAAABA"]
[Sun Nov 23 16:35:15.523587 2025] [:error] [pid 38739:tid 38772] [client 140.99.1.42:42915] [client 140.99.1.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aSLHQwdvEgJm2n2cDmoAhwAAAEM"]
[Sun Nov 23 16:35:16.335050 2025] [:error] [pid 38738:tid 38759] [client 140.99.1.38:51639] [client 140.99.1.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSLHRAytc6TL9XavPmPPAgAAABE"]
[Sun Nov 23 16:35:16.531292 2025] [:error] [pid 38739:tid 38790] [client 140.99.1.39:52023] [client 140.99.1.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aSLHRAdvEgJm2n2cDmoAkQAAAFU"]
[Sun Nov 23 16:35:17.368035 2025] [:error] [pid 38738:tid 38759] [client 140.99.1.3:42133] [client 140.99.1.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aSLHRQytc6TL9XavPmPPPwAAABE"]
[Sun Nov 23 16:35:17.964615 2025] [proxy_fcgi:error] [pid 44652:tid 44726] [client 140.99.1.62:38103] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:18.161011 2025] [:error] [pid 44652:tid 44708] [client 140.99.1.62:38103] [client 140.99.1.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/function.php"] [unique_id "aSLHRtiQFwsyXQDhwyCIfQAAAQI"]
[Sun Nov 23 16:35:18.379949 2025] [:error] [pid 38739:tid 38788] [client 140.99.1.24:29149] [client 140.99.1.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aSLHRgdvEgJm2n2cDmoAsAAAAFM"]
[Sun Nov 23 16:35:18.816485 2025] [:error] [pid 44652:tid 44718] [client 140.99.1.26:59437] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aSLHRtiQFwsyXQDhwyCIlgAAAQw"]
[Sun Nov 23 16:35:19.068664 2025] [:error] [pid 38740:tid 38808] [client 140.99.1.15:21613] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aSLHRw13QPZSi6O8umVq7QAAAIw"]
[Sun Nov 23 16:35:20.247432 2025] [:error] [pid 38740:tid 38801] [client 140.99.1.20:62619] [client 140.99.1.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aSLHSA13QPZSi6O8umVrJAAAAIU"]
[Sun Nov 23 16:35:20.512644 2025] [:error] [pid 38739:tid 38774] [client 140.99.1.43:56363] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aSLHSAdvEgJm2n2cDmoA4wAAAEU"]
[Sun Nov 23 16:35:21.126848 2025] [:error] [pid 38739:tid 38789] [client 140.99.1.46:27793] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/index.php"] [unique_id "aSLHSQdvEgJm2n2cDmoA_wAAAFQ"]
[Sun Nov 23 16:35:21.326092 2025] [:error] [pid 38738:tid 38764] [client 140.99.1.11:42101] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aSLHSQytc6TL9XavPmPPsAAAABY"]
[Sun Nov 23 16:35:21.508456 2025] [:error] [pid 38738:tid 38759] [client 140.99.1.31:49707] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aSLHSQytc6TL9XavPmPPuQAAABE"]
[Sun Nov 23 16:35:22.260103 2025] [:error] [pid 38824:tid 38841] [client 140.99.1.13:63551] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aSLHSk8WZjXLvbHTHPeO5wAAAM4"]
[Sun Nov 23 16:35:22.540409 2025] [:error] [pid 38740:tid 38817] [client 140.99.1.16:26361] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aSLHSg13QPZSi6O8umVrnQAAAJU"]
[Sun Nov 23 16:35:23.425764 2025] [:error] [pid 38824:tid 38845] [client 140.99.1.48:24601] [client 140.99.1.48] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.48, incrementing brute counter"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/js/wp-login.php"] [unique_id "aSLHS08WZjXLvbHTHPePEwAAANI"]
[Sun Nov 23 16:35:24.053048 2025] [:error] [pid 38824:tid 38847] [client 140.99.1.48:24601] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aSLHTE8WZjXLvbHTHPePJgAAANQ"]
[Sun Nov 23 16:35:24.246042 2025] [:error] [pid 38824:tid 38834] [client 140.99.1.8:52747] [client 140.99.1.8] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.8, incrementing brute counter"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aSLHTE8WZjXLvbHTHPePKwAAAMc"]
[Sun Nov 23 16:35:25.444494 2025] [proxy_fcgi:error] [pid 38824:tid 38849] [client 140.99.1.8:52747] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:27.283478 2025] [:error] [pid 38824:tid 38846] [client 140.99.1.8:52747] [client 140.99.1.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aSLHT08WZjXLvbHTHPePsQAAANM"]
[Sun Nov 23 16:35:27.795419 2025] [:error] [pid 38824:tid 38844] [client 140.99.1.5:21941] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aSLHT08WZjXLvbHTHPePvwAAANE"]
[Sun Nov 23 16:35:28.284773 2025] [:error] [pid 38824:tid 38828] [client 140.99.1.71:29907] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aSLHUE8WZjXLvbHTHPePzQAAAME"]
[Sun Nov 23 16:35:29.801656 2025] [:error] [pid 38824:tid 38848] [client 140.99.1.73:30657] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aSLHUU8WZjXLvbHTHPeP6AAAANU"]
[Sun Nov 23 16:35:30.220678 2025] [:error] [pid 38740:tid 38796] [client 140.99.1.48:39877] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aSLHUg13QPZSi6O8umVskAAAAIA"]
[Sun Nov 23 16:35:30.758267 2025] [:error] [pid 38824:tid 38845] [client 140.99.1.48:26751] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aSLHUk8WZjXLvbHTHPeQBwAAANI"]
[Sun Nov 23 16:35:31.721875 2025] [proxy_fcgi:error] [pid 38824:tid 38843] [client 140.99.1.72:60921] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:31.829822 2025] [proxy_fcgi:error] [pid 38824:tid 38836] [client 140.99.1.72:60921] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:31.933858 2025] [:error] [pid 38824:tid 38842] [client 140.99.1.72:60921] [client 140.99.1.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aSLHU08WZjXLvbHTHPeQLwAAAM8"]
[Sun Nov 23 16:35:32.237607 2025] [:error] [pid 38738:tid 38744] [client 140.99.1.17:46827] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aSLHVAytc6TL9XavPmPRIgAAAAI"]
[Sun Nov 23 16:35:33.194999 2025] [:error] [pid 38738:tid 38744] [client 140.99.1.15:61837] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aSLHVQytc6TL9XavPmPRVwAAAAI"]
[Sun Nov 23 16:35:33.535589 2025] [:error] [pid 38738:tid 38750] [client 140.99.1.15:47277] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "aSLHVQytc6TL9XavPmPRYQAAAAg"]
[Sun Nov 23 16:35:34.093643 2025] [:error] [pid 38824:tid 38833] [client 140.99.1.49:62399] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aSLHVk8WZjXLvbHTHPeQWwAAAMY"]
[Sun Nov 23 16:35:35.222132 2025] [:error] [pid 38740:tid 38818] [client 140.99.1.50:20325] [client 140.99.1.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aSLHVw13QPZSi6O8umVtAgAAAJY"]
[Sun Nov 23 16:35:35.464429 2025] [proxy_fcgi:error] [pid 38824:tid 38844] [client 140.99.1.15:45143] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:35.920667 2025] [:error] [pid 38824:tid 38836] [client 140.99.1.15:45143] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aSLHV08WZjXLvbHTHPeQlwAAAMk"]
[Sun Nov 23 16:35:36.843104 2025] [proxy_fcgi:error] [pid 38739:tid 38791] [client 140.99.1.11:51391] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:37.094338 2025] [:error] [pid 38739:tid 38769] [client 140.99.1.11:51391] [client 140.99.1.11] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.11, incrementing brute counter"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aSLHWQdvEgJm2n2cDmoChwAAAEA"]
[Sun Nov 23 16:35:37.698753 2025] [:error] [pid 38739:tid 38771] [client 140.99.1.11:51391] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aSLHWQdvEgJm2n2cDmoCkgAAAEI"]
[Sun Nov 23 16:35:38.010644 2025] [:error] [pid 38739:tid 38778] [client 140.99.1.18:51877] [client 140.99.1.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aSLHWgdvEgJm2n2cDmoCmQAAAEk"]
[Sun Nov 23 16:35:38.691957 2025] [:error] [pid 38740:tid 38808] [client 140.99.1.11:43291] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aSLHWg13QPZSi6O8umVthwAAAIw"]
[Sun Nov 23 16:35:39.463720 2025] [:error] [pid 38740:tid 38808] [client 140.99.1.46:40691] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aSLHWw13QPZSi6O8umVtsAAAAIw"]
[Sun Nov 23 16:35:39.815468 2025] [:error] [pid 38824:tid 38838] [client 140.99.1.70:41817] [client 140.99.1.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aSLHW08WZjXLvbHTHPeQ_AAAAMs"]
[Sun Nov 23 16:35:40.391255 2025] [:error] [pid 38740:tid 38820] [client 140.99.1.11:45987] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aSLHXA13QPZSi6O8umVt4wAAAJg"]
[Sun Nov 23 16:35:40.889644 2025] [proxy_fcgi:error] [pid 38824:tid 38831] [client 140.99.1.37:31887] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:41.012412 2025] [:error] [pid 38824:tid 38837] [client 140.99.1.37:31887] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aSLHXU8WZjXLvbHTHPeRGQAAAMo"]
[Sun Nov 23 16:35:41.359658 2025] [:error] [pid 38739:tid 38787] [client 140.99.1.67:50557] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/db.php"] [unique_id "aSLHXQdvEgJm2n2cDmoC9AAAAFI"]
[Sun Nov 23 16:35:41.605089 2025] [:error] [pid 38740:tid 38799] [client 140.99.1.27:54211] [client 140.99.1.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aSLHXQ13QPZSi6O8umVuFgAAAIM"]
[Sun Nov 23 16:35:41.827960 2025] [:error] [pid 38824:tid 38840] [client 140.99.1.68:25651] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aSLHXU8WZjXLvbHTHPeRKQAAAM0"]
[Sun Nov 23 16:35:42.139159 2025] [:error] [pid 38740:tid 38810] [client 140.99.1.17:39743] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aSLHXg13QPZSi6O8umVuKwAAAI4"]
[Sun Nov 23 16:35:42.367561 2025] [:error] [pid 38739:tid 38788] [client 140.99.1.16:57687] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aSLHXgdvEgJm2n2cDmoDCgAAAFM"]
[Sun Nov 23 16:35:42.550758 2025] [:error] [pid 38824:tid 38827] [client 140.99.1.67:58139] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aSLHXk8WZjXLvbHTHPeRPQAAAMA"]
[Sun Nov 23 16:35:43.095245 2025] [:error] [pid 38824:tid 38839] [client 140.99.1.48:36591] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aSLHX08WZjXLvbHTHPeRSQAAAMw"]
[Sun Nov 23 16:35:43.316735 2025] [:error] [pid 38738:tid 38752] [client 140.99.1.67:26251] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aSLHXwytc6TL9XavPmPS5wAAAAo"]
[Sun Nov 23 16:35:43.541579 2025] [:error] [pid 38824:tid 38851] [client 140.99.1.69:62295] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aSLHX08WZjXLvbHTHPeRUgAAANg"]
[Sun Nov 23 16:35:43.835645 2025] [:error] [pid 44652:tid 44728] [client 140.99.1.39:55579] [client 140.99.1.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aSLHX9iQFwsyXQDhwyCLCQAAARY"]
[Sun Nov 23 16:35:44.322019 2025] [:error] [pid 44652:tid 44728] [client 140.99.1.32:65105] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aSLHYNiQFwsyXQDhwyCLFgAAARY"]
[Sun Nov 23 16:35:44.533616 2025] [proxy_fcgi:error] [pid 38738:tid 38750] [client 140.99.1.15:60625] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:35:45.096994 2025] [:error] [pid 38738:tid 38747] [client 140.99.1.15:60625] [client 140.99.1.15] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.15, incrementing brute counter"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aSLHYQytc6TL9XavPmPTHwAAAAU"]
[Sun Nov 23 16:35:46.173234 2025] [:error] [pid 38738:tid 38742] [client 140.99.1.15:60625] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aSLHYgytc6TL9XavPmPTQgAAAAA"]
[Sun Nov 23 16:35:46.403830 2025] [:error] [pid 38739:tid 38790] [client 140.99.1.67:45559] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aSLHYgdvEgJm2n2cDmoDfAAAAFU"]
[Sun Nov 23 16:35:48.743488 2025] [:error] [pid 38738:tid 38743] [client 140.99.1.75:64953] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aSLHZAytc6TL9XavPmPTgQAAAAE"]
[Sun Nov 23 16:35:48.938737 2025] [:error] [pid 38740:tid 38796] [client 140.99.1.77:48071] [client 140.99.1.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aSLHZA13QPZSi6O8umVvEwAAAIA"]
[Sun Nov 23 16:35:49.188344 2025] [:error] [pid 44652:tid 44714] [client 140.99.1.68:22593] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aSLHZdiQFwsyXQDhwyCLbwAAAQg"]
[Sun Nov 23 16:35:50.187657 2025] [:error] [pid 38824:tid 38833] [client 140.99.1.49:40759] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aSLHZk8WZjXLvbHTHPeR_AAAAMY"]
[Sun Nov 23 16:35:50.392660 2025] [:error] [pid 38824:tid 38834] [client 140.99.1.43:54555] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aSLHZk8WZjXLvbHTHPeSAwAAAMc"]
[Sun Nov 23 16:35:50.591240 2025] [:error] [pid 44652:tid 44721] [client 140.99.1.65:52059] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aSLHZtiQFwsyXQDhwyCLnAAAAQ8"]
[Sun Nov 23 16:35:51.486381 2025] [:error] [pid 38824:tid 38850] [client 140.99.1.38:47589] [client 140.99.1.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aSLHZ08WZjXLvbHTHPeSMQAAANc"]
[Sun Nov 23 16:35:51.990495 2025] [:error] [pid 38739:tid 38781] [client 140.99.1.20:25791] [client 140.99.1.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aSLHZwdvEgJm2n2cDmoEKQAAAEw"]
[Sun Nov 23 16:35:52.508603 2025] [:error] [pid 38824:tid 38848] [client 140.99.1.71:56955] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aSLHaE8WZjXLvbHTHPeSZgAAANU"]
[Sun Nov 23 16:35:54.415464 2025] [:error] [pid 44652:tid 44710] [client 140.99.1.75:42375] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aSLHatiQFwsyXQDhwyCMLAAAAQQ"]
[Sun Nov 23 16:35:54.916679 2025] [:error] [pid 38738:tid 38752] [client 140.99.1.47:39037] [client 140.99.1.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/about.php"] [unique_id "aSLHagytc6TL9XavPmPUFwAAAAo"]
[Sun Nov 23 16:35:55.983565 2025] [:error] [pid 38739:tid 38782] [client 140.99.1.28:37129] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aSLHawdvEgJm2n2cDmoEkwAAAE0"]
[Sun Nov 23 16:35:56.484887 2025] [:error] [pid 38740:tid 38799] [client 140.99.1.44:50903] [client 140.99.1.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aSLHbA13QPZSi6O8umVv0gAAAIM"]
[Sun Nov 23 16:36:00.877806 2025] [:error] [pid 38738:tid 38752] [client 140.99.1.76:31713] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aSLHcAytc6TL9XavPmPU0gAAAAo"]
[Sun Nov 23 16:36:01.592481 2025] [:error] [pid 38738:tid 38763] [client 140.99.1.48:64457] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aSLHcQytc6TL9XavPmPU7gAAABU"]
[Sun Nov 23 16:36:02.016912 2025] [:error] [pid 38824:tid 38834] [client 140.99.1.16:58311] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aSLHck8WZjXLvbHTHPeTtwAAAMc"]
[Sun Nov 23 16:36:02.234459 2025] [:error] [pid 38739:tid 38790] [client 140.99.1.65:36401] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aSLHcgdvEgJm2n2cDmoFCgAAAFU"]
[Sun Nov 23 16:36:03.080660 2025] [:error] [pid 38824:tid 38846] [client 140.99.1.30:48439] [client 140.99.1.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aSLHc08WZjXLvbHTHPeT4QAAANM"]
[Sun Nov 23 16:36:03.953606 2025] [:error] [pid 38824:tid 38851] [client 140.99.1.68:48269] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aSLHc08WZjXLvbHTHPeUCQAAANg"]
[Sun Nov 23 16:36:04.658212 2025] [:error] [pid 38739:tid 38793] [client 140.99.1.31:45631] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aSLHdAdvEgJm2n2cDmoFUwAAAFg"]
[Sun Nov 23 16:36:04.859226 2025] [:error] [pid 44652:tid 44711] [client 140.99.1.7:36527] [client 140.99.1.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aSLHdNiQFwsyXQDhwyCNTwAAAQU"]
[Sun Nov 23 16:36:05.376873 2025] [:error] [pid 38738:tid 38745] [client 140.99.1.42:52675] [client 140.99.1.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aSLHdQytc6TL9XavPmPVcwAAAAM"]
[Sun Nov 23 16:36:06.013041 2025] [:error] [pid 38740:tid 38817] [client 140.99.1.74:46179] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "aSLHdg13QPZSi6O8umVwxQAAAJU"]
[Sun Nov 23 16:36:06.228704 2025] [:error] [pid 38738:tid 38753] [client 140.99.1.42:45575] [client 140.99.1.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aSLHdgytc6TL9XavPmPVhgAAAAs"]
[Sun Nov 23 16:36:07.844007 2025] [:error] [pid 38824:tid 38838] [client 140.99.1.74:58633] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "aSLHd08WZjXLvbHTHPeUhAAAAMs"]
[Sun Nov 23 16:36:08.289325 2025] [:error] [pid 38738:tid 38751] [client 140.99.1.75:46727] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "aSLHeAytc6TL9XavPmPVxwAAAAk"]
[Sun Nov 23 16:36:08.606979 2025] [:error] [pid 38824:tid 38832] [client 140.99.1.20:29377] [client 140.99.1.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "aSLHeE8WZjXLvbHTHPeUpwAAAMU"]
[Sun Nov 23 16:36:09.184879 2025] [:error] [pid 38740:tid 38796] [client 140.99.1.8:34425] [client 140.99.1.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aSLHeQ13QPZSi6O8umVxOAAAAIA"]
[Sun Nov 23 16:36:09.484874 2025] [:error] [pid 38740:tid 38808] [client 140.99.1.28:50947] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aSLHeQ13QPZSi6O8umVxRAAAAIw"]
[Sun Nov 23 16:36:10.623265 2025] [:error] [pid 38738:tid 38750] [client 140.99.1.71:54019] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aSLHegytc6TL9XavPmPWBgAAAAg"]
[Sun Nov 23 16:36:11.069683 2025] [:error] [pid 38738:tid 38763] [client 140.99.1.32:58635] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aSLHewytc6TL9XavPmPWHQAAABU"]
[Sun Nov 23 16:36:11.561333 2025] [:error] [pid 38738:tid 38750] [client 140.99.1.26:61673] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aSLHewytc6TL9XavPmPWMAAAAAg"]
[Sun Nov 23 16:36:11.905433 2025] [:error] [pid 38824:tid 38843] [client 140.99.1.67:37729] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/as.php"] [unique_id "aSLHe08WZjXLvbHTHPeVAwAAANA"]
[Sun Nov 23 16:36:12.200697 2025] [:error] [pid 38738:tid 38750] [client 140.99.1.78:22757] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aSLHfAytc6TL9XavPmPWRgAAAAg"]
[Sun Nov 23 16:36:12.474284 2025] [:error] [pid 38740:tid 38806] [client 140.99.1.20:21929] [client 140.99.1.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/install.php"] [unique_id "aSLHfA13QPZSi6O8umVxiAAAAIo"]
[Sun Nov 23 16:36:12.667487 2025] [:error] [pid 38824:tid 38848] [client 140.99.1.7:20805] [client 140.99.1.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "aSLHfE8WZjXLvbHTHPeVIgAAANU"]
[Sun Nov 23 16:36:13.671868 2025] [:error] [pid 38739:tid 38777] [client 140.99.1.48:34767] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aSLHfQdvEgJm2n2cDmoGuQAAAEg"]
[Sun Nov 23 16:36:14.261251 2025] [:error] [pid 44652:tid 44725] [client 140.99.1.32:50719] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aSLHftiQFwsyXQDhwyCOXAAAARM"]
[Sun Nov 23 16:36:14.847512 2025] [:error] [pid 38824:tid 38848] [client 140.99.1.39:52957] [client 140.99.1.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "aSLHfk8WZjXLvbHTHPeVhgAAANU"]
[Sun Nov 23 16:36:15.446258 2025] [:error] [pid 38740:tid 38805] [client 140.99.1.30:34517] [client 140.99.1.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "aSLHfw13QPZSi6O8umVx2wAAAIk"]
[Sun Nov 23 16:36:16.580962 2025] [:error] [pid 38738:tid 38755] [client 140.99.1.46:43533] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aSLHgAytc6TL9XavPmPW8gAAAA0"]
[Sun Nov 23 16:36:16.884851 2025] [:error] [pid 38740:tid 38801] [client 140.99.1.74:31703] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aSLHgA13QPZSi6O8umVyDwAAAIU"]
[Sun Nov 23 16:36:17.181797 2025] [:error] [pid 38824:tid 38846] [client 140.99.1.31:31753] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aSLHgU8WZjXLvbHTHPeVxgAAANM"]
[Sun Nov 23 16:36:17.598373 2025] [:error] [pid 38824:tid 38839] [client 140.99.1.62:47707] [client 140.99.1.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aSLHgU8WZjXLvbHTHPeV4AAAAMw"]
[Sun Nov 23 16:36:18.799370 2025] [:error] [pid 38738:tid 38755] [client 140.99.1.14:64065] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aSLHggytc6TL9XavPmPXEAAAAA0"]
[Sun Nov 23 16:36:19.077649 2025] [:error] [pid 38739:tid 38782] [client 140.99.1.33:23357] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aSLHgwdvEgJm2n2cDmoHhwAAAE0"]
[Sun Nov 23 16:36:19.756502 2025] [:error] [pid 38739:tid 38775] [client 140.99.1.72:60233] [client 140.99.1.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aSLHgwdvEgJm2n2cDmoHmQAAAEY"]
[Sun Nov 23 16:36:19.976847 2025] [:error] [pid 44652:tid 44716] [client 140.99.1.52:30395] [client 140.99.1.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aSLHg9iQFwsyXQDhwyCOzAAAAQo"]
[Sun Nov 23 16:36:20.398149 2025] [:error] [pid 38739:tid 38793] [client 140.99.1.49:53089] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aSLHhAdvEgJm2n2cDmoHtgAAAFg"]
[Sun Nov 23 16:36:20.674029 2025] [:error] [pid 38738:tid 38766] [client 140.99.1.63:60535] [client 140.99.1.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "aSLHhAytc6TL9XavPmPXTQAAABg"]
[Sun Nov 23 16:36:20.993434 2025] [:error] [pid 44652:tid 44715] [client 140.99.1.37:27253] [client 140.99.1.37] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.37, incrementing brute counter"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aSLHhNiQFwsyXQDhwyCO1gAAAQk"]
[Sun Nov 23 16:36:21.025316 2025] [proxy_fcgi:error] [pid 44652:tid 44715] [client 140.99.1.37:27253] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:36:21.146905 2025] [:error] [pid 44652:tid 44719] [client 140.99.1.37:27253] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "aSLHhdiQFwsyXQDhwyCO2gAAAQ0"]
[Sun Nov 23 16:36:21.797666 2025] [:error] [pid 38740:tid 38815] [client 140.99.1.75:60371] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aSLHhQ13QPZSi6O8umVysQAAAJM"]
[Sun Nov 23 16:36:21.988106 2025] [:error] [pid 38739:tid 38792] [client 140.99.1.52:59103] [client 140.99.1.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/network.php"] [unique_id "aSLHhQdvEgJm2n2cDmoH4wAAAFc"]
[Sun Nov 23 16:36:23.169711 2025] [:error] [pid 38739:tid 38791] [client 140.99.1.13:37681] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aSLHhwdvEgJm2n2cDmoIDQAAAFY"]
[Sun Nov 23 16:36:23.405995 2025] [:error] [pid 44652:tid 44713] [client 140.99.1.7:61671] [client 140.99.1.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "aSLHh9iQFwsyXQDhwyCPFQAAAQc"]
[Sun Nov 23 16:36:24.007224 2025] [:error] [pid 38824:tid 38832] [client 140.99.1.8:56985] [client 140.99.1.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aSLHiE8WZjXLvbHTHPeWfQAAAMU"]
[Sun Nov 23 16:36:24.208503 2025] [:error] [pid 38739:tid 38789] [client 140.99.1.42:56625] [client 140.99.1.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "aSLHiAdvEgJm2n2cDmoIKQAAAFQ"]
[Sun Nov 23 16:36:25.449686 2025] [proxy_fcgi:error] [pid 38739:tid 38792] [client 140.99.1.30:25019] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:36:25.573593 2025] [:error] [pid 38739:tid 38775] [client 140.99.1.30:25019] [client 140.99.1.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.30, incrementing brute counter"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aSLHiQdvEgJm2n2cDmoIXgAAAEY"]
[Sun Nov 23 16:36:25.819699 2025] [:error] [pid 38739:tid 38770] [client 140.99.1.30:25019] [client 140.99.1.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aSLHiQdvEgJm2n2cDmoIawAAAEE"]
[Sun Nov 23 16:36:27.121308 2025] [:error] [pid 38740:tid 38796] [client 140.99.1.75:52991] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aSLHiw13QPZSi6O8umVzUwAAAIA"]
[Sun Nov 23 16:36:27.480630 2025] [:error] [pid 38739:tid 38789] [client 140.99.1.2:50547] [client 140.99.1.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aSLHiwdvEgJm2n2cDmoIqQAAAFQ"]
[Sun Nov 23 16:36:27.662049 2025] [:error] [pid 38740:tid 38812] [client 140.99.1.53:50677] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aSLHiw13QPZSi6O8umVzbgAAAJA"]
[Sun Nov 23 16:36:28.218403 2025] [:error] [pid 38738:tid 38755] [client 140.99.1.63:57767] [client 140.99.1.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aSLHjAytc6TL9XavPmPYWgAAAA0"]
[Sun Nov 23 16:36:28.759741 2025] [:error] [pid 38739:tid 38787] [client 140.99.1.44:30981] [client 140.99.1.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aSLHjAdvEgJm2n2cDmoI7wAAAFI"]
[Sun Nov 23 16:36:29.490039 2025] [:error] [pid 44652:tid 44724] [client 140.99.1.67:41197] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aSLHjdiQFwsyXQDhwyCPrAAAARI"]
[Sun Nov 23 16:36:29.804492 2025] [:error] [pid 38740:tid 38817] [client 140.99.1.30:24433] [client 140.99.1.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "aSLHjQ13QPZSi6O8umVzoAAAAJU"]
[Sun Nov 23 16:36:30.170834 2025] [:error] [pid 38738:tid 38742] [client 140.99.1.67:46037] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/count.php"] [unique_id "aSLHjgytc6TL9XavPmPYrwAAAAA"]
[Sun Nov 23 16:36:31.244314 2025] [:error] [pid 38739:tid 38772] [client 140.99.1.32:58131] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aSLHjwdvEgJm2n2cDmoJcgAAAEM"]
[Sun Nov 23 16:36:31.757975 2025] [:error] [pid 38738:tid 38748] [client 140.99.1.26:21177] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||www.measureyourcause.measureyourbrand.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/images/stories/themes.php"] [unique_id "aSLHjwytc6TL9XavPmPY3gAAAAY"]
[Sun Nov 23 16:36:31.940198 2025] [:error] [pid 38738:tid 38763] [client 140.99.1.26:21177] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aSLHjwytc6TL9XavPmPY6AAAABU"]
[Sun Nov 23 16:36:32.502651 2025] [:error] [pid 38824:tid 38833] [client 140.99.1.46:63357] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aSLHkE8WZjXLvbHTHPeXUgAAAMY"]
[Sun Nov 23 16:36:32.740849 2025] [:error] [pid 38739:tid 38792] [client 140.99.1.10:63779] [client 140.99.1.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "aSLHkAdvEgJm2n2cDmoJtQAAAFc"]
[Sun Nov 23 16:36:33.609350 2025] [:error] [pid 44652:tid 44713] [client 140.99.1.17:62195] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aSLHkdiQFwsyXQDhwyCP-wAAAQc"]
[Sun Nov 23 16:36:34.052966 2025] [:error] [pid 38824:tid 38851] [client 140.99.1.67:26035] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aSLHkk8WZjXLvbHTHPeXlgAAANg"]
[Sun Nov 23 16:36:34.491626 2025] [:error] [pid 38738:tid 38750] [client 140.99.1.8:57291] [client 140.99.1.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aSLHkgytc6TL9XavPmPZQAAAAAg"]
[Sun Nov 23 16:36:35.243648 2025] [:error] [pid 44652:tid 44723] [client 140.99.1.77:51023] [client 140.99.1.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aSLHk9iQFwsyXQDhwyCQLQAAARE"]
[Sun Nov 23 16:36:35.683898 2025] [:error] [pid 38738:tid 38748] [client 140.99.1.9:46795] [client 140.99.1.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/colour.php"] [unique_id "aSLHkwytc6TL9XavPmPZXwAAAAY"]
[Sun Nov 23 16:36:36.145251 2025] [:error] [pid 38738:tid 38755] [client 140.99.1.13:27817] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aSLHlAytc6TL9XavPmPZaQAAAA0"]
[Sun Nov 23 16:36:36.349864 2025] [:error] [pid 38738:tid 38746] [client 140.99.1.26:38405] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aSLHlAytc6TL9XavPmPZdAAAAAQ"]
[Sun Nov 23 16:36:36.875830 2025] [:error] [pid 44652:tid 44709] [client 140.99.1.68:54941] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aSLHlNiQFwsyXQDhwyCQZgAAAQM"]
[Sun Nov 23 16:36:37.569770 2025] [:error] [pid 38824:tid 38850] [client 140.99.1.53:65505] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aSLHlU8WZjXLvbHTHPeYBQAAANc"]
[Sun Nov 23 16:36:37.756954 2025] [:error] [pid 38739:tid 38776] [client 140.99.1.38:50299] [client 140.99.1.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/about5.php"] [unique_id "aSLHlQdvEgJm2n2cDmoKUgAAAEc"]
[Sun Nov 23 16:36:38.630650 2025] [:error] [pid 44652:tid 44719] [client 140.99.1.28:37493] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/db.php"] [unique_id "aSLHltiQFwsyXQDhwyCQngAAAQ0"]
[Sun Nov 23 16:36:39.150119 2025] [:error] [pid 38740:tid 38796] [client 140.99.1.71:33183] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aSLHlw13QPZSi6O8umV0swAAAIA"]
[Sun Nov 23 16:36:39.726705 2025] [:error] [pid 38824:tid 38840] [client 140.99.1.16:30895] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aSLHl08WZjXLvbHTHPeYRAAAAM0"]
[Sun Nov 23 16:36:39.980243 2025] [:error] [pid 38738:tid 38742] [client 140.99.1.28:52687] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aSLHlwytc6TL9XavPmPZ0gAAAAA"]
[Sun Nov 23 16:36:40.334940 2025] [:error] [pid 38739:tid 38776] [client 140.99.1.15:53219] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aSLHmAdvEgJm2n2cDmoKiQAAAEc"]
[Sun Nov 23 16:36:40.909797 2025] [:error] [pid 38738:tid 38764] [client 140.99.1.9:35929] [client 140.99.1.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aSLHmAytc6TL9XavPmPZ8QAAABY"]
[Sun Nov 23 16:36:41.327417 2025] [:error] [pid 38740:tid 38818] [client 140.99.1.10:20699] [client 140.99.1.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aSLHmQ13QPZSi6O8umV0-AAAAJY"]
[Sun Nov 23 16:36:41.544792 2025] [:error] [pid 38740:tid 38796] [client 140.99.1.74:59967] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aSLHmQ13QPZSi6O8umV0_QAAAIA"]
[Sun Nov 23 16:36:41.922310 2025] [:error] [pid 38824:tid 38849] [client 140.99.1.63:29553] [client 140.99.1.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aSLHmU8WZjXLvbHTHPeYZwAAANY"]
[Sun Nov 23 16:36:42.198055 2025] [:error] [pid 44652:tid 44709] [client 140.99.1.16:51303] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "aSLHmtiQFwsyXQDhwyCQ4wAAAQM"]
[Sun Nov 23 16:36:42.720587 2025] [:error] [pid 38739:tid 38781] [client 140.99.1.76:47733] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aSLHmgdvEgJm2n2cDmoKrAAAAEw"]
[Sun Nov 23 16:36:43.122527 2025] [:error] [pid 38824:tid 38846] [client 140.99.1.78:62511] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aSLHm08WZjXLvbHTHPeYeQAAANM"]
[Sun Nov 23 16:36:43.320502 2025] [:error] [pid 38740:tid 38804] [client 140.99.1.18:49755] [client 140.99.1.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aSLHmw13QPZSi6O8umV1LQAAAIg"]
[Sun Nov 23 16:36:43.543988 2025] [:error] [pid 44652:tid 44726] [client 140.99.1.65:41691] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aSLHm9iQFwsyXQDhwyCRIAAAARQ"]
[Sun Nov 23 16:36:44.226968 2025] [:error] [pid 44652:tid 44719] [client 140.99.1.24:34609] [client 140.99.1.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aSLHnNiQFwsyXQDhwyCROQAAAQ0"]
[Sun Nov 23 16:36:44.736479 2025] [:error] [pid 38740:tid 38800] [client 140.99.1.17:58959] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aSLHnA13QPZSi6O8umV1ZQAAAIQ"]
[Sun Nov 23 16:36:45.028906 2025] [:error] [pid 38739:tid 38789] [client 140.99.1.32:33973] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aSLHnQdvEgJm2n2cDmoKzAAAAFQ"]
[Sun Nov 23 16:36:45.361091 2025] [:error] [pid 38740:tid 38819] [client 140.99.1.63:64105] [client 140.99.1.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aSLHnQ13QPZSi6O8umV1awAAAJc"]
[Sun Nov 23 16:36:46.351566 2025] [:error] [pid 38739:tid 38778] [client 140.99.1.16:42759] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aSLHngdvEgJm2n2cDmoK7gAAAEk"]
[Sun Nov 23 16:36:46.734982 2025] [:error] [pid 38739:tid 38791] [client 140.99.1.33:64991] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aSLHngdvEgJm2n2cDmoK8wAAAFY"]
[Sun Nov 23 16:36:47.163326 2025] [:error] [pid 38738:tid 38747] [client 140.99.1.70:20307] [client 140.99.1.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aSLHnwytc6TL9XavPmPa0QAAAAU"]
[Sun Nov 23 16:36:48.268245 2025] [:error] [pid 38738:tid 38749] [client 140.99.1.14:60319] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aSLHoAytc6TL9XavPmPa_wAAAAc"]
[Sun Nov 23 16:36:48.686790 2025] [:error] [pid 44652:tid 44726] [client 140.99.1.75:29057] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aSLHoNiQFwsyXQDhwyCRxwAAARQ"]
[Sun Nov 23 16:36:49.200828 2025] [:error] [pid 38738:tid 38763] [client 140.99.1.46:42387] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aSLHoQytc6TL9XavPmPbJgAAABU"]
[Sun Nov 23 16:36:53.343956 2025] [:error] [pid 38824:tid 38851] [client 140.99.1.10:40067] [client 140.99.1.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aSLHpU8WZjXLvbHTHPeZWwAAANg"]
[Sun Nov 23 16:36:53.780009 2025] [:error] [pid 38738:tid 38747] [client 140.99.1.67:26759] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aSLHpQytc6TL9XavPmPbowAAAAU"]
[Sun Nov 23 16:36:54.487049 2025] [:error] [pid 44652:tid 44716] [client 140.99.1.14:31735] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aSLHptiQFwsyXQDhwyCSgQAAAQo"]
[Sun Nov 23 16:36:55.199957 2025] [:error] [pid 38740:tid 38796] [client 140.99.1.33:41153] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aSLHpw13QPZSi6O8umV2NgAAAIA"]
[Sun Nov 23 16:36:55.430177 2025] [proxy_fcgi:error] [pid 38824:tid 38834] [client 140.99.1.33:54299] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:36:55.530652 2025] [:error] [pid 38824:tid 38851] [client 140.99.1.33:54299] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aSLHp08WZjXLvbHTHPeZhAAAANg"]
[Sun Nov 23 16:36:55.765571 2025] [:error] [pid 38739:tid 38778] [client 140.99.1.13:27657] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aSLHpwdvEgJm2n2cDmoLzwAAAEk"]
[Sun Nov 23 16:36:56.350923 2025] [:error] [pid 44652:tid 44708] [client 140.99.1.71:59651] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aSLHqNiQFwsyXQDhwyCSuAAAAQI"]
[Sun Nov 23 16:36:56.562535 2025] [:error] [pid 38739:tid 38786] [client 140.99.1.37:60305] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aSLHqAdvEgJm2n2cDmoL6wAAAFE"]
[Sun Nov 23 16:36:57.624783 2025] [:error] [pid 38738:tid 38754] [client 140.99.1.30:59261] [client 140.99.1.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/wp-2019.php"] [unique_id "aSLHqQytc6TL9XavPmPb_QAAAAw"]
[Sun Nov 23 16:36:57.879844 2025] [:error] [pid 38824:tid 38844] [client 140.99.1.2:27051] [client 140.99.1.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aSLHqU8WZjXLvbHTHPeZvgAAANE"]
[Sun Nov 23 16:36:58.190634 2025] [:error] [pid 38824:tid 38851] [client 140.99.1.62:26055] [client 140.99.1.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/log.php"] [unique_id "aSLHqk8WZjXLvbHTHPeZzQAAANg"]
[Sun Nov 23 16:36:58.436468 2025] [:error] [pid 44652:tid 44715] [client 140.99.1.6:59773] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aSLHqtiQFwsyXQDhwyCS6QAAAQk"]
[Sun Nov 23 16:36:58.680027 2025] [:error] [pid 38738:tid 38754] [client 140.99.1.38:61153] [client 140.99.1.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aSLHqgytc6TL9XavPmPcGgAAAAw"]
[Sun Nov 23 16:36:58.866900 2025] [:error] [pid 38739:tid 38788] [client 140.99.1.69:61317] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/aw.php"] [unique_id "aSLHqgdvEgJm2n2cDmoMPAAAAFM"]
[Sun Nov 23 16:36:59.509203 2025] [:error] [pid 38738:tid 38757] [client 140.99.1.39:43763] [client 140.99.1.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/db.php"] [unique_id "aSLHqwytc6TL9XavPmPcPwAAAA8"]
[Sun Nov 23 16:36:59.733200 2025] [:error] [pid 38739:tid 38778] [client 140.99.1.63:43159] [client 140.99.1.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/install.php"] [unique_id "aSLHqwdvEgJm2n2cDmoMWgAAAEk"]
[Sun Nov 23 16:37:00.297658 2025] [:error] [pid 38740:tid 38799] [client 140.99.1.18:30223] [client 140.99.1.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aSLHrA13QPZSi6O8umV2mQAAAIM"]
[Sun Nov 23 16:37:00.530165 2025] [:error] [pid 38738:tid 38744] [client 140.99.1.75:44353] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aSLHrAytc6TL9XavPmPcWQAAAAI"]
[Sun Nov 23 16:37:01.008519 2025] [:error] [pid 38738:tid 38752] [client 140.99.1.71:45083] [client 140.99.1.71] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/template-less.php"] [unique_id "aSLHrQytc6TL9XavPmPcYgAAAAo"]
[Sun Nov 23 16:37:01.196216 2025] [:error] [pid 44652:tid 44725] [client 140.99.1.16:64841] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aSLHrdiQFwsyXQDhwyCTRAAAARM"]
[Sun Nov 23 16:37:02.318876 2025] [:error] [pid 38740:tid 38811] [client 140.99.1.46:62125] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/min.php"] [unique_id "aSLHrg13QPZSi6O8umV22wAAAI8"]
[Sun Nov 23 16:37:02.613073 2025] [:error] [pid 38824:tid 38849] [client 140.99.1.31:58079] [client 140.99.1.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aSLHrk8WZjXLvbHTHPeaGgAAANY"]
[Sun Nov 23 16:37:03.044743 2025] [:error] [pid 44652:tid 44725] [client 140.99.1.13:30221] [client 140.99.1.13] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/file.php"] [unique_id "aSLHr9iQFwsyXQDhwyCTdQAAARM"]
[Sun Nov 23 16:37:03.427660 2025] [:error] [pid 38824:tid 38829] [client 140.99.1.20:52543] [client 140.99.1.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aSLHr08WZjXLvbHTHPeaKQAAAMI"]
[Sun Nov 23 16:37:03.722220 2025] [:error] [pid 38739:tid 38788] [client 140.99.1.48:27019] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/load.php"] [unique_id "aSLHrwdvEgJm2n2cDmoM0gAAAFM"]
[Sun Nov 23 16:37:03.954211 2025] [:error] [pid 38740:tid 38798] [client 140.99.1.16:49193] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aSLHrw13QPZSi6O8umV3AQAAAII"]
[Sun Nov 23 16:37:04.179012 2025] [:error] [pid 38740:tid 38814] [client 140.99.1.16:36777] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aSLHsA13QPZSi6O8umV3CAAAAJI"]
[Sun Nov 23 16:37:04.723318 2025] [:error] [pid 38739:tid 38771] [client 140.99.1.37:27327] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aSLHsAdvEgJm2n2cDmoM8wAAAEI"]
[Sun Nov 23 16:37:05.144120 2025] [:error] [pid 38738:tid 38746] [client 140.99.1.16:25439] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aSLHsQytc6TL9XavPmPc3gAAAAQ"]
[Sun Nov 23 16:37:05.749980 2025] [:error] [pid 38740:tid 38818] [client 140.99.1.62:47145] [client 140.99.1.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aSLHsQ13QPZSi6O8umV3LwAAAJY"]
[Sun Nov 23 16:37:05.944442 2025] [:error] [pid 38739:tid 38780] [client 140.99.1.8:30971] [client 140.99.1.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aSLHsQdvEgJm2n2cDmoNFgAAAEs"]
[Sun Nov 23 16:37:06.312732 2025] [:error] [pid 38824:tid 38841] [client 140.99.1.39:57839] [client 140.99.1.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aSLHsk8WZjXLvbHTHPeacgAAAM4"]
[Sun Nov 23 16:37:11.404614 2025] [:error] [pid 44652:tid 44718] [client 140.99.1.73:33587] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/system.php"] [unique_id "aSLHt9iQFwsyXQDhwyCUlQAAAQw"]
[Sun Nov 23 16:37:11.688932 2025] [:error] [pid 38824:tid 38845] [client 140.99.1.16:40585] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aSLHt08WZjXLvbHTHPebAQAAANI"]
[Sun Nov 23 16:37:12.135474 2025] [:error] [pid 44652:tid 44726] [client 140.99.1.68:38205] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aSLHuNiQFwsyXQDhwyCUpQAAARQ"]
[Sun Nov 23 16:37:12.403260 2025] [:error] [pid 38738:tid 38743] [client 140.99.1.28:56411] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aSLHuAytc6TL9XavPmPdvQAAAAE"]
[Sun Nov 23 16:37:12.688658 2025] [:error] [pid 38740:tid 38811] [client 140.99.1.47:39553] [client 140.99.1.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aSLHuA13QPZSi6O8umV3vgAAAI8"]
[Sun Nov 23 16:46:05.780432 2025] [:error] [pid 16066:tid 16093] [client 140.99.1.27:50197] [client 140.99.1.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/core.php"] [unique_id "aSLJzfq-c47Q5mW5E9F55gAAAZg"]
[Sun Nov 23 16:46:09.690096 2025] [:error] [pid 38739:tid 38782] [client 140.99.1.48:23687] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aSLJ0QdvEgJm2n2cDmo4NQAAAE0"]
[Sun Nov 23 16:46:10.312508 2025] [:error] [pid 14602:tid 14641] [client 140.99.1.67:59171] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aSLJ0h-I77jdD81pU-mmagAAAVQ"]
[Sun Nov 23 16:46:11.655082 2025] [:error] [pid 17534:tid 17554] [client 140.99.1.73:31415] [client 140.99.1.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aSLJ03PX9nXBrhgM8swsDwAAAdI"]
[Sun Nov 23 16:46:12.839900 2025] [:error] [pid 16066:tid 16069] [client 140.99.1.9:27493] [client 140.99.1.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aSLJ1Pq-c47Q5mW5E9F6YQAAAYA"]
[Sun Nov 23 16:46:18.956273 2025] [:error] [pid 38824:tid 38840] [client 140.99.1.38:32819] [client 140.99.1.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aSLJ2k8WZjXLvbHTHPfCvgAAAM0"]
[Sun Nov 23 16:46:19.806117 2025] [:error] [pid 44652:tid 44726] [client 140.99.1.47:37231] [client 140.99.1.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aSLJ29iQFwsyXQDhwyC9bQAAARQ"]
[Sun Nov 23 16:46:20.127504 2025] [:error] [pid 16066:tid 16084] [client 140.99.1.48:35835] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aSLJ3Pq-c47Q5mW5E9F6-QAAAY8"]
[Sun Nov 23 16:46:20.398667 2025] [:error] [pid 17534:tid 17538] [client 140.99.1.75:50307] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aSLJ3HPX9nXBrhgM8swssQAAAcI"]
[Sun Nov 23 16:46:20.832064 2025] [:error] [pid 38739:tid 38786] [client 140.99.1.43:55405] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aSLJ3AdvEgJm2n2cDmo42AAAAFE"]
[Sun Nov 23 16:46:21.081497 2025] [:error] [pid 38740:tid 38804] [client 140.99.1.75:53823] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aSLJ3Q13QPZSi6O8umWpggAAAIg"]
[Sun Nov 23 16:46:21.396348 2025] [:error] [pid 16066:tid 16086] [client 140.99.1.74:56041] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aSLJ3fq-c47Q5mW5E9F7FgAAAZE"]
[Sun Nov 23 16:46:21.878523 2025] [:error] [pid 38739:tid 38790] [client 140.99.1.11:56267] [client 140.99.1.11] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "aSLJ3QdvEgJm2n2cDmo47AAAAFU"]
[Sun Nov 23 16:46:22.303737 2025] [:error] [pid 16066:tid 16087] [client 140.99.1.44:65053] [client 140.99.1.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aSLJ3vq-c47Q5mW5E9F7HwAAAZI"]
[Sun Nov 23 16:46:22.653615 2025] [:error] [pid 16066:tid 16087] [client 140.99.1.69:40981] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aSLJ3vq-c47Q5mW5E9F7JwAAAZI"]
[Sun Nov 23 16:46:22.975369 2025] [:error] [pid 38738:tid 38756] [client 140.99.1.9:62099] [client 140.99.1.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aSLJ3gytc6TL9XavPmMMxwAAAA4"]
[Sun Nov 23 16:46:32.279959 2025] [:error] [pid 16066:tid 16085] [client 140.99.1.74:26589] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aSLJ6Pq-c47Q5mW5E9F7xAAAAZA"]
[Sun Nov 23 16:46:32.663092 2025] [:error] [pid 16066:tid 16073] [client 140.99.1.68:37727] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aSLJ6Pq-c47Q5mW5E9F71AAAAYQ"]
[Sun Nov 23 16:46:33.253094 2025] [:error] [pid 38824:tid 38829] [client 140.99.1.27:60615] [client 140.99.1.27] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aSLJ6U8WZjXLvbHTHPfDvQAAAMI"]
[Sun Nov 23 16:46:33.910402 2025] [:error] [pid 38740:tid 38819] [client 140.99.1.75:37681] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aSLJ6Q13QPZSi6O8umWqAAAAAJc"]
[Sun Nov 23 16:46:34.789439 2025] [:error] [pid 38739:tid 38776] [client 140.99.1.75:59101] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aSLJ6gdvEgJm2n2cDmo6PQAAAEc"]
[Sun Nov 23 16:46:35.182155 2025] [:error] [pid 38739:tid 38792] [client 140.99.1.75:62239] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aSLJ6wdvEgJm2n2cDmo6SwAAAFc"]
[Sun Nov 23 16:46:35.724087 2025] [:error] [pid 44652:tid 44715] [client 140.99.1.28:59707] [client 140.99.1.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aSLJ69iQFwsyXQDhwyC-CwAAAQk"]
[Sun Nov 23 16:46:36.771620 2025] [:error] [pid 44652:tid 44730] [client 140.99.1.65:49491] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aSLJ7NiQFwsyXQDhwyC-GAAAARg"]
[Sun Nov 23 16:46:37.987635 2025] [:error] [pid 44652:tid 44712] [client 140.99.1.63:55363] [client 140.99.1.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aSLJ7diQFwsyXQDhwyC-JwAAAQY"]
[Sun Nov 23 16:46:38.933442 2025] [:error] [pid 16066:tid 16093] [client 140.99.1.6:33015] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aSLJ7vq-c47Q5mW5E9F8dwAAAZg"]
[Sun Nov 23 16:46:39.162903 2025] [:error] [pid 17534:tid 17537] [client 140.99.1.63:57805] [client 140.99.1.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aSLJ73PX9nXBrhgM8swuwQAAAcE"]
[Sun Nov 23 16:46:39.395810 2025] [:error] [pid 44652:tid 44724] [client 140.99.1.24:23931] [client 140.99.1.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aSLJ79iQFwsyXQDhwyC-LwAAARI"]
[Sun Nov 23 16:46:40.718235 2025] [:error] [pid 38824:tid 38848] [client 140.99.1.75:54697] [client 140.99.1.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aSLJ8E8WZjXLvbHTHPfESAAAANU"]
[Sun Nov 23 16:46:41.374405 2025] [:error] [pid 17534:tid 17550] [client 140.99.1.6:49107] [client 140.99.1.6] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.6, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aSLJ8XPX9nXBrhgM8swvCwAAAc4"]
[Sun Nov 23 16:46:52.850570 2025] [:error] [pid 17534:tid 17553] [client 140.99.1.6:49107] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aSLJ_HPX9nXBrhgM8swwZwAAAdE"]
[Sun Nov 23 16:46:53.333973 2025] [:error] [pid 14602:tid 14621] [client 140.99.1.8:60329] [client 140.99.1.8] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.8, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aSLJ_R-I77jdD81pU-mo0QAAAUA"]
[Sun Nov 23 16:46:53.489419 2025] [:error] [pid 14602:tid 14631] [client 140.99.1.8:60329] [client 140.99.1.8] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/autoload_classmap/function.php"] [unique_id "aSLJ_R-I77jdD81pU-mo0wAAAUo"]
[Sun Nov 23 16:46:53.919591 2025] [:error] [pid 17534:tid 17554] [client 140.99.1.9:25373] [client 140.99.1.9] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/item.php"] [unique_id "aSLJ_XPX9nXBrhgM8swwkQAAAdI"]
[Sun Nov 23 16:46:55.390216 2025] [:error] [pid 17534:tid 17547] [client 140.99.1.78:54123] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aSLJ_3PX9nXBrhgM8sww7AAAAcs"]
[Sun Nov 23 16:46:56.941568 2025] [:error] [pid 38824:tid 38838] [client 140.99.1.33:25647] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aSLKAE8WZjXLvbHTHPfFTwAAAMs"]
[Sun Nov 23 16:46:57.446023 2025] [:error] [pid 38740:tid 38812] [client 140.99.1.8:37957] [client 140.99.1.8] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aSLKAQ13QPZSi6O8umWrQwAAAJA"]
[Sun Nov 23 16:46:58.171519 2025] [:error] [pid 17534:tid 17551] [client 140.99.1.10:43685] [client 140.99.1.10] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.10, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aSLKAnPX9nXBrhgM8swxoQAAAc8"]
[Sun Nov 23 16:46:58.269448 2025] [:error] [pid 17534:tid 17548] [client 140.99.1.10:43685] [client 140.99.1.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aSLKAnPX9nXBrhgM8swxqgAAAcw"]
[Sun Nov 23 16:47:01.132269 2025] [:error] [pid 17534:tid 17554] [client 140.99.1.14:49949] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aSLKBXPX9nXBrhgM8swyPgAAAdI"]
[Sun Nov 23 16:47:01.875168 2025] [:error] [pid 17534:tid 17558] [client 140.99.1.33:34279] [client 140.99.1.33] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.33, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aSLKBXPX9nXBrhgM8swyfAAAAdY"]
[Sun Nov 23 16:47:02.511762 2025] [:error] [pid 17534:tid 17558] [client 140.99.1.33:34279] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aSLKBnPX9nXBrhgM8swyuQAAAdY"]
[Sun Nov 23 16:47:02.885719 2025] [:error] [pid 44652:tid 44707] [client 140.99.1.46:57437] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aSLKBtiQFwsyXQDhwyDAWAAAAQE"]
[Sun Nov 23 16:47:03.656251 2025] [:error] [pid 17534:tid 17555] [client 140.99.1.30:28967] [client 140.99.1.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aSLKB3PX9nXBrhgM8swzCwAAAdM"]
[Sun Nov 23 16:47:04.267654 2025] [:error] [pid 14602:tid 14641] [client 140.99.1.46:39659] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aSLKCB-I77jdD81pU-mpnAAAAVQ"]
[Sun Nov 23 16:47:04.468498 2025] [:error] [pid 17534:tid 17546] [client 140.99.1.67:44651] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aSLKCHPX9nXBrhgM8swzUAAAAco"]
[Sun Nov 23 16:47:05.407102 2025] [:error] [pid 44652:tid 44726] [client 140.99.1.14:43197] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aSLKCdiQFwsyXQDhwyDAeAAAARQ"]
[Sun Nov 23 16:47:05.774708 2025] [:error] [pid 38739:tid 38784] [client 140.99.1.52:21429] [client 140.99.1.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aSLKCQdvEgJm2n2cDmo8OAAAAE8"]
[Sun Nov 23 16:47:06.411525 2025] [:error] [pid 38824:tid 38831] [client 140.99.1.52:29223] [client 140.99.1.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aSLKCk8WZjXLvbHTHPfGIQAAAMQ"]
[Sun Nov 23 16:47:07.169748 2025] [:error] [pid 38739:tid 38792] [client 140.99.1.7:30683] [client 140.99.1.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aSLKCwdvEgJm2n2cDmo8ZgAAAFc"]
[Sun Nov 23 16:47:08.753748 2025] [:error] [pid 16066:tid 16074] [client 140.99.1.48:33713] [client 140.99.1.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/click.php"] [unique_id "aSLKDPq-c47Q5mW5E9F-XQAAAYU"]
[Sun Nov 23 16:47:09.463676 2025] [:error] [pid 38824:tid 38843] [client 140.99.1.69:35729] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aSLKDU8WZjXLvbHTHPfGTgAAANA"]
[Sun Nov 23 16:47:10.815065 2025] [:error] [pid 14602:tid 14626] [client 140.99.1.42:51111] [client 140.99.1.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aSLKDh-I77jdD81pU-mqTAAAAUU"]
[Sun Nov 23 16:47:11.077471 2025] [:error] [pid 38740:tid 38802] [client 140.99.1.10:41237] [client 140.99.1.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aSLKDw13QPZSi6O8umWsMwAAAIY"]
[Sun Nov 23 16:47:11.288913 2025] [:error] [pid 38739:tid 38769] [client 140.99.1.77:37945] [client 140.99.1.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aSLKDwdvEgJm2n2cDmo82QAAAEA"]
[Sun Nov 23 16:47:11.580152 2025] [:error] [pid 44652:tid 44720] [client 140.99.1.46:62743] [client 140.99.1.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aSLKD9iQFwsyXQDhwyDA-QAAAQ4"]
[Sun Nov 23 16:47:12.658237 2025] [:error] [pid 38824:tid 38841] [client 140.99.1.24:29929] [client 140.99.1.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aSLKEE8WZjXLvbHTHPfGhwAAAM4"]
[Sun Nov 23 16:47:12.889023 2025] [:error] [pid 38738:tid 38751] [client 140.99.1.24:40539] [client 140.99.1.24] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aSLKEAytc6TL9XavPmMPmAAAAAk"]
[Sun Nov 23 16:47:13.537404 2025] [:error] [pid 44652:tid 44729] [client 140.99.1.10:21463] [client 140.99.1.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aSLKEdiQFwsyXQDhwyDBJQAAARc"]
[Sun Nov 23 16:47:13.798120 2025] [:error] [pid 17534:tid 17555] [client 140.99.1.17:26343] [client 140.99.1.17] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aSLKEXPX9nXBrhgM8sw09gAAAdM"]
[Sun Nov 23 16:47:13.997600 2025] [:error] [pid 38824:tid 38830] [client 140.99.1.67:46365] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aSLKEU8WZjXLvbHTHPfGmAAAAMM"]
[Sun Nov 23 16:47:14.224918 2025] [:error] [pid 17534:tid 17556] [client 140.99.1.30:54053] [client 140.99.1.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aSLKEnPX9nXBrhgM8sw1DgAAAdQ"]
[Sun Nov 23 16:47:14.765271 2025] [:error] [pid 38738:tid 38765] [client 140.99.1.33:41863] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aSLKEgytc6TL9XavPmMPvwAAABc"]
[Sun Nov 23 16:47:15.273433 2025] [:error] [pid 38740:tid 38799] [client 140.99.1.6:20481] [client 140.99.1.6] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aSLKEw13QPZSi6O8umWsjwAAAIM"]
[Sun Nov 23 16:47:16.484115 2025] [:error] [pid 38739:tid 38778] [client 140.99.1.33:50301] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aSLKFAdvEgJm2n2cDmo9kwAAAEk"]
[Sun Nov 23 16:47:23.354391 2025] [:error] [pid 16066:tid 16085] [client 140.99.1.33:45277] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aSLKG_q-c47Q5mW5E9F_jAAAAZA"]
[Sun Nov 23 16:47:24.030672 2025] [:error] [pid 14602:tid 14625] [client 140.99.1.3:60137] [client 140.99.1.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aSLKHB-I77jdD81pU-mrnAAAAUQ"]
[Sun Nov 23 16:47:24.245445 2025] [:error] [pid 38738:tid 38758] [client 140.99.1.14:62547] [client 140.99.1.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aSLKHAytc6TL9XavPmMQuAAAABA"]
[Sun Nov 23 16:47:25.033494 2025] [:error] [pid 14602:tid 14625] [client 140.99.1.65:33271] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aSLKHR-I77jdD81pU-mrtAAAAUQ"]
[Sun Nov 23 16:47:25.875183 2025] [proxy_fcgi:error] [pid 44652:tid 44719] [client 140.99.1.49:65279] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:47:26.049987 2025] [proxy_fcgi:error] [pid 44652:tid 44725] [client 140.99.1.49:65279] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:47:26.222629 2025] [proxy_fcgi:error] [pid 44652:tid 44726] [client 140.99.1.49:65279] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:47:26.919562 2025] [:error] [pid 44652:tid 44724] [client 140.99.1.49:65279] [client 140.99.1.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aSLKHtiQFwsyXQDhwyDChAAAARI"]
[Sun Nov 23 16:47:27.147697 2025] [:error] [pid 17534:tid 17536] [client 140.99.1.65:47729] [client 140.99.1.65] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aSLKH3PX9nXBrhgM8sw2ZwAAAcA"]
[Sun Nov 23 16:47:27.395398 2025] [:error] [pid 38740:tid 38800] [client 140.99.1.15:64167] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aSLKHw13QPZSi6O8umWtZAAAAIQ"]
[Sun Nov 23 16:47:27.730388 2025] [:error] [pid 38739:tid 38789] [client 140.99.1.63:32191] [client 140.99.1.63] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aSLKHwdvEgJm2n2cDmo-6gAAAFQ"]
[Sun Nov 23 16:47:27.941474 2025] [:error] [pid 38824:tid 38849] [client 140.99.1.76:20685] [client 140.99.1.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aSLKH08WZjXLvbHTHPfHsQAAANY"]
[Sun Nov 23 16:47:28.262892 2025] [:error] [pid 38738:tid 38756] [client 140.99.1.70:63649] [client 140.99.1.70] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aSLKIAytc6TL9XavPmMRMAAAAA4"]
[Sun Nov 23 16:47:28.900977 2025] [:error] [pid 38738:tid 38745] [client 140.99.1.16:54821] [client 140.99.1.16] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aSLKIAytc6TL9XavPmMRPQAAAAM"]
[Sun Nov 23 16:47:29.216673 2025] [:error] [pid 38740:tid 38808] [client 140.99.1.5:53525] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aSLKIQ13QPZSi6O8umWtnAAAAIw"]
[Sun Nov 23 16:47:29.471790 2025] [:error] [pid 17534:tid 17559] [client 140.99.1.69:55747] [client 140.99.1.69] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aSLKIXPX9nXBrhgM8sw2qgAAAdc"]
[Sun Nov 23 16:47:29.843868 2025] [:error] [pid 38738:tid 38756] [client 140.99.1.78:26091] [client 140.99.1.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aSLKIQytc6TL9XavPmMRUgAAAA4"]
[Sun Nov 23 16:47:30.527022 2025] [:error] [pid 38739:tid 38770] [client 140.99.1.38:21487] [client 140.99.1.38] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aSLKIgdvEgJm2n2cDmo_WAAAAEE"]
[Sun Nov 23 16:47:30.915630 2025] [:error] [pid 17534:tid 17537] [client 140.99.1.74:34971] [client 140.99.1.74] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aSLKInPX9nXBrhgM8sw20QAAAcE"]
[Sun Nov 23 16:47:31.441691 2025] [:error] [pid 44652:tid 44723] [client 140.99.1.67:49739] [client 140.99.1.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aSLKI9iQFwsyXQDhwyDDBAAAARE"]
[Sun Nov 23 16:47:31.944170 2025] [:error] [pid 17534:tid 17547] [client 140.99.1.39:26271] [client 140.99.1.39] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aSLKI3PX9nXBrhgM8sw27QAAAcs"]
[Sun Nov 23 16:47:32.774250 2025] [:error] [pid 38824:tid 38833] [client 140.99.1.10:28975] [client 140.99.1.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aSLKJE8WZjXLvbHTHPfIBAAAAMY"]
[Sun Nov 23 16:47:33.513008 2025] [:error] [pid 44652:tid 44707] [client 140.99.1.53:51383] [client 140.99.1.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aSLKJdiQFwsyXQDhwyDDMwAAAQE"]
[Sun Nov 23 16:47:34.085583 2025] [:error] [pid 38740:tid 38813] [client 140.99.1.33:44527] [client 140.99.1.33] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aSLKJg13QPZSi6O8umWt-QAAAJE"]
[Sun Nov 23 16:47:34.317110 2025] [:error] [pid 44652:tid 44723] [client 140.99.1.18:60835] [client 140.99.1.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/autoload_classmap.php"] [unique_id "aSLKJtiQFwsyXQDhwyDDPAAAARE"]
[Sun Nov 23 16:47:37.047225 2025] [:error] [pid 16066:tid 16070] [client 140.99.1.5:46593] [client 140.99.1.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aSLKKPq-c47Q5mW5E9GA8gAAAYE"]
[Sun Nov 23 16:47:37.247958 2025] [:error] [pid 17534:tid 17549] [client 140.99.1.68:44137] [client 140.99.1.68] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aSLKKXPX9nXBrhgM8sw3XwAAAc0"]
[Sun Nov 23 16:47:37.528748 2025] [:error] [pid 38824:tid 38847] [client 140.99.1.47:23427] [client 140.99.1.47] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 140.99.1.47, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aSLKKU8WZjXLvbHTHPfILAAAANQ"]
[Sun Nov 23 16:47:37.798469 2025] [:error] [pid 38824:tid 38841] [client 140.99.1.47:23427] [client 140.99.1.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aSLKKU8WZjXLvbHTHPfIMQAAAM4"]
[Sun Nov 23 16:47:38.353790 2025] [:error] [pid 44652:tid 44708] [client 140.99.1.42:28743] [client 140.99.1.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aSLKKtiQFwsyXQDhwyDDsQAAAQI"]
[Sun Nov 23 16:47:38.577966 2025] [:error] [pid 38824:tid 38846] [client 140.99.1.18:45003] [client 140.99.1.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aSLKKk8WZjXLvbHTHPfIOgAAANM"]
[Sun Nov 23 16:47:39.327450 2025] [:error] [pid 38824:tid 38828] [client 140.99.1.7:24207] [client 140.99.1.7] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aSLKK08WZjXLvbHTHPfISwAAAME"]
[Sun Nov 23 16:47:39.577536 2025] [:error] [pid 14602:tid 14629] [client 140.99.1.26:22979] [client 140.99.1.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aSLKKx-I77jdD81pU-muTQAAAUg"]
[Sun Nov 23 16:47:40.759788 2025] [:error] [pid 38824:tid 38850] [client 140.99.1.15:59813] [client 140.99.1.15] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aSLKLE8WZjXLvbHTHPfIZwAAANc"]
[Sun Nov 23 16:47:41.225617 2025] [proxy_fcgi:error] [pid 38739:tid 38786] [client 140.99.1.37:40515] AH01071: Got error 'Primary script unknown'
[Sun Nov 23 16:47:41.498920 2025] [:error] [pid 38739:tid 38769] [client 140.99.1.37:40515] [client 140.99.1.37] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/function.php"] [unique_id "aSLKLQdvEgJm2n2cDmo_1gAAAEA"]
[Sun Nov 23 16:47:41.759394 2025] [:error] [pid 17534:tid 17549] [client 140.99.1.43:57725] [client 140.99.1.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aSLKLXPX9nXBrhgM8sw4AwAAAc0"]
[Sun Nov 23 16:47:42.310796 2025] [:error] [pid 38738:tid 38762] [client 140.99.1.72:61009] [client 140.99.1.72] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aSLKLgytc6TL9XavPmMSCwAAABQ"]
[Sun Nov 23 16:47:42.618117 2025] [:error] [pid 17534:tid 17553] [client 140.99.1.32:59791] [client 140.99.1.32] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aSLKLnPX9nXBrhgM8sw4KwAAAdE"]
[Mon Nov 24 15:45:14.281015 2025] [:error] [pid 48601:tid 48675] [client 35.183.71.19:56040] [client 35.183.71.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aSQNCoMM4MaVTk74-AagAAAAAhI"]
[Mon Nov 24 15:53:34.000743 2025] [:error] [pid 49900:tid 49921] [client 44.245.220.126:36934] [client 44.245.220.126] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aSQO_TCyPLrvg06aorn6XQAAABM"]
[Mon Nov 24 22:05:58.133712 2025] [:error] [pid 48601:tid 48678] [client 3.86.214.214:59590] [client 3.86.214.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aSRmRoMM4MaVTk74-AbrSAAAAhU"]
[Tue Nov 25 00:16:00.194828 2025] [:error] [pid 9630:tid 9634] [client 3.86.214.214:39242] [client 3.86.214.214] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aSSEwCrSgUgPGkizt2pePgAAAEI"]
[Tue Nov 25 18:53:15.991708 2025] [:error] [pid 14078:tid 14147] [client 138.199.60.187:55668] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "aSWKm9VXYbb0ii_rVoI4CAAAAIo"]
[Tue Nov 25 18:53:16.262275 2025] [:error] [pid 14076:tid 14097] [client 138.199.60.187:55872] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "aSWKnHsB4Gz6Qw-pvBsKdAAAABA"]
[Tue Nov 25 18:53:16.495056 2025] [:error] [pid 2987:tid 3007] [client 138.199.60.187:56080] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "aSWKnM-djEt-pTzPxnyUQgAAAVI"]
[Tue Nov 25 18:53:16.738685 2025] [:error] [pid 14077:tid 14125] [client 138.199.60.187:56338] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "aSWKnBG9n7UHEkwDTyh-ewAAAE8"]
[Tue Nov 25 18:53:17.020773 2025] [:error] [pid 28842:tid 29000] [client 138.199.60.187:56588] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "aSWKndNmoaPf6T4-6C2EBQAAA0o"]
[Tue Nov 25 18:53:17.427756 2025] [:error] [pid 28740:tid 28813] [client 138.199.60.187:56878] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aSWKnVppQCoYxWW6V0VzKQAAAlY"]
[Tue Nov 25 18:53:17.691705 2025] [:error] [pid 28842:tid 28996] [client 138.199.60.187:57152] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aSWKndNmoaPf6T4-6C2ECgAAA0Y"]
[Tue Nov 25 18:53:17.977109 2025] [:error] [pid 28740:tid 28810] [client 138.199.60.187:53536] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aSWKnVppQCoYxWW6V0VzMQAAAlM"]
[Tue Nov 25 18:53:18.217991 2025] [:error] [pid 14077:tid 14115] [client 138.199.60.187:53608] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aSWKnhG9n7UHEkwDTyh-jAAAAEU"]
[Tue Nov 25 18:53:18.461968 2025] [:error] [pid 14077:tid 14133] [client 138.199.60.187:53674] [client 138.199.60.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aSWKnhG9n7UHEkwDTyh-jgAAAFc"]
[Wed Nov 26 01:21:38.080321 2025] [:error] [pid 14076:tid 14095] [client 213.21.239.4:34992] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/measureyourbrand/.git/config"] [unique_id "aSXlonsB4Gz6Qw-pvBuF0wAAAA4"]
[Wed Nov 26 01:21:38.082139 2025] [:error] [pid 28609:tid 28624] [client 213.21.239.4:34994] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/common/.git/config"] [unique_id "aSXloiGGdT-nZJVs3x0veAAAAYY"]
[Wed Nov 26 01:21:38.091186 2025] [:error] [pid 28609:tid 28641] [client 213.21.239.4:34850] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/app/.git/config"] [unique_id "aSXloiGGdT-nZJVs3x0vegAAAZc"]
[Wed Nov 26 01:21:38.092124 2025] [:error] [pid 28609:tid 28639] [client 213.21.239.4:34890] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/css../.git/config"] [unique_id "aSXloiGGdT-nZJVs3x0vewAAAZU"]
[Wed Nov 26 01:21:38.096695 2025] [:error] [pid 28739:tid 28764] [client 213.21.239.4:34912] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dev/.git/config"] [unique_id "aSXlohxGpKmlkG4FexT9QAAAAgI"]
[Wed Nov 26 01:21:38.100780 2025] [:error] [pid 14076:tid 14092] [client 213.21.239.4:34960] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/measureyourbrand/..;/.git/config"] [unique_id "aSXlonsB4Gz6Qw-pvBuF1QAAAAs"]
[Wed Nov 26 01:21:38.105168 2025] [:error] [pid 28609:tid 28629] [client 213.21.239.4:34966] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin/.git/config"] [unique_id "aSXloiGGdT-nZJVs3x0vfQAAAYs"]
[Wed Nov 26 01:21:38.110395 2025] [:error] [pid 28609:tid 28635] [client 213.21.239.4:34962] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/application/.git/config"] [unique_id "aSXloiGGdT-nZJVs3x0vfgAAAZE"]
[Wed Nov 26 01:21:38.123409 2025] [:error] [pid 28609:tid 28640] [client 213.21.239.4:34864] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/backup/.git/config"] [unique_id "aSXloiGGdT-nZJVs3x0vgAAAAZY"]
[Wed Nov 26 01:21:38.123712 2025] [:error] [pid 28739:tid 28774] [client 213.21.239.4:34906] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/api/.git/config"] [unique_id "aSXlohxGpKmlkG4FexT9QwAAAgw"]
[Wed Nov 26 01:21:38.124877 2025] [:error] [pid 28836:tid 29011] [client 213.21.239.4:34928] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/measureyourbrand/;/.git/config"] [unique_id "aSXlopwNRsoxcLQGkTciIQAAAtU"]
[Wed Nov 26 01:21:38.125195 2025] [:error] [pid 28739:tid 28782] [client 213.21.239.4:34944] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/measureyourbrand/static../.git/config"] [unique_id "aSXlohxGpKmlkG4FexT9RAAAAhQ"]
[Wed Nov 26 01:21:38.126097 2025] [:error] [pid 28609:tid 28630] [client 213.21.239.4:34988] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/measureyourbrand/.git/%0Aconfig"] [unique_id "aSXloiGGdT-nZJVs3x0vgQAAAYw"]
[Wed Nov 26 01:21:38.127679 2025] [:error] [pid 28609:tid 28625] [client 213.21.239.4:35014] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/measureyourbrand../.git/config"] [unique_id "aSXloiGGdT-nZJVs3x0vggAAAYc"]
[Wed Nov 26 01:21:38.130713 2025] [:error] [pid 28739:tid 28771] [client 213.21.239.4:34832] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/measureyourbrand/.git/config;.."] [unique_id "aSXlohxGpKmlkG4FexT9RQAAAgk"]
[Wed Nov 26 01:21:38.132426 2025] [:error] [pid 28836:tid 28955] [client 213.21.239.4:34878] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/assets../.git/config"] [unique_id "aSXlopwNRsoxcLQGkTciIgAAAsA"]
[Wed Nov 26 01:21:38.136610 2025] [:error] [pid 14078:tid 14144] [client 213.21.239.4:34956] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/developer/.git/config"] [unique_id "aSXlotVXYbb0ii_rVoLo8AAAAIc"]
[Wed Nov 26 01:21:38.140793 2025] [:error] [pid 14078:tid 14155] [client 213.21.239.4:34954] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/content../.git/config"] [unique_id "aSXlotVXYbb0ii_rVoLo8QAAAJI"]
[Wed Nov 26 01:21:38.144248 2025] [:error] [pid 43843:tid 43865] [client 213.21.239.4:35018] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/measureyourbrand/.git/config;"] [unique_id "aSXlohhx4v3NUNdMKDMlTgAAAdQ"]
[Wed Nov 26 01:21:38.151187 2025] [:error] [pid 43981:tid 43987] [client 213.21.239.4:34876] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/database/.git/config"] [unique_id "aSXloggZn97m_qh_RaGcswAAAwQ"]
[Wed Nov 26 01:21:41.377475 2025] [:error] [pid 14078:tid 14160] [client 213.21.239.4:35528] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/measureyourcause.measureyourbrand.com.au/..;/.git/config"] [unique_id "aSXlpdVXYbb0ii_rVoLo9gAAAJc"]
[Wed Nov 26 01:21:41.382194 2025] [:error] [pid 14077:tid 14131] [client 213.21.239.4:35624] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.git/config;.."] [unique_id "aSXlpRG9n7UHEkwDTygKOwAAAFU"]
[Wed Nov 26 01:21:41.385267 2025] [:error] [pid 14078:tid 14140] [client 213.21.239.4:35478] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/measureyourcause.measureyourbrand.com.au/.git/config;.."] [unique_id "aSXlpdVXYbb0ii_rVoLo9wAAAIM"]
[Wed Nov 26 01:21:41.386093 2025] [:error] [pid 14077:tid 14118] [client 213.21.239.4:35500] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/measureyourcause.measureyourbrand.com.au../.git/config"] [unique_id "aSXlpRG9n7UHEkwDTygKPAAAAEg"]
[Wed Nov 26 01:21:41.390312 2025] [:error] [pid 14078:tid 14159] [client 213.21.239.4:35594] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.git/config;"] [unique_id "aSXlpdVXYbb0ii_rVoLo-gAAAJY"]
[Wed Nov 26 01:21:41.392792 2025] [:error] [pid 14077:tid 14133] [client 213.21.239.4:35658] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.git;/config"] [unique_id "aSXlpRG9n7UHEkwDTygKPQAAAFc"]
[Wed Nov 26 01:21:41.392865 2025] [:error] [pid 14078:tid 14151] [client 213.21.239.4:35692] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/;/.git/config"] [unique_id "aSXlpdVXYbb0ii_rVoLo_AAAAI4"]
[Wed Nov 26 01:21:41.397009 2025] [:error] [pid 14078:tid 14156] [client 213.21.239.4:35592] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/..;/.git/config"] [unique_id "aSXlpdVXYbb0ii_rVoLo_QAAAJM"]
[Wed Nov 26 01:21:41.397739 2025] [:error] [pid 14078:tid 14153] [client 213.21.239.4:35680] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib../.git/config"] [unique_id "aSXlpdVXYbb0ii_rVoLo_gAAAJA"]
[Wed Nov 26 01:21:41.399483 2025] [:error] [pid 14078:tid 14155] [client 213.21.239.4:35684] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/live/.git/config"] [unique_id "aSXlpdVXYbb0ii_rVoLpAQAAAJI"]
[Wed Nov 26 01:21:41.400016 2025] [:error] [pid 14078:tid 14157] [client 213.21.239.4:35766] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/measureyourcause.measureyourbrand.com.au/;/.git/config"] [unique_id "aSXlpdVXYbb0ii_rVoLpAgAAAJQ"]
[Wed Nov 26 01:21:41.403353 2025] [:error] [pid 14077:tid 14117] [client 213.21.239.4:35734] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/message-api/.git/config"] [unique_id "aSXlpRG9n7UHEkwDTygKPgAAAEc"]
[Wed Nov 26 01:21:41.404848 2025] [:error] [pid 14078:tid 14149] [client 213.21.239.4:35824] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/measureyourcause.measureyourbrand.com.au/static../.git/config"] [unique_id "aSXlpdVXYbb0ii_rVoLpAwAAAIw"]
[Wed Nov 26 01:21:41.405143 2025] [:error] [pid 43981:tid 44003] [client 213.21.239.4:35828] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/img../.git/config"] [unique_id "aSXlpQgZn97m_qh_RaGctQAAAxQ"]
[Wed Nov 26 01:21:41.406038 2025] [:error] [pid 14078:tid 14144] [client 213.21.239.4:35544] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/measureyourcause.measureyourbrand.com.au/.git/config"] [unique_id "aSXlpdVXYbb0ii_rVoLpBAAAAIc"]
[Wed Nov 26 01:21:41.407342 2025] [:error] [pid 14077:tid 14115] [client 213.21.239.4:35486] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/measureyourcause.measureyourbrand.com.au/.git/%0Aconfig"] [unique_id "aSXlpRG9n7UHEkwDTygKPwAAAEU"]
[Wed Nov 26 01:21:41.410460 2025] [:error] [pid 14077:tid 14114] [client 213.21.239.4:35580] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/measureyourcause.measureyourbrand.com.au/.git/config;"] [unique_id "aSXlpRG9n7UHEkwDTygKQAAAAEQ"]
[Wed Nov 26 01:21:41.412392 2025] [:error] [pid 14078:tid 14143] [client 213.21.239.4:35678] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/measureyourcause.measureyourbrand.com.au/.git;/config"] [unique_id "aSXlpdVXYbb0ii_rVoLpBQAAAIY"]
[Wed Nov 26 01:21:41.412865 2025] [:error] [pid 14077:tid 14124] [client 213.21.239.4:35672] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.git;/config;"] [unique_id "aSXlpRG9n7UHEkwDTygKQQAAAE4"]
[Wed Nov 26 01:21:41.418039 2025] [:error] [pid 14078:tid 14150] [client 213.21.239.4:35640] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/js../.git/config"] [unique_id "aSXlpdVXYbb0ii_rVoLpCAAAAI0"]
[Wed Nov 26 01:21:41.423842 2025] [:error] [pid 14076:tid 14083] [client 213.21.239.4:35838] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.git/%0Aconfig"] [unique_id "aSXlpXsB4Gz6Qw-pvBuF2AAAAAI"]
[Wed Nov 26 01:21:41.428815 2025] [:error] [pid 14076:tid 14085] [client 213.21.239.4:35792] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/m/.git/config"] [unique_id "aSXlpXsB4Gz6Qw-pvBuF2QAAAAQ"]
[Wed Nov 26 01:21:41.432328 2025] [:error] [pid 28836:tid 28959] [client 213.21.239.4:35724] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/git/.git/config"] [unique_id "aSXlpZwNRsoxcLQGkTciKwAAAsQ"]
[Wed Nov 26 01:21:41.432929 2025] [:error] [pid 28609:tid 28632] [client 213.21.239.4:35744] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/images../.git/config"] [unique_id "aSXlpSGGdT-nZJVs3x0vjgAAAY4"]
[Wed Nov 26 01:21:41.471172 2025] [:error] [pid 14168:tid 14182] [client 213.21.239.4:35878] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aSXlpfR-ZDU0QEgAIIvCGwAAAMs"]
[Wed Nov 26 01:21:43.407222 2025] [:error] [pid 14077:tid 14120] [client 213.21.239.4:57284] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.git;/config"] [unique_id "aSXlpxG9n7UHEkwDTygKUAAAAEo"]
[Wed Nov 26 01:21:43.436710 2025] [:error] [pid 28836:tid 29007] [client 213.21.239.4:57306] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.git;/config;"] [unique_id "aSXlp5wNRsoxcLQGkTciLQAAAtE"]
[Wed Nov 26 01:21:43.438094 2025] [:error] [pid 14077:tid 14130] [client 213.21.239.4:57294] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/measureyourcause.measureyourbrand.com.au/.git;/config"] [unique_id "aSXlpxG9n7UHEkwDTygKUQAAAFQ"]
[Wed Nov 26 01:21:44.387513 2025] [:error] [pid 28739:tid 28783] [client 213.21.239.4:57420] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/measureyourbrand.com.au/.git/config;.."] [unique_id "aSXlqBxGpKmlkG4FexT9TwAAAhU"]
[Wed Nov 26 01:21:44.388276 2025] [:error] [pid 28739:tid 28768] [client 213.21.239.4:57442] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/measureyourbrand.com.au/.git;/config"] [unique_id "aSXlqBxGpKmlkG4FexT9UAAAAgY"]
[Wed Nov 26 01:21:44.391851 2025] [:error] [pid 14078:tid 14137] [client 213.21.239.4:57594] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/new/.git/config"] [unique_id "aSXlqNVXYbb0ii_rVoLpFAAAAIA"]
[Wed Nov 26 01:21:44.392633 2025] [:error] [pid 43843:tid 43852] [client 213.21.239.4:57596] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/measureyourcause/config"] [unique_id "aSXlqBhx4v3NUNdMKDMlVwAAAcc"]
[Wed Nov 26 01:21:44.392642 2025] [:error] [pid 28836:tid 29014] [client 213.21.239.4:57410] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/measureyourbrand.com.au/.git/config;"] [unique_id "aSXlqJwNRsoxcLQGkTciMQAAAtg"]
[Wed Nov 26 01:21:44.393476 2025] [:error] [pid 14078:tid 14153] [client 213.21.239.4:57626] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/.git/config"] [unique_id "aSXlqNVXYbb0ii_rVoLpFQAAAJA"]
[Wed Nov 26 01:21:44.396211 2025] [:error] [pid 14078:tid 14158] [client 213.21.239.4:57648] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/qa/.git/config"] [unique_id "aSXlqNVXYbb0ii_rVoLpFgAAAJU"]
[Wed Nov 26 01:21:44.398051 2025] [:error] [pid 14168:tid 14173] [client 213.21.239.4:57500] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/measureyourbrand.com.au/;/.git/config"] [unique_id "aSXlqPR-ZDU0QEgAIIvCHgAAAMI"]
[Wed Nov 26 01:21:44.401774 2025] [:error] [pid 14078:tid 14144] [client 213.21.239.4:57454] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/measureyourbrand.com.au/.git/%0Aconfig"] [unique_id "aSXlqNVXYbb0ii_rVoLpGAAAAIc"]
[Wed Nov 26 01:21:44.401792 2025] [:error] [pid 14168:tid 14186] [client 213.21.239.4:57564] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/measureyourcause../config"] [unique_id "aSXlqPR-ZDU0QEgAIIvCHwAAAM8"]
[Wed Nov 26 01:21:44.402701 2025] [:error] [pid 28836:tid 29012] [client 213.21.239.4:57528] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/measureyourbrand.com.au/static../.git/config"] [unique_id "aSXlqJwNRsoxcLQGkTciMgAAAtY"]
[Wed Nov 26 01:21:44.404171 2025] [:error] [pid 28836:tid 28969] [client 213.21.239.4:57728] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/measureyourcause/.git/%0Aconfig"] [unique_id "aSXlqJwNRsoxcLQGkTciMwAAAs4"]
[Wed Nov 26 01:21:44.406145 2025] [:error] [pid 28836:tid 28958] [client 213.21.239.4:57730] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/measureyourbrand.com.au/..;/.git/config"] [unique_id "aSXlqJwNRsoxcLQGkTciNAAAAsM"]
[Wed Nov 26 01:21:44.407048 2025] [:error] [pid 2987:tid 3008] [client 213.21.239.4:57426] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/measureyourbrand.com.au../.git/config"] [unique_id "aSXlqM-djEt-pTzPxnwFYQAAAVM"]
[Wed Nov 26 01:21:44.408221 2025] [:error] [pid 28836:tid 28963] [client 213.21.239.4:57798] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/measureyourcause/.git/config;"] [unique_id "aSXlqJwNRsoxcLQGkTciNgAAAsg"]
[Wed Nov 26 01:21:44.410020 2025] [:error] [pid 28836:tid 28957] [client 213.21.239.4:57396] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/measureyourbrand.com.au/.git/config"] [unique_id "aSXlqJwNRsoxcLQGkTciNwAAAsI"]
[Wed Nov 26 01:21:44.426300 2025] [:error] [pid 14077:tid 14112] [client 213.21.239.4:57606] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/prod/.git/config"] [unique_id "aSXlqBG9n7UHEkwDTygKVgAAAEI"]
[Wed Nov 26 01:21:44.426844 2025] [:error] [pid 28739:tid 28780] [client 213.21.239.4:57874] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/measureyourcause../.git/config"] [unique_id "aSXlqBxGpKmlkG4FexT9VgAAAhI"]
[Wed Nov 26 01:21:44.428999 2025] [:error] [pid 14077:tid 14124] [client 213.21.239.4:57514] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/measureyourcause/..;/.git/config"] [unique_id "aSXlqBG9n7UHEkwDTygKVwAAAE4"]
[Wed Nov 26 01:21:44.433245 2025] [:error] [pid 28836:tid 28955] [client 213.21.239.4:57706] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/measureyourbrand.com.au/config"] [unique_id "aSXlqJwNRsoxcLQGkTciOwAAAsA"]
[Wed Nov 26 01:21:44.435419 2025] [:error] [pid 28836:tid 29011] [client 213.21.239.4:57580] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/measureyourcause/.git/config"] [unique_id "aSXlqJwNRsoxcLQGkTciPAAAAtU"]
[Wed Nov 26 01:21:44.452228 2025] [:error] [pid 14077:tid 14122] [client 213.21.239.4:57672] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/measureyourbrand.com.au../config"] [unique_id "aSXlqBG9n7UHEkwDTygKWQAAAEw"]
[Wed Nov 26 01:21:46.387168 2025] [:error] [pid 14078:tid 14137] [client 213.21.239.4:58048] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/measureyourcause/.git/config;.."] [unique_id "aSXlqtVXYbb0ii_rVoLpHQAAAIA"]
[Wed Nov 26 01:21:46.393248 2025] [:error] [pid 14078:tid 14153] [client 213.21.239.4:58092] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/measureyourcause/.git;/config"] [unique_id "aSXlqtVXYbb0ii_rVoLpIAAAAJA"]
[Wed Nov 26 01:21:46.411165 2025] [:error] [pid 14078:tid 14158] [client 213.21.239.4:58066] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/measureyourcause/;/.git/config"] [unique_id "aSXlqtVXYbb0ii_rVoLpIQAAAJU"]
[Wed Nov 26 01:21:46.422213 2025] [:error] [pid 14168:tid 14174] [client 213.21.239.4:58118] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/measureyourbrand.com.au/.git;/config"] [unique_id "aSXlqvR-ZDU0QEgAIIvCIwAAAMM"]
[Wed Nov 26 01:21:46.434511 2025] [:error] [pid 14168:tid 14171] [client 213.21.239.4:58144] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/measureyourcause/config"] [unique_id "aSXlqvR-ZDU0QEgAIIvCJAAAAMA"]
[Wed Nov 26 01:21:46.451489 2025] [:error] [pid 43843:tid 43854] [client 213.21.239.4:58152] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/measureyourbrand.com.au/config"] [unique_id "aSXlqhhx4v3NUNdMKDMlZQAAAck"]
[Wed Nov 26 01:21:46.456669 2025] [:error] [pid 2987:tid 2994] [client 213.21.239.4:58156] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/measureyourcause../config"] [unique_id "aSXlqs-djEt-pTzPxnwFZQAAAUU"]
[Wed Nov 26 01:21:46.465131 2025] [:error] [pid 28739:tid 28780] [client 213.21.239.4:58186] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/measureyourbrand.com.au../config"] [unique_id "aSXlqhxGpKmlkG4FexT9XQAAAhI"]
[Wed Nov 26 01:21:47.396785 2025] [:error] [pid 14077:tid 14127] [client 213.21.239.4:58288] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/.git/config"] [unique_id "aSXlqxG9n7UHEkwDTygKWgAAAFE"]
[Wed Nov 26 01:21:47.397521 2025] [:error] [pid 28836:tid 29010] [client 213.21.239.4:58428] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/staging/.git/config"] [unique_id "aSXlq5wNRsoxcLQGkTciRgAAAtQ"]
[Wed Nov 26 01:21:47.398408 2025] [:error] [pid 43843:tid 43867] [client 213.21.239.4:58274] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/.git/config"] [unique_id "aSXlqxhx4v3NUNdMKDMlaAAAAdY"]
[Wed Nov 26 01:21:47.401600 2025] [:error] [pid 14078:tid 14147] [client 213.21.239.4:58314] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/static../.git/config"] [unique_id "aSXlq9VXYbb0ii_rVoLpKAAAAIo"]
[Wed Nov 26 01:21:47.402523 2025] [:error] [pid 28836:tid 28958] [client 213.21.239.4:58250] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/measureyourcause/static../.git/config"] [unique_id "aSXlq5wNRsoxcLQGkTciSAAAAsM"]
[Wed Nov 26 01:21:47.412283 2025] [:error] [pid 28836:tid 28963] [client 213.21.239.4:58392] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/.git/config"] [unique_id "aSXlq5wNRsoxcLQGkTciSQAAAsg"]
[Wed Nov 26 01:21:47.425879 2025] [:error] [pid 28836:tid 28965] [client 213.21.239.4:58336] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uat/.git/config"] [unique_id "aSXlq5wNRsoxcLQGkTciSwAAAso"]
[Wed Nov 26 01:21:47.440272 2025] [:error] [pid 28836:tid 29008] [client 213.21.239.4:58372] [client 213.21.239.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/web/.git/config"] [unique_id "aSXlq5wNRsoxcLQGkTciTwAAAtI"]
[Wed Nov 26 01:21:48.417151 2025] [:error] [pid 14078:tid 14158] [client 213.21.239.4:58464] [client 213.21.239.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/measureyourcause/.git;/config"] [unique_id "aSXlrNVXYbb0ii_rVoLpKQAAAJU"]
[Wed Nov 26 05:09:47.611311 2025] [:error] [pid 3012:tid 3091] [client 34.75.14.201:54690] [client 34.75.14.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.75.14.201, incrementing ddos counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aSYbG0fo8Sm1Un9NK6grzgAAAJY"]
[Wed Nov 26 05:09:50.893329 2025] [:error] [pid 3012:tid 3090] [client 34.75.14.201:54690] [client 34.75.14.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aSYbHkfo8Sm1Un9NK6gr2QAAAJU"]
[Wed Nov 26 05:09:51.845676 2025] [:error] [pid 38796:tid 38819] [client 34.75.14.201:62963] [client 34.75.14.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aSYbHwGcUUzaXxvjCXOnaAAAAVQ"]
[Wed Nov 26 05:09:52.902163 2025] [:error] [pid 3010:tid 3021] [client 34.75.14.201:50540] [client 34.75.14.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aSYbIEWl16-roARWvItbqwAAAAc"]
[Wed Nov 26 05:09:53.911892 2025] [:error] [pid 3012:tid 3084] [client 34.75.14.201:58657] [client 34.75.14.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aSYbIUfo8Sm1Un9NK6gr2wAAAI8"]
[Wed Nov 26 05:09:54.799054 2025] [:error] [pid 3012:tid 3073] [client 34.75.14.201:51018] [client 34.75.14.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aSYbIkfo8Sm1Un9NK6gr3wAAAIQ"]
[Wed Nov 26 05:09:55.812510 2025] [:error] [pid 3011:tid 3064] [client 34.75.14.201:54831] [client 34.75.14.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aSYbI0b0BA3GljiGlI67nAAAAFY"]
[Wed Nov 26 05:09:56.793725 2025] [:error] [pid 3097:tid 3120] [client 34.75.14.201:49562] [client 34.75.14.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aSYbJOVgdOH9N9jhT56LOAAAANM"]
[Thu Nov 27 02:52:04.696424 2025] [:error] [pid 24826:tid 25128] [client 35.239.245.124:60739] [client 35.239.245.124] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.239.245.124, incrementing ddos counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aSdMVFEvPXLVl-nh-yL1AgAAAQ0"]
[Thu Nov 27 02:52:08.360984 2025] [:error] [pid 24826:tid 25116] [client 35.239.245.124:60739] [client 35.239.245.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aSdMWFEvPXLVl-nh-yL1DQAAAQE"]
[Thu Nov 27 02:52:09.605420 2025] [:error] [pid 54723:tid 54730] [client 35.239.245.124:53218] [client 35.239.245.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aSdMWQ2CEg7QoyDosdIRmQAAAAE"]
[Thu Nov 27 02:52:10.668637 2025] [:error] [pid 54723:tid 54744] [client 35.239.245.124:56977] [client 35.239.245.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aSdMWg2CEg7QoyDosdIRnAAAAA4"]
[Thu Nov 27 02:52:11.891505 2025] [:error] [pid 54723:tid 54743] [client 35.239.245.124:56342] [client 35.239.245.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aSdMWw2CEg7QoyDosdIRnwAAAA0"]
[Thu Nov 27 02:52:12.744568 2025] [:error] [pid 54723:tid 54745] [client 35.239.245.124:56101] [client 35.239.245.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aSdMXA2CEg7QoyDosdIRoQAAAA8"]
[Thu Nov 27 02:52:13.548313 2025] [:error] [pid 8184:tid 8246] [client 35.239.245.124:57907] [client 35.239.245.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aSdMXb-M2IHkRYVrcbOlzgAAAEk"]
[Thu Nov 27 02:52:14.386533 2025] [:error] [pid 25262:tid 25332] [client 35.239.245.124:57726] [client 35.239.245.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aSdMXk3p81VU3bYILBVXaQAAAgs"]
[Mon Jan 26 00:20:10.761814 2026] [:error] [pid 48918:tid 48939] [client 206.189.233.36:44410] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/@vite/env"] [unique_id "aXZCurFdNV6RkULOt6EV6gAAAIs"]
[Mon Jan 26 00:20:10.854244 2026] [:error] [pid 48918:tid 48932] [client 206.189.2.13:59750] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/@vite/env"] [unique_id "aXZCurFdNV6RkULOt6EV7QAAAIQ"]
[Mon Jan 26 00:20:11.390339 2026] [:error] [pid 48918:tid 48931] [client 206.189.233.36:44416] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/actuator/env"] [unique_id "aXZCu7FdNV6RkULOt6EV9wAAAIM"]
[Mon Jan 26 00:20:11.604042 2026] [:error] [pid 48920:tid 48989] [client 206.189.2.13:59754] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/actuator/env"] [unique_id "aXZCu5snZS3G6U7VdJP-7wAAAQU"]
[Mon Jan 26 00:20:12.382434 2026] [:error] [pid 48919:tid 48971] [client 206.189.233.36:44436] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/server"] [unique_id "aXZCvDVs1aLFg9jpyYqhTwAAANA"]
[Mon Jan 26 00:20:12.602179 2026] [:error] [pid 48918:tid 48948] [client 206.189.2.13:59768] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/server"] [unique_id "aXZCvLFdNV6RkULOt6EV_wAAAJQ"]
[Mon Jan 26 00:20:13.386673 2026] [:error] [pid 48919:tid 48978] [client 206.189.233.36:44456] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aXZCvTVs1aLFg9jpyYqhUwAAANY"]
[Mon Jan 26 00:20:13.601916 2026] [:error] [pid 48919:tid 48962] [client 206.189.2.13:59784] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aXZCvTVs1aLFg9jpyYqhVgAAAMc"]
[Mon Jan 26 00:20:15.396313 2026] [:error] [pid 48918:tid 48933] [client 206.189.233.36:44488] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/about"] [unique_id "aXZCv7FdNV6RkULOt6EWEgAAAIU"]
[Mon Jan 26 00:20:15.602325 2026] [:error] [pid 48918:tid 48951] [client 206.189.2.13:59788] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about"] [unique_id "aXZCv7FdNV6RkULOt6EWFQAAAJc"]
[Mon Jan 26 00:20:16.393268 2026] [:error] [pid 49084:tid 49096] [client 206.189.233.36:42538] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/debug/default/view"] [unique_id "aXZCwJHUOXll3XccoO4E1QAAAUo"]
[Mon Jan 26 00:20:16.604078 2026] [:error] [pid 48919:tid 48962] [client 206.189.2.13:49098] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/debug/default/view"] [unique_id "aXZCwDVs1aLFg9jpyYqhYgAAAMc"]
[Mon Jan 26 00:20:17.393317 2026] [:error] [pid 49084:tid 49098] [client 206.189.233.36:42554] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/v2/_catalog"] [unique_id "aXZCwZHUOXll3XccoO4E1gAAAUw"]
[Mon Jan 26 00:20:17.604980 2026] [:error] [pid 49084:tid 49100] [client 206.189.2.13:49114] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/v2/_catalog"] [unique_id "aXZCwZHUOXll3XccoO4E2AAAAU4"]
[Mon Jan 26 00:20:18.393808 2026] [:error] [pid 48918:tid 48940] [client 206.189.233.36:42566] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aXZCwrFdNV6RkULOt6EWIAAAAIw"]
[Mon Jan 26 00:20:18.604852 2026] [:error] [pid 48918:tid 48928] [client 206.189.2.13:49122] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ecp/Current/exporttool/microsoft.exchange.ediscovery.exporttool.application"] [unique_id "aXZCwrFdNV6RkULOt6EWIQAAAIA"]
[Mon Jan 26 00:20:19.398565 2026] [:error] [pid 48918:tid 48949] [client 206.189.233.36:42592] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/server-status"] [unique_id "aXZCw7FdNV6RkULOt6EWKQAAAJU"]
[Mon Jan 26 00:20:19.606493 2026] [:error] [pid 48918:tid 48939] [client 206.189.2.13:49124] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/server-status"] [unique_id "aXZCw7FdNV6RkULOt6EWKgAAAIs"]
[Mon Jan 26 00:20:20.420505 2026] [:error] [pid 48918:tid 48947] [client 206.189.233.36:42616] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/login.action"] [unique_id "aXZCxLFdNV6RkULOt6EWLwAAAJM"]
[Mon Jan 26 00:20:20.616752 2026] [:error] [pid 48920:tid 49000] [client 206.189.2.13:49134] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/login.action"] [unique_id "aXZCxJsnZS3G6U7VdJP-9wAAARA"]
[Mon Jan 26 00:20:21.399172 2026] [:error] [pid 48919:tid 48955] [client 206.189.233.36:42636] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/_all_dbs"] [unique_id "aXZCxTVs1aLFg9jpyYqhdAAAAMA"]
[Mon Jan 26 00:20:21.624713 2026] [:error] [pid 48920:tid 49003] [client 206.189.2.13:49142] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/_all_dbs"] [unique_id "aXZCxZsnZS3G6U7VdJP--QAAARM"]
[Mon Jan 26 00:20:22.401411 2026] [:error] [pid 48918:tid 48940] [client 206.189.233.36:42644] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.DS_Store"] [unique_id "aXZCxrFdNV6RkULOt6EWMQAAAIw"]
[Mon Jan 26 00:20:22.609842 2026] [:error] [pid 48919:tid 48964] [client 206.189.2.13:49146] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.DS_Store"] [unique_id "aXZCxjVs1aLFg9jpyYqheAAAAMk"]
[Mon Jan 26 00:20:23.386040 2026] [:error] [pid 48918:tid 48938] [client 206.189.233.36:42666] [client 206.189.233.36] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env"] [unique_id "aXZCx7FdNV6RkULOt6EWNQAAAIo"]
[Mon Jan 26 00:20:23.626391 2026] [:error] [pid 48919:tid 48971] [client 206.189.2.13:49148] [client 206.189.2.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env"] [unique_id "aXZCxzVs1aLFg9jpyYqhegAAANA"]
[Mon Jan 26 00:20:25.396373 2026] [:error] [pid 49084:tid 49110] [client 206.189.233.36:42690] [client 206.189.233.36] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aXZCyZHUOXll3XccoO4E3gAAAVg"]
[Mon Jan 26 00:20:25.614409 2026] [:error] [pid 49084:tid 49087] [client 206.189.2.13:49156] [client 206.189.2.13] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aXZCyZHUOXll3XccoO4E4AAAAUE"]
[Mon Jan 26 00:20:26.395190 2026] [:error] [pid 49084:tid 49098] [client 206.189.233.36:44026] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aXZCypHUOXll3XccoO4E4wAAAUw"]
[Mon Jan 26 00:20:26.611855 2026] [:error] [pid 49084:tid 49099] [client 206.189.2.13:51806] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aXZCypHUOXll3XccoO4E5AAAAU0"]
[Mon Jan 26 00:20:27.402391 2026] [:error] [pid 48919:tid 48968] [client 206.189.233.36:44046] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/config.json"] [unique_id "aXZCyzVs1aLFg9jpyYqhfwAAAM0"]
[Mon Jan 26 00:20:27.628209 2026] [:error] [pid 48920:tid 49007] [client 206.189.2.13:51822] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/config.json"] [unique_id "aXZCy5snZS3G6U7VdJP_BwAAARc"]
[Mon Jan 26 00:20:28.396189 2026] [:error] [pid 49084:tid 49104] [client 206.189.233.36:44058] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/telescope/requests"] [unique_id "aXZCzJHUOXll3XccoO4E6QAAAVI"]
[Mon Jan 26 00:20:28.612790 2026] [:error] [pid 48920:tid 48995] [client 206.189.2.13:51824] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/telescope/requests"] [unique_id "aXZCzJsnZS3G6U7VdJP_DgAAAQs"]
[Mon Jan 26 00:20:29.404510 2026] [:error] [pid 48920:tid 49000] [client 206.189.233.36:44088] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aXZCzZsnZS3G6U7VdJP_FAAAARA"]
[Mon Jan 26 00:20:29.614496 2026] [:error] [pid 48918:tid 48930] [client 206.189.2.13:51840] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aXZCzbFdNV6RkULOt6EWRQAAAII"]
[Mon Jan 26 00:20:30.419173 2026] [:error] [pid 48920:tid 48999] [client 206.189.233.36:44112] [client 206.189.233.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/"] [unique_id "aXZCzpsnZS3G6U7VdJP_FwAAAQ8"]
[Mon Jan 26 00:20:30.614839 2026] [:error] [pid 49084:tid 49107] [client 206.189.2.13:51842] [client 206.189.2.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/"] [unique_id "aXZCzpHUOXll3XccoO4E6wAAAVU"]
[Mon Jan 26 00:20:35.001285 2026] [authz_core:error] [pid 48919:tid 48976] [client 159.89.12.166:41118] AH01630: client denied by server configuration: /home/measureyourbrand/public_html/measureyourcause.com.au/server-status
[Mon Jan 26 00:20:38.715300 2026] [:error] [pid 49084:tid 49105] [client 159.89.12.166:34518] [client 159.89.12.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env"] [unique_id "aXZC1pHUOXll3XccoO4FAAAAAVM"]
[Mon Jan 26 00:20:40.726854 2026] [:error] [pid 49084:tid 49095] [client 159.89.12.166:34520] [client 159.89.12.166] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aXZC2JHUOXll3XccoO4FBAAAAUk"]
[Mon Jan 26 13:03:30.596427 2026] [:error] [pid 61286:tid 61311] [client 64.227.121.61:61243] [client 64.227.121.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.227.121.61, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aXb1osnVt687wYGMPn_VkQAAAVU"]
[Mon Jan 26 13:03:31.706979 2026] [:error] [pid 61252:tid 61273] [client 64.227.121.61:61299] [client 64.227.121.61] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 64.227.121.61, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aXb1o7rGlf8FG2etxUA1QgAAARM"]
[Mon Jan 26 23:14:22.846732 2026] [:error] [pid 1352:tid 1375] [client 45.133.5.86:27317] [client 45.133.5.86] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.133.5.86, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aXeEzqi6FXF9IOsoSufzQAAAAc4"]
[Tue Jan 27 14:23:25.123899 2026] [:error] [pid 48412:tid 48420] [client 45.137.126.18:31411] [client 45.137.126.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.git/HEAD"] [unique_id "aXhZ3XbJMfAKlln88JGviwAAAUY"]
[Tue Jan 27 14:23:25.944242 2026] [:error] [pid 7561:tid 7564] [client 45.137.126.5:61051] [client 45.137.126.5] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.git/HEAD"] [unique_id "aXhZ3bXGI6mgvHQqkXykfAAAAMA"]
[Wed Jan 28 05:25:48.991933 2026] [:error] [pid 17424:tid 17438] [client 45.154.138.36:33843] [client 45.154.138.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aXktXGRvtDRvGDe-pItdpgAAAAU"]
[Wed Jan 28 05:25:50.408021 2026] [:error] [pid 64842:tid 64847] [client 45.154.138.50:62461] [client 45.154.138.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aXktXluAAQZ5AN_SnDYQ5gAAAUM"]
[Wed Jan 28 05:25:54.137973 2026] [:error] [pid 17424:tid 17438] [client 45.154.138.14:52143] [client 45.154.138.14] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/chosen.php"] [unique_id "aXktYmRvtDRvGDe-pItd4gAAAAU"]
[Wed Jan 28 05:25:55.543102 2026] [:error] [pid 17424:tid 17445] [client 45.154.138.35:42723] [client 45.154.138.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-conflg.php"] [unique_id "aXktY2RvtDRvGDe-pItd9gAAAAw"]
[Wed Jan 28 05:25:56.930224 2026] [:error] [pid 17424:tid 17451] [client 45.154.138.29:56487] [client 45.154.138.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aXktZGRvtDRvGDe-pIteCwAAABI"]
[Wed Jan 28 05:25:57.861938 2026] [:error] [pid 17424:tid 17455] [client 45.154.138.23:31723] [client 45.154.138.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/chosen.php"] [unique_id "aXktZWRvtDRvGDe-pIteGgAAABY"]
[Wed Jan 28 05:25:58.785091 2026] [:error] [pid 17535:tid 17558] [client 45.154.138.12:35833] [client 45.154.138.12] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/wp-conflg.php"] [unique_id "aXktZq3QiSMgVscnN5Iv4QAAANQ"]
[Wed Jan 28 05:26:15.642755 2026] [autoindex:error] [pid 17426:tid 17512] [client 45.154.138.3:52827] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Jan 28 05:27:08.988117 2026] [:error] [pid 58254:tid 58261] [client 45.154.138.45:46817] [client 45.154.138.45] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aXktrPF8nSyBg9wOsa8s1gAAAQU"]
[Wed Jan 28 05:27:16.110777 2026] [:error] [pid 2454:tid 2464] [client 45.154.138.11:65373] [client 45.154.138.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aXkttJvv4I21Ywd7NNYP6gAAAYY"]
[Wed Jan 28 05:27:17.511700 2026] [:error] [pid 17535:tid 17557] [client 45.154.138.27:62837] [client 45.154.138.27] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/"] [unique_id "aXktta3QiSMgVscnN5IzTwAAANM"]
[Wed Jan 28 05:28:18.618448 2026] [:error] [pid 17426:tid 17502] [client 45.154.138.7:64837] [client 45.154.138.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/social-links/"] [unique_id "aXkt8k8zvf_03BnziRcdiAAAAI0"]
[Wed Jan 28 05:28:58.259253 2026] [authz_core:error] [pid 17426:tid 17495] [client 45.154.138.19:36367] AH01630: client denied by server configuration: /home/measureyourbrand/public_html/measureyourcause.com.au/system/
[Wed Jan 28 19:54:50.854661 2026] [:error] [pid 2625:tid 2631] [client 35.87.165.99:42556] [client 35.87.165.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/_next/data"] [unique_id "aXn5ClZhY64HvuPd7w1X5wAAAUA"]
[Wed Jan 28 19:54:51.587740 2026] [:error] [pid 33580:tid 33610] [client 35.87.165.99:42564] [client 35.87.165.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/"] [unique_id "aXn5C5lb0QJtwfka8l5RDAAAARc"]
[Wed Jan 28 20:15:46.743488 2026] [:error] [pid 33491:tid 33563] [client 3.12.163.221:48830] [client 3.12.163.221] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/"] [unique_id "aXn98mP9UY0x3irkINAm3wAAAMw"]
[Thu Jan 29 03:33:55.085605 2026] [:error] [pid 15949:tid 15998] [client 47.90.227.150:53964] [client 47.90.227.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/"] [unique_id "aXpkoyUUtCw0-hDUhapNOAAAAEY"]
[Thu Jan 29 03:33:55.698188 2026] [:error] [pid 15949:tid 15995] [client 47.90.227.150:57936] [client 47.90.227.150] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/"] [unique_id "aXpkoyUUtCw0-hDUhapNOwAAAEM"]
[Fri Jan 30 01:11:29.968506 2026] [:error] [pid 39502:tid 39551] [client 144.172.112.114:32984] [client 144.172.112.114] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aXuUwQCUcXwXieepEYjq5AAAAI8"]
[Fri Jan 30 01:38:20.792860 2026] [:error] [pid 39501:tid 39509] [client 144.172.112.54:47366] [client 144.172.112.54] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aXubDC_BLgXFo3daaZjFrQAAAAA"]
[Fri Jan 30 02:49:44.744509 2026] [:error] [pid 13797:tid 13823] [client 159.223.41.157:62259] [client 159.223.41.157] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 159.223.41.157, incrementing ddos counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aXuryEZz78bylh5pU4SKKAAAAdg"]
[Fri Jan 30 02:49:46.041861 2026] [:error] [pid 13797:tid 13802] [client 159.223.41.157:62259] [client 159.223.41.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2020/wp-includes/wlwmanifest.xml"] [unique_id "aXurykZz78bylh5pU4SKMwAAAcM"]
[Fri Jan 30 02:49:46.723884 2026] [:error] [pid 39783:tid 39799] [client 159.223.41.157:62980] [client 159.223.41.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aXuryq51RNfzhKG5ppPeaAAAAE4"]
[Fri Jan 30 02:49:47.417671 2026] [:error] [pid 13797:tid 13821] [client 159.223.41.157:63211] [client 159.223.41.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2021/wp-includes/wlwmanifest.xml"] [unique_id "aXury0Zz78bylh5pU4SKNAAAAdY"]
[Fri Jan 30 02:49:48.100999 2026] [:error] [pid 39813:tid 39835] [client 159.223.41.157:63355] [client 159.223.41.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aXurzN_AaZSBkqpNK00HlwAAAVQ"]
[Fri Jan 30 02:49:48.783102 2026] [:error] [pid 13828:tid 13854] [client 159.223.41.157:63510] [client 159.223.41.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aXurzOg30BgRfEx7ROHpqAAAAhg"]
[Fri Jan 30 02:49:49.479784 2026] [:error] [pid 39501:tid 39521] [client 159.223.41.157:63760] [client 159.223.41.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aXurzS_BLgXFo3daaZjb_AAAAAw"]
[Fri Jan 30 02:49:50.165759 2026] [:error] [pid 26945:tid 26973] [client 159.223.41.157:63913] [client 159.223.41.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aXurzgW-EMYAck0PyR4x0wAAAlA"]
[Fri Jan 30 02:49:50.861472 2026] [:error] [pid 26945:tid 26958] [client 159.223.41.157:64081] [client 159.223.41.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aXurzgW-EMYAck0PyR4x1gAAAkI"]
[Fri Jan 30 05:50:56.878292 2026] [:error] [pid 46912:tid 46928] [client 144.172.112.54:46210] [client 144.172.112.54] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aXvWQD6yiVW7A9NwFFkFoAAAAAQ"]
[Fri Jan 30 06:52:16.149712 2026] [:error] [pid 24681:tid 24685] [client 34.106.167.34:54940] [client 34.106.167.34] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aXvkoIE368IXQpahn0LKtAAAAQI"]
[Fri Jan 30 23:53:40.026298 2026] [:error] [pid 24712:tid 24753] [client 34.28.187.91:57188] [client 34.28.187.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aXzUBIRLQrFiQF3h9-uAOwAAAYw"]
[Sat Jan 31 02:17:06.251159 2026] [:error] [pid 59660:tid 59676] [client 45.148.10.174:35214] [client 45.148.10.174] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aXz1oiwTX33V6TPUqxMEkgAAAAw"]
[Sat Jan 31 02:17:08.644872 2026] [:error] [pid 59748:tid 59775] [client 45.148.10.174:37178] [client 45.148.10.174] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.svn/wc.db"] [unique_id "aXz1pGlxTen-ziDxotSRfQAAANg"]
[Sat Jan 31 02:17:12.091342 2026] [:error] [pid 59660:tid 59671] [client 45.148.10.174:37186] [client 45.148.10.174] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.svn/entries"] [unique_id "aXz1qCwTX33V6TPUqxMEnAAAAAc"]
[Sat Jan 31 02:17:58.050958 2026] [:error] [pid 10754:tid 10800] [client 45.148.10.174:49444] [client 45.148.10.174] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.svn/wc.db"] [unique_id "aXz11uUua7wHT-0pjVRbowAAA88"]
[Sat Jan 31 02:17:59.529374 2026] [:error] [pid 10754:tid 10787] [client 45.148.10.174:49456] [client 45.148.10.174] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.svn/entries"] [unique_id "aXz11-Uua7wHT-0pjVRbpQAAA8I"]
[Sat Jan 31 04:03:12.899133 2026] [:error] [pid 39339:tid 39347] [client 20.214.137.92:9063] [client 20.214.137.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nc4.php"] [unique_id "aX0OgMWi-IjigR3oHY5tvwAAAMY"]
[Sat Jan 31 04:03:13.478131 2026] [:error] [pid 39244:tid 39329] [client 20.214.137.92:46223] [client 20.214.137.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nc4.php"] [unique_id "aX0OgXo-KRTvg3jHEDyyjgAAAJM"]
[Sat Jan 31 04:03:14.085180 2026] [:error] [pid 39244:tid 39319] [client 20.214.137.92:44309] [client 20.214.137.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nc4.php"] [unique_id "aX0Ogno-KRTvg3jHEDyykgAAAIk"]
[Sat Jan 31 04:03:14.645747 2026] [:error] [pid 39339:tid 39343] [client 20.214.137.92:8676] [client 20.214.137.92] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nc4.php"] [unique_id "aX0OgsWi-IjigR3oHY5txQAAAMI"]
[Sat Jan 31 05:52:46.456983 2026] [:error] [pid 20836:tid 20851] [client 13.75.54.243:33844] [client 13.75.54.243] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 13.75.54.243, incrementing ddos counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aX0oLoACllgWRWVrYITphgAAAUo"]
[Sat Jan 31 05:52:47.697951 2026] [:error] [pid 20836:tid 20861] [client 13.75.54.243:33844] [client 13.75.54.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/"] [unique_id "aX0oL4ACllgWRWVrYITpkwAAAVQ"]
[Sat Jan 31 05:52:48.173146 2026] [:error] [pid 39244:tid 39322] [client 13.75.54.243:2294] [client 13.75.54.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/"] [unique_id "aX0oMHo-KRTvg3jHEDzc6wAAAIw"]
[Sat Jan 31 05:52:48.647486 2026] [:error] [pid 39243:tid 39300] [client 13.75.54.243:2869] [client 13.75.54.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/"] [unique_id "aX0oMBBW1k4JK8a4v0ZMTwAAAFI"]
[Sat Jan 31 05:52:49.126907 2026] [:error] [pid 20210:tid 20212] [client 13.75.54.243:33854] [client 13.75.54.243] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/"] [unique_id "aX0oMXKy7OGBlTY8MCe68gAAAQA"]
[Mon Feb 02 19:50:45.312030 2026] [:error] [pid 57081:tid 57121] [client 35.225.191.120:61238] [client 35.225.191.120] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.225.191.120, incrementing ddos counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aYCPlWvouJ2Jkm6HfBg0pwAAAwY"]
[Mon Feb 02 19:50:46.257895 2026] [:error] [pid 57081:tid 57135] [client 35.225.191.120:61238] [client 35.225.191.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aYCPlmvouJ2Jkm6HfBg0qwAAAxQ"]
[Mon Feb 02 19:50:47.074089 2026] [:error] [pid 63034:tid 63118] [client 35.225.191.120:65075] [client 35.225.191.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aYCPl-KXlgw75_wfbHrVnQAAAIA"]
[Mon Feb 02 19:50:47.872698 2026] [:error] [pid 63153:tid 63183] [client 35.225.191.120:52133] [client 35.225.191.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aYCPl3C9GXHnmLkdgdl9ugAAANY"]
[Mon Feb 02 19:50:48.671669 2026] [:error] [pid 63153:tid 63165] [client 35.225.191.120:63036] [client 35.225.191.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aYCPmHC9GXHnmLkdgdl9uwAAAMQ"]
[Mon Feb 02 19:50:49.464973 2026] [:error] [pid 46008:tid 46011] [client 35.225.191.120:50717] [client 35.225.191.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aYCPmSRa52iYn7SlSMmdJQAAAUE"]
[Mon Feb 02 19:50:50.264617 2026] [:error] [pid 46008:tid 46022] [client 35.225.191.120:53626] [client 35.225.191.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aYCPmiRa52iYn7SlSMmdJgAAAUs"]
[Mon Feb 02 19:50:51.092519 2026] [:error] [pid 63032:tid 63070] [client 35.225.191.120:51509] [client 35.225.191.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aYCPm3yEQ1PkpebvdRjcugAAAAc"]
[Mon Feb 02 19:50:51.917691 2026] [:error] [pid 63153:tid 63182] [client 35.225.191.120:56593] [client 35.225.191.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aYCPm3C9GXHnmLkdgdl9wgAAANU"]
[Mon Feb 02 19:50:52.742921 2026] [:error] [pid 57080:tid 57091] [client 35.225.191.120:51205] [client 35.225.191.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aYCPnI9Utn0ZlfnF10NUawAAAsQ"]
[Mon Feb 02 19:50:53.534384 2026] [:error] [pid 63153:tid 63163] [client 35.225.191.120:51257] [client 35.225.191.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aYCPnXC9GXHnmLkdgdl9xQAAAMI"]
[Mon Feb 02 19:50:54.340038 2026] [:error] [pid 57080:tid 57098] [client 35.225.191.120:56194] [client 35.225.191.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aYCPno9Utn0ZlfnF10NUbQAAAss"]
[Mon Feb 02 19:50:55.173969 2026] [:error] [pid 57022:tid 57064] [client 35.225.191.120:59345] [client 35.225.191.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aYCPnxnEgLMzfcurxflF4gAAAow"]
[Mon Feb 02 19:50:55.991051 2026] [:error] [pid 56989:tid 57003] [client 35.225.191.120:56945] [client 35.225.191.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aYCPn0p44HnChN-GZlgF_wAAAgw"]
[Mon Feb 02 19:50:56.829193 2026] [:error] [pid 57080:tid 57102] [client 35.225.191.120:64894] [client 35.225.191.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aYCPoI9Utn0ZlfnF10NUeAAAAs8"]
[Mon Feb 02 20:55:52.351263 2026] [:error] [pid 63153:tid 63172] [client 34.41.38.65:64785] [client 34.41.38.65] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.41.38.65, incrementing ddos counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aYCe2HC9GXHnmLkdgdmSeQAAAMs"]
[Mon Feb 02 20:55:54.160170 2026] [:error] [pid 63153:tid 63162] [client 34.41.38.65:64785] [client 34.41.38.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aYCe2nC9GXHnmLkdgdmShgAAAME"]
[Mon Feb 02 20:55:54.976111 2026] [:error] [pid 46008:tid 46031] [client 34.41.38.65:52608] [client 34.41.38.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aYCe2iRa52iYn7SlSMmp3AAAAVQ"]
[Mon Feb 02 20:55:55.770493 2026] [:error] [pid 63032:tid 63071] [client 34.41.38.65:63629] [client 34.41.38.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aYCe23yEQ1PkpebvdRjq2AAAAAg"]
[Mon Feb 02 20:55:56.566394 2026] [:error] [pid 57022:tid 57076] [client 34.41.38.65:60974] [client 34.41.38.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aYCe3BnEgLMzfcurxflQ3AAAApg"]
[Mon Feb 02 20:55:57.389200 2026] [:error] [pid 33612:tid 33614] [client 34.41.38.65:60379] [client 34.41.38.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aYCe3ctFn80qQEmo5QoHFgAAAQA"]
[Mon Feb 02 20:55:58.181263 2026] [:error] [pid 63153:tid 63182] [client 34.41.38.65:61451] [client 34.41.38.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aYCe3nC9GXHnmLkdgdmSjAAAANU"]
[Mon Feb 02 20:55:58.993679 2026] [:error] [pid 63032:tid 63081] [client 34.41.38.65:52750] [client 34.41.38.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aYCe3nyEQ1PkpebvdRjq3wAAABI"]
[Mon Feb 02 20:55:59.796419 2026] [:error] [pid 33612:tid 33618] [client 34.41.38.65:59632] [client 34.41.38.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aYCe38tFn80qQEmo5QoHHAAAAQQ"]
[Mon Feb 02 20:56:00.613053 2026] [:error] [pid 56989:tid 56996] [client 34.41.38.65:64267] [client 34.41.38.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aYCe4Ep44HnChN-GZlgWHwAAAgU"]
[Mon Feb 02 20:56:01.407768 2026] [:error] [pid 57080:tid 57088] [client 34.41.38.65:62004] [client 34.41.38.65] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aYCe4Y9Utn0ZlfnF10NfhAAAAsE"]
[Mon Feb 02 23:05:30.275771 2026] [:error] [pid 33612:tid 33615] [client 34.135.158.103:59516] [client 34.135.158.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.135.158.103, incrementing ddos counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aYC9OstFn80qQEmo5QoddwAAAQE"]
[Mon Feb 02 23:05:30.989610 2026] [:error] [pid 33612:tid 33616] [client 34.135.158.103:59516] [client 34.135.158.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aYC9OstFn80qQEmo5QodfAAAAQI"]
[Mon Feb 02 23:05:31.797101 2026] [:error] [pid 63034:tid 63126] [client 34.135.158.103:58207] [client 34.135.158.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aYC9O-KXlgw75_wfbHr9BAAAAIg"]
[Mon Feb 02 23:05:32.653583 2026] [:error] [pid 56989:tid 56997] [client 34.135.158.103:56936] [client 34.135.158.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aYC9PEp44HnChN-GZlg1KQAAAgY"]
[Mon Feb 02 23:05:33.461530 2026] [:error] [pid 56989:tid 57009] [client 34.135.158.103:62293] [client 34.135.158.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aYC9PUp44HnChN-GZlg1KwAAAhI"]
[Mon Feb 02 23:05:34.262650 2026] [:error] [pid 57022:tid 57075] [client 34.135.158.103:54912] [client 34.135.158.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aYC9PhnEgLMzfcurxflk8QAAApc"]
[Mon Feb 02 23:05:35.055416 2026] [:error] [pid 57021:tid 57040] [client 34.135.158.103:50882] [client 34.135.158.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aYC9P_7AEpx7VcmYK3EXLwAAAk8"]
[Mon Feb 02 23:05:35.874627 2026] [:error] [pid 57021:tid 57029] [client 34.135.158.103:56650] [client 34.135.158.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aYC9P_7AEpx7VcmYK3EXMgAAAkQ"]
[Mon Feb 02 23:05:36.673075 2026] [:error] [pid 56989:tid 57011] [client 34.135.158.103:50268] [client 34.135.158.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aYC9QEp44HnChN-GZlg1MgAAAhQ"]
[Mon Feb 02 23:05:37.471208 2026] [:error] [pid 63153:tid 63173] [client 34.135.158.103:51622] [client 34.135.158.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aYC9QXC9GXHnmLkdgdm9MwAAAMw"]
[Mon Feb 02 23:05:38.260352 2026] [:error] [pid 56989:tid 57005] [client 34.135.158.103:52572] [client 34.135.158.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aYC9Qkp44HnChN-GZlg1OAAAAg4"]
[Mon Feb 02 23:05:39.070637 2026] [:error] [pid 56989:tid 57009] [client 34.135.158.103:65358] [client 34.135.158.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aYC9Q0p44HnChN-GZlg1PQAAAhI"]
[Mon Feb 02 23:05:39.891952 2026] [:error] [pid 63034:tid 63142] [client 34.135.158.103:62822] [client 34.135.158.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aYC9Q-KXlgw75_wfbHr9EAAAAJg"]
[Mon Feb 02 23:05:40.684802 2026] [:error] [pid 56989:tid 57011] [client 34.135.158.103:64896] [client 34.135.158.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aYC9REp44HnChN-GZlg1QgAAAhQ"]
[Mon Feb 02 23:05:41.491684 2026] [:error] [pid 57081:tid 57135] [client 34.135.158.103:61876] [client 34.135.158.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aYC9RWvouJ2Jkm6HfBhamgAAAxQ"]
[Mon Feb 02 23:05:42.292766 2026] [:error] [pid 63153:tid 63162] [client 34.135.158.103:52375] [client 34.135.158.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aYC9RnC9GXHnmLkdgdm9NAAAAME"]
[Tue Feb 03 21:18:41.256406 2026] [:error] [pid 43028:tid 43053] [client 136.119.163.194:59369] [client 136.119.163.194] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.119.163.194, incrementing ddos counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aYH1sVnHWnJD4cJC5Duu8gAAANc"]
[Tue Feb 03 21:18:42.153322 2026] [:error] [pid 43028:tid 43044] [client 136.119.163.194:59369] [client 136.119.163.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aYH1slnHWnJD4cJC5Duu9wAAAM4"]
[Tue Feb 03 21:18:42.982364 2026] [:error] [pid 42920:tid 42935] [client 136.119.163.194:56370] [client 136.119.163.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aYH1siix3YKltG4EU0mIwwAAAAY"]
[Tue Feb 03 21:18:43.776769 2026] [:error] [pid 5148:tid 5158] [client 136.119.163.194:65060] [client 136.119.163.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aYH1s783HCHLtUIbS7LsYgAAAUc"]
[Tue Feb 03 21:18:44.630227 2026] [:error] [pid 43028:tid 43051] [client 136.119.163.194:65067] [client 136.119.163.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aYH1tFnHWnJD4cJC5DuvAAAAANU"]
[Tue Feb 03 21:18:45.425718 2026] [:error] [pid 43028:tid 43050] [client 136.119.163.194:49663] [client 136.119.163.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aYH1tVnHWnJD4cJC5DuvBQAAANQ"]
[Tue Feb 03 21:18:46.220976 2026] [:error] [pid 5148:tid 5164] [client 136.119.163.194:54705] [client 136.119.163.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aYH1tr83HCHLtUIbS7LsZQAAAU0"]
[Tue Feb 03 21:18:47.022074 2026] [:error] [pid 42922:tid 42992] [client 136.119.163.194:64212] [client 136.119.163.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aYH1t2azX4WPS_dQRkihCQAAAIc"]
[Tue Feb 03 21:18:47.820674 2026] [:error] [pid 5148:tid 5163] [client 136.119.163.194:64118] [client 136.119.163.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aYH1t783HCHLtUIbS7LsZwAAAUw"]
[Tue Feb 03 21:18:48.614583 2026] [:error] [pid 5229:tid 5242] [client 136.119.163.194:53221] [client 136.119.163.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aYH1uEKmEgmJub93yUoCRgAAAYs"]
[Tue Feb 03 21:18:49.460609 2026] [:error] [pid 43028:tid 43030] [client 136.119.163.194:64230] [client 136.119.163.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aYH1uVnHWnJD4cJC5DuvCgAAAMA"]
[Tue Feb 03 21:18:50.253505 2026] [:error] [pid 42920:tid 42951] [client 136.119.163.194:53864] [client 136.119.163.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aYH1uiix3YKltG4EU0mI0AAAABY"]
[Tue Feb 03 21:18:51.046379 2026] [:error] [pid 42921:tid 42958] [client 136.119.163.194:58129] [client 136.119.163.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aYH1u4blShffGl-01od9ewAAAEA"]
[Tue Feb 03 21:18:51.843715 2026] [:error] [pid 5229:tid 5254] [client 136.119.163.194:53210] [client 136.119.163.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aYH1u0KmEgmJub93yUoCUAAAAZc"]
[Tue Feb 03 21:18:52.635116 2026] [:error] [pid 5229:tid 5236] [client 136.119.163.194:60863] [client 136.119.163.194] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aYH1vEKmEgmJub93yUoCUQAAAYU"]
[Wed Feb 04 00:32:48.342248 2026] [:error] [pid 5229:tid 5245] [client 20.210.128.3:6551] [client 20.210.128.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/"] [unique_id "aYIjMEKmEgmJub93yUpG2AAAAY4"]
[Wed Feb 04 00:32:48.865402 2026] [:error] [pid 42920:tid 42941] [client 20.210.128.3:3030] [client 20.210.128.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/"] [unique_id "aYIjMCix3YKltG4EU0m9YQAAAAw"]
[Wed Feb 04 00:32:49.354697 2026] [:error] [pid 42920:tid 42947] [client 20.210.128.3:2923] [client 20.210.128.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/"] [unique_id "aYIjMSix3YKltG4EU0m9YgAAABI"]
[Wed Feb 04 00:32:49.846620 2026] [:error] [pid 42920:tid 42948] [client 20.210.128.3:3028] [client 20.210.128.3] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/"] [unique_id "aYIjMSix3YKltG4EU0m9ZAAAABM"]
[Wed Feb 04 09:12:27.415704 2026] [:error] [pid 47579:tid 47654] [client 20.200.220.226:3622] [client 20.200.220.226] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/index.php"] [unique_id "aYKc-_uxWks846_Vi2wCQAAAAIo"]
[Wed Feb 04 09:12:28.687486 2026] [:error] [pid 55445:tid 55460] [client 20.200.220.226:12250] [client 20.200.220.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-supports/"] [unique_id "aYKc_Fnd043q8WHuhu0EvwAAAU0"]
[Wed Feb 04 09:12:29.260127 2026] [:error] [pid 47577:tid 47602] [client 20.200.220.226:4197] [client 20.200.220.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-supports/"] [unique_id "aYKc_avA4Yp0Sov-3kQ5xgAAABU"]
[Wed Feb 04 09:12:29.863024 2026] [:error] [pid 55445:tid 55453] [client 20.200.220.226:10886] [client 20.200.220.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-supports/"] [unique_id "aYKc_Vnd043q8WHuhu0EwAAAAUY"]
[Wed Feb 04 09:12:30.447991 2026] [:error] [pid 18816:tid 18842] [client 20.200.220.226:2457] [client 20.200.220.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-supports/"] [unique_id "aYKc_sszZcOol_Iv-0WQtgAAARc"]
[Wed Feb 04 09:13:55.241794 2026] [:error] [pid 47578:tid 47615] [client 20.219.8.139:15198] [client 20.219.8.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aYKdU55oatM9u8-yDv82hAAAAEA"]
[Wed Feb 04 09:13:55.815566 2026] [:error] [pid 18816:tid 18819] [client 20.219.8.139:18509] [client 20.219.8.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aYKdU8szZcOol_Iv-0WR5QAAAQA"]
[Wed Feb 04 09:13:56.390848 2026] [:error] [pid 18816:tid 18828] [client 20.219.8.139:18540] [client 20.219.8.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aYKdVMszZcOol_Iv-0WR5wAAAQk"]
[Wed Feb 04 09:13:56.968196 2026] [:error] [pid 47579:tid 47666] [client 20.219.8.139:6262] [client 20.219.8.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aYKdVPuxWks846_Vi2wDRgAAAJY"]
[Wed Feb 04 17:59:56.438160 2026] [:error] [pid 55160:tid 55162] [client 20.210.129.57:18303] [client 20.210.129.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/r.php"] [unique_id "aYMYnOTAiAYDLSDaxdcI-wAAAYA"]
[Wed Feb 04 17:59:56.953192 2026] [:error] [pid 47406:tid 47474] [client 20.210.129.57:18697] [client 20.210.129.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/r.php"] [unique_id "aYMYnAeu9R9b-_wtQ0IVnAAAAQc"]
[Wed Feb 04 17:59:57.457391 2026] [:error] [pid 8285:tid 8292] [client 20.210.129.57:11727] [client 20.210.129.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/r.php"] [unique_id "aYMYnRpweS7ndDaunz_C-QAAAEU"]
[Wed Feb 04 17:59:57.946142 2026] [:error] [pid 47404:tid 47415] [client 20.210.129.57:14489] [client 20.210.129.57] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/r.php"] [unique_id "aYMYnVtGjJnGFKjTTub6sQAAAIU"]
[Thu Feb 05 02:56:08.338129 2026] [:error] [pid 3156:tid 3172] [client 217.77.10.74:57656] [client 217.77.10.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/"] [unique_id "aYOWSGFkBP84nEvT5IhY5wAAAYs"]
[Thu Feb 05 15:48:37.334006 2026] [:error] [pid 33122:tid 33127] [client 157.173.106.53:44684] [client 157.173.106.53] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-json/wc/store/cart"] [unique_id "aYRLVfW0IebAnFB9KDDwNAAAAEM"]
[Fri Feb 06 05:01:50.347157 2026] [:error] [pid 1665:tid 1731] [client 20.220.62.160:35781] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aYUFPjYZLE6gThXvZMqQLQAAAIQ"]
[Fri Feb 06 05:01:50.765849 2026] [:error] [pid 1664:tid 1716] [client 20.220.62.160:35779] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aYUFPu_0lM6yA3VnvQVnNwAAAFA"]
[Fri Feb 06 05:01:51.177202 2026] [:error] [pid 1663:tid 1676] [client 20.220.62.160:34946] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aYUFP19EQrJaKkABjK-RJQAAAAM"]
[Fri Feb 06 05:01:51.587689 2026] [:error] [pid 1665:tid 1729] [client 20.220.62.160:34950] [client 20.220.62.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aYUFPzYZLE6gThXvZMqQMAAAAII"]
[Fri Feb 06 12:59:47.255181 2026] [:error] [pid 3382:tid 3457] [client 54.204.70.144:60802] [client 54.204.70.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/_next/data"] [unique_id "aYV1Q8IgU1HR0rhYrE-eHQAAAJE"]
[Fri Feb 06 12:59:48.074730 2026] [:error] [pid 3380:tid 3403] [client 54.204.70.144:60816] [client 54.204.70.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/"] [unique_id "aYV1RBFAlUvBGSBK2jedNAAAABM"]
[Fri Feb 06 13:10:42.562927 2026] [:error] [pid 3477:tid 3497] [client 56.125.5.34:41092] [client 56.125.5.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/"] [unique_id "aYV30rL0Hdh40C7HYgXKOAAAANI"]
[Sat Feb 07 06:04:46.681299 2026] [:error] [pid 55157:tid 55170] [client 20.207.198.35:4997] [client 20.207.198.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/"] [unique_id "aYZlfn36JdtTn2bTEozgqQAAAQg"]
[Sat Feb 07 06:04:47.247267 2026] [:error] [pid 50671:tid 50680] [client 20.207.198.35:5822] [client 20.207.198.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/"] [unique_id "aYZlf7vqLohWBI_mqBPncgAAAAA"]
[Sat Feb 07 06:04:47.838232 2026] [:error] [pid 55157:tid 55168] [client 20.207.198.35:5771] [client 20.207.198.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/"] [unique_id "aYZlf336JdtTn2bTEozgrAAAAQY"]
[Sat Feb 07 06:04:48.420196 2026] [:error] [pid 43182:tid 43198] [client 20.207.198.35:5812] [client 20.207.198.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/"] [unique_id "aYZlgPEC82JnxmrnFYnCkwAAAU4"]
[Sat Feb 07 22:14:11.497844 2026] [:error] [pid 50671:tid 50691] [client 31.171.130.108:45489] [client 31.171.130.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aYdIs7vqLohWBI_mqBPGwgAAAAs"]
[Sat Feb 07 22:14:13.953487 2026] [:error] [pid 50673:tid 50735] [client 31.171.130.140:20865] [client 31.171.130.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aYdItWVwLsaZ7aKO2ck0zQAAAIA"]
[Sat Feb 07 22:14:17.934733 2026] [:error] [pid 43182:tid 43201] [client 31.171.130.164:27625] [client 31.171.130.164] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aYdIufEC82JnxmrnFYn1jQAAAVE"]
[Sat Feb 07 22:14:20.385471 2026] [:error] [pid 58058:tid 58061] [client 31.171.130.139:28987] [client 31.171.130.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aYdIvLz-Qlvs65S4DP9KhwAAAYA"]
[Sat Feb 07 22:14:21.327562 2026] [:error] [pid 55157:tid 55180] [client 31.171.130.140:57607] [client 31.171.130.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/upgrade/item.php"] [unique_id "aYdIvX36JdtTn2bTEozunAAAARI"]
[Sat Feb 07 22:14:28.379974 2026] [:error] [pid 50780:tid 50795] [client 31.171.130.135:48039] [client 31.171.130.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aYdIxOtUmIu2JHM2CrvkPgAAAM0"]
[Sat Feb 07 22:14:29.862339 2026] [:error] [pid 30684:tid 30705] [client 31.171.130.136:22117] [client 31.171.130.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aYdIxbqwdxwowLt-_Lw17wAAAdI"]
[Sat Feb 07 22:14:30.916229 2026] [:error] [pid 50673:tid 50745] [client 31.171.130.144:38851] [client 31.171.130.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aYdIxmVwLsaZ7aKO2ck1hQAAAIo"]
[Sat Feb 07 22:14:31.887480 2026] [:error] [pid 50672:tid 50710] [client 31.171.130.137:47563] [client 31.171.130.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aYdIxw9o0jq1XS8Nv7NqNAAAAEI"]
[Sat Feb 07 22:14:32.880294 2026] [:error] [pid 43182:tid 43193] [client 31.171.130.122:30971] [client 31.171.130.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aYdIyPEC82JnxmrnFYn2JwAAAUk"]
[Sat Feb 07 22:14:33.829804 2026] [:error] [pid 50672:tid 50720] [client 31.171.130.119:50327] [client 31.171.130.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aYdIyQ9o0jq1XS8Nv7NqTgAAAEw"]
[Sat Feb 07 22:14:35.330117 2026] [:error] [pid 58058:tid 58073] [client 31.171.130.137:51965] [client 31.171.130.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aYdIy7z-Qlvs65S4DP9LKQAAAYw"]
[Sat Feb 07 22:14:37.374807 2026] [:error] [pid 58058:tid 58063] [client 31.171.130.115:44031] [client 31.171.130.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "aYdIzbz-Qlvs65S4DP9LPAAAAYI"]
[Sat Feb 07 22:14:39.285669 2026] [:error] [pid 55157:tid 55182] [client 31.171.130.111:43265] [client 31.171.130.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aYdIz336JdtTn2bTEozvdgAAARQ"]
[Sat Feb 07 22:14:40.780445 2026] [:error] [pid 50672:tid 50721] [client 31.171.130.110:28351] [client 31.171.130.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aYdI0A9o0jq1XS8Nv7NqnwAAAE0"]
[Sat Feb 07 22:14:42.221407 2026] [:error] [pid 50673:tid 50739] [client 31.171.130.143:29887] [client 31.171.130.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aYdI0mVwLsaZ7aKO2ck2AwAAAIQ"]
[Sat Feb 07 22:14:46.175021 2026] [:error] [pid 50673:tid 50743] [client 31.171.130.142:46349] [client 31.171.130.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aYdI1mVwLsaZ7aKO2ck2KAAAAIg"]
[Sat Feb 07 22:14:47.633140 2026] [:error] [pid 43182:tid 43187] [client 31.171.130.162:35193] [client 31.171.130.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aYdI1_EC82JnxmrnFYn2wgAAAUM"]
[Sat Feb 07 22:14:49.611412 2026] [:error] [pid 50673:tid 50746] [client 31.171.130.151:52903] [client 31.171.130.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aYdI2WVwLsaZ7aKO2ck2QwAAAIs"]
[Sat Feb 07 22:14:51.098539 2026] [:error] [pid 50673:tid 50742] [client 31.171.130.122:40417] [client 31.171.130.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aYdI22VwLsaZ7aKO2ck2UgAAAIc"]
[Sat Feb 07 22:14:54.155088 2026] [:error] [pid 43182:tid 43204] [client 31.171.130.133:40939] [client 31.171.130.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aYdI3vEC82JnxmrnFYn2_QAAAVQ"]
[Sat Feb 07 22:14:55.696174 2026] [:error] [pid 30684:tid 30702] [client 31.171.130.114:28435] [client 31.171.130.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aYdI37qwdxwowLt-_Lw22gAAAc8"]
[Sat Feb 07 22:14:57.160788 2026] [:error] [pid 50780:tid 50789] [client 31.171.130.146:53483] [client 31.171.130.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aYdI4etUmIu2JHM2CrvlngAAAMc"]
[Sat Feb 07 22:14:58.216363 2026] [:error] [pid 55157:tid 55162] [client 31.171.130.138:38299] [client 31.171.130.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aYdI4n36JdtTn2bTEozwOAAAAQA"]
[Sat Feb 07 22:14:59.269976 2026] [:error] [pid 43182:tid 43197] [client 31.171.130.137:57545] [client 31.171.130.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aYdI4_EC82JnxmrnFYn3MwAAAU0"]
[Sat Feb 07 22:15:01.690101 2026] [:error] [pid 50671:tid 50703] [client 31.171.130.141:22753] [client 31.171.130.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aYdI5bvqLohWBI_mqBPIvgAAABc"]
[Sat Feb 07 22:15:02.702623 2026] [:error] [pid 50672:tid 50725] [client 31.171.130.131:43903] [client 31.171.130.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aYdI5g9o0jq1XS8Nv7NrPAAAAFE"]
[Sat Feb 07 22:15:03.686293 2026] [:error] [pid 55157:tid 55164] [client 31.171.130.160:30821] [client 31.171.130.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aYdI5336JdtTn2bTEozwcgAAAQI"]
[Sat Feb 07 22:15:08.784269 2026] [:error] [pid 55157:tid 55184] [client 31.171.130.147:49933] [client 31.171.130.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aYdI7H36JdtTn2bTEozwpwAAARY"]
[Sat Feb 07 22:15:11.340348 2026] [:error] [pid 50780:tid 50783] [client 31.171.130.139:30833] [client 31.171.130.139] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.139, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aYdI7-tUmIu2JHM2CrvmYQAAAME"]
[Sat Feb 07 22:15:22.481087 2026] [:error] [pid 50780:tid 50793] [client 31.171.130.139:30833] [client 31.171.130.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aYdI-utUmIu2JHM2Crvm7gAAAMs"]
[Sat Feb 07 22:15:24.452668 2026] [:error] [pid 30684:tid 30703] [client 31.171.130.119:25657] [client 31.171.130.119] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.119, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aYdI_LqwdxwowLt-_Lw3wgAAAdA"]
[Sat Feb 07 22:15:25.412913 2026] [:error] [pid 30684:tid 30697] [client 31.171.130.119:25657] [client 31.171.130.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/item.php"] [unique_id "aYdI_bqwdxwowLt-_Lw30wAAAco"]
[Sat Feb 07 22:15:29.397631 2026] [:error] [pid 50671:tid 50687] [client 31.171.130.140:21475] [client 31.171.130.140] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/css/admin.php"] [unique_id "aYdJAbvqLohWBI_mqBPJeAAAAAc"]
[Sat Feb 07 22:15:32.974861 2026] [:error] [pid 58058:tid 58073] [client 31.171.130.109:62313] [client 31.171.130.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aYdJBLz-Qlvs65S4DP9N2gAAAYw"]
[Sat Feb 07 22:15:41.837828 2026] [:error] [pid 58058:tid 58075] [client 31.171.130.108:43937] [client 31.171.130.108] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aYdJDbz-Qlvs65S4DP9ONQAAAY4"]
[Sat Feb 07 22:15:43.967872 2026] [:error] [pid 50780:tid 50793] [client 31.171.130.147:59827] [client 31.171.130.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aYdJD-tUmIu2JHM2CrvnwQAAAMs"]
[Sat Feb 07 22:15:46.450788 2026] [:error] [pid 30684:tid 30705] [client 31.171.130.141:23325] [client 31.171.130.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.141, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aYdJErqwdxwowLt-_Lw4twAAAdI"]
[Sat Feb 07 22:15:46.922655 2026] [:error] [pid 30684:tid 30701] [client 31.171.130.141:23325] [client 31.171.130.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aYdJErqwdxwowLt-_Lw4vQAAAc4"]
[Sat Feb 07 22:15:51.164850 2026] [:error] [pid 43182:tid 43184] [client 31.171.130.154:22507] [client 31.171.130.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aYdJF_EC82JnxmrnFYn43AAAAUA"]
[Sat Feb 07 22:15:57.868464 2026] [:error] [pid 50673:tid 50735] [client 31.171.130.118:37313] [client 31.171.130.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aYdJHWVwLsaZ7aKO2ck4eAAAAIA"]
[Sat Feb 07 22:16:00.385891 2026] [:error] [pid 55157:tid 55169] [client 31.171.130.135:24749] [client 31.171.130.135] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.135, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aYdJIH36JdtTn2bTEozyjwAAAQc"]
[Sat Feb 07 22:16:02.599636 2026] [:error] [pid 55157:tid 55184] [client 31.171.130.135:24749] [client 31.171.130.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aYdJIn36JdtTn2bTEozymwAAARY"]
[Sat Feb 07 22:16:04.042809 2026] [:error] [pid 50672:tid 50730] [client 31.171.130.145:29409] [client 31.171.130.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aYdJJA9o0jq1XS8Nv7NtDgAAAFY"]
[Sat Feb 07 22:16:06.032660 2026] [:error] [pid 43182:tid 43185] [client 31.171.130.121:52429] [client 31.171.130.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aYdJJvEC82JnxmrnFYn5nAAAAUE"]
[Sat Feb 07 22:16:08.520741 2026] [:error] [pid 43182:tid 43184] [client 31.171.130.149:47733] [client 31.171.130.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aYdJKPEC82JnxmrnFYn5xQAAAUA"]
[Sat Feb 07 22:16:09.543901 2026] [:error] [pid 58058:tid 58078] [client 31.171.130.115:33645] [client 31.171.130.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aYdJKbz-Qlvs65S4DP9O-QAAAZE"]
[Sat Feb 07 22:16:13.126138 2026] [:error] [pid 50672:tid 50730] [client 31.171.130.132:46001] [client 31.171.130.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aYdJLQ9o0jq1XS8Nv7NtXgAAAFY"]
[Sat Feb 07 22:16:14.688130 2026] [:error] [pid 58058:tid 58072] [client 31.171.130.130:64175] [client 31.171.130.130] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aYdJLrz-Qlvs65S4DP9PLwAAAYs"]
[Sat Feb 07 22:16:17.267921 2026] [:error] [pid 50672:tid 50712] [client 31.171.130.111:27015] [client 31.171.130.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aYdJMQ9o0jq1XS8Nv7NthwAAAEQ"]
[Sat Feb 07 22:16:19.831917 2026] [:error] [pid 58058:tid 58062] [client 31.171.130.143:44793] [client 31.171.130.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aYdJM7z-Qlvs65S4DP9PXQAAAYE"]
[Sat Feb 07 22:16:21.813896 2026] [:error] [pid 30684:tid 30707] [client 31.171.130.132:52857] [client 31.171.130.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/click.php"] [unique_id "aYdJNbqwdxwowLt-_Lw55gAAAdQ"]
[Sat Feb 07 22:16:24.371250 2026] [:error] [pid 30684:tid 30699] [client 31.171.130.160:32389] [client 31.171.130.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aYdJOLqwdxwowLt-_Lw5-gAAAcw"]
[Sat Feb 07 22:16:30.157891 2026] [:error] [pid 55157:tid 55184] [client 31.171.130.160:31617] [client 31.171.130.160] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aYdJPn36JdtTn2bTEozzDQAAARY"]
[Sat Feb 07 22:16:31.416929 2026] [:error] [pid 30684:tid 30690] [client 31.171.130.152:61425] [client 31.171.130.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aYdJP7qwdxwowLt-_Lw6JwAAAcM"]
[Sat Feb 07 22:16:32.440381 2026] [:error] [pid 43182:tid 43195] [client 31.171.130.133:28649] [client 31.171.130.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aYdJQPEC82JnxmrnFYn6tAAAAUs"]
[Sat Feb 07 22:16:33.549294 2026] [:error] [pid 50673:tid 50742] [client 31.171.130.145:43107] [client 31.171.130.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aYdJQWVwLsaZ7aKO2ck5WQAAAIc"]
[Sat Feb 07 22:16:35.036415 2026] [:error] [pid 50672:tid 50720] [client 31.171.130.135:51681] [client 31.171.130.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aYdJQw9o0jq1XS8Nv7NuCgAAAEw"]
[Sat Feb 07 22:16:36.032270 2026] [:error] [pid 58058:tid 58084] [client 31.171.130.142:54667] [client 31.171.130.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aYdJRLz-Qlvs65S4DP9PzQAAAZc"]
[Sat Feb 07 22:16:39.163565 2026] [:error] [pid 58058:tid 58062] [client 31.171.130.116:46297] [client 31.171.130.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aYdJR7z-Qlvs65S4DP9P6gAAAYE"]
[Sat Feb 07 22:16:40.205990 2026] [:error] [pid 43182:tid 43198] [client 31.171.130.113:41089] [client 31.171.130.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aYdJSPEC82JnxmrnFYn68gAAAU4"]
[Sat Feb 07 22:16:41.199619 2026] [:error] [pid 55157:tid 55164] [client 31.171.130.144:37469] [client 31.171.130.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aYdJSX36JdtTn2bTEozzPAAAAQI"]
[Sat Feb 07 22:16:42.194221 2026] [:error] [pid 50780:tid 50788] [client 31.171.130.110:43547] [client 31.171.130.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aYdJSutUmIu2JHM2CrvoygAAAMY"]
[Sat Feb 07 22:16:45.433056 2026] [:error] [pid 50673:tid 50758] [client 31.171.130.139:38071] [client 31.171.130.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aYdJTWVwLsaZ7aKO2ck5rAAAAJc"]
[Sat Feb 07 22:16:47.594687 2026] [:error] [pid 30684:tid 30703] [client 31.171.130.151:20121] [client 31.171.130.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aYdJT7qwdxwowLt-_Lw6sAAAAdA"]
[Sat Feb 07 22:16:51.978541 2026] [:error] [pid 55157:tid 55181] [client 31.171.130.155:48659] [client 31.171.130.155] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aYdJU336JdtTn2bTEozzfwAAARM"]
[Sat Feb 07 22:16:57.822570 2026] [:error] [pid 50671:tid 50681] [client 31.171.130.122:29123] [client 31.171.130.122] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aYdJWbvqLohWBI_mqBPMEwAAAAE"]
[Sat Feb 07 22:17:00.357045 2026] [:error] [pid 55157:tid 55166] [client 31.171.130.109:59999] [client 31.171.130.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aYdJXH36JdtTn2bTEozzogAAAQQ"]
[Sat Feb 07 22:17:01.662403 2026] [:error] [pid 50673:tid 50757] [client 31.171.130.161:27165] [client 31.171.130.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aYdJXWVwLsaZ7aKO2ck55AAAAJY"]
[Sat Feb 07 22:17:04.626062 2026] [:error] [pid 58058:tid 58080] [client 31.171.130.152:23709] [client 31.171.130.152] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aYdJYLz-Qlvs65S4DP9QKgAAAZM"]
[Sat Feb 07 22:17:07.383620 2026] [proxy_fcgi:error] [pid 58058:tid 58073] [client 31.171.130.149:27307] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:17:07.878419 2026] [proxy_fcgi:error] [pid 58058:tid 58076] [client 31.171.130.149:27307] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:17:08.410209 2026] [proxy_fcgi:error] [pid 58058:tid 58068] [client 31.171.130.149:27307] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:17:10.945397 2026] [:error] [pid 58058:tid 58066] [client 31.171.130.149:27307] [client 31.171.130.149] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aYdJZrz-Qlvs65S4DP9QPwAAAYU"]
[Sat Feb 07 22:17:11.892912 2026] [:error] [pid 50780:tid 50788] [client 31.171.130.148:23441] [client 31.171.130.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aYdJZ-tUmIu2JHM2CrvpbwAAAMY"]
[Sat Feb 07 22:17:12.950726 2026] [:error] [pid 43182:tid 43207] [client 31.171.130.131:48721] [client 31.171.130.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aYdJaPEC82JnxmrnFYn8iAAAAVc"]
[Sat Feb 07 22:17:13.974630 2026] [:error] [pid 50671:tid 50681] [client 31.171.130.138:38547] [client 31.171.130.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aYdJabvqLohWBI_mqBPMdAAAAAE"]
[Sat Feb 07 22:17:14.960508 2026] [:error] [pid 50780:tid 50806] [client 31.171.130.115:44781] [client 31.171.130.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aYdJautUmIu2JHM2CrvphgAAANg"]
[Sat Feb 07 22:17:15.932683 2026] [:error] [pid 30684:tid 30696] [client 31.171.130.116:44165] [client 31.171.130.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aYdJa7qwdxwowLt-_Lw7jQAAAck"]
[Sat Feb 07 22:17:17.499950 2026] [:error] [pid 55157:tid 55166] [client 31.171.130.161:51685] [client 31.171.130.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aYdJbX36JdtTn2bTEozz3AAAAQQ"]
[Sat Feb 07 22:17:18.606881 2026] [:error] [pid 58058:tid 58078] [client 31.171.130.163:45319] [client 31.171.130.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aYdJbrz-Qlvs65S4DP9QTQAAAZE"]
[Sat Feb 07 22:17:19.596865 2026] [:error] [pid 50673:tid 50740] [client 31.171.130.120:51659] [client 31.171.130.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aYdJb2VwLsaZ7aKO2ck6KAAAAIU"]
[Sat Feb 07 22:17:20.612240 2026] [:error] [pid 58058:tid 58082] [client 31.171.130.140:54009] [client 31.171.130.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aYdJcLz-Qlvs65S4DP9QTwAAAZU"]
[Sat Feb 07 22:17:22.649851 2026] [:error] [pid 55157:tid 55173] [client 31.171.130.113:47983] [client 31.171.130.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aYdJcn36JdtTn2bTEozz8AAAAQs"]
[Sat Feb 07 22:17:24.196535 2026] [:error] [pid 30684:tid 30690] [client 31.171.130.162:30703] [client 31.171.130.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aYdJdLqwdxwowLt-_Lw7wgAAAcM"]
[Sat Feb 07 22:17:26.170474 2026] [:error] [pid 58058:tid 58072] [client 31.171.130.107:26247] [client 31.171.130.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aYdJdrz-Qlvs65S4DP9QZgAAAYs"]
[Sat Feb 07 22:17:28.353380 2026] [:error] [pid 50780:tid 50783] [client 31.171.130.116:24853] [client 31.171.130.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aYdJeOtUmIu2JHM2Crvp3QAAAME"]
[Sat Feb 07 22:17:30.931443 2026] [:error] [pid 43182:tid 43203] [client 31.171.130.133:21193] [client 31.171.130.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aYdJevEC82JnxmrnFYn9WQAAAVM"]
[Sat Feb 07 22:17:33.956770 2026] [:error] [pid 43182:tid 43201] [client 31.171.130.115:65159] [client 31.171.130.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aYdJffEC82JnxmrnFYn9cgAAAVE"]
[Sat Feb 07 22:17:35.399444 2026] [:error] [pid 50673:tid 50736] [client 31.171.130.148:31921] [client 31.171.130.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aYdJf2VwLsaZ7aKO2ck6WQAAAIE"]
[Sat Feb 07 22:17:44.531831 2026] [:error] [pid 58058:tid 58079] [client 31.171.130.114:53541] [client 31.171.130.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aYdJiLz-Qlvs65S4DP9QqgAAAZI"]
[Sat Feb 07 22:17:45.480789 2026] [:error] [pid 30684:tid 30697] [client 31.171.130.151:39193] [client 31.171.130.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aYdJibqwdxwowLt-_Lw8PwAAAco"]
[Sat Feb 07 22:17:46.426236 2026] [:error] [pid 43182:tid 43193] [client 31.171.130.145:62463] [client 31.171.130.145] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.145, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aYdJivEC82JnxmrnFYn9tQAAAUk"]
[Sat Feb 07 22:17:47.482732 2026] [:error] [pid 43182:tid 43195] [client 31.171.130.145:62463] [client 31.171.130.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aYdJi_EC82JnxmrnFYn9vQAAAUs"]
[Sat Feb 07 22:17:49.489939 2026] [:error] [pid 50672:tid 50711] [client 31.171.130.151:22345] [client 31.171.130.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aYdJjQ9o0jq1XS8Nv7Nu7QAAAEM"]
[Sat Feb 07 22:17:50.506484 2026] [:error] [pid 43182:tid 43192] [client 31.171.130.161:43025] [client 31.171.130.161] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aYdJjvEC82JnxmrnFYn9zAAAAUg"]
[Sat Feb 07 22:17:53.552290 2026] [:error] [pid 50780:tid 50796] [client 31.171.130.148:47025] [client 31.171.130.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aYdJketUmIu2JHM2CrvqNgAAAM4"]
[Sat Feb 07 22:17:54.621533 2026] [:error] [pid 43182:tid 43198] [client 31.171.130.132:55675] [client 31.171.130.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aYdJkvEC82JnxmrnFYn95QAAAU4"]
[Sat Feb 07 22:17:58.269343 2026] [:error] [pid 50672:tid 50720] [client 31.171.130.135:24457] [client 31.171.130.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aYdJlg9o0jq1XS8Nv7NvFgAAAEw"]
[Sat Feb 07 22:18:00.208396 2026] [proxy_fcgi:error] [pid 58058:tid 58062] [client 31.171.130.145:28077] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:18:01.510962 2026] [:error] [pid 58058:tid 58075] [client 31.171.130.145:28077] [client 31.171.130.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/function.php"] [unique_id "aYdJmbz-Qlvs65S4DP9Q4QAAAY4"]
[Sat Feb 07 22:18:02.549148 2026] [:error] [pid 50780:tid 50785] [client 31.171.130.162:28835] [client 31.171.130.162] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aYdJmutUmIu2JHM2CrvqUQAAAMM"]
[Sat Feb 07 22:18:04.530976 2026] [:error] [pid 50671:tid 50687] [client 31.171.130.138:30863] [client 31.171.130.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aYdJnLvqLohWBI_mqBPNQQAAAAc"]
[Sat Feb 07 22:18:05.666374 2026] [:error] [pid 50780:tid 50803] [client 31.171.130.110:39871] [client 31.171.130.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aYdJnetUmIu2JHM2CrvqXQAAANU"]
[Sat Feb 07 22:18:10.282297 2026] [:error] [pid 50780:tid 50800] [client 31.171.130.138:40385] [client 31.171.130.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aYdJoutUmIu2JHM2CrvqfAAAANI"]
[Sat Feb 07 22:18:11.274306 2026] [:error] [pid 55157:tid 55184] [client 31.171.130.118:51671] [client 31.171.130.118] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aYdJo336JdtTn2bTEoz0ZwAAARY"]
[Sat Feb 07 22:18:14.312374 2026] [:error] [pid 50780:tid 50785] [client 31.171.130.137:38173] [client 31.171.130.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/index.php"] [unique_id "aYdJputUmIu2JHM2CrvqlAAAAMM"]
[Sat Feb 07 22:18:15.289907 2026] [:error] [pid 43182:tid 43188] [client 31.171.130.133:51871] [client 31.171.130.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aYdJp_EC82JnxmrnFYn-LwAAAUQ"]
[Sat Feb 07 22:18:16.356720 2026] [:error] [pid 50673:tid 50750] [client 31.171.130.165:35531] [client 31.171.130.165] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aYdJqGVwLsaZ7aKO2ck63gAAAI8"]
[Sat Feb 07 22:18:19.962660 2026] [:error] [pid 43182:tid 43187] [client 31.171.130.119:27867] [client 31.171.130.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aYdJq_EC82JnxmrnFYn-RwAAAUM"]
[Sat Feb 07 22:18:21.478057 2026] [:error] [pid 50671:tid 50693] [client 31.171.130.120:45315] [client 31.171.130.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aYdJrbvqLohWBI_mqBPNVgAAAA0"]
[Sat Feb 07 22:18:26.055665 2026] [:error] [pid 55157:tid 55178] [client 31.171.130.136:51371] [client 31.171.130.136] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.136, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/js/wp-login.php"] [unique_id "aYdJsn36JdtTn2bTEoz0iQAAARA"]
[Sat Feb 07 22:18:29.081632 2026] [:error] [pid 55157:tid 55182] [client 31.171.130.136:51371] [client 31.171.130.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aYdJtX36JdtTn2bTEoz0lwAAARQ"]
[Sat Feb 07 22:18:30.022066 2026] [:error] [pid 43182:tid 43198] [client 31.171.130.129:61979] [client 31.171.130.129] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.129, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aYdJtvEC82JnxmrnFYn-YQAAAU4"]
[Sat Feb 07 22:18:35.654140 2026] [proxy_fcgi:error] [pid 43182:tid 43190] [client 31.171.130.129:61979] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:18:43.132733 2026] [:error] [pid 43182:tid 43185] [client 31.171.130.129:61979] [client 31.171.130.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aYdJw_EC82JnxmrnFYn-rwAAAUE"]
[Sat Feb 07 22:18:45.647936 2026] [:error] [pid 58058:tid 58080] [client 31.171.130.123:30535] [client 31.171.130.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aYdJxbz-Qlvs65S4DP9RiAAAAZM"]
[Sat Feb 07 22:18:47.673244 2026] [:error] [pid 30684:tid 30708] [client 31.171.130.132:20745] [client 31.171.130.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aYdJx7qwdxwowLt-_Lw-CgAAAdU"]
[Sat Feb 07 22:18:53.182273 2026] [:error] [pid 50672:tid 50711] [client 31.171.130.150:35099] [client 31.171.130.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aYdJzQ9o0jq1XS8Nv7NvzgAAAEM"]
[Sat Feb 07 22:18:55.154963 2026] [:error] [pid 50780:tid 50791] [client 31.171.130.132:40005] [client 31.171.130.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aYdJz-tUmIu2JHM2CrvrGwAAAMk"]
[Sat Feb 07 22:18:56.611723 2026] [:error] [pid 50671:tid 50700] [client 31.171.130.163:65183] [client 31.171.130.163] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aYdJ0LvqLohWBI_mqBPNhwAAABQ"]
[Sat Feb 07 22:18:59.610746 2026] [proxy_fcgi:error] [pid 58058:tid 58061] [client 31.171.130.139:44763] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:19:00.233667 2026] [proxy_fcgi:error] [pid 58058:tid 58075] [client 31.171.130.139:44763] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:19:01.005687 2026] [:error] [pid 58058:tid 58062] [client 31.171.130.139:44763] [client 31.171.130.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aYdJ1bz-Qlvs65S4DP9RyQAAAYE"]
[Sat Feb 07 22:19:02.050721 2026] [:error] [pid 50671:tid 50700] [client 31.171.130.144:60603] [client 31.171.130.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aYdJ1rvqLohWBI_mqBPNmQAAABQ"]
[Sat Feb 07 22:19:06.665293 2026] [:error] [pid 43182:tid 43196] [client 31.171.130.138:50339] [client 31.171.130.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aYdJ2vEC82JnxmrnFYn_IQAAAUw"]
[Sat Feb 07 22:19:08.183538 2026] [:error] [pid 50672:tid 50725] [client 31.171.130.129:45171] [client 31.171.130.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "aYdJ3A9o0jq1XS8Nv7Nv4gAAAFE"]
[Sat Feb 07 22:19:10.634271 2026] [:error] [pid 30684:tid 30698] [client 31.171.130.134:46057] [client 31.171.130.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aYdJ3rqwdxwowLt-_Lw-dwAAAcs"]
[Sat Feb 07 22:19:15.160567 2026] [:error] [pid 30684:tid 30705] [client 31.171.130.147:51583] [client 31.171.130.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aYdJ47qwdxwowLt-_Lw-lQAAAdI"]
[Sat Feb 07 22:19:16.179453 2026] [proxy_fcgi:error] [pid 58058:tid 58073] [client 31.171.130.140:27211] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:19:17.712802 2026] [:error] [pid 58058:tid 58083] [client 31.171.130.140:27211] [client 31.171.130.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aYdJ5bz-Qlvs65S4DP9R8wAAAZY"]
[Sat Feb 07 22:19:21.298936 2026] [proxy_fcgi:error] [pid 50780:tid 50785] [client 31.171.130.138:27347] AH01071: Got error 'Primary script unknown'
[Sat Feb 07 22:19:22.330921 2026] [:error] [pid 50780:tid 50782] [client 31.171.130.138:27347] [client 31.171.130.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 31.171.130.138, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aYdJ6utUmIu2JHM2CrvrOQAAAMA"]
[Sat Feb 07 22:19:24.783905 2026] [:error] [pid 50780:tid 50804] [client 31.171.130.138:27347] [client 31.171.130.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aYdJ7OtUmIu2JHM2CrvrQAAAANY"]
[Sat Feb 07 22:19:26.315223 2026] [:error] [pid 50672:tid 50724] [client 31.171.130.154:49389] [client 31.171.130.154] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aYdJ7g9o0jq1XS8Nv7NwBwAAAFA"]
[Sat Feb 07 22:19:29.424243 2026] [:error] [pid 55157:tid 55162] [client 31.171.130.120:59451] [client 31.171.130.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aYdJ8X36JdtTn2bTEoz1OQAAAQA"]
[Sat Feb 07 22:19:32.535629 2026] [:error] [pid 50780:tid 50802] [client 31.171.130.120:24137] [client 31.171.130.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aYdJ9OtUmIu2JHM2CrvrVAAAANQ"]
[Sun Feb 08 07:36:39.858180 2026] [:error] [pid 24422:tid 24466] [client 45.92.29.144:52511] [client 45.92.29.144] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env"] [unique_id "aYfMhyNNjcLoSCLKhTe1_wAAAEg"]
[Sun Feb 08 09:09:03.935949 2026] [:error] [pid 24423:tid 24509] [client 217.77.10.74:60256] [client 217.77.10.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-json/wc/v2/payment_gateways"] [unique_id "aYfiL03f9n1Y0TpV5YbOwgAAAJg"]
[Sun Feb 08 09:09:04.808942 2026] [:error] [pid 24421:tid 24440] [client 217.77.10.74:60508] [client 217.77.10.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-json/wc/store/v1/cart"] [unique_id "aYfiMKp7cTzhX5M1IP97ZQAAAAk"]
[Sun Feb 08 09:09:05.658223 2026] [:error] [pid 24421:tid 24437] [client 217.77.10.74:60808] [client 217.77.10.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-json/wc/store/v1/payment_methods"] [unique_id "aYfiMap7cTzhX5M1IP97aAAAAAY"]
[Sun Feb 08 13:21:46.474536 2026] [:error] [pid 24422:tid 24472] [client 167.172.107.127:56214] [client 167.172.107.127] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.172.107.127, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aYgdaiNNjcLoSCLKhTclSwAAAE4"]
[Sun Feb 08 13:21:47.603598 2026] [:error] [pid 56906:tid 56916] [client 167.172.107.127:56533] [client 167.172.107.127] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 167.172.107.127, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aYgda_xl3WX27-WXfDh2VAAAAQg"]
[Sun Feb 08 21:53:00.153641 2026] [:error] [pid 24422:tid 24458] [client 34.21.99.14:52500] [client 34.21.99.14] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.21.99.14, incrementing ddos counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aYiVPCNNjcLoSCLKhTebSwAAAEA"]
[Sun Feb 08 21:53:02.806923 2026] [:error] [pid 24422:tid 24480] [client 34.21.99.14:52500] [client 34.21.99.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aYiVPiNNjcLoSCLKhTebWAAAAFY"]
[Sun Feb 08 21:53:03.671846 2026] [:error] [pid 58631:tid 58653] [client 34.21.99.14:64660] [client 34.21.99.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aYiVP3-r9Xz6zi7KqKyakQAAAdQ"]
[Sun Feb 08 21:53:04.541699 2026] [:error] [pid 56906:tid 56929] [client 34.21.99.14:50691] [client 34.21.99.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aYiVQPxl3WX27-WXfDjW3wAAARU"]
[Sun Feb 08 21:53:05.408122 2026] [:error] [pid 56906:tid 56925] [client 34.21.99.14:50440] [client 34.21.99.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aYiVQfxl3WX27-WXfDjW4wAAARE"]
[Sun Feb 08 21:53:06.264066 2026] [:error] [pid 58631:tid 58639] [client 34.21.99.14:58183] [client 34.21.99.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aYiVQn-r9Xz6zi7KqKyalAAAAcY"]
[Sun Feb 08 21:53:07.158053 2026] [:error] [pid 56906:tid 56913] [client 34.21.99.14:56611] [client 34.21.99.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aYiVQ_xl3WX27-WXfDjW5gAAAQU"]
[Sun Feb 08 21:53:08.033878 2026] [:error] [pid 58631:tid 58634] [client 34.21.99.14:64187] [client 34.21.99.14] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aYiVRH-r9Xz6zi7KqKyalwAAAcE"]
[Sun Feb 08 22:24:31.273172 2026] [:error] [pid 9422:tid 9428] [client 35.203.172.121:46828] [client 35.203.172.121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aYicn69DqDJC68qBbywiVgAAAYM"]
[Mon Feb 09 03:57:37.867278 2026] [:error] [pid 47939:tid 48006] [client 20.62.114.0:51402] [client 20.62.114.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aYjqsdkpZei8M7cJ2z0TqQAAAIA"]
[Mon Feb 09 03:57:39.195671 2026] [:error] [pid 47939:tid 48027] [client 20.62.114.0:51411] [client 20.62.114.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aYjqs9kpZei8M7cJ2z0TrQAAAJU"]
[Mon Feb 09 03:57:40.545236 2026] [:error] [pid 47937:tid 47954] [client 20.62.114.0:36832] [client 20.62.114.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aYjqtM4Fd42MP2DhNrX4egAAAAg"]
[Mon Feb 09 03:57:41.239405 2026] [:error] [pid 47939:tid 48006] [client 20.62.114.0:36843] [client 20.62.114.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aYjqtdkpZei8M7cJ2z0TswAAAIA"]
[Mon Feb 09 03:57:41.935006 2026] [:error] [pid 48044:tid 48059] [client 20.62.114.0:36846] [client 20.62.114.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sx.php"] [unique_id "aYjqtZvmvsMP5E03sZKb1wAAAM0"]
[Mon Feb 09 03:57:42.763955 2026] [:error] [pid 47939:tid 48020] [client 20.62.114.0:51398] [client 20.62.114.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sx.php"] [unique_id "aYjqttkpZei8M7cJ2z0TygAAAI4"]
[Mon Feb 09 03:57:43.361725 2026] [:error] [pid 48044:tid 48070] [client 20.62.114.0:36802] [client 20.62.114.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sx.php"] [unique_id "aYjqt5vmvsMP5E03sZKb3wAAANg"]
[Mon Feb 09 03:57:44.066726 2026] [:error] [pid 48044:tid 48047] [client 20.62.114.0:29944] [client 20.62.114.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sx.php"] [unique_id "aYjquJvmvsMP5E03sZKb5QAAAME"]
[Mon Feb 09 05:58:30.474291 2026] [:error] [pid 48044:tid 48063] [client 34.82.223.73:54830] [client 34.82.223.73] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aYkHBpvmvsMP5E03sZLWOwAAANE"]
[Mon Feb 09 06:04:25.248942 2026] [:error] [pid 18303:tid 18324] [client 195.178.110.223:36496] [client 195.178.110.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aYkIaUY7TEaZkFrGG4nj_AAAARM"]
[Mon Feb 09 06:33:01.553891 2026] [:error] [pid 48044:tid 48068] [client 195.178.110.223:45198] [client 195.178.110.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aYkPHZvmvsMP5E03sZLlTAAAANY"]
[Mon Feb 09 22:01:40.295946 2026] [:error] [pid 60677:tid 60719] [client 34.71.111.82:51393] [client 34.71.111.82] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.71.111.82, incrementing ddos counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aYnoxFyBgzfmDf6Gaev9nQAAAsg"]
[Mon Feb 09 22:01:43.263169 2026] [:error] [pid 60677:tid 60773] [client 34.71.111.82:51393] [client 34.71.111.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aYnox1yBgzfmDf6Gaev9vwAAAtY"]
[Mon Feb 09 22:01:44.413825 2026] [:error] [pid 60589:tid 60601] [client 34.71.111.82:51443] [client 34.71.111.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aYnoyDIJyhPWC0JyMLyjqgAAAco"]
[Mon Feb 09 22:01:45.420512 2026] [:error] [pid 47937:tid 47949] [client 34.71.111.82:51754] [client 34.71.111.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aYnoyc4Fd42MP2DhNrX99gAAAAM"]
[Mon Feb 09 22:01:46.530245 2026] [:error] [pid 47937:tid 47947] [client 34.71.111.82:63128] [client 34.71.111.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aYnoys4Fd42MP2DhNrX99wAAAAE"]
[Mon Feb 09 22:01:47.638013 2026] [:error] [pid 60676:tid 60691] [client 34.71.111.82:54040] [client 34.71.111.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aYnoy3hKcn7mJYMx5_CywwAAAoc"]
[Mon Feb 09 22:01:48.630095 2026] [:error] [pid 60677:tid 60712] [client 34.71.111.82:63580] [client 34.71.111.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aYnozFyBgzfmDf6Gaev9wwAAAsE"]
[Mon Feb 09 22:01:49.704735 2026] [:error] [pid 60678:tid 60755] [client 34.71.111.82:56104] [client 34.71.111.82] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aYnoze8Gd_fDFrcNu4PB7wAAAws"]
[Mon Feb 09 23:01:01.206302 2026] [:error] [pid 18303:tid 18326] [client 104.28.160.81:18719] [client 104.28.160.81] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/style.php"] [unique_id "aYn2rUY7TEaZkFrGG4m1awAAARU"]
[Tue Feb 10 03:05:31.332241 2026] [:error] [pid 14069:tid 14088] [client 167.86.83.231:59153] [client 167.86.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/"] [unique_id "aYov-4zIGuLoki0yhfH2HgAAANE"], referer: binance.com
[Tue Feb 10 03:05:39.106749 2026] [:error] [pid 14069:tid 14081] [client 167.86.83.231:52772] [client 167.86.83.231] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/"] [unique_id "aYowA4zIGuLoki0yhfH2OQAAAMo"], referer: binance.com
[Thu Feb 12 01:40:59.649778 2026] [:error] [pid 49094:tid 49140] [client 136.113.193.208:51747] [client 136.113.193.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.113.193.208, incrementing ddos counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aYy_K-UgUVJo2a1h94XFAAAAAM4"]
[Thu Feb 12 01:41:00.391252 2026] [:error] [pid 49094:tid 49128] [client 136.113.193.208:51747] [client 136.113.193.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aYy_LOUgUVJo2a1h94XFCAAAAMI"]
[Thu Feb 12 02:35:11.227692 2026] [:error] [pid 59768:tid 59789] [client 4.251.106.50:47539] [client 4.251.106.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/item.php"] [unique_id "aYzL3y1wUqEWhF_w6UG7jQAAABM"]
[Thu Feb 12 02:35:12.290721 2026] [:error] [pid 49180:tid 49185] [client 4.251.106.50:16441] [client 4.251.106.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/item.php"] [unique_id "aYzL4HD8wAezUtqGiU57KgAAAUM"]
[Thu Feb 12 02:35:13.260192 2026] [:error] [pid 49180:tid 49182] [client 4.251.106.50:15897] [client 4.251.106.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/item.php"] [unique_id "aYzL4XD8wAezUtqGiU57KwAAAUA"]
[Thu Feb 12 02:35:14.238522 2026] [:error] [pid 49095:tid 49171] [client 4.251.106.50:6013] [client 4.251.106.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/item.php"] [unique_id "aYzL4oDzbTIrmslQGKT0RwAAARI"]
[Thu Feb 12 18:05:48.266581 2026] [:error] [pid 63417:tid 63449] [client 20.100.192.104:12584] [client 20.100.192.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/moon.php"] [unique_id "aY2l_P8gSb97qRMtXCKp7gAAAEA"]
[Thu Feb 12 18:05:52.619923 2026] [:error] [pid 63418:tid 63479] [client 20.100.192.104:6627] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/w.php"] [unique_id "aY2mANzjh-bbJnStPZKg4AAAAIM"]
[Thu Feb 12 18:05:54.870095 2026] [:error] [pid 63416:tid 63445] [client 20.100.192.104:9634] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/w.php"] [unique_id "aY2mAr2wmecPaCHcM2-HtgAAAZg"]
[Thu Feb 12 18:05:58.491618 2026] [:error] [pid 63511:tid 63522] [client 20.100.192.104:12106] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/w.php"] [unique_id "aY2mBqQCQbD5BgeyIk3OCwAAAAk"]
[Thu Feb 12 18:05:59.342137 2026] [:error] [pid 63511:tid 63528] [client 20.100.192.104:6600] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/w.php"] [unique_id "aY2mB6QCQbD5BgeyIk3OFAAAAA8"]
[Thu Feb 12 18:06:00.353241 2026] [:error] [pid 63511:tid 63518] [client 20.100.192.104:6654] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zaa.php"] [unique_id "aY2mCKQCQbD5BgeyIk3OGAAAAAU"]
[Thu Feb 12 18:06:02.221888 2026] [:error] [pid 65064:tid 65077] [client 20.100.192.104:18723] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zaa.php"] [unique_id "aY2mChOvRgscTcqsMBmRYgAAAMo"]
[Thu Feb 12 18:06:04.237345 2026] [:error] [pid 63416:tid 63442] [client 20.100.192.104:28202] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zaa.php"] [unique_id "aY2mDL2wmecPaCHcM2-HzQAAAZU"]
[Thu Feb 12 18:06:05.552063 2026] [:error] [pid 63418:tid 63476] [client 20.100.192.104:9179] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zaa.php"] [unique_id "aY2mDdzjh-bbJnStPZKg-AAAAIA"]
[Thu Feb 12 18:06:06.417125 2026] [:error] [pid 65064:tid 65074] [client 20.100.192.104:6317] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-miiss.php.php"] [unique_id "aY2mDhOvRgscTcqsMBmReQAAAMc"]
[Thu Feb 12 18:06:07.234363 2026] [:error] [pid 65064:tid 65083] [client 20.100.192.104:6307] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-miiss.php.php"] [unique_id "aY2mDxOvRgscTcqsMBmRfgAAANA"]
[Thu Feb 12 18:06:09.010640 2026] [:error] [pid 63418:tid 63494] [client 20.100.192.104:29892] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-miiss.php.php"] [unique_id "aY2mEdzjh-bbJnStPZKg_QAAAJI"]
[Thu Feb 12 18:06:10.148234 2026] [:error] [pid 63416:tid 63432] [client 20.100.192.104:9152] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-miiss.php.php"] [unique_id "aY2mEr2wmecPaCHcM2-H1AAAAYs"]
[Thu Feb 12 18:06:11.023164 2026] [:error] [pid 63511:tid 63514] [client 20.100.192.104:29914] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gmo.php"] [unique_id "aY2mE6QCQbD5BgeyIk3OLgAAAAE"]
[Thu Feb 12 18:06:11.873335 2026] [:error] [pid 63418:tid 63493] [client 20.100.192.104:21410] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gmo.php"] [unique_id "aY2mE9zjh-bbJnStPZKg_wAAAJE"]
[Thu Feb 12 18:06:12.956339 2026] [:error] [pid 65064:tid 65078] [client 20.100.192.104:15756] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gmo.php"] [unique_id "aY2mFBOvRgscTcqsMBmRmQAAAMs"]
[Thu Feb 12 18:06:13.751345 2026] [:error] [pid 65064:tid 65071] [client 20.100.192.104:6619] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gmo.php"] [unique_id "aY2mFROvRgscTcqsMBmRnQAAAMQ"]
[Thu Feb 12 18:06:15.442749 2026] [:error] [pid 63511:tid 63515] [client 20.100.192.104:18777] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/"] [unique_id "aY2mF6QCQbD5BgeyIk3ONwAAAAI"]
[Thu Feb 12 18:06:16.270469 2026] [:error] [pid 63418:tid 63480] [client 20.100.192.104:6605] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/"] [unique_id "aY2mGNzjh-bbJnStPZKhCQAAAIQ"]
[Thu Feb 12 18:06:16.989963 2026] [:error] [pid 63416:tid 63439] [client 20.100.192.104:12151] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/"] [unique_id "aY2mGL2wmecPaCHcM2-H4QAAAZI"]
[Thu Feb 12 18:06:18.240593 2026] [:error] [pid 63417:tid 63468] [client 20.100.192.104:20204] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/"] [unique_id "aY2mGv8gSb97qRMtXCKqHwAAAFM"]
[Thu Feb 12 18:06:19.187790 2026] [:error] [pid 63511:tid 63532] [client 20.100.192.104:9168] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/install.php"] [unique_id "aY2mG6QCQbD5BgeyIk3OPwAAABM"]
[Thu Feb 12 18:06:20.311705 2026] [:error] [pid 65064:tid 65084] [client 20.100.192.104:12145] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/install.php"] [unique_id "aY2mHBOvRgscTcqsMBmRqwAAANE"]
[Thu Feb 12 18:06:21.036852 2026] [:error] [pid 63416:tid 63438] [client 20.100.192.104:20193] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/install.php"] [unique_id "aY2mHb2wmecPaCHcM2-H7QAAAZE"]
[Thu Feb 12 18:06:22.277530 2026] [:error] [pid 63511:tid 63529] [client 20.100.192.104:6319] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/install.php"] [unique_id "aY2mHqQCQbD5BgeyIk3ORwAAABA"]
[Thu Feb 12 18:06:23.406638 2026] [:error] [pid 63418:tid 63500] [client 20.100.192.104:9170] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aY2mH9zjh-bbJnStPZKhFgAAAJg"]
[Thu Feb 12 18:06:25.730826 2026] [:error] [pid 63416:tid 63441] [client 20.100.192.104:15791] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aY2mIb2wmecPaCHcM2-H-wAAAZQ"]
[Thu Feb 12 18:06:26.840042 2026] [:error] [pid 65064:tid 65087] [client 20.100.192.104:13589] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aY2mIhOvRgscTcqsMBmRugAAANQ"]
[Thu Feb 12 18:06:27.912344 2026] [:error] [pid 63417:tid 63462] [client 20.100.192.104:18716] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aY2mI_8gSb97qRMtXCKqOAAAAE0"]
[Thu Feb 12 18:06:29.201732 2026] [:error] [pid 65064:tid 65074] [client 20.100.192.104:27231] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aY2mJROvRgscTcqsMBmRvAAAAMc"]
[Thu Feb 12 18:06:31.457546 2026] [:error] [pid 63416:tid 63433] [client 20.100.192.104:13585] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aY2mJ72wmecPaCHcM2-ICgAAAYw"]
[Thu Feb 12 18:06:32.724643 2026] [:error] [pid 65064:tid 65072] [client 20.100.192.104:18698] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aY2mKBOvRgscTcqsMBmRyAAAAMU"]
[Thu Feb 12 18:06:35.994815 2026] [:error] [pid 63418:tid 63479] [client 20.100.192.104:30414] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aY2mK9zjh-bbJnStPZKhLwAAAIM"]
[Thu Feb 12 18:06:39.443312 2026] [:error] [pid 65064:tid 65081] [client 20.100.192.104:24436] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ma.php"] [unique_id "aY2mLxOvRgscTcqsMBmR0gAAAM4"]
[Thu Feb 12 18:06:40.252834 2026] [:error] [pid 65064:tid 65086] [client 20.100.192.104:30423] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ma.php"] [unique_id "aY2mMBOvRgscTcqsMBmR1AAAANM"]
[Thu Feb 12 18:06:41.006685 2026] [:error] [pid 63418:tid 63481] [client 20.100.192.104:9932] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ma.php"] [unique_id "aY2mMdzjh-bbJnStPZKhOwAAAIU"]
[Thu Feb 12 18:06:41.829341 2026] [:error] [pid 63416:tid 63439] [client 20.100.192.104:9948] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ma.php"] [unique_id "aY2mMb2wmecPaCHcM2-IJgAAAZI"]
[Thu Feb 12 18:06:42.430990 2026] [:error] [pid 63511:tid 63515] [client 20.100.192.104:9954] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fetch.php"] [unique_id "aY2mMqQCQbD5BgeyIk3OfwAAAAI"]
[Thu Feb 12 18:06:43.130051 2026] [:error] [pid 63418:tid 63494] [client 20.100.192.104:13616] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fetch.php"] [unique_id "aY2mM9zjh-bbJnStPZKhQAAAAJI"]
[Thu Feb 12 18:06:43.910535 2026] [:error] [pid 63511:tid 63529] [client 20.100.192.104:54704] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fetch.php"] [unique_id "aY2mM6QCQbD5BgeyIk3OggAAABA"]
[Thu Feb 12 18:06:44.749294 2026] [:error] [pid 63417:tid 63454] [client 20.100.192.104:9928] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fetch.php"] [unique_id "aY2mNP8gSb97qRMtXCKqXgAAAEU"]
[Thu Feb 12 18:06:45.828635 2026] [:error] [pid 63416:tid 63444] [client 20.100.192.104:21457] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/v2.php"] [unique_id "aY2mNb2wmecPaCHcM2-IMwAAAZc"]
[Thu Feb 12 18:06:57.321749 2026] [:error] [pid 63417:tid 63458] [client 20.100.192.104:17570] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aY2mQf8gSb97qRMtXCKqkQAAAEk"]
[Thu Feb 12 18:06:58.158055 2026] [:error] [pid 63418:tid 63494] [client 20.100.192.104:13590] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aY2mQtzjh-bbJnStPZKhVwAAAJI"]
[Thu Feb 12 18:06:59.532014 2026] [:error] [pid 63511:tid 63537] [client 20.100.192.104:11052] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aY2mQ6QCQbD5BgeyIk3O8QAAABg"]
[Thu Feb 12 18:07:01.046784 2026] [:error] [pid 63511:tid 63513] [client 20.100.192.104:24446] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aY2mRaQCQbD5BgeyIk3O-AAAAAA"]
[Thu Feb 12 18:07:01.903873 2026] [:error] [pid 63417:tid 63468] [client 20.100.192.104:21060] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zwso.php"] [unique_id "aY2mRf8gSb97qRMtXCKqoQAAAFM"]
[Thu Feb 12 18:07:03.386564 2026] [:error] [pid 63418:tid 63480] [client 20.100.192.104:13103] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zwso.php"] [unique_id "aY2mR9zjh-bbJnStPZKhWwAAAIQ"]
[Thu Feb 12 18:07:04.914422 2026] [:error] [pid 63418:tid 63491] [client 20.100.192.104:9171] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zwso.php"] [unique_id "aY2mSNzjh-bbJnStPZKhYgAAAI8"]
[Thu Feb 12 18:07:05.951063 2026] [:error] [pid 63511:tid 63519] [client 20.100.192.104:15821] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zwso.php"] [unique_id "aY2mSaQCQbD5BgeyIk3PAwAAAAY"]
[Thu Feb 12 18:07:07.353984 2026] [:error] [pid 63418:tid 63487] [client 20.100.192.104:54708] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about/function.php"] [unique_id "aY2mS9zjh-bbJnStPZKhawAAAIs"]
[Thu Feb 12 18:07:08.062672 2026] [:error] [pid 63511:tid 63518] [client 20.100.192.104:21085] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about/function.php"] [unique_id "aY2mTKQCQbD5BgeyIk3PCQAAAAU"]
[Thu Feb 12 18:07:09.865063 2026] [:error] [pid 63417:tid 63467] [client 20.100.192.104:30411] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about/function.php"] [unique_id "aY2mTf8gSb97qRMtXCKqrgAAAFI"]
[Thu Feb 12 18:07:11.493657 2026] [:error] [pid 65064:tid 65084] [client 20.100.192.104:21790] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about/function.php"] [unique_id "aY2mTxOvRgscTcqsMBmSIwAAANE"]
[Thu Feb 12 18:07:12.763678 2026] [:error] [pid 65064:tid 65082] [client 20.100.192.104:21095] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/geck.php"] [unique_id "aY2mUBOvRgscTcqsMBmSKwAAAM8"]
[Thu Feb 12 18:07:14.042278 2026] [:error] [pid 63417:tid 63457] [client 20.100.192.104:17551] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/geck.php"] [unique_id "aY2mUv8gSb97qRMtXCKqtQAAAEg"]
[Thu Feb 12 18:07:15.008998 2026] [:error] [pid 63511:tid 63515] [client 20.100.192.104:14835] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/geck.php"] [unique_id "aY2mU6QCQbD5BgeyIk3PGwAAAAI"]
[Thu Feb 12 18:07:15.705024 2026] [:error] [pid 63511:tid 63536] [client 20.100.192.104:16877] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/geck.php"] [unique_id "aY2mU6QCQbD5BgeyIk3PHgAAABc"]
[Thu Feb 12 18:07:16.457435 2026] [:error] [pid 63416:tid 63421] [client 20.100.192.104:24387] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/errw.php"] [unique_id "aY2mVL2wmecPaCHcM2-IgwAAAYA"]
[Thu Feb 12 18:07:17.964855 2026] [:error] [pid 63511:tid 63529] [client 20.100.192.104:14821] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/errw.php"] [unique_id "aY2mVaQCQbD5BgeyIk3PJwAAABA"]
[Thu Feb 12 18:07:19.960171 2026] [:error] [pid 63418:tid 63479] [client 20.100.192.104:17558] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/errw.php"] [unique_id "aY2mV9zjh-bbJnStPZKhfgAAAIM"]
[Thu Feb 12 18:07:20.737095 2026] [:error] [pid 63511:tid 63534] [client 20.100.192.104:13086] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/errw.php"] [unique_id "aY2mWKQCQbD5BgeyIk3PLAAAABU"]
[Thu Feb 12 18:07:21.931200 2026] [:error] [pid 63418:tid 63500] [client 20.100.192.104:21109] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aY2mWdzjh-bbJnStPZKhfwAAAJg"]
[Thu Feb 12 18:07:22.617625 2026] [:error] [pid 65064:tid 65075] [client 20.100.192.104:16860] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aY2mWhOvRgscTcqsMBmSRQAAAMg"]
[Thu Feb 12 18:07:23.460032 2026] [:error] [pid 65064:tid 65086] [client 20.100.192.104:16864] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aY2mWxOvRgscTcqsMBmSRgAAANM"]
[Thu Feb 12 18:07:24.647447 2026] [:error] [pid 65064:tid 65087] [client 20.100.192.104:21112] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aY2mXBOvRgscTcqsMBmSSgAAANQ"]
[Thu Feb 12 18:07:25.853815 2026] [:error] [pid 63418:tid 63477] [client 20.100.192.104:13116] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jsond.php"] [unique_id "aY2mXdzjh-bbJnStPZKhhQAAAIE"]
[Thu Feb 12 18:07:28.839170 2026] [:error] [pid 63418:tid 63488] [client 20.100.192.104:21445] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jsond.php"] [unique_id "aY2mYNzjh-bbJnStPZKhiQAAAIw"]
[Thu Feb 12 18:07:29.873033 2026] [:error] [pid 63511:tid 63513] [client 20.100.192.104:14797] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jsond.php"] [unique_id "aY2mYaQCQbD5BgeyIk3PNAAAAAA"]
[Thu Feb 12 18:07:30.796603 2026] [:error] [pid 63511:tid 63526] [client 20.100.192.104:13934] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jsond.php"] [unique_id "aY2mYqQCQbD5BgeyIk3PNwAAAA0"]
[Thu Feb 12 18:07:31.415162 2026] [:error] [pid 63511:tid 63523] [client 20.100.192.104:15848] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/configuration.php"] [unique_id "aY2mY6QCQbD5BgeyIk3POwAAAAo"]
[Thu Feb 12 18:07:33.876419 2026] [:error] [pid 63511:tid 63530] [client 20.100.192.104:8867] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/configuration.php"] [unique_id "aY2mZaQCQbD5BgeyIk3PPwAAABE"]
[Thu Feb 12 18:07:34.681517 2026] [:error] [pid 65064:tid 65071] [client 20.100.192.104:21765] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/configuration.php"] [unique_id "aY2mZhOvRgscTcqsMBmSeAAAAMQ"]
[Thu Feb 12 18:07:35.770079 2026] [:error] [pid 63418:tid 63487] [client 20.100.192.104:8871] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/configuration.php"] [unique_id "aY2mZ9zjh-bbJnStPZKhlgAAAIs"]
[Thu Feb 12 18:07:37.055736 2026] [:error] [pid 65064:tid 65078] [client 20.100.192.104:13944] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/100.kb.php"] [unique_id "aY2maROvRgscTcqsMBmSggAAAMs"]
[Thu Feb 12 18:07:37.719760 2026] [:error] [pid 65064:tid 65071] [client 20.100.192.104:6719] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/100.kb.php"] [unique_id "aY2maROvRgscTcqsMBmSgwAAAMQ"]
[Thu Feb 12 18:07:38.735911 2026] [:error] [pid 63417:tid 63451] [client 20.100.192.104:24980] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/100.kb.php"] [unique_id "aY2mav8gSb97qRMtXCKq1gAAAEI"]
[Thu Feb 12 18:07:40.317738 2026] [:error] [pid 65064:tid 65085] [client 20.100.192.104:23242] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/100.kb.php"] [unique_id "aY2mbBOvRgscTcqsMBmSkwAAANI"]
[Thu Feb 12 18:07:41.123988 2026] [:error] [pid 63416:tid 63436] [client 20.100.192.104:23283] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rip.php"] [unique_id "aY2mbb2wmecPaCHcM2-I0wAAAY8"]
[Thu Feb 12 18:07:42.308410 2026] [:error] [pid 63417:tid 63473] [client 20.100.192.104:7000] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rip.php"] [unique_id "aY2mbv8gSb97qRMtXCKq6gAAAFg"]
[Thu Feb 12 18:07:43.014791 2026] [:error] [pid 65064:tid 65090] [client 20.100.192.104:33739] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rip.php"] [unique_id "aY2mbxOvRgscTcqsMBmSvwAAANc"]
[Thu Feb 12 18:07:43.934655 2026] [:error] [pid 65064:tid 65080] [client 20.100.192.104:33752] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rip.php"] [unique_id "aY2mbxOvRgscTcqsMBmSzAAAAM0"]
[Thu Feb 12 18:07:44.844058 2026] [:error] [pid 63418:tid 63490] [client 20.100.192.104:33728] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/achdxhv/languages/admin.php"] [unique_id "aY2mcNzjh-bbJnStPZKhvwAAAI4"]
[Thu Feb 12 18:07:46.153332 2026] [:error] [pid 63418:tid 63487] [client 20.100.192.104:28672] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/achdxhv/languages/admin.php"] [unique_id "aY2mctzjh-bbJnStPZKhwwAAAIs"]
[Thu Feb 12 18:07:46.879816 2026] [:error] [pid 63511:tid 63516] [client 20.100.192.104:20642] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/achdxhv/languages/admin.php"] [unique_id "aY2mcqQCQbD5BgeyIk3PbwAAAAM"]
[Thu Feb 12 18:07:47.512717 2026] [:error] [pid 63416:tid 63445] [client 20.100.192.104:28702] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/achdxhv/languages/admin.php"] [unique_id "aY2mc72wmecPaCHcM2-I2wAAAZg"]
[Thu Feb 12 18:07:48.947122 2026] [:error] [pid 63417:tid 63470] [client 20.100.192.104:26158] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aY2mdP8gSb97qRMtXCKq_AAAAFU"]
[Thu Feb 12 18:07:53.677023 2026] [:error] [pid 63417:tid 63462] [client 20.100.192.104:15893] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aY2mef8gSb97qRMtXCKrBAAAAE0"]
[Thu Feb 12 18:07:55.324934 2026] [:error] [pid 63416:tid 63428] [client 20.100.192.104:27198] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aY2me72wmecPaCHcM2-I6AAAAYc"]
[Thu Feb 12 18:08:09.596199 2026] [:error] [pid 63417:tid 63455] [client 20.100.192.104:10721] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/doc.php"] [unique_id "aY2mif8gSb97qRMtXCKrKwAAAEY"]
[Thu Feb 12 18:08:11.158422 2026] [:error] [pid 65064:tid 65090] [client 20.100.192.104:33095] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/doc.php"] [unique_id "aY2mixOvRgscTcqsMBmTFgAAANc"]
[Thu Feb 12 18:08:13.660458 2026] [:error] [pid 63417:tid 63459] [client 20.100.192.104:28287] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/doc.php"] [unique_id "aY2mjf8gSb97qRMtXCKrMgAAAEo"]
[Thu Feb 12 18:08:14.818874 2026] [:error] [pid 65064:tid 65078] [client 20.100.192.104:6432] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/doc.php"] [unique_id "aY2mjhOvRgscTcqsMBmTHQAAAMs"]
[Thu Feb 12 18:08:15.531972 2026] [:error] [pid 63416:tid 63435] [client 20.100.192.104:6390] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/clasa99.php"] [unique_id "aY2mj72wmecPaCHcM2-JAwAAAY4"]
[Thu Feb 12 18:08:16.327230 2026] [:error] [pid 63417:tid 63455] [client 20.100.192.104:19794] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/clasa99.php"] [unique_id "aY2mkP8gSb97qRMtXCKrNwAAAEY"]
[Thu Feb 12 18:08:17.038811 2026] [:error] [pid 65064:tid 65079] [client 20.100.192.104:19802] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/clasa99.php"] [unique_id "aY2mkROvRgscTcqsMBmTIQAAAMw"]
[Thu Feb 12 18:08:17.892778 2026] [:error] [pid 63417:tid 63451] [client 20.100.192.104:30336] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/clasa99.php"] [unique_id "aY2mkf8gSb97qRMtXCKrPAAAAEI"]
[Thu Feb 12 18:08:18.872045 2026] [:error] [pid 63417:tid 63462] [client 20.100.192.104:24155] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/an.php"] [unique_id "aY2mkv8gSb97qRMtXCKrPwAAAE0"]
[Thu Feb 12 18:08:19.958836 2026] [:error] [pid 63417:tid 63460] [client 20.100.192.104:10429] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/an.php"] [unique_id "aY2mk_8gSb97qRMtXCKrRAAAAEs"]
[Thu Feb 12 18:08:21.271787 2026] [:error] [pid 63417:tid 63454] [client 20.100.192.104:31083] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/an.php"] [unique_id "aY2mlf8gSb97qRMtXCKrSQAAAEU"]
[Thu Feb 12 18:08:22.780170 2026] [:error] [pid 63511:tid 63521] [client 20.100.192.104:31100] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/an.php"] [unique_id "aY2mlqQCQbD5BgeyIk3PrwAAAAg"]
[Thu Feb 12 18:08:23.847501 2026] [:error] [pid 65064:tid 65075] [client 20.100.192.104:20107] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/assacc.php"] [unique_id "aY2mlxOvRgscTcqsMBmTNAAAAMg"]
[Thu Feb 12 18:08:24.523309 2026] [:error] [pid 65064:tid 65071] [client 20.100.192.104:26695] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/assacc.php"] [unique_id "aY2mmBOvRgscTcqsMBmTOAAAAMQ"]
[Thu Feb 12 18:08:25.232709 2026] [:error] [pid 65064:tid 65085] [client 20.100.192.104:20157] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/assacc.php"] [unique_id "aY2mmROvRgscTcqsMBmTPQAAANI"]
[Thu Feb 12 18:08:27.454757 2026] [:error] [pid 63511:tid 63524] [client 20.100.192.104:24190] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/assacc.php"] [unique_id "aY2mm6QCQbD5BgeyIk3PuAAAAAs"]
[Thu Feb 12 18:08:28.557359 2026] [:error] [pid 63416:tid 63430] [client 20.100.192.104:6925] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hzz.php"] [unique_id "aY2mnL2wmecPaCHcM2-JEAAAAYk"]
[Thu Feb 12 18:08:29.509521 2026] [:error] [pid 65064:tid 65091] [client 20.100.192.104:20721] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hzz.php"] [unique_id "aY2mnROvRgscTcqsMBmTSAAAANg"]
[Thu Feb 12 18:08:30.234576 2026] [:error] [pid 63417:tid 63471] [client 20.100.192.104:20132] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hzz.php"] [unique_id "aY2mnv8gSb97qRMtXCKraQAAAFY"]
[Thu Feb 12 18:08:31.789633 2026] [:error] [pid 65064:tid 65072] [client 20.100.192.104:24185] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hzz.php"] [unique_id "aY2mnxOvRgscTcqsMBmTTwAAAMU"]
[Thu Feb 12 18:08:32.650927 2026] [:error] [pid 63418:tid 63490] [client 20.100.192.104:20704] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/~norapump/hah.php"] [unique_id "aY2moNzjh-bbJnStPZKiAgAAAI4"]
[Thu Feb 12 18:08:34.596750 2026] [:error] [pid 63418:tid 63480] [client 20.100.192.104:20097] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/~norapump/hah.php"] [unique_id "aY2motzjh-bbJnStPZKiBwAAAIQ"]
[Thu Feb 12 18:08:35.370732 2026] [:error] [pid 63418:tid 63481] [client 20.100.192.104:28764] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/~norapump/hah.php"] [unique_id "aY2mo9zjh-bbJnStPZKiCQAAAIU"]
[Thu Feb 12 18:08:36.153486 2026] [:error] [pid 63418:tid 63499] [client 20.100.192.104:13844] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/~norapump/hah.php"] [unique_id "aY2mpNzjh-bbJnStPZKiCwAAAJc"]
[Thu Feb 12 18:08:36.909102 2026] [:error] [pid 63418:tid 63479] [client 20.100.192.104:23593] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/system.php"] [unique_id "aY2mpNzjh-bbJnStPZKiDgAAAIM"]
[Thu Feb 12 18:08:37.964673 2026] [:error] [pid 63417:tid 63467] [client 20.100.192.104:6913] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/system.php"] [unique_id "aY2mpf8gSb97qRMtXCKrdQAAAFI"]
[Thu Feb 12 18:08:39.588956 2026] [:error] [pid 65064:tid 65077] [client 20.100.192.104:18423] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/system.php"] [unique_id "aY2mpxOvRgscTcqsMBmTaQAAAMo"]
[Thu Feb 12 18:08:40.302703 2026] [:error] [pid 63511:tid 63537] [client 20.100.192.104:23587] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/system.php"] [unique_id "aY2mqKQCQbD5BgeyIk3P0AAAABg"]
[Thu Feb 12 18:08:41.149253 2026] [:error] [pid 63417:tid 63450] [client 20.100.192.104:28672] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aY2mqf8gSb97qRMtXCKrfAAAAEE"]
[Thu Feb 12 18:08:42.094300 2026] [:error] [pid 63418:tid 63476] [client 20.100.192.104:18003] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aY2mqtzjh-bbJnStPZKiFgAAAIA"]
[Thu Feb 12 18:08:43.053995 2026] [:error] [pid 65064:tid 65073] [client 20.100.192.104:24188] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aY2mqxOvRgscTcqsMBmTdQAAAMY"]
[Thu Feb 12 18:08:43.879382 2026] [:error] [pid 63418:tid 63498] [client 20.100.192.104:20150] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aY2mq9zjh-bbJnStPZKiGgAAAJY"]
[Thu Feb 12 18:08:44.790635 2026] [:error] [pid 63416:tid 63434] [client 20.100.192.104:18386] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zwq13.php"] [unique_id "aY2mrL2wmecPaCHcM2-JKQAAAY0"]
[Thu Feb 12 18:08:46.396467 2026] [:error] [pid 65064:tid 65085] [client 20.100.192.104:9371] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zwq13.php"] [unique_id "aY2mrhOvRgscTcqsMBmThQAAANI"]
[Thu Feb 12 18:08:47.463543 2026] [:error] [pid 63511:tid 63520] [client 20.100.192.104:28780] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zwq13.php"] [unique_id "aY2mr6QCQbD5BgeyIk3P2AAAAAc"]
[Thu Feb 12 18:08:48.310971 2026] [:error] [pid 63418:tid 63476] [client 20.100.192.104:20105] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zwq13.php"] [unique_id "aY2msNzjh-bbJnStPZKiIQAAAIA"]
[Thu Feb 12 18:08:49.933130 2026] [:error] [pid 63416:tid 63435] [client 20.100.192.104:18030] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/"] [unique_id "aY2msb2wmecPaCHcM2-JLwAAAY4"]
[Thu Feb 12 18:08:50.779761 2026] [:error] [pid 65064:tid 65068] [client 20.100.192.104:24233] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/"] [unique_id "aY2mshOvRgscTcqsMBmTlAAAAME"]
[Thu Feb 12 18:08:51.562832 2026] [:error] [pid 63416:tid 63427] [client 20.100.192.104:17998] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/"] [unique_id "aY2ms72wmecPaCHcM2-JMwAAAYY"]
[Thu Feb 12 18:08:53.164170 2026] [:error] [pid 63511:tid 63515] [client 20.100.192.104:6914] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/"] [unique_id "aY2mtaQCQbD5BgeyIk3P6AAAAAI"]
[Thu Feb 12 18:08:55.076929 2026] [:error] [pid 63511:tid 63536] [client 20.100.192.104:24192] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/museu/yhweq.php"] [unique_id "aY2mt6QCQbD5BgeyIk3P8gAAABc"]
[Thu Feb 12 18:08:56.104436 2026] [:error] [pid 63417:tid 63463] [client 20.100.192.104:10432] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/museu/yhweq.php"] [unique_id "aY2muP8gSb97qRMtXCKrlwAAAE4"]
[Thu Feb 12 18:08:57.177355 2026] [:error] [pid 63418:tid 63486] [client 20.100.192.104:34406] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/museu/yhweq.php"] [unique_id "aY2mudzjh-bbJnStPZKiLgAAAIo"]
[Thu Feb 12 18:08:58.002425 2026] [:error] [pid 63417:tid 63460] [client 20.100.192.104:25051] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/museu/yhweq.php"] [unique_id "aY2muv8gSb97qRMtXCKrmQAAAEs"]
[Thu Feb 12 18:08:59.197750 2026] [:error] [pid 63418:tid 63484] [client 20.100.192.104:7108] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.cache/x.php"] [unique_id "aY2mu9zjh-bbJnStPZKiNAAAAIg"]
[Thu Feb 12 18:09:00.225003 2026] [:error] [pid 63418:tid 63491] [client 20.100.192.104:22253] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.cache/x.php"] [unique_id "aY2mvNzjh-bbJnStPZKiPAAAAI8"]
[Thu Feb 12 18:09:01.354101 2026] [:error] [pid 63511:tid 63536] [client 20.100.192.104:9687] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.cache/x.php"] [unique_id "aY2mvaQCQbD5BgeyIk3P_AAAABc"]
[Thu Feb 12 18:09:01.989278 2026] [:error] [pid 65064:tid 65082] [client 20.100.192.104:25039] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.cache/x.php"] [unique_id "aY2mvROvRgscTcqsMBmTmwAAAM8"]
[Thu Feb 12 18:09:02.785251 2026] [:error] [pid 63417:tid 63457] [client 20.100.192.104:17233] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/la.php"] [unique_id "aY2mvv8gSb97qRMtXCKroQAAAEg"]
[Thu Feb 12 18:09:03.522647 2026] [:error] [pid 63416:tid 63445] [client 20.100.192.104:29426] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/la.php"] [unique_id "aY2mv72wmecPaCHcM2-JRAAAAZg"]
[Thu Feb 12 18:09:04.371786 2026] [:error] [pid 63511:tid 63534] [client 20.100.192.104:23223] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/la.php"] [unique_id "aY2mwKQCQbD5BgeyIk3QBwAAABU"]
[Thu Feb 12 18:09:05.842755 2026] [:error] [pid 63511:tid 63533] [client 20.100.192.104:29390] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/la.php"] [unique_id "aY2mwaQCQbD5BgeyIk3QCQAAABQ"]
[Thu Feb 12 18:09:06.637163 2026] [:error] [pid 63418:tid 63491] [client 20.100.192.104:34398] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/install.php"] [unique_id "aY2mwtzjh-bbJnStPZKiSAAAAI8"]
[Thu Feb 12 18:09:07.297912 2026] [:error] [pid 63511:tid 63513] [client 20.100.192.104:17262] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/install.php"] [unique_id "aY2mw6QCQbD5BgeyIk3QDAAAAAA"]
[Thu Feb 12 18:09:08.013621 2026] [:error] [pid 63511:tid 63523] [client 20.100.192.104:12395] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/install.php"] [unique_id "aY2mxKQCQbD5BgeyIk3QEAAAAAo"]
[Thu Feb 12 18:09:08.811017 2026] [:error] [pid 65064:tid 65086] [client 20.100.192.104:9856] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/install.php"] [unique_id "aY2mxBOvRgscTcqsMBmTqQAAANM"]
[Thu Feb 12 18:09:14.164902 2026] [:error] [pid 63416:tid 63438] [client 20.100.192.104:9452] [client 20.100.192.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aY2myr2wmecPaCHcM2-JYQAAAZE"]
[Thu Feb 12 18:09:18.914781 2026] [:error] [pid 63417:tid 63452] [client 20.100.192.104:22166] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/environment.php"] [unique_id "aY2mzv8gSb97qRMtXCKrwgAAAEM"]
[Thu Feb 12 18:09:20.397171 2026] [:error] [pid 63417:tid 63464] [client 20.100.192.104:15303] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/environment.php"] [unique_id "aY2m0P8gSb97qRMtXCKrxAAAAE8"]
[Thu Feb 12 18:09:21.071951 2026] [:error] [pid 63416:tid 63428] [client 20.100.192.104:26183] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/environment.php"] [unique_id "aY2m0b2wmecPaCHcM2-JcAAAAYc"]
[Thu Feb 12 18:09:22.083378 2026] [:error] [pid 63511:tid 63530] [client 20.100.192.104:9885] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/environment.php"] [unique_id "aY2m0qQCQbD5BgeyIk3QJwAAABE"]
[Thu Feb 12 18:09:22.854392 2026] [:error] [pid 63511:tid 63536] [client 20.100.192.104:34305] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ho/wpup.php"] [unique_id "aY2m0qQCQbD5BgeyIk3QKgAAABc"]
[Thu Feb 12 18:09:24.178350 2026] [:error] [pid 63417:tid 63457] [client 20.100.192.104:14498] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ho/wpup.php"] [unique_id "aY2m1P8gSb97qRMtXCKrzwAAAEg"]
[Thu Feb 12 18:09:24.877209 2026] [:error] [pid 63416:tid 63421] [client 20.100.192.104:8583] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ho/wpup.php"] [unique_id "aY2m1L2wmecPaCHcM2-JdgAAAYA"]
[Thu Feb 12 18:09:25.565883 2026] [:error] [pid 63418:tid 63487] [client 20.100.192.104:34359] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ho/wpup.php"] [unique_id "aY2m1dzjh-bbJnStPZKiVwAAAIs"]
[Thu Feb 12 18:09:26.745633 2026] [:error] [pid 63416:tid 63424] [client 20.100.192.104:22638] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bnn_.php"] [unique_id "aY2m1r2wmecPaCHcM2-JfQAAAYM"]
[Thu Feb 12 18:09:27.581537 2026] [:error] [pid 65064:tid 65090] [client 20.100.192.104:11846] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bnn_.php"] [unique_id "aY2m1xOvRgscTcqsMBmT3wAAANc"]
[Thu Feb 12 18:09:28.357345 2026] [:error] [pid 63417:tid 63449] [client 20.100.192.104:21024] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bnn_.php"] [unique_id "aY2m2P8gSb97qRMtXCKr1wAAAEA"]
[Thu Feb 12 18:09:29.313786 2026] [:error] [pid 63418:tid 63478] [client 20.100.192.104:11810] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bnn_.php"] [unique_id "aY2m2dzjh-bbJnStPZKiWgAAAII"]
[Thu Feb 12 18:09:30.264875 2026] [:error] [pid 63511:tid 63534] [client 20.100.192.104:11872] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1337.php"] [unique_id "aY2m2qQCQbD5BgeyIk3QNAAAABU"]
[Thu Feb 12 18:09:34.390252 2026] [:error] [pid 65064:tid 65067] [client 20.100.192.104:27685] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1337.php"] [unique_id "aY2m3hOvRgscTcqsMBmT7AAAAMA"]
[Thu Feb 12 18:09:35.427960 2026] [:error] [pid 65064:tid 65089] [client 20.100.192.104:27673] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1337.php"] [unique_id "aY2m3xOvRgscTcqsMBmT8QAAANY"]
[Thu Feb 12 18:09:36.200360 2026] [:error] [pid 63416:tid 63433] [client 20.100.192.104:13330] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1337.php"] [unique_id "aY2m4L2wmecPaCHcM2-JiwAAAYw"]
[Thu Feb 12 18:09:39.388767 2026] [:error] [pid 63417:tid 63450] [client 20.100.192.104:32235] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/test.php"] [unique_id "aY2m4_8gSb97qRMtXCKr9AAAAEE"]
[Thu Feb 12 18:09:40.781341 2026] [:error] [pid 65064:tid 65074] [client 20.100.192.104:19738] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/test.php"] [unique_id "aY2m5BOvRgscTcqsMBmUAAAAAMc"]
[Thu Feb 12 18:09:41.895521 2026] [:error] [pid 63416:tid 63421] [client 20.100.192.104:19766] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/test.php"] [unique_id "aY2m5b2wmecPaCHcM2-JlgAAAYA"]
[Thu Feb 12 18:09:43.230191 2026] [:error] [pid 65064:tid 65077] [client 20.100.192.104:11087] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/test.php"] [unique_id "aY2m5xOvRgscTcqsMBmUCgAAAMo"]
[Thu Feb 12 18:09:44.151036 2026] [:error] [pid 63416:tid 63432] [client 20.100.192.104:22543] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/menu.php"] [unique_id "aY2m6L2wmecPaCHcM2-JnQAAAYs"]
[Thu Feb 12 18:09:45.037388 2026] [:error] [pid 63511:tid 63535] [client 20.100.192.104:14134] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/menu.php"] [unique_id "aY2m6aQCQbD5BgeyIk3QRgAAABY"]
[Thu Feb 12 18:09:46.246643 2026] [:error] [pid 63418:tid 63479] [client 20.100.192.104:11107] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/menu.php"] [unique_id "aY2m6tzjh-bbJnStPZKiewAAAIM"]
[Thu Feb 12 18:09:47.171702 2026] [:error] [pid 63511:tid 63530] [client 20.100.192.104:13319] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/menu.php"] [unique_id "aY2m66QCQbD5BgeyIk3QSwAAABE"]
[Thu Feb 12 18:09:49.043682 2026] [:error] [pid 65064:tid 65077] [client 20.100.192.104:6902] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/content.php"] [unique_id "aY2m7ROvRgscTcqsMBmUEwAAAMo"]
[Thu Feb 12 18:09:49.721033 2026] [:error] [pid 63417:tid 63449] [client 20.100.192.104:16120] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/content.php"] [unique_id "aY2m7f8gSb97qRMtXCKsAwAAAEA"]
[Thu Feb 12 18:09:50.685502 2026] [:error] [pid 65064:tid 65071] [client 20.100.192.104:11345] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/content.php"] [unique_id "aY2m7hOvRgscTcqsMBmUGAAAAMQ"]
[Thu Feb 12 18:09:51.595626 2026] [:error] [pid 65064:tid 65076] [client 20.100.192.104:6854] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/content.php"] [unique_id "aY2m7xOvRgscTcqsMBmUIAAAAMk"]
[Thu Feb 12 18:09:52.226205 2026] [:error] [pid 65064:tid 65080] [client 20.100.192.104:6871] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wqqs.php"] [unique_id "aY2m8BOvRgscTcqsMBmUJAAAAM0"]
[Thu Feb 12 18:09:52.922846 2026] [:error] [pid 63417:tid 63466] [client 20.100.192.104:54633] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wqqs.php"] [unique_id "aY2m8P8gSb97qRMtXCKsBgAAAFE"]
[Thu Feb 12 18:09:53.906196 2026] [:error] [pid 63511:tid 63514] [client 20.100.192.104:29347] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wqqs.php"] [unique_id "aY2m8aQCQbD5BgeyIk3QVAAAAAE"]
[Thu Feb 12 18:09:55.371502 2026] [:error] [pid 63511:tid 63523] [client 20.100.192.104:29348] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wqqs.php"] [unique_id "aY2m86QCQbD5BgeyIk3QWAAAAAo"]
[Thu Feb 12 18:09:56.459005 2026] [:error] [pid 63418:tid 63496] [client 20.100.192.104:15953] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ole.php"] [unique_id "aY2m9Nzjh-bbJnStPZKihAAAAJQ"]
[Thu Feb 12 18:09:58.555684 2026] [:error] [pid 63418:tid 63494] [client 20.100.192.104:17631] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ole.php"] [unique_id "aY2m9tzjh-bbJnStPZKiigAAAJI"]
[Thu Feb 12 18:10:08.519137 2026] [:error] [pid 63416:tid 63422] [client 20.100.192.104:51747] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ole.php"] [unique_id "aY2nAL2wmecPaCHcM2-JwAAAAYE"]
[Thu Feb 12 18:10:12.303940 2026] [:error] [pid 63511:tid 63527] [client 20.100.192.104:51742] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/json.php"] [unique_id "aY2nBKQCQbD5BgeyIk3QdQAAAA4"]
[Thu Feb 12 18:10:13.592449 2026] [:error] [pid 65064:tid 65069] [client 20.100.192.104:6858] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/json.php"] [unique_id "aY2nBROvRgscTcqsMBmVAAAAAMI"]
[Thu Feb 12 18:10:15.061294 2026] [:error] [pid 63416:tid 63440] [client 20.100.192.104:11388] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/json.php"] [unique_id "aY2nB72wmecPaCHcM2-JxAAAAZM"]
[Thu Feb 12 18:10:15.794470 2026] [:error] [pid 63416:tid 63432] [client 20.100.192.104:12858] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/json.php"] [unique_id "aY2nB72wmecPaCHcM2-JxQAAAYs"]
[Thu Feb 12 18:10:16.601534 2026] [:error] [pid 63418:tid 63476] [client 20.100.192.104:51797] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/p.php"] [unique_id "aY2nCNzjh-bbJnStPZKinwAAAIA"]
[Thu Feb 12 18:10:17.579520 2026] [:error] [pid 63416:tid 63431] [client 20.100.192.104:51735] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/p.php"] [unique_id "aY2nCb2wmecPaCHcM2-JxwAAAYo"]
[Thu Feb 12 18:10:25.846672 2026] [:error] [pid 63418:tid 63495] [client 20.100.192.104:51835] [client 20.100.192.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aY2nEdzjh-bbJnStPZKiswAAAJM"]
[Thu Feb 12 18:10:28.196065 2026] [:error] [pid 63511:tid 63530] [client 20.100.192.104:13413] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/network/"] [unique_id "aY2nFKQCQbD5BgeyIk3QlAAAABE"]
[Thu Feb 12 18:10:29.187880 2026] [:error] [pid 63418:tid 63486] [client 20.100.192.104:11275] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/network/"] [unique_id "aY2nFdzjh-bbJnStPZKiuAAAAIo"]
[Thu Feb 12 18:10:31.324911 2026] [:error] [pid 65064:tid 65077] [client 20.100.192.104:6236] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/network/"] [unique_id "aY2nFxOvRgscTcqsMBmVJAAAAMo"]
[Thu Feb 12 18:10:32.405582 2026] [:error] [pid 63416:tid 63422] [client 20.100.192.104:13388] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/network/"] [unique_id "aY2nGL2wmecPaCHcM2-J1wAAAYE"]
[Thu Feb 12 18:10:33.357282 2026] [:error] [pid 65064:tid 65071] [client 20.100.192.104:12808] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.trash7309/fafa/"] [unique_id "aY2nGROvRgscTcqsMBmVLwAAAMQ"]
[Thu Feb 12 18:10:35.099608 2026] [:error] [pid 63511:tid 63520] [client 20.100.192.104:13166] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.trash7309/fafa/"] [unique_id "aY2nG6QCQbD5BgeyIk3QmwAAAAc"]
[Thu Feb 12 18:10:36.380132 2026] [:error] [pid 63417:tid 63468] [client 20.100.192.104:24263] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.trash7309/fafa/"] [unique_id "aY2nHP8gSb97qRMtXCKsOAAAAFM"]
[Thu Feb 12 18:10:37.648580 2026] [:error] [pid 63416:tid 63441] [client 20.100.192.104:24258] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.trash7309/fafa/"] [unique_id "aY2nHb2wmecPaCHcM2-J9QAAAZQ"]
[Thu Feb 12 18:10:39.075615 2026] [:error] [pid 65064:tid 65080] [client 20.100.192.104:16012] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/oivcl.php"] [unique_id "aY2nHxOvRgscTcqsMBmVXgAAAM0"]
[Thu Feb 12 18:10:39.796416 2026] [:error] [pid 63418:tid 63495] [client 20.100.192.104:6258] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/oivcl.php"] [unique_id "aY2nH9zjh-bbJnStPZKi_AAAAJM"]
[Thu Feb 12 18:10:40.711888 2026] [:error] [pid 63417:tid 63468] [client 20.100.192.104:23616] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/oivcl.php"] [unique_id "aY2nIP8gSb97qRMtXCKsSAAAAFM"]
[Thu Feb 12 18:10:41.738974 2026] [:error] [pid 63416:tid 63426] [client 20.100.192.104:6297] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/oivcl.php"] [unique_id "aY2nIb2wmecPaCHcM2-KCgAAAYU"]
[Thu Feb 12 18:10:42.774298 2026] [:error] [pid 63511:tid 63530] [client 20.100.192.104:26677] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/hideo/network.php"] [unique_id "aY2nIqQCQbD5BgeyIk3QpwAAABE"]
[Thu Feb 12 18:10:45.086018 2026] [:error] [pid 63416:tid 63428] [client 20.100.192.104:6636] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/hideo/network.php"] [unique_id "aY2nJb2wmecPaCHcM2-KEAAAAYc"]
[Thu Feb 12 18:10:46.293727 2026] [:error] [pid 65064:tid 65082] [client 20.100.192.104:21409] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/hideo/network.php"] [unique_id "aY2nJhOvRgscTcqsMBmVgwAAAM8"]
[Thu Feb 12 18:10:48.071564 2026] [:error] [pid 63511:tid 63520] [client 20.100.192.104:26657] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/hideo/network.php"] [unique_id "aY2nKKQCQbD5BgeyIk3QrwAAAAc"]
[Thu Feb 12 18:10:49.284023 2026] [:error] [pid 63418:tid 63486] [client 20.100.192.104:12118] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/o.php"] [unique_id "aY2nKdzjh-bbJnStPZKjDgAAAIo"]
[Thu Feb 12 18:10:49.957524 2026] [:error] [pid 63418:tid 63497] [client 20.100.192.104:29945] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/o.php"] [unique_id "aY2nKdzjh-bbJnStPZKjDwAAAJU"]
[Thu Feb 12 18:10:51.170313 2026] [:error] [pid 63511:tid 63536] [client 20.100.192.104:6613] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/o.php"] [unique_id "aY2nK6QCQbD5BgeyIk3QsQAAABc"]
[Thu Feb 12 18:10:52.293483 2026] [:error] [pid 65064:tid 65088] [client 20.100.192.104:18690] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/o.php"] [unique_id "aY2nLBOvRgscTcqsMBmVkwAAANU"]
[Thu Feb 12 18:10:53.468517 2026] [:error] [pid 63511:tid 63519] [client 20.100.192.104:26637] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asd67.php"] [unique_id "aY2nLaQCQbD5BgeyIk3QtAAAAAY"]
[Thu Feb 12 18:10:54.134169 2026] [:error] [pid 63511:tid 63532] [client 20.100.192.104:28184] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asd67.php"] [unique_id "aY2nLqQCQbD5BgeyIk3QuAAAABM"]
[Thu Feb 12 18:10:54.774326 2026] [:error] [pid 63417:tid 63455] [client 20.100.192.104:6640] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asd67.php"] [unique_id "aY2nLv8gSb97qRMtXCKsawAAAEY"]
[Thu Feb 12 18:10:55.453398 2026] [:error] [pid 65064:tid 65079] [client 20.100.192.104:11347] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asd67.php"] [unique_id "aY2nLxOvRgscTcqsMBmVlwAAAMw"]
[Thu Feb 12 18:10:56.728781 2026] [:error] [pid 63418:tid 63484] [client 20.100.192.104:13406] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "aY2nMNzjh-bbJnStPZKjHQAAAIg"]
[Thu Feb 12 18:10:57.338559 2026] [:error] [pid 63416:tid 63441] [client 20.100.192.104:13439] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "aY2nMb2wmecPaCHcM2-KKwAAAZQ"]
[Thu Feb 12 18:10:58.728364 2026] [:error] [pid 63417:tid 63471] [client 20.100.192.104:9654] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "aY2nMv8gSb97qRMtXCKseAAAAFY"]
[Thu Feb 12 18:11:00.034407 2026] [:error] [pid 63418:tid 63478] [client 20.100.192.104:24308] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "aY2nNNzjh-bbJnStPZKjIQAAAII"]
[Thu Feb 12 18:11:01.572494 2026] [:error] [pid 63416:tid 63435] [client 20.100.192.104:12820] [client 20.100.192.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aY2nNb2wmecPaCHcM2-KMQAAAY4"]
[Thu Feb 12 18:11:02.712806 2026] [:error] [pid 63416:tid 63431] [client 20.100.192.104:24300] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mar.php"] [unique_id "aY2nNr2wmecPaCHcM2-KMgAAAYo"]
[Thu Feb 12 18:11:03.601641 2026] [:error] [pid 63417:tid 63458] [client 20.100.192.104:6623] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mar.php"] [unique_id "aY2nN_8gSb97qRMtXCKshwAAAEk"]
[Thu Feb 12 18:11:05.026615 2026] [:error] [pid 63418:tid 63485] [client 20.100.192.104:21431] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mar.php"] [unique_id "aY2nOdzjh-bbJnStPZKjJAAAAIk"]
[Thu Feb 12 18:11:06.532472 2026] [:error] [pid 63417:tid 63463] [client 20.100.192.104:23621] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mar.php"] [unique_id "aY2nOv8gSb97qRMtXCKslAAAAE4"]
[Thu Feb 12 18:11:08.088856 2026] [:error] [pid 65064:tid 65077] [client 20.100.192.104:13417] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/raw.php"] [unique_id "aY2nPBOvRgscTcqsMBmVrAAAAMo"]
[Thu Feb 12 18:11:09.269086 2026] [:error] [pid 63418:tid 63491] [client 20.100.192.104:51733] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/raw.php"] [unique_id "aY2nPdzjh-bbJnStPZKjLwAAAI8"]
[Thu Feb 12 18:11:11.132829 2026] [:error] [pid 63511:tid 63523] [client 20.100.192.104:12862] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/raw.php"] [unique_id "aY2nP6QCQbD5BgeyIk3QzwAAAAo"]
[Thu Feb 12 18:11:12.635545 2026] [:error] [pid 65064:tid 65080] [client 20.100.192.104:13420] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/raw.php"] [unique_id "aY2nQBOvRgscTcqsMBmVugAAAM0"]
[Thu Feb 12 18:11:13.664469 2026] [:error] [pid 63511:tid 63536] [client 20.100.192.104:13121] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "aY2nQaQCQbD5BgeyIk3Q1wAAABc"]
[Thu Feb 12 18:11:16.179704 2026] [:error] [pid 63418:tid 63477] [client 20.100.192.104:13158] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "aY2nRNzjh-bbJnStPZKjNAAAAIE"]
[Thu Feb 12 18:11:19.636150 2026] [:error] [pid 63511:tid 63537] [client 20.100.192.104:9611] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "aY2nR6QCQbD5BgeyIk3Q5gAAABg"]
[Thu Feb 12 18:11:21.304151 2026] [:error] [pid 63511:tid 63513] [client 20.100.192.104:12841] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "aY2nSaQCQbD5BgeyIk3Q6QAAAAA"]
[Thu Feb 12 18:11:35.280999 2026] [:error] [pid 63511:tid 63517] [client 20.100.192.104:11300] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dropdown.php"] [unique_id "aY2nV6QCQbD5BgeyIk3RFQAAAAQ"]
[Thu Feb 12 18:11:36.021827 2026] [:error] [pid 63417:tid 63472] [client 20.100.192.104:12813] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dropdown.php"] [unique_id "aY2nWP8gSb97qRMtXCKsvgAAAFc"]
[Thu Feb 12 18:11:36.835221 2026] [:error] [pid 63416:tid 63438] [client 20.100.192.104:12587] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dropdown.php"] [unique_id "aY2nWL2wmecPaCHcM2-KVQAAAZE"]
[Thu Feb 12 18:11:37.723905 2026] [:error] [pid 63417:tid 63470] [client 20.100.192.104:15974] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dropdown.php"] [unique_id "aY2nWf8gSb97qRMtXCKsxAAAAFU"]
[Thu Feb 12 18:11:38.449917 2026] [:error] [pid 63511:tid 63533] [client 20.100.192.104:12573] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sxo.php"] [unique_id "aY2nWqQCQbD5BgeyIk3RGgAAABQ"]
[Thu Feb 12 18:11:39.265658 2026] [:error] [pid 63418:tid 63478] [client 20.100.192.104:9967] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sxo.php"] [unique_id "aY2nW9zjh-bbJnStPZKjYAAAAII"]
[Thu Feb 12 18:11:41.175795 2026] [:error] [pid 63417:tid 63462] [client 20.100.192.104:51806] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sxo.php"] [unique_id "aY2nXf8gSb97qRMtXCKs1gAAAE0"]
[Thu Feb 12 18:11:44.866420 2026] [:error] [pid 63416:tid 63442] [client 20.100.192.104:24260] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sxo.php"] [unique_id "aY2nYL2wmecPaCHcM2-KaAAAAZU"]
[Thu Feb 12 18:11:46.482778 2026] [:error] [pid 63417:tid 63453] [client 20.100.192.104:51805] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2026.php"] [unique_id "aY2nYv8gSb97qRMtXCKs-AAAAEQ"]
[Thu Feb 12 18:11:48.653129 2026] [:error] [pid 63511:tid 63534] [client 20.100.192.104:51792] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2026.php"] [unique_id "aY2nZKQCQbD5BgeyIk3RSwAAABU"]
[Thu Feb 12 18:11:50.260316 2026] [:error] [pid 63418:tid 63482] [client 20.100.192.104:9155] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2026.php"] [unique_id "aY2nZtzjh-bbJnStPZKjfQAAAIY"]
[Thu Feb 12 18:11:51.717810 2026] [:error] [pid 65064:tid 65077] [client 20.100.192.104:11325] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2026.php"] [unique_id "aY2nZxOvRgscTcqsMBmWNQAAAMo"]
[Thu Feb 12 18:11:53.631526 2026] [:error] [pid 65064:tid 65067] [client 20.100.192.104:13161] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aY2naROvRgscTcqsMBmWRwAAAMA"]
[Thu Feb 12 18:11:54.865930 2026] [:error] [pid 63416:tid 63425] [client 20.100.192.104:13153] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aY2nar2wmecPaCHcM2-KgAAAAYQ"]
[Thu Feb 12 18:11:56.379821 2026] [:error] [pid 63417:tid 63469] [client 20.100.192.104:12599] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aY2nbP8gSb97qRMtXCKtCwAAAFQ"]
[Thu Feb 12 18:11:57.712802 2026] [:error] [pid 65064:tid 65067] [client 20.100.192.104:6892] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aY2nbROvRgscTcqsMBmWVwAAAMA"]
[Thu Feb 12 18:11:59.663416 2026] [:error] [pid 63417:tid 63456] [client 20.100.192.104:6900] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sto.php"] [unique_id "aY2nb_8gSb97qRMtXCKtEQAAAEc"]
[Thu Feb 12 18:12:00.519884 2026] [:error] [pid 63418:tid 63477] [client 20.100.192.104:54634] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sto.php"] [unique_id "aY2ncNzjh-bbJnStPZKjmQAAAIE"]
[Thu Feb 12 18:12:02.343336 2026] [:error] [pid 63511:tid 63513] [client 20.100.192.104:11546] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sto.php"] [unique_id "aY2ncqQCQbD5BgeyIk3RZQAAAAA"]
[Thu Feb 12 18:12:03.993636 2026] [:error] [pid 63511:tid 63535] [client 20.100.192.104:6761] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sto.php"] [unique_id "aY2nc6QCQbD5BgeyIk3RawAAABY"]
[Thu Feb 12 18:12:05.950897 2026] [:error] [pid 63511:tid 63523] [client 20.100.192.104:13312] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/h.php"] [unique_id "aY2ndaQCQbD5BgeyIk3RbgAAAAo"]
[Thu Feb 12 18:12:08.623016 2026] [:error] [pid 65064:tid 65085] [client 20.100.192.104:11575] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/h.php"] [unique_id "aY2neBOvRgscTcqsMBmWlAAAANI"]
[Thu Feb 12 18:12:11.012958 2026] [:error] [pid 63416:tid 63424] [client 20.100.192.104:11537] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/h.php"] [unique_id "aY2ne72wmecPaCHcM2-KrwAAAYM"]
[Thu Feb 12 18:12:12.552131 2026] [:error] [pid 63418:tid 63487] [client 20.100.192.104:50319] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/h.php"] [unique_id "aY2nfNzjh-bbJnStPZKjpQAAAIs"]
[Thu Feb 12 18:12:13.784027 2026] [:error] [pid 65064:tid 65087] [client 20.100.192.104:50309] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tphp.php"] [unique_id "aY2nfROvRgscTcqsMBmWsQAAANQ"]
[Thu Feb 12 18:12:18.088141 2026] [:error] [pid 63511:tid 63537] [client 20.100.192.104:11831] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tphp.php"] [unique_id "aY2ngqQCQbD5BgeyIk3RigAAABg"]
[Thu Feb 12 18:12:31.560163 2026] [:error] [pid 63416:tid 63423] [client 20.100.192.104:6741] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cs.php"] [unique_id "aY2nj72wmecPaCHcM2-K1AAAAYI"]
[Thu Feb 12 18:12:33.161760 2026] [:error] [pid 63417:tid 63464] [client 20.100.192.104:14217] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cs.php"] [unique_id "aY2nkf8gSb97qRMtXCKtPgAAAE8"]
[Thu Feb 12 18:12:38.479392 2026] [:error] [pid 63416:tid 63444] [client 20.100.192.104:6744] [client 20.100.192.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aY2nlr2wmecPaCHcM2-K6wAAAZc"]
[Thu Feb 12 18:12:43.413871 2026] [:error] [pid 63418:tid 63481] [client 20.100.192.104:14237] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/class-db.php"] [unique_id "aY2nm9zjh-bbJnStPZKkAQAAAIU"]
[Thu Feb 12 18:12:44.239339 2026] [:error] [pid 63417:tid 63454] [client 20.100.192.104:54665] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/class-db.php"] [unique_id "aY2nnP8gSb97qRMtXCKtVgAAAEU"]
[Thu Feb 12 18:12:45.100553 2026] [:error] [pid 63418:tid 63486] [client 20.100.192.104:6765] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/class-db.php"] [unique_id "aY2nndzjh-bbJnStPZKkBgAAAIo"]
[Thu Feb 12 18:12:46.094415 2026] [:error] [pid 63417:tid 63473] [client 20.100.192.104:22165] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/class-db.php"] [unique_id "aY2nnv8gSb97qRMtXCKtXAAAAFg"]
[Thu Feb 12 18:12:46.984856 2026] [:error] [pid 63416:tid 63423] [client 20.100.192.104:22266] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aY2nnr2wmecPaCHcM2-K-AAAAYI"]
[Thu Feb 12 18:12:47.815958 2026] [:error] [pid 65064:tid 65085] [client 20.100.192.104:16861] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aY2nnxOvRgscTcqsMBmXeQAAANI"]
[Thu Feb 12 18:12:48.806370 2026] [:error] [pid 63511:tid 63529] [client 20.100.192.104:15752] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aY2noKQCQbD5BgeyIk3RvgAAABA"]
[Thu Feb 12 18:12:49.520445 2026] [:error] [pid 65064:tid 65081] [client 20.100.192.104:23182] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aY2noROvRgscTcqsMBmXfwAAAM4"]
[Thu Feb 12 18:12:50.289844 2026] [:error] [pid 63417:tid 63470] [client 20.100.192.104:24428] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/Core-EconX/up.php"] [unique_id "aY2nov8gSb97qRMtXCKtYgAAAFU"]
[Thu Feb 12 18:12:51.243077 2026] [:error] [pid 63417:tid 63456] [client 20.100.192.104:9935] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/Core-EconX/up.php"] [unique_id "aY2no_8gSb97qRMtXCKtZwAAAEc"]
[Thu Feb 12 18:12:52.255723 2026] [:error] [pid 63417:tid 63466] [client 20.100.192.104:15044] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/Core-EconX/up.php"] [unique_id "aY2npP8gSb97qRMtXCKtbgAAAFE"]
[Thu Feb 12 18:12:53.045175 2026] [:error] [pid 63418:tid 63482] [client 20.100.192.104:34397] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/Core-EconX/up.php"] [unique_id "aY2npdzjh-bbJnStPZKkEgAAAIY"]
[Thu Feb 12 18:12:54.304123 2026] [:error] [pid 63416:tid 63443] [client 20.100.192.104:6726] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gib.php"] [unique_id "aY2npr2wmecPaCHcM2-LBwAAAZY"]
[Thu Feb 12 18:12:55.139141 2026] [:error] [pid 63511:tid 63526] [client 20.100.192.104:54659] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gib.php"] [unique_id "aY2np6QCQbD5BgeyIk3RyAAAAA0"]
[Thu Feb 12 18:12:56.099283 2026] [:error] [pid 63418:tid 63485] [client 20.100.192.104:6742] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gib.php"] [unique_id "aY2nqNzjh-bbJnStPZKkFAAAAIk"]
[Thu Feb 12 18:12:56.810125 2026] [:error] [pid 63418:tid 63481] [client 20.100.192.104:22823] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gib.php"] [unique_id "aY2nqNzjh-bbJnStPZKkFQAAAIU"]
[Thu Feb 12 18:12:58.521490 2026] [:error] [pid 63417:tid 63471] [client 20.100.192.104:14818] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wso.php"] [unique_id "aY2nqv8gSb97qRMtXCKtfQAAAFY"]
[Thu Feb 12 18:12:59.373860 2026] [:error] [pid 63416:tid 63422] [client 20.100.192.104:54669] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wso.php"] [unique_id "aY2nq72wmecPaCHcM2-LGQAAAYE"]
[Thu Feb 12 18:13:00.727821 2026] [:error] [pid 63511:tid 63522] [client 20.100.192.104:15071] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wso.php"] [unique_id "aY2nrKQCQbD5BgeyIk3R1gAAAAk"]
[Thu Feb 12 18:13:02.120795 2026] [:error] [pid 65064:tid 65071] [client 20.100.192.104:23198] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wso.php"] [unique_id "aY2nrhOvRgscTcqsMBmXlQAAAMQ"]
[Thu Feb 12 18:13:03.606823 2026] [:error] [pid 63511:tid 63537] [client 20.100.192.104:16852] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aY2nr6QCQbD5BgeyIk3R2wAAABg"]
[Thu Feb 12 18:13:04.191374 2026] [:error] [pid 65064:tid 65084] [client 20.100.192.104:22801] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aY2nsBOvRgscTcqsMBmXmwAAANE"]
[Thu Feb 12 18:13:04.813021 2026] [:error] [pid 65064:tid 65086] [client 20.100.192.104:22818] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aY2nsBOvRgscTcqsMBmXnQAAANM"]
[Thu Feb 12 18:13:05.664292 2026] [:error] [pid 63418:tid 63480] [client 20.100.192.104:16866] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aY2nsdzjh-bbJnStPZKkJwAAAIQ"]
[Thu Feb 12 18:13:06.395828 2026] [:error] [pid 65064:tid 65089] [client 20.100.192.104:16859] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/user/index.php"] [unique_id "aY2nshOvRgscTcqsMBmXogAAANY"]
[Thu Feb 12 18:13:07.064617 2026] [:error] [pid 65064:tid 65073] [client 20.100.192.104:15846] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/user/index.php"] [unique_id "aY2nsxOvRgscTcqsMBmXpwAAAMY"]
[Thu Feb 12 18:13:07.742144 2026] [:error] [pid 63416:tid 63422] [client 20.100.192.104:29406] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/user/index.php"] [unique_id "aY2ns72wmecPaCHcM2-LJQAAAYE"]
[Thu Feb 12 18:13:08.575898 2026] [:error] [pid 65064:tid 65086] [client 20.100.192.104:21479] [client 20.100.192.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/user/index.php"] [unique_id "aY2ntBOvRgscTcqsMBmXrAAAANM"]
[Thu Feb 12 20:09:47.476997 2026] [:error] [pid 63418:tid 63499] [client 104.28.163.222:39729] [client 104.28.163.222] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/style.php"] [unique_id "aY3DC9zjh-bbJnStPZLYMQAAAJc"]
[Fri Feb 13 05:32:03.922966 2026] [:error] [pid 49223:tid 49248] [client 20.111.48.18:37472] [client 20.111.48.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/moon.php"] [unique_id "aY5G0x8A_fZBamNLnfUwDwAAABA"]
[Fri Feb 13 05:32:04.966973 2026] [:error] [pid 49225:tid 49305] [client 20.111.48.18:30309] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/w.php"] [unique_id "aY5G1DwH8-zGxtAd3jvTrwAAAIs"]
[Fri Feb 13 05:32:05.975127 2026] [:error] [pid 49225:tid 49308] [client 20.111.48.18:1156] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/w.php"] [unique_id "aY5G1TwH8-zGxtAd3jvTsAAAAI4"]
[Fri Feb 13 05:32:07.614480 2026] [:error] [pid 49225:tid 49315] [client 20.111.48.18:33992] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/w.php"] [unique_id "aY5G1zwH8-zGxtAd3jvTtAAAAJU"]
[Fri Feb 13 05:32:09.695022 2026] [:error] [pid 49335:tid 49348] [client 20.111.48.18:22031] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/w.php"] [unique_id "aY5G2ap--SFY2nwOiqkuMwAAAMs"]
[Fri Feb 13 05:32:10.882588 2026] [:error] [pid 49335:tid 49355] [client 20.111.48.18:21119] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/zaa.php"] [unique_id "aY5G2qp--SFY2nwOiqkuPAAAANI"]
[Fri Feb 13 05:32:12.116185 2026] [:error] [pid 49223:tid 49234] [client 20.111.48.18:25310] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/zaa.php"] [unique_id "aY5G3B8A_fZBamNLnfUwGAAAAAI"]
[Fri Feb 13 05:32:13.262991 2026] [:error] [pid 49224:tid 49284] [client 20.111.48.18:1620] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/zaa.php"] [unique_id "aY5G3diAvPoWmw5YhwmMLQAAAFE"]
[Fri Feb 13 05:32:14.293482 2026] [:error] [pid 49225:tid 49299] [client 20.111.48.18:34017] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/zaa.php"] [unique_id "aY5G3jwH8-zGxtAd3jvTvgAAAIU"]
[Fri Feb 13 05:32:15.995955 2026] [:error] [pid 49225:tid 49298] [client 20.111.48.18:26314] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-miiss.php.php"] [unique_id "aY5G3zwH8-zGxtAd3jvTwwAAAIQ"]
[Fri Feb 13 05:32:17.499383 2026] [:error] [pid 49335:tid 49358] [client 20.111.48.18:22921] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-miiss.php.php"] [unique_id "aY5G4ap--SFY2nwOiqkuUAAAANU"]
[Fri Feb 13 05:32:18.392441 2026] [:error] [pid 49335:tid 49345] [client 20.111.48.18:37480] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-miiss.php.php"] [unique_id "aY5G4qp--SFY2nwOiqkuWwAAAMg"]
[Fri Feb 13 05:32:19.302634 2026] [:error] [pid 49224:tid 49285] [client 20.111.48.18:19524] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-miiss.php.php"] [unique_id "aY5G49iAvPoWmw5YhwmMOgAAAFI"]
[Fri Feb 13 05:32:22.084545 2026] [:error] [pid 51243:tid 51269] [client 20.111.48.18:1321] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gmo.php"] [unique_id "aY5G5sim7ZTAHzi7xZvCaQAAARg"]
[Fri Feb 13 05:32:23.134401 2026] [:error] [pid 49225:tid 49308] [client 20.111.48.18:25290] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gmo.php"] [unique_id "aY5G5zwH8-zGxtAd3jvT1wAAAI4"]
[Fri Feb 13 05:32:24.196458 2026] [:error] [pid 49335:tid 49349] [client 20.111.48.18:25281] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gmo.php"] [unique_id "aY5G6Kp--SFY2nwOiqkuaQAAAMw"]
[Fri Feb 13 05:32:25.018732 2026] [:error] [pid 49223:tid 49254] [client 20.111.48.18:30328] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gmo.php"] [unique_id "aY5G6R8A_fZBamNLnfUwLAAAABY"]
[Fri Feb 13 05:32:28.349995 2026] [:error] [pid 49335:tid 49355] [client 20.111.48.18:34005] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/"] [unique_id "aY5G7Kp--SFY2nwOiqkudwAAANI"]
[Fri Feb 13 05:32:29.696243 2026] [:error] [pid 49223:tid 49238] [client 20.111.48.18:20047] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/"] [unique_id "aY5G7R8A_fZBamNLnfUwMQAAAAY"]
[Fri Feb 13 05:32:30.677974 2026] [:error] [pid 49224:tid 49277] [client 20.111.48.18:27109] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/"] [unique_id "aY5G7tiAvPoWmw5YhwmMTwAAAEo"]
[Fri Feb 13 05:32:31.410607 2026] [:error] [pid 49335:tid 49343] [client 20.111.48.18:31932] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/"] [unique_id "aY5G76p--SFY2nwOiqkuggAAAMY"]
[Fri Feb 13 05:32:32.253103 2026] [:error] [pid 49335:tid 49350] [client 20.111.48.18:31071] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/install.php"] [unique_id "aY5G8Kp--SFY2nwOiqkuhQAAAM0"]
[Fri Feb 13 05:32:33.245091 2026] [:error] [pid 49225:tid 49311] [client 20.111.48.18:38124] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/install.php"] [unique_id "aY5G8TwH8-zGxtAd3jvT4QAAAJE"]
[Fri Feb 13 05:32:34.051244 2026] [:error] [pid 51243:tid 51260] [client 20.111.48.18:28118] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/install.php"] [unique_id "aY5G8sim7ZTAHzi7xZvCeQAAAQ8"]
[Fri Feb 13 05:32:35.622495 2026] [:error] [pid 51243:tid 51257] [client 20.111.48.18:34055] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/install.php"] [unique_id "aY5G88im7ZTAHzi7xZvCfQAAAQw"]
[Fri Feb 13 05:32:37.378614 2026] [:error] [pid 49225:tid 49299] [client 20.111.48.18:38977] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aY5G9TwH8-zGxtAd3jvT5QAAAIU"]
[Fri Feb 13 05:32:39.026368 2026] [:error] [pid 49224:tid 49286] [client 20.111.48.18:37331] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aY5G99iAvPoWmw5YhwmMVQAAAFM"]
[Fri Feb 13 05:32:40.114292 2026] [:error] [pid 51243:tid 51262] [client 20.111.48.18:37375] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aY5G-Mim7ZTAHzi7xZvCiwAAARE"]
[Fri Feb 13 05:32:41.971914 2026] [:error] [pid 49224:tid 49291] [client 20.111.48.18:30294] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aY5G-diAvPoWmw5YhwmMWQAAAFg"]
[Fri Feb 13 05:32:46.087905 2026] [:error] [pid 49335:tid 49350] [client 20.111.48.18:18971] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aY5G_qp--SFY2nwOiqkupQAAAM0"]
[Fri Feb 13 05:32:47.518839 2026] [:error] [pid 49225:tid 49308] [client 20.111.48.18:30374] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aY5G_zwH8-zGxtAd3jvT-QAAAI4"]
[Fri Feb 13 05:32:49.178992 2026] [:error] [pid 49225:tid 49317] [client 20.111.48.18:18972] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aY5HATwH8-zGxtAd3jvT_AAAAJc"]
[Fri Feb 13 05:32:50.255094 2026] [:error] [pid 49225:tid 49311] [client 20.111.48.18:31876] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aY5HAjwH8-zGxtAd3jvT_QAAAJE"]
[Fri Feb 13 05:32:51.456512 2026] [:error] [pid 49224:tid 49290] [client 20.111.48.18:18984] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ma.php"] [unique_id "aY5HA9iAvPoWmw5YhwmMZgAAAFc"]
[Fri Feb 13 05:32:53.179748 2026] [:error] [pid 49224:tid 49285] [client 20.111.48.18:34052] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ma.php"] [unique_id "aY5HBdiAvPoWmw5YhwmMaQAAAFI"]
[Fri Feb 13 05:32:54.490889 2026] [:error] [pid 49224:tid 49283] [client 20.111.48.18:31903] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ma.php"] [unique_id "aY5HBtiAvPoWmw5YhwmMcAAAAFA"]
[Fri Feb 13 05:32:55.724005 2026] [:error] [pid 49335:tid 49355] [client 20.111.48.18:17167] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ma.php"] [unique_id "aY5HB6p--SFY2nwOiqkusQAAANI"]
[Fri Feb 13 05:32:56.746627 2026] [:error] [pid 49225:tid 49315] [client 20.111.48.18:17170] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fetch.php"] [unique_id "aY5HCDwH8-zGxtAd3jvUCAAAAJU"]
[Fri Feb 13 05:32:58.790514 2026] [:error] [pid 49223:tid 49236] [client 20.111.48.18:34669] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fetch.php"] [unique_id "aY5HCh8A_fZBamNLnfUwXwAAAAQ"]
[Fri Feb 13 05:33:00.670842 2026] [:error] [pid 49225:tid 49299] [client 20.111.48.18:31917] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fetch.php"] [unique_id "aY5HDDwH8-zGxtAd3jvUIgAAAIU"]
[Fri Feb 13 05:33:02.498789 2026] [:error] [pid 49223:tid 49254] [client 20.111.48.18:17180] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fetch.php"] [unique_id "aY5HDh8A_fZBamNLnfUwbgAAABY"]
[Fri Feb 13 05:33:11.610638 2026] [:error] [pid 49223:tid 49243] [client 20.111.48.18:34685] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aY5HFx8A_fZBamNLnfUwjAAAAAs"]
[Fri Feb 13 05:33:12.208448 2026] [:error] [pid 49224:tid 49281] [client 20.111.48.18:2039] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aY5HGNiAvPoWmw5YhwmMmgAAAE4"]
[Fri Feb 13 05:33:12.831279 2026] [:error] [pid 51243:tid 51248] [client 20.111.48.18:30392] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aY5HGMim7ZTAHzi7xZvC6gAAAQM"]
[Fri Feb 13 05:33:14.406230 2026] [:error] [pid 49335:tid 49355] [client 20.111.48.18:36280] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aY5HGqp--SFY2nwOiqkvBAAAANI"]
[Fri Feb 13 05:33:15.350802 2026] [:error] [pid 49224:tid 49284] [client 20.111.48.18:1985] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/zwso.php"] [unique_id "aY5HG9iAvPoWmw5YhwmMnQAAAFE"]
[Fri Feb 13 05:33:16.807880 2026] [:error] [pid 49225:tid 49299] [client 20.111.48.18:37943] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/zwso.php"] [unique_id "aY5HHDwH8-zGxtAd3jvUVAAAAIU"]
[Fri Feb 13 05:33:18.949836 2026] [:error] [pid 49335:tid 49351] [client 20.111.48.18:36645] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/zwso.php"] [unique_id "aY5HHqp--SFY2nwOiqkvFQAAAM4"]
[Fri Feb 13 05:33:20.111035 2026] [:error] [pid 49224:tid 49285] [client 20.111.48.18:23020] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/zwso.php"] [unique_id "aY5HINiAvPoWmw5YhwmMqgAAAFI"]
[Fri Feb 13 05:33:20.868066 2026] [:error] [pid 49335:tid 49355] [client 20.111.48.18:37942] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/about/function.php"] [unique_id "aY5HIKp--SFY2nwOiqkvHAAAANI"]
[Fri Feb 13 05:33:23.812708 2026] [:error] [pid 51243:tid 51245] [client 20.111.48.18:38866] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/about/function.php"] [unique_id "aY5HI8im7ZTAHzi7xZvC-AAAAQA"]
[Fri Feb 13 05:33:25.052973 2026] [:error] [pid 49223:tid 49233] [client 20.111.48.18:36263] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/about/function.php"] [unique_id "aY5HJR8A_fZBamNLnfUwowAAAAE"]
[Fri Feb 13 05:33:27.499763 2026] [:error] [pid 51243:tid 51260] [client 20.111.48.18:22982] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/about/function.php"] [unique_id "aY5HJ8im7ZTAHzi7xZvDAgAAAQ8"]
[Fri Feb 13 05:33:28.413021 2026] [:error] [pid 49223:tid 49245] [client 20.111.48.18:25366] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/geck.php"] [unique_id "aY5HKB8A_fZBamNLnfUwqwAAAA0"]
[Fri Feb 13 05:33:29.642537 2026] [:error] [pid 49225:tid 49298] [client 20.111.48.18:38861] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/geck.php"] [unique_id "aY5HKTwH8-zGxtAd3jvUcAAAAIQ"]
[Fri Feb 13 05:33:31.222642 2026] [:error] [pid 49225:tid 49318] [client 20.111.48.18:1544] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/geck.php"] [unique_id "aY5HKzwH8-zGxtAd3jvUdAAAAJg"]
[Fri Feb 13 05:33:34.464284 2026] [:error] [pid 49335:tid 49355] [client 20.111.48.18:1399] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/geck.php"] [unique_id "aY5HLqp--SFY2nwOiqkvQwAAANI"]
[Fri Feb 13 05:33:35.512399 2026] [:error] [pid 49225:tid 49302] [client 20.111.48.18:1562] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/errw.php"] [unique_id "aY5HLzwH8-zGxtAd3jvUewAAAIg"]
[Fri Feb 13 05:33:36.205184 2026] [:error] [pid 49223:tid 49254] [client 20.111.48.18:34931] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/errw.php"] [unique_id "aY5HMB8A_fZBamNLnfUw0wAAABY"]
[Fri Feb 13 05:33:36.975987 2026] [:error] [pid 49223:tid 49256] [client 20.111.48.18:32607] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/errw.php"] [unique_id "aY5HMB8A_fZBamNLnfUw1wAAABg"]
[Fri Feb 13 05:33:37.690309 2026] [:error] [pid 51243:tid 51268] [client 20.111.48.18:34941] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/errw.php"] [unique_id "aY5HMcim7ZTAHzi7xZvDGAAAARc"]
[Fri Feb 13 05:33:38.508135 2026] [:error] [pid 49223:tid 49254] [client 20.111.48.18:38209] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aY5HMh8A_fZBamNLnfUw2wAAABY"]
[Fri Feb 13 05:33:39.181121 2026] [:error] [pid 49224:tid 49278] [client 20.111.48.18:38257] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aY5HM9iAvPoWmw5YhwmM2AAAAEs"]
[Fri Feb 13 05:33:45.813265 2026] [:error] [pid 49335:tid 49337] [client 20.111.48.18:38857] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aY5HOap--SFY2nwOiqkvqwAAAMA"]
[Fri Feb 13 05:33:47.637999 2026] [:error] [pid 49335:tid 49342] [client 20.111.48.18:30791] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aY5HO6p--SFY2nwOiqkvswAAAMU"]
[Fri Feb 13 05:33:48.747032 2026] [:error] [pid 49335:tid 49347] [client 20.111.48.18:1376] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/jsond.php"] [unique_id "aY5HPKp--SFY2nwOiqkvtgAAAMo"]
[Fri Feb 13 05:33:49.786531 2026] [:error] [pid 49335:tid 49341] [client 20.111.48.18:1401] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/jsond.php"] [unique_id "aY5HPap--SFY2nwOiqkvugAAAMQ"]
[Fri Feb 13 05:33:50.588190 2026] [:error] [pid 49335:tid 49348] [client 20.111.48.18:37910] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/jsond.php"] [unique_id "aY5HPqp--SFY2nwOiqkvvgAAAMs"]
[Fri Feb 13 05:33:51.350826 2026] [:error] [pid 49225:tid 49312] [client 20.111.48.18:1047] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/jsond.php"] [unique_id "aY5HPzwH8-zGxtAd3jvUmgAAAJI"]
[Fri Feb 13 05:33:52.038335 2026] [:error] [pid 49335:tid 49340] [client 20.111.48.18:34901] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/configuration.php"] [unique_id "aY5HQKp--SFY2nwOiqkvxgAAAMM"]
[Fri Feb 13 05:33:53.552683 2026] [:error] [pid 51243:tid 51257] [client 20.111.48.18:6354] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/configuration.php"] [unique_id "aY5HQcim7ZTAHzi7xZvDIQAAAQw"]
[Fri Feb 13 05:33:54.762595 2026] [:error] [pid 49224:tid 49283] [client 20.111.48.18:6349] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/configuration.php"] [unique_id "aY5HQtiAvPoWmw5YhwmM8wAAAFA"]
[Fri Feb 13 05:33:56.358143 2026] [:error] [pid 49224:tid 49291] [client 20.111.48.18:31777] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/configuration.php"] [unique_id "aY5HRNiAvPoWmw5YhwmM-QAAAFg"]
[Fri Feb 13 05:33:59.616469 2026] [:error] [pid 49335:tid 49338] [client 20.111.48.18:38231] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/100.kb.php"] [unique_id "aY5HR6p--SFY2nwOiqkv2wAAAME"]
[Fri Feb 13 05:34:03.393879 2026] [:error] [pid 49224:tid 49287] [client 20.111.48.18:38237] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/100.kb.php"] [unique_id "aY5HS9iAvPoWmw5YhwmNAgAAAFQ"]
[Fri Feb 13 05:34:06.261403 2026] [:error] [pid 51243:tid 51262] [client 20.111.48.18:1026] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/100.kb.php"] [unique_id "aY5HTsim7ZTAHzi7xZvDQAAAARE"]
[Fri Feb 13 05:34:07.731014 2026] [:error] [pid 49223:tid 49254] [client 20.111.48.18:58201] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/100.kb.php"] [unique_id "aY5HTx8A_fZBamNLnfUxCwAAABY"]
[Fri Feb 13 05:34:08.736905 2026] [:error] [pid 49225:tid 49295] [client 20.111.48.18:31806] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/rip.php"] [unique_id "aY5HUDwH8-zGxtAd3jvUywAAAIE"]
[Fri Feb 13 05:34:10.170039 2026] [:error] [pid 49335:tid 49352] [client 20.111.48.18:21515] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/rip.php"] [unique_id "aY5HUqp--SFY2nwOiqkv-AAAAM8"]
[Fri Feb 13 05:34:23.760716 2026] [:error] [pid 49335:tid 49346] [client 20.111.48.18:22517] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aY5HX6p--SFY2nwOiqkwIwAAAMk"]
[Fri Feb 13 05:34:24.487308 2026] [:error] [pid 49335:tid 49357] [client 20.111.48.18:15647] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aY5HYKp--SFY2nwOiqkwJgAAANQ"]
[Fri Feb 13 05:34:25.643670 2026] [:error] [pid 49335:tid 49351] [client 20.111.48.18:24572] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aY5HYap--SFY2nwOiqkwMAAAAM4"]
[Fri Feb 13 05:34:27.002780 2026] [:error] [pid 49335:tid 49354] [client 20.111.48.18:23075] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aY5HY6p--SFY2nwOiqkwOwAAANE"]
[Fri Feb 13 05:34:27.819370 2026] [:error] [pid 49224:tid 49286] [client 20.111.48.18:31166] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ap.php"] [unique_id "aY5HY9iAvPoWmw5YhwmNJQAAAFM"]
[Fri Feb 13 05:34:29.401717 2026] [:error] [pid 49225:tid 49297] [client 20.111.48.18:21529] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ap.php"] [unique_id "aY5HZTwH8-zGxtAd3jvU4wAAAIM"]
[Fri Feb 13 05:34:30.178786 2026] [:error] [pid 49335:tid 49341] [client 20.111.48.18:31109] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ap.php"] [unique_id "aY5HZqp--SFY2nwOiqkwQgAAAMQ"]
[Fri Feb 13 05:34:32.321060 2026] [:error] [pid 49224:tid 49273] [client 20.111.48.18:21541] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ap.php"] [unique_id "aY5HaNiAvPoWmw5YhwmNMAAAAEY"]
[Fri Feb 13 05:34:33.438108 2026] [:error] [pid 49224:tid 49281] [client 20.111.48.18:27008] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/doc.php"] [unique_id "aY5HadiAvPoWmw5YhwmNMgAAAE4"]
[Fri Feb 13 05:34:34.178688 2026] [:error] [pid 49335:tid 49351] [client 20.111.48.18:15671] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/doc.php"] [unique_id "aY5Haqp--SFY2nwOiqkwSAAAAM4"]
[Fri Feb 13 05:34:35.218911 2026] [:error] [pid 51243:tid 51262] [client 20.111.48.18:34950] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/doc.php"] [unique_id "aY5Ha8im7ZTAHzi7xZvDcgAAARE"]
[Fri Feb 13 05:34:35.987309 2026] [:error] [pid 49225:tid 49316] [client 20.111.48.18:27033] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/doc.php"] [unique_id "aY5HazwH8-zGxtAd3jvU6gAAAJY"]
[Fri Feb 13 05:34:38.205001 2026] [:error] [pid 49223:tid 49242] [client 20.111.48.18:34960] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/clasa99.php"] [unique_id "aY5Hbh8A_fZBamNLnfUxQQAAAAo"]
[Fri Feb 13 05:34:39.204676 2026] [:error] [pid 49225:tid 49294] [client 20.111.48.18:23520] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/clasa99.php"] [unique_id "aY5HbzwH8-zGxtAd3jvU9QAAAIA"]
[Fri Feb 13 05:34:40.137204 2026] [:error] [pid 49225:tid 49314] [client 20.111.48.18:23525] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/clasa99.php"] [unique_id "aY5HcDwH8-zGxtAd3jvU9gAAAJQ"]
[Fri Feb 13 05:34:41.402572 2026] [:error] [pid 49223:tid 49251] [client 20.111.48.18:27053] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/clasa99.php"] [unique_id "aY5HcR8A_fZBamNLnfUxSQAAABM"]
[Fri Feb 13 05:34:42.007453 2026] [:error] [pid 49335:tid 49349] [client 20.111.48.18:17940] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/an.php"] [unique_id "aY5Hcqp--SFY2nwOiqkwXAAAAMw"]
[Fri Feb 13 05:34:42.708272 2026] [:error] [pid 51243:tid 51250] [client 20.111.48.18:32872] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/an.php"] [unique_id "aY5Hcsim7ZTAHzi7xZvDdgAAAQU"]
[Fri Feb 13 05:34:43.523569 2026] [:error] [pid 49335:tid 49341] [client 20.111.48.18:21526] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/an.php"] [unique_id "aY5Hc6p--SFY2nwOiqkwYQAAAMQ"]
[Fri Feb 13 05:34:45.018330 2026] [:error] [pid 49223:tid 49256] [client 20.111.48.18:34945] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/an.php"] [unique_id "aY5HdR8A_fZBamNLnfUxTwAAABg"]
[Fri Feb 13 05:34:45.848035 2026] [:error] [pid 51243:tid 51268] [client 20.111.48.18:27060] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assacc.php"] [unique_id "aY5Hdcim7ZTAHzi7xZvDgQAAARc"]
[Fri Feb 13 05:34:47.050493 2026] [:error] [pid 51243:tid 51258] [client 20.111.48.18:31120] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assacc.php"] [unique_id "aY5Hd8im7ZTAHzi7xZvDhgAAAQ0"]
[Fri Feb 13 05:34:48.268732 2026] [:error] [pid 49225:tid 49314] [client 20.111.48.18:19011] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assacc.php"] [unique_id "aY5HeDwH8-zGxtAd3jvVDQAAAJQ"]
[Fri Feb 13 05:34:49.378702 2026] [:error] [pid 49223:tid 49252] [client 20.111.48.18:22503] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assacc.php"] [unique_id "aY5HeR8A_fZBamNLnfUxWwAAABQ"]
[Fri Feb 13 05:34:50.221937 2026] [:error] [pid 49223:tid 49255] [client 20.111.48.18:55118] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/hzz.php"] [unique_id "aY5Heh8A_fZBamNLnfUxXgAAABc"]
[Fri Feb 13 05:34:50.991950 2026] [:error] [pid 49335:tid 49347] [client 20.111.48.18:23495] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/hzz.php"] [unique_id "aY5Heqp--SFY2nwOiqkwbgAAAMo"]
[Fri Feb 13 05:34:51.619091 2026] [:error] [pid 49224:tid 49273] [client 20.111.48.18:36675] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/hzz.php"] [unique_id "aY5He9iAvPoWmw5YhwmNQwAAAEY"]
[Fri Feb 13 05:34:52.511675 2026] [:error] [pid 49224:tid 49282] [client 20.111.48.18:19028] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/hzz.php"] [unique_id "aY5HfNiAvPoWmw5YhwmNRgAAAE8"]
[Fri Feb 13 05:34:53.643017 2026] [:error] [pid 49335:tid 49345] [client 20.111.48.18:27038] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/~norapump/hah.php"] [unique_id "aY5Hfap--SFY2nwOiqkwcwAAAMg"]
[Fri Feb 13 05:34:55.058417 2026] [:error] [pid 49223:tid 49242] [client 20.111.48.18:31123] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/~norapump/hah.php"] [unique_id "aY5Hfx8A_fZBamNLnfUxYQAAAAo"]
[Fri Feb 13 05:34:56.223837 2026] [:error] [pid 49225:tid 49312] [client 20.111.48.18:27012] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/~norapump/hah.php"] [unique_id "aY5HgDwH8-zGxtAd3jvVHAAAAJI"]
[Fri Feb 13 05:34:57.123989 2026] [:error] [pid 49335:tid 49337] [client 20.111.48.18:32865] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/~norapump/hah.php"] [unique_id "aY5Hgap--SFY2nwOiqkwegAAAMA"]
[Fri Feb 13 05:34:57.903756 2026] [:error] [pid 49224:tid 49270] [client 20.111.48.18:55108] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/system.php"] [unique_id "aY5HgdiAvPoWmw5YhwmNSwAAAEM"]
[Fri Feb 13 05:34:58.847312 2026] [:error] [pid 49335:tid 49360] [client 20.111.48.18:31124] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/system.php"] [unique_id "aY5Hgqp--SFY2nwOiqkwgAAAANc"]
[Fri Feb 13 05:34:59.969407 2026] [:error] [pid 49335:tid 49355] [client 20.111.48.18:17968] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/system.php"] [unique_id "aY5Hg6p--SFY2nwOiqkwggAAANI"]
[Fri Feb 13 05:35:02.052673 2026] [:error] [pid 49335:tid 49347] [client 20.111.48.18:23978] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/system.php"] [unique_id "aY5Hhqp--SFY2nwOiqkwjgAAAMo"]
[Fri Feb 13 05:35:03.243453 2026] [:error] [pid 49335:tid 49346] [client 20.111.48.18:37048] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aY5Hh6p--SFY2nwOiqkwlAAAAMk"]
[Fri Feb 13 05:35:04.626980 2026] [:error] [pid 49225:tid 49305] [client 20.111.48.18:31741] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aY5HiDwH8-zGxtAd3jvVJQAAAIs"]
[Fri Feb 13 05:35:05.504311 2026] [:error] [pid 51243:tid 51260] [client 20.111.48.18:7958] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aY5Hicim7ZTAHzi7xZvDpQAAAQ8"]
[Fri Feb 13 05:35:06.165075 2026] [:error] [pid 49335:tid 49357] [client 20.111.48.18:46658] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aY5Hiqp--SFY2nwOiqkwmwAAANQ"]
[Fri Feb 13 05:35:06.907818 2026] [:error] [pid 49335:tid 49358] [client 20.111.48.18:27812] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/zwq13.php"] [unique_id "aY5Hiqp--SFY2nwOiqkwoQAAANU"]
[Fri Feb 13 05:35:08.073131 2026] [:error] [pid 49225:tid 49310] [client 20.111.48.18:23955] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/zwq13.php"] [unique_id "aY5HjDwH8-zGxtAd3jvVKwAAAJA"]
[Fri Feb 13 05:35:10.223078 2026] [:error] [pid 49225:tid 49297] [client 20.111.48.18:27802] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/zwq13.php"] [unique_id "aY5HjjwH8-zGxtAd3jvVLgAAAIM"]
[Fri Feb 13 05:35:10.927184 2026] [:error] [pid 49225:tid 49301] [client 20.111.48.18:16714] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/zwq13.php"] [unique_id "aY5HjjwH8-zGxtAd3jvVMAAAAIc"]
[Fri Feb 13 05:35:11.737663 2026] [:error] [pid 49335:tid 49353] [client 20.111.48.18:39513] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/"] [unique_id "aY5Hj6p--SFY2nwOiqkwsAAAANA"]
[Fri Feb 13 05:35:12.749675 2026] [:error] [pid 49225:tid 49299] [client 20.111.48.18:1938] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/"] [unique_id "aY5HkDwH8-zGxtAd3jvVNQAAAIU"]
[Fri Feb 13 05:35:13.861239 2026] [:error] [pid 51243:tid 51255] [client 20.111.48.18:21036] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/"] [unique_id "aY5Hkcim7ZTAHzi7xZvDtAAAAQo"]
[Fri Feb 13 05:35:14.698749 2026] [:error] [pid 49225:tid 49296] [client 20.111.48.18:39120] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/"] [unique_id "aY5HkjwH8-zGxtAd3jvVOwAAAII"]
[Fri Feb 13 05:35:15.587943 2026] [:error] [pid 49225:tid 49313] [client 20.111.48.18:46644] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/museu/yhweq.php"] [unique_id "aY5HkzwH8-zGxtAd3jvVPQAAAJM"]
[Fri Feb 13 05:35:16.364834 2026] [:error] [pid 49335:tid 49343] [client 20.111.48.18:21018] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/museu/yhweq.php"] [unique_id "aY5HlKp--SFY2nwOiqkwuQAAAMY"]
[Fri Feb 13 05:35:17.745904 2026] [:error] [pid 51243:tid 51260] [client 20.111.48.18:21003] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/museu/yhweq.php"] [unique_id "aY5Hlcim7ZTAHzi7xZvDuwAAAQ8"]
[Fri Feb 13 05:35:18.423137 2026] [:error] [pid 49225:tid 49297] [client 20.111.48.18:28207] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/museu/yhweq.php"] [unique_id "aY5HljwH8-zGxtAd3jvVRgAAAIM"]
[Fri Feb 13 05:35:19.502570 2026] [:error] [pid 49225:tid 49312] [client 20.111.48.18:24959] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.cache/x.php"] [unique_id "aY5HlzwH8-zGxtAd3jvVTQAAAJI"]
[Fri Feb 13 05:35:20.723454 2026] [:error] [pid 49223:tid 49243] [client 20.111.48.18:11604] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.cache/x.php"] [unique_id "aY5HmB8A_fZBamNLnfUxpQAAAAs"]
[Fri Feb 13 05:35:29.485589 2026] [:error] [pid 49224:tid 49270] [client 20.111.48.18:15145] [client 20.111.48.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aY5HodiAvPoWmw5YhwmNnQAAAEM"]
[Fri Feb 13 05:35:40.786446 2026] [:error] [pid 51243:tid 51258] [client 20.111.48.18:31868] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/images/c99.php"] [unique_id "aY5HrMim7ZTAHzi7xZvD4QAAAQ0"]
[Fri Feb 13 05:35:42.615254 2026] [:error] [pid 49335:tid 49339] [client 20.111.48.18:1425] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/images/c99.php"] [unique_id "aY5Hrqp--SFY2nwOiqkw8gAAAMI"]
[Fri Feb 13 05:35:44.886732 2026] [:error] [pid 49335:tid 49348] [client 20.111.48.18:1457] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/images/c99.php"] [unique_id "aY5HsKp--SFY2nwOiqkw-QAAAMs"]
[Fri Feb 13 05:35:46.126804 2026] [:error] [pid 49335:tid 49343] [client 20.111.48.18:26666] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/images/c99.php"] [unique_id "aY5Hsqp--SFY2nwOiqkw_AAAAMY"]
[Fri Feb 13 05:35:47.498473 2026] [:error] [pid 49224:tid 49273] [client 20.111.48.18:34721] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/n3.php"] [unique_id "aY5Hs9iAvPoWmw5YhwmNswAAAEY"]
[Fri Feb 13 05:35:49.751627 2026] [:error] [pid 49223:tid 49242] [client 20.111.48.18:1468] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/n3.php"] [unique_id "aY5HtR8A_fZBamNLnfUxxQAAAAo"]
[Fri Feb 13 05:35:51.307606 2026] [:error] [pid 49335:tid 49359] [client 20.111.48.18:26646] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/n3.php"] [unique_id "aY5Ht6p--SFY2nwOiqkxDgAAANY"]
[Fri Feb 13 05:35:52.614149 2026] [:error] [pid 51243:tid 51257] [client 20.111.48.18:31849] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/n3.php"] [unique_id "aY5HuMim7ZTAHzi7xZvD6AAAAQw"]
[Fri Feb 13 05:35:53.225746 2026] [:error] [pid 49335:tid 49354] [client 20.111.48.18:1156] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/"] [unique_id "aY5Huap--SFY2nwOiqkxEgAAANE"]
[Fri Feb 13 05:35:54.537237 2026] [:error] [pid 49224:tid 49272] [client 20.111.48.18:34701] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/"] [unique_id "aY5HutiAvPoWmw5YhwmNxgAAAEU"]
[Fri Feb 13 05:35:55.855069 2026] [:error] [pid 49224:tid 49281] [client 20.111.48.18:26631] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/"] [unique_id "aY5Hu9iAvPoWmw5YhwmNyQAAAE4"]
[Fri Feb 13 05:35:56.711755 2026] [:error] [pid 49225:tid 49304] [client 20.111.48.18:34877] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/"] [unique_id "aY5HvDwH8-zGxtAd3jvVeAAAAIo"]
[Fri Feb 13 05:35:57.444830 2026] [:error] [pid 49335:tid 49342] [client 20.111.48.18:1444] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/environment.php"] [unique_id "aY5Hvap--SFY2nwOiqkxHwAAAMU"]
[Fri Feb 13 05:35:58.170671 2026] [:error] [pid 51243:tid 51260] [client 20.111.48.18:55178] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/environment.php"] [unique_id "aY5Hvsim7ZTAHzi7xZvD7wAAAQ8"]
[Fri Feb 13 05:35:58.841411 2026] [:error] [pid 49223:tid 49240] [client 20.111.48.18:36908] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/environment.php"] [unique_id "aY5Hvh8A_fZBamNLnfUx0gAAAAg"]
[Fri Feb 13 05:35:59.388333 2026] [:error] [pid 51243:tid 51268] [client 20.111.48.18:55358] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/environment.php"] [unique_id "aY5Hv8im7ZTAHzi7xZvD8QAAARc"]
[Fri Feb 13 05:36:00.334515 2026] [:error] [pid 49225:tid 49317] [client 20.111.48.18:55315] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ho/wpup.php"] [unique_id "aY5HwDwH8-zGxtAd3jvVfgAAAJc"]
[Fri Feb 13 05:36:01.014862 2026] [:error] [pid 49335:tid 49339] [client 20.111.48.18:34834] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ho/wpup.php"] [unique_id "aY5Hwap--SFY2nwOiqkxIwAAAMI"]
[Fri Feb 13 05:36:01.561129 2026] [:error] [pid 49335:tid 49356] [client 20.111.48.18:38831] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ho/wpup.php"] [unique_id "aY5Hwap--SFY2nwOiqkxKAAAANM"]
[Fri Feb 13 05:36:02.777667 2026] [:error] [pid 49225:tid 49303] [client 20.111.48.18:26684] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ho/wpup.php"] [unique_id "aY5HwjwH8-zGxtAd3jvVhgAAAIk"]
[Fri Feb 13 05:36:03.492820 2026] [:error] [pid 49335:tid 49352] [client 20.111.48.18:34723] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bnn_.php"] [unique_id "aY5Hw6p--SFY2nwOiqkxQAAAAM8"]
[Fri Feb 13 05:36:06.197473 2026] [:error] [pid 49224:tid 49284] [client 20.111.48.18:34865] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bnn_.php"] [unique_id "aY5HxtiAvPoWmw5YhwmN4QAAAFE"]
[Fri Feb 13 05:36:06.886966 2026] [:error] [pid 49335:tid 49352] [client 20.111.48.18:58097] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bnn_.php"] [unique_id "aY5Hxqp--SFY2nwOiqkxUAAAAM8"]
[Fri Feb 13 05:36:07.508933 2026] [:error] [pid 49223:tid 49234] [client 20.111.48.18:31813] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bnn_.php"] [unique_id "aY5Hxx8A_fZBamNLnfUx2gAAAAI"]
[Fri Feb 13 05:36:08.568448 2026] [:error] [pid 51243:tid 51250] [client 20.111.48.18:31864] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/1337.php"] [unique_id "aY5HyMim7ZTAHzi7xZvEFAAAAQU"]
[Fri Feb 13 05:36:09.460612 2026] [:error] [pid 49224:tid 49277] [client 20.111.48.18:31840] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/1337.php"] [unique_id "aY5HydiAvPoWmw5YhwmN6QAAAEo"]
[Fri Feb 13 05:36:10.199339 2026] [:error] [pid 49224:tid 49288] [client 20.111.48.18:1433] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/1337.php"] [unique_id "aY5HytiAvPoWmw5YhwmN6gAAAFU"]
[Fri Feb 13 05:36:11.265164 2026] [:error] [pid 49224:tid 49269] [client 20.111.48.18:28431] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/1337.php"] [unique_id "aY5Hy9iAvPoWmw5YhwmN7AAAAEI"]
[Fri Feb 13 05:36:12.139240 2026] [:error] [pid 49223:tid 49244] [client 20.111.48.18:28435] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/test.php"] [unique_id "aY5HzB8A_fZBamNLnfUx3wAAAAw"]
[Fri Feb 13 05:36:12.882603 2026] [:error] [pid 51243:tid 51258] [client 20.111.48.18:28423] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/test.php"] [unique_id "aY5HzMim7ZTAHzi7xZvEGwAAAQ0"]
[Fri Feb 13 05:36:13.733316 2026] [:error] [pid 49223:tid 49249] [client 20.111.48.18:15212] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/test.php"] [unique_id "aY5HzR8A_fZBamNLnfUx4gAAABE"]
[Fri Feb 13 05:36:14.408329 2026] [:error] [pid 51243:tid 51255] [client 20.111.48.18:18038] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/test.php"] [unique_id "aY5Hzsim7ZTAHzi7xZvEHgAAAQo"]
[Fri Feb 13 05:36:15.016486 2026] [:error] [pid 49335:tid 49353] [client 20.111.48.18:24060] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/menu.php"] [unique_id "aY5Hz6p--SFY2nwOiqkxZAAAANA"]
[Fri Feb 13 05:36:16.029818 2026] [:error] [pid 49225:tid 49295] [client 20.111.48.18:28455] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/menu.php"] [unique_id "aY5H0DwH8-zGxtAd3jvVogAAAIE"]
[Fri Feb 13 05:36:16.767274 2026] [:error] [pid 49335:tid 49352] [client 20.111.48.18:37390] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/menu.php"] [unique_id "aY5H0Kp--SFY2nwOiqkxbwAAAM8"]
[Fri Feb 13 05:36:17.835578 2026] [:error] [pid 49224:tid 49272] [client 20.111.48.18:17998] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/menu.php"] [unique_id "aY5H0diAvPoWmw5YhwmN9gAAAEU"]
[Fri Feb 13 05:36:18.990691 2026] [:error] [pid 49224:tid 49270] [client 20.111.48.18:32156] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/content.php"] [unique_id "aY5H0tiAvPoWmw5YhwmN-gAAAEM"]
[Fri Feb 13 05:36:19.636405 2026] [:error] [pid 49224:tid 49280] [client 20.111.48.18:32067] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/content.php"] [unique_id "aY5H09iAvPoWmw5YhwmOAQAAAE0"]
[Fri Feb 13 05:36:20.360001 2026] [:error] [pid 49225:tid 49318] [client 20.111.48.18:32106] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/content.php"] [unique_id "aY5H1DwH8-zGxtAd3jvVqgAAAJg"]
[Fri Feb 13 05:36:21.022303 2026] [:error] [pid 49223:tid 49233] [client 20.111.48.18:36047] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/content.php"] [unique_id "aY5H1R8A_fZBamNLnfUx-QAAAAE"]
[Fri Feb 13 05:36:21.874937 2026] [:error] [pid 49335:tid 49348] [client 20.111.48.18:28168] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wqqs.php"] [unique_id "aY5H1ap--SFY2nwOiqkxegAAAMs"]
[Fri Feb 13 05:36:22.531047 2026] [:error] [pid 49225:tid 49309] [client 20.111.48.18:16650] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wqqs.php"] [unique_id "aY5H1jwH8-zGxtAd3jvVrAAAAI8"]
[Fri Feb 13 05:36:23.218541 2026] [:error] [pid 49224:tid 49273] [client 20.111.48.18:46599] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wqqs.php"] [unique_id "aY5H19iAvPoWmw5YhwmOBwAAAEY"]
[Fri Feb 13 05:36:23.914678 2026] [:error] [pid 49225:tid 49314] [client 20.111.48.18:11598] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wqqs.php"] [unique_id "aY5H1zwH8-zGxtAd3jvVsQAAAJQ"]
[Fri Feb 13 05:36:25.183396 2026] [:error] [pid 49224:tid 49289] [client 20.111.48.18:39137] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ole.php"] [unique_id "aY5H2diAvPoWmw5YhwmODAAAAFY"]
[Fri Feb 13 05:36:26.957704 2026] [:error] [pid 49335:tid 49355] [client 20.111.48.18:20505] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ole.php"] [unique_id "aY5H2qp--SFY2nwOiqkxhQAAANI"]
[Fri Feb 13 05:36:27.577669 2026] [:error] [pid 49335:tid 49361] [client 20.111.48.18:20498] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ole.php"] [unique_id "aY5H26p--SFY2nwOiqkxigAAANg"]
[Fri Feb 13 05:36:28.257780 2026] [:error] [pid 49223:tid 49237] [client 20.111.48.18:27809] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ole.php"] [unique_id "aY5H3B8A_fZBamNLnfUyAwAAAAU"]
[Fri Feb 13 05:36:28.958122 2026] [:error] [pid 51243:tid 51258] [client 20.111.48.18:25868] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/json.php"] [unique_id "aY5H3Mim7ZTAHzi7xZvELQAAAQ0"]
[Fri Feb 13 05:36:29.741958 2026] [:error] [pid 51243:tid 51268] [client 20.111.48.18:46678] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/json.php"] [unique_id "aY5H3cim7ZTAHzi7xZvEMAAAARc"]
[Fri Feb 13 05:36:30.766503 2026] [:error] [pid 49335:tid 49339] [client 20.111.48.18:26646] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/json.php"] [unique_id "aY5H3qp--SFY2nwOiqkxlwAAAMI"]
[Fri Feb 13 05:36:32.297728 2026] [:error] [pid 49335:tid 49346] [client 20.111.48.18:7989] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/json.php"] [unique_id "aY5H4Kp--SFY2nwOiqkxnQAAAMk"]
[Fri Feb 13 05:36:32.922038 2026] [:error] [pid 51243:tid 51247] [client 20.111.48.18:55236] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/p.php"] [unique_id "aY5H4Mim7ZTAHzi7xZvEMwAAAQI"]
[Fri Feb 13 05:36:33.650149 2026] [:error] [pid 49224:tid 49276] [client 20.111.48.18:55269] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/p.php"] [unique_id "aY5H4diAvPoWmw5YhwmOGgAAAEk"]
[Fri Feb 13 05:36:34.398693 2026] [:error] [pid 49335:tid 49357] [client 20.111.48.18:31138] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/p.php"] [unique_id "aY5H4qp--SFY2nwOiqkxoQAAANQ"]
[Fri Feb 13 05:36:35.009266 2026] [:error] [pid 49335:tid 49348] [client 20.111.48.18:32895] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/p.php"] [unique_id "aY5H46p--SFY2nwOiqkxpAAAAMs"]
[Fri Feb 13 05:36:35.674413 2026] [:error] [pid 49225:tid 49309] [client 20.111.48.18:19042] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ak.php"] [unique_id "aY5H4zwH8-zGxtAd3jvVvgAAAI8"]
[Fri Feb 13 05:36:36.395508 2026] [:error] [pid 49224:tid 49280] [client 20.111.48.18:32889] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ak.php"] [unique_id "aY5H5NiAvPoWmw5YhwmOGwAAAE0"]
[Fri Feb 13 05:36:36.986926 2026] [:error] [pid 49335:tid 49360] [client 20.111.48.18:34981] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ak.php"] [unique_id "aY5H5Kp--SFY2nwOiqkxpwAAANc"]
[Fri Feb 13 05:36:37.585355 2026] [:error] [pid 49223:tid 49255] [client 20.111.48.18:34896] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ak.php"] [unique_id "aY5H5R8A_fZBamNLnfUyBwAAABc"]
[Fri Feb 13 05:36:38.142270 2026] [:error] [pid 49224:tid 49283] [client 20.111.48.18:36434] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.trash7309/dd/"] [unique_id "aY5H5tiAvPoWmw5YhwmOHgAAAFA"]
[Fri Feb 13 05:36:39.095346 2026] [:error] [pid 49223:tid 49254] [client 20.111.48.18:37925] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.trash7309/dd/"] [unique_id "aY5H5x8A_fZBamNLnfUyCgAAABY"]
[Fri Feb 13 05:36:39.930534 2026] [:error] [pid 49224:tid 49290] [client 20.111.48.18:37930] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.trash7309/dd/"] [unique_id "aY5H59iAvPoWmw5YhwmOIgAAAFc"]
[Fri Feb 13 05:36:47.247313 2026] [:error] [pid 49224:tid 49282] [client 20.111.48.18:25370] [client 20.111.48.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aY5H79iAvPoWmw5YhwmORAAAAE8"]
[Fri Feb 13 05:36:49.408826 2026] [:error] [pid 49335:tid 49345] [client 20.111.48.18:37338] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/oivcl.php"] [unique_id "aY5H8ap--SFY2nwOiqkxvQAAAMg"]
[Fri Feb 13 05:36:50.429367 2026] [:error] [pid 49224:tid 49268] [client 20.111.48.18:31911] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/oivcl.php"] [unique_id "aY5H8tiAvPoWmw5YhwmOSAAAAEE"]
[Fri Feb 13 05:36:51.195492 2026] [:error] [pid 49223:tid 49243] [client 20.111.48.18:18954] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/oivcl.php"] [unique_id "aY5H8x8A_fZBamNLnfUyGgAAAAs"]
[Fri Feb 13 05:36:52.165942 2026] [:error] [pid 51243:tid 51265] [client 20.111.48.18:1783] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/oivcl.php"] [unique_id "aY5H9Mim7ZTAHzi7xZvEVQAAARQ"]
[Fri Feb 13 05:36:52.931031 2026] [:error] [pid 49335:tid 49341] [client 20.111.48.18:16152] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/hideo/network.php"] [unique_id "aY5H9Kp--SFY2nwOiqkxvwAAAMQ"]
[Fri Feb 13 05:36:53.845743 2026] [:error] [pid 49225:tid 49303] [client 20.111.48.18:31931] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/hideo/network.php"] [unique_id "aY5H9TwH8-zGxtAd3jvVzgAAAIk"]
[Fri Feb 13 05:36:54.644660 2026] [:error] [pid 49224:tid 49272] [client 20.111.48.18:38117] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/hideo/network.php"] [unique_id "aY5H9tiAvPoWmw5YhwmOSwAAAEU"]
[Fri Feb 13 05:36:55.489636 2026] [:error] [pid 49335:tid 49340] [client 20.111.48.18:31059] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/hideo/network.php"] [unique_id "aY5H96p--SFY2nwOiqkxxQAAAMM"]
[Fri Feb 13 05:36:56.094674 2026] [:error] [pid 49224:tid 49287] [client 20.111.48.18:31930] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/o.php"] [unique_id "aY5H-NiAvPoWmw5YhwmOTQAAAFQ"]
[Fri Feb 13 05:36:56.852177 2026] [:error] [pid 51243:tid 51251] [client 20.111.48.18:34036] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/o.php"] [unique_id "aY5H-Mim7ZTAHzi7xZvEWwAAAQY"]
[Fri Feb 13 05:36:57.768201 2026] [:error] [pid 49224:tid 49276] [client 20.111.48.18:1527] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/o.php"] [unique_id "aY5H-diAvPoWmw5YhwmOUAAAAEk"]
[Fri Feb 13 05:36:58.581138 2026] [:error] [pid 49224:tid 49273] [client 20.111.48.18:31895] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/o.php"] [unique_id "aY5H-tiAvPoWmw5YhwmOVAAAAEY"]
[Fri Feb 13 05:36:59.202677 2026] [:error] [pid 51243:tid 51269] [client 20.111.48.18:36354] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/asd67.php"] [unique_id "aY5H-8im7ZTAHzi7xZvEYAAAARg"]
[Fri Feb 13 05:37:00.032436 2026] [:error] [pid 49225:tid 49299] [client 20.111.48.18:1683] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/asd67.php"] [unique_id "aY5H_DwH8-zGxtAd3jvV3AAAAIU"]
[Fri Feb 13 05:37:00.961028 2026] [:error] [pid 49224:tid 49290] [client 20.111.48.18:55483] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/asd67.php"] [unique_id "aY5H_NiAvPoWmw5YhwmOWAAAAFc"]
[Fri Feb 13 05:37:02.164299 2026] [:error] [pid 49335:tid 49349] [client 20.111.48.18:34796] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/asd67.php"] [unique_id "aY5H_qp--SFY2nwOiqkxzwAAAMw"]
[Fri Feb 13 05:37:02.867939 2026] [:error] [pid 49224:tid 49288] [client 20.111.48.18:20067] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "aY5H_tiAvPoWmw5YhwmOWwAAAFU"]
[Fri Feb 13 05:37:03.685432 2026] [:error] [pid 49335:tid 49357] [client 20.111.48.18:34009] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "aY5H_6p--SFY2nwOiqkx1QAAANQ"]
[Fri Feb 13 05:37:04.387637 2026] [:error] [pid 49224:tid 49268] [client 20.111.48.18:31045] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "aY5IANiAvPoWmw5YhwmOXwAAAEE"]
[Fri Feb 13 05:37:05.024146 2026] [:error] [pid 49223:tid 49247] [client 20.111.48.18:31048] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "aY5IAR8A_fZBamNLnfUyJQAAAA8"]
[Fri Feb 13 05:37:05.866618 2026] [:error] [pid 49335:tid 49342] [client 20.111.48.18:35563] [client 20.111.48.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aY5IAap--SFY2nwOiqkx3QAAAMU"]
[Fri Feb 13 05:37:06.742598 2026] [:error] [pid 49335:tid 49346] [client 20.111.48.18:32361] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/mar.php"] [unique_id "aY5IAqp--SFY2nwOiqkx4QAAAMk"]
[Fri Feb 13 05:37:07.771546 2026] [:error] [pid 49335:tid 49342] [client 20.111.48.18:30289] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/mar.php"] [unique_id "aY5IA6p--SFY2nwOiqkx4wAAAMU"]
[Fri Feb 13 05:37:08.647611 2026] [:error] [pid 49224:tid 49278] [client 20.111.48.18:28143] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/mar.php"] [unique_id "aY5IBNiAvPoWmw5YhwmOZwAAAEs"]
[Fri Feb 13 05:37:09.328795 2026] [:error] [pid 49225:tid 49300] [client 20.111.48.18:32348] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/raw.php"] [unique_id "aY5IBTwH8-zGxtAd3jvV6wAAAIY"]
[Fri Feb 13 05:37:10.119652 2026] [:error] [pid 49223:tid 49233] [client 20.111.48.18:34755] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/raw.php"] [unique_id "aY5IBh8A_fZBamNLnfUyOgAAAAE"]
[Fri Feb 13 05:37:11.352097 2026] [:error] [pid 49224:tid 49290] [client 20.111.48.18:32323] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/raw.php"] [unique_id "aY5IB9iAvPoWmw5YhwmObwAAAFc"]
[Fri Feb 13 05:37:12.241142 2026] [:error] [pid 51243:tid 51259] [client 20.111.48.18:38980] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/raw.php"] [unique_id "aY5ICMim7ZTAHzi7xZvEcAAAAQ4"]
[Fri Feb 13 05:37:12.986101 2026] [:error] [pid 51243:tid 51258] [client 20.111.48.18:1905] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "aY5ICMim7ZTAHzi7xZvEdAAAAQ0"]
[Fri Feb 13 05:37:13.681105 2026] [:error] [pid 51243:tid 51266] [client 20.111.48.18:32931] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "aY5ICcim7ZTAHzi7xZvEdgAAARU"]
[Fri Feb 13 05:37:14.781880 2026] [:error] [pid 49335:tid 49341] [client 20.111.48.18:22921] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "aY5ICqp--SFY2nwOiqkx9QAAAMQ"]
[Fri Feb 13 05:37:15.466364 2026] [:error] [pid 51243:tid 51262] [client 20.111.48.18:20091] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "aY5IC8im7ZTAHzi7xZvEfQAAARE"]
[Fri Feb 13 05:37:16.614882 2026] [:error] [pid 49224:tid 49282] [client 20.111.48.18:20075] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/apsarasarts/okk.php"] [unique_id "aY5IDNiAvPoWmw5YhwmOeQAAAE8"]
[Fri Feb 13 05:37:18.148196 2026] [:error] [pid 49225:tid 49313] [client 20.111.48.18:34003] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/apsarasarts/okk.php"] [unique_id "aY5IDjwH8-zGxtAd3jvWAAAAAJM"]
[Fri Feb 13 05:37:19.874268 2026] [:error] [pid 49224:tid 49287] [client 20.111.48.18:20041] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/apsarasarts/okk.php"] [unique_id "aY5ID9iAvPoWmw5YhwmOfgAAAFQ"]
[Fri Feb 13 05:37:20.940048 2026] [:error] [pid 51243:tid 51245] [client 20.111.48.18:26320] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/apsarasarts/okk.php"] [unique_id "aY5IEMim7ZTAHzi7xZvEqQAAAQA"]
[Fri Feb 13 05:37:21.866380 2026] [:error] [pid 49335:tid 49355] [client 20.111.48.18:20089] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/mal.php"] [unique_id "aY5IEap--SFY2nwOiqkyCgAAANI"]
[Fri Feb 13 05:37:22.958719 2026] [:error] [pid 49223:tid 49256] [client 20.111.48.18:50122] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/mal.php"] [unique_id "aY5IEh8A_fZBamNLnfUySgAAABg"]
[Fri Feb 13 05:37:23.736400 2026] [:error] [pid 49223:tid 49248] [client 20.111.48.18:38985] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/mal.php"] [unique_id "aY5IEx8A_fZBamNLnfUyTQAAABA"]
[Fri Feb 13 05:37:24.713791 2026] [:error] [pid 49335:tid 49358] [client 20.111.48.18:26338] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/mal.php"] [unique_id "aY5IFKp--SFY2nwOiqkyDwAAANU"]
[Fri Feb 13 05:37:26.454869 2026] [:error] [pid 49223:tid 49254] [client 20.111.48.18:21091] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/update/wpupex.php/"] [unique_id "aY5IFh8A_fZBamNLnfUyVgAAABY"]
[Fri Feb 13 05:37:27.132522 2026] [:error] [pid 49225:tid 49303] [client 20.111.48.18:1674] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/update/wpupex.php/"] [unique_id "aY5IFzwH8-zGxtAd3jvWDAAAAIk"]
[Fri Feb 13 05:37:28.178792 2026] [:error] [pid 49335:tid 49337] [client 20.111.48.18:1687] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/update/wpupex.php/"] [unique_id "aY5IGKp--SFY2nwOiqkyGAAAAMA"]
[Fri Feb 13 05:37:28.939846 2026] [:error] [pid 51243:tid 51256] [client 20.111.48.18:22069] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/update/wpupex.php/"] [unique_id "aY5IGMim7ZTAHzi7xZvEvwAAAQs"]
[Fri Feb 13 05:37:30.017036 2026] [:error] [pid 49335:tid 49346] [client 20.111.48.18:49758] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "aY5IGqp--SFY2nwOiqkyHQAAAMk"]
[Fri Feb 13 05:37:31.156726 2026] [:error] [pid 49335:tid 49340] [client 20.111.48.18:1099] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "aY5IG6p--SFY2nwOiqkyIgAAAMM"]
[Fri Feb 13 05:37:31.823690 2026] [:error] [pid 51243:tid 51263] [client 20.111.48.18:37962] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "aY5IG8im7ZTAHzi7xZvEyAAAARI"]
[Fri Feb 13 05:37:32.707881 2026] [:error] [pid 49225:tid 49297] [client 20.111.48.18:50115] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "aY5IHDwH8-zGxtAd3jvWEQAAAIM"]
[Fri Feb 13 05:37:33.450227 2026] [:error] [pid 49335:tid 49344] [client 20.111.48.18:24509] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/deeto/login.php"] [unique_id "aY5IHap--SFY2nwOiqkyJgAAAMc"]
[Fri Feb 13 05:37:34.258581 2026] [:error] [pid 49223:tid 49234] [client 20.111.48.18:34330] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/deeto/login.php"] [unique_id "aY5IHh8A_fZBamNLnfUyZQAAAAI"]
[Fri Feb 13 05:37:34.973025 2026] [:error] [pid 51243:tid 51246] [client 20.111.48.18:29565] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/deeto/login.php"] [unique_id "aY5IHsim7ZTAHzi7xZvE1gAAAQE"]
[Fri Feb 13 05:37:35.652574 2026] [:error] [pid 51243:tid 51253] [client 20.111.48.18:1706] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/deeto/login.php"] [unique_id "aY5IH8im7ZTAHzi7xZvE2AAAAQg"]
[Fri Feb 13 05:37:36.229848 2026] [:error] [pid 49223:tid 49251] [client 20.111.48.18:32899] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aY5IIB8A_fZBamNLnfUyaAAAABM"]
[Fri Feb 13 05:37:36.895708 2026] [:error] [pid 51243:tid 51256] [client 20.111.48.18:1896] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aY5IIMim7ZTAHzi7xZvE3QAAAQs"]
[Fri Feb 13 05:37:37.789310 2026] [:error] [pid 49335:tid 49359] [client 20.111.48.18:24500] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aY5IIap--SFY2nwOiqkyKwAAANY"]
[Fri Feb 13 05:37:38.363096 2026] [:error] [pid 51243:tid 51251] [client 20.111.48.18:1290] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "aY5IIsim7ZTAHzi7xZvE5wAAAQY"]
[Fri Feb 13 05:37:39.119203 2026] [:error] [pid 51243:tid 51247] [client 20.111.48.18:1341] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ph33w.php"] [unique_id "aY5II8im7ZTAHzi7xZvE6wAAAQI"]
[Fri Feb 13 05:37:39.903974 2026] [:error] [pid 49335:tid 49350] [client 20.111.48.18:1857] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ph33w.php"] [unique_id "aY5II6p--SFY2nwOiqkyLgAAAM0"]
[Fri Feb 13 05:37:40.553382 2026] [:error] [pid 49223:tid 49236] [client 20.111.48.18:26703] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ph33w.php"] [unique_id "aY5IJB8A_fZBamNLnfUybgAAAAQ"]
[Fri Feb 13 05:37:41.363825 2026] [:error] [pid 49225:tid 49317] [client 20.111.48.18:1135] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ph33w.php"] [unique_id "aY5IJTwH8-zGxtAd3jvWFgAAAJc"]
[Fri Feb 13 05:37:42.169429 2026] [:error] [pid 49223:tid 49247] [client 20.111.48.18:24481] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/cv.php"] [unique_id "aY5IJh8A_fZBamNLnfUycQAAAA8"]
[Fri Feb 13 05:37:42.997096 2026] [:error] [pid 49335:tid 49355] [client 20.111.48.18:38142] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/cv.php"] [unique_id "aY5IJqp--SFY2nwOiqkyMwAAANI"]
[Fri Feb 13 05:37:43.762667 2026] [:error] [pid 49223:tid 49255] [client 20.111.48.18:26726] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/cv.php"] [unique_id "aY5IJx8A_fZBamNLnfUycwAAABc"]
[Fri Feb 13 05:37:44.364484 2026] [:error] [pid 49335:tid 49359] [client 20.111.48.18:26314] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/cv.php"] [unique_id "aY5IKKp--SFY2nwOiqkyOAAAANY"]
[Fri Feb 13 05:37:45.163062 2026] [:error] [pid 49225:tid 49299] [client 20.111.48.18:1314] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/sad/about.php"] [unique_id "aY5IKTwH8-zGxtAd3jvWHQAAAIU"]
[Fri Feb 13 05:37:45.861305 2026] [:error] [pid 49335:tid 49357] [client 20.111.48.18:26702] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/sad/about.php"] [unique_id "aY5IKap--SFY2nwOiqkyPwAAANQ"]
[Fri Feb 13 05:37:46.418383 2026] [:error] [pid 49335:tid 49354] [client 20.111.48.18:1332] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/sad/about.php"] [unique_id "aY5IKqp--SFY2nwOiqkyQAAAANE"]
[Fri Feb 13 05:37:47.411124 2026] [:error] [pid 49225:tid 49311] [client 20.111.48.18:39024] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/sad/about.php"] [unique_id "aY5IKzwH8-zGxtAd3jvWJAAAAJE"]
[Fri Feb 13 05:37:48.178919 2026] [:error] [pid 51243:tid 51260] [client 20.111.48.18:55455] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp4.php"] [unique_id "aY5ILMim7ZTAHzi7xZvE9wAAAQ8"]
[Fri Feb 13 05:37:48.785663 2026] [:error] [pid 49224:tid 49281] [client 20.111.48.18:34797] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp4.php"] [unique_id "aY5ILNiAvPoWmw5YhwmOogAAAE4"]
[Fri Feb 13 05:37:57.294566 2026] [:error] [pid 51243:tid 51251] [client 20.111.48.18:20064] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aY5INcim7ZTAHzi7xZvFEwAAAQY"]
[Fri Feb 13 05:37:58.328436 2026] [:error] [pid 51243:tid 51256] [client 20.111.48.18:38091] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aY5INsim7ZTAHzi7xZvFFQAAAQs"]
[Fri Feb 13 05:37:59.400939 2026] [:error] [pid 49224:tid 49270] [client 20.111.48.18:49757] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aY5IN9iAvPoWmw5YhwmOygAAAEM"]
[Fri Feb 13 05:38:01.167377 2026] [:error] [pid 49225:tid 49316] [client 20.111.48.18:55456] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aY5IOTwH8-zGxtAd3jvWLwAAAJY"]
[Fri Feb 13 05:38:02.428876 2026] [:error] [pid 49335:tid 49360] [client 20.111.48.18:55438] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/8xyz.php"] [unique_id "aY5IOqp--SFY2nwOiqkyZwAAANc"]
[Fri Feb 13 05:38:03.222172 2026] [:error] [pid 49224:tid 49277] [client 20.111.48.18:39019] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/8xyz.php"] [unique_id "aY5IO9iAvPoWmw5YhwmO0wAAAEo"]
[Fri Feb 13 05:38:04.904629 2026] [:error] [pid 49223:tid 49244] [client 20.111.48.18:1118] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/8xyz.php"] [unique_id "aY5IPB8A_fZBamNLnfUylQAAAAw"]
[Fri Feb 13 05:38:05.817509 2026] [:error] [pid 49335:tid 49344] [client 20.111.48.18:55461] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/8xyz.php"] [unique_id "aY5IPap--SFY2nwOiqkycQAAAMc"]
[Fri Feb 13 05:38:07.526153 2026] [:error] [pid 49224:tid 49277] [client 20.111.48.18:1803] [client 20.111.48.18] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aY5IP9iAvPoWmw5YhwmO2QAAAEo"]
[Fri Feb 13 05:38:08.323455 2026] [:error] [pid 49225:tid 49308] [client 20.111.48.18:20092] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/rezor.php"] [unique_id "aY5IQDwH8-zGxtAd3jvWPAAAAI4"]
[Fri Feb 13 05:38:12.144125 2026] [:error] [pid 49223:tid 49252] [client 20.111.48.18:1147] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/rezor.php"] [unique_id "aY5IRB8A_fZBamNLnfUyogAAABQ"]
[Fri Feb 13 05:38:17.784736 2026] [:error] [pid 49225:tid 49301] [client 20.111.48.18:49776] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/rezor.php"] [unique_id "aY5ISTwH8-zGxtAd3jvWSAAAAIc"]
[Fri Feb 13 05:38:19.783669 2026] [:error] [pid 49224:tid 49279] [client 20.111.48.18:1148] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/rezor.php"] [unique_id "aY5IS9iAvPoWmw5YhwmO_AAAAEw"]
[Fri Feb 13 05:38:21.347956 2026] [:error] [pid 51243:tid 51251] [client 20.111.48.18:34803] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/Wp-good.php"] [unique_id "aY5ITcim7ZTAHzi7xZvFPQAAAQY"]
[Fri Feb 13 05:38:22.092765 2026] [:error] [pid 49225:tid 49316] [client 20.111.48.18:1139] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/Wp-good.php"] [unique_id "aY5ITjwH8-zGxtAd3jvWUwAAAJY"]
[Fri Feb 13 05:38:23.180461 2026] [:error] [pid 51243:tid 51255] [client 20.111.48.18:34885] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/Wp-good.php"] [unique_id "aY5IT8im7ZTAHzi7xZvFQgAAAQo"]
[Fri Feb 13 05:38:24.074884 2026] [:error] [pid 49223:tid 49232] [client 20.111.48.18:1823] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/Wp-good.php"] [unique_id "aY5IUB8A_fZBamNLnfUy9gAAAAA"]
[Fri Feb 13 05:38:25.483829 2026] [:error] [pid 51243:tid 51249] [client 20.111.48.18:55460] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ze.php"] [unique_id "aY5IUcim7ZTAHzi7xZvFRgAAAQQ"]
[Fri Feb 13 05:38:26.817641 2026] [:error] [pid 49223:tid 49238] [client 20.111.48.18:49769] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ze.php"] [unique_id "aY5IUh8A_fZBamNLnfUy_QAAAAY"]
[Fri Feb 13 05:38:28.028001 2026] [:error] [pid 49335:tid 49346] [client 20.111.48.18:26847] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ze.php"] [unique_id "aY5IVKp--SFY2nwOiqkyogAAAMk"]
[Fri Feb 13 05:38:29.065680 2026] [:error] [pid 49225:tid 49315] [client 20.111.48.18:1150] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ze.php"] [unique_id "aY5IVTwH8-zGxtAd3jvWaAAAAJU"]
[Fri Feb 13 05:38:30.555483 2026] [:error] [pid 49223:tid 49236] [client 20.111.48.18:26879] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aY5IVh8A_fZBamNLnfUzBwAAAAQ"]
[Fri Feb 13 05:38:31.966652 2026] [:error] [pid 49223:tid 49248] [client 20.111.48.18:26713] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aY5IVx8A_fZBamNLnfUzCQAAABA"]
[Fri Feb 13 05:38:33.375264 2026] [:error] [pid 49335:tid 49340] [client 20.111.48.18:34032] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aY5IWap--SFY2nwOiqkyrgAAAMM"]
[Fri Feb 13 05:38:34.364679 2026] [:error] [pid 51243:tid 51248] [client 20.111.48.18:1283] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aY5IWsim7ZTAHzi7xZvFVAAAAQM"]
[Fri Feb 13 05:38:35.084325 2026] [:error] [pid 49224:tid 49285] [client 20.111.48.18:1855] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/jmfi2.php"] [unique_id "aY5IW9iAvPoWmw5YhwmPKgAAAFI"]
[Fri Feb 13 05:38:36.312187 2026] [:error] [pid 49335:tid 49357] [client 20.111.48.18:34898] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/jmfi2.php"] [unique_id "aY5IXKp--SFY2nwOiqkysQAAANQ"]
[Fri Feb 13 05:38:38.123298 2026] [:error] [pid 49223:tid 49246] [client 20.111.48.18:1097] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/jmfi2.php"] [unique_id "aY5IXh8A_fZBamNLnfUzIAAAAA4"]
[Fri Feb 13 05:38:39.172855 2026] [:error] [pid 49335:tid 49346] [client 20.111.48.18:34904] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/jmfi2.php"] [unique_id "aY5IX6p--SFY2nwOiqkyswAAAMk"]
[Fri Feb 13 05:38:40.257699 2026] [:error] [pid 51243:tid 51256] [client 20.111.48.18:1103] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/x7.php"] [unique_id "aY5IYMim7ZTAHzi7xZvFYAAAAQs"]
[Fri Feb 13 05:38:41.144405 2026] [:error] [pid 49223:tid 49244] [client 20.111.48.18:38000] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/x7.php"] [unique_id "aY5IYR8A_fZBamNLnfUzIwAAAAw"]
[Fri Feb 13 05:38:41.909186 2026] [:error] [pid 49223:tid 49249] [client 20.111.48.18:49762] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/x7.php"] [unique_id "aY5IYR8A_fZBamNLnfUzJAAAABE"]
[Fri Feb 13 05:38:42.696863 2026] [:error] [pid 49335:tid 49357] [client 20.111.48.18:49751] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/x7.php"] [unique_id "aY5IYqp--SFY2nwOiqkyvAAAANQ"]
[Fri Feb 13 05:38:43.786767 2026] [:error] [pid 49225:tid 49312] [client 20.111.48.18:34350] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/hey.php"] [unique_id "aY5IYzwH8-zGxtAd3jvWbgAAAJI"]
[Fri Feb 13 05:38:44.486373 2026] [:error] [pid 49335:tid 49347] [client 20.111.48.18:26751] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/hey.php"] [unique_id "aY5IZKp--SFY2nwOiqkywwAAAMo"]
[Fri Feb 13 05:38:45.233102 2026] [:error] [pid 49223:tid 49233] [client 20.111.48.18:1284] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/hey.php"] [unique_id "aY5IZR8A_fZBamNLnfUzLAAAAAE"]
[Fri Feb 13 05:38:46.196475 2026] [:error] [pid 49224:tid 49274] [client 20.111.48.18:1119] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/hey.php"] [unique_id "aY5IZtiAvPoWmw5YhwmPNAAAAEc"]
[Fri Feb 13 05:38:47.248252 2026] [:error] [pid 49335:tid 49347] [client 20.111.48.18:37471] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/class-db.php"] [unique_id "aY5IZ6p--SFY2nwOiqkyzQAAAMo"]
[Fri Feb 13 05:38:47.895812 2026] [:error] [pid 49224:tid 49270] [client 20.111.48.18:55429] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/class-db.php"] [unique_id "aY5IZ9iAvPoWmw5YhwmPOwAAAEM"]
[Fri Feb 13 05:38:48.830595 2026] [:error] [pid 49223:tid 49254] [client 20.111.48.18:26321] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/class-db.php"] [unique_id "aY5IaB8A_fZBamNLnfUzNQAAABY"]
[Fri Feb 13 05:38:49.612050 2026] [:error] [pid 49225:tid 49308] [client 20.111.48.18:49731] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/class-db.php"] [unique_id "aY5IaTwH8-zGxtAd3jvWcQAAAI4"]
[Fri Feb 13 05:38:50.331617 2026] [:error] [pid 49224:tid 49271] [client 20.111.48.18:37494] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aY5IatiAvPoWmw5YhwmPQwAAAEQ"]
[Fri Feb 13 05:38:51.218272 2026] [:error] [pid 49223:tid 49252] [client 20.111.48.18:26708] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aY5Iax8A_fZBamNLnfUzPgAAABQ"]
[Fri Feb 13 05:38:52.147734 2026] [:error] [pid 49225:tid 49298] [client 20.111.48.18:1546] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aY5IbDwH8-zGxtAd3jvWewAAAIQ"]
[Fri Feb 13 05:38:53.255482 2026] [:error] [pid 49224:tid 49270] [client 20.111.48.18:1834] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aY5IbdiAvPoWmw5YhwmPSgAAAEM"]
[Fri Feb 13 05:38:54.979893 2026] [:error] [pid 49335:tid 49338] [client 20.111.48.18:16134] [client 20.111.48.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/Core-EconX/up.php"] [unique_id "aY5Ibqp--SFY2nwOiqky3QAAAME"]
[Fri Feb 13 13:34:46.029735 2026] [:error] [pid 51243:tid 51269] [client 104.28.164.218:22205] [client 104.28.164.218] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/style.php"] [unique_id "aY639sim7ZTAHzi7xZuDyQAAARg"]
[Fri Feb 13 13:58:48.190580 2026] [:error] [pid 49223:tid 49256] [client 37.140.223.46:31943] [client 37.140.223.46] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.46, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aY69mB8A_fZBamNLnfXxtQAAABg"]
[Fri Feb 13 13:58:50.584948 2026] [:error] [pid 47143:tid 47219] [client 37.140.223.41:44117] [client 37.140.223.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 37.140.223.41, incrementing brute counter"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aY69mshV30NbMarHJLsACAAAAkU"]
[Fri Feb 13 18:56:20.706146 2026] [:error] [pid 49223:tid 49252] [client 34.73.172.230:59017] [client 34.73.172.230] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.73.172.230, incrementing ddos counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aY8DVB8A_fZBamNLnfVLKwAAABQ"]
[Fri Feb 13 18:56:21.780884 2026] [:error] [pid 49223:tid 49236] [client 34.73.172.230:59017] [client 34.73.172.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aY8DVR8A_fZBamNLnfVLMQAAAAQ"]
[Fri Feb 13 18:56:22.715931 2026] [:error] [pid 47080:tid 47096] [client 34.73.172.230:59474] [client 34.73.172.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aY8DVkbWJwYCVF39z6syCQAAAcg"]
[Fri Feb 13 18:56:23.646022 2026] [:error] [pid 18097:tid 18107] [client 34.73.172.230:52875] [client 34.73.172.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aY8DV3FzYiQ_BfaDDlYhRgAAAYg"]
[Fri Feb 13 18:56:24.481879 2026] [:error] [pid 49225:tid 49309] [client 34.73.172.230:61816] [client 34.73.172.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aY8DWDwH8-zGxtAd3jv8-AAAAI8"]
[Fri Feb 13 18:56:25.330687 2026] [:error] [pid 49223:tid 49235] [client 34.73.172.230:51799] [client 34.73.172.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2020/wp-includes/wlwmanifest.xml"] [unique_id "aY8DWR8A_fZBamNLnfVLOQAAAAM"]
[Fri Feb 13 18:56:26.280563 2026] [:error] [pid 49225:tid 49301] [client 34.73.172.230:51837] [client 34.73.172.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "aY8DWjwH8-zGxtAd3jv8-wAAAIc"]
[Fri Feb 13 18:56:27.240094 2026] [:error] [pid 49225:tid 49302] [client 34.73.172.230:63078] [client 34.73.172.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "aY8DWzwH8-zGxtAd3jv8_QAAAIg"]
[Fri Feb 13 18:56:28.085684 2026] [:error] [pid 51243:tid 51269] [client 34.73.172.230:53745] [client 34.73.172.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aY8DXMim7ZTAHzi7xZvBZQAAARg"]
[Fri Feb 13 18:56:29.021935 2026] [:error] [pid 46821:tid 46832] [client 34.73.172.230:53086] [client 34.73.172.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aY8DXY6G1N5YSq0J0gcHaAAAAUk"]
[Fri Feb 13 18:56:29.951718 2026] [:error] [pid 47575:tid 47584] [client 34.73.172.230:53177] [client 34.73.172.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aY8DXQIPBuXb07mA_mS7ZQAAAsQ"]
[Fri Feb 13 18:56:30.793465 2026] [:error] [pid 49225:tid 49299] [client 34.73.172.230:51945] [client 34.73.172.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aY8DXjwH8-zGxtAd3jv9BwAAAIU"]
[Fri Feb 13 18:56:31.728613 2026] [:error] [pid 47575:tid 47580] [client 34.73.172.230:60408] [client 34.73.172.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aY8DXwIPBuXb07mA_mS7agAAAsE"]
[Fri Feb 13 18:56:32.592584 2026] [:error] [pid 47080:tid 47091] [client 34.73.172.230:62894] [client 34.73.172.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aY8DYEbWJwYCVF39z6syJAAAAcM"]
[Fri Feb 13 21:57:04.008873 2026] [:error] [pid 47575:tid 47585] [client 20.199.186.77:59137] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/er.php"] [unique_id "aY8tsAIPBuXb07mA_mTfYgAAAsU"]
[Fri Feb 13 21:57:04.480299 2026] [:error] [pid 47575:tid 47588] [client 20.199.186.77:39148] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/er.php"] [unique_id "aY8tsAIPBuXb07mA_mTfYwAAAsg"]
[Fri Feb 13 21:57:04.952009 2026] [:error] [pid 47575:tid 47581] [client 20.199.186.77:53454] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/er.php"] [unique_id "aY8tsAIPBuXb07mA_mTfZQAAAsI"]
[Fri Feb 13 21:57:05.424611 2026] [:error] [pid 46821:tid 46826] [client 20.199.186.77:37901] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/er.php"] [unique_id "aY8tsY6G1N5YSq0J0gclEwAAAUM"]
[Fri Feb 13 21:57:05.895247 2026] [:error] [pid 49223:tid 49239] [client 20.199.186.77:2304] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fault.php"] [unique_id "aY8tsR8A_fZBamNLnfV5BwAAAAc"]
[Fri Feb 13 21:57:06.369587 2026] [:error] [pid 49223:tid 49233] [client 20.199.186.77:2329] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fault.php"] [unique_id "aY8tsh8A_fZBamNLnfV5CQAAAAE"]
[Fri Feb 13 21:57:06.857533 2026] [:error] [pid 18097:tid 18117] [client 20.199.186.77:37896] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fault.php"] [unique_id "aY8tsnFzYiQ_BfaDDlZH_gAAAZI"]
[Fri Feb 13 21:57:07.372427 2026] [:error] [pid 49335:tid 49342] [client 20.199.186.77:37946] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fault.php"] [unique_id "aY8ts6p--SFY2nwOiql9XQAAAMU"]
[Fri Feb 13 21:57:07.847765 2026] [:error] [pid 47080:tid 47100] [client 20.199.186.77:48362] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/x2x.php"] [unique_id "aY8ts0bWJwYCVF39z6tm1AAAAcw"]
[Fri Feb 13 21:57:08.331191 2026] [:error] [pid 18097:tid 18121] [client 20.199.186.77:37935] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/x2x.php"] [unique_id "aY8ttHFzYiQ_BfaDDlZIAQAAAZY"]
[Fri Feb 13 21:57:08.821295 2026] [:error] [pid 47080:tid 47112] [client 20.199.186.77:63113] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/x2x.php"] [unique_id "aY8ttEbWJwYCVF39z6tm2AAAAdg"]
[Fri Feb 13 21:57:09.292891 2026] [:error] [pid 49335:tid 49344] [client 20.199.186.77:58397] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/x2x.php"] [unique_id "aY8ttap--SFY2nwOiql9XwAAAMc"]
[Fri Feb 13 21:57:09.777781 2026] [:error] [pid 49223:tid 49247] [client 20.199.186.77:59174] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aY8ttR8A_fZBamNLnfV5DAAAAA8"]
[Fri Feb 13 21:57:10.258914 2026] [:error] [pid 49223:tid 49235] [client 20.199.186.77:34173] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aY8tth8A_fZBamNLnfV5DwAAAAM"]
[Fri Feb 13 21:57:10.737806 2026] [:error] [pid 51243:tid 51267] [client 20.199.186.77:58390] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aY8ttsim7ZTAHzi7xZveTQAAARY"]
[Fri Feb 13 21:57:11.208892 2026] [:error] [pid 49335:tid 49340] [client 20.199.186.77:54731] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aY8tt6p--SFY2nwOiql9YQAAAMM"]
[Fri Feb 13 21:57:11.678774 2026] [:error] [pid 49335:tid 49346] [client 20.199.186.77:29386] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aY8tt6p--SFY2nwOiql9YgAAAMk"]
[Fri Feb 13 21:57:12.153385 2026] [:error] [pid 47080:tid 47105] [client 20.199.186.77:46462] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aY8tuEbWJwYCVF39z6tm4AAAAdE"]
[Fri Feb 13 21:57:12.625527 2026] [:error] [pid 47080:tid 47094] [client 20.199.186.77:28729] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aY8tuEbWJwYCVF39z6tm4QAAAcY"]
[Fri Feb 13 21:57:13.102295 2026] [:error] [pid 47575:tid 47595] [client 20.199.186.77:36685] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aY8tuQIPBuXb07mA_mTfaAAAAs4"]
[Fri Feb 13 21:57:13.575352 2026] [:error] [pid 51243:tid 51255] [client 20.199.186.77:36617] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/leuk.php"] [unique_id "aY8tucim7ZTAHzi7xZveUAAAAQo"]
[Fri Feb 13 21:57:14.047742 2026] [:error] [pid 49223:tid 49239] [client 20.199.186.77:51478] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/leuk.php"] [unique_id "aY8tuh8A_fZBamNLnfV5EwAAAAc"]
[Fri Feb 13 21:57:14.519023 2026] [:error] [pid 49223:tid 49241] [client 20.199.186.77:61782] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/leuk.php"] [unique_id "aY8tuh8A_fZBamNLnfV5FAAAAAk"]
[Fri Feb 13 21:57:14.990875 2026] [:error] [pid 49223:tid 49247] [client 20.199.186.77:54760] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/leuk.php"] [unique_id "aY8tuh8A_fZBamNLnfV5FwAAAA8"]
[Fri Feb 13 21:57:15.473679 2026] [:error] [pid 18097:tid 18114] [client 20.199.186.77:52805] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aY8tu3FzYiQ_BfaDDlZICAAAAY8"]
[Fri Feb 13 21:57:15.944624 2026] [:error] [pid 49223:tid 49234] [client 20.199.186.77:34163] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aY8tux8A_fZBamNLnfV5HQAAAAI"]
[Fri Feb 13 21:57:16.414940 2026] [:error] [pid 49225:tid 49300] [client 20.199.186.77:28724] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aY8tvDwH8-zGxtAd3jsfRgAAAIY"]
[Fri Feb 13 21:57:16.891150 2026] [:error] [pid 49223:tid 49248] [client 20.199.186.77:50895] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aY8tvB8A_fZBamNLnfV5IAAAABA"]
[Fri Feb 13 21:57:17.364929 2026] [:error] [pid 49335:tid 49353] [client 20.199.186.77:28720] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/kolda.php"] [unique_id "aY8tvap--SFY2nwOiql9aAAAANA"]
[Fri Feb 13 21:57:17.836008 2026] [:error] [pid 49335:tid 49360] [client 20.199.186.77:36632] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/kolda.php"] [unique_id "aY8tvap--SFY2nwOiql9agAAANc"]
[Fri Feb 13 21:57:18.306191 2026] [:error] [pid 49335:tid 49342] [client 20.199.186.77:39450] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/kolda.php"] [unique_id "aY8tvqp--SFY2nwOiql9awAAAMU"]
[Fri Feb 13 21:57:18.777596 2026] [:error] [pid 49335:tid 49361] [client 20.199.186.77:25466] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/kolda.php"] [unique_id "aY8tvqp--SFY2nwOiql9bAAAANg"]
[Fri Feb 13 21:57:19.249775 2026] [:error] [pid 49225:tid 49315] [client 20.199.186.77:59145] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "aY8tvzwH8-zGxtAd3jsfTQAAAJU"]
[Fri Feb 13 21:57:19.721982 2026] [:error] [pid 49225:tid 49314] [client 20.199.186.77:2610] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "aY8tvzwH8-zGxtAd3jsfTwAAAJQ"]
[Fri Feb 13 21:57:20.192814 2026] [:error] [pid 51243:tid 51260] [client 20.199.186.77:59138] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "aY8twMim7ZTAHzi7xZveVQAAAQ8"]
[Fri Feb 13 21:57:20.663072 2026] [:error] [pid 49225:tid 49316] [client 20.199.186.77:28714] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "aY8twDwH8-zGxtAd3jsfUAAAAJY"]
[Fri Feb 13 21:57:21.132181 2026] [:error] [pid 49335:tid 49341] [client 20.199.186.77:34143] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/god.php"] [unique_id "aY8twap--SFY2nwOiql9bQAAAMQ"]
[Fri Feb 13 21:57:21.602835 2026] [:error] [pid 51243:tid 51251] [client 20.199.186.77:28749] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/god.php"] [unique_id "aY8twcim7ZTAHzi7xZveWQAAAQY"]
[Fri Feb 13 21:57:22.074026 2026] [:error] [pid 49225:tid 49298] [client 20.199.186.77:50903] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/god.php"] [unique_id "aY8twjwH8-zGxtAd3jsfUgAAAIQ"]
[Fri Feb 13 21:57:22.543506 2026] [:error] [pid 51243:tid 51256] [client 20.199.186.77:39468] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/god.php"] [unique_id "aY8twsim7ZTAHzi7xZveWwAAAQs"]
[Fri Feb 13 21:57:23.015192 2026] [:error] [pid 47575:tid 47601] [client 20.199.186.77:39162] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aY8twwIPBuXb07mA_mTfbgAAAtQ"]
[Fri Feb 13 21:57:23.485278 2026] [:error] [pid 47575:tid 47588] [client 20.199.186.77:28676] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aY8twwIPBuXb07mA_mTfbwAAAsg"]
[Fri Feb 13 21:57:23.957635 2026] [:error] [pid 47080:tid 47088] [client 20.199.186.77:39160] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aY8tw0bWJwYCVF39z6tm7QAAAcA"]
[Fri Feb 13 21:57:24.430257 2026] [:error] [pid 47080:tid 47095] [client 20.199.186.77:39157] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aY8txEbWJwYCVF39z6tm7gAAAcc"]
[Fri Feb 13 21:57:24.901349 2026] [:error] [pid 47575:tid 47580] [client 20.199.186.77:25417] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aY8txAIPBuXb07mA_mTfcwAAAsE"]
[Fri Feb 13 21:57:25.372640 2026] [:error] [pid 47575:tid 47599] [client 20.199.186.77:25434] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aY8txQIPBuXb07mA_mTfdwAAAtI"]
[Fri Feb 13 21:57:25.841892 2026] [:error] [pid 47575:tid 47589] [client 20.199.186.77:54746] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aY8txQIPBuXb07mA_mTfegAAAsk"]
[Fri Feb 13 21:57:26.313235 2026] [:error] [pid 18097:tid 18120] [client 20.199.186.77:36718] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aY8txnFzYiQ_BfaDDlZIFQAAAZU"]
[Fri Feb 13 21:57:26.786956 2026] [:error] [pid 47358:tid 47370] [client 20.199.186.77:62724] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/un.php"] [unique_id "aY8txsQFBuVVUQTESUwofAAAAoU"]
[Fri Feb 13 21:57:27.258808 2026] [:error] [pid 18097:tid 18107] [client 20.199.186.77:62780] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/un.php"] [unique_id "aY8tx3FzYiQ_BfaDDlZIGAAAAYg"]
[Fri Feb 13 21:57:27.746254 2026] [:error] [pid 49225:tid 49300] [client 20.199.186.77:50930] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/un.php"] [unique_id "aY8txzwH8-zGxtAd3jsfUwAAAIY"]
[Fri Feb 13 21:57:28.217977 2026] [:error] [pid 18097:tid 18113] [client 20.199.186.77:65141] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/un.php"] [unique_id "aY8tyHFzYiQ_BfaDDlZIGQAAAY4"]
[Fri Feb 13 21:57:28.689438 2026] [:error] [pid 47358:tid 47371] [client 20.199.186.77:62766] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aY8tyMQFBuVVUQTESUwofgAAAoY"]
[Fri Feb 13 21:57:29.159656 2026] [:error] [pid 49335:tid 49358] [client 20.199.186.77:28745] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aY8tyap--SFY2nwOiql9cgAAANU"]
[Fri Feb 13 21:57:29.630459 2026] [:error] [pid 47143:tid 47232] [client 20.199.186.77:56798] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aY8tychV30NbMarHJLtWkgAAAlI"]
[Fri Feb 13 21:57:30.102161 2026] [:error] [pid 49223:tid 49251] [client 20.199.186.77:65118] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aY8tyh8A_fZBamNLnfV5KgAAABM"]
[Fri Feb 13 21:57:30.581939 2026] [:error] [pid 49225:tid 49307] [client 20.199.186.77:54763] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lts.php"] [unique_id "aY8tyjwH8-zGxtAd3jsfVAAAAI0"]
[Fri Feb 13 21:57:31.053756 2026] [:error] [pid 18097:tid 18106] [client 20.199.186.77:50242] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lts.php"] [unique_id "aY8ty3FzYiQ_BfaDDlZIGwAAAYc"]
[Fri Feb 13 21:57:31.524296 2026] [:error] [pid 49225:tid 49313] [client 20.199.186.77:65117] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lts.php"] [unique_id "aY8tyzwH8-zGxtAd3jsfWQAAAJM"]
[Fri Feb 13 21:57:31.994161 2026] [:error] [pid 47143:tid 47221] [client 20.199.186.77:45992] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lts.php"] [unique_id "aY8ty8hV30NbMarHJLtWlAAAAkc"]
[Fri Feb 13 21:57:32.464874 2026] [:error] [pid 47080:tid 47110] [client 20.199.186.77:39465] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aY8tzEbWJwYCVF39z6tm9QAAAdY"]
[Fri Feb 13 21:57:32.935324 2026] [:error] [pid 51243:tid 51256] [client 20.199.186.77:44964] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aY8tzMim7ZTAHzi7xZveZQAAAQs"]
[Fri Feb 13 21:57:33.405470 2026] [:error] [pid 18097:tid 18100] [client 20.199.186.77:45990] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aY8tzXFzYiQ_BfaDDlZIHQAAAYE"]
[Fri Feb 13 21:57:33.877053 2026] [:error] [pid 46821:tid 46826] [client 20.199.186.77:50259] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aY8tzY6G1N5YSq0J0gclHQAAAUM"]
[Fri Feb 13 21:57:34.347920 2026] [:error] [pid 47080:tid 47093] [client 20.199.186.77:50281] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/login8.php"] [unique_id "aY8tzkbWJwYCVF39z6tm9gAAAcU"]
[Fri Feb 13 21:57:34.818800 2026] [:error] [pid 47080:tid 47111] [client 20.199.186.77:44951] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/login8.php"] [unique_id "aY8tzkbWJwYCVF39z6tm-AAAAdc"]
[Fri Feb 13 21:57:35.290583 2026] [:error] [pid 51243:tid 51255] [client 20.199.186.77:46003] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/login8.php"] [unique_id "aY8tz8im7ZTAHzi7xZveagAAAQo"]
[Fri Feb 13 21:57:35.764348 2026] [:error] [pid 49223:tid 49243] [client 20.199.186.77:34084] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/login8.php"] [unique_id "aY8tzx8A_fZBamNLnfV5MAAAAAs"]
[Fri Feb 13 21:57:36.236443 2026] [:error] [pid 47080:tid 47109] [client 20.199.186.77:34780] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/nnyvn.php"] [unique_id "aY8t0EbWJwYCVF39z6tm-wAAAdU"]
[Fri Feb 13 21:57:36.710686 2026] [:error] [pid 46821:tid 46845] [client 20.199.186.77:45960] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/nnyvn.php"] [unique_id "aY8t0I6G1N5YSq0J0gclHwAAAVY"]
[Fri Feb 13 21:57:37.180862 2026] [:error] [pid 46821:tid 46834] [client 20.199.186.77:36005] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/nnyvn.php"] [unique_id "aY8t0Y6G1N5YSq0J0gclIAAAAUs"]
[Fri Feb 13 21:57:37.652021 2026] [:error] [pid 49223:tid 49256] [client 20.199.186.77:55813] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/nnyvn.php"] [unique_id "aY8t0R8A_fZBamNLnfV5MgAAABg"]
[Fri Feb 13 21:57:38.124352 2026] [:error] [pid 18097:tid 18102] [client 20.199.186.77:61454] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aY8t0nFzYiQ_BfaDDlZIIQAAAYM"]
[Fri Feb 13 21:57:38.599748 2026] [:error] [pid 47575:tid 47597] [client 20.199.186.77:26058] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aY8t0gIPBuXb07mA_mTfgQAAAtA"]
[Fri Feb 13 21:57:39.088218 2026] [:error] [pid 47575:tid 47602] [client 20.199.186.77:47616] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aY8t0wIPBuXb07mA_mTfggAAAtU"]
[Fri Feb 13 21:57:39.565017 2026] [:error] [pid 47575:tid 47600] [client 20.199.186.77:57142] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aY8t0wIPBuXb07mA_mTfgwAAAtM"]
[Fri Feb 13 21:57:40.044722 2026] [:error] [pid 49335:tid 49359] [client 20.199.186.77:37328] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lul.php"] [unique_id "aY8t1Kp--SFY2nwOiql9egAAANY"]
[Fri Feb 13 21:57:40.521625 2026] [:error] [pid 49335:tid 49343] [client 20.199.186.77:35392] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lul.php"] [unique_id "aY8t1Kp--SFY2nwOiql9ewAAAMY"]
[Fri Feb 13 21:57:40.994441 2026] [:error] [pid 47080:tid 47104] [client 20.199.186.77:57123] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lul.php"] [unique_id "aY8t1EbWJwYCVF39z6tm_gAAAdA"]
[Fri Feb 13 21:57:41.466141 2026] [:error] [pid 49225:tid 49309] [client 20.199.186.77:55858] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lul.php"] [unique_id "aY8t1TwH8-zGxtAd3jsfXAAAAI8"]
[Fri Feb 13 21:57:41.939082 2026] [:error] [pid 49223:tid 49233] [client 20.199.186.77:37365] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/0.php"] [unique_id "aY8t1R8A_fZBamNLnfV5NAAAAAE"]
[Fri Feb 13 21:57:42.410450 2026] [:error] [pid 49223:tid 49251] [client 20.199.186.77:29351] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/0.php"] [unique_id "aY8t1h8A_fZBamNLnfV5NgAAABM"]
[Fri Feb 13 21:57:42.882731 2026] [:error] [pid 47358:tid 47362] [client 20.199.186.77:29349] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/0.php"] [unique_id "aY8t1sQFBuVVUQTESUwojgAAAoE"]
[Fri Feb 13 21:57:43.354052 2026] [:error] [pid 49223:tid 49244] [client 20.199.186.77:41955] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/0.php"] [unique_id "aY8t1x8A_fZBamNLnfV5OQAAAAw"]
[Fri Feb 13 21:57:43.825151 2026] [:error] [pid 47080:tid 47107] [client 20.199.186.77:41934] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aY8t10bWJwYCVF39z6tnAgAAAdM"]
[Fri Feb 13 21:57:44.296409 2026] [:error] [pid 47575:tid 47588] [client 20.199.186.77:41941] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aY8t2AIPBuXb07mA_mTfiAAAAsg"]
[Fri Feb 13 21:57:44.767355 2026] [:error] [pid 49223:tid 49238] [client 20.199.186.77:24159] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aY8t2B8A_fZBamNLnfV5OwAAAAY"]
[Fri Feb 13 21:57:45.247323 2026] [:error] [pid 49225:tid 49305] [client 20.199.186.77:61487] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aY8t2TwH8-zGxtAd3jsfYAAAAIs"]
[Fri Feb 13 21:57:45.718849 2026] [:error] [pid 49225:tid 49300] [client 20.199.186.77:27489] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ya.php"] [unique_id "aY8t2TwH8-zGxtAd3jsfYgAAAIY"]
[Fri Feb 13 21:57:46.190134 2026] [:error] [pid 47575:tid 47603] [client 20.199.186.77:55376] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ya.php"] [unique_id "aY8t2gIPBuXb07mA_mTfigAAAtY"]
[Fri Feb 13 21:57:46.661718 2026] [:error] [pid 18097:tid 18117] [client 20.199.186.77:2207] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ya.php"] [unique_id "aY8t2nFzYiQ_BfaDDlZIJwAAAZI"]
[Fri Feb 13 21:57:47.142628 2026] [:error] [pid 47080:tid 47105] [client 20.199.186.77:61021] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ya.php"] [unique_id "aY8t20bWJwYCVF39z6tnCAAAAdE"]
[Fri Feb 13 21:57:47.613278 2026] [:error] [pid 51243:tid 51258] [client 20.199.186.77:65050] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aY8t28im7ZTAHzi7xZvecAAAAQ0"]
[Fri Feb 13 21:57:48.088776 2026] [:error] [pid 49223:tid 49243] [client 20.199.186.77:31333] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aY8t3B8A_fZBamNLnfV5PgAAAAs"]
[Fri Feb 13 21:57:48.559890 2026] [:error] [pid 51243:tid 51247] [client 20.199.186.77:41921] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aY8t3Mim7ZTAHzi7xZvecgAAAQI"]
[Fri Feb 13 21:57:49.030122 2026] [:error] [pid 47080:tid 47108] [client 20.199.186.77:24151] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aY8t3UbWJwYCVF39z6tnCwAAAdQ"]
[Fri Feb 13 21:57:49.500233 2026] [:error] [pid 51243:tid 51259] [client 20.199.186.77:2239] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aY8t3cim7ZTAHzi7xZvedAAAAQ4"]
[Fri Feb 13 21:57:49.971438 2026] [:error] [pid 47143:tid 47235] [client 20.199.186.77:42501] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aY8t3chV30NbMarHJLtWnwAAAlU"]
[Fri Feb 13 21:57:50.447195 2026] [:error] [pid 49225:tid 49294] [client 20.199.186.77:24133] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aY8t3jwH8-zGxtAd3jsfaAAAAIA"]
[Fri Feb 13 21:57:50.918067 2026] [:error] [pid 18097:tid 18105] [client 20.199.186.77:2189] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aY8t3nFzYiQ_BfaDDlZIKwAAAYY"]
[Fri Feb 13 21:57:51.388234 2026] [:error] [pid 18097:tid 18112] [client 20.199.186.77:27471] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ftem.php"] [unique_id "aY8t33FzYiQ_BfaDDlZILQAAAY0"]
[Fri Feb 13 21:57:51.860218 2026] [:error] [pid 49225:tid 49309] [client 20.199.186.77:65078] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ftem.php"] [unique_id "aY8t3zwH8-zGxtAd3jsfaQAAAI8"]
[Fri Feb 13 21:57:52.337244 2026] [:error] [pid 49225:tid 49306] [client 20.199.186.77:50225] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ftem.php"] [unique_id "aY8t4DwH8-zGxtAd3jsfagAAAIw"]
[Fri Feb 13 21:57:52.810814 2026] [:error] [pid 46821:tid 46838] [client 20.199.186.77:24164] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ftem.php"] [unique_id "aY8t4I6G1N5YSq0J0gclIwAAAU8"]
[Fri Feb 13 21:57:53.283167 2026] [:error] [pid 49335:tid 49339] [client 20.199.186.77:55365] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/7wom.php"] [unique_id "aY8t4ap--SFY2nwOiql9hAAAAMI"]
[Fri Feb 13 21:57:53.755362 2026] [:error] [pid 46821:tid 46835] [client 20.199.186.77:27510] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/7wom.php"] [unique_id "aY8t4Y6G1N5YSq0J0gclJQAAAUw"]
[Fri Feb 13 21:57:54.227427 2026] [:error] [pid 49225:tid 49304] [client 20.199.186.77:55419] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/7wom.php"] [unique_id "aY8t4jwH8-zGxtAd3jsfawAAAIo"]
[Fri Feb 13 21:57:54.699745 2026] [:error] [pid 49225:tid 49305] [client 20.199.186.77:39970] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/7wom.php"] [unique_id "aY8t4jwH8-zGxtAd3jsfbAAAAIs"]
[Fri Feb 13 21:57:55.176664 2026] [:error] [pid 47575:tid 47601] [client 20.199.186.77:45447] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "aY8t4wIPBuXb07mA_mTfkgAAAtQ"]
[Fri Feb 13 21:57:55.646409 2026] [:error] [pid 47080:tid 47089] [client 20.199.186.77:57525] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "aY8t40bWJwYCVF39z6tnDwAAAcE"]
[Fri Feb 13 21:57:56.119135 2026] [:error] [pid 47080:tid 47090] [client 20.199.186.77:50179] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "aY8t5EbWJwYCVF39z6tnEAAAAcI"]
[Fri Feb 13 21:57:56.589619 2026] [:error] [pid 46821:tid 46829] [client 20.199.186.77:45046] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "aY8t5I6G1N5YSq0J0gclJgAAAUY"]
[Fri Feb 13 21:57:57.060696 2026] [:error] [pid 46821:tid 46836] [client 20.199.186.77:42519] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a1vx.php"] [unique_id "aY8t5Y6G1N5YSq0J0gclJwAAAU0"]
[Fri Feb 13 21:57:57.531586 2026] [:error] [pid 47080:tid 47094] [client 20.199.186.77:50191] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a1vx.php"] [unique_id "aY8t5UbWJwYCVF39z6tnFQAAAcY"]
[Fri Feb 13 21:57:58.001205 2026] [:error] [pid 18097:tid 18099] [client 20.199.186.77:45020] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a1vx.php"] [unique_id "aY8t5nFzYiQ_BfaDDlZIMQAAAYA"]
[Fri Feb 13 21:57:58.473225 2026] [:error] [pid 49223:tid 49246] [client 20.199.186.77:54659] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a1vx.php"] [unique_id "aY8t5h8A_fZBamNLnfV5RgAAAA4"]
[Fri Feb 13 21:57:58.944864 2026] [:error] [pid 18097:tid 18123] [client 20.199.186.77:27474] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aY8t5nFzYiQ_BfaDDlZIMgAAAZg"]
[Fri Feb 13 21:57:59.415505 2026] [:error] [pid 18097:tid 18117] [client 20.199.186.77:49011] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aY8t53FzYiQ_BfaDDlZIMwAAAZI"]
[Fri Feb 13 21:57:59.889586 2026] [:error] [pid 49225:tid 49311] [client 20.199.186.77:39982] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aY8t5zwH8-zGxtAd3jsfbwAAAJE"]
[Fri Feb 13 21:58:00.361843 2026] [:error] [pid 46821:tid 46846] [client 20.199.186.77:54661] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aY8t6I6G1N5YSq0J0gclKAAAAVc"]
[Fri Feb 13 21:58:00.833806 2026] [:error] [pid 49223:tid 49251] [client 20.199.186.77:33030] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aY8t6B8A_fZBamNLnfV5SgAAABM"]
[Fri Feb 13 21:58:01.307726 2026] [:error] [pid 47575:tid 47579] [client 20.199.186.77:46341] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aY8t6QIPBuXb07mA_mTflgAAAsA"]
[Fri Feb 13 21:58:01.782246 2026] [:error] [pid 49223:tid 49242] [client 20.199.186.77:33068] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aY8t6R8A_fZBamNLnfV5TwAAAAo"]
[Fri Feb 13 21:58:02.252518 2026] [:error] [pid 47080:tid 47111] [client 20.199.186.77:47742] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aY8t6kbWJwYCVF39z6tnGQAAAdc"]
[Fri Feb 13 21:58:02.723507 2026] [:error] [pid 47575:tid 47605] [client 20.199.186.77:46375] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/06.php"] [unique_id "aY8t6gIPBuXb07mA_mTfmQAAAtg"]
[Fri Feb 13 21:58:09.338013 2026] [:error] [pid 47143:tid 47216] [client 20.199.186.77:59674] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/vxrl.php"] [unique_id "aY8t8chV30NbMarHJLtWtwAAAkI"]
[Fri Feb 13 21:58:09.808994 2026] [:error] [pid 46821:tid 46834] [client 20.199.186.77:2803] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/vxrl.php"] [unique_id "aY8t8Y6G1N5YSq0J0gclLAAAAUs"]
[Fri Feb 13 21:58:10.285448 2026] [:error] [pid 49335:tid 49343] [client 20.199.186.77:2172] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/vxrl.php"] [unique_id "aY8t8qp--SFY2nwOiql9lAAAAMY"]
[Fri Feb 13 21:58:10.757270 2026] [:error] [pid 47358:tid 47389] [client 20.199.186.77:25403] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/vxrl.php"] [unique_id "aY8t8sQFBuVVUQTESUwongAAApc"]
[Fri Feb 13 21:58:11.229275 2026] [:error] [pid 47358:tid 47386] [client 20.199.186.77:49546] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/re.php"] [unique_id "aY8t88QFBuVVUQTESUwonwAAApQ"]
[Fri Feb 13 21:58:11.699834 2026] [:error] [pid 47575:tid 47604] [client 20.199.186.77:63665] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/re.php"] [unique_id "aY8t8wIPBuXb07mA_mTfoAAAAtc"]
[Fri Feb 13 21:58:12.171086 2026] [:error] [pid 51243:tid 51254] [client 20.199.186.77:58016] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/re.php"] [unique_id "aY8t9Mim7ZTAHzi7xZveggAAAQk"]
[Fri Feb 13 21:58:12.642845 2026] [:error] [pid 51243:tid 51266] [client 20.199.186.77:63635] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/re.php"] [unique_id "aY8t9Mim7ZTAHzi7xZvegwAAARU"]
[Fri Feb 13 21:58:13.114029 2026] [:error] [pid 49335:tid 49350] [client 20.199.186.77:33093] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/num.php"] [unique_id "aY8t9ap--SFY2nwOiql9mwAAAM0"]
[Fri Feb 13 21:58:13.586085 2026] [:error] [pid 49225:tid 49315] [client 20.199.186.77:26038] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/num.php"] [unique_id "aY8t9TwH8-zGxtAd3jsfcwAAAJU"]
[Fri Feb 13 21:58:14.059603 2026] [:error] [pid 49225:tid 49295] [client 20.199.186.77:28134] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/num.php"] [unique_id "aY8t9jwH8-zGxtAd3jsfdAAAAIE"]
[Fri Feb 13 21:58:14.530490 2026] [:error] [pid 47143:tid 47237] [client 20.199.186.77:24730] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/num.php"] [unique_id "aY8t9shV30NbMarHJLtWuAAAAlc"]
[Fri Feb 13 21:58:15.001268 2026] [:error] [pid 46821:tid 46831] [client 20.199.186.77:33115] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "aY8t946G1N5YSq0J0gclMAAAAUg"]
[Fri Feb 13 21:58:15.471516 2026] [:error] [pid 47575:tid 47579] [client 20.199.186.77:25353] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "aY8t9wIPBuXb07mA_mTfpAAAAsA"]
[Fri Feb 13 21:58:15.941479 2026] [:error] [pid 47358:tid 47388] [client 20.199.186.77:58039] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "aY8t98QFBuVVUQTESUwoogAAApY"]
[Fri Feb 13 21:58:16.414575 2026] [:error] [pid 49335:tid 49346] [client 20.199.186.77:2787] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "aY8t-Kp--SFY2nwOiql9oAAAAMk"]
[Fri Feb 13 21:58:16.886170 2026] [:error] [pid 47575:tid 47596] [client 20.199.186.77:63670] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/vxrl.php"] [unique_id "aY8t-AIPBuXb07mA_mTfqAAAAs8"]
[Fri Feb 13 21:58:17.357757 2026] [:error] [pid 47143:tid 47236] [client 20.199.186.77:26009] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/vxrl.php"] [unique_id "aY8t-chV30NbMarHJLtWuQAAAlY"]
[Fri Feb 13 21:58:17.830274 2026] [:error] [pid 49335:tid 49352] [client 20.199.186.77:32554] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/vxrl.php"] [unique_id "aY8t-ap--SFY2nwOiql9ogAAAM8"]
[Fri Feb 13 21:58:18.301827 2026] [:error] [pid 47080:tid 47097] [client 20.199.186.77:39522] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/vxrl.php"] [unique_id "aY8t-kbWJwYCVF39z6tnLQAAAck"]
[Fri Feb 13 21:58:18.774182 2026] [:error] [pid 47080:tid 47099] [client 20.199.186.77:2154] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/in.php"] [unique_id "aY8t-kbWJwYCVF39z6tnLgAAAcs"]
[Fri Feb 13 21:58:19.245292 2026] [:error] [pid 49335:tid 49353] [client 20.199.186.77:31283] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/in.php"] [unique_id "aY8t-6p--SFY2nwOiql9pQAAANA"]
[Fri Feb 13 21:58:19.716473 2026] [:error] [pid 49335:tid 49337] [client 20.199.186.77:49571] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/in.php"] [unique_id "aY8t-6p--SFY2nwOiql9pwAAAMA"]
[Fri Feb 13 21:58:20.189379 2026] [:error] [pid 46821:tid 46845] [client 20.199.186.77:49549] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/in.php"] [unique_id "aY8t_I6G1N5YSq0J0gclNgAAAVY"]
[Fri Feb 13 21:58:20.661668 2026] [:error] [pid 51243:tid 51259] [client 20.199.186.77:49572] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/style.php"] [unique_id "aY8t_Mim7ZTAHzi7xZveiQAAAQ4"]
[Fri Feb 13 21:58:21.132013 2026] [:error] [pid 47143:tid 47231] [client 20.199.186.77:32539] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/style.php"] [unique_id "aY8t_chV30NbMarHJLtWuwAAAlE"]
[Fri Feb 13 21:58:21.602831 2026] [:error] [pid 49335:tid 49344] [client 20.199.186.77:63626] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/style.php"] [unique_id "aY8t_ap--SFY2nwOiql9qQAAAMc"]
[Fri Feb 13 21:58:22.075298 2026] [:error] [pid 49335:tid 49341] [client 20.199.186.77:33551] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/style.php"] [unique_id "aY8t_qp--SFY2nwOiql9qgAAAMQ"]
[Fri Feb 13 21:58:22.547115 2026] [:error] [pid 49335:tid 49351] [client 20.199.186.77:39518] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aY8t_qp--SFY2nwOiql9rAAAAM4"]
[Fri Feb 13 21:58:23.018895 2026] [:error] [pid 51243:tid 51264] [client 20.199.186.77:33597] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aY8t_8im7ZTAHzi7xZvejQAAARM"]
[Fri Feb 13 21:58:23.490745 2026] [:error] [pid 51243:tid 51246] [client 20.199.186.77:32532] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aY8t_8im7ZTAHzi7xZvejgAAAQE"]
[Fri Feb 13 21:58:23.962012 2026] [:error] [pid 18097:tid 18118] [client 20.199.186.77:31283] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aY8t_3FzYiQ_BfaDDlZIPgAAAZM"]
[Fri Feb 13 21:58:24.435879 2026] [:error] [pid 18097:tid 18108] [client 20.199.186.77:28151] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/zwso.php"] [unique_id "aY8uAHFzYiQ_BfaDDlZIPwAAAYk"]
[Fri Feb 13 21:58:24.907768 2026] [:error] [pid 51243:tid 51266] [client 20.199.186.77:63675] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/zwso.php"] [unique_id "aY8uAMim7ZTAHzi7xZvekgAAARU"]
[Fri Feb 13 21:58:25.382741 2026] [:error] [pid 51243:tid 51258] [client 20.199.186.77:31234] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/zwso.php"] [unique_id "aY8uAcim7ZTAHzi7xZvelQAAAQ0"]
[Fri Feb 13 21:58:25.853284 2026] [:error] [pid 49223:tid 49239] [client 20.199.186.77:36085] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/zwso.php"] [unique_id "aY8uAR8A_fZBamNLnfV5YgAAAAc"]
[Fri Feb 13 21:58:26.324223 2026] [:error] [pid 47143:tid 47222] [client 20.199.186.77:27428] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/karak.php"] [unique_id "aY8uAshV30NbMarHJLtWvQAAAkg"]
[Fri Feb 13 21:58:26.795335 2026] [:error] [pid 49223:tid 49234] [client 20.199.186.77:32548] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/karak.php"] [unique_id "aY8uAh8A_fZBamNLnfV5YwAAAAI"]
[Fri Feb 13 21:58:27.265380 2026] [:error] [pid 18097:tid 18116] [client 20.199.186.77:57176] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/karak.php"] [unique_id "aY8uA3FzYiQ_BfaDDlZIRgAAAZE"]
[Fri Feb 13 21:58:27.737159 2026] [:error] [pid 47080:tid 47090] [client 20.199.186.77:57200] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/karak.php"] [unique_id "aY8uA0bWJwYCVF39z6tnNwAAAcI"]
[Fri Feb 13 21:58:28.208475 2026] [:error] [pid 47080:tid 47093] [client 20.199.186.77:49631] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/trd.php"] [unique_id "aY8uBEbWJwYCVF39z6tnOQAAAcU"]
[Fri Feb 13 21:58:28.680173 2026] [:error] [pid 47080:tid 47105] [client 20.199.186.77:49599] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/trd.php"] [unique_id "aY8uBEbWJwYCVF39z6tnPAAAAdE"]
[Fri Feb 13 21:58:29.162146 2026] [:error] [pid 49223:tid 49245] [client 20.199.186.77:33572] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/trd.php"] [unique_id "aY8uBR8A_fZBamNLnfV5agAAAA0"]
[Fri Feb 13 21:58:29.632760 2026] [:error] [pid 47358:tid 47373] [client 20.199.186.77:49602] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/trd.php"] [unique_id "aY8uBcQFBuVVUQTESUwoqAAAAog"]
[Fri Feb 13 21:58:30.104217 2026] [:error] [pid 47143:tid 47219] [client 20.199.186.77:24717] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/past.php"] [unique_id "aY8uBshV30NbMarHJLtWwQAAAkU"]
[Fri Feb 13 21:58:30.576771 2026] [:error] [pid 47143:tid 47226] [client 20.199.186.77:49647] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/past.php"] [unique_id "aY8uBshV30NbMarHJLtWwgAAAkw"]
[Fri Feb 13 21:58:31.053003 2026] [:error] [pid 49223:tid 49252] [client 20.199.186.77:49637] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/past.php"] [unique_id "aY8uBx8A_fZBamNLnfV5bAAAABQ"]
[Fri Feb 13 21:58:31.525767 2026] [:error] [pid 49225:tid 49296] [client 20.199.186.77:39079] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/past.php"] [unique_id "aY8uBzwH8-zGxtAd3jsfegAAAII"]
[Fri Feb 13 21:58:31.998100 2026] [:error] [pid 47575:tid 47600] [client 20.199.186.77:44492] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/prv8.php"] [unique_id "aY8uBwIPBuXb07mA_mTfrwAAAtM"]
[Fri Feb 13 21:58:32.471392 2026] [:error] [pid 49223:tid 49253] [client 20.199.186.77:31295] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/prv8.php"] [unique_id "aY8uCB8A_fZBamNLnfV5cAAAABU"]
[Fri Feb 13 21:58:32.946277 2026] [:error] [pid 47358:tid 47363] [client 20.199.186.77:24764] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/prv8.php"] [unique_id "aY8uCMQFBuVVUQTESUworAAAAoI"]
[Fri Feb 13 21:58:33.434078 2026] [:error] [pid 18097:tid 18115] [client 20.199.186.77:33583] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/prv8.php"] [unique_id "aY8uCXFzYiQ_BfaDDlZISwAAAZA"]
[Fri Feb 13 21:58:33.904604 2026] [:error] [pid 47575:tid 47584] [client 20.199.186.77:44493] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/i.php"] [unique_id "aY8uCQIPBuXb07mA_mTftAAAAsQ"]
[Fri Feb 13 21:58:34.375431 2026] [:error] [pid 49223:tid 49248] [client 20.199.186.77:32543] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/i.php"] [unique_id "aY8uCh8A_fZBamNLnfV5cwAAABA"]
[Fri Feb 13 21:58:34.846298 2026] [:error] [pid 47575:tid 47596] [client 20.199.186.77:32515] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/i.php"] [unique_id "aY8uCgIPBuXb07mA_mTftgAAAs8"]
[Fri Feb 13 21:58:35.317653 2026] [:error] [pid 47575:tid 47601] [client 20.199.186.77:49655] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/i.php"] [unique_id "aY8uCwIPBuXb07mA_mTftwAAAtQ"]
[Fri Feb 13 21:58:35.790289 2026] [:error] [pid 47575:tid 47591] [client 20.199.186.77:33592] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin/admin.php"] [unique_id "aY8uCwIPBuXb07mA_mTfuAAAAss"]
[Fri Feb 13 21:58:36.261494 2026] [:error] [pid 47080:tid 47110] [client 20.199.186.77:39551] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin/admin.php"] [unique_id "aY8uDEbWJwYCVF39z6tnQgAAAdY"]
[Fri Feb 13 21:58:36.731682 2026] [:error] [pid 47575:tid 47590] [client 20.199.186.77:32562] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin/admin.php"] [unique_id "aY8uDAIPBuXb07mA_mTfugAAAso"]
[Fri Feb 13 21:58:37.202229 2026] [:error] [pid 47143:tid 47237] [client 20.199.186.77:49650] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin/admin.php"] [unique_id "aY8uDchV30NbMarHJLtW0AAAAlc"]
[Fri Feb 13 21:58:37.673526 2026] [:error] [pid 47358:tid 47369] [client 20.199.186.77:27393] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aY8uDcQFBuVVUQTESUwosgAAAoQ"]
[Fri Feb 13 21:58:38.144672 2026] [:error] [pid 47143:tid 47217] [client 20.199.186.77:32555] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aY8uDshV30NbMarHJLtW0wAAAkM"]
[Fri Feb 13 21:58:38.619865 2026] [:error] [pid 47080:tid 47105] [client 20.199.186.77:39047] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aY8uDkbWJwYCVF39z6tnRwAAAdE"]
[Fri Feb 13 21:58:39.098492 2026] [:error] [pid 46821:tid 46830] [client 20.199.186.77:59072] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aY8uD46G1N5YSq0J0gclPAAAAUc"]
[Fri Feb 13 21:58:39.571222 2026] [:error] [pid 47143:tid 47224] [client 20.199.186.77:44535] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/aw.php"] [unique_id "aY8uD8hV30NbMarHJLtW2AAAAko"]
[Fri Feb 13 21:58:40.042271 2026] [:error] [pid 49225:tid 49306] [client 20.199.186.77:49660] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/aw.php"] [unique_id "aY8uEDwH8-zGxtAd3jsffgAAAIw"]
[Fri Feb 13 21:58:40.513778 2026] [:error] [pid 47575:tid 47586] [client 20.199.186.77:62352] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/aw.php"] [unique_id "aY8uEAIPBuXb07mA_mTfwAAAAsY"]
[Fri Feb 13 21:58:40.986662 2026] [:error] [pid 46821:tid 46845] [client 20.199.186.77:39551] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/aw.php"] [unique_id "aY8uEI6G1N5YSq0J0gclQAAAAVY"]
[Fri Feb 13 21:58:41.457190 2026] [:error] [pid 47575:tid 47580] [client 20.199.186.77:27435] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "aY8uEQIPBuXb07mA_mTfwQAAAsE"]
[Fri Feb 13 21:58:41.928629 2026] [:error] [pid 46821:tid 46824] [client 20.199.186.77:64075] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "aY8uEY6G1N5YSq0J0gclQQAAAUE"]
[Fri Feb 13 21:58:42.399566 2026] [:error] [pid 46821:tid 46828] [client 20.199.186.77:36081] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "aY8uEo6G1N5YSq0J0gclQwAAAUU"]
[Fri Feb 13 21:58:42.870180 2026] [:error] [pid 47143:tid 47237] [client 20.199.186.77:2541] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "aY8uEshV30NbMarHJLtW2wAAAlc"]
[Fri Feb 13 21:58:43.340617 2026] [:error] [pid 47575:tid 47597] [client 20.199.186.77:59126] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aY8uEwIPBuXb07mA_mTfxgAAAtA"]
[Fri Feb 13 21:58:43.811398 2026] [:error] [pid 47143:tid 47217] [client 20.199.186.77:64095] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aY8uE8hV30NbMarHJLtW4AAAAkM"]
[Fri Feb 13 21:58:44.284210 2026] [:error] [pid 46821:tid 46843] [client 20.199.186.77:44532] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aY8uFI6G1N5YSq0J0gclRAAAAVQ"]
[Fri Feb 13 21:58:44.755139 2026] [:error] [pid 47358:tid 47369] [client 20.199.186.77:44483] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aY8uFMQFBuVVUQTESUwovAAAAoQ"]
[Fri Feb 13 21:58:45.228567 2026] [:error] [pid 49225:tid 49311] [client 20.199.186.77:64121] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/155.php"] [unique_id "aY8uFTwH8-zGxtAd3jsfhAAAAJE"]
[Fri Feb 13 21:58:45.700779 2026] [:error] [pid 47575:tid 47584] [client 20.199.186.77:49612] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/155.php"] [unique_id "aY8uFQIPBuXb07mA_mTfyAAAAsQ"]
[Fri Feb 13 21:58:46.173623 2026] [:error] [pid 49225:tid 49303] [client 20.199.186.77:39065] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/155.php"] [unique_id "aY8uFjwH8-zGxtAd3jsfhQAAAIk"]
[Fri Feb 13 21:58:46.652343 2026] [:error] [pid 46821:tid 46833] [client 20.199.186.77:63563] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/155.php"] [unique_id "aY8uFo6G1N5YSq0J0gclRgAAAUo"]
[Fri Feb 13 21:58:47.122984 2026] [:error] [pid 49225:tid 49313] [client 20.199.186.77:54074] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/goat.php"] [unique_id "aY8uFzwH8-zGxtAd3jsfhwAAAJM"]
[Fri Feb 13 21:58:47.594091 2026] [:error] [pid 47080:tid 47099] [client 20.199.186.77:39067] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/goat.php"] [unique_id "aY8uF0bWJwYCVF39z6tnUgAAAcs"]
[Fri Feb 13 21:58:48.067793 2026] [:error] [pid 47080:tid 47093] [client 20.199.186.77:64588] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/goat.php"] [unique_id "aY8uGEbWJwYCVF39z6tnUwAAAcU"]
[Fri Feb 13 21:58:48.537657 2026] [:error] [pid 49225:tid 49298] [client 20.199.186.77:25353] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/goat.php"] [unique_id "aY8uGDwH8-zGxtAd3jsfigAAAIQ"]
[Fri Feb 13 21:58:49.009999 2026] [:error] [pid 47143:tid 47233] [client 20.199.186.77:2552] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tcp.php"] [unique_id "aY8uGchV30NbMarHJLtW4gAAAlM"]
[Fri Feb 13 21:58:49.481406 2026] [:error] [pid 18097:tid 18114] [client 20.199.186.77:63557] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tcp.php"] [unique_id "aY8uGXFzYiQ_BfaDDlZITAAAAY8"]
[Fri Feb 13 21:58:49.956217 2026] [:error] [pid 47143:tid 47226] [client 20.199.186.77:42580] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tcp.php"] [unique_id "aY8uGchV30NbMarHJLtW4wAAAkw"]
[Fri Feb 13 21:58:50.425295 2026] [:error] [pid 47080:tid 47111] [client 20.199.186.77:26726] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tcp.php"] [unique_id "aY8uGkbWJwYCVF39z6tnVwAAAdc"]
[Fri Feb 13 21:58:50.896946 2026] [:error] [pid 47080:tid 47090] [client 20.199.186.77:44531] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ext.php"] [unique_id "aY8uGkbWJwYCVF39z6tnWQAAAcI"]
[Fri Feb 13 21:58:51.367771 2026] [:error] [pid 18097:tid 18105] [client 20.199.186.77:2539] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ext.php"] [unique_id "aY8uG3FzYiQ_BfaDDlZITQAAAYY"]
[Fri Feb 13 21:58:51.838227 2026] [:error] [pid 47080:tid 47094] [client 20.199.186.77:44500] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ext.php"] [unique_id "aY8uG0bWJwYCVF39z6tnXQAAAcY"]
[Fri Feb 13 21:58:52.308706 2026] [:error] [pid 49225:tid 49304] [client 20.199.186.77:2531] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ext.php"] [unique_id "aY8uHDwH8-zGxtAd3jsfjQAAAIo"]
[Fri Feb 13 21:58:52.779861 2026] [:error] [pid 18097:tid 18111] [client 20.199.186.77:26700] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aY8uHHFzYiQ_BfaDDlZITwAAAYw"]
[Fri Feb 13 21:58:53.249935 2026] [:error] [pid 47080:tid 47099] [client 20.199.186.77:30690] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aY8uHUbWJwYCVF39z6tnYQAAAcs"]
[Fri Feb 13 21:58:53.722175 2026] [:error] [pid 47080:tid 47108] [client 20.199.186.77:46341] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aY8uHUbWJwYCVF39z6tnZAAAAdQ"]
[Fri Feb 13 21:58:54.193419 2026] [:error] [pid 47575:tid 47590] [client 20.199.186.77:64580] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aY8uHgIPBuXb07mA_mTfzAAAAso"]
[Fri Feb 13 21:58:54.663312 2026] [:error] [pid 47575:tid 47585] [client 20.199.186.77:64603] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ioxi.php"] [unique_id "aY8uHgIPBuXb07mA_mTfzwAAAsU"]
[Fri Feb 13 21:58:55.135347 2026] [:error] [pid 47080:tid 47110] [client 20.199.186.77:44512] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ioxi.php"] [unique_id "aY8uH0bWJwYCVF39z6tnaQAAAdY"]
[Fri Feb 13 21:58:55.607058 2026] [:error] [pid 47080:tid 47094] [client 20.199.186.77:54072] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ioxi.php"] [unique_id "aY8uH0bWJwYCVF39z6tnagAAAcY"]
[Fri Feb 13 21:58:56.079496 2026] [:error] [pid 51243:tid 51250] [client 20.199.186.77:42570] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ioxi.php"] [unique_id "aY8uIMim7ZTAHzi7xZvenwAAAQU"]
[Fri Feb 13 21:58:56.554894 2026] [:error] [pid 51243:tid 51245] [client 20.199.186.77:2829] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aY8uIMim7ZTAHzi7xZveoAAAAQA"]
[Fri Feb 13 21:58:57.027072 2026] [:error] [pid 49335:tid 49340] [client 20.199.186.77:42587] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aY8uIap--SFY2nwOiql9tQAAAMM"]
[Fri Feb 13 21:58:57.498874 2026] [:error] [pid 47358:tid 47388] [client 20.199.186.77:2506] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aY8uIcQFBuVVUQTESUwoyAAAApY"]
[Fri Feb 13 21:58:57.969594 2026] [:error] [pid 46821:tid 46840] [client 20.199.186.77:2516] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aY8uIY6G1N5YSq0J0gclTgAAAVE"]
[Fri Feb 13 21:58:58.440976 2026] [:error] [pid 18097:tid 18104] [client 20.199.186.77:30718] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ov.php"] [unique_id "aY8uInFzYiQ_BfaDDlZIVQAAAYU"]
[Fri Feb 13 21:58:58.912118 2026] [:error] [pid 18097:tid 18122] [client 20.199.186.77:2446] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ov.php"] [unique_id "aY8uInFzYiQ_BfaDDlZIVgAAAZc"]
[Fri Feb 13 21:58:59.395202 2026] [:error] [pid 47575:tid 47597] [client 20.199.186.77:56709] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ov.php"] [unique_id "aY8uIwIPBuXb07mA_mTf0QAAAtA"]
[Fri Feb 13 21:58:59.867322 2026] [:error] [pid 51243:tid 51246] [client 20.199.186.77:54039] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ov.php"] [unique_id "aY8uI8im7ZTAHzi7xZveoQAAAQE"]
[Fri Feb 13 21:59:00.339893 2026] [:error] [pid 47575:tid 47592] [client 20.199.186.77:30677] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aY8uJAIPBuXb07mA_mTf0wAAAsw"]
[Fri Feb 13 21:59:00.810260 2026] [:error] [pid 18097:tid 18107] [client 20.199.186.77:44500] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aY8uJHFzYiQ_BfaDDlZIWAAAAYg"]
[Fri Feb 13 21:59:01.281353 2026] [:error] [pid 47080:tid 47091] [client 20.199.186.77:2835] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aY8uJUbWJwYCVF39z6tncgAAAcM"]
[Fri Feb 13 21:59:01.751204 2026] [:error] [pid 47358:tid 47362] [client 20.199.186.77:50855] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aY8uJcQFBuVVUQTESUwoywAAAoE"]
[Fri Feb 13 21:59:02.237167 2026] [:error] [pid 46821:tid 46830] [client 20.199.186.77:2540] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/default.php"] [unique_id "aY8uJo6G1N5YSq0J0gclUQAAAUc"]
[Fri Feb 13 21:59:02.716618 2026] [:error] [pid 49225:tid 49302] [client 20.199.186.77:50865] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/default.php"] [unique_id "aY8uJjwH8-zGxtAd3jsfjwAAAIg"]
[Fri Feb 13 21:59:03.187564 2026] [:error] [pid 49223:tid 49251] [client 20.199.186.77:59103] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/default.php"] [unique_id "aY8uJx8A_fZBamNLnfV5iAAAABM"]
[Fri Feb 13 21:59:03.659304 2026] [:error] [pid 18097:tid 18114] [client 20.199.186.77:58728] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/default.php"] [unique_id "aY8uJ3FzYiQ_BfaDDlZIWgAAAY8"]
[Fri Feb 13 21:59:04.130823 2026] [:error] [pid 49225:tid 49313] [client 20.199.186.77:26736] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "aY8uKDwH8-zGxtAd3jsfkAAAAJM"]
[Fri Feb 13 21:59:04.601332 2026] [:error] [pid 49335:tid 49346] [client 20.199.186.77:30693] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "aY8uKKp--SFY2nwOiql9vgAAAMk"]
[Fri Feb 13 21:59:05.077465 2026] [:error] [pid 46821:tid 46845] [client 20.199.186.77:50281] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "aY8uKY6G1N5YSq0J0gclVAAAAVY"]
[Fri Feb 13 21:59:05.547667 2026] [:error] [pid 46821:tid 46846] [client 20.199.186.77:42561] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "aY8uKY6G1N5YSq0J0gclVgAAAVc"]
[Fri Feb 13 21:59:06.017564 2026] [:error] [pid 47080:tid 47090] [client 20.199.186.77:58690] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aY8uKkbWJwYCVF39z6tndAAAAcI"]
[Fri Feb 13 21:59:06.488897 2026] [:error] [pid 47080:tid 47108] [client 20.199.186.77:59094] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aY8uKkbWJwYCVF39z6tndQAAAdQ"]
[Fri Feb 13 21:59:06.966967 2026] [:error] [pid 49225:tid 49299] [client 20.199.186.77:56753] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aY8uKjwH8-zGxtAd3jsfkwAAAIU"]
[Fri Feb 13 21:59:07.438590 2026] [:error] [pid 47143:tid 47224] [client 20.199.186.77:58705] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aY8uK8hV30NbMarHJLtW6QAAAko"]
[Fri Feb 13 21:59:07.911467 2026] [:error] [pid 49335:tid 49360] [client 20.199.186.77:54067] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/nope.php"] [unique_id "aY8uK6p--SFY2nwOiql9wQAAANc"]
[Fri Feb 13 21:59:08.382531 2026] [:error] [pid 49223:tid 49244] [client 20.199.186.77:26745] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/nope.php"] [unique_id "aY8uLB8A_fZBamNLnfV5igAAAAw"]
[Fri Feb 13 21:59:08.854869 2026] [:error] [pid 51243:tid 51268] [client 20.199.186.77:2451] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/nope.php"] [unique_id "aY8uLMim7ZTAHzi7xZvepAAAARc"]
[Fri Feb 13 21:59:13.977757 2026] [:error] [pid 47080:tid 47099] [client 20.199.186.77:42622] [client 20.199.186.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/plugins.php"] [unique_id "aY8uMUbWJwYCVF39z6tngAAAAcs"]
[Fri Feb 13 21:59:15.918502 2026] [:error] [pid 46821:tid 46833] [client 20.199.186.77:2455] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/inc.php"] [unique_id "aY8uM46G1N5YSq0J0gclZAAAAUo"]
[Fri Feb 13 21:59:16.395026 2026] [:error] [pid 47358:tid 47375] [client 20.199.186.77:64633] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/inc.php"] [unique_id "aY8uNMQFBuVVUQTESUwo0wAAAok"]
[Fri Feb 13 21:59:16.865984 2026] [:error] [pid 47080:tid 47110] [client 20.199.186.77:26696] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/inc.php"] [unique_id "aY8uNEbWJwYCVF39z6tnhAAAAdY"]
[Fri Feb 13 21:59:17.341942 2026] [:error] [pid 47575:tid 47592] [client 20.199.186.77:2862] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/inc.php"] [unique_id "aY8uNQIPBuXb07mA_mTf3gAAAsw"]
[Fri Feb 13 21:59:17.813089 2026] [:error] [pid 18097:tid 18115] [client 20.199.186.77:64587] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aY8uNXFzYiQ_BfaDDlZIYQAAAZA"]
[Fri Feb 13 21:59:18.285842 2026] [:error] [pid 49223:tid 49250] [client 20.199.186.77:64639] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aY8uNh8A_fZBamNLnfV5kAAAABI"]
[Fri Feb 13 21:59:18.756617 2026] [:error] [pid 18097:tid 18108] [client 20.199.186.77:30710] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aY8uNnFzYiQ_BfaDDlZIYgAAAYk"]
[Fri Feb 13 21:59:19.226660 2026] [:error] [pid 47575:tid 47605] [client 20.199.186.77:64636] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aY8uNwIPBuXb07mA_mTf4AAAAtg"]
[Fri Feb 13 21:59:19.699938 2026] [:error] [pid 46821:tid 46836] [client 20.199.186.77:56762] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/miansha.php"] [unique_id "aY8uN46G1N5YSq0J0gclZwAAAU0"]
[Fri Feb 13 21:59:20.171224 2026] [:error] [pid 18097:tid 18117] [client 20.199.186.77:30662] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/miansha.php"] [unique_id "aY8uOHFzYiQ_BfaDDlZIZAAAAZI"]
[Fri Feb 13 21:59:20.642432 2026] [:error] [pid 49223:tid 49235] [client 20.199.186.77:58699] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/miansha.php"] [unique_id "aY8uOB8A_fZBamNLnfV5lAAAAAM"]
[Fri Feb 13 21:59:21.112736 2026] [:error] [pid 47575:tid 47583] [client 20.199.186.77:2444] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/miansha.php"] [unique_id "aY8uOQIPBuXb07mA_mTf4QAAAsM"]
[Fri Feb 13 21:59:21.583042 2026] [:error] [pid 51243:tid 51249] [client 20.199.186.77:30694] [client 20.199.186.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aY8uOcim7ZTAHzi7xZveqgAAAQQ"]
[Fri Feb 13 21:59:22.054835 2026] [:error] [pid 51243:tid 51251] [client 20.199.186.77:43159] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xfile25.php"] [unique_id "aY8uOsim7ZTAHzi7xZverAAAAQY"]
[Fri Feb 13 21:59:22.526045 2026] [:error] [pid 47143:tid 47218] [client 20.199.186.77:2442] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xfile25.php"] [unique_id "aY8uOshV30NbMarHJLtW8QAAAkQ"]
[Fri Feb 13 21:59:23.000901 2026] [:error] [pid 18097:tid 18111] [client 20.199.186.77:39097] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xfile25.php"] [unique_id "aY8uOnFzYiQ_BfaDDlZIZQAAAYw"]
[Fri Feb 13 21:59:23.474678 2026] [:error] [pid 46821:tid 46832] [client 20.199.186.77:26748] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aY8uO46G1N5YSq0J0gclaQAAAUk"]
[Fri Feb 13 21:59:23.946681 2026] [:error] [pid 51243:tid 51268] [client 20.199.186.77:50820] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aY8uO8im7ZTAHzi7xZvergAAARc"]
[Fri Feb 13 21:59:24.419761 2026] [:error] [pid 49225:tid 49317] [client 20.199.186.77:64601] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aY8uPDwH8-zGxtAd3jsflgAAAJc"]
[Fri Feb 13 21:59:24.890873 2026] [:error] [pid 51243:tid 51260] [client 20.199.186.77:30711] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aY8uPMim7ZTAHzi7xZveswAAAQ8"]
[Fri Feb 13 21:59:25.367993 2026] [:error] [pid 47080:tid 47096] [client 20.199.186.77:26697] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "aY8uPUbWJwYCVF39z6tnjQAAAcg"]
[Fri Feb 13 21:59:25.839059 2026] [:error] [pid 49225:tid 49301] [client 20.199.186.77:56747] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "aY8uPTwH8-zGxtAd3jsfmAAAAIc"]
[Fri Feb 13 21:59:26.310137 2026] [:error] [pid 49225:tid 49311] [client 20.199.186.77:57162] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "aY8uPjwH8-zGxtAd3jsfmwAAAJE"]
[Fri Feb 13 21:59:26.781994 2026] [:error] [pid 49223:tid 49245] [client 20.199.186.77:26712] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "aY8uPh8A_fZBamNLnfV5mgAAAA0"]
[Fri Feb 13 21:59:27.252238 2026] [:error] [pid 47080:tid 47108] [client 20.199.186.77:44426] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/muzu.php"] [unique_id "aY8uP0bWJwYCVF39z6tnjgAAAdQ"]
[Fri Feb 13 21:59:27.723379 2026] [:error] [pid 47080:tid 47092] [client 20.199.186.77:58713] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/muzu.php"] [unique_id "aY8uP0bWJwYCVF39z6tnjwAAAcQ"]
[Fri Feb 13 21:59:28.194631 2026] [:error] [pid 47358:tid 47376] [client 20.199.186.77:30717] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/muzu.php"] [unique_id "aY8uQMQFBuVVUQTESUwo2AAAAoo"]
[Fri Feb 13 21:59:28.666927 2026] [:error] [pid 49225:tid 49299] [client 20.199.186.77:50837] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/muzu.php"] [unique_id "aY8uQDwH8-zGxtAd3jsfnwAAAIU"]
[Fri Feb 13 21:59:29.138694 2026] [:error] [pid 46821:tid 46835] [client 20.199.186.77:61089] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/reze.php"] [unique_id "aY8uQY6G1N5YSq0J0gclbgAAAUw"]
[Fri Feb 13 21:59:29.610256 2026] [:error] [pid 46821:tid 46824] [client 20.199.186.77:64621] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/reze.php"] [unique_id "aY8uQY6G1N5YSq0J0gclcAAAAUE"]
[Fri Feb 13 21:59:30.080229 2026] [:error] [pid 47143:tid 47237] [client 20.199.186.77:56706] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/reze.php"] [unique_id "aY8uQshV30NbMarHJLtW9QAAAlc"]
[Fri Feb 13 21:59:30.566099 2026] [:error] [pid 47143:tid 47235] [client 20.199.186.77:48954] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/reze.php"] [unique_id "aY8uQshV30NbMarHJLtW9gAAAlU"]
[Fri Feb 13 21:59:31.036509 2026] [:error] [pid 49223:tid 49249] [client 20.199.186.77:44418] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/styll.php"] [unique_id "aY8uQx8A_fZBamNLnfV5oAAAABE"]
[Fri Feb 13 21:59:31.508490 2026] [:error] [pid 49225:tid 49304] [client 20.199.186.77:48924] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/styll.php"] [unique_id "aY8uQzwH8-zGxtAd3jsfowAAAIo"]
[Fri Feb 13 21:59:31.979406 2026] [:error] [pid 18097:tid 18105] [client 20.199.186.77:37962] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/styll.php"] [unique_id "aY8uQ3FzYiQ_BfaDDlZIcQAAAYY"]
[Fri Feb 13 21:59:32.454428 2026] [:error] [pid 49223:tid 49256] [client 20.199.186.77:56743] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/styll.php"] [unique_id "aY8uRB8A_fZBamNLnfV5pAAAABg"]
[Fri Feb 13 21:59:32.925404 2026] [:error] [pid 49225:tid 49300] [client 20.199.186.77:37992] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/x7.php"] [unique_id "aY8uRDwH8-zGxtAd3jsfpAAAAIY"]
[Fri Feb 13 21:59:33.397999 2026] [:error] [pid 49223:tid 49236] [client 20.199.186.77:44444] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/x7.php"] [unique_id "aY8uRR8A_fZBamNLnfV5pwAAAAQ"]
[Fri Feb 13 21:59:33.872834 2026] [:error] [pid 47143:tid 47231] [client 20.199.186.77:64581] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/x7.php"] [unique_id "aY8uRchV30NbMarHJLtW_AAAAlE"]
[Fri Feb 13 21:59:34.343864 2026] [:error] [pid 46821:tid 46832] [client 20.199.186.77:24784] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/x7.php"] [unique_id "aY8uRo6G1N5YSq0J0gcldQAAAUk"]
[Fri Feb 13 21:59:34.813218 2026] [:error] [pid 51243:tid 51262] [client 20.199.186.77:52773] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/thebe.php"] [unique_id "aY8uRsim7ZTAHzi7xZvetwAAARE"]
[Fri Feb 13 21:59:35.284232 2026] [:error] [pid 49225:tid 49313] [client 20.199.186.77:30691] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/thebe.php"] [unique_id "aY8uRzwH8-zGxtAd3jsfpwAAAJM"]
[Fri Feb 13 21:59:35.763237 2026] [:error] [pid 47358:tid 47386] [client 20.199.186.77:53414] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/thebe.php"] [unique_id "aY8uR8QFBuVVUQTESUwo2wAAApQ"]
[Fri Feb 13 21:59:36.234823 2026] [:error] [pid 18097:tid 18119] [client 20.199.186.77:2424] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/thebe.php"] [unique_id "aY8uSHFzYiQ_BfaDDlZIdgAAAZQ"]
[Fri Feb 13 21:59:36.705031 2026] [:error] [pid 47358:tid 47368] [client 20.199.186.77:53416] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ddd.php"] [unique_id "aY8uSMQFBuVVUQTESUwo3AAAAoM"]
[Fri Feb 13 21:59:37.185198 2026] [:error] [pid 49223:tid 49256] [client 20.199.186.77:53384] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ddd.php"] [unique_id "aY8uSR8A_fZBamNLnfV5sAAAABg"]
[Fri Feb 13 21:59:37.677575 2026] [:error] [pid 49223:tid 49233] [client 20.199.186.77:53404] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ddd.php"] [unique_id "aY8uSR8A_fZBamNLnfV5sgAAAAE"]
[Fri Feb 13 21:59:38.147974 2026] [:error] [pid 47358:tid 47388] [client 20.199.186.77:50824] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ddd.php"] [unique_id "aY8uSsQFBuVVUQTESUwo3gAAApY"]
[Fri Feb 13 21:59:38.633391 2026] [:error] [pid 49225:tid 49307] [client 20.199.186.77:2423] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ccs.php"] [unique_id "aY8uSjwH8-zGxtAd3jsfqAAAAI0"]
[Fri Feb 13 21:59:39.104612 2026] [:error] [pid 51243:tid 51260] [client 20.199.186.77:58724] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ccs.php"] [unique_id "aY8uS8im7ZTAHzi7xZveuQAAAQ8"]
[Fri Feb 13 21:59:39.577391 2026] [:error] [pid 46821:tid 46843] [client 20.199.186.77:48945] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ccs.php"] [unique_id "aY8uS46G1N5YSq0J0gcleQAAAVQ"]
[Fri Feb 13 21:59:40.058946 2026] [:error] [pid 49225:tid 49315] [client 20.199.186.77:58689] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ccs.php"] [unique_id "aY8uTDwH8-zGxtAd3jsfqQAAAJU"]
[Fri Feb 13 21:59:40.528436 2026] [:error] [pid 49225:tid 49316] [client 20.199.186.77:63563] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aY8uTDwH8-zGxtAd3jsfqgAAAJY"]
[Fri Feb 13 21:59:41.006856 2026] [:error] [pid 47080:tid 47090] [client 20.199.186.77:48948] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aY8uTUbWJwYCVF39z6tnmgAAAcI"]
[Fri Feb 13 21:59:41.485642 2026] [:error] [pid 46821:tid 46844] [client 20.199.186.77:55324] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aY8uTY6G1N5YSq0J0gclewAAAVU"]
[Fri Feb 13 21:59:41.958254 2026] [:error] [pid 18097:tid 18116] [client 20.199.186.77:2416] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aY8uTXFzYiQ_BfaDDlZIgAAAAZE"]
[Fri Feb 13 21:59:42.435374 2026] [:error] [pid 47080:tid 47109] [client 20.199.186.77:48900] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/8xyz.php"] [unique_id "aY8uTkbWJwYCVF39z6tnnQAAAdU"]
[Fri Feb 13 21:59:42.907691 2026] [:error] [pid 49223:tid 49239] [client 20.199.186.77:48916] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/8xyz.php"] [unique_id "aY8uTh8A_fZBamNLnfV5tQAAAAc"]
[Fri Feb 13 21:59:43.379000 2026] [:error] [pid 49225:tid 49298] [client 20.199.186.77:55299] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/8xyz.php"] [unique_id "aY8uTzwH8-zGxtAd3jsfrQAAAIQ"]
[Fri Feb 13 21:59:43.849632 2026] [:error] [pid 47358:tid 47390] [client 20.199.186.77:48955] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/8xyz.php"] [unique_id "aY8uT8QFBuVVUQTESUwo4wAAApg"]
[Fri Feb 13 21:59:44.320562 2026] [:error] [pid 49335:tid 49352] [client 20.199.186.77:48932] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ioxi.php"] [unique_id "aY8uUKp--SFY2nwOiql96AAAAM8"]
[Fri Feb 13 21:59:44.792468 2026] [:error] [pid 49335:tid 49339] [client 20.199.186.77:52749] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ioxi.php"] [unique_id "aY8uUKp--SFY2nwOiql96QAAAMI"]
[Fri Feb 13 21:59:45.262891 2026] [:error] [pid 47358:tid 47379] [client 20.199.186.77:48933] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ioxi.php"] [unique_id "aY8uUcQFBuVVUQTESUwo5QAAAo0"]
[Fri Feb 13 21:59:45.733742 2026] [:error] [pid 47080:tid 47102] [client 20.199.186.77:41158] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ioxi.php"] [unique_id "aY8uUUbWJwYCVF39z6tnoAAAAc4"]
[Fri Feb 13 21:59:46.205402 2026] [:error] [pid 49223:tid 49253] [client 20.199.186.77:52138] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xpwer1.php"] [unique_id "aY8uUh8A_fZBamNLnfV5twAAABU"]
[Fri Feb 13 21:59:46.676733 2026] [:error] [pid 47080:tid 47107] [client 20.199.186.77:41194] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xpwer1.php"] [unique_id "aY8uUkbWJwYCVF39z6tnoQAAAdM"]
[Fri Feb 13 21:59:47.150978 2026] [:error] [pid 49335:tid 49349] [client 20.199.186.77:48927] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xpwer1.php"] [unique_id "aY8uU6p--SFY2nwOiql97AAAAMw"]
[Fri Feb 13 21:59:47.621589 2026] [:error] [pid 47080:tid 47091] [client 20.199.186.77:48956] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xpwer1.php"] [unique_id "aY8uU0bWJwYCVF39z6tnogAAAcM"]
[Fri Feb 13 21:59:48.091459 2026] [:error] [pid 18097:tid 18100] [client 20.199.186.77:41166] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "aY8uVHFzYiQ_BfaDDlZIhAAAAYE"]
[Fri Feb 13 21:59:48.618339 2026] [:error] [pid 49223:tid 49255] [client 20.199.186.77:45511] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "aY8uVB8A_fZBamNLnfV5vQAAABc"]
[Fri Feb 13 21:59:49.089871 2026] [:error] [pid 47575:tid 47599] [client 20.199.186.77:45524] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "aY8uVQIPBuXb07mA_mTf7wAAAtI"]
[Fri Feb 13 21:59:49.560217 2026] [:error] [pid 47575:tid 47604] [client 20.199.186.77:52779] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "aY8uVQIPBuXb07mA_mTf8AAAAtc"]
[Fri Feb 13 21:59:50.039509 2026] [:error] [pid 49225:tid 49300] [client 20.199.186.77:44417] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aY8uVjwH8-zGxtAd3jsfsQAAAIY"]
[Fri Feb 13 21:59:50.509959 2026] [:error] [pid 47575:tid 47595] [client 20.199.186.77:53434] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aY8uVgIPBuXb07mA_mTf8gAAAs4"]
[Fri Feb 13 21:59:50.981268 2026] [:error] [pid 47575:tid 47589] [client 20.199.186.77:53396] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aY8uVgIPBuXb07mA_mTf8wAAAsk"]
[Fri Feb 13 21:59:51.452168 2026] [:error] [pid 46821:tid 46823] [client 20.199.186.77:24798] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aY8uV46G1N5YSq0J0gclhQAAAUA"]
[Fri Feb 13 21:59:51.923012 2026] [:error] [pid 51243:tid 51253] [client 20.199.186.77:45540] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aY8uV8im7ZTAHzi7xZvewAAAAQg"]
[Fri Feb 13 21:59:52.394350 2026] [:error] [pid 47575:tid 47596] [client 20.199.186.77:52156] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aY8uWAIPBuXb07mA_mTf9QAAAs8"]
[Fri Feb 13 21:59:52.864808 2026] [:error] [pid 49223:tid 49239] [client 20.199.186.77:55343] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aY8uWB8A_fZBamNLnfV5wQAAAAc"]
[Fri Feb 13 21:59:53.335482 2026] [:error] [pid 49223:tid 49249] [client 20.199.186.77:43191] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aY8uWR8A_fZBamNLnfV5wwAAABE"]
[Fri Feb 13 21:59:53.817624 2026] [:error] [pid 18097:tid 18119] [client 20.199.186.77:43140] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aY8uWXFzYiQ_BfaDDlZIjAAAAZQ"]
[Fri Feb 13 21:59:54.288747 2026] [:error] [pid 49223:tid 49254] [client 20.199.186.77:43177] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aY8uWh8A_fZBamNLnfV5xQAAABY"]
[Fri Feb 13 21:59:54.760752 2026] [:error] [pid 47080:tid 47094] [client 20.199.186.77:55376] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aY8uWkbWJwYCVF39z6tnrAAAAcY"]
[Fri Feb 13 21:59:55.231910 2026] [:error] [pid 47080:tid 47107] [client 20.199.186.77:64617] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aY8uW0bWJwYCVF39z6tnrgAAAdM"]
[Fri Feb 13 21:59:55.719220 2026] [:error] [pid 49223:tid 49235] [client 20.199.186.77:38008] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aY8uWx8A_fZBamNLnfV5yQAAAAM"]
[Fri Feb 13 21:59:56.190278 2026] [:error] [pid 18097:tid 18111] [client 20.199.186.77:37953] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aY8uXHFzYiQ_BfaDDlZIjwAAAYw"]
[Fri Feb 13 21:59:56.661473 2026] [:error] [pid 49225:tid 49295] [client 20.199.186.77:2401] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aY8uXDwH8-zGxtAd3jsfuAAAAIE"]
[Fri Feb 13 21:59:57.133510 2026] [:error] [pid 49223:tid 49248] [client 20.199.186.77:62273] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aY8uXR8A_fZBamNLnfV5zwAAABA"]
[Fri Feb 13 21:59:57.604161 2026] [:error] [pid 46821:tid 46828] [client 20.199.186.77:48901] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aY8uXY6G1N5YSq0J0gclhgAAAUU"]
[Fri Feb 13 21:59:58.075609 2026] [:error] [pid 47080:tid 47110] [client 20.199.186.77:44472] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aY8uXkbWJwYCVF39z6tntQAAAdY"]
[Fri Feb 13 21:59:58.546658 2026] [:error] [pid 18097:tid 18110] [client 20.199.186.77:53389] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aY8uXnFzYiQ_BfaDDlZIkgAAAYs"]
[Fri Feb 13 21:59:59.022367 2026] [:error] [pid 49223:tid 49235] [client 20.199.186.77:30635] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aY8uXx8A_fZBamNLnfV51AAAAAM"]
[Fri Feb 13 21:59:59.498662 2026] [:error] [pid 49335:tid 49338] [client 20.199.186.77:41201] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aY8uX6p--SFY2nwOiql98QAAAME"]
[Fri Feb 13 21:59:59.970220 2026] [:error] [pid 47358:tid 47376] [client 20.199.186.77:2397] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aY8uX8QFBuVVUQTESUwo7QAAAoo"]
[Fri Feb 13 22:00:00.442244 2026] [:error] [pid 18097:tid 18099] [client 20.199.186.77:55323] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aY8uYHFzYiQ_BfaDDlZIlQAAAYA"]
[Fri Feb 13 22:00:00.919840 2026] [:error] [pid 47575:tid 47600] [client 20.199.186.77:62315] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aY8uYAIPBuXb07mA_mTf-AAAAtM"]
[Fri Feb 13 22:00:01.403700 2026] [:error] [pid 18097:tid 18119] [client 20.199.186.77:46069] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aY8uYXFzYiQ_BfaDDlZIlwAAAZQ"]
[Fri Feb 13 22:00:01.873720 2026] [:error] [pid 51243:tid 51269] [client 20.199.186.77:62298] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aY8uYcim7ZTAHzi7xZvexQAAARg"]
[Fri Feb 13 22:00:02.344402 2026] [:error] [pid 47080:tid 47099] [client 20.199.186.77:53432] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aY8uYkbWJwYCVF39z6tnvgAAAcs"]
[Fri Feb 13 22:00:02.815325 2026] [:error] [pid 47080:tid 47108] [client 20.199.186.77:46034] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aY8uYkbWJwYCVF39z6tnwQAAAdQ"]
[Fri Feb 13 22:00:03.289672 2026] [:error] [pid 47080:tid 47103] [client 20.199.186.77:37967] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/x/"] [unique_id "aY8uY0bWJwYCVF39z6tnxAAAAc8"]
[Fri Feb 13 22:00:03.770297 2026] [:error] [pid 49335:tid 49349] [client 20.199.186.77:2384] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/x/"] [unique_id "aY8uY6p--SFY2nwOiql99AAAAMw"]
[Fri Feb 13 22:00:04.243223 2026] [:error] [pid 47080:tid 47102] [client 20.199.186.77:24100] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/x/"] [unique_id "aY8uZEbWJwYCVF39z6tnxwAAAc4"]
[Fri Feb 13 22:00:04.715543 2026] [:error] [pid 49335:tid 49359] [client 20.199.186.77:46032] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/x/"] [unique_id "aY8uZKp--SFY2nwOiql99gAAANY"]
[Fri Feb 13 22:00:05.191705 2026] [:error] [pid 49335:tid 49342] [client 20.199.186.77:62297] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aY8uZap--SFY2nwOiql9-AAAAMU"]
[Fri Feb 13 22:00:05.663104 2026] [:error] [pid 47080:tid 47100] [client 20.199.186.77:53379] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aY8uZUbWJwYCVF39z6tnyAAAAcw"]
[Fri Feb 13 22:00:06.135234 2026] [:error] [pid 47080:tid 47089] [client 20.199.186.77:53437] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aY8uZkbWJwYCVF39z6tnywAAAcE"]
[Fri Feb 13 22:00:06.622682 2026] [:error] [pid 47080:tid 47099] [client 20.199.186.77:55308] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aY8uZkbWJwYCVF39z6tn0AAAAcs"]
[Fri Feb 13 22:00:07.093614 2026] [:error] [pid 18097:tid 18105] [client 20.199.186.77:2400] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aY8uZ3FzYiQ_BfaDDlZImwAAAYY"]
[Fri Feb 13 22:00:07.564611 2026] [:error] [pid 49223:tid 49242] [client 20.199.186.77:41213] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aY8uZx8A_fZBamNLnfV51wAAAAo"]
[Fri Feb 13 22:00:08.034896 2026] [:error] [pid 18097:tid 18112] [client 20.199.186.77:24108] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aY8uaHFzYiQ_BfaDDlZIngAAAY0"]
[Fri Feb 13 22:00:08.505692 2026] [:error] [pid 47080:tid 47097] [client 20.199.186.77:33649] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aY8uaEbWJwYCVF39z6tn1QAAAck"]
[Fri Feb 13 22:00:08.977750 2026] [:error] [pid 49223:tid 49250] [client 20.199.186.77:45528] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aY8uaB8A_fZBamNLnfV52gAAABI"]
[Fri Feb 13 22:00:09.449234 2026] [:error] [pid 47080:tid 47104] [client 20.199.186.77:52793] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aY8uaUbWJwYCVF39z6tn1wAAAdA"]
[Fri Feb 13 22:00:09.920222 2026] [:error] [pid 47080:tid 47112] [client 20.199.186.77:46053] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aY8uaUbWJwYCVF39z6tn2gAAAdg"]
[Fri Feb 13 22:00:10.391702 2026] [:error] [pid 49335:tid 49346] [client 20.199.186.77:45514] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aY8uaqp--SFY2nwOiql9-wAAAMk"]
[Fri Feb 13 22:00:10.863426 2026] [:error] [pid 47358:tid 47375] [client 20.199.186.77:2286] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aY8uasQFBuVVUQTESUwo8QAAAok"]
[Fri Feb 13 22:00:11.335018 2026] [:error] [pid 51243:tid 51249] [client 20.199.186.77:55351] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aY8ua8im7ZTAHzi7xZveyQAAAQQ"]
[Fri Feb 13 22:00:11.805707 2026] [:error] [pid 51243:tid 51267] [client 20.199.186.77:24114] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aY8ua8im7ZTAHzi7xZveygAAARY"]
[Fri Feb 13 22:00:12.275926 2026] [:error] [pid 47358:tid 47383] [client 20.199.186.77:2249] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aY8ubMQFBuVVUQTESUwo9QAAApE"]
[Fri Feb 13 22:00:12.745489 2026] [:error] [pid 49223:tid 49252] [client 20.199.186.77:27471] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aY8ubB8A_fZBamNLnfV53wAAABQ"]
[Fri Feb 13 22:00:13.220243 2026] [:error] [pid 46821:tid 46845] [client 20.199.186.77:46065] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aY8ubY6G1N5YSq0J0gcljgAAAVY"]
[Fri Feb 13 22:00:13.692641 2026] [:error] [pid 49223:tid 49237] [client 20.199.186.77:30643] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aY8ubR8A_fZBamNLnfV54gAAAAU"]
[Fri Feb 13 22:00:14.163322 2026] [:error] [pid 47358:tid 47369] [client 20.199.186.77:59592] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aY8ubsQFBuVVUQTESUwo-QAAAoQ"]
[Fri Feb 13 22:00:14.635634 2026] [:error] [pid 51243:tid 51245] [client 20.199.186.77:2279] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/f5.php"] [unique_id "aY8ubsim7ZTAHzi7xZveywAAAQA"]
[Fri Feb 13 22:00:19.774566 2026] [:error] [pid 49335:tid 49349] [client 20.199.186.77:62317] [client 20.199.186.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aY8uc6p--SFY2nwOiql-BAAAAMw"]
[Fri Feb 13 22:00:21.719425 2026] [:error] [pid 51243:tid 51263] [client 20.199.186.77:41096] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aY8udcim7ZTAHzi7xZve1gAAARI"]
[Fri Feb 13 22:00:22.202940 2026] [:error] [pid 49225:tid 49306] [client 20.199.186.77:52124] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aY8udjwH8-zGxtAd3jsfzAAAAIw"]
[Fri Feb 13 22:00:22.672840 2026] [:error] [pid 47358:tid 47381] [client 20.199.186.77:31966] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aY8udsQFBuVVUQTESUwo_gAAAo8"]
[Fri Feb 13 22:00:23.143037 2026] [:error] [pid 18097:tid 18104] [client 20.199.186.77:41903] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aY8ud3FzYiQ_BfaDDlZIrgAAAYU"]
[Fri Feb 13 22:00:23.615329 2026] [:error] [pid 18097:tid 18115] [client 20.199.186.77:30018] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "aY8ud3FzYiQ_BfaDDlZIsAAAAZA"]
[Fri Feb 13 22:00:24.090675 2026] [:error] [pid 47575:tid 47586] [client 20.199.186.77:62696] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "aY8ueAIPBuXb07mA_mTf-gAAAsY"]
[Fri Feb 13 22:00:24.562142 2026] [:error] [pid 49223:tid 49248] [client 20.199.186.77:31985] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "aY8ueB8A_fZBamNLnfV57gAAABA"]
[Fri Feb 13 22:00:25.034102 2026] [:error] [pid 47575:tid 47604] [client 20.199.186.77:41100] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "aY8ueQIPBuXb07mA_mTf_QAAAtc"]
[Fri Feb 13 22:00:25.505341 2026] [:error] [pid 49223:tid 49246] [client 20.199.186.77:59587] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aY8ueR8A_fZBamNLnfV57wAAAA4"]
[Fri Feb 13 22:00:25.975564 2026] [:error] [pid 49223:tid 49249] [client 20.199.186.77:62677] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aY8ueR8A_fZBamNLnfV58AAAABE"]
[Fri Feb 13 22:00:26.447559 2026] [:error] [pid 49223:tid 49254] [client 20.199.186.77:31978] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aY8ueh8A_fZBamNLnfV58gAAABY"]
[Fri Feb 13 22:00:26.921200 2026] [:error] [pid 47080:tid 47098] [client 20.199.186.77:56762] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aY8uekbWJwYCVF39z6tn8gAAAco"]
[Fri Feb 13 22:00:27.393055 2026] [:error] [pid 49223:tid 49239] [client 20.199.186.77:23464] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xxxx.php"] [unique_id "aY8uex8A_fZBamNLnfV59gAAAAc"]
[Fri Feb 13 22:00:27.864710 2026] [:error] [pid 49225:tid 49305] [client 20.199.186.77:40056] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xxxx.php"] [unique_id "aY8uezwH8-zGxtAd3jsfzwAAAIs"]
[Fri Feb 13 22:00:28.335448 2026] [:error] [pid 51243:tid 51267] [client 20.199.186.77:40035] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xxxx.php"] [unique_id "aY8ufMim7ZTAHzi7xZve2AAAARY"]
[Fri Feb 13 22:00:28.809458 2026] [:error] [pid 47080:tid 47107] [client 20.199.186.77:62678] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xxxx.php"] [unique_id "aY8ufEbWJwYCVF39z6tn9AAAAdM"]
[Fri Feb 13 22:00:29.281745 2026] [:error] [pid 18097:tid 18122] [client 20.199.186.77:33659] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aY8ufXFzYiQ_BfaDDlZIuwAAAZc"]
[Fri Feb 13 22:00:29.752175 2026] [:error] [pid 47080:tid 47104] [client 20.199.186.77:23470] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aY8ufUbWJwYCVF39z6tn-QAAAdA"]
[Fri Feb 13 22:00:30.232135 2026] [:error] [pid 47358:tid 47375] [client 20.199.186.77:2737] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aY8ufsQFBuVVUQTESUwpCgAAAok"]
[Fri Feb 13 22:00:30.707954 2026] [:error] [pid 47358:tid 47362] [client 20.199.186.77:38540] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aY8ufsQFBuVVUQTESUwpDAAAAoE"]
[Fri Feb 13 22:00:31.177294 2026] [:error] [pid 49223:tid 49256] [client 20.199.186.77:23440] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aY8ufx8A_fZBamNLnfV5-gAAABg"]
[Fri Feb 13 22:00:31.647963 2026] [:error] [pid 51243:tid 51245] [client 20.199.186.77:41882] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aY8uf8im7ZTAHzi7xZve2QAAAQA"]
[Fri Feb 13 22:00:32.119211 2026] [:error] [pid 51243:tid 51250] [client 20.199.186.77:63089] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aY8ugMim7ZTAHzi7xZve2wAAAQU"]
[Fri Feb 13 22:00:32.590197 2026] [:error] [pid 49335:tid 49352] [client 20.199.186.77:62665] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aY8ugKp--SFY2nwOiql-DAAAAM8"]
[Fri Feb 13 22:00:33.061659 2026] [:error] [pid 49335:tid 49339] [client 20.199.186.77:30036] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/about.php"] [unique_id "aY8ugap--SFY2nwOiql-DQAAAMI"]
[Fri Feb 13 22:00:33.544475 2026] [:error] [pid 49335:tid 49360] [client 20.199.186.77:61862] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/about.php"] [unique_id "aY8ugap--SFY2nwOiql-DgAAANc"]
[Fri Feb 13 22:00:34.016084 2026] [:error] [pid 51243:tid 51268] [client 20.199.186.77:40007] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/about.php"] [unique_id "aY8ugsim7ZTAHzi7xZve3wAAARc"]
[Fri Feb 13 22:00:34.490859 2026] [:error] [pid 47143:tid 47221] [client 20.199.186.77:29978] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/about.php"] [unique_id "aY8ugshV30NbMarHJLtXEAAAAkc"]
[Fri Feb 13 22:00:34.962584 2026] [:error] [pid 47575:tid 47581] [client 20.199.186.77:38581] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "aY8uggIPBuXb07mA_mTgAQAAAsI"]
[Fri Feb 13 22:00:35.447835 2026] [:error] [pid 51243:tid 51248] [client 20.199.186.77:30019] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "aY8ug8im7ZTAHzi7xZve4QAAAQM"]
[Fri Feb 13 22:00:35.921765 2026] [:error] [pid 47575:tid 47602] [client 20.199.186.77:62682] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "aY8ugwIPBuXb07mA_mTgBAAAAtU"]
[Fri Feb 13 22:00:36.391797 2026] [:error] [pid 49223:tid 49234] [client 20.199.186.77:41095] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "aY8uhB8A_fZBamNLnfV5_gAAAAI"]
[Fri Feb 13 22:00:36.862360 2026] [:error] [pid 46821:tid 46829] [client 20.199.186.77:27474] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aY8uhI6G1N5YSq0J0gclowAAAUY"]
[Fri Feb 13 22:00:37.344469 2026] [:error] [pid 46821:tid 46835] [client 20.199.186.77:30042] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aY8uhY6G1N5YSq0J0gclpQAAAUw"]
[Fri Feb 13 22:00:37.816289 2026] [:error] [pid 46821:tid 46831] [client 20.199.186.77:40016] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aY8uhY6G1N5YSq0J0gclpgAAAUg"]
[Fri Feb 13 22:00:38.286718 2026] [:error] [pid 51243:tid 51256] [client 20.199.186.77:62672] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aY8uhsim7ZTAHzi7xZve5gAAAQs"]
[Fri Feb 13 22:00:38.757445 2026] [:error] [pid 18097:tid 18121] [client 20.199.186.77:29962] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aY8uhnFzYiQ_BfaDDlZIxwAAAZY"]
[Fri Feb 13 22:00:39.227990 2026] [:error] [pid 47575:tid 47588] [client 20.199.186.77:61840] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aY8uhwIPBuXb07mA_mTgCAAAAsg"]
[Fri Feb 13 22:00:39.699386 2026] [:error] [pid 49225:tid 49300] [client 20.199.186.77:63096] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aY8uhzwH8-zGxtAd3jsf3QAAAIY"]
[Fri Feb 13 22:00:40.169430 2026] [:error] [pid 49225:tid 49301] [client 20.199.186.77:30026] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aY8uiDwH8-zGxtAd3jsf3wAAAIc"]
[Fri Feb 13 22:00:40.641352 2026] [:error] [pid 51243:tid 51258] [client 20.199.186.77:62710] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/blurbs18.php"] [unique_id "aY8uiMim7ZTAHzi7xZve6QAAAQ0"]
[Fri Feb 13 22:00:41.124289 2026] [:error] [pid 46821:tid 46845] [client 20.199.186.77:62673] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/blurbs18.php"] [unique_id "aY8uiY6G1N5YSq0J0gclqAAAAVY"]
[Fri Feb 13 22:00:41.595054 2026] [:error] [pid 18097:tid 18099] [client 20.199.186.77:41145] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/blurbs18.php"] [unique_id "aY8uiXFzYiQ_BfaDDlZIzgAAAYA"]
[Fri Feb 13 22:00:42.066181 2026] [:error] [pid 47358:tid 47369] [client 20.199.186.77:41889] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/blurbs18.php"] [unique_id "aY8uisQFBuVVUQTESUwpFwAAAoQ"]
[Fri Feb 13 22:00:42.549758 2026] [:error] [pid 47358:tid 47380] [client 20.199.186.77:41150] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aY8uisQFBuVVUQTESUwpGAAAAo4"]
[Fri Feb 13 22:00:43.028016 2026] [:error] [pid 49225:tid 49302] [client 20.199.186.77:30051] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aY8uizwH8-zGxtAd3jsf4QAAAIg"]
[Fri Feb 13 22:00:43.504223 2026] [:error] [pid 49225:tid 49316] [client 20.199.186.77:30027] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aY8uizwH8-zGxtAd3jsf4gAAAJY"]
[Fri Feb 13 22:00:43.975927 2026] [:error] [pid 49223:tid 49254] [client 20.199.186.77:38598] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aY8uix8A_fZBamNLnfV6BgAAABY"]
[Fri Feb 13 22:00:44.447787 2026] [:error] [pid 18097:tid 18109] [client 20.199.186.77:38557] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aY8ujHFzYiQ_BfaDDlZI0gAAAYo"]
[Fri Feb 13 22:00:44.918727 2026] [:error] [pid 51243:tid 51255] [client 20.199.186.77:38649] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aY8ujMim7ZTAHzi7xZve7wAAAQo"]
[Fri Feb 13 22:00:45.399044 2026] [:error] [pid 46821:tid 46839] [client 20.199.186.77:51522] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aY8ujY6G1N5YSq0J0gclqwAAAVA"]
[Fri Feb 13 22:00:45.870498 2026] [:error] [pid 49223:tid 49253] [client 20.199.186.77:34695] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aY8ujR8A_fZBamNLnfV6CQAAABU"]
[Fri Feb 13 22:00:46.342443 2026] [:error] [pid 18097:tid 18110] [client 20.199.186.77:40032] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aY8ujnFzYiQ_BfaDDlZI1QAAAYs"]
[Fri Feb 13 22:00:46.817668 2026] [:error] [pid 49223:tid 49245] [client 20.199.186.77:29968] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aY8ujh8A_fZBamNLnfV6DAAAAA0"]
[Fri Feb 13 22:00:47.289896 2026] [:error] [pid 18097:tid 18101] [client 20.199.186.77:57591] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aY8uj3FzYiQ_BfaDDlZI1gAAAYI"]
[Fri Feb 13 22:00:47.760009 2026] [:error] [pid 49225:tid 49312] [client 20.199.186.77:63103] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aY8ujzwH8-zGxtAd3jsf6QAAAJI"]
[Fri Feb 13 22:00:48.233803 2026] [:error] [pid 49225:tid 49297] [client 20.199.186.77:34734] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aY8ukDwH8-zGxtAd3jsf6wAAAIM"]
[Fri Feb 13 22:00:48.703719 2026] [:error] [pid 18097:tid 18120] [client 20.199.186.77:63075] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aY8ukHFzYiQ_BfaDDlZI1wAAAZU"]
[Fri Feb 13 22:00:49.181561 2026] [:error] [pid 47080:tid 47093] [client 20.199.186.77:63098] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aY8ukUbWJwYCVF39z6toCQAAAcU"]
[Fri Feb 13 22:00:49.651837 2026] [:error] [pid 49225:tid 49303] [client 20.199.186.77:30047] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aY8ukTwH8-zGxtAd3jsf7QAAAIk"]
[Fri Feb 13 22:00:50.123252 2026] [:error] [pid 18097:tid 18122] [client 20.199.186.77:38602] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aY8uknFzYiQ_BfaDDlZI2gAAAZc"]
[Fri Feb 13 22:00:50.599148 2026] [:error] [pid 18097:tid 18099] [client 20.199.186.77:34750] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aY8uknFzYiQ_BfaDDlZI3AAAAYA"]
[Fri Feb 13 22:00:51.072095 2026] [:error] [pid 49225:tid 49302] [client 20.199.186.77:57579] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aY8ukzwH8-zGxtAd3jsf7gAAAIg"]
[Fri Feb 13 22:00:51.543656 2026] [:error] [pid 49225:tid 49314] [client 20.199.186.77:51569] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aY8ukzwH8-zGxtAd3jsf8AAAAJQ"]
[Fri Feb 13 22:00:52.014716 2026] [:error] [pid 49225:tid 49318] [client 20.199.186.77:34695] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/admin.php"] [unique_id "aY8ulDwH8-zGxtAd3jsf9AAAAJg"]
[Fri Feb 13 22:00:52.491132 2026] [:error] [pid 47358:tid 47362] [client 20.199.186.77:23451] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/admin.php"] [unique_id "aY8ulMQFBuVVUQTESUwpHgAAAoE"]
[Fri Feb 13 22:00:52.961255 2026] [:error] [pid 51243:tid 51267] [client 20.199.186.77:43935] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/admin.php"] [unique_id "aY8ulMim7ZTAHzi7xZve8gAAARY"]
[Fri Feb 13 22:00:53.440063 2026] [:error] [pid 51243:tid 51253] [client 20.199.186.77:43923] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/admin.php"] [unique_id "aY8ulcim7ZTAHzi7xZve8wAAAQg"]
[Fri Feb 13 22:00:53.912390 2026] [:error] [pid 51243:tid 51258] [client 20.199.186.77:38549] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bless11.php"] [unique_id "aY8ulcim7ZTAHzi7xZve9AAAAQ0"]
[Fri Feb 13 22:00:54.383338 2026] [:error] [pid 51243:tid 51268] [client 20.199.186.77:54141] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bless11.php"] [unique_id "aY8ulsim7ZTAHzi7xZve9gAAARc"]
[Fri Feb 13 22:00:54.853896 2026] [:error] [pid 18097:tid 18101] [client 20.199.186.77:38642] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bless11.php"] [unique_id "aY8ulnFzYiQ_BfaDDlZI4AAAAYI"]
[Fri Feb 13 22:00:55.325030 2026] [:error] [pid 49223:tid 49239] [client 20.199.186.77:26649] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bless11.php"] [unique_id "aY8ulx8A_fZBamNLnfV6FAAAAAc"]
[Fri Feb 13 22:00:55.795408 2026] [:error] [pid 49335:tid 49341] [client 20.199.186.77:54120] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/init.php"] [unique_id "aY8ul6p--SFY2nwOiql-FgAAAMQ"]
[Fri Feb 13 22:00:56.266133 2026] [:error] [pid 47080:tid 47103] [client 20.199.186.77:64174] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/init.php"] [unique_id "aY8umEbWJwYCVF39z6toEAAAAc8"]
[Fri Feb 13 22:00:56.745567 2026] [:error] [pid 47080:tid 47092] [client 20.199.186.77:26642] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/init.php"] [unique_id "aY8umEbWJwYCVF39z6toEQAAAcQ"]
[Fri Feb 13 22:00:57.216963 2026] [:error] [pid 46821:tid 46845] [client 20.199.186.77:57577] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/init.php"] [unique_id "aY8umY6G1N5YSq0J0gclsQAAAVY"]
[Fri Feb 13 22:00:57.686748 2026] [:error] [pid 47080:tid 47102] [client 20.199.186.77:47080] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aY8umUbWJwYCVF39z6toEwAAAc4"]
[Fri Feb 13 22:00:58.156678 2026] [:error] [pid 18097:tid 18103] [client 20.199.186.77:57568] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aY8umnFzYiQ_BfaDDlZI5QAAAYQ"]
[Fri Feb 13 22:00:58.627674 2026] [:error] [pid 49223:tid 49241] [client 20.199.186.77:54138] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aY8umh8A_fZBamNLnfV6FQAAAAk"]
[Fri Feb 13 22:00:59.100135 2026] [:error] [pid 49223:tid 49245] [client 20.199.186.77:29982] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aY8umx8A_fZBamNLnfV6FwAAAA0"]
[Fri Feb 13 22:00:59.572971 2026] [:error] [pid 47080:tid 47101] [client 20.199.186.77:23439] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aY8um0bWJwYCVF39z6toFQAAAc0"]
[Fri Feb 13 22:01:00.043327 2026] [:error] [pid 47080:tid 47088] [client 20.199.186.77:51557] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aY8unEbWJwYCVF39z6toFwAAAcA"]
[Fri Feb 13 22:01:00.515205 2026] [:error] [pid 47080:tid 47091] [client 20.199.186.77:34740] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aY8unEbWJwYCVF39z6toGwAAAcM"]
[Fri Feb 13 22:01:00.986388 2026] [:error] [pid 51243:tid 51261] [client 20.199.186.77:57599] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aY8unMim7ZTAHzi7xZve_gAAARA"]
[Fri Feb 13 22:01:01.457147 2026] [:error] [pid 47358:tid 47380] [client 20.199.186.77:64176] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "aY8uncQFBuVVUQTESUwpJAAAAo4"]
[Fri Feb 13 22:01:01.928716 2026] [:error] [pid 18097:tid 18100] [client 20.199.186.77:61487] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "aY8unXFzYiQ_BfaDDlZI6QAAAYE"]
[Fri Feb 13 22:01:02.401888 2026] [:error] [pid 18097:tid 18115] [client 20.199.186.77:64156] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "aY8unnFzYiQ_BfaDDlZI6gAAAZA"]
[Fri Feb 13 22:01:02.873845 2026] [:error] [pid 18097:tid 18102] [client 20.199.186.77:38557] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "aY8unnFzYiQ_BfaDDlZI6wAAAYM"]
[Fri Feb 13 22:01:03.344373 2026] [:error] [pid 47358:tid 47386] [client 20.199.186.77:64162] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/X7x.php"] [unique_id "aY8un8QFBuVVUQTESUwpJwAAApQ"]
[Fri Feb 13 22:01:03.817133 2026] [:error] [pid 47358:tid 47373] [client 20.199.186.77:57541] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/X7x.php"] [unique_id "aY8un8QFBuVVUQTESUwpKQAAAog"]
[Fri Feb 13 22:01:04.297077 2026] [:error] [pid 47358:tid 47370] [client 20.199.186.77:34715] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/X7x.php"] [unique_id "aY8uoMQFBuVVUQTESUwpLQAAAoU"]
[Fri Feb 13 22:01:04.770126 2026] [:error] [pid 47358:tid 47381] [client 20.199.186.77:34735] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/X7x.php"] [unique_id "aY8uoMQFBuVVUQTESUwpLgAAAo8"]
[Fri Feb 13 22:01:05.241564 2026] [:error] [pid 47143:tid 47224] [client 20.199.186.77:54124] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aY8uochV30NbMarHJLtXGgAAAko"]
[Fri Feb 13 22:01:05.712070 2026] [:error] [pid 18097:tid 18116] [client 20.199.186.77:64189] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aY8uoXFzYiQ_BfaDDlZI8gAAAZE"]
[Fri Feb 13 22:01:06.181969 2026] [:error] [pid 47358:tid 47369] [client 20.199.186.77:38635] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aY8uosQFBuVVUQTESUwpMwAAAoQ"]
[Fri Feb 13 22:01:06.655897 2026] [:error] [pid 47358:tid 47380] [client 20.199.186.77:64175] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aY8uosQFBuVVUQTESUwpNQAAAo4"]
[Fri Feb 13 22:01:07.127490 2026] [:error] [pid 47080:tid 47098] [client 20.199.186.77:34746] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/plss3.php"] [unique_id "aY8uo0bWJwYCVF39z6toJAAAAco"]
[Fri Feb 13 22:01:07.598308 2026] [:error] [pid 47358:tid 47387] [client 20.199.186.77:32608] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/plss3.php"] [unique_id "aY8uo8QFBuVVUQTESUwpNwAAApU"]
[Fri Feb 13 22:01:08.070640 2026] [:error] [pid 18097:tid 18102] [client 20.199.186.77:23445] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/plss3.php"] [unique_id "aY8upHFzYiQ_BfaDDlZI9gAAAYM"]
[Fri Feb 13 22:01:08.542603 2026] [:error] [pid 49335:tid 49340] [client 20.199.186.77:26687] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/plss3.php"] [unique_id "aY8upKp--SFY2nwOiql-HgAAAMM"]
[Fri Feb 13 22:01:09.013984 2026] [:error] [pid 49223:tid 49236] [client 20.199.186.77:54104] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aY8upR8A_fZBamNLnfV6GgAAAAQ"]
[Fri Feb 13 22:01:09.485964 2026] [:error] [pid 49335:tid 49352] [client 20.199.186.77:38629] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aY8upap--SFY2nwOiql-IQAAAM8"]
[Fri Feb 13 22:01:09.957544 2026] [:error] [pid 49335:tid 49349] [client 20.199.186.77:43255] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aY8upap--SFY2nwOiql-IgAAAMw"]
[Fri Feb 13 22:01:10.429016 2026] [:error] [pid 47080:tid 47102] [client 20.199.186.77:54116] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aY8upkbWJwYCVF39z6toLAAAAc4"]
[Fri Feb 13 22:01:10.898667 2026] [:error] [pid 47080:tid 47105] [client 20.199.186.77:43203] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admins.php"] [unique_id "aY8upkbWJwYCVF39z6toLQAAAdE"]
[Fri Feb 13 22:01:11.368976 2026] [:error] [pid 46821:tid 46828] [client 20.199.186.77:34713] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admins.php"] [unique_id "aY8up46G1N5YSq0J0gcltAAAAUU"]
[Fri Feb 13 22:01:11.845237 2026] [:error] [pid 47358:tid 47361] [client 20.199.186.77:53450] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admins.php"] [unique_id "aY8up8QFBuVVUQTESUwpOQAAAoA"]
[Fri Feb 13 22:01:12.316069 2026] [:error] [pid 47080:tid 47112] [client 20.199.186.77:53449] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admins.php"] [unique_id "aY8uqEbWJwYCVF39z6toMAAAAdg"]
[Fri Feb 13 22:01:12.786953 2026] [:error] [pid 47080:tid 47100] [client 20.199.186.77:40544] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aY8uqEbWJwYCVF39z6toMgAAAcw"]
[Fri Feb 13 22:01:13.257159 2026] [:error] [pid 49335:tid 49342] [client 20.199.186.77:54108] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aY8uqap--SFY2nwOiql-JgAAAMU"]
[Fri Feb 13 22:01:13.737089 2026] [:error] [pid 49335:tid 49348] [client 20.199.186.77:41120] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aY8uqap--SFY2nwOiql-KAAAAMs"]
[Fri Feb 13 22:01:14.209782 2026] [:error] [pid 47358:tid 47369] [client 20.199.186.77:26636] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aY8uqsQFBuVVUQTESUwpOwAAAoQ"]
[Fri Feb 13 22:01:14.680712 2026] [:error] [pid 46821:tid 46829] [client 20.199.186.77:40542] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/main.php"] [unique_id "aY8uqo6G1N5YSq0J0gclugAAAUY"]
[Fri Feb 13 22:01:15.151569 2026] [:error] [pid 49225:tid 49315] [client 20.199.186.77:37922] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/main.php"] [unique_id "aY8uqzwH8-zGxtAd3jsf-QAAAJU"]
[Fri Feb 13 22:01:15.632408 2026] [:error] [pid 18097:tid 18102] [client 20.199.186.77:26640] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/main.php"] [unique_id "aY8uq3FzYiQ_BfaDDlZI_gAAAYM"]
[Fri Feb 13 22:01:16.104186 2026] [:error] [pid 49223:tid 49246] [client 20.199.186.77:43225] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/main.php"] [unique_id "aY8urB8A_fZBamNLnfV6HAAAAA4"]
[Fri Feb 13 22:01:16.578311 2026] [:error] [pid 51243:tid 51247] [client 20.199.186.77:54092] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aY8urMim7ZTAHzi7xZvfCwAAAQI"]
[Fri Feb 13 22:01:17.049670 2026] [:error] [pid 47358:tid 47384] [client 20.199.186.77:63134] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aY8urcQFBuVVUQTESUwpPQAAApI"]
[Fri Feb 13 22:01:17.521848 2026] [:error] [pid 18097:tid 18118] [client 20.199.186.77:37892] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aY8urXFzYiQ_BfaDDlZJAgAAAZM"]
[Fri Feb 13 22:01:17.992309 2026] [:error] [pid 47080:tid 47108] [client 20.199.186.77:53475] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aY8urUbWJwYCVF39z6toNQAAAdQ"]
[Fri Feb 13 22:01:18.461887 2026] [:error] [pid 49223:tid 49238] [client 20.199.186.77:53461] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "aY8urh8A_fZBamNLnfV6HQAAAAY"]
[Fri Feb 13 22:01:18.937230 2026] [:error] [pid 46821:tid 46827] [client 20.199.186.77:40531] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "aY8uro6G1N5YSq0J0gclwAAAAUQ"]
[Fri Feb 13 22:01:19.407722 2026] [:error] [pid 49223:tid 49254] [client 20.199.186.77:23514] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "aY8urx8A_fZBamNLnfV6HwAAABY"]
[Fri Feb 13 22:01:19.878611 2026] [:error] [pid 47080:tid 47106] [client 20.199.186.77:53473] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "aY8ur0bWJwYCVF39z6toNgAAAdI"]
[Fri Feb 13 22:01:20.351145 2026] [:error] [pid 49335:tid 49353] [client 20.199.186.77:26664] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "aY8usKp--SFY2nwOiql-LQAAANA"]
[Fri Feb 13 22:01:20.823082 2026] [:error] [pid 47358:tid 47361] [client 20.199.186.77:43965] [client 20.199.186.77] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "aY8usMQFBuVVUQTESUwpRAAAAoA"]
[Fri Feb 13 22:01:23.001058 2026] [:error] [pid 47358:tid 47376] [client 20.199.186.77:53456] [client 20.199.186.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aY8us8QFBuVVUQTESUwpTQAAAoo"]
[Fri Feb 13 22:28:24.796166 2026] [:error] [pid 18097:tid 18123] [client 136.113.227.115:60542] [client 136.113.227.115] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.113.227.115, incrementing ddos counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aY81CHFzYiQ_BfaDDlZObwAAAZg"]
[Fri Feb 13 22:28:25.551140 2026] [:error] [pid 18097:tid 18105] [client 136.113.227.115:60542] [client 136.113.227.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aY81CXFzYiQ_BfaDDlZOcgAAAYY"]
[Fri Feb 13 22:28:26.475659 2026] [:error] [pid 49223:tid 49248] [client 136.113.227.115:51025] [client 136.113.227.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aY81Ch8A_fZBamNLnfWAVwAAABA"]
[Fri Feb 13 22:28:27.285849 2026] [:error] [pid 49223:tid 49232] [client 136.113.227.115:57514] [client 136.113.227.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aY81Cx8A_fZBamNLnfWAWAAAAAA"]
[Fri Feb 13 22:28:28.297282 2026] [:error] [pid 51243:tid 51251] [client 136.113.227.115:50907] [client 136.113.227.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aY81DMim7ZTAHzi7xZvi6gAAAQY"]
[Fri Feb 13 22:28:29.101634 2026] [:error] [pid 49223:tid 49240] [client 136.113.227.115:51755] [client 136.113.227.115] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aY81DR8A_fZBamNLnfWAXwAAAAg"]
[Sat Feb 14 11:41:45.822554 2026] [autoindex:error] [pid 28883:tid 28923] [client 139.59.24.163:60648] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Feb 14 15:09:04.646835 2026] [autoindex:error] [pid 28883:tid 28931] [client 139.59.24.163:49584] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Feb 15 06:52:21.664379 2026] [:error] [pid 55524:tid 55532] [client 65.52.166.53:14935] [client 65.52.166.53] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 65.52.166.53, incrementing ddos counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aZD8pWLAtAbjLmS8eYQ4OQAAAEY"]
[Sun Feb 15 06:52:26.406797 2026] [:error] [pid 55524:tid 55530] [client 65.52.166.53:14935] [client 65.52.166.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aZD8qmLAtAbjLmS8eYQ4QAAAAEQ"]
[Sun Feb 15 06:52:26.976032 2026] [:error] [pid 58005:tid 58030] [client 65.52.166.53:6129] [client 65.52.166.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aZD8qhnRk-ap1pxmBqAESQAAAVQ"]
[Sun Feb 15 06:52:27.476068 2026] [:error] [pid 58096:tid 58119] [client 65.52.166.53:5910] [client 65.52.166.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aZD8q8C_lc9V4fy_kZJgqAAAAxM"]
[Sun Feb 15 06:52:27.991013 2026] [:error] [pid 58037:tid 58053] [client 65.52.166.53:4947] [client 65.52.166.53] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aZD8q4Fcbmw-0-PoMsvsHQAAAc0"]
[Wed Feb 18 23:33:35.291177 2026] [:error] [pid 11611:tid 11722] [client 3.144.1.141:64207] [client 3.144.1.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.144.1.141, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aZXbz-2m6IPN_aBZuKaKvQAAAxg"], referer: https://www.google.com
[Wed Feb 18 23:33:36.077424 2026] [:error] [pid 11611:tid 11700] [client 3.144.1.141:64307] [client 3.144.1.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.144.1.141, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aZXb0O2m6IPN_aBZuKaKvgAAAwI"], referer: https://www.google.com
[Wed Feb 18 23:42:31.450654 2026] [:error] [pid 57014:tid 57021] [client 3.144.1.141:53534] [client 3.144.1.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.144.1.141, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp/wp-login.php"] [unique_id "aZXd5xNZnhS5qKtVIMJPlQAAAQQ"], referer: https://www.google.com
[Wed Feb 18 23:42:32.231252 2026] [:error] [pid 5561:tid 5567] [client 3.144.1.141:53646] [client 3.144.1.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.144.1.141, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp/wp-login.php"] [unique_id "aZXd6EoQssCZYQ4Nexb1mAAAAUM"], referer: https://www.google.com
[Wed Feb 18 23:51:19.211668 2026] [:error] [pid 11548:tid 11598] [client 3.144.1.141:53494] [client 3.144.1.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.144.1.141, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wordpress/wp-login.php"] [unique_id "aZXf9zSFZiBIZZvmIlM_lwAAAhQ"], referer: https://www.google.com
[Wed Feb 18 23:51:19.993806 2026] [:error] [pid 57014:tid 57039] [client 3.144.1.141:53602] [client 3.144.1.141] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 3.144.1.141, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wordpress/wp-login.php"] [unique_id "aZXf9xNZnhS5qKtVIMJQvgAAARY"], referer: https://www.google.com
[Thu Feb 19 23:30:49.721849 2026] [:error] [pid 24048:tid 24063] [client 193.37.32.146:26183] [client 193.37.32.146] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/"] [unique_id "aZcsqWug6wHHqU0QyDYgUwAAAU0"]
[Thu Feb 19 23:30:50.082449 2026] [:error] [pid 49002:tid 49034] [client 193.37.32.133:30301] [client 193.37.32.133] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/"] [unique_id "aZcsqlfcBtQ6hSJuEQmDfAAAANQ"]
[Sat Feb 21 03:43:55.313672 2026] [:error] [pid 40757:tid 40818] [client 20.205.3.49:18667] [client 20.205.3.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/categories/wp-blog.php"] [unique_id "aZi5e6g_MKVL7zhH7dzz0wAAAFc"]
[Sat Feb 21 03:43:56.171155 2026] [:error] [pid 40758:tid 40838] [client 20.205.3.49:18649] [client 20.205.3.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aZi5fEBAHxvBM3i9iKFfkwAAAJA"]
[Sat Feb 21 03:43:58.010789 2026] [:error] [pid 40871:tid 40896] [client 20.205.3.49:16111] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/wp-blog.php"] [unique_id "aZi5fjqDikjdiOZeJyVxaAAAANc"]
[Sat Feb 21 03:43:59.374604 2026] [:error] [pid 40758:tid 40842] [client 20.205.3.49:24342] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/wp-blog.php"] [unique_id "aZi5f0BAHxvBM3i9iKFfnAAAAJQ"]
[Sat Feb 21 03:43:59.960747 2026] [:error] [pid 40757:tid 40804] [client 20.205.3.49:16081] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/wp-blog.php"] [unique_id "aZi5f6g_MKVL7zhH7dzz3AAAAEk"]
[Sat Feb 21 03:44:00.297022 2026] [:error] [pid 40756:tid 40774] [client 20.205.3.49:28810] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/wp-blog.php"] [unique_id "aZi5gANlDP60sLYgqXKbCgAAAAg"]
[Sat Feb 21 03:44:01.030225 2026] [:error] [pid 40757:tid 40797] [client 20.205.3.49:4298] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aZi5gag_MKVL7zhH7dzz4AAAAEI"]
[Sat Feb 21 03:44:05.022673 2026] [:error] [pid 40757:tid 40800] [client 20.205.3.49:4291] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aZi5hag_MKVL7zhH7dzz6QAAAEU"]
[Sat Feb 21 03:44:07.396856 2026] [:error] [pid 40871:tid 40878] [client 20.205.3.49:19522] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aZi5hzqDikjdiOZeJyVxdAAAAMU"]
[Sat Feb 21 03:44:07.888503 2026] [:error] [pid 40756:tid 40785] [client 20.205.3.49:43548] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aZi5hwNlDP60sLYgqXKbHQAAABM"]
[Sat Feb 21 03:44:08.189565 2026] [:error] [pid 40871:tid 40889] [client 20.205.3.49:16437] [client 20.205.3.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/moon.php"] [unique_id "aZi5iDqDikjdiOZeJyVxeAAAANA"]
[Sat Feb 21 03:44:11.522691 2026] [:error] [pid 40871:tid 40887] [client 20.205.3.49:64423] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-miiss.php"] [unique_id "aZi5izqDikjdiOZeJyVxgAAAAM4"]
[Sat Feb 21 03:44:12.502316 2026] [:error] [pid 40871:tid 40882] [client 20.205.3.49:16411] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-miiss.php"] [unique_id "aZi5jDqDikjdiOZeJyVxhAAAAMk"]
[Sat Feb 21 03:44:13.594367 2026] [:error] [pid 40871:tid 40895] [client 20.205.3.49:30770] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-miiss.php"] [unique_id "aZi5jTqDikjdiOZeJyVxigAAANY"]
[Sat Feb 21 03:44:15.155621 2026] [:error] [pid 40871:tid 40882] [client 20.205.3.49:27500] [client 20.205.3.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aZi5jzqDikjdiOZeJyVxjgAAAMk"]
[Sat Feb 21 03:44:15.874600 2026] [:error] [pid 40871:tid 40873] [client 20.205.3.49:15240] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plugins/function.php"] [unique_id "aZi5jzqDikjdiOZeJyVxkQAAAMA"]
[Sat Feb 21 03:44:16.449128 2026] [:error] [pid 40758:tid 40824] [client 20.205.3.49:13363] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plugins/function.php"] [unique_id "aZi5kEBAHxvBM3i9iKFfrAAAAII"]
[Sat Feb 21 03:44:17.107277 2026] [:error] [pid 40758:tid 40834] [client 20.205.3.49:20649] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plugins/function.php"] [unique_id "aZi5kUBAHxvBM3i9iKFfrQAAAIw"]
[Sat Feb 21 03:44:17.902838 2026] [:error] [pid 40871:tid 40880] [client 20.205.3.49:4510] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plugins/function.php"] [unique_id "aZi5kTqDikjdiOZeJyVxmQAAAMc"]
[Sat Feb 21 03:44:18.758558 2026] [:error] [pid 40757:tid 40799] [client 20.205.3.49:16792] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/sky-pro/js.php"] [unique_id "aZi5kqg_MKVL7zhH7dzz-QAAAEQ"]
[Sat Feb 21 03:44:19.272898 2026] [:error] [pid 40757:tid 40795] [client 20.205.3.49:27517] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/sky-pro/js.php"] [unique_id "aZi5k6g_MKVL7zhH7dzz-wAAAEA"]
[Sat Feb 21 03:44:19.847441 2026] [:error] [pid 40871:tid 40883] [client 20.205.3.49:17856] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/sky-pro/js.php"] [unique_id "aZi5kzqDikjdiOZeJyVxngAAAMo"]
[Sat Feb 21 03:44:20.409207 2026] [:error] [pid 40871:tid 40880] [client 20.205.3.49:27479] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/sky-pro/js.php"] [unique_id "aZi5lDqDikjdiOZeJyVxnwAAAMc"]
[Sat Feb 21 03:44:20.844680 2026] [:error] [pid 40758:tid 40846] [client 20.205.3.49:44162] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/Hd.php"] [unique_id "aZi5lEBAHxvBM3i9iKFftgAAAJg"]
[Sat Feb 21 03:44:21.450343 2026] [:error] [pid 40758:tid 40845] [client 20.205.3.49:35600] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/Hd.php"] [unique_id "aZi5lUBAHxvBM3i9iKFfuAAAAJc"]
[Sat Feb 21 03:44:22.332746 2026] [:error] [pid 40871:tid 40876] [client 20.205.3.49:16802] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/Hd.php"] [unique_id "aZi5ljqDikjdiOZeJyVxowAAAMM"]
[Sat Feb 21 03:44:23.290917 2026] [:error] [pid 40756:tid 40789] [client 20.205.3.49:38986] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/Hd.php"] [unique_id "aZi5lwNlDP60sLYgqXKbJwAAABc"]
[Sat Feb 21 03:44:24.071644 2026] [:error] [pid 40756:tid 40773] [client 20.205.3.49:18240] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uploadx.php"] [unique_id "aZi5mANlDP60sLYgqXKbLgAAAAc"]
[Sat Feb 21 03:44:24.495166 2026] [:error] [pid 40756:tid 40786] [client 20.205.3.49:35607] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uploadx.php"] [unique_id "aZi5mANlDP60sLYgqXKbMAAAABQ"]
[Sat Feb 21 03:44:24.925241 2026] [:error] [pid 40871:tid 40892] [client 20.205.3.49:39032] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uploadx.php"] [unique_id "aZi5mDqDikjdiOZeJyVxpwAAANM"]
[Sat Feb 21 03:44:25.498564 2026] [:error] [pid 40757:tid 40802] [client 20.205.3.49:18264] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uploadx.php"] [unique_id "aZi5mag_MKVL7zhH7dz0AgAAAEc"]
[Sat Feb 21 03:44:26.293197 2026] [:error] [pid 40758:tid 40825] [client 20.205.3.49:16825] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xxzdc.php"] [unique_id "aZi5mkBAHxvBM3i9iKFfwgAAAIM"]
[Sat Feb 21 03:44:26.674500 2026] [:error] [pid 40758:tid 40837] [client 20.205.3.49:16769] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xxzdc.php"] [unique_id "aZi5mkBAHxvBM3i9iKFfxAAAAI8"]
[Sat Feb 21 03:44:27.550773 2026] [:error] [pid 40756:tid 40766] [client 20.205.3.49:18243] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xxzdc.php"] [unique_id "aZi5mwNlDP60sLYgqXKbOgAAAAA"]
[Sat Feb 21 03:44:28.170356 2026] [:error] [pid 40757:tid 40801] [client 20.205.3.49:36428] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xxzdc.php"] [unique_id "aZi5nKg_MKVL7zhH7dz0CAAAAEY"]
[Sat Feb 21 03:44:28.782221 2026] [:error] [pid 40756:tid 40781] [client 20.205.3.49:37067] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/z.php"] [unique_id "aZi5nANlDP60sLYgqXKbPgAAAA8"]
[Sat Feb 21 03:44:30.453520 2026] [:error] [pid 40758:tid 40828] [client 20.205.3.49:16776] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/z.php"] [unique_id "aZi5nkBAHxvBM3i9iKFfyQAAAIY"]
[Sat Feb 21 03:44:35.716179 2026] [:error] [pid 40757:tid 40802] [client 20.205.3.49:30745] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/z.php"] [unique_id "aZi5o6g_MKVL7zhH7dz0GgAAAEc"]
[Sat Feb 21 03:44:40.542702 2026] [:error] [pid 40756:tid 40788] [client 20.205.3.49:36475] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/z.php"] [unique_id "aZi5qANlDP60sLYgqXKbTgAAABY"]
[Sat Feb 21 03:44:42.294948 2026] [:error] [pid 40757:tid 40810] [client 20.205.3.49:19066] [client 20.205.3.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jcrop/atomlib.php"] [unique_id "aZi5qqg_MKVL7zhH7dz0IQAAAE8"]
[Sat Feb 21 03:44:44.002514 2026] [:error] [pid 40758:tid 40822] [client 20.205.3.49:31407] [client 20.205.3.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aZi5rEBAHxvBM3i9iKFf6wAAAIA"]
[Sat Feb 21 03:44:44.817320 2026] [:error] [pid 40758:tid 40835] [client 20.205.3.49:33393] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/style2.php"] [unique_id "aZi5rEBAHxvBM3i9iKFf7QAAAI0"]
[Sat Feb 21 03:44:46.798016 2026] [:error] [pid 40871:tid 40884] [client 20.205.3.49:19037] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/style2.php"] [unique_id "aZi5rjqDikjdiOZeJyVxyAAAAMs"]
[Sat Feb 21 03:44:47.464629 2026] [:error] [pid 40756:tid 40776] [client 20.205.3.49:16778] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/style2.php"] [unique_id "aZi5rwNlDP60sLYgqXKbXgAAAAo"]
[Sat Feb 21 03:44:48.026747 2026] [:error] [pid 40758:tid 40825] [client 20.205.3.49:34542] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/style2.php"] [unique_id "aZi5sEBAHxvBM3i9iKFf9gAAAIM"]
[Sat Feb 21 03:44:49.820967 2026] [:error] [pid 40756:tid 40768] [client 20.205.3.49:34526] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/orouu.php"] [unique_id "aZi5sQNlDP60sLYgqXKbYAAAAAI"]
[Sat Feb 21 03:44:50.418530 2026] [:error] [pid 40758:tid 40846] [client 20.205.3.49:31374] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/orouu.php"] [unique_id "aZi5skBAHxvBM3i9iKFf9wAAAJg"]
[Sat Feb 21 03:44:52.368498 2026] [:error] [pid 40758:tid 40829] [client 20.205.3.49:14930] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/orouu.php"] [unique_id "aZi5tEBAHxvBM3i9iKFf_QAAAIc"]
[Sat Feb 21 03:44:53.307125 2026] [:error] [pid 40758:tid 40823] [client 20.205.3.49:19071] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/orouu.php"] [unique_id "aZi5tUBAHxvBM3i9iKFgAQAAAIE"]
[Sat Feb 21 03:44:54.145519 2026] [:error] [pid 40871:tid 40876] [client 20.205.3.49:34531] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/widgets/gool.php"] [unique_id "aZi5tjqDikjdiOZeJyVx3QAAAMM"]
[Sat Feb 21 03:44:55.139885 2026] [:error] [pid 40871:tid 40884] [client 20.205.3.49:14932] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/widgets/gool.php"] [unique_id "aZi5tzqDikjdiOZeJyVx4AAAAMs"]
[Sat Feb 21 03:44:56.793116 2026] [:error] [pid 40871:tid 40885] [client 20.205.3.49:34514] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/widgets/gool.php"] [unique_id "aZi5uDqDikjdiOZeJyVx5AAAAMw"]
[Sat Feb 21 03:45:01.313993 2026] [:error] [pid 40871:tid 40881] [client 20.205.3.49:33392] [client 20.205.3.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/120f9.php"] [unique_id "aZi5vTqDikjdiOZeJyVx8QAAAMg"]
[Sat Feb 21 03:45:02.545834 2026] [:error] [pid 40871:tid 40878] [client 20.205.3.49:61749] [client 20.205.3.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aZi5vjqDikjdiOZeJyVx9AAAAMU"]
[Sat Feb 21 03:45:03.756052 2026] [:error] [pid 40871:tid 40879] [client 20.205.3.49:31414] [client 20.205.3.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/kn18l3.php"] [unique_id "aZi5vzqDikjdiOZeJyVx-gAAAMY"]
[Sat Feb 21 03:45:05.109336 2026] [:error] [pid 40757:tid 40796] [client 20.205.3.49:33405] [client 20.205.3.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "aZi5wag_MKVL7zhH7dz0RQAAAEE"]
[Sat Feb 21 03:45:05.721714 2026] [:error] [pid 40758:tid 40831] [client 20.205.3.49:34549] [client 20.205.3.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.205.3.49, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/wp-login.php"] [unique_id "aZi5wUBAHxvBM3i9iKFgGgAAAIk"]
[Sat Feb 21 03:45:05.843432 2026] [:error] [pid 40871:tid 40886] [client 20.205.3.49:14949] [client 20.205.3.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.205.3.49, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/wp-login.php"] [unique_id "aZi5wTqDikjdiOZeJyVyAQAAAM0"]
[Sat Feb 21 03:45:06.480045 2026] [:error] [pid 40758:tid 40829] [client 20.205.3.49:34549] [client 20.205.3.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aZi5wkBAHxvBM3i9iKFgIQAAAIc"]
[Sat Feb 21 03:45:07.850391 2026] [:error] [pid 40871:tid 40887] [client 20.205.3.49:37073] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xczsxdh.php"] [unique_id "aZi5wzqDikjdiOZeJyVyDwAAAM4"]
[Sat Feb 21 03:45:08.271138 2026] [:error] [pid 40871:tid 40892] [client 20.205.3.49:36416] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xczsxdh.php"] [unique_id "aZi5xDqDikjdiOZeJyVyEQAAANM"]
[Sat Feb 21 03:45:09.315630 2026] [:error] [pid 40758:tid 40822] [client 20.205.3.49:37068] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xczsxdh.php"] [unique_id "aZi5xUBAHxvBM3i9iKFgIwAAAIA"]
[Sat Feb 21 03:45:09.735651 2026] [:error] [pid 40871:tid 40876] [client 20.205.3.49:30721] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xczsxdh.php"] [unique_id "aZi5xTqDikjdiOZeJyVyFAAAAMM"]
[Sat Feb 21 03:45:10.091282 2026] [:error] [pid 40871:tid 40874] [client 20.205.3.49:61757] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aZi5xjqDikjdiOZeJyVyFQAAAME"]
[Sat Feb 21 03:45:10.710696 2026] [:error] [pid 40756:tid 40769] [client 20.205.3.49:36469] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aZi5xgNlDP60sLYgqXKbggAAAAM"]
[Sat Feb 21 03:45:11.536936 2026] [:error] [pid 40756:tid 40772] [client 20.205.3.49:61708] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aZi5xwNlDP60sLYgqXKbgwAAAAY"]
[Sat Feb 21 03:45:11.990877 2026] [:error] [pid 40757:tid 40799] [client 20.205.3.49:61709] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aZi5x6g_MKVL7zhH7dz0UQAAAEQ"]
[Sat Feb 21 03:45:12.593301 2026] [:error] [pid 40757:tid 40819] [client 20.205.3.49:37114] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dropdown.php"] [unique_id "aZi5yKg_MKVL7zhH7dz0UwAAAFg"]
[Sat Feb 21 03:45:13.323463 2026] [:error] [pid 40757:tid 40802] [client 20.205.3.49:61745] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dropdown.php"] [unique_id "aZi5yag_MKVL7zhH7dz0VQAAAEc"]
[Sat Feb 21 03:45:13.633176 2026] [:error] [pid 40757:tid 40798] [client 20.205.3.49:34511] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dropdown.php"] [unique_id "aZi5yag_MKVL7zhH7dz0VwAAAEM"]
[Sat Feb 21 03:45:14.070416 2026] [:error] [pid 40757:tid 40808] [client 20.205.3.49:33378] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dropdown.php"] [unique_id "aZi5yqg_MKVL7zhH7dz0WwAAAE0"]
[Sat Feb 21 03:45:15.019295 2026] [:error] [pid 40757:tid 40806] [client 20.205.3.49:31362] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bala.php"] [unique_id "aZi5y6g_MKVL7zhH7dz0XwAAAEs"]
[Sat Feb 21 03:45:17.228287 2026] [:error] [pid 40758:tid 40823] [client 20.205.3.49:36436] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bala.php"] [unique_id "aZi5zUBAHxvBM3i9iKFgMAAAAIE"]
[Sat Feb 21 03:45:17.900828 2026] [:error] [pid 40756:tid 40781] [client 20.205.3.49:30768] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bala.php"] [unique_id "aZi5zQNlDP60sLYgqXKbiQAAAA8"]
[Sat Feb 21 03:45:18.945094 2026] [:error] [pid 40756:tid 40771] [client 20.205.3.49:37104] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bala.php"] [unique_id "aZi5zgNlDP60sLYgqXKbkAAAAAU"]
[Sat Feb 21 03:45:19.476528 2026] [:error] [pid 40756:tid 40777] [client 20.205.3.49:33356] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/media.php"] [unique_id "aZi5zwNlDP60sLYgqXKbkQAAAAs"]
[Sat Feb 21 03:45:20.315051 2026] [:error] [pid 40871:tid 40888] [client 20.205.3.49:21358] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/media.php"] [unique_id "aZi50DqDikjdiOZeJyVyKAAAAM8"]
[Sat Feb 21 03:45:20.802780 2026] [:error] [pid 40758:tid 40836] [client 20.205.3.49:33345] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/media.php"] [unique_id "aZi50EBAHxvBM3i9iKFgOQAAAI4"]
[Sat Feb 21 03:45:21.523914 2026] [:error] [pid 40757:tid 40801] [client 20.205.3.49:19010] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/media.php"] [unique_id "aZi50ag_MKVL7zhH7dz0cAAAAEY"]
[Sat Feb 21 03:45:22.057707 2026] [:error] [pid 40757:tid 40817] [client 20.205.3.49:31392] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/hehe.php"] [unique_id "aZi50qg_MKVL7zhH7dz0dQAAAFY"]
[Sat Feb 21 03:45:23.637544 2026] [:error] [pid 40757:tid 40804] [client 20.205.3.49:19057] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/hehe.php"] [unique_id "aZi506g_MKVL7zhH7dz0fAAAAEk"]
[Sat Feb 21 03:45:24.227807 2026] [:error] [pid 40757:tid 40815] [client 20.205.3.49:37101] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/hehe.php"] [unique_id "aZi51Kg_MKVL7zhH7dz0fwAAAFQ"]
[Sat Feb 21 03:45:24.669207 2026] [:error] [pid 40758:tid 40836] [client 20.205.3.49:23770] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/hehe.php"] [unique_id "aZi51EBAHxvBM3i9iKFgSwAAAI4"]
[Sat Feb 21 03:45:25.189189 2026] [:error] [pid 40871:tid 40884] [client 20.205.3.49:14920] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/coffee/admin.php"] [unique_id "aZi51TqDikjdiOZeJyVyQwAAAMs"]
[Sat Feb 21 03:45:25.568843 2026] [:error] [pid 40757:tid 40809] [client 20.205.3.49:61711] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/coffee/admin.php"] [unique_id "aZi51ag_MKVL7zhH7dz0gQAAAE4"]
[Sat Feb 21 03:45:27.257613 2026] [:error] [pid 40871:tid 40889] [client 20.205.3.49:5050] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/coffee/admin.php"] [unique_id "aZi51zqDikjdiOZeJyVyTAAAANA"]
[Sat Feb 21 03:45:27.797225 2026] [:error] [pid 40871:tid 40879] [client 20.205.3.49:14937] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/coffee/admin.php"] [unique_id "aZi51zqDikjdiOZeJyVyTwAAAMY"]
[Sat Feb 21 03:45:28.343639 2026] [:error] [pid 40756:tid 40778] [client 20.205.3.49:23758] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/turbo.php"] [unique_id "aZi52ANlDP60sLYgqXKbugAAAAw"]
[Sat Feb 21 03:45:28.929844 2026] [:error] [pid 40758:tid 40842] [client 20.205.3.49:61700] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/turbo.php"] [unique_id "aZi52EBAHxvBM3i9iKFgVQAAAJQ"]
[Sat Feb 21 03:45:29.432481 2026] [:error] [pid 40871:tid 40885] [client 20.205.3.49:23790] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/turbo.php"] [unique_id "aZi52TqDikjdiOZeJyVyUwAAAMw"]
[Sat Feb 21 03:45:30.297078 2026] [:error] [pid 40756:tid 40771] [client 20.205.3.49:21363] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/turbo.php"] [unique_id "aZi52gNlDP60sLYgqXKbvAAAAAU"]
[Sat Feb 21 03:45:31.235161 2026] [:error] [pid 40758:tid 40841] [client 20.205.3.49:61756] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ckeditor/editors.php"] [unique_id "aZi520BAHxvBM3i9iKFgXQAAAJM"]
[Sat Feb 21 03:45:31.897095 2026] [:error] [pid 40756:tid 40777] [client 20.205.3.49:37080] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ckeditor/editors.php"] [unique_id "aZi52wNlDP60sLYgqXKbvwAAAAs"]
[Sat Feb 21 03:45:32.301809 2026] [:error] [pid 40758:tid 40830] [client 20.205.3.49:34543] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ckeditor/editors.php"] [unique_id "aZi53EBAHxvBM3i9iKFgZAAAAIg"]
[Sat Feb 21 03:45:32.826398 2026] [:error] [pid 40758:tid 40829] [client 20.205.3.49:64356] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ckeditor/editors.php"] [unique_id "aZi53EBAHxvBM3i9iKFgZwAAAIc"]
[Sat Feb 21 03:45:33.227040 2026] [:error] [pid 40758:tid 40838] [client 20.205.3.49:19008] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/career/wp-content/uploads/wp-cache.php"] [unique_id "aZi53UBAHxvBM3i9iKFgaAAAAJA"]
[Sat Feb 21 03:45:33.667957 2026] [:error] [pid 40758:tid 40839] [client 20.205.3.49:61748] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/career/wp-content/uploads/wp-cache.php"] [unique_id "aZi53UBAHxvBM3i9iKFgagAAAJE"]
[Sat Feb 21 03:45:34.009982 2026] [:error] [pid 40756:tid 40766] [client 20.205.3.49:34519] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/career/wp-content/uploads/wp-cache.php"] [unique_id "aZi53gNlDP60sLYgqXKbwQAAAAA"]
[Sat Feb 21 03:45:34.390726 2026] [:error] [pid 40758:tid 40834] [client 20.205.3.49:34513] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/career/wp-content/uploads/wp-cache.php"] [unique_id "aZi53kBAHxvBM3i9iKFgbAAAAIw"]
[Sat Feb 21 03:45:34.720788 2026] [:error] [pid 40757:tid 40804] [client 20.205.3.49:30758] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fwe.php"] [unique_id "aZi53qg_MKVL7zhH7dz0jgAAAEk"]
[Sat Feb 21 03:45:35.305908 2026] [:error] [pid 40871:tid 40880] [client 20.205.3.49:21362] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fwe.php"] [unique_id "aZi53zqDikjdiOZeJyVyWgAAAMc"]
[Sat Feb 21 03:45:35.606293 2026] [:error] [pid 40871:tid 40890] [client 20.205.3.49:14964] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fwe.php"] [unique_id "aZi53zqDikjdiOZeJyVyXAAAANE"]
[Sat Feb 21 03:45:35.937249 2026] [:error] [pid 40757:tid 40815] [client 20.205.3.49:61729] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fwe.php"] [unique_id "aZi536g_MKVL7zhH7dz0kQAAAFQ"]
[Sat Feb 21 03:45:36.442534 2026] [:error] [pid 40756:tid 40767] [client 20.205.3.49:37077] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rip.php"] [unique_id "aZi54ANlDP60sLYgqXKbwwAAAAE"]
[Sat Feb 21 03:45:36.953732 2026] [:error] [pid 40756:tid 40768] [client 20.205.3.49:33397] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rip.php"] [unique_id "aZi54ANlDP60sLYgqXKbxgAAAAI"]
[Sat Feb 21 03:45:37.499292 2026] [:error] [pid 40757:tid 40809] [client 20.205.3.49:21345] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rip.php"] [unique_id "aZi54ag_MKVL7zhH7dz0lAAAAE4"]
[Sat Feb 21 03:45:38.260276 2026] [:error] [pid 40756:tid 40784] [client 20.205.3.49:37072] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rip.php"] [unique_id "aZi54gNlDP60sLYgqXKbyQAAABI"]
[Sat Feb 21 03:45:38.772295 2026] [:error] [pid 40756:tid 40772] [client 20.205.3.49:37117] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/phpMyAdmin/favicon.php"] [unique_id "aZi54gNlDP60sLYgqXKbywAAAAY"]
[Sat Feb 21 03:45:39.403047 2026] [:error] [pid 40756:tid 40789] [client 20.205.3.49:37071] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/phpMyAdmin/favicon.php"] [unique_id "aZi54wNlDP60sLYgqXKbzAAAABc"]
[Sat Feb 21 03:45:39.978901 2026] [:error] [pid 40756:tid 40766] [client 20.205.3.49:14939] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/phpMyAdmin/favicon.php"] [unique_id "aZi54wNlDP60sLYgqXKbzgAAAAA"]
[Sat Feb 21 03:45:40.443586 2026] [:error] [pid 40756:tid 40786] [client 20.205.3.49:34501] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/phpMyAdmin/favicon.php"] [unique_id "aZi55ANlDP60sLYgqXKb0QAAABQ"]
[Sat Feb 21 03:45:40.882691 2026] [:error] [pid 40758:tid 40837] [client 20.205.3.49:35622] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/test.php"] [unique_id "aZi55EBAHxvBM3i9iKFgeAAAAI8"]
[Sat Feb 21 03:45:41.535753 2026] [:error] [pid 40758:tid 40825] [client 20.205.3.49:19049] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/test.php"] [unique_id "aZi55UBAHxvBM3i9iKFgeQAAAIM"]
[Sat Feb 21 03:45:41.988433 2026] [:error] [pid 40756:tid 40776] [client 20.205.3.49:21322] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/test.php"] [unique_id "aZi55QNlDP60sLYgqXKb1wAAAAo"]
[Sat Feb 21 03:45:42.400717 2026] [:error] [pid 40758:tid 40830] [client 20.205.3.49:21375] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/test.php"] [unique_id "aZi55kBAHxvBM3i9iKFgewAAAIg"]
[Sat Feb 21 03:45:42.761951 2026] [:error] [pid 40757:tid 40814] [client 20.205.3.49:33399] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin/log.php"] [unique_id "aZi55qg_MKVL7zhH7dz0pQAAAFM"]
[Sat Feb 21 03:45:43.455618 2026] [:error] [pid 40757:tid 40804] [client 20.205.3.49:23775] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin/log.php"] [unique_id "aZi556g_MKVL7zhH7dz0pwAAAEk"]
[Sat Feb 21 03:45:44.248152 2026] [:error] [pid 40756:tid 40766] [client 20.205.3.49:30723] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin/log.php"] [unique_id "aZi56ANlDP60sLYgqXKb2gAAAAA"]
[Sat Feb 21 03:45:45.137462 2026] [:error] [pid 40756:tid 40787] [client 20.205.3.49:64337] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin/log.php"] [unique_id "aZi56QNlDP60sLYgqXKb3gAAABU"]
[Sat Feb 21 03:45:45.614143 2026] [:error] [pid 40756:tid 40789] [client 20.205.3.49:23750] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aZi56QNlDP60sLYgqXKb4wAAABc"]
[Sat Feb 21 03:45:46.133016 2026] [:error] [pid 40871:tid 40885] [client 20.205.3.49:5006] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aZi56jqDikjdiOZeJyVybAAAAMw"]
[Sat Feb 21 03:45:46.561831 2026] [:error] [pid 40871:tid 40892] [client 20.205.3.49:64383] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aZi56jqDikjdiOZeJyVybwAAANM"]
[Sat Feb 21 03:45:47.321363 2026] [:error] [pid 40758:tid 40825] [client 20.205.3.49:64320] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aZi560BAHxvBM3i9iKFgggAAAIM"]
[Sat Feb 21 03:45:49.568126 2026] [:error] [pid 40758:tid 40841] [client 20.205.3.49:33348] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/images/all.php"] [unique_id "aZi57UBAHxvBM3i9iKFghgAAAJM"]
[Sat Feb 21 03:45:50.055345 2026] [:error] [pid 40758:tid 40837] [client 20.205.3.49:37098] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/images/all.php"] [unique_id "aZi57kBAHxvBM3i9iKFgiAAAAI8"]
[Sat Feb 21 03:45:50.545819 2026] [:error] [pid 40756:tid 40768] [client 20.205.3.49:16826] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/images/all.php"] [unique_id "aZi57gNlDP60sLYgqXKb6wAAAAI"]
[Sat Feb 21 03:45:50.995451 2026] [:error] [pid 40757:tid 40810] [client 20.205.3.49:5004] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/images/all.php"] [unique_id "aZi57qg_MKVL7zhH7dz0tgAAAE8"]
[Sat Feb 21 03:45:52.466510 2026] [:error] [pid 40757:tid 40801] [client 20.205.3.49:5053] [client 20.205.3.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aZi58Kg_MKVL7zhH7dz0vgAAAEY"]
[Sat Feb 21 03:45:53.949476 2026] [:error] [pid 40758:tid 40833] [client 20.205.3.49:21315] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "aZi58UBAHxvBM3i9iKFgkQAAAIs"]
[Sat Feb 21 03:45:54.954686 2026] [:error] [pid 40758:tid 40822] [client 20.205.3.49:5034] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "aZi58kBAHxvBM3i9iKFgmQAAAIA"]
[Sat Feb 21 03:45:55.532385 2026] [:error] [pid 40756:tid 40789] [client 20.205.3.49:64349] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "aZi58wNlDP60sLYgqXKb7wAAABc"]
[Sat Feb 21 03:45:56.488105 2026] [:error] [pid 40758:tid 40826] [client 20.205.3.49:30733] [client 20.205.3.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/alfa-rex.php"] [unique_id "aZi59EBAHxvBM3i9iKFgmgAAAIQ"]
[Sat Feb 21 03:45:57.752145 2026] [:error] [pid 40758:tid 40823] [client 20.205.3.49:31398] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/wpr-addons/forms/data.php"] [unique_id "aZi59UBAHxvBM3i9iKFgoAAAAIE"]
[Sat Feb 21 03:45:58.686097 2026] [:error] [pid 40756:tid 40767] [client 20.205.3.49:64371] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/wpr-addons/forms/data.php"] [unique_id "aZi59gNlDP60sLYgqXKb-wAAAAE"]
[Sat Feb 21 03:45:59.125716 2026] [:error] [pid 40758:tid 40825] [client 20.205.3.49:23792] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/wpr-addons/forms/data.php"] [unique_id "aZi590BAHxvBM3i9iKFgogAAAIM"]
[Sat Feb 21 03:45:59.589501 2026] [:error] [pid 40758:tid 40840] [client 20.205.3.49:34518] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/wpr-addons/forms/data.php"] [unique_id "aZi590BAHxvBM3i9iKFgowAAAJI"]
[Sat Feb 21 03:46:00.437541 2026] [:error] [pid 40758:tid 40834] [client 20.205.3.49:21340] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/fw.php"] [unique_id "aZi5-EBAHxvBM3i9iKFgpQAAAIw"]
[Sat Feb 21 03:46:01.663879 2026] [:error] [pid 40758:tid 40836] [client 20.205.3.49:34497] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/fw.php"] [unique_id "aZi5-UBAHxvBM3i9iKFgqwAAAI4"]
[Sat Feb 21 03:46:03.001933 2026] [:error] [pid 40758:tid 40828] [client 20.205.3.49:23756] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/fw.php"] [unique_id "aZi5-0BAHxvBM3i9iKFgrwAAAIY"]
[Sat Feb 21 03:46:05.849627 2026] [:error] [pid 40757:tid 40817] [client 20.205.3.49:23773] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/fw.php"] [unique_id "aZi5_ag_MKVL7zhH7dz00gAAAFY"]
[Sat Feb 21 03:46:06.342978 2026] [:error] [pid 40758:tid 40838] [client 20.205.3.49:21320] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sxo.php"] [unique_id "aZi5_kBAHxvBM3i9iKFguAAAAJA"]
[Sat Feb 21 03:46:11.049184 2026] [:error] [pid 40871:tid 40874] [client 20.205.3.49:19023] [client 20.205.3.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/Auth.php"] [unique_id "aZi6AzqDikjdiOZeJyVyowAAAME"]
[Sat Feb 21 03:46:11.726165 2026] [:error] [pid 40871:tid 40880] [client 20.205.3.49:18299] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aZi6AzqDikjdiOZeJyVyqQAAAMc"]
[Sat Feb 21 03:46:12.364204 2026] [:error] [pid 40871:tid 40889] [client 20.205.3.49:61717] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aZi6BDqDikjdiOZeJyVyrQAAANA"]
[Sat Feb 21 03:46:12.705854 2026] [:error] [pid 40871:tid 40876] [client 20.205.3.49:23760] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aZi6BDqDikjdiOZeJyVysAAAAMM"]
[Sat Feb 21 03:46:13.574265 2026] [:error] [pid 40756:tid 40774] [client 20.205.3.49:61752] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aZi6BQNlDP60sLYgqXKcIQAAAAg"]
[Sat Feb 21 03:46:14.144606 2026] [:error] [pid 40756:tid 40789] [client 20.205.3.49:64357] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/appdata/phpinfo.php"] [unique_id "aZi6BgNlDP60sLYgqXKcIwAAABc"]
[Sat Feb 21 03:46:14.698930 2026] [:error] [pid 40758:tid 40845] [client 20.205.3.49:37102] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/appdata/phpinfo.php"] [unique_id "aZi6BkBAHxvBM3i9iKFgywAAAJc"]
[Sat Feb 21 03:46:15.090741 2026] [:error] [pid 40756:tid 40785] [client 20.205.3.49:37113] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/appdata/phpinfo.php"] [unique_id "aZi6BwNlDP60sLYgqXKcJwAAABM"]
[Sat Feb 21 03:46:16.858716 2026] [:error] [pid 40871:tid 40873] [client 20.205.3.49:28810] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/appdata/phpinfo.php"] [unique_id "aZi6CDqDikjdiOZeJyVyvgAAAMA"]
[Sat Feb 21 03:46:17.313209 2026] [:error] [pid 40758:tid 40840] [client 20.205.3.49:5022] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/install.php"] [unique_id "aZi6CUBAHxvBM3i9iKFg0AAAAJI"]
[Sat Feb 21 03:46:18.218766 2026] [:error] [pid 40758:tid 40841] [client 20.205.3.49:33364] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/install.php"] [unique_id "aZi6CkBAHxvBM3i9iKFg1AAAAJM"]
[Sat Feb 21 03:46:18.957659 2026] [:error] [pid 40758:tid 40822] [client 20.205.3.49:19048] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/install.php"] [unique_id "aZi6CkBAHxvBM3i9iKFg2QAAAIA"]
[Sat Feb 21 03:46:19.431062 2026] [:error] [pid 40758:tid 40840] [client 20.205.3.49:33376] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/install.php"] [unique_id "aZi6C0BAHxvBM3i9iKFg3QAAAJI"]
[Sat Feb 21 03:46:20.279812 2026] [:error] [pid 40758:tid 40825] [client 20.205.3.49:31388] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/profile.php"] [unique_id "aZi6DEBAHxvBM3i9iKFg3gAAAIM"]
[Sat Feb 21 03:46:21.252195 2026] [:error] [pid 40758:tid 40837] [client 20.205.3.49:64372] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/profile.php"] [unique_id "aZi6DUBAHxvBM3i9iKFg4wAAAI8"]
[Sat Feb 21 03:46:21.928823 2026] [:error] [pid 40871:tid 40896] [client 20.205.3.49:21336] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/profile.php"] [unique_id "aZi6DTqDikjdiOZeJyVyxQAAANc"]
[Sat Feb 21 03:46:22.314185 2026] [:error] [pid 40758:tid 40836] [client 20.205.3.49:14924] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/profile.php"] [unique_id "aZi6DkBAHxvBM3i9iKFg6AAAAI4"]
[Sat Feb 21 03:46:22.722653 2026] [:error] [pid 40757:tid 40809] [client 20.205.3.49:5020] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uploan.php"] [unique_id "aZi6Dqg_MKVL7zhH7dz06wAAAE4"]
[Sat Feb 21 03:46:23.481178 2026] [:error] [pid 40871:tid 40895] [client 20.205.3.49:37092] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uploan.php"] [unique_id "aZi6DzqDikjdiOZeJyVyyQAAANY"]
[Sat Feb 21 03:46:24.104181 2026] [:error] [pid 40757:tid 40805] [client 20.205.3.49:23807] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uploan.php"] [unique_id "aZi6EKg_MKVL7zhH7dz08AAAAEo"]
[Sat Feb 21 03:46:24.811390 2026] [:error] [pid 40871:tid 40875] [client 20.205.3.49:34529] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uploan.php"] [unique_id "aZi6EDqDikjdiOZeJyVyywAAAMI"]
[Sat Feb 21 03:46:25.903028 2026] [:error] [pid 40871:tid 40888] [client 20.205.3.49:37116] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/index/data.php"] [unique_id "aZi6ETqDikjdiOZeJyVy0QAAAM8"]
[Sat Feb 21 03:46:26.371569 2026] [:error] [pid 40758:tid 40836] [client 20.205.3.49:64367] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/index/data.php"] [unique_id "aZi6EkBAHxvBM3i9iKFg6wAAAI4"]
[Sat Feb 21 03:46:26.895589 2026] [:error] [pid 40758:tid 40824] [client 20.205.3.49:23772] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/index/data.php"] [unique_id "aZi6EkBAHxvBM3i9iKFg7QAAAII"]
[Sat Feb 21 03:46:28.262654 2026] [:error] [pid 40871:tid 40875] [client 20.205.3.49:14928] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/index/data.php"] [unique_id "aZi6FDqDikjdiOZeJyVy3wAAAMI"]
[Sat Feb 21 03:46:29.202713 2026] [:error] [pid 40758:tid 40822] [client 20.205.3.49:61747] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aZi6FUBAHxvBM3i9iKFg8QAAAIA"]
[Sat Feb 21 03:46:30.571533 2026] [:error] [pid 40756:tid 40782] [client 20.205.3.49:37079] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aZi6FgNlDP60sLYgqXKcPwAAABA"]
[Sat Feb 21 03:46:31.374757 2026] [:error] [pid 40756:tid 40773] [client 20.205.3.49:5013] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aZi6FwNlDP60sLYgqXKcQQAAAAc"]
[Sat Feb 21 03:46:32.411747 2026] [:error] [pid 40756:tid 40768] [client 20.205.3.49:23788] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aZi6GANlDP60sLYgqXKcRQAAAAI"]
[Sat Feb 21 03:46:34.033333 2026] [:error] [pid 40758:tid 40836] [client 20.205.3.49:64342] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aZi6GkBAHxvBM3i9iKFhAgAAAI4"]
[Sat Feb 21 03:46:36.578059 2026] [:error] [pid 40756:tid 40786] [client 20.205.3.49:61704] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aZi6HANlDP60sLYgqXKcTAAAABQ"]
[Sat Feb 21 03:46:38.700325 2026] [:error] [pid 40758:tid 40826] [client 20.205.3.49:64339] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aZi6HkBAHxvBM3i9iKFhCwAAAIQ"]
[Sat Feb 21 03:46:39.873230 2026] [:error] [pid 40756:tid 40787] [client 20.205.3.49:30775] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/404.php"] [unique_id "aZi6HwNlDP60sLYgqXKcWAAAABU"]
[Sat Feb 21 03:46:42.221453 2026] [:error] [pid 40871:tid 40891] [client 20.205.3.49:5024] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/h.php"] [unique_id "aZi6IjqDikjdiOZeJyVzLAAAANI"]
[Sat Feb 21 03:46:43.276094 2026] [:error] [pid 40758:tid 40840] [client 20.205.3.49:4977] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/h.php"] [unique_id "aZi6I0BAHxvBM3i9iKFhGQAAAJI"]
[Sat Feb 21 03:46:48.301344 2026] [:error] [pid 40871:tid 40892] [client 20.205.3.49:14974] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/h.php"] [unique_id "aZi6KDqDikjdiOZeJyVzWQAAANM"]
[Sat Feb 21 03:46:51.090604 2026] [:error] [pid 40758:tid 40824] [client 20.205.3.49:64347] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/h.php"] [unique_id "aZi6K0BAHxvBM3i9iKFhKgAAAII"]
[Sat Feb 21 03:46:54.307438 2026] [:error] [pid 40871:tid 40883] [client 20.205.3.49:31401] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/assets/BIBIL.php"] [unique_id "aZi6LjqDikjdiOZeJyVzbgAAAMo"]
[Sat Feb 21 03:46:57.411367 2026] [:error] [pid 40756:tid 40771] [client 20.205.3.49:31368] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/assets/BIBIL.php"] [unique_id "aZi6MQNlDP60sLYgqXKcdwAAAAU"]
[Sat Feb 21 03:46:59.201501 2026] [:error] [pid 40758:tid 40845] [client 20.205.3.49:31403] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/assets/BIBIL.php"] [unique_id "aZi6M0BAHxvBM3i9iKFhNgAAAJc"]
[Sat Feb 21 03:47:00.392238 2026] [:error] [pid 40871:tid 40895] [client 20.205.3.49:4975] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/assets/BIBIL.php"] [unique_id "aZi6NDqDikjdiOZeJyVzfAAAANY"]
[Sat Feb 21 03:47:01.087931 2026] [:error] [pid 40758:tid 40830] [client 20.205.3.49:19065] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/upgrade/20ojy.php"] [unique_id "aZi6NUBAHxvBM3i9iKFhPgAAAIg"]
[Sat Feb 21 03:47:01.833454 2026] [:error] [pid 40871:tid 40889] [client 20.205.3.49:37069] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/upgrade/20ojy.php"] [unique_id "aZi6NTqDikjdiOZeJyVzfgAAANA"]
[Sat Feb 21 03:47:03.938313 2026] [:error] [pid 40757:tid 40815] [client 20.205.3.49:34506] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/upgrade/20ojy.php"] [unique_id "aZi6N6g_MKVL7zhH7dz1YAAAAFQ"]
[Sat Feb 21 03:47:05.061231 2026] [:error] [pid 40871:tid 40879] [client 20.205.3.49:31383] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/upgrade/20ojy.php"] [unique_id "aZi6OTqDikjdiOZeJyVziQAAAMY"]
[Sat Feb 21 03:47:05.562991 2026] [:error] [pid 40871:tid 40874] [client 20.205.3.49:61736] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/admin.php"] [unique_id "aZi6OTqDikjdiOZeJyVzigAAAME"]
[Sat Feb 21 03:47:06.847679 2026] [:error] [pid 40757:tid 40807] [client 20.205.3.49:37057] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/admin.php"] [unique_id "aZi6Oqg_MKVL7zhH7dz1ZAAAAEw"]
[Sat Feb 21 03:47:07.393660 2026] [:error] [pid 40871:tid 40875] [client 20.205.3.49:4974] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/admin.php"] [unique_id "aZi6OzqDikjdiOZeJyVzkQAAAMI"]
[Sat Feb 21 03:47:07.881140 2026] [:error] [pid 40758:tid 40825] [client 20.205.3.49:21370] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/admin.php"] [unique_id "aZi6O0BAHxvBM3i9iKFhRgAAAIM"]
[Sat Feb 21 03:47:09.245978 2026] [:error] [pid 40757:tid 40812] [client 20.205.3.49:14943] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/iWWmzrOXi.php"] [unique_id "aZi6Pag_MKVL7zhH7dz1agAAAFE"]
[Sat Feb 21 03:47:09.765755 2026] [:error] [pid 40757:tid 40818] [client 20.205.3.49:64320] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/iWWmzrOXi.php"] [unique_id "aZi6Pag_MKVL7zhH7dz1awAAAFc"]
[Sat Feb 21 03:47:14.640366 2026] [:error] [pid 40871:tid 40889] [client 20.205.3.49:14933] [client 20.205.3.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/file.php"] [unique_id "aZi6QjqDikjdiOZeJyVzqgAAANA"]
[Sat Feb 21 03:47:15.471104 2026] [:error] [pid 40758:tid 40838] [client 20.205.3.49:23759] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/function.php"] [unique_id "aZi6Q0BAHxvBM3i9iKFhVQAAAJA"]
[Sat Feb 21 03:47:20.591972 2026] [:error] [pid 40756:tid 40777] [client 20.205.3.49:5055] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/function.php"] [unique_id "aZi6SANlDP60sLYgqXKctAAAAAs"]
[Sat Feb 21 03:47:23.252636 2026] [:error] [pid 40871:tid 40892] [client 20.205.3.49:64322] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/function.php"] [unique_id "aZi6SzqDikjdiOZeJyVzvQAAANM"]
[Sat Feb 21 03:47:24.357629 2026] [:error] [pid 40758:tid 40826] [client 20.205.3.49:37106] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/function.php"] [unique_id "aZi6TEBAHxvBM3i9iKFhbQAAAIQ"]
[Sat Feb 21 03:47:25.215851 2026] [:error] [pid 40757:tid 40802] [client 20.205.3.49:64326] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/languages/country.php"] [unique_id "aZi6Tag_MKVL7zhH7dz1mAAAAEc"]
[Sat Feb 21 03:47:25.767078 2026] [:error] [pid 40756:tid 40772] [client 20.205.3.49:31381] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/languages/country.php"] [unique_id "aZi6TQNlDP60sLYgqXKcwQAAAAY"]
[Sat Feb 21 03:47:26.755846 2026] [:error] [pid 40756:tid 40785] [client 20.205.3.49:34525] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/languages/country.php"] [unique_id "aZi6TgNlDP60sLYgqXKcxgAAABM"]
[Sat Feb 21 03:47:28.386561 2026] [:error] [pid 40758:tid 40840] [client 20.205.3.49:4993] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/languages/country.php"] [unique_id "aZi6UEBAHxvBM3i9iKFhcwAAAJI"]
[Sat Feb 21 03:47:29.084425 2026] [:error] [pid 40758:tid 40844] [client 20.205.3.49:31412] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/elp.php"] [unique_id "aZi6UUBAHxvBM3i9iKFhdwAAAJY"]
[Sat Feb 21 03:47:29.585623 2026] [:error] [pid 40758:tid 40843] [client 20.205.3.49:64369] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/elp.php"] [unique_id "aZi6UUBAHxvBM3i9iKFhewAAAJU"]
[Sat Feb 21 03:47:30.177662 2026] [:error] [pid 40757:tid 40813] [client 20.205.3.49:61731] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/elp.php"] [unique_id "aZi6Uqg_MKVL7zhH7dz1owAAAFI"]
[Sat Feb 21 03:47:30.899566 2026] [:error] [pid 40871:tid 40876] [client 20.205.3.49:61728] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/elp.php"] [unique_id "aZi6UjqDikjdiOZeJyVzzQAAAMM"]
[Sat Feb 21 03:47:31.481179 2026] [:error] [pid 40758:tid 40823] [client 20.205.3.49:48897] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aZi6U0BAHxvBM3i9iKFhggAAAIE"]
[Sat Feb 21 03:47:32.407107 2026] [:error] [pid 40758:tid 40833] [client 20.205.3.49:19056] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aZi6VEBAHxvBM3i9iKFhhQAAAIs"]
[Sat Feb 21 03:47:32.977752 2026] [:error] [pid 40758:tid 40822] [client 20.205.3.49:31410] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aZi6VEBAHxvBM3i9iKFhhwAAAIA"]
[Sat Feb 21 03:47:33.780182 2026] [:error] [pid 40871:tid 40876] [client 20.205.3.49:34551] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aZi6VTqDikjdiOZeJyVz2QAAAMM"]
[Sat Feb 21 03:47:34.264334 2026] [:error] [pid 40757:tid 40799] [client 20.205.3.49:36425] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/buy.php"] [unique_id "aZi6Vqg_MKVL7zhH7dz1qwAAAEQ"]
[Sat Feb 21 03:47:35.353758 2026] [:error] [pid 40758:tid 40829] [client 20.205.3.49:19058] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/buy.php"] [unique_id "aZi6V0BAHxvBM3i9iKFhkQAAAIc"]
[Sat Feb 21 03:47:35.938559 2026] [:error] [pid 40757:tid 40810] [client 20.205.3.49:20294] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/buy.php"] [unique_id "aZi6V6g_MKVL7zhH7dz1rAAAAE8"]
[Sat Feb 21 03:47:37.197853 2026] [:error] [pid 40758:tid 40827] [client 20.205.3.49:61754] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/buy.php"] [unique_id "aZi6WUBAHxvBM3i9iKFhlAAAAIU"]
[Sat Feb 21 03:47:38.289798 2026] [:error] [pid 40757:tid 40797] [client 20.205.3.49:33369] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/test.php"] [unique_id "aZi6Wqg_MKVL7zhH7dz1tQAAAEI"]
[Sat Feb 21 03:47:39.005471 2026] [:error] [pid 40871:tid 40887] [client 20.205.3.49:30742] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/test.php"] [unique_id "aZi6WzqDikjdiOZeJyVz7AAAAM4"]
[Sat Feb 21 03:47:39.710359 2026] [:error] [pid 40756:tid 40766] [client 20.205.3.49:14958] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/test.php"] [unique_id "aZi6WwNlDP60sLYgqXKc3QAAAAA"]
[Sat Feb 21 03:47:40.565559 2026] [:error] [pid 40757:tid 40813] [client 20.205.3.49:31382] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/test.php"] [unique_id "aZi6XKg_MKVL7zhH7dz1uAAAAFI"]
[Sat Feb 21 03:47:42.109671 2026] [:error] [pid 40757:tid 40799] [client 20.205.3.49:21334] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aZi6Xqg_MKVL7zhH7dz1vAAAAEQ"]
[Sat Feb 21 03:47:42.741752 2026] [:error] [pid 40758:tid 40824] [client 20.205.3.49:30725] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aZi6XkBAHxvBM3i9iKFhrgAAAII"]
[Sat Feb 21 03:47:43.301298 2026] [:error] [pid 40756:tid 40774] [client 20.205.3.49:37062] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aZi6XwNlDP60sLYgqXKc3wAAAAg"]
[Sat Feb 21 03:47:43.900313 2026] [:error] [pid 40756:tid 40788] [client 20.205.3.49:37078] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aZi6XwNlDP60sLYgqXKc5AAAABY"]
[Sat Feb 21 03:47:44.422635 2026] [:error] [pid 40758:tid 40846] [client 20.205.3.49:14962] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/backup/db.php"] [unique_id "aZi6YEBAHxvBM3i9iKFhtAAAAJg"]
[Sat Feb 21 03:47:44.972159 2026] [:error] [pid 40758:tid 40831] [client 20.205.3.49:31400] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/backup/db.php"] [unique_id "aZi6YEBAHxvBM3i9iKFhtwAAAIk"]
[Sat Feb 21 03:47:45.658843 2026] [:error] [pid 40758:tid 40824] [client 20.205.3.49:37105] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/backup/db.php"] [unique_id "aZi6YUBAHxvBM3i9iKFhuAAAAII"]
[Sat Feb 21 03:47:46.492579 2026] [:error] [pid 40758:tid 40822] [client 20.205.3.49:33401] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/backup/db.php"] [unique_id "aZi6YkBAHxvBM3i9iKFhvQAAAIA"]
[Sat Feb 21 03:47:47.571626 2026] [:error] [pid 40757:tid 40815] [client 20.205.3.49:18267] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/includes/db.php"] [unique_id "aZi6Y6g_MKVL7zhH7dz1zgAAAFQ"]
[Sat Feb 21 03:47:48.181772 2026] [:error] [pid 40871:tid 40891] [client 20.205.3.49:31393] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/includes/db.php"] [unique_id "aZi6ZDqDikjdiOZeJyVz_QAAANI"]
[Sat Feb 21 03:47:49.283780 2026] [:error] [pid 40756:tid 40781] [client 20.205.3.49:30769] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/includes/db.php"] [unique_id "aZi6ZQNlDP60sLYgqXKc9AAAAA8"]
[Sat Feb 21 03:47:49.998269 2026] [:error] [pid 40757:tid 40809] [client 20.205.3.49:21331] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/includes/db.php"] [unique_id "aZi6Zag_MKVL7zhH7dz11QAAAE4"]
[Sat Feb 21 03:47:50.785322 2026] [:error] [pid 40871:tid 40885] [client 20.205.3.49:14918] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aZi6ZjqDikjdiOZeJyV0BAAAAMw"]
[Sat Feb 21 03:47:51.728110 2026] [:error] [pid 40871:tid 40886] [client 20.205.3.49:21335] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aZi6ZzqDikjdiOZeJyV0CAAAAM0"]
[Sat Feb 21 03:47:52.371252 2026] [:error] [pid 40758:tid 40846] [client 20.205.3.49:19069] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aZi6aEBAHxvBM3i9iKFhwgAAAJg"]
[Sat Feb 21 03:47:53.007959 2026] [:error] [pid 40758:tid 40835] [client 20.205.3.49:36437] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/seotheme/mar.php"] [unique_id "aZi6aUBAHxvBM3i9iKFhwwAAAI0"]
[Sat Feb 21 03:47:54.314255 2026] [:error] [pid 40871:tid 40893] [client 20.205.3.49:36455] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aZi6ajqDikjdiOZeJyV0EgAAANQ"]
[Sat Feb 21 03:47:54.866442 2026] [:error] [pid 40871:tid 40890] [client 20.205.3.49:35632] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aZi6ajqDikjdiOZeJyV0FQAAANE"]
[Sat Feb 21 03:47:55.860704 2026] [:error] [pid 40758:tid 40844] [client 20.205.3.49:18262] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aZi6a0BAHxvBM3i9iKFhyAAAAJY"]
[Sat Feb 21 03:47:56.295565 2026] [:error] [pid 40757:tid 40809] [client 20.205.3.49:29449] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aZi6bKg_MKVL7zhH7dz14QAAAE4"]
[Sat Feb 21 03:47:57.172260 2026] [:error] [pid 40871:tid 40876] [client 20.205.3.49:38995] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/includes/utchiha_82p9FeRi.php"] [unique_id "aZi6bTqDikjdiOZeJyV0HQAAAMM"]
[Sat Feb 21 03:47:57.818013 2026] [:error] [pid 40758:tid 40842] [client 20.205.3.49:35633] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/includes/utchiha_82p9FeRi.php"] [unique_id "aZi6bUBAHxvBM3i9iKFhzAAAAJQ"]
[Sat Feb 21 03:47:58.602885 2026] [:error] [pid 40871:tid 40887] [client 20.205.3.49:18285] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/includes/utchiha_82p9FeRi.php"] [unique_id "aZi6bjqDikjdiOZeJyV0JAAAAM4"]
[Sat Feb 21 03:47:59.616622 2026] [:error] [pid 40871:tid 40891] [client 20.205.3.49:13414] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/includes/utchiha_82p9FeRi.php"] [unique_id "aZi6bzqDikjdiOZeJyV0KAAAANI"]
[Sat Feb 21 03:47:59.972629 2026] [:error] [pid 40871:tid 40876] [client 20.205.3.49:39013] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uchkkzmk.php"] [unique_id "aZi6bzqDikjdiOZeJyV0KgAAAMM"]
[Sat Feb 21 03:48:00.746652 2026] [:error] [pid 40756:tid 40775] [client 20.205.3.49:13419] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uchkkzmk.php"] [unique_id "aZi6cANlDP60sLYgqXKdFAAAAAk"]
[Sat Feb 21 03:48:01.248512 2026] [:error] [pid 40757:tid 40807] [client 20.205.3.49:45431] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uchkkzmk.php"] [unique_id "aZi6cag_MKVL7zhH7dz17AAAAEw"]
[Sat Feb 21 03:48:01.870519 2026] [:error] [pid 40757:tid 40795] [client 20.205.3.49:16467] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uchkkzmk.php"] [unique_id "aZi6cag_MKVL7zhH7dz17gAAAEA"]
[Sat Feb 21 03:48:02.935223 2026] [:error] [pid 40756:tid 40777] [client 20.205.3.49:13415] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/users.php"] [unique_id "aZi6cgNlDP60sLYgqXKdGAAAAAs"]
[Sat Feb 21 03:48:03.707611 2026] [:error] [pid 40758:tid 40838] [client 20.205.3.49:38997] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/users.php"] [unique_id "aZi6c0BAHxvBM3i9iKFh1QAAAJA"]
[Sat Feb 21 03:48:06.585062 2026] [:error] [pid 40758:tid 40826] [client 20.205.3.49:28782] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/users.php"] [unique_id "aZi6dkBAHxvBM3i9iKFh4gAAAIQ"]
[Sat Feb 21 03:48:07.075027 2026] [:error] [pid 40757:tid 40800] [client 20.205.3.49:30023] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/users.php"] [unique_id "aZi6d6g_MKVL7zhH7dz1_gAAAEU"]
[Sat Feb 21 03:48:07.490025 2026] [:error] [pid 40756:tid 40790] [client 20.205.3.49:28760] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/wp-cron.php"] [unique_id "aZi6dwNlDP60sLYgqXKdIQAAABg"]
[Sat Feb 21 03:48:07.860851 2026] [:error] [pid 40756:tid 40767] [client 20.205.3.49:4572] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/wp-cron.php"] [unique_id "aZi6dwNlDP60sLYgqXKdIgAAAAE"]
[Sat Feb 21 03:48:08.759252 2026] [:error] [pid 40757:tid 40803] [client 20.205.3.49:30042] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/wp-cron.php"] [unique_id "aZi6eKg_MKVL7zhH7dz2BAAAAEg"]
[Sat Feb 21 03:48:09.158689 2026] [:error] [pid 40757:tid 40808] [client 20.205.3.49:30047] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/wp-cron.php"] [unique_id "aZi6eag_MKVL7zhH7dz2BgAAAE0"]
[Sat Feb 21 03:48:09.932877 2026] [:error] [pid 40871:tid 40895] [client 20.205.3.49:35014] [client 20.205.3.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/gi.php"] [unique_id "aZi6eTqDikjdiOZeJyV0OgAAANY"]
[Sat Feb 21 03:48:10.638744 2026] [:error] [pid 40756:tid 40789] [client 20.205.3.49:12959] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alfanew.php"] [unique_id "aZi6egNlDP60sLYgqXKdJgAAABc"]
[Sat Feb 21 03:48:11.027416 2026] [:error] [pid 40871:tid 40874] [client 20.205.3.49:35656] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alfanew.php"] [unique_id "aZi6ezqDikjdiOZeJyV0PwAAAME"]
[Sat Feb 21 03:48:11.553632 2026] [:error] [pid 40871:tid 40885] [client 20.205.3.49:13782] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alfanew.php"] [unique_id "aZi6ezqDikjdiOZeJyV0QgAAAMw"]
[Sat Feb 21 03:48:12.386735 2026] [:error] [pid 40871:tid 40879] [client 20.205.3.49:60901] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alfanew.php"] [unique_id "aZi6fDqDikjdiOZeJyV0RAAAAMY"]
[Sat Feb 21 03:48:12.711915 2026] [:error] [pid 40758:tid 40845] [client 20.205.3.49:60905] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/system_log.php"] [unique_id "aZi6fEBAHxvBM3i9iKFh9gAAAJc"]
[Sat Feb 21 03:48:13.152813 2026] [:error] [pid 40756:tid 40785] [client 20.205.3.49:22155] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/system_log.php"] [unique_id "aZi6fQNlDP60sLYgqXKdKAAAABM"]
[Sat Feb 21 03:48:16.699912 2026] [:error] [pid 40756:tid 40772] [client 20.205.3.49:4233] [client 20.205.3.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/Cookie/alfa-rex.php"] [unique_id "aZi6gANlDP60sLYgqXKdQgAAAAY"]
[Sat Feb 21 03:48:18.229507 2026] [:error] [pid 40758:tid 40827] [client 20.205.3.49:61341] [client 20.205.3.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jcrop/Jcrop.php"] [unique_id "aZi6gkBAHxvBM3i9iKFiBgAAAIU"]
[Sat Feb 21 03:48:19.486853 2026] [:error] [pid 40871:tid 40892] [client 20.205.3.49:31374] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/phpinfo.php"] [unique_id "aZi6gzqDikjdiOZeJyV0UQAAANM"]
[Sat Feb 21 03:48:20.029641 2026] [:error] [pid 40757:tid 40799] [client 20.205.3.49:15303] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/phpinfo.php"] [unique_id "aZi6hKg_MKVL7zhH7dz2EAAAAEQ"]
[Sat Feb 21 03:48:20.408099 2026] [:error] [pid 40871:tid 40890] [client 20.205.3.49:22937] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/phpinfo.php"] [unique_id "aZi6hDqDikjdiOZeJyV0VAAAANE"]
[Sat Feb 21 03:48:21.213210 2026] [:error] [pid 40758:tid 40825] [client 20.205.3.49:15297] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/phpinfo.php"] [unique_id "aZi6hUBAHxvBM3i9iKFiCwAAAIM"]
[Sat Feb 21 03:48:21.870915 2026] [:error] [pid 40756:tid 40770] [client 20.205.3.49:25261] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uploads/upload2.php"] [unique_id "aZi6hQNlDP60sLYgqXKdWQAAAAQ"]
[Sat Feb 21 03:48:22.376853 2026] [:error] [pid 40871:tid 40891] [client 20.205.3.49:22098] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uploads/upload2.php"] [unique_id "aZi6hjqDikjdiOZeJyV0VwAAANI"]
[Sat Feb 21 03:48:22.756661 2026] [:error] [pid 40871:tid 40882] [client 20.205.3.49:21011] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uploads/upload2.php"] [unique_id "aZi6hjqDikjdiOZeJyV0WAAAAMk"]
[Sat Feb 21 03:48:23.789263 2026] [:error] [pid 40871:tid 40879] [client 20.205.3.49:61317] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uploads/upload2.php"] [unique_id "aZi6hzqDikjdiOZeJyV0XAAAAMY"]
[Sat Feb 21 03:48:24.731056 2026] [:error] [pid 40757:tid 40801] [client 20.205.3.49:15300] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/hideo/network.php"] [unique_id "aZi6iKg_MKVL7zhH7dz2GgAAAEY"]
[Sat Feb 21 03:48:25.325956 2026] [:error] [pid 40758:tid 40828] [client 20.205.3.49:25215] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/hideo/network.php"] [unique_id "aZi6iUBAHxvBM3i9iKFiEQAAAIY"]
[Sat Feb 21 03:48:26.033934 2026] [:error] [pid 40758:tid 40826] [client 20.205.3.49:22101] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/hideo/network.php"] [unique_id "aZi6ikBAHxvBM3i9iKFiFQAAAIQ"]
[Sat Feb 21 03:48:26.851995 2026] [:error] [pid 40871:tid 40873] [client 20.205.3.49:22945] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/hideo/network.php"] [unique_id "aZi6ijqDikjdiOZeJyV0YQAAAMA"]
[Sat Feb 21 03:48:27.501567 2026] [:error] [pid 40756:tid 40774] [client 20.205.3.49:31761] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/an.php"] [unique_id "aZi6iwNlDP60sLYgqXKdXwAAAAg"]
[Sat Feb 21 03:48:27.925721 2026] [:error] [pid 40871:tid 40896] [client 20.205.3.49:44239] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/an.php"] [unique_id "aZi6izqDikjdiOZeJyV0YgAAANc"]
[Sat Feb 21 03:48:29.777566 2026] [:error] [pid 40871:tid 40897] [client 20.205.3.49:22928] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/an.php"] [unique_id "aZi6jTqDikjdiOZeJyV0aAAAANg"]
[Sat Feb 21 03:48:30.327321 2026] [:error] [pid 40871:tid 40888] [client 20.205.3.49:33939] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/an.php"] [unique_id "aZi6jjqDikjdiOZeJyV0bAAAAM8"]
[Sat Feb 21 03:48:30.745384 2026] [:error] [pid 40758:tid 40832] [client 20.205.3.49:19159] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-head.php"] [unique_id "aZi6jkBAHxvBM3i9iKFiLgAAAIo"]
[Sat Feb 21 03:48:31.650832 2026] [:error] [pid 40757:tid 40797] [client 20.205.3.49:33059] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-head.php"] [unique_id "aZi6j6g_MKVL7zhH7dz2IwAAAEI"]
[Sat Feb 21 03:48:33.191400 2026] [:error] [pid 40871:tid 40874] [client 20.205.3.49:16879] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-head.php"] [unique_id "aZi6kTqDikjdiOZeJyV0bwAAAME"]
[Sat Feb 21 03:48:34.371210 2026] [:error] [pid 40871:tid 40879] [client 20.205.3.49:21435] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-head.php"] [unique_id "aZi6kjqDikjdiOZeJyV0dgAAAMY"]
[Sat Feb 21 03:48:35.162140 2026] [:error] [pid 40871:tid 40873] [client 20.205.3.49:29385] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shell20211028.php"] [unique_id "aZi6kzqDikjdiOZeJyV0eQAAAMA"]
[Sat Feb 21 03:48:35.613464 2026] [:error] [pid 40871:tid 40896] [client 20.205.3.49:26465] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shell20211028.php"] [unique_id "aZi6kzqDikjdiOZeJyV0fAAAANc"]
[Sat Feb 21 03:48:35.998880 2026] [:error] [pid 40757:tid 40816] [client 20.205.3.49:21437] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shell20211028.php"] [unique_id "aZi6k6g_MKVL7zhH7dz2LAAAAFU"]
[Sat Feb 21 03:48:36.368621 2026] [:error] [pid 40757:tid 40798] [client 20.205.3.49:4475] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shell20211028.php"] [unique_id "aZi6lKg_MKVL7zhH7dz2LQAAAEM"]
[Sat Feb 21 03:48:37.027478 2026] [:error] [pid 40871:tid 40882] [client 20.205.3.49:25666] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-conf.php"] [unique_id "aZi6lTqDikjdiOZeJyV0jAAAAMk"]
[Sat Feb 21 03:48:37.612312 2026] [:error] [pid 40758:tid 40839] [client 20.205.3.49:49646] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-conf.php"] [unique_id "aZi6lUBAHxvBM3i9iKFiPgAAAJE"]
[Sat Feb 21 03:48:38.815824 2026] [:error] [pid 40757:tid 40818] [client 20.205.3.49:16879] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-conf.php"] [unique_id "aZi6lqg_MKVL7zhH7dz2OAAAAFc"]
[Sat Feb 21 03:48:40.698800 2026] [:error] [pid 40871:tid 40877] [client 20.205.3.49:4448] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-conf.php"] [unique_id "aZi6mDqDikjdiOZeJyV0nQAAAMQ"]
[Sat Feb 21 03:48:41.931299 2026] [:error] [pid 40871:tid 40885] [client 20.205.3.49:18191] [client 20.205.3.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/system.php"] [unique_id "aZi6mTqDikjdiOZeJyV0ogAAAMw"]
[Sat Feb 21 03:48:42.442210 2026] [:error] [pid 40756:tid 40777] [client 20.205.3.49:25746] [client 20.205.3.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/repeater.php"] [unique_id "aZi6mgNlDP60sLYgqXKddAAAAAs"]
[Sat Feb 21 03:48:42.837602 2026] [:error] [pid 40757:tid 40799] [client 20.205.3.49:26104] [client 20.205.3.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/index.php"] [unique_id "aZi6mqg_MKVL7zhH7dz2RAAAAEQ"]
[Sat Feb 21 03:48:43.180970 2026] [:error] [pid 40871:tid 40877] [client 20.205.3.49:4618] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/pki-validation/moon.php"] [unique_id "aZi6mzqDikjdiOZeJyV0pgAAAMQ"]
[Sat Feb 21 03:48:43.590934 2026] [:error] [pid 40758:tid 40836] [client 20.205.3.49:4470] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/pki-validation/moon.php"] [unique_id "aZi6m0BAHxvBM3i9iKFiSgAAAI4"]
[Sat Feb 21 03:48:44.393625 2026] [:error] [pid 40758:tid 40840] [client 20.205.3.49:29400] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/pki-validation/moon.php"] [unique_id "aZi6nEBAHxvBM3i9iKFiTAAAAJI"]
[Sat Feb 21 03:48:45.380928 2026] [:error] [pid 40871:tid 40877] [client 20.205.3.49:34015] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/pki-validation/moon.php"] [unique_id "aZi6nTqDikjdiOZeJyV0rgAAAMQ"]
[Sat Feb 21 03:48:45.943644 2026] [:error] [pid 40758:tid 40824] [client 20.205.3.49:4471] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/pagea.php"] [unique_id "aZi6nUBAHxvBM3i9iKFiTgAAAII"]
[Sat Feb 21 03:48:46.734414 2026] [:error] [pid 40756:tid 40768] [client 20.205.3.49:26050] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/pagea.php"] [unique_id "aZi6ngNlDP60sLYgqXKdeQAAAAI"]
[Sat Feb 21 03:48:47.430497 2026] [:error] [pid 40871:tid 40875] [client 20.205.3.49:33921] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/pagea.php"] [unique_id "aZi6nzqDikjdiOZeJyV0tgAAAMI"]
[Sat Feb 21 03:48:47.898617 2026] [:error] [pid 40871:tid 40894] [client 20.205.3.49:29406] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/pagea.php"] [unique_id "aZi6nzqDikjdiOZeJyV0uQAAANU"]
[Sat Feb 21 03:48:48.547146 2026] [:error] [pid 40757:tid 40800] [client 20.205.3.49:19149] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dropdown.php"] [unique_id "aZi6oKg_MKVL7zhH7dz2UQAAAEU"]
[Sat Feb 21 03:48:48.895348 2026] [:error] [pid 40756:tid 40769] [client 20.205.3.49:36414] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dropdown.php"] [unique_id "aZi6oANlDP60sLYgqXKdgAAAAAM"]
[Sat Feb 21 03:48:49.483258 2026] [:error] [pid 40758:tid 40826] [client 20.205.3.49:26449] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dropdown.php"] [unique_id "aZi6oUBAHxvBM3i9iKFiWAAAAIQ"]
[Sat Feb 21 03:48:50.904650 2026] [:error] [pid 40758:tid 40845] [client 20.205.3.49:32966] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dropdown.php"] [unique_id "aZi6okBAHxvBM3i9iKFiXAAAAJc"]
[Sat Feb 21 03:48:51.225792 2026] [:error] [pid 40757:tid 40814] [client 20.205.3.49:16858] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/pages.php"] [unique_id "aZi6o6g_MKVL7zhH7dz2WgAAAFM"]
[Sat Feb 21 03:48:52.110478 2026] [:error] [pid 40871:tid 40897] [client 20.205.3.49:49604] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/pages.php"] [unique_id "aZi6pDqDikjdiOZeJyV0xAAAANg"]
[Sat Feb 21 03:48:53.193226 2026] [:error] [pid 40758:tid 40828] [client 20.205.3.49:33048] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/pages.php"] [unique_id "aZi6pUBAHxvBM3i9iKFiZQAAAIY"]
[Sat Feb 21 03:48:54.715724 2026] [:error] [pid 40757:tid 40800] [client 20.205.3.49:61404] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/pages.php"] [unique_id "aZi6pqg_MKVL7zhH7dz2XwAAAEU"]
[Sat Feb 21 03:48:59.122829 2026] [:error] [pid 40756:tid 40768] [client 20.205.3.49:33968] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/index/zwso.php"] [unique_id "aZi6qwNlDP60sLYgqXKdkQAAAAI"]
[Sat Feb 21 03:48:59.732646 2026] [:error] [pid 40871:tid 40886] [client 20.205.3.49:19179] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/index/zwso.php"] [unique_id "aZi6qzqDikjdiOZeJyV01AAAAM0"]
[Sat Feb 21 03:49:00.127402 2026] [:error] [pid 40758:tid 40830] [client 20.205.3.49:29436] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/index/zwso.php"] [unique_id "aZi6rEBAHxvBM3i9iKFicgAAAIg"]
[Sat Feb 21 03:49:00.461779 2026] [:error] [pid 40871:tid 40877] [client 20.205.3.49:50127] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/index/zwso.php"] [unique_id "aZi6rDqDikjdiOZeJyV01wAAAMQ"]
[Sat Feb 21 03:49:01.140449 2026] [:error] [pid 40758:tid 40840] [client 20.205.3.49:16887] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/includes/pt.php"] [unique_id "aZi6rUBAHxvBM3i9iKFidQAAAJI"]
[Sat Feb 21 03:49:01.870492 2026] [:error] [pid 40756:tid 40777] [client 20.205.3.49:16873] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/includes/pt.php"] [unique_id "aZi6rQNlDP60sLYgqXKdlwAAAAs"]
[Sat Feb 21 03:49:02.245228 2026] [:error] [pid 40871:tid 40887] [client 20.205.3.49:22903] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/includes/pt.php"] [unique_id "aZi6rjqDikjdiOZeJyV03wAAAM4"]
[Sat Feb 21 03:49:02.970858 2026] [:error] [pid 40758:tid 40836] [client 20.205.3.49:61409] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/includes/pt.php"] [unique_id "aZi6rkBAHxvBM3i9iKFieAAAAI4"]
[Sat Feb 21 03:49:03.372748 2026] [:error] [pid 40871:tid 40880] [client 20.205.3.49:63133] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/2022/10/wp-blog.php"] [unique_id "aZi6rzqDikjdiOZeJyV04QAAAMc"]
[Sat Feb 21 03:49:04.069197 2026] [:error] [pid 40758:tid 40831] [client 20.205.3.49:36378] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/2022/10/wp-blog.php"] [unique_id "aZi6sEBAHxvBM3i9iKFifAAAAIk"]
[Sat Feb 21 03:49:05.043223 2026] [:error] [pid 40756:tid 40782] [client 20.205.3.49:63142] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/2022/10/wp-blog.php"] [unique_id "aZi6sQNlDP60sLYgqXKdngAAABA"]
[Sat Feb 21 03:49:05.966797 2026] [:error] [pid 40758:tid 40838] [client 20.205.3.49:36360] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/2022/10/wp-blog.php"] [unique_id "aZi6sUBAHxvBM3i9iKFigAAAAJA"]
[Sat Feb 21 03:49:06.772110 2026] [:error] [pid 40757:tid 40819] [client 20.205.3.49:61436] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/web.php"] [unique_id "aZi6sqg_MKVL7zhH7dz2YgAAAFg"]
[Sat Feb 21 03:49:09.057647 2026] [:error] [pid 40871:tid 40886] [client 20.205.3.49:16833] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/web.php"] [unique_id "aZi6tTqDikjdiOZeJyV08gAAAM0"]
[Sat Feb 21 03:49:11.371102 2026] [:error] [pid 40871:tid 40875] [client 20.205.3.49:44229] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/web.php"] [unique_id "aZi6tzqDikjdiOZeJyV0_AAAAMI"]
[Sat Feb 21 03:49:15.163675 2026] [:error] [pid 40758:tid 40827] [client 20.205.3.49:30768] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/web.php"] [unique_id "aZi6u0BAHxvBM3i9iKFiqAAAAIU"]
[Sat Feb 21 03:49:17.760231 2026] [:error] [pid 40757:tid 40810] [client 20.205.3.49:36363] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/eSAnNNH.php"] [unique_id "aZi6vag_MKVL7zhH7dz2lgAAAE8"]
[Sat Feb 21 03:49:18.572727 2026] [:error] [pid 40756:tid 40768] [client 20.205.3.49:29433] [client 20.205.3.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/eSAnNNH.php"] [unique_id "aZi6vgNlDP60sLYgqXKdrwAAAAI"]
[Sat Feb 21 03:49:21.249016 2026] [:error] [pid 40871:tid 40885] [client 20.205.3.49:61407] [client 20.205.3.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/wp-login.php"] [unique_id "aZi6wTqDikjdiOZeJyV1JgAAAMw"]
[Sat Feb 21 03:49:22.059857 2026] [proxy_fcgi:error] [pid 40871:tid 40875] [client 20.205.3.49:50128] AH01071: Got error 'Primary script unknown'
[Sat Feb 21 03:49:22.215744 2026] [:error] [pid 40871:tid 40897] [client 20.205.3.49:50128] [client 20.205.3.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/post-template-url.php"] [unique_id "aZi6wjqDikjdiOZeJyV1LAAAANg"]
[Sat Feb 21 03:49:22.633050 2026] [:error] [pid 40871:tid 40889] [client 20.205.3.49:61427] [client 20.205.3.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aZi6wjqDikjdiOZeJyV1LwAAANA"]
[Sat Feb 21 03:49:24.329511 2026] [:error] [pid 40756:tid 40787] [client 20.205.3.49:16844] [client 20.205.3.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.205.3.49, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aZi6xANlDP60sLYgqXKdxAAAABU"]
[Sat Feb 21 03:49:24.475928 2026] [:error] [pid 40756:tid 40779] [client 20.205.3.49:33017] [client 20.205.3.49] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.205.3.49, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/wp-login.php"] [unique_id "aZi6xANlDP60sLYgqXKdxQAAAA0"]
[Mon Feb 23 06:21:54.746252 2026] [:error] [pid 2445:tid 2490] [client 13.70.40.215:4188] [client 13.70.40.215] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 13.70.40.215, incrementing ddos counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aZuBgj1z6EhBn71lCAF3wQAAAE8"]
[Mon Feb 23 06:21:56.896440 2026] [:error] [pid 2445:tid 2494] [client 13.70.40.215:4188] [client 13.70.40.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rip.php"] [unique_id "aZuBhD1z6EhBn71lCAF3yQAAAFM"]
[Mon Feb 23 06:21:57.383290 2026] [:error] [pid 2446:tid 2519] [client 13.70.40.215:4924] [client 13.70.40.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rip.php"] [unique_id "aZuBhdMqX9gYEfsYvrirCgAAAJE"]
[Mon Feb 23 06:21:57.869824 2026] [:error] [pid 2446:tid 2522] [client 13.70.40.215:4913] [client 13.70.40.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rip.php"] [unique_id "aZuBhdMqX9gYEfsYvrirDAAAAJQ"]
[Mon Feb 23 06:21:58.361186 2026] [:error] [pid 2446:tid 2515] [client 13.70.40.215:15363] [client 13.70.40.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rip.php"] [unique_id "aZuBhtMqX9gYEfsYvrirDQAAAI0"]
[Mon Feb 23 07:07:35.029345 2026] [:error] [pid 2826:tid 2835] [client 195.178.110.190:64948] [client 195.178.110.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aZuMNz3FWVe0BC2oMiD4mgAAAQY"]
[Tue Feb 24 01:20:58.556911 2026] [:error] [pid 60063:tid 60077] [client 216.26.236.73:10391] [client 216.26.236.73] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aZyMek_6t1uQomVVdUNS9gAAAQw"]
[Wed Feb 25 21:11:18.692135 2026] [autoindex:error] [pid 60498:tid 60507] [client 139.59.24.163:58558] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Thu Feb 26 01:40:52.731246 2026] [:error] [pid 49554:tid 49624] [client 20.104.206.236:46043] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZ80JNtlDT3cCGsQMTc2YgAAAA8"]
[Thu Feb 26 01:40:55.044702 2026] [:error] [pid 49556:tid 49645] [client 20.104.206.236:46076] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZ80J5jk27yQt3CGcmiK2gAAAMk"]
[Thu Feb 26 01:40:56.445533 2026] [:error] [pid 49554:tid 49632] [client 20.104.206.236:46020] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZ80KNtlDT3cCGsQMTc2bQAAABc"]
[Thu Feb 26 01:41:00.347406 2026] [:error] [pid 49556:tid 49654] [client 20.104.206.236:45853] [client 20.104.206.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aZ80LJjk27yQt3CGcmiK4gAAAM8"]
[Thu Feb 26 08:49:59.741043 2026] [:error] [pid 3883:tid 3907] [client 20.151.114.166:33674] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x123.php"] [unique_id "aZ-Yt-A33x90V6yYHaiyBQAAAVU"]
[Thu Feb 26 08:50:00.192653 2026] [:error] [pid 3883:tid 3901] [client 20.151.114.166:33776] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x123.php"] [unique_id "aZ-YuOA33x90V6yYHaiyCAAAAU8"]
[Thu Feb 26 08:50:00.683492 2026] [:error] [pid 25311:tid 25335] [client 20.151.114.166:33790] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x123.php"] [unique_id "aZ-YuNfdM__yZAgJFSv8uQAAAZU"]
[Thu Feb 26 08:50:01.117974 2026] [:error] [pid 25311:tid 25319] [client 20.151.114.166:33747] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x123.php"] [unique_id "aZ-YudfdM__yZAgJFSv8ugAAAYU"]
[Thu Feb 26 08:50:01.606020 2026] [:error] [pid 3883:tid 3890] [client 20.151.114.166:33772] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aZ-YueA33x90V6yYHaiyCwAAAUQ"]
[Thu Feb 26 08:50:02.067058 2026] [:error] [pid 3883:tid 3893] [client 20.151.114.166:33672] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aZ-YuuA33x90V6yYHaiyDwAAAUc"]
[Thu Feb 26 08:50:02.525614 2026] [:error] [pid 3883:tid 3899] [client 20.151.114.166:33761] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aZ-YuuA33x90V6yYHaiyFAAAAU0"]
[Thu Feb 26 08:50:02.989985 2026] [:error] [pid 3883:tid 3890] [client 20.151.114.166:33684] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aZ-YuuA33x90V6yYHaiyGAAAAUQ"]
[Thu Feb 26 08:50:03.457644 2026] [:error] [pid 55618:tid 55622] [client 20.151.114.166:33616] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/moshou.php"] [unique_id "aZ-Yux61Vrh12f_8oWT1mAAAAQE"]
[Thu Feb 26 08:50:03.955035 2026] [:error] [pid 55618:tid 55635] [client 20.151.114.166:33623] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/moshou.php"] [unique_id "aZ-Yux61Vrh12f_8oWT1mQAAAQ4"]
[Thu Feb 26 08:50:04.410194 2026] [:error] [pid 54990:tid 54996] [client 20.151.114.166:33769] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/moshou.php"] [unique_id "aZ-YvHtr2qmt_mBhH2y-sgAAAAM"]
[Thu Feb 26 08:50:04.835358 2026] [:error] [pid 3883:tid 3899] [client 20.151.114.166:33750] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/moshou.php"] [unique_id "aZ-YvOA33x90V6yYHaiyHgAAAU0"]
[Thu Feb 26 08:50:05.294993 2026] [:error] [pid 55051:tid 55055] [client 20.151.114.166:33671] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/seetox.php"] [unique_id "aZ-YvQmK1w2kZvh5eLGqlAAAAIE"]
[Thu Feb 26 08:50:05.720749 2026] [:error] [pid 55122:tid 55144] [client 20.151.114.166:33773] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/seetox.php"] [unique_id "aZ-YvYLiR0OfjFxvcN91kgAAANQ"]
[Thu Feb 26 08:50:06.154575 2026] [:error] [pid 55618:tid 55626] [client 20.151.114.166:33768] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/seetox.php"] [unique_id "aZ-Yvh61Vrh12f_8oWT1mwAAAQU"]
[Thu Feb 26 08:50:06.599468 2026] [:error] [pid 3883:tid 3905] [client 20.151.114.166:33681] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/seetox.php"] [unique_id "aZ-YvuA33x90V6yYHaiyIwAAAVM"]
[Thu Feb 26 08:50:07.114748 2026] [:error] [pid 3883:tid 3902] [client 20.151.114.166:33771] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dom.php"] [unique_id "aZ-Yv-A33x90V6yYHaiyJAAAAVA"]
[Thu Feb 26 08:50:07.538509 2026] [:error] [pid 55051:tid 55063] [client 20.151.114.166:33734] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dom.php"] [unique_id "aZ-YvwmK1w2kZvh5eLGqlQAAAIk"]
[Thu Feb 26 08:50:07.989164 2026] [:error] [pid 3883:tid 3906] [client 20.151.114.166:33700] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dom.php"] [unique_id "aZ-Yv-A33x90V6yYHaiyJgAAAVQ"]
[Thu Feb 26 08:50:08.418157 2026] [:error] [pid 3883:tid 3899] [client 20.151.114.166:33719] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dom.php"] [unique_id "aZ-YwOA33x90V6yYHaiyKQAAAU0"]
[Thu Feb 26 08:50:08.850030 2026] [:error] [pid 25311:tid 25334] [client 20.151.114.166:33765] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws60.php"] [unique_id "aZ-YwNfdM__yZAgJFSv8vwAAAZQ"]
[Thu Feb 26 08:50:09.267971 2026] [:error] [pid 55618:tid 55644] [client 20.151.114.166:33680] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws60.php"] [unique_id "aZ-YwR61Vrh12f_8oWT1nwAAARc"]
[Thu Feb 26 08:50:09.682910 2026] [:error] [pid 55051:tid 55073] [client 20.151.114.166:33787] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws60.php"] [unique_id "aZ-YwQmK1w2kZvh5eLGqlwAAAJM"]
[Thu Feb 26 08:50:10.120092 2026] [:error] [pid 25311:tid 25327] [client 20.151.114.166:33668] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws60.php"] [unique_id "aZ-YwtfdM__yZAgJFSv8wAAAAY0"]
[Thu Feb 26 08:50:10.533822 2026] [:error] [pid 3883:tid 3906] [client 20.151.114.166:33753] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/samiri.php"] [unique_id "aZ-YwuA33x90V6yYHaiyLAAAAVQ"]
[Thu Feb 26 08:50:10.957141 2026] [:error] [pid 3883:tid 3891] [client 20.151.114.166:33673] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/samiri.php"] [unique_id "aZ-YwuA33x90V6yYHaiyMQAAAUU"]
[Thu Feb 26 08:50:11.387443 2026] [:error] [pid 3883:tid 3886] [client 20.151.114.166:33741] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/samiri.php"] [unique_id "aZ-Yw-A33x90V6yYHaiyMgAAAUA"]
[Thu Feb 26 08:50:11.820850 2026] [:error] [pid 25311:tid 25332] [client 20.151.114.166:33642] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/samiri.php"] [unique_id "aZ-Yw9fdM__yZAgJFSv8wQAAAZI"]
[Thu Feb 26 08:50:12.245518 2026] [:error] [pid 55618:tid 55624] [client 20.151.114.166:33605] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plugins.php"] [unique_id "aZ-YxB61Vrh12f_8oWT1owAAAQM"]
[Thu Feb 26 08:50:12.667681 2026] [:error] [pid 55618:tid 55639] [client 20.151.114.166:33779] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plugins.php"] [unique_id "aZ-YxB61Vrh12f_8oWT1pAAAARI"]
[Thu Feb 26 08:50:13.126993 2026] [:error] [pid 55618:tid 55645] [client 20.151.114.166:33780] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plugins.php"] [unique_id "aZ-YxR61Vrh12f_8oWT1pQAAARg"]
[Thu Feb 26 08:50:13.564453 2026] [:error] [pid 55618:tid 55631] [client 20.151.114.166:33767] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plugins.php"] [unique_id "aZ-YxR61Vrh12f_8oWT1pgAAAQo"]
[Thu Feb 26 08:50:14.021976 2026] [:error] [pid 3883:tid 3892] [client 20.151.114.166:33697] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xoot.php"] [unique_id "aZ-YxuA33x90V6yYHaiyNgAAAUY"]
[Thu Feb 26 08:50:14.438143 2026] [:error] [pid 3883:tid 3894] [client 20.151.114.166:33695] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xoot.php"] [unique_id "aZ-YxuA33x90V6yYHaiyNwAAAUg"]
[Thu Feb 26 08:50:14.854356 2026] [:error] [pid 3883:tid 3905] [client 20.151.114.166:33774] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xoot.php"] [unique_id "aZ-YxuA33x90V6yYHaiyOAAAAVM"]
[Thu Feb 26 08:50:15.371316 2026] [:error] [pid 3883:tid 3887] [client 20.151.114.166:33664] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xoot.php"] [unique_id "aZ-Yx-A33x90V6yYHaiyOgAAAUE"]
[Thu Feb 26 08:50:15.824550 2026] [:error] [pid 55051:tid 55059] [client 20.151.114.166:33759] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/X57.php"] [unique_id "aZ-YxwmK1w2kZvh5eLGqogAAAIU"]
[Thu Feb 26 08:50:16.352798 2026] [:error] [pid 25311:tid 25315] [client 20.151.114.166:33704] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/X57.php"] [unique_id "aZ-YyNfdM__yZAgJFSv8wgAAAYE"]
[Thu Feb 26 08:50:16.785122 2026] [:error] [pid 55051:tid 55063] [client 20.151.114.166:33757] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/X57.php"] [unique_id "aZ-YyAmK1w2kZvh5eLGqpgAAAIk"]
[Thu Feb 26 08:50:17.280268 2026] [:error] [pid 25311:tid 25318] [client 20.151.114.166:33733] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/X57.php"] [unique_id "aZ-YydfdM__yZAgJFSv8wwAAAYQ"]
[Thu Feb 26 08:50:17.818774 2026] [:error] [pid 55051:tid 55073] [client 20.151.114.166:33775] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aZ-YyQmK1w2kZvh5eLGqpwAAAJM"]
[Thu Feb 26 08:50:18.291101 2026] [:error] [pid 25311:tid 25321] [client 20.151.114.166:33724] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aZ-YytfdM__yZAgJFSv8xAAAAYc"]
[Thu Feb 26 08:50:18.832883 2026] [:error] [pid 55618:tid 55622] [client 20.151.114.166:33604] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aZ-Yyh61Vrh12f_8oWT1qgAAAQE"]
[Thu Feb 26 08:50:19.320141 2026] [:error] [pid 55051:tid 55064] [client 20.151.114.166:33730] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aZ-YywmK1w2kZvh5eLGqqwAAAIo"]
[Thu Feb 26 08:50:19.789813 2026] [:error] [pid 54991:tid 55040] [client 20.151.114.166:33760] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file59.php"] [unique_id "aZ-Yy94Zx-mJ8gbRB2hi2AAAAFQ"]
[Thu Feb 26 08:50:20.290895 2026] [:error] [pid 55051:tid 55071] [client 20.151.114.166:33729] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file59.php"] [unique_id "aZ-YzAmK1w2kZvh5eLGqrQAAAJE"]
[Thu Feb 26 08:50:20.866274 2026] [:error] [pid 55618:tid 55635] [client 20.151.114.166:33762] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file59.php"] [unique_id "aZ-YzB61Vrh12f_8oWT1qwAAAQ4"]
[Thu Feb 26 08:50:21.323685 2026] [:error] [pid 55618:tid 55626] [client 20.151.114.166:33763] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file59.php"] [unique_id "aZ-YzR61Vrh12f_8oWT1rAAAAQU"]
[Thu Feb 26 08:50:22.042922 2026] [:error] [pid 3883:tid 3890] [client 20.151.114.166:33710] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aZ-YzuA33x90V6yYHaiyQQAAAUQ"]
[Thu Feb 26 08:50:22.640417 2026] [:error] [pid 55618:tid 55627] [client 20.151.114.166:33781] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aZ-Yzh61Vrh12f_8oWT1rgAAAQY"]
[Thu Feb 26 08:50:23.209272 2026] [:error] [pid 3883:tid 3901] [client 20.151.114.166:33745] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aZ-Yz-A33x90V6yYHaiyRgAAAU8"]
[Thu Feb 26 08:50:23.797885 2026] [:error] [pid 25311:tid 25329] [client 20.151.114.166:33678] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aZ-Yz9fdM__yZAgJFSv8yAAAAY8"]
[Thu Feb 26 08:50:24.538990 2026] [:error] [pid 55618:tid 55638] [client 20.151.114.166:33627] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shas.php"] [unique_id "aZ-Y0B61Vrh12f_8oWT1vAAAARE"]
[Thu Feb 26 08:50:25.463860 2026] [:error] [pid 3883:tid 3901] [client 20.151.114.166:33679] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shas.php"] [unique_id "aZ-Y0eA33x90V6yYHaiyZAAAAU8"]
[Thu Feb 26 08:50:26.224116 2026] [:error] [pid 3883:tid 3897] [client 20.151.114.166:33777] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shas.php"] [unique_id "aZ-Y0uA33x90V6yYHaiyaQAAAUs"]
[Thu Feb 26 08:50:26.841433 2026] [:error] [pid 3883:tid 3891] [client 20.151.114.166:33786] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shas.php"] [unique_id "aZ-Y0uA33x90V6yYHaiyawAAAUU"]
[Thu Feb 26 08:50:27.335605 2026] [:error] [pid 3883:tid 3896] [client 20.151.114.166:33752] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aZ-Y0-A33x90V6yYHaiybQAAAUo"]
[Thu Feb 26 08:50:27.928844 2026] [:error] [pid 54990:tid 55011] [client 20.151.114.166:33756] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aZ-Y03tr2qmt_mBhH2y-uwAAABI"]
[Thu Feb 26 08:50:28.453790 2026] [:error] [pid 3883:tid 3908] [client 20.151.114.166:33636] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aZ-Y1OA33x90V6yYHaiybwAAAVY"]
[Thu Feb 26 08:50:29.226012 2026] [:error] [pid 55122:tid 55133] [client 20.151.114.166:33723] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aZ-Y1YLiR0OfjFxvcN91rgAAAMk"]
[Thu Feb 26 08:50:29.957666 2026] [:error] [pid 3883:tid 3889] [client 20.151.114.166:33682] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "aZ-Y1eA33x90V6yYHaiycgAAAUM"]
[Thu Feb 26 08:50:31.197352 2026] [:error] [pid 54990:tid 54994] [client 20.151.114.166:33766] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "aZ-Y13tr2qmt_mBhH2y-vQAAAAE"]
[Thu Feb 26 08:50:31.681272 2026] [:error] [pid 25311:tid 25314] [client 20.151.114.166:33788] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "aZ-Y19fdM__yZAgJFSv8zgAAAYA"]
[Thu Feb 26 08:50:32.236667 2026] [:error] [pid 55051:tid 55056] [client 20.151.114.166:33696] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "aZ-Y2AmK1w2kZvh5eLGqtwAAAII"]
[Thu Feb 26 08:50:32.916634 2026] [:error] [pid 55122:tid 55127] [client 20.151.114.166:33702] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/er.php"] [unique_id "aZ-Y2ILiR0OfjFxvcN91tQAAAMM"]
[Thu Feb 26 08:50:33.457999 2026] [:error] [pid 25311:tid 25327] [client 20.151.114.166:33670] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/er.php"] [unique_id "aZ-Y2dfdM__yZAgJFSv80AAAAY0"]
[Thu Feb 26 08:50:34.102305 2026] [:error] [pid 55051:tid 55073] [client 20.151.114.166:33613] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/er.php"] [unique_id "aZ-Y2gmK1w2kZvh5eLGquwAAAJM"]
[Thu Feb 26 08:50:34.596781 2026] [:error] [pid 55122:tid 55128] [client 20.151.114.166:33649] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/er.php"] [unique_id "aZ-Y2oLiR0OfjFxvcN91twAAAMQ"]
[Thu Feb 26 08:50:35.282212 2026] [:error] [pid 55618:tid 55645] [client 20.151.114.166:33738] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fault.php"] [unique_id "aZ-Y2x61Vrh12f_8oWT1xgAAARg"]
[Thu Feb 26 08:50:35.728180 2026] [:error] [pid 3883:tid 3900] [client 20.151.114.166:33737] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fault.php"] [unique_id "aZ-Y2-A33x90V6yYHaiyegAAAU4"]
[Thu Feb 26 08:50:36.376899 2026] [:error] [pid 25311:tid 25315] [client 20.151.114.166:33731] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fault.php"] [unique_id "aZ-Y3NfdM__yZAgJFSv80wAAAYE"]
[Thu Feb 26 08:50:36.991337 2026] [:error] [pid 55051:tid 55060] [client 20.151.114.166:33732] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fault.php"] [unique_id "aZ-Y3AmK1w2kZvh5eLGqwgAAAIY"]
[Thu Feb 26 08:50:37.576039 2026] [:error] [pid 55122:tid 55132] [client 20.151.114.166:33713] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aZ-Y3YLiR0OfjFxvcN91uQAAAMg"]
[Thu Feb 26 08:50:38.082327 2026] [:error] [pid 55618:tid 55621] [client 20.151.114.166:33544] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aZ-Y3h61Vrh12f_8oWT1ygAAAQA"]
[Thu Feb 26 08:50:38.868179 2026] [:error] [pid 55122:tid 55138] [client 20.151.114.166:33676] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aZ-Y3oLiR0OfjFxvcN91ugAAAM4"]
[Thu Feb 26 08:50:39.463229 2026] [:error] [pid 25311:tid 25322] [client 20.151.114.166:33622] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aZ-Y39fdM__yZAgJFSv81gAAAYg"]
[Thu Feb 26 08:50:39.968763 2026] [:error] [pid 54990:tid 55008] [client 20.151.114.166:33677] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aZ-Y33tr2qmt_mBhH2y-wwAAAA8"]
[Thu Feb 26 08:50:40.449185 2026] [:error] [pid 55122:tid 55141] [client 20.151.114.166:33728] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aZ-Y4ILiR0OfjFxvcN91vAAAANE"]
[Thu Feb 26 08:50:40.910438 2026] [:error] [pid 55051:tid 55062] [client 20.151.114.166:33725] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aZ-Y4AmK1w2kZvh5eLGqyQAAAIg"]
[Thu Feb 26 08:50:41.401569 2026] [:error] [pid 55618:tid 55627] [client 20.151.114.166:33646] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aZ-Y4R61Vrh12f_8oWT1zgAAAQY"]
[Thu Feb 26 08:50:41.890869 2026] [:error] [pid 54991:tid 55032] [client 20.151.114.166:33610] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/leuk.php"] [unique_id "aZ-Y4d4Zx-mJ8gbRB2hi4wAAAEw"]
[Thu Feb 26 08:50:42.378100 2026] [:error] [pid 3883:tid 3888] [client 20.151.114.166:33703] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/leuk.php"] [unique_id "aZ-Y4uA33x90V6yYHaiygAAAAUI"]
[Thu Feb 26 08:50:42.814895 2026] [:error] [pid 54990:tid 54995] [client 20.151.114.166:33711] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/leuk.php"] [unique_id "aZ-Y4ntr2qmt_mBhH2y-xAAAAAI"]
[Thu Feb 26 08:50:43.349259 2026] [:error] [pid 3883:tid 3892] [client 20.151.114.166:33789] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/leuk.php"] [unique_id "aZ-Y4-A33x90V6yYHaiypwAAAUY"]
[Thu Feb 26 08:50:43.833879 2026] [:error] [pid 25311:tid 25337] [client 20.151.114.166:33721] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aZ-Y49fdM__yZAgJFSv82QAAAZc"]
[Thu Feb 26 08:50:44.261957 2026] [:error] [pid 55618:tid 55629] [client 20.151.114.166:33654] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aZ-Y5B61Vrh12f_8oWT10AAAAQg"]
[Thu Feb 26 08:50:44.812241 2026] [:error] [pid 25311:tid 25314] [client 20.151.114.166:33643] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aZ-Y5NfdM__yZAgJFSv82wAAAYA"]
[Thu Feb 26 08:50:45.285852 2026] [:error] [pid 55122:tid 55144] [client 20.151.114.166:33749] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aZ-Y5YLiR0OfjFxvcN910AAAANQ"]
[Thu Feb 26 08:50:45.750871 2026] [:error] [pid 25311:tid 25330] [client 20.151.114.166:33686] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kolda.php"] [unique_id "aZ-Y5dfdM__yZAgJFSv83gAAAZA"]
[Thu Feb 26 08:50:46.238329 2026] [:error] [pid 25311:tid 25327] [client 20.151.114.166:33689] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kolda.php"] [unique_id "aZ-Y5tfdM__yZAgJFSv83wAAAY0"]
[Thu Feb 26 08:50:46.701617 2026] [:error] [pid 25311:tid 25334] [client 20.151.114.166:33706] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kolda.php"] [unique_id "aZ-Y5tfdM__yZAgJFSv84AAAAZQ"]
[Thu Feb 26 08:50:47.188141 2026] [:error] [pid 55618:tid 55639] [client 20.151.114.166:33755] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kolda.php"] [unique_id "aZ-Y5x61Vrh12f_8oWT10QAAARI"]
[Thu Feb 26 08:50:47.676330 2026] [:error] [pid 55618:tid 55625] [client 20.151.114.166:33609] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "aZ-Y5x61Vrh12f_8oWT10gAAAQQ"]
[Thu Feb 26 08:50:48.142592 2026] [:error] [pid 55122:tid 55125] [client 20.151.114.166:33770] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "aZ-Y6ILiR0OfjFxvcN911QAAAME"]
[Thu Feb 26 08:50:48.583333 2026] [:error] [pid 55122:tid 55147] [client 20.151.114.166:33629] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "aZ-Y6ILiR0OfjFxvcN911gAAANc"]
[Thu Feb 26 08:50:49.028600 2026] [:error] [pid 3883:tid 3896] [client 20.151.114.166:33632] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "aZ-Y6eA33x90V6yYHaiy4gAAAUo"]
[Thu Feb 26 08:50:49.507853 2026] [:error] [pid 55122:tid 55146] [client 20.151.114.166:33626] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/god.php"] [unique_id "aZ-Y6YLiR0OfjFxvcN912AAAANY"]
[Thu Feb 26 08:50:49.961448 2026] [:error] [pid 55122:tid 55142] [client 20.151.114.166:33683] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/god.php"] [unique_id "aZ-Y6YLiR0OfjFxvcN912QAAANI"]
[Thu Feb 26 08:50:50.431468 2026] [:error] [pid 54990:tid 55007] [client 20.151.114.166:33607] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/god.php"] [unique_id "aZ-Y6ntr2qmt_mBhH2y-ygAAAA4"]
[Thu Feb 26 08:50:50.860811 2026] [:error] [pid 25311:tid 25316] [client 20.151.114.166:33690] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/god.php"] [unique_id "aZ-Y6tfdM__yZAgJFSv85wAAAYI"]
[Thu Feb 26 08:50:51.321756 2026] [:error] [pid 54991:tid 55028] [client 20.151.114.166:33716] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aZ-Y694Zx-mJ8gbRB2hi6wAAAEg"]
[Thu Feb 26 08:50:51.782558 2026] [:error] [pid 3883:tid 3901] [client 20.151.114.166:33617] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aZ-Y6-A33x90V6yYHaiy5AAAAU8"]
[Thu Feb 26 08:50:52.318088 2026] [:error] [pid 54991:tid 55036] [client 20.151.114.166:33641] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aZ-Y7N4Zx-mJ8gbRB2hi7gAAAFA"]
[Thu Feb 26 08:50:52.757253 2026] [:error] [pid 3883:tid 3906] [client 20.151.114.166:33718] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aZ-Y7OA33x90V6yYHaiy5gAAAVQ"]
[Thu Feb 26 08:50:53.193588 2026] [:error] [pid 55122:tid 55148] [client 20.151.114.166:33785] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aZ-Y7YLiR0OfjFxvcN912gAAANg"]
[Thu Feb 26 08:50:53.652445 2026] [:error] [pid 55122:tid 55132] [client 20.151.114.166:33754] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aZ-Y7YLiR0OfjFxvcN912wAAAMg"]
[Thu Feb 26 08:50:54.071583 2026] [:error] [pid 55618:tid 55622] [client 20.151.114.166:33782] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aZ-Y7h61Vrh12f_8oWT11wAAAQE"]
[Thu Feb 26 08:50:54.498459 2026] [:error] [pid 55618:tid 55636] [client 20.151.114.166:33722] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aZ-Y7h61Vrh12f_8oWT12AAAAQ8"]
[Thu Feb 26 08:50:54.921847 2026] [:error] [pid 3883:tid 3889] [client 20.151.114.166:33698] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/un.php"] [unique_id "aZ-Y7uA33x90V6yYHaiy5wAAAUM"]
[Thu Feb 26 08:50:55.344829 2026] [:error] [pid 55051:tid 55073] [client 20.151.114.166:33618] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/un.php"] [unique_id "aZ-Y7wmK1w2kZvh5eLGq2gAAAJM"]
[Thu Feb 26 08:50:55.809436 2026] [:error] [pid 55618:tid 55622] [client 20.151.114.166:33650] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/un.php"] [unique_id "aZ-Y7x61Vrh12f_8oWT16gAAAQE"]
[Thu Feb 26 08:50:56.251814 2026] [:error] [pid 3883:tid 3907] [client 20.151.114.166:33687] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/un.php"] [unique_id "aZ-Y8OA33x90V6yYHaiy6wAAAVU"]
[Thu Feb 26 08:50:56.686017 2026] [:error] [pid 3883:tid 3887] [client 20.151.114.166:33625] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aZ-Y8OA33x90V6yYHaiy7QAAAUE"]
[Thu Feb 26 08:50:57.105344 2026] [:error] [pid 3883:tid 3901] [client 20.151.114.166:33742] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aZ-Y8eA33x90V6yYHaiy8QAAAU8"]
[Thu Feb 26 08:50:57.560031 2026] [:error] [pid 3883:tid 3903] [client 20.151.114.166:33602] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aZ-Y8eA33x90V6yYHaiy-gAAAVE"]
[Thu Feb 26 08:50:57.986405 2026] [:error] [pid 55618:tid 55623] [client 20.151.114.166:33675] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aZ-Y8R61Vrh12f_8oWT18gAAAQI"]
[Thu Feb 26 08:50:58.430089 2026] [:error] [pid 55051:tid 55059] [client 20.151.114.166:33653] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aZ-Y8gmK1w2kZvh5eLGq2wAAAIU"]
[Thu Feb 26 08:50:58.876757 2026] [:error] [pid 25311:tid 25333] [client 20.151.114.166:33603] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aZ-Y8tfdM__yZAgJFSv8-QAAAZM"]
[Thu Feb 26 08:51:04.806462 2026] [:error] [pid 25311:tid 25316] [client 20.151.114.166:33667] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a1vx.php"] [unique_id "aZ-Y-NfdM__yZAgJFSv9BwAAAYI"]
[Thu Feb 26 08:51:05.225143 2026] [:error] [pid 55122:tid 55131] [client 20.151.114.166:33611] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a1vx.php"] [unique_id "aZ-Y-YLiR0OfjFxvcN914AAAAMc"]
[Thu Feb 26 08:51:05.669430 2026] [:error] [pid 25311:tid 25323] [client 20.151.114.166:33652] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a1vx.php"] [unique_id "aZ-Y-dfdM__yZAgJFSv9CAAAAYk"]
[Thu Feb 26 08:51:06.113335 2026] [:error] [pid 25311:tid 25315] [client 20.151.114.166:33715] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a1vx.php"] [unique_id "aZ-Y-tfdM__yZAgJFSv9DAAAAYE"]
[Thu Feb 26 08:51:06.604585 2026] [:error] [pid 55051:tid 55077] [client 20.151.114.166:33776] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aZ-Y-gmK1w2kZvh5eLGq3gAAAJc"]
[Thu Feb 26 08:51:07.028808 2026] [:error] [pid 55051:tid 55058] [client 20.151.114.166:33764] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aZ-Y-wmK1w2kZvh5eLGq3wAAAIQ"]
[Thu Feb 26 08:51:07.502786 2026] [:error] [pid 25311:tid 25314] [client 20.151.114.166:33736] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aZ-Y-9fdM__yZAgJFSv9EAAAAYA"]
[Thu Feb 26 08:51:07.945938 2026] [:error] [pid 3883:tid 3900] [client 20.151.114.166:33783] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aZ-Y--A33x90V6yYHaizHQAAAU4"]
[Thu Feb 26 08:51:08.398816 2026] [:error] [pid 3883:tid 3888] [client 20.151.114.166:33665] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aZ-Y_OA33x90V6yYHaizHwAAAUI"]
[Thu Feb 26 08:51:08.893575 2026] [:error] [pid 3883:tid 3907] [client 20.151.114.166:33688] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aZ-Y_OA33x90V6yYHaizIgAAAVU"]
[Thu Feb 26 08:51:09.363630 2026] [:error] [pid 3883:tid 3897] [client 20.151.114.166:33746] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aZ-Y_eA33x90V6yYHaizKQAAAUs"]
[Thu Feb 26 08:51:09.826209 2026] [:error] [pid 25311:tid 25327] [client 20.151.114.166:33708] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aZ-Y_dfdM__yZAgJFSv9EQAAAY0"]
[Thu Feb 26 08:51:10.316648 2026] [:error] [pid 3883:tid 3905] [client 20.151.114.166:33546] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/06.php"] [unique_id "aZ-Y_uA33x90V6yYHaizKwAAAVM"]
[Thu Feb 26 08:51:10.765992 2026] [:error] [pid 55122:tid 55135] [client 20.151.114.166:33685] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/06.php"] [unique_id "aZ-Y_oLiR0OfjFxvcN914gAAAMs"]
[Thu Feb 26 08:51:11.230551 2026] [:error] [pid 54991:tid 55024] [client 20.151.114.166:33778] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/06.php"] [unique_id "aZ-Y_94Zx-mJ8gbRB2hi-AAAAEQ"]
[Thu Feb 26 08:51:11.687603 2026] [:error] [pid 55618:tid 55632] [client 20.151.114.166:33714] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/06.php"] [unique_id "aZ-Y_x61Vrh12f_8oWT2CgAAAQs"]
[Thu Feb 26 08:51:12.117254 2026] [:error] [pid 3883:tid 3908] [client 20.151.114.166:33639] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "aZ-ZAOA33x90V6yYHaizMQAAAVY"]
[Thu Feb 26 08:51:12.542226 2026] [:error] [pid 3883:tid 3892] [client 20.151.114.166:33621] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "aZ-ZAOA33x90V6yYHaizNAAAAUY"]
[Thu Feb 26 08:51:13.004528 2026] [:error] [pid 3883:tid 3891] [client 20.151.114.166:33720] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "aZ-ZAeA33x90V6yYHaizNwAAAUU"]
[Thu Feb 26 08:51:13.447467 2026] [:error] [pid 3883:tid 3894] [client 20.151.114.166:33735] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "aZ-ZAeA33x90V6yYHaizOgAAAUg"]
[Thu Feb 26 08:51:13.899900 2026] [:error] [pid 3883:tid 3909] [client 20.151.114.166:33583] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fot.php"] [unique_id "aZ-ZAeA33x90V6yYHaizPQAAAVc"]
[Thu Feb 26 08:51:14.329624 2026] [:error] [pid 3883:tid 3895] [client 20.151.114.166:33549] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fot.php"] [unique_id "aZ-ZAuA33x90V6yYHaizQAAAAUk"]
[Thu Feb 26 08:51:14.754280 2026] [:error] [pid 3883:tid 3903] [client 20.151.114.166:33651] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fot.php"] [unique_id "aZ-ZAuA33x90V6yYHaizQQAAAVE"]
[Thu Feb 26 08:51:15.226218 2026] [:error] [pid 3883:tid 3891] [client 20.151.114.166:33630] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fot.php"] [unique_id "aZ-ZA-A33x90V6yYHaizQwAAAUU"]
[Thu Feb 26 08:51:15.668298 2026] [:error] [pid 3883:tid 3890] [client 20.151.114.166:33556] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "aZ-ZA-A33x90V6yYHaizSAAAAUQ"]
[Thu Feb 26 08:51:16.177357 2026] [:error] [pid 55618:tid 55630] [client 20.151.114.166:33536] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "aZ-ZBB61Vrh12f_8oWT2EQAAAQk"]
[Thu Feb 26 08:51:16.606742 2026] [:error] [pid 55618:tid 55636] [client 20.151.114.166:33709] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "aZ-ZBB61Vrh12f_8oWT2EgAAAQ8"]
[Thu Feb 26 08:51:17.092562 2026] [:error] [pid 3883:tid 3897] [client 20.151.114.166:33758] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "aZ-ZBeA33x90V6yYHaizUQAAAUs"]
[Thu Feb 26 08:51:17.651932 2026] [:error] [pid 55618:tid 55635] [client 20.151.114.166:33615] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/forbidals.php"] [unique_id "aZ-ZBR61Vrh12f_8oWT2FQAAAQ4"]
[Thu Feb 26 08:51:18.329685 2026] [:error] [pid 55618:tid 55645] [client 20.151.114.166:33600] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/forbidals.php"] [unique_id "aZ-ZBh61Vrh12f_8oWT2GQAAARg"]
[Thu Feb 26 08:51:18.858515 2026] [:error] [pid 54990:tid 54999] [client 20.151.114.166:33694] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/forbidals.php"] [unique_id "aZ-ZBntr2qmt_mBhH2y-zgAAAAY"]
[Thu Feb 26 08:51:19.294797 2026] [:error] [pid 55618:tid 55625] [client 20.151.114.166:33576] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/forbidals.php"] [unique_id "aZ-ZBx61Vrh12f_8oWT2HQAAAQQ"]
[Thu Feb 26 08:51:19.807161 2026] [:error] [pid 3883:tid 3886] [client 20.151.114.166:33608] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "aZ-ZB-A33x90V6yYHaizWQAAAUA"]
[Thu Feb 26 08:51:20.243263 2026] [:error] [pid 3883:tid 3905] [client 20.151.114.166:33625] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "aZ-ZCOA33x90V6yYHaizWwAAAVM"]
[Thu Feb 26 08:51:20.732164 2026] [:error] [pid 3883:tid 3890] [client 20.151.114.166:33537] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "aZ-ZCOA33x90V6yYHaizXQAAAUQ"]
[Thu Feb 26 08:51:21.165471 2026] [:error] [pid 55618:tid 55632] [client 20.151.114.166:33631] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "aZ-ZCR61Vrh12f_8oWT2IwAAAQs"]
[Thu Feb 26 08:51:21.684329 2026] [:error] [pid 25311:tid 25314] [client 20.151.114.166:33595] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dev1s.php"] [unique_id "aZ-ZCdfdM__yZAgJFSv9GQAAAYA"]
[Thu Feb 26 08:51:22.251992 2026] [:error] [pid 55618:tid 55633] [client 20.151.114.166:33739] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dev1s.php"] [unique_id "aZ-ZCh61Vrh12f_8oWT2JwAAAQw"]
[Thu Feb 26 08:51:22.708866 2026] [:error] [pid 3883:tid 3900] [client 20.151.114.166:33569] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dev1s.php"] [unique_id "aZ-ZCuA33x90V6yYHaizYgAAAU4"]
[Thu Feb 26 08:51:23.271654 2026] [:error] [pid 3883:tid 3909] [client 20.151.114.166:33784] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dev1s.php"] [unique_id "aZ-ZC-A33x90V6yYHaizZAAAAVc"]
[Thu Feb 26 08:51:23.918109 2026] [:error] [pid 55618:tid 55639] [client 20.151.114.166:33519] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ffd.php"] [unique_id "aZ-ZCx61Vrh12f_8oWT2LgAAARI"]
[Thu Feb 26 08:51:24.623555 2026] [:error] [pid 25311:tid 25336] [client 20.151.114.166:33658] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ffd.php"] [unique_id "aZ-ZDNfdM__yZAgJFSv9JAAAAZY"]
[Thu Feb 26 08:51:25.081240 2026] [:error] [pid 3883:tid 3897] [client 20.151.114.166:33640] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ffd.php"] [unique_id "aZ-ZDeA33x90V6yYHaizaAAAAUs"]
[Thu Feb 26 08:51:25.607845 2026] [:error] [pid 55618:tid 55628] [client 20.151.114.166:33692] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ffd.php"] [unique_id "aZ-ZDR61Vrh12f_8oWT2MQAAAQc"]
[Thu Feb 26 08:51:26.213407 2026] [:error] [pid 3883:tid 3896] [client 20.151.114.166:33693] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admiin.php"] [unique_id "aZ-ZDuA33x90V6yYHaizbQAAAUo"]
[Thu Feb 26 08:51:26.924570 2026] [:error] [pid 3883:tid 3888] [client 20.151.114.166:33541] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admiin.php"] [unique_id "aZ-ZDuA33x90V6yYHaizcAAAAUI"]
[Thu Feb 26 08:51:27.420284 2026] [:error] [pid 55618:tid 55640] [client 20.151.114.166:33657] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admiin.php"] [unique_id "aZ-ZDx61Vrh12f_8oWT2NQAAARM"]
[Thu Feb 26 08:51:27.861908 2026] [:error] [pid 55618:tid 55643] [client 20.151.114.166:33701] [client 20.151.114.166] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admiin.php"] [unique_id "aZ-ZDx61Vrh12f_8oWT2NgAAARY"]
[Thu Feb 26 09:51:53.048254 2026] [autoindex:error] [pid 55618:tid 55643] [client 86.48.2.117:52574] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Thu Feb 26 12:41:15.225617 2026] [autoindex:error] [pid 55618:tid 55631] [client 4.193.177.110:3320] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive
[Thu Feb 26 12:41:15.419227 2026] [proxy_fcgi:error] [pid 55618:tid 55636] [client 4.193.177.110:3320] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 12:41:15.510180 2026] [proxy_fcgi:error] [pid 55618:tid 55643] [client 4.193.177.110:3320] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 12:41:15.626893 2026] [proxy_fcgi:error] [pid 55618:tid 55637] [client 4.193.177.110:3320] AH01071: Got error 'Primary script unknown'
[Thu Feb 26 12:41:16.251935 2026] [:error] [pid 55618:tid 55644] [client 4.193.177.110:3320] [client 4.193.177.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/01.php"] [unique_id "aZ_O7B61Vrh12f_8oWRm1wAAARc"]
[Thu Feb 26 12:41:16.602302 2026] [:error] [pid 55618:tid 55627] [client 4.193.177.110:2969] [client 4.193.177.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/01.php"] [unique_id "aZ_O7B61Vrh12f_8oWRm2QAAAQY"]
[Thu Feb 26 12:41:16.962251 2026] [:error] [pid 3883:tid 3892] [client 4.193.177.110:2996] [client 4.193.177.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/01.php"] [unique_id "aZ_O7OA33x90V6yYHahJwAAAAUY"]
[Thu Feb 26 12:41:17.311985 2026] [:error] [pid 25311:tid 25314] [client 4.193.177.110:5120] [client 4.193.177.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/01.php"] [unique_id "aZ_O7dfdM__yZAgJFSuyrwAAAYA"]
[Fri Feb 27 01:07:40.827653 2026] [:error] [pid 19020:tid 19041] [client 20.78.129.228:7082] [client 20.78.129.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-editor.php"] [unique_id "aaB93LN3kp7wL6QzPnUTggAAAVM"]
[Fri Feb 27 01:07:41.505645 2026] [:error] [pid 20059:tid 20125] [client 20.78.129.228:9909] [client 20.78.129.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-editor.php"] [unique_id "aaB93ZZBS5wIa_NsqsjyPAAAAdc"]
[Fri Feb 27 01:07:42.137230 2026] [:error] [pid 20059:tid 20105] [client 20.78.129.228:3040] [client 20.78.129.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-editor.php"] [unique_id "aaB93pZBS5wIa_NsqsjyQgAAAcM"]
[Fri Feb 27 01:07:42.818590 2026] [:error] [pid 20059:tid 20123] [client 20.78.129.228:8580] [client 20.78.129.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-editor.php"] [unique_id "aaB93pZBS5wIa_NsqsjyRwAAAdU"]
[Fri Feb 27 03:08:51.756308 2026] [:error] [pid 18831:tid 18930] [client 20.43.27.35:33366] [client 20.43.27.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaCaQ_5KHTHUIuWRG2bl9AAAAFE"]
[Fri Feb 27 03:08:52.601773 2026] [:error] [pid 18818:tid 18886] [client 20.43.27.35:33105] [client 20.43.27.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaCaRBhPgqk2SeS_W83YXgAAAAI"]
[Fri Feb 27 03:08:53.429378 2026] [:error] [pid 19020:tid 19035] [client 20.43.27.35:33088] [client 20.43.27.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaCaRbN3kp7wL6QzPnVYAgAAAU0"]
[Fri Feb 27 03:08:54.266998 2026] [:error] [pid 18843:tid 18942] [client 20.43.27.35:33382] [client 20.43.27.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaCaRiuD2bhSYSowPs0iYAAAAQI"]
[Fri Feb 27 03:36:14.208904 2026] [:error] [pid 20059:tid 20117] [client 40.80.89.74:6276] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaCgrpZBS5wIa_Nsqsh9rAAAAc8"]
[Fri Feb 27 03:36:14.794116 2026] [:error] [pid 18818:tid 18896] [client 40.80.89.74:6483] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaCgrhhPgqk2SeS_W83hhAAAAAw"]
[Fri Feb 27 03:36:15.431765 2026] [:error] [pid 18831:tid 18924] [client 40.80.89.74:6491] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaCgr_5KHTHUIuWRG2b0ywAAAEs"]
[Fri Feb 27 03:36:16.057308 2026] [:error] [pid 18831:tid 18917] [client 40.80.89.74:6281] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaCgsP5KHTHUIuWRG2b0zgAAAEQ"]
[Fri Feb 27 04:41:40.590207 2026] [:error] [pid 42658:tid 42668] [client 20.43.27.35:1767] [client 20.43.27.35] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaCwBIzcoYl3nRbu1jZTHgAAAgg"]
[Fri Feb 27 04:41:41.747197 2026] [:error] [pid 5365:tid 5377] [client 20.43.27.35:1779] [client 20.43.27.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaCwBZYAa8J3tYxdG3wXDQAAAQo"]
[Fri Feb 27 04:41:43.567639 2026] [:error] [pid 42658:tid 42669] [client 20.43.27.35:1809] [client 20.43.27.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaCwB4zcoYl3nRbu1jZTRgAAAgk"]
[Fri Feb 27 04:41:46.364654 2026] [:error] [pid 21329:tid 21404] [client 20.43.27.35:1798] [client 20.43.27.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaCwCpvQWnde-MjcQ1FXJAAAAVU"]
[Fri Feb 27 04:41:47.594466 2026] [:error] [pid 42658:tid 42682] [client 20.43.27.35:1801] [client 20.43.27.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/index.php"] [unique_id "aaCwC4zcoYl3nRbu1jZTZgAAAhY"]
[Fri Feb 27 05:03:31.314679 2026] [:error] [pid 5365:tid 5383] [client 20.43.27.35:33555] [client 20.43.27.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaC1I5YAa8J3tYxdG3wtYAAAARA"]
[Fri Feb 27 05:03:32.157187 2026] [:error] [pid 42563:tid 42577] [client 20.43.27.35:33172] [client 20.43.27.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaC1JHKL5BclZy73IRHAegAAAcg"]
[Fri Feb 27 05:03:33.003550 2026] [:error] [pid 42658:tid 42666] [client 20.43.27.35:33209] [client 20.43.27.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaC1JYzcoYl3nRbu1jZj4wAAAgY"]
[Fri Feb 27 05:03:33.840107 2026] [:error] [pid 42658:tid 42679] [client 20.43.27.35:33536] [client 20.43.27.35] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaC1JYzcoYl3nRbu1jZj6AAAAhM"]
[Fri Feb 27 07:05:05.428809 2026] [:error] [pid 42435:tid 42445] [client 4.193.177.110:3264] [client 4.193.177.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaDRoR5hHLnaukp_y9-h7gAAAYU"]
[Fri Feb 27 07:05:05.800360 2026] [:error] [pid 5365:tid 5367] [client 4.193.177.110:2761] [client 4.193.177.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaDRoZYAa8J3tYxdG3xzgwAAAQA"]
[Fri Feb 27 07:05:06.175572 2026] [:error] [pid 5365:tid 5378] [client 4.193.177.110:6036] [client 4.193.177.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaDRopYAa8J3tYxdG3xzhQAAAQs"]
[Fri Feb 27 07:05:06.525266 2026] [:error] [pid 42563:tid 42592] [client 4.193.177.110:3304] [client 4.193.177.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaDRonKL5BclZy73IRHltQAAAdY"]
[Fri Feb 27 08:15:07.551277 2026] [:error] [pid 54101:tid 54121] [client 20.48.148.227:6284] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x123.php"] [unique_id "aaDiC1Y5qgRktcYTGFuw9QAAAc0"]
[Fri Feb 27 08:15:08.502741 2026] [:error] [pid 54101:tid 54128] [client 20.48.148.227:4759] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x123.php"] [unique_id "aaDiDFY5qgRktcYTGFuw-AAAAdQ"]
[Fri Feb 27 08:15:09.413263 2026] [:error] [pid 54101:tid 54123] [client 20.48.148.227:7439] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x123.php"] [unique_id "aaDiDVY5qgRktcYTGFuw_gAAAc8"]
[Fri Feb 27 08:15:10.212941 2026] [:error] [pid 54103:tid 54186] [client 20.48.148.227:7441] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x123.php"] [unique_id "aaDiDuvG4MPCmE0B2sDfsAAAAM8"]
[Fri Feb 27 08:15:10.980758 2026] [:error] [pid 54103:tid 54174] [client 20.48.148.227:8108] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aaDiDuvG4MPCmE0B2sDfswAAAMM"]
[Fri Feb 27 08:15:11.686805 2026] [:error] [pid 54231:tid 54258] [client 20.48.148.227:7690] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aaDiD-Tvb5AeyJCdY7ALVAAAAFg"]
[Fri Feb 27 08:15:12.575234 2026] [:error] [pid 54231:tid 54251] [client 20.48.148.227:4142] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aaDiEOTvb5AeyJCdY7ALWgAAAFE"]
[Fri Feb 27 08:15:13.504368 2026] [:error] [pid 54231:tid 54237] [client 20.48.148.227:9487] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aaDiEeTvb5AeyJCdY7ALXwAAAEM"]
[Fri Feb 27 08:15:14.437296 2026] [:error] [pid 54103:tid 54176] [client 20.48.148.227:3729] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/moshou.php"] [unique_id "aaDiEuvG4MPCmE0B2sDfvAAAAMU"]
[Fri Feb 27 08:15:14.958200 2026] [:error] [pid 54231:tid 54236] [client 20.48.148.227:7684] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/moshou.php"] [unique_id "aaDiEuTvb5AeyJCdY7ALYwAAAEI"]
[Fri Feb 27 08:15:15.887348 2026] [:error] [pid 54103:tid 54189] [client 20.48.148.227:6498] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/moshou.php"] [unique_id "aaDiE-vG4MPCmE0B2sDfwgAAANI"]
[Fri Feb 27 08:15:16.881478 2026] [:error] [pid 54231:tid 54252] [client 20.48.148.227:4763] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/moshou.php"] [unique_id "aaDiFOTvb5AeyJCdY7ALbAAAAFI"]
[Fri Feb 27 08:15:17.684201 2026] [:error] [pid 54231:tid 54256] [client 20.48.148.227:3739] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/seetox.php"] [unique_id "aaDiFeTvb5AeyJCdY7ALcwAAAFY"]
[Fri Feb 27 08:15:18.304574 2026] [:error] [pid 54231:tid 54245] [client 20.48.148.227:7427] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/seetox.php"] [unique_id "aaDiFuTvb5AeyJCdY7ALdQAAAEs"]
[Fri Feb 27 08:15:19.048852 2026] [:error] [pid 54103:tid 54182] [client 20.48.148.227:6468] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/seetox.php"] [unique_id "aaDiF-vG4MPCmE0B2sDfxgAAAMs"]
[Fri Feb 27 08:15:19.825155 2026] [:error] [pid 54103:tid 54194] [client 20.48.148.227:8106] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/seetox.php"] [unique_id "aaDiF-vG4MPCmE0B2sDfyQAAANc"]
[Fri Feb 27 08:15:21.310529 2026] [:error] [pid 54101:tid 54119] [client 20.48.148.227:4767] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dom.php"] [unique_id "aaDiGVY5qgRktcYTGFuxGgAAAcs"]
[Fri Feb 27 08:15:22.813842 2026] [:error] [pid 54101:tid 54110] [client 20.48.148.227:1643] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dom.php"] [unique_id "aaDiGlY5qgRktcYTGFuxIAAAAcI"]
[Fri Feb 27 08:15:23.895678 2026] [:error] [pid 54103:tid 54192] [client 20.48.148.227:6521] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dom.php"] [unique_id "aaDiG-vG4MPCmE0B2sDf1QAAANU"]
[Fri Feb 27 08:15:25.005487 2026] [:error] [pid 54231:tid 54235] [client 20.48.148.227:3760] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dom.php"] [unique_id "aaDiHeTvb5AeyJCdY7ALiAAAAEE"]
[Fri Feb 27 08:15:26.129826 2026] [:error] [pid 54103:tid 54179] [client 20.48.148.227:5467] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws60.php"] [unique_id "aaDiHuvG4MPCmE0B2sDf3wAAAMg"]
[Fri Feb 27 08:15:27.522050 2026] [:error] [pid 54231:tid 54252] [client 20.48.148.227:1637] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws60.php"] [unique_id "aaDiH-Tvb5AeyJCdY7ALkAAAAFI"]
[Fri Feb 27 08:15:28.594496 2026] [:error] [pid 54103:tid 54189] [client 20.48.148.227:4268] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws60.php"] [unique_id "aaDiIOvG4MPCmE0B2sDf5AAAANI"]
[Fri Feb 27 08:15:30.670075 2026] [:error] [pid 54231:tid 54245] [client 20.48.148.227:4788] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws60.php"] [unique_id "aaDiIuTvb5AeyJCdY7ALlgAAAEs"]
[Fri Feb 27 08:15:33.249828 2026] [:error] [pid 54103:tid 54180] [client 20.48.148.227:6497] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/samiri.php"] [unique_id "aaDiJevG4MPCmE0B2sDf8AAAAMk"]
[Fri Feb 27 08:15:33.869508 2026] [:error] [pid 54103:tid 54195] [client 20.48.148.227:8064] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/samiri.php"] [unique_id "aaDiJevG4MPCmE0B2sDf9AAAANg"]
[Fri Feb 27 08:15:34.886680 2026] [:error] [pid 54103:tid 54193] [client 20.48.148.227:5453] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/samiri.php"] [unique_id "aaDiJuvG4MPCmE0B2sDgAQAAANY"]
[Fri Feb 27 08:15:35.459977 2026] [:error] [pid 54102:tid 54147] [client 20.48.148.227:4791] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/samiri.php"] [unique_id "aaDiJ3i74D4fiYUm_GfImAAAAIM"]
[Fri Feb 27 08:15:36.103586 2026] [:error] [pid 54231:tid 54244] [client 20.48.148.227:8079] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plugins.php"] [unique_id "aaDiKOTvb5AeyJCdY7ALrgAAAEo"]
[Fri Feb 27 08:15:36.823288 2026] [:error] [pid 54103:tid 54182] [client 20.48.148.227:7709] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plugins.php"] [unique_id "aaDiKOvG4MPCmE0B2sDgDAAAAMs"]
[Fri Feb 27 08:15:37.472906 2026] [:error] [pid 54103:tid 54178] [client 20.48.148.227:7741] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plugins.php"] [unique_id "aaDiKevG4MPCmE0B2sDgEwAAAMc"]
[Fri Feb 27 08:15:38.302155 2026] [:error] [pid 54102:tid 54155] [client 20.48.148.227:4799] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plugins.php"] [unique_id "aaDiKni74D4fiYUm_GfIpQAAAIs"]
[Fri Feb 27 08:15:39.016359 2026] [:error] [pid 54102:tid 54154] [client 20.48.148.227:6489] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xoot.php"] [unique_id "aaDiK3i74D4fiYUm_GfIqgAAAIo"]
[Fri Feb 27 08:15:40.969789 2026] [:error] [pid 54231:tid 54251] [client 20.48.148.227:4250] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xoot.php"] [unique_id "aaDiLOTvb5AeyJCdY7ALvAAAAFE"]
[Fri Feb 27 08:15:41.649063 2026] [:error] [pid 54102:tid 54150] [client 20.48.148.227:6508] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xoot.php"] [unique_id "aaDiLXi74D4fiYUm_GfIswAAAIY"]
[Fri Feb 27 08:15:42.283552 2026] [:error] [pid 54231:tid 54249] [client 20.48.148.227:8101] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xoot.php"] [unique_id "aaDiLuTvb5AeyJCdY7ALwQAAAE8"]
[Fri Feb 27 08:15:43.045645 2026] [:error] [pid 54103:tid 54188] [client 20.48.148.227:5450] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/X57.php"] [unique_id "aaDiL-vG4MPCmE0B2sDgLgAAANE"]
[Fri Feb 27 08:15:43.824915 2026] [:error] [pid 54102:tid 54144] [client 20.48.148.227:1654] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/X57.php"] [unique_id "aaDiL3i74D4fiYUm_GfItgAAAIA"]
[Fri Feb 27 08:15:44.726905 2026] [:error] [pid 54231:tid 54251] [client 20.48.148.227:4265] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/X57.php"] [unique_id "aaDiMOTvb5AeyJCdY7ALzQAAAFE"]
[Fri Feb 27 08:15:45.257668 2026] [:error] [pid 54103:tid 54186] [client 20.48.148.227:5496] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/X57.php"] [unique_id "aaDiMevG4MPCmE0B2sDgOgAAAM8"]
[Fri Feb 27 08:15:45.896179 2026] [:error] [pid 54103:tid 54183] [client 20.48.148.227:6293] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aaDiMevG4MPCmE0B2sDgPQAAAMw"]
[Fri Feb 27 08:15:46.786473 2026] [:error] [pid 54231:tid 54245] [client 20.48.148.227:6479] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aaDiMuTvb5AeyJCdY7AL0wAAAEs"]
[Fri Feb 27 08:15:47.892496 2026] [:error] [pid 54101:tid 54122] [client 20.48.148.227:5444] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aaDiM1Y5qgRktcYTGFuxggAAAc4"]
[Fri Feb 27 08:15:48.683495 2026] [:error] [pid 54102:tid 54165] [client 20.48.148.227:7685] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aaDiNHi74D4fiYUm_GfIvwAAAJU"]
[Fri Feb 27 08:15:49.351462 2026] [:error] [pid 54102:tid 54155] [client 20.48.148.227:6510] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file59.php"] [unique_id "aaDiNXi74D4fiYUm_GfIxwAAAIs"]
[Fri Feb 27 08:15:50.272828 2026] [:error] [pid 54231:tid 54234] [client 20.48.148.227:8095] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file59.php"] [unique_id "aaDiNuTvb5AeyJCdY7AL4QAAAEA"]
[Fri Feb 27 08:15:50.981174 2026] [:error] [pid 54231:tid 54243] [client 20.48.148.227:5829] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file59.php"] [unique_id "aaDiNuTvb5AeyJCdY7AL4wAAAEk"]
[Fri Feb 27 08:15:51.650976 2026] [:error] [pid 54102:tid 54148] [client 20.48.148.227:8127] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file59.php"] [unique_id "aaDiN3i74D4fiYUm_GfIywAAAIQ"]
[Fri Feb 27 08:15:52.203737 2026] [:error] [pid 54231:tid 54238] [client 20.48.148.227:8084] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaDiOOTvb5AeyJCdY7AL6QAAAEQ"]
[Fri Feb 27 08:15:52.875430 2026] [:error] [pid 54102:tid 54164] [client 20.48.148.227:6511] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaDiOHi74D4fiYUm_GfIzwAAAJQ"]
[Fri Feb 27 08:15:53.335552 2026] [:error] [pid 54101:tid 54131] [client 20.48.148.227:4159] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaDiOVY5qgRktcYTGFuxkQAAAdc"]
[Fri Feb 27 08:15:53.880585 2026] [:error] [pid 54231:tid 54242] [client 20.48.148.227:5643] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaDiOeTvb5AeyJCdY7AL8AAAAEg"]
[Fri Feb 27 08:15:54.348912 2026] [:error] [pid 54231:tid 54234] [client 20.48.148.227:4157] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shas.php"] [unique_id "aaDiOuTvb5AeyJCdY7AL8gAAAEA"]
[Fri Feb 27 08:15:54.895834 2026] [:error] [pid 54231:tid 54239] [client 20.48.148.227:5495] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shas.php"] [unique_id "aaDiOuTvb5AeyJCdY7AL9QAAAEU"]
[Fri Feb 27 08:15:55.353681 2026] [:error] [pid 54231:tid 54247] [client 20.48.148.227:3744] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shas.php"] [unique_id "aaDiO-Tvb5AeyJCdY7AL-wAAAE0"]
[Fri Feb 27 08:15:55.935443 2026] [:error] [pid 54101:tid 54110] [client 20.48.148.227:8087] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shas.php"] [unique_id "aaDiO1Y5qgRktcYTGFuxmAAAAcI"]
[Fri Feb 27 08:15:56.911677 2026] [:error] [pid 54103:tid 54186] [client 20.48.148.227:4228] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aaDiPOvG4MPCmE0B2sDgVAAAAM8"]
[Fri Feb 27 08:15:58.079647 2026] [:error] [pid 54231:tid 54238] [client 20.48.148.227:4750] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aaDiPuTvb5AeyJCdY7AMDAAAAEQ"]
[Fri Feb 27 08:15:59.139264 2026] [:error] [pid 54231:tid 54249] [client 20.48.148.227:1619] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aaDiP-Tvb5AeyJCdY7AMEAAAAE8"]
[Fri Feb 27 08:16:00.334038 2026] [:error] [pid 54231:tid 54243] [client 20.48.148.227:8067] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aaDiQOTvb5AeyJCdY7AMFQAAAEk"]
[Fri Feb 27 08:16:02.311863 2026] [:error] [pid 54103:tid 54181] [client 20.48.148.227:3725] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "aaDiQuvG4MPCmE0B2sDgXgAAAMo"]
[Fri Feb 27 08:16:03.259188 2026] [:error] [pid 54231:tid 54249] [client 20.48.148.227:5474] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "aaDiQ-Tvb5AeyJCdY7AMKAAAAE8"]
[Fri Feb 27 08:16:04.216438 2026] [:error] [pid 54231:tid 54254] [client 20.48.148.227:6496] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "aaDiROTvb5AeyJCdY7AMLwAAAFQ"]
[Fri Feb 27 08:16:05.307919 2026] [:error] [pid 54231:tid 54241] [client 20.48.148.227:6524] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "aaDiReTvb5AeyJCdY7AMNQAAAEc"]
[Fri Feb 27 08:16:06.372073 2026] [:error] [pid 54231:tid 54246] [client 20.48.148.227:4256] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/er.php"] [unique_id "aaDiRuTvb5AeyJCdY7AMPwAAAEw"]
[Fri Feb 27 08:16:13.824788 2026] [:error] [pid 54231:tid 54245] [client 20.48.148.227:3732] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/un.php"] [unique_id "aaDiTeTvb5AeyJCdY7AMeAAAAEs"]
[Fri Feb 27 08:16:14.586270 2026] [:error] [pid 54231:tid 54249] [client 20.48.148.227:6471] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/un.php"] [unique_id "aaDiTuTvb5AeyJCdY7AMfAAAAE8"]
[Fri Feb 27 08:16:15.521918 2026] [:error] [pid 54102:tid 54146] [client 20.48.148.227:1624] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/un.php"] [unique_id "aaDiT3i74D4fiYUm_GfI6wAAAII"]
[Fri Feb 27 08:16:16.821465 2026] [:error] [pid 54231:tid 54253] [client 20.48.148.227:5492] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/un.php"] [unique_id "aaDiUOTvb5AeyJCdY7AMgwAAAFM"]
[Fri Feb 27 08:16:18.557889 2026] [:error] [pid 54231:tid 54238] [client 20.48.148.227:6486] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aaDiUuTvb5AeyJCdY7AMjAAAAEQ"]
[Fri Feb 27 08:16:20.721823 2026] [:error] [pid 54103:tid 54184] [client 20.48.148.227:7725] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aaDiVOvG4MPCmE0B2sDgggAAAM0"]
[Fri Feb 27 08:16:21.476569 2026] [:error] [pid 54101:tid 54131] [client 20.48.148.227:7735] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aaDiVVY5qgRktcYTGFux6wAAAdc"]
[Fri Feb 27 08:16:23.098533 2026] [:error] [pid 54102:tid 54144] [client 20.48.148.227:7451] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aaDiV3i74D4fiYUm_GfI_gAAAIA"]
[Fri Feb 27 08:16:23.853086 2026] [:error] [pid 54103:tid 54183] [client 20.48.148.227:4769] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aaDiV-vG4MPCmE0B2sDgmAAAAMw"]
[Fri Feb 27 08:16:24.585268 2026] [:error] [pid 54231:tid 54241] [client 20.48.148.227:7682] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aaDiWOTvb5AeyJCdY7AMsgAAAEc"]
[Fri Feb 27 08:16:25.266400 2026] [:error] [pid 54103:tid 54188] [client 20.48.148.227:4097] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aaDiWevG4MPCmE0B2sDgngAAANE"]
[Fri Feb 27 08:16:26.337308 2026] [:error] [pid 54101:tid 54127] [client 20.48.148.227:4736] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aaDiWlY5qgRktcYTGFux8gAAAdM"]
[Fri Feb 27 08:16:27.887032 2026] [:error] [pid 54101:tid 54120] [client 20.48.148.227:8081] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/login8.php"] [unique_id "aaDiW1Y5qgRktcYTGFux9gAAAcw"]
[Fri Feb 27 08:16:28.562733 2026] [:error] [pid 54103:tid 54175] [client 20.48.148.227:4101] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/login8.php"] [unique_id "aaDiXOvG4MPCmE0B2sDgqAAAAMQ"]
[Fri Feb 27 08:16:29.239165 2026] [:error] [pid 54231:tid 54251] [client 20.48.148.227:4792] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/login8.php"] [unique_id "aaDiXeTvb5AeyJCdY7AM0QAAAFE"]
[Fri Feb 27 08:16:29.934095 2026] [:error] [pid 54231:tid 54235] [client 20.48.148.227:8075] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/login8.php"] [unique_id "aaDiXeTvb5AeyJCdY7AM1wAAAEE"]
[Fri Feb 27 08:16:30.906732 2026] [:error] [pid 54231:tid 54234] [client 20.48.148.227:6318] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nnyvn.php"] [unique_id "aaDiXuTvb5AeyJCdY7AM3AAAAEA"]
[Fri Feb 27 08:16:31.622606 2026] [:error] [pid 54102:tid 54144] [client 20.48.148.227:7476] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nnyvn.php"] [unique_id "aaDiX3i74D4fiYUm_GfJIQAAAIA"]
[Fri Feb 27 08:16:32.312966 2026] [:error] [pid 54102:tid 54155] [client 20.48.148.227:7475] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nnyvn.php"] [unique_id "aaDiYHi74D4fiYUm_GfJKQAAAIs"]
[Fri Feb 27 08:16:33.023969 2026] [:error] [pid 54231:tid 54250] [client 20.48.148.227:1611] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nnyvn.php"] [unique_id "aaDiYeTvb5AeyJCdY7AM5QAAAFA"]
[Fri Feb 27 08:16:33.546679 2026] [:error] [pid 54101:tid 54131] [client 20.48.148.227:1653] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aaDiYVY5qgRktcYTGFuyCgAAAdc"]
[Fri Feb 27 08:16:34.507104 2026] [:error] [pid 54103:tid 54195] [client 20.48.148.227:5479] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aaDiYuvG4MPCmE0B2sDgtwAAANg"]
[Fri Feb 27 08:16:35.170615 2026] [:error] [pid 54231:tid 54234] [client 20.48.148.227:4764] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aaDiY-Tvb5AeyJCdY7AM7AAAAEA"]
[Fri Feb 27 08:16:36.267089 2026] [:error] [pid 54231:tid 54258] [client 20.48.148.227:1601] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aaDiZOTvb5AeyJCdY7AM9AAAAFg"]
[Fri Feb 27 08:16:36.873980 2026] [:error] [pid 54103:tid 54190] [client 20.48.148.227:4280] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lul.php"] [unique_id "aaDiZOvG4MPCmE0B2sDgugAAANM"]
[Fri Feb 27 08:16:37.439084 2026] [:error] [pid 54102:tid 54150] [client 20.48.148.227:7732] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lul.php"] [unique_id "aaDiZXi74D4fiYUm_GfJSwAAAIY"]
[Fri Feb 27 08:16:38.351670 2026] [:error] [pid 54231:tid 54239] [client 20.48.148.227:6519] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lul.php"] [unique_id "aaDiZuTvb5AeyJCdY7ANDQAAAEU"]
[Fri Feb 27 08:16:38.932405 2026] [:error] [pid 54231:tid 54236] [client 20.48.148.227:4249] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lul.php"] [unique_id "aaDiZuTvb5AeyJCdY7ANFAAAAEI"]
[Fri Feb 27 08:16:39.805368 2026] [:error] [pid 54103:tid 54177] [client 20.48.148.227:5454] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/0.php"] [unique_id "aaDiZ-vG4MPCmE0B2sDgvwAAAMY"]
[Fri Feb 27 08:16:40.633665 2026] [:error] [pid 54103:tid 54191] [client 20.48.148.227:1649] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/0.php"] [unique_id "aaDiaOvG4MPCmE0B2sDgwQAAANQ"]
[Fri Feb 27 08:16:41.218173 2026] [:error] [pid 54231:tid 54238] [client 20.48.148.227:7717] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/0.php"] [unique_id "aaDiaeTvb5AeyJCdY7ANLgAAAEQ"]
[Fri Feb 27 08:16:41.988513 2026] [:error] [pid 54101:tid 54116] [client 20.48.148.227:3775] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/0.php"] [unique_id "aaDiaVY5qgRktcYTGFuyFQAAAcg"]
[Fri Feb 27 08:16:42.866479 2026] [:error] [pid 54101:tid 54129] [client 20.48.148.227:1604] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aaDialY5qgRktcYTGFuyFwAAAdU"]
[Fri Feb 27 08:16:43.824067 2026] [:error] [pid 54103:tid 54184] [client 20.48.148.227:4786] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aaDia-vG4MPCmE0B2sDgxAAAAM0"]
[Fri Feb 27 08:16:44.978684 2026] [:error] [pid 54231:tid 54250] [client 20.48.148.227:6500] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aaDibOTvb5AeyJCdY7ANUwAAAFA"]
[Fri Feb 27 08:16:46.188180 2026] [:error] [pid 54103:tid 54190] [client 20.48.148.227:3738] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aaDibuvG4MPCmE0B2sDgywAAANM"]
[Fri Feb 27 08:16:47.531895 2026] [:error] [pid 54231:tid 54235] [client 20.48.148.227:8068] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ya.php"] [unique_id "aaDib-Tvb5AeyJCdY7ANXgAAAEE"]
[Fri Feb 27 08:16:48.758561 2026] [:error] [pid 54231:tid 54239] [client 20.48.148.227:9479] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ya.php"] [unique_id "aaDicOTvb5AeyJCdY7ANZQAAAEU"]
[Fri Feb 27 08:16:49.575968 2026] [:error] [pid 54102:tid 54153] [client 20.48.148.227:3737] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ya.php"] [unique_id "aaDicXi74D4fiYUm_GfJmQAAAIk"]
[Fri Feb 27 08:16:50.541057 2026] [:error] [pid 54103:tid 54188] [client 20.48.148.227:6476] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ya.php"] [unique_id "aaDicuvG4MPCmE0B2sDg1wAAANE"]
[Fri Feb 27 08:16:51.465680 2026] [:error] [pid 54103:tid 54186] [client 20.48.148.227:1603] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aaDic-vG4MPCmE0B2sDg2gAAAM8"]
[Fri Feb 27 08:16:52.448036 2026] [:error] [pid 54103:tid 54187] [client 20.48.148.227:3741] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aaDidOvG4MPCmE0B2sDg3gAAANA"]
[Fri Feb 27 08:16:53.176274 2026] [:error] [pid 54103:tid 54174] [client 20.48.148.227:1620] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aaDidevG4MPCmE0B2sDg4AAAAMM"]
[Fri Feb 27 08:16:53.904521 2026] [:error] [pid 54103:tid 54172] [client 20.48.148.227:6520] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aaDidevG4MPCmE0B2sDg5AAAAME"]
[Fri Feb 27 08:16:54.804988 2026] [:error] [pid 54231:tid 54253] [client 20.48.148.227:7483] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aaDiduTvb5AeyJCdY7ANfAAAAFM"]
[Fri Feb 27 08:16:55.484641 2026] [:error] [pid 54101:tid 54127] [client 20.48.148.227:4270] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aaDid1Y5qgRktcYTGFuyKAAAAdM"]
[Fri Feb 27 08:16:56.226900 2026] [:error] [pid 54103:tid 54190] [client 20.48.148.227:5456] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aaDieOvG4MPCmE0B2sDg7QAAANM"]
[Fri Feb 27 08:16:57.553290 2026] [:error] [pid 54102:tid 54159] [client 20.48.148.227:7431] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aaDieXi74D4fiYUm_GfJvAAAAI8"]
[Fri Feb 27 08:16:58.906633 2026] [:error] [pid 54102:tid 54160] [client 20.48.148.227:5460] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "aaDieni74D4fiYUm_GfJxgAAAJA"]
[Fri Feb 27 08:16:59.672530 2026] [:error] [pid 54231:tid 54250] [client 20.48.148.227:4765] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "aaDie-Tvb5AeyJCdY7ANkAAAAFA"]
[Fri Feb 27 08:17:00.639733 2026] [:error] [pid 54102:tid 54154] [client 20.48.148.227:1642] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "aaDifHi74D4fiYUm_GfJ1AAAAIo"]
[Fri Feb 27 08:17:01.505251 2026] [:error] [pid 54103:tid 54187] [client 20.48.148.227:4124] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "aaDifevG4MPCmE0B2sDg9AAAANA"]
[Fri Feb 27 08:17:02.914205 2026] [:error] [pid 54231:tid 54246] [client 20.48.148.227:4108] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a1vx.php"] [unique_id "aaDifuTvb5AeyJCdY7ANqwAAAEw"]
[Fri Feb 27 08:17:03.626615 2026] [:error] [pid 54231:tid 54239] [client 20.48.148.227:7731] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a1vx.php"] [unique_id "aaDif-Tvb5AeyJCdY7ANrQAAAEU"]
[Fri Feb 27 08:17:04.152400 2026] [:error] [pid 54101:tid 54132] [client 20.48.148.227:5635] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a1vx.php"] [unique_id "aaDigFY5qgRktcYTGFuyMAAAAdg"]
[Fri Feb 27 08:17:04.835100 2026] [:error] [pid 54103:tid 54185] [client 20.48.148.227:4749] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a1vx.php"] [unique_id "aaDigOvG4MPCmE0B2sDg-AAAAM4"]
[Fri Feb 27 08:17:05.651188 2026] [:error] [pid 54231:tid 54253] [client 20.48.148.227:7471] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aaDigeTvb5AeyJCdY7ANswAAAFM"]
[Fri Feb 27 08:17:06.485715 2026] [:error] [pid 54103:tid 54172] [client 20.48.148.227:7477] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aaDiguvG4MPCmE0B2sDhCQAAAME"]
[Fri Feb 27 08:17:07.880929 2026] [:error] [pid 54231:tid 54258] [client 20.48.148.227:5494] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aaDig-Tvb5AeyJCdY7ANwAAAAFg"]
[Fri Feb 27 08:17:08.814518 2026] [:error] [pid 54231:tid 54248] [client 20.48.148.227:9530] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aaDihOTvb5AeyJCdY7ANyQAAAE4"]
[Fri Feb 27 08:17:09.967786 2026] [:error] [pid 54102:tid 54154] [client 20.48.148.227:7715] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aaDihXi74D4fiYUm_GfKDQAAAIo"]
[Fri Feb 27 08:17:10.942962 2026] [:error] [pid 54102:tid 54160] [client 20.48.148.227:5475] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aaDihni74D4fiYUm_GfKFgAAAJA"]
[Fri Feb 27 08:17:11.758820 2026] [:error] [pid 54102:tid 54157] [client 20.48.148.227:4145] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aaDih3i74D4fiYUm_GfKGQAAAI0"]
[Fri Feb 27 08:17:12.314886 2026] [:error] [pid 54231:tid 54254] [client 20.48.148.227:3761] [client 20.48.148.227] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aaDiiOTvb5AeyJCdY7AN1AAAAFQ"]
[Fri Feb 27 14:08:58.003958 2026] [:error] [pid 49306:tid 49315] [client 20.100.197.204:12925] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/assets/css/index.php"] [unique_id "aaE0-vnSUDZue59Px9spaQAAAUc"]
[Fri Feb 27 14:08:58.706928 2026] [:error] [pid 54102:tid 54161] [client 20.100.197.204:56936] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/assets/css/index.php"] [unique_id "aaE0-ni74D4fiYUm_Gc47gAAAJE"]
[Fri Feb 27 14:08:59.437922 2026] [:error] [pid 56075:tid 56087] [client 20.100.197.204:51869] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/assets/css/index.php"] [unique_id "aaE0-8KBhrfI6KNv9Rj2zQAAAAo"]
[Fri Feb 27 14:09:00.070346 2026] [:error] [pid 49306:tid 49310] [client 20.100.197.204:52742] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/assets/css/index.php"] [unique_id "aaE0_PnSUDZue59Px9spbAAAAUI"]
[Fri Feb 27 14:09:00.853123 2026] [:error] [pid 49306:tid 49332] [client 20.100.197.204:12900] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/boots.php"] [unique_id "aaE0_PnSUDZue59Px9spcwAAAVg"]
[Fri Feb 27 14:09:01.417024 2026] [:error] [pid 54103:tid 54183] [client 20.100.197.204:56933] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/boots.php"] [unique_id "aaE0_evG4MPCmE0B2sBh5wAAAMw"]
[Fri Feb 27 14:09:02.349177 2026] [:error] [pid 49306:tid 49324] [client 20.100.197.204:44912] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/boots.php"] [unique_id "aaE0_vnSUDZue59Px9spdQAAAVA"]
[Fri Feb 27 14:09:03.155683 2026] [:error] [pid 52073:tid 52085] [client 20.100.197.204:7885] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/boots.php"] [unique_id "aaE0_4a650YPyxXVeRYI5wAAAYk"]
[Fri Feb 27 14:09:03.856917 2026] [:error] [pid 56075:tid 56077] [client 20.100.197.204:34085] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/logi.php"] [unique_id "aaE0_8KBhrfI6KNv9Rj20gAAAAA"]
[Fri Feb 27 14:09:04.521732 2026] [:error] [pid 62998:tid 63007] [client 20.100.197.204:21630] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/logi.php"] [unique_id "aaE1AFQeueXZDUmoLonN0QAAAQU"]
[Fri Feb 27 14:09:05.267619 2026] [:error] [pid 62998:tid 63021] [client 20.100.197.204:13129] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/logi.php"] [unique_id "aaE1AVQeueXZDUmoLonN0wAAARM"]
[Fri Feb 27 14:09:05.811082 2026] [:error] [pid 52073:tid 52085] [client 20.100.197.204:48098] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/logi.php"] [unique_id "aaE1AYa650YPyxXVeRYI-gAAAYk"]
[Fri Feb 27 14:09:06.589562 2026] [:error] [pid 54102:tid 54162] [client 20.100.197.204:13161] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaE1Ani74D4fiYUm_Gc48wAAAJI"]
[Fri Feb 27 14:09:07.297669 2026] [:error] [pid 49306:tid 49317] [client 20.100.197.204:52736] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaE1A_nSUDZue59Px9sphgAAAUk"]
[Fri Feb 27 14:09:07.844499 2026] [:error] [pid 52073:tid 52083] [client 20.100.197.204:51873] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaE1A4a650YPyxXVeRYJAAAAAYc"]
[Fri Feb 27 14:09:08.493021 2026] [:error] [pid 52073:tid 52098] [client 20.100.197.204:49001] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaE1BIa650YPyxXVeRYJBAAAAZY"]
[Fri Feb 27 14:09:09.187981 2026] [:error] [pid 52073:tid 52092] [client 20.100.197.204:20820] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/samfa.php"] [unique_id "aaE1BYa650YPyxXVeRYJBwAAAZA"]
[Fri Feb 27 14:09:09.748289 2026] [:error] [pid 54103:tid 54176] [client 20.100.197.204:31289] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/samfa.php"] [unique_id "aaE1BevG4MPCmE0B2sBh-QAAAMU"]
[Fri Feb 27 14:09:10.383041 2026] [:error] [pid 56075:tid 56094] [client 20.100.197.204:24119] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/samfa.php"] [unique_id "aaE1BsKBhrfI6KNv9Rj21AAAABA"]
[Fri Feb 27 14:09:10.936508 2026] [:error] [pid 54231:tid 54245] [client 20.100.197.204:48112] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/samfa.php"] [unique_id "aaE1BuTvb5AeyJCdY7C1qAAAAEs"]
[Fri Feb 27 14:09:11.465003 2026] [:error] [pid 49306:tid 49310] [client 20.100.197.204:52788] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aaE1B_nSUDZue59Px9spiwAAAUI"]
[Fri Feb 27 14:09:12.056678 2026] [:error] [pid 56075:tid 56095] [client 20.100.197.204:56937] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aaE1CMKBhrfI6KNv9Rj21QAAABE"]
[Fri Feb 27 14:09:12.671688 2026] [:error] [pid 56075:tid 56096] [client 20.100.197.204:52259] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aaE1CMKBhrfI6KNv9Rj22gAAABI"]
[Fri Feb 27 14:09:13.208607 2026] [:error] [pid 62998:tid 63002] [client 20.100.197.204:13179] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aaE1CVQeueXZDUmoLonN5gAAAQE"]
[Fri Feb 27 14:09:13.729615 2026] [:error] [pid 52073:tid 52084] [client 20.100.197.204:21581] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaE1CYa650YPyxXVeRYJGwAAAYg"]
[Fri Feb 27 14:09:14.256679 2026] [:error] [pid 49306:tid 49311] [client 20.100.197.204:20843] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaE1CvnSUDZue59Px9spkQAAAUM"]
[Fri Feb 27 14:09:14.819960 2026] [:error] [pid 49306:tid 49330] [client 20.100.197.204:34087] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaE1CvnSUDZue59Px9spkwAAAVY"]
[Fri Feb 27 14:09:15.343258 2026] [:error] [pid 56075:tid 56093] [client 20.100.197.204:31828] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaE1C8KBhrfI6KNv9Rj23AAAAA8"]
[Fri Feb 27 14:09:15.886359 2026] [:error] [pid 56075:tid 56098] [client 20.100.197.204:34049] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aaE1C8KBhrfI6KNv9Rj24QAAABQ"]
[Fri Feb 27 14:09:16.427771 2026] [:error] [pid 49306:tid 49329] [client 20.100.197.204:7862] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aaE1DPnSUDZue59Px9spmAAAAVU"]
[Fri Feb 27 14:09:16.954562 2026] [:error] [pid 54231:tid 54255] [client 20.100.197.204:51430] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aaE1DOTvb5AeyJCdY7C1qQAAAFU"]
[Fri Feb 27 14:09:17.500869 2026] [:error] [pid 49306:tid 49321] [client 20.100.197.204:56935] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aaE1DfnSUDZue59Px9spmgAAAU0"]
[Fri Feb 27 14:09:18.051219 2026] [:error] [pid 56075:tid 56087] [client 20.100.197.204:34100] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aaE1DsKBhrfI6KNv9Rj27gAAAAo"]
[Fri Feb 27 14:09:18.647938 2026] [:error] [pid 52073:tid 52099] [client 20.100.197.204:56916] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aaE1Doa650YPyxXVeRYJMwAAAZc"]
[Fri Feb 27 14:09:19.197815 2026] [:error] [pid 49306:tid 49316] [client 20.100.197.204:12700] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aaE1D_nSUDZue59Px9spnAAAAUg"]
[Fri Feb 27 14:09:19.749646 2026] [:error] [pid 49306:tid 49309] [client 20.100.197.204:7834] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aaE1D_nSUDZue59Px9spogAAAUE"]
[Fri Feb 27 14:09:20.296430 2026] [:error] [pid 52073:tid 52088] [client 20.100.197.204:56341] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/templates/beez/index.php"] [unique_id "aaE1EIa650YPyxXVeRYJNwAAAYw"]
[Fri Feb 27 14:09:20.902403 2026] [:error] [pid 56075:tid 56092] [client 20.100.197.204:52233] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/templates/beez/index.php"] [unique_id "aaE1EMKBhrfI6KNv9Rj29QAAAA4"]
[Fri Feb 27 14:09:21.475909 2026] [:error] [pid 56075:tid 56102] [client 20.100.197.204:37717] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/templates/beez/index.php"] [unique_id "aaE1EcKBhrfI6KNv9Rj2_AAAABg"]
[Fri Feb 27 14:09:22.068860 2026] [:error] [pid 56075:tid 56096] [client 20.100.197.204:21629] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/templates/beez/index.php"] [unique_id "aaE1EsKBhrfI6KNv9Rj3AQAAABI"]
[Fri Feb 27 14:09:22.611840 2026] [:error] [pid 54101:tid 54118] [client 20.100.197.204:56945] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/w.php"] [unique_id "aaE1ElY5qgRktcYTGFsTaQAAAco"]
[Fri Feb 27 14:09:23.235747 2026] [:error] [pid 54231:tid 54237] [client 20.100.197.204:7390] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/w.php"] [unique_id "aaE1E-Tvb5AeyJCdY7C1rwAAAEM"]
[Fri Feb 27 14:09:23.830898 2026] [:error] [pid 56075:tid 56077] [client 20.100.197.204:9027] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/w.php"] [unique_id "aaE1E8KBhrfI6KNv9Rj3BwAAAAA"]
[Fri Feb 27 14:09:24.424685 2026] [:error] [pid 49306:tid 49310] [client 20.100.197.204:13168] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/w.php"] [unique_id "aaE1FPnSUDZue59Px9spqQAAAUI"]
[Fri Feb 27 14:09:24.980600 2026] [:error] [pid 52073:tid 52079] [client 20.100.197.204:57180] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/system.php"] [unique_id "aaE1FIa650YPyxXVeRYJQgAAAYM"]
[Fri Feb 27 14:09:25.507680 2026] [:error] [pid 56075:tid 56097] [client 20.100.197.204:4848] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/system.php"] [unique_id "aaE1FcKBhrfI6KNv9Rj3CgAAABM"]
[Fri Feb 27 14:09:26.027017 2026] [:error] [pid 54231:tid 54249] [client 20.100.197.204:21595] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/system.php"] [unique_id "aaE1FuTvb5AeyJCdY7C1sQAAAE8"]
[Fri Feb 27 14:09:26.544187 2026] [:error] [pid 52073:tid 52076] [client 20.100.197.204:37710] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/system.php"] [unique_id "aaE1Foa650YPyxXVeRYJRwAAAYA"]
[Fri Feb 27 14:09:27.077752 2026] [:error] [pid 54103:tid 54181] [client 20.100.197.204:51409] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/new.php"] [unique_id "aaE1F-vG4MPCmE0B2sBiCAAAAMo"]
[Fri Feb 27 14:09:27.639935 2026] [:error] [pid 52073:tid 52100] [client 20.100.197.204:52272] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/new.php"] [unique_id "aaE1F4a650YPyxXVeRYJUAAAAZg"]
[Fri Feb 27 14:09:28.163301 2026] [:error] [pid 52073:tid 52081] [client 20.100.197.204:12612] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/new.php"] [unique_id "aaE1GIa650YPyxXVeRYJUwAAAYU"]
[Fri Feb 27 14:09:28.815283 2026] [:error] [pid 62998:tid 63013] [client 20.100.197.204:32694] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/new.php"] [unique_id "aaE1GFQeueXZDUmoLonN8gAAAQs"]
[Fri Feb 27 14:09:29.344901 2026] [:error] [pid 56075:tid 56096] [client 20.100.197.204:56945] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aaE1GcKBhrfI6KNv9Rj3DQAAABI"]
[Fri Feb 27 14:09:29.913190 2026] [:error] [pid 56075:tid 56080] [client 20.100.197.204:51437] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aaE1GcKBhrfI6KNv9Rj3EQAAAAM"]
[Fri Feb 27 14:09:30.467632 2026] [:error] [pid 62998:tid 63001] [client 20.100.197.204:12747] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aaE1GlQeueXZDUmoLonN9QAAAQA"]
[Fri Feb 27 14:09:31.051701 2026] [:error] [pid 54231:tid 54251] [client 20.100.197.204:9037] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aaE1G-Tvb5AeyJCdY7C1tgAAAFE"]
[Fri Feb 27 14:09:31.574102 2026] [:error] [pid 49306:tid 49320] [client 20.100.197.204:9061] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaE1G_nSUDZue59Px9spuAAAAUw"]
[Fri Feb 27 14:09:32.129643 2026] [:error] [pid 56075:tid 56095] [client 20.100.197.204:37738] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaE1HMKBhrfI6KNv9Rj3FgAAABE"]
[Fri Feb 27 14:09:32.653068 2026] [:error] [pid 49306:tid 49315] [client 20.100.197.204:7830] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaE1HPnSUDZue59Px9spuQAAAUc"]
[Fri Feb 27 14:09:33.172056 2026] [:error] [pid 56075:tid 56082] [client 20.100.197.204:7372] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaE1HcKBhrfI6KNv9Rj3FwAAAAU"]
[Fri Feb 27 14:09:33.690622 2026] [:error] [pid 49306:tid 49328] [client 20.100.197.204:7363] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/pe9rsn.php"] [unique_id "aaE1HfnSUDZue59Px9spvwAAAVQ"]
[Fri Feb 27 14:09:34.269954 2026] [:error] [pid 54231:tid 54245] [client 20.100.197.204:21511] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/pe9rsn.php"] [unique_id "aaE1HuTvb5AeyJCdY7C1vAAAAEs"]
[Fri Feb 27 14:09:34.797529 2026] [:error] [pid 49306:tid 49309] [client 20.100.197.204:37736] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/pe9rsn.php"] [unique_id "aaE1HvnSUDZue59Px9spwgAAAUE"]
[Fri Feb 27 14:09:35.348195 2026] [:error] [pid 56075:tid 56100] [client 20.100.197.204:32640] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/pe9rsn.php"] [unique_id "aaE1H8KBhrfI6KNv9Rj3GwAAABY"]
[Fri Feb 27 14:09:36.010749 2026] [:error] [pid 52073:tid 52084] [client 20.100.197.204:13151] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaE1IIa650YPyxXVeRYJbQAAAYg"]
[Fri Feb 27 14:09:36.704298 2026] [:error] [pid 56075:tid 56093] [client 20.100.197.204:37745] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaE1IMKBhrfI6KNv9Rj3HgAAAA8"]
[Fri Feb 27 14:09:37.405559 2026] [:error] [pid 56075:tid 56085] [client 20.100.197.204:52762] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaE1IcKBhrfI6KNv9Rj3IAAAAAg"]
[Fri Feb 27 14:09:37.947793 2026] [:error] [pid 54101:tid 54121] [client 20.100.197.204:21572] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaE1IVY5qgRktcYTGFsTbgAAAc0"]
[Fri Feb 27 14:09:38.553159 2026] [:error] [pid 52073:tid 52092] [client 20.100.197.204:51253] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aaE1Ioa650YPyxXVeRYJcwAAAZA"]
[Fri Feb 27 14:09:39.221332 2026] [:error] [pid 54103:tid 54179] [client 20.100.197.204:52768] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aaE1I-vG4MPCmE0B2sBiEwAAAMg"]
[Fri Feb 27 14:09:39.917617 2026] [:error] [pid 49306:tid 49316] [client 20.100.197.204:32700] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aaE1I_nSUDZue59Px9sp0AAAAUg"]
[Fri Feb 27 14:09:40.930467 2026] [:error] [pid 62998:tid 63004] [client 20.100.197.204:7423] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aaE1JFQeueXZDUmoLonN_AAAAQI"]
[Fri Feb 27 14:09:41.468762 2026] [:error] [pid 54231:tid 54256] [client 20.100.197.204:51243] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/special.php"] [unique_id "aaE1JeTvb5AeyJCdY7C1wwAAAFY"]
[Fri Feb 27 14:09:42.214913 2026] [:error] [pid 52073:tid 52092] [client 20.100.197.204:9086] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/special.php"] [unique_id "aaE1Joa650YPyxXVeRYJhwAAAZA"]
[Fri Feb 27 14:09:42.974984 2026] [:error] [pid 49306:tid 49320] [client 20.100.197.204:32673] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/special.php"] [unique_id "aaE1JvnSUDZue59Px9sp2AAAAUw"]
[Fri Feb 27 14:09:43.567610 2026] [:error] [pid 56075:tid 56095] [client 20.100.197.204:32682] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/special.php"] [unique_id "aaE1J8KBhrfI6KNv9Rj3JgAAABE"]
[Fri Feb 27 14:09:44.165131 2026] [:error] [pid 54231:tid 54234] [client 20.100.197.204:24087] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bak.php"] [unique_id "aaE1KOTvb5AeyJCdY7C1zwAAAEA"]
[Fri Feb 27 14:09:44.876828 2026] [:error] [pid 62998:tid 63010] [client 20.100.197.204:5027] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bak.php"] [unique_id "aaE1KFQeueXZDUmoLonOAgAAAQg"]
[Fri Feb 27 14:09:45.684748 2026] [:error] [pid 49306:tid 49323] [client 20.100.197.204:7396] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bak.php"] [unique_id "aaE1KfnSUDZue59Px9sp3QAAAU8"]
[Fri Feb 27 14:09:46.286077 2026] [:error] [pid 56075:tid 56099] [client 20.100.197.204:12671] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bak.php"] [unique_id "aaE1KsKBhrfI6KNv9Rj3LgAAABU"]
[Fri Feb 27 14:09:47.003902 2026] [:error] [pid 56075:tid 56087] [client 20.100.197.204:52230] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaE1K8KBhrfI6KNv9Rj3MQAAAAo"]
[Fri Feb 27 14:09:47.572141 2026] [:error] [pid 56075:tid 56101] [client 20.100.197.204:4814] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaE1K8KBhrfI6KNv9Rj3NAAAABc"]
[Fri Feb 27 14:09:48.104648 2026] [:error] [pid 56075:tid 56091] [client 20.100.197.204:24112] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaE1LMKBhrfI6KNv9Rj3OQAAAA0"]
[Fri Feb 27 14:09:48.653743 2026] [:error] [pid 56075:tid 56082] [client 20.100.197.204:7413] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/upgrade/about.php"] [unique_id "aaE1LMKBhrfI6KNv9Rj3PAAAAAU"]
[Fri Feb 27 14:09:49.183731 2026] [:error] [pid 56075:tid 56100] [client 20.100.197.204:7406] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaE1LcKBhrfI6KNv9Rj3QAAAABY"]
[Fri Feb 27 14:09:49.710663 2026] [:error] [pid 56075:tid 56085] [client 20.100.197.204:31287] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaE1LcKBhrfI6KNv9Rj3RAAAAAg"]
[Fri Feb 27 14:09:50.260980 2026] [:error] [pid 56075:tid 56097] [client 20.100.197.204:7379] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaE1LsKBhrfI6KNv9Rj3SQAAABM"]
[Fri Feb 27 14:09:50.804269 2026] [:error] [pid 54231:tid 54239] [client 20.100.197.204:21607] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaE1LuTvb5AeyJCdY7C12AAAAEU"]
[Fri Feb 27 14:09:51.421164 2026] [:error] [pid 49306:tid 49322] [client 20.100.197.204:52761] [client 20.100.197.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaE1L_nSUDZue59Px9sp5AAAAU4"]
[Fri Feb 27 14:09:52.010952 2026] [:error] [pid 49306:tid 49321] [client 20.100.197.204:46240] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aaE1MPnSUDZue59Px9sp5gAAAU0"]
[Fri Feb 27 14:09:52.578337 2026] [:error] [pid 49306:tid 49316] [client 20.100.197.204:7373] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aaE1MPnSUDZue59Px9sp6QAAAUg"]
[Fri Feb 27 14:09:53.207730 2026] [:error] [pid 52073:tid 52080] [client 20.100.197.204:31287] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aaE1MYa650YPyxXVeRYJlQAAAYQ"]
[Fri Feb 27 14:09:53.737897 2026] [:error] [pid 52073:tid 52090] [client 20.100.197.204:44894] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aaE1MYa650YPyxXVeRYJlgAAAY4"]
[Fri Feb 27 14:09:54.262577 2026] [:error] [pid 49306:tid 49314] [client 20.100.197.204:51257] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-monamon.php"] [unique_id "aaE1MvnSUDZue59Px9sp8AAAAUY"]
[Fri Feb 27 14:09:54.806668 2026] [:error] [pid 49306:tid 49311] [client 20.100.197.204:12687] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-monamon.php"] [unique_id "aaE1MvnSUDZue59Px9sp8wAAAUM"]
[Fri Feb 27 14:09:55.351531 2026] [:error] [pid 54102:tid 54157] [client 20.100.197.204:44920] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-monamon.php"] [unique_id "aaE1M3i74D4fiYUm_Gc5AAAAAI0"]
[Fri Feb 27 14:09:55.874599 2026] [:error] [pid 49306:tid 49321] [client 20.100.197.204:12720] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-monamon.php"] [unique_id "aaE1M_nSUDZue59Px9sp-gAAAU0"]
[Fri Feb 27 14:09:56.417754 2026] [:error] [pid 52073:tid 52078] [client 20.100.197.204:37753] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/"] [unique_id "aaE1NIa650YPyxXVeRYJmgAAAYI"]
[Fri Feb 27 14:09:56.972144 2026] [:error] [pid 56075:tid 56086] [client 20.100.197.204:55601] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/"] [unique_id "aaE1NMKBhrfI6KNv9Rj3VwAAAAk"]
[Fri Feb 27 14:10:04.439822 2026] [:error] [pid 56075:tid 56085] [client 20.100.197.204:49003] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaE1PMKBhrfI6KNv9Rj3ZwAAAAg"]
[Fri Feb 27 14:10:04.968924 2026] [:error] [pid 62998:tid 63026] [client 20.100.197.204:21588] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaE1PFQeueXZDUmoLonOEAAAARg"]
[Fri Feb 27 14:10:05.498176 2026] [:error] [pid 54103:tid 54175] [client 20.100.197.204:48990] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaE1PevG4MPCmE0B2sBiIQAAAMQ"]
[Fri Feb 27 14:10:06.030204 2026] [:error] [pid 54103:tid 54189] [client 20.100.197.204:7367] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaE1PuvG4MPCmE0B2sBiJQAAANI"]
[Fri Feb 27 14:10:06.560449 2026] [:error] [pid 54103:tid 54173] [client 20.100.197.204:55569] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aaE1PuvG4MPCmE0B2sBiJgAAAMI"]
[Fri Feb 27 14:10:07.201239 2026] [:error] [pid 54102:tid 54164] [client 20.100.197.204:55592] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aaE1P3i74D4fiYUm_Gc5BgAAAJQ"]
[Fri Feb 27 14:10:07.723998 2026] [:error] [pid 54103:tid 54187] [client 20.100.197.204:21111] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aaE1P-vG4MPCmE0B2sBiKAAAANA"]
[Fri Feb 27 14:10:08.257137 2026] [:error] [pid 54101:tid 54127] [client 20.100.197.204:56903] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aaE1QFY5qgRktcYTGFsTdAAAAdM"]
[Fri Feb 27 14:10:08.795335 2026] [:error] [pid 52073:tid 52084] [client 20.100.197.204:9057] [client 20.100.197.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaE1QIa650YPyxXVeRYJwAAAAYg"]
[Fri Feb 27 14:10:09.332581 2026] [:error] [pid 49306:tid 49331] [client 20.100.197.204:7845] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/d2.php"] [unique_id "aaE1QfnSUDZue59Px9sqGAAAAVc"]
[Fri Feb 27 14:10:09.857800 2026] [:error] [pid 49306:tid 49329] [client 20.100.197.204:34102] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/d2.php"] [unique_id "aaE1QfnSUDZue59Px9sqHwAAAVU"]
[Fri Feb 27 14:10:10.398622 2026] [:error] [pid 52073:tid 52095] [client 20.100.197.204:21609] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/d2.php"] [unique_id "aaE1Qoa650YPyxXVeRYJwwAAAZM"]
[Fri Feb 27 14:10:10.950250 2026] [:error] [pid 52073:tid 52092] [client 20.100.197.204:21090] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/new/index.php"] [unique_id "aaE1Qoa650YPyxXVeRYJxQAAAZA"]
[Fri Feb 27 14:10:11.476421 2026] [:error] [pid 49306:tid 49327] [client 20.100.197.204:5035] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/new/index.php"] [unique_id "aaE1Q_nSUDZue59Px9sqIQAAAVM"]
[Fri Feb 27 14:10:12.017958 2026] [:error] [pid 49306:tid 49317] [client 20.100.197.204:21079] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/new/index.php"] [unique_id "aaE1RPnSUDZue59Px9sqJAAAAUk"]
[Fri Feb 27 14:10:12.564811 2026] [:error] [pid 49306:tid 49310] [client 20.100.197.204:44875] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/new/index.php"] [unique_id "aaE1RPnSUDZue59Px9sqJQAAAUI"]
[Fri Feb 27 14:10:13.084917 2026] [:error] [pid 49306:tid 49325] [client 20.100.197.204:21092] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/assets/css/dist/"] [unique_id "aaE1RfnSUDZue59Px9sqKQAAAVE"]
[Fri Feb 27 14:10:13.624087 2026] [:error] [pid 56075:tid 56099] [client 20.100.197.204:32684] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/assets/css/dist/"] [unique_id "aaE1RcKBhrfI6KNv9Rj3bQAAABU"]
[Fri Feb 27 14:10:14.155279 2026] [:error] [pid 49306:tid 49318] [client 20.100.197.204:12689] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/assets/css/dist/"] [unique_id "aaE1RvnSUDZue59Px9sqLgAAAUo"]
[Fri Feb 27 14:10:14.692531 2026] [:error] [pid 49306:tid 49321] [client 20.100.197.204:5048] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/assets/css/dist/"] [unique_id "aaE1RvnSUDZue59Px9sqLwAAAU0"]
[Fri Feb 27 14:10:15.237364 2026] [:error] [pid 52073:tid 52076] [client 20.100.197.204:48674] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aaE1R4a650YPyxXVeRYJ0QAAAYA"]
[Fri Feb 27 14:10:15.801744 2026] [:error] [pid 56075:tid 56095] [client 20.100.197.204:32672] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aaE1R8KBhrfI6KNv9Rj3cgAAABE"]
[Fri Feb 27 14:10:16.328455 2026] [:error] [pid 62998:tid 63019] [client 20.100.197.204:52754] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aaE1SFQeueXZDUmoLonOEwAAARE"]
[Fri Feb 27 14:10:16.882862 2026] [:error] [pid 56075:tid 56081] [client 20.100.197.204:7400] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aaE1SMKBhrfI6KNv9Rj3eQAAAAQ"]
[Fri Feb 27 14:10:17.433494 2026] [:error] [pid 54103:tid 54170] [client 20.100.197.204:52773] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/products/about.php"] [unique_id "aaE1SevG4MPCmE0B2sBiLgAAAMA"]
[Fri Feb 27 14:10:18.022643 2026] [:error] [pid 49306:tid 49327] [client 20.100.197.204:52799] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/products/about.php"] [unique_id "aaE1SvnSUDZue59Px9sqMwAAAVM"]
[Fri Feb 27 14:10:18.601301 2026] [:error] [pid 54231:tid 54237] [client 20.100.197.204:21589] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/products/about.php"] [unique_id "aaE1SuTvb5AeyJCdY7C16AAAAEM"]
[Fri Feb 27 14:10:19.173908 2026] [:error] [pid 54101:tid 54112] [client 20.100.197.204:32703] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/products/about.php"] [unique_id "aaE1S1Y5qgRktcYTGFsTdgAAAcQ"]
[Fri Feb 27 14:10:19.767158 2026] [:error] [pid 52073:tid 52092] [client 20.100.197.204:21116] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aaE1S4a650YPyxXVeRYJ1QAAAZA"]
[Fri Feb 27 14:10:20.464290 2026] [:error] [pid 54102:tid 54156] [client 20.100.197.204:21608] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aaE1THi74D4fiYUm_Gc5CgAAAIw"]
[Fri Feb 27 14:10:21.000882 2026] [:error] [pid 54103:tid 54175] [client 20.100.197.204:5022] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aaE1TOvG4MPCmE0B2sBiMQAAAMQ"]
[Fri Feb 27 14:10:21.541789 2026] [:error] [pid 49306:tid 49329] [client 20.100.197.204:21107] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aaE1TfnSUDZue59Px9sqOgAAAVU"]
[Fri Feb 27 14:10:22.067499 2026] [:error] [pid 62998:tid 63002] [client 20.100.197.204:21106] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aaE1TlQeueXZDUmoLonOFQAAAQE"]
[Fri Feb 27 14:10:22.597166 2026] [:error] [pid 56075:tid 56099] [client 20.100.197.204:5037] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aaE1TsKBhrfI6KNv9Rj3fQAAABU"]
[Fri Feb 27 14:10:23.127095 2026] [:error] [pid 54102:tid 54145] [client 20.100.197.204:32699] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aaE1T3i74D4fiYUm_Gc5DQAAAIE"]
[Fri Feb 27 14:10:23.666172 2026] [:error] [pid 54102:tid 54168] [client 20.100.197.204:21597] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aaE1T3i74D4fiYUm_Gc5DgAAAJc"]
[Fri Feb 27 14:10:24.223392 2026] [:error] [pid 54231:tid 54258] [client 20.100.197.204:11145] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wc49.php"] [unique_id "aaE1UOTvb5AeyJCdY7C16wAAAFg"]
[Fri Feb 27 14:10:24.882255 2026] [:error] [pid 54103:tid 54189] [client 20.100.197.204:32673] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wc49.php"] [unique_id "aaE1UOvG4MPCmE0B2sBiNQAAANI"]
[Fri Feb 27 14:10:25.453054 2026] [:error] [pid 54102:tid 54147] [client 20.100.197.204:32665] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wc49.php"] [unique_id "aaE1UXi74D4fiYUm_Gc5EQAAAIM"]
[Fri Feb 27 14:10:25.993201 2026] [:error] [pid 54231:tid 54249] [client 20.100.197.204:11145] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wc49.php"] [unique_id "aaE1UeTvb5AeyJCdY7C17AAAAE8"]
[Fri Feb 27 14:10:26.544610 2026] [:error] [pid 54231:tid 54235] [client 20.100.197.204:7826] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/TL.php"] [unique_id "aaE1UuTvb5AeyJCdY7C17QAAAEE"]
[Fri Feb 27 14:10:27.080040 2026] [:error] [pid 56075:tid 56097] [client 20.100.197.204:5000] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/TL.php"] [unique_id "aaE1U8KBhrfI6KNv9Rj3ggAAABM"]
[Fri Feb 27 14:10:27.610056 2026] [:error] [pid 62998:tid 63018] [client 20.100.197.204:19566] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/TL.php"] [unique_id "aaE1U1QeueXZDUmoLonOFwAAARA"]
[Fri Feb 27 14:10:28.176849 2026] [:error] [pid 54231:tid 54243] [client 20.100.197.204:4992] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/TL.php"] [unique_id "aaE1VOTvb5AeyJCdY7C18AAAAEk"]
[Fri Feb 27 14:10:28.718989 2026] [:error] [pid 49306:tid 49309] [client 20.100.197.204:55560] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sys.php"] [unique_id "aaE1VPnSUDZue59Px9sqRgAAAUE"]
[Fri Feb 27 14:10:29.246465 2026] [:error] [pid 52073:tid 52081] [client 20.100.197.204:31257] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sys.php"] [unique_id "aaE1VYa650YPyxXVeRYJ4gAAAYU"]
[Fri Feb 27 14:10:29.784994 2026] [:error] [pid 49306:tid 49329] [client 20.100.197.204:55606] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sys.php"] [unique_id "aaE1VfnSUDZue59Px9sqSQAAAVU"]
[Fri Feb 27 14:10:30.374166 2026] [:error] [pid 52073:tid 52092] [client 20.100.197.204:47791] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sys.php"] [unique_id "aaE1Voa650YPyxXVeRYJ5AAAAZA"]
[Fri Feb 27 14:10:30.902456 2026] [:error] [pid 52073:tid 52091] [client 20.100.197.204:32687] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fck.php"] [unique_id "aaE1Voa650YPyxXVeRYJ6AAAAY8"]
[Fri Feb 27 14:10:31.455586 2026] [:error] [pid 49306:tid 49313] [client 20.100.197.204:47799] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fck.php"] [unique_id "aaE1V_nSUDZue59Px9sqSwAAAUU"]
[Fri Feb 27 14:10:31.974442 2026] [:error] [pid 49306:tid 49321] [client 20.100.197.204:47804] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fck.php"] [unique_id "aaE1V_nSUDZue59Px9sqTAAAAU0"]
[Fri Feb 27 14:10:32.515649 2026] [:error] [pid 49306:tid 49330] [client 20.100.197.204:21578] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fck.php"] [unique_id "aaE1WPnSUDZue59Px9sqTgAAAVY"]
[Fri Feb 27 14:10:33.053581 2026] [:error] [pid 52073:tid 52099] [client 20.100.197.204:32674] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x123x.php"] [unique_id "aaE1WYa650YPyxXVeRYJ7QAAAZc"]
[Fri Feb 27 14:10:33.607611 2026] [:error] [pid 54231:tid 54250] [client 20.100.197.204:56635] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x123x.php"] [unique_id "aaE1WeTvb5AeyJCdY7C18gAAAFA"]
[Fri Feb 27 14:10:34.138027 2026] [:error] [pid 49306:tid 49327] [client 20.100.197.204:21585] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x123x.php"] [unique_id "aaE1WvnSUDZue59Px9sqVAAAAVM"]
[Fri Feb 27 14:10:34.657243 2026] [:error] [pid 49306:tid 49310] [client 20.100.197.204:21083] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x123x.php"] [unique_id "aaE1WvnSUDZue59Px9sqVgAAAUI"]
[Fri Feb 27 14:10:35.178018 2026] [:error] [pid 56075:tid 56094] [client 20.100.197.204:56625] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-michan.php"] [unique_id "aaE1W8KBhrfI6KNv9Rj3iAAAABA"]
[Fri Feb 27 14:10:35.700837 2026] [:error] [pid 49306:tid 49309] [client 20.100.197.204:47762] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-michan.php"] [unique_id "aaE1W_nSUDZue59Px9sqWAAAAUE"]
[Fri Feb 27 14:10:36.238303 2026] [:error] [pid 49306:tid 49325] [client 20.100.197.204:19550] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-michan.php"] [unique_id "aaE1XPnSUDZue59Px9sqWwAAAVE"]
[Fri Feb 27 14:10:36.776783 2026] [:error] [pid 49306:tid 49320] [client 20.100.197.204:15652] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-michan.php"] [unique_id "aaE1XPnSUDZue59Px9sqYwAAAUw"]
[Fri Feb 27 14:10:37.295565 2026] [:error] [pid 54103:tid 54181] [client 20.100.197.204:19530] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nw2.php"] [unique_id "aaE1XevG4MPCmE0B2sBiOgAAAMo"]
[Fri Feb 27 14:10:37.813868 2026] [:error] [pid 62998:tid 63012] [client 20.100.197.204:55559] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nw2.php"] [unique_id "aaE1XVQeueXZDUmoLonOGgAAAQo"]
[Fri Feb 27 14:10:38.361803 2026] [:error] [pid 54103:tid 54192] [client 20.100.197.204:51033] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nw2.php"] [unique_id "aaE1XuvG4MPCmE0B2sBiPAAAANU"]
[Fri Feb 27 14:10:38.880411 2026] [:error] [pid 52073:tid 52100] [client 20.100.197.204:1461] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nw2.php"] [unique_id "aaE1Xoa650YPyxXVeRYJ_AAAAZg"]
[Fri Feb 27 14:10:39.399591 2026] [:error] [pid 49306:tid 49323] [client 20.100.197.204:51368] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/blackmini.php"] [unique_id "aaE1X_nSUDZue59Px9sqlQAAAU8"]
[Fri Feb 27 14:10:39.921352 2026] [:error] [pid 54231:tid 54253] [client 20.100.197.204:21068] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/blackmini.php"] [unique_id "aaE1X-Tvb5AeyJCdY7C19wAAAFM"]
[Fri Feb 27 14:10:40.459895 2026] [:error] [pid 52073:tid 52097] [client 20.100.197.204:5023] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/blackmini.php"] [unique_id "aaE1YIa650YPyxXVeRYKAwAAAZU"]
[Fri Feb 27 14:10:41.039567 2026] [:error] [pid 52073:tid 52091] [client 20.100.197.204:55557] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/blackmini.php"] [unique_id "aaE1YYa650YPyxXVeRYKBQAAAY8"]
[Fri Feb 27 14:10:41.565371 2026] [:error] [pid 56075:tid 56101] [client 20.100.197.204:50617] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "aaE1YcKBhrfI6KNv9Rj3jwAAABc"]
[Fri Feb 27 14:10:42.088306 2026] [:error] [pid 54101:tid 54116] [client 20.100.197.204:50579] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "aaE1YlY5qgRktcYTGFsTegAAAcg"]
[Fri Feb 27 14:10:42.611595 2026] [:error] [pid 54102:tid 54158] [client 20.100.197.204:50562] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "aaE1Yni74D4fiYUm_Gc5FgAAAI4"]
[Fri Feb 27 14:10:43.128097 2026] [:error] [pid 56075:tid 56100] [client 20.100.197.204:50576] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "aaE1Y8KBhrfI6KNv9Rj3lAAAABY"]
[Fri Feb 27 14:10:43.649099 2026] [:error] [pid 54101:tid 54119] [client 20.100.197.204:51069] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/F19.php"] [unique_id "aaE1Y1Y5qgRktcYTGFsTfAAAAcs"]
[Fri Feb 27 14:10:44.177473 2026] [:error] [pid 49306:tid 49321] [client 20.100.197.204:47754] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/F19.php"] [unique_id "aaE1ZPnSUDZue59Px9sqmgAAAU0"]
[Fri Feb 27 14:10:44.720688 2026] [:error] [pid 49306:tid 49317] [client 20.100.197.204:51373] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/F19.php"] [unique_id "aaE1ZPnSUDZue59Px9sqmwAAAUk"]
[Fri Feb 27 14:10:45.331961 2026] [:error] [pid 56075:tid 56095] [client 20.100.197.204:47795] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/F19.php"] [unique_id "aaE1ZcKBhrfI6KNv9Rj3lQAAABE"]
[Fri Feb 27 14:10:45.854580 2026] [:error] [pid 49306:tid 49319] [client 20.100.197.204:7657] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/F1.php"] [unique_id "aaE1ZfnSUDZue59Px9sqoAAAAUs"]
[Fri Feb 27 14:10:46.385967 2026] [:error] [pid 56075:tid 56078] [client 20.100.197.204:51328] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/F1.php"] [unique_id "aaE1ZsKBhrfI6KNv9Rj3mAAAAAE"]
[Fri Feb 27 14:10:46.907443 2026] [:error] [pid 52073:tid 52094] [client 20.100.197.204:56601] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/F1.php"] [unique_id "aaE1Zoa650YPyxXVeRYKDQAAAZI"]
[Fri Feb 27 14:10:47.457809 2026] [:error] [pid 54231:tid 54258] [client 20.100.197.204:15649] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/F1.php"] [unique_id "aaE1Z-Tvb5AeyJCdY7C1_wAAAFg"]
[Fri Feb 27 14:10:48.039565 2026] [:error] [pid 62998:tid 63007] [client 20.100.197.204:56578] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aaE1aFQeueXZDUmoLonOHwAAAQU"]
[Fri Feb 27 14:10:48.563224 2026] [:error] [pid 62998:tid 63016] [client 20.100.197.204:19529] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aaE1aFQeueXZDUmoLonOIAAAAQ4"]
[Fri Feb 27 14:10:49.081256 2026] [:error] [pid 54231:tid 54254] [client 20.100.197.204:51066] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aaE1aeTvb5AeyJCdY7C2AgAAAFQ"]
[Fri Feb 27 14:10:49.613803 2026] [:error] [pid 62998:tid 63013] [client 20.100.197.204:4996] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aaE1aVQeueXZDUmoLonOIgAAAQs"]
[Fri Feb 27 14:10:50.157303 2026] [:error] [pid 49306:tid 49322] [client 20.100.197.204:19554] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/R57.php"] [unique_id "aaE1avnSUDZue59Px9sqsQAAAU4"]
[Fri Feb 27 14:10:50.681834 2026] [:error] [pid 56075:tid 56082] [client 20.100.197.204:11149] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/R57.php"] [unique_id "aaE1asKBhrfI6KNv9Rj3ngAAAAU"]
[Fri Feb 27 14:10:51.249365 2026] [:error] [pid 54101:tid 54121] [client 20.100.197.204:50603] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/R57.php"] [unique_id "aaE1a1Y5qgRktcYTGFsTfgAAAc0"]
[Fri Feb 27 14:10:51.765999 2026] [:error] [pid 49306:tid 49314] [client 20.100.197.204:55582] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/R57.php"] [unique_id "aaE1a_nSUDZue59Px9sqsgAAAUY"]
[Fri Feb 27 14:10:52.309371 2026] [:error] [pid 62998:tid 63019] [client 20.100.197.204:51348] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/4h.php"] [unique_id "aaE1bFQeueXZDUmoLonOJgAAARE"]
[Fri Feb 27 14:10:52.851468 2026] [:error] [pid 62998:tid 63002] [client 20.100.197.204:47785] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/4h.php"] [unique_id "aaE1bFQeueXZDUmoLonOKAAAAQE"]
[Fri Feb 27 14:10:53.377741 2026] [:error] [pid 49306:tid 49327] [client 20.100.197.204:15624] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/4h.php"] [unique_id "aaE1bfnSUDZue59Px9sqtwAAAVM"]
[Fri Feb 27 14:10:53.899058 2026] [:error] [pid 49306:tid 49312] [client 20.100.197.204:9050] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/4h.php"] [unique_id "aaE1bfnSUDZue59Px9squQAAAUQ"]
[Fri Feb 27 14:10:54.454953 2026] [:error] [pid 56075:tid 56092] [client 20.100.197.204:11181] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yussef.php"] [unique_id "aaE1bsKBhrfI6KNv9Rj3owAAAA4"]
[Fri Feb 27 14:10:54.998455 2026] [:error] [pid 52073:tid 52079] [client 20.100.197.204:5021] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yussef.php"] [unique_id "aaE1boa650YPyxXVeRYKFwAAAYM"]
[Fri Feb 27 14:10:55.599590 2026] [:error] [pid 49306:tid 49330] [client 20.100.197.204:51067] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yussef.php"] [unique_id "aaE1b_nSUDZue59Px9sqvwAAAVY"]
[Fri Feb 27 14:10:56.120729 2026] [:error] [pid 56075:tid 56082] [client 20.100.197.204:15656] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yussef.php"] [unique_id "aaE1cMKBhrfI6KNv9Rj3rQAAAAU"]
[Fri Feb 27 14:10:56.645955 2026] [:error] [pid 49306:tid 49323] [client 20.100.197.204:50568] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "aaE1cPnSUDZue59Px9sqwgAAAU8"]
[Fri Feb 27 14:10:57.203539 2026] [:error] [pid 56075:tid 56092] [client 20.100.197.204:51344] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "aaE1ccKBhrfI6KNv9Rj3tQAAAA4"]
[Fri Feb 27 14:10:57.834184 2026] [:error] [pid 56075:tid 56086] [client 20.100.197.204:15665] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "aaE1ccKBhrfI6KNv9Rj3ugAAAAk"]
[Fri Feb 27 14:10:58.376479 2026] [:error] [pid 52073:tid 52076] [client 20.100.197.204:19535] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "aaE1coa650YPyxXVeRYKGgAAAYA"]
[Fri Feb 27 14:10:58.953946 2026] [:error] [pid 49306:tid 49316] [client 20.100.197.204:56623] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "aaE1cvnSUDZue59Px9sqxQAAAUg"]
[Fri Feb 27 14:10:59.517715 2026] [:error] [pid 49306:tid 49308] [client 20.100.197.204:51029] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "aaE1c_nSUDZue59Px9sqywAAAUA"]
[Fri Feb 27 14:11:00.079648 2026] [:error] [pid 49306:tid 49330] [client 20.100.197.204:50586] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "aaE1dPnSUDZue59Px9sqzAAAAVY"]
[Fri Feb 27 14:11:00.681198 2026] [:error] [pid 52073:tid 52088] [client 20.100.197.204:56632] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "aaE1dIa650YPyxXVeRYKHwAAAYw"]
[Fri Feb 27 14:11:01.360695 2026] [:error] [pid 62998:tid 63004] [client 20.100.197.204:11174] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zu.php"] [unique_id "aaE1dVQeueXZDUmoLonOMQAAAQI"]
[Fri Feb 27 14:11:01.952905 2026] [:error] [pid 54231:tid 54251] [client 20.100.197.204:50563] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zu.php"] [unique_id "aaE1deTvb5AeyJCdY7C2BwAAAFE"]
[Fri Feb 27 14:11:02.581632 2026] [:error] [pid 54231:tid 54252] [client 20.100.197.204:51365] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zu.php"] [unique_id "aaE1duTvb5AeyJCdY7C2CAAAAFI"]
[Fri Feb 27 14:11:03.123212 2026] [:error] [pid 54231:tid 54255] [client 20.100.197.204:21096] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zu.php"] [unique_id "aaE1d-Tvb5AeyJCdY7C2CwAAAFU"]
[Fri Feb 27 14:11:03.682556 2026] [:error] [pid 62998:tid 63007] [client 20.100.197.204:51040] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "aaE1d1QeueXZDUmoLonOMwAAAQU"]
[Fri Feb 27 14:11:11.252727 2026] [:error] [pid 49306:tid 49308] [client 20.100.197.204:56597] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aaE1f_nSUDZue59Px9srAQAAAUA"]
[Fri Feb 27 14:11:11.872049 2026] [:error] [pid 54103:tid 54187] [client 20.100.197.204:15648] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aaE1f-vG4MPCmE0B2sBiRQAAANA"]
[Fri Feb 27 14:11:12.417088 2026] [:error] [pid 52073:tid 52079] [client 20.100.197.204:50572] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aaE1gIa650YPyxXVeRYKNwAAAYM"]
[Fri Feb 27 14:11:12.955988 2026] [:error] [pid 56075:tid 56092] [client 20.100.197.204:56591] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aaE1gMKBhrfI6KNv9Rj4BgAAAA4"]
[Fri Feb 27 14:11:13.509651 2026] [:error] [pid 52073:tid 52082] [client 20.100.197.204:56624] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/er.php"] [unique_id "aaE1gYa650YPyxXVeRYKOwAAAYY"]
[Fri Feb 27 14:11:14.044790 2026] [:error] [pid 62998:tid 63004] [client 20.100.197.204:24035] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/er.php"] [unique_id "aaE1glQeueXZDUmoLonOQwAAAQI"]
[Fri Feb 27 14:11:14.570548 2026] [:error] [pid 62998:tid 63022] [client 20.100.197.204:24013] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/er.php"] [unique_id "aaE1glQeueXZDUmoLonORQAAARQ"]
[Fri Feb 27 14:11:15.193966 2026] [:error] [pid 52073:tid 52098] [client 20.100.197.204:50596] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/er.php"] [unique_id "aaE1g4a650YPyxXVeRYKQgAAAZY"]
[Fri Feb 27 14:11:15.723088 2026] [:error] [pid 52073:tid 52085] [client 20.100.197.204:52268] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fault.php"] [unique_id "aaE1g4a650YPyxXVeRYKSAAAAYk"]
[Fri Feb 27 14:11:16.267800 2026] [:error] [pid 52073:tid 52077] [client 20.100.197.204:2598] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fault.php"] [unique_id "aaE1hIa650YPyxXVeRYKSQAAAYE"]
[Fri Feb 27 14:11:16.834637 2026] [:error] [pid 52073:tid 52084] [client 20.100.197.204:50622] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fault.php"] [unique_id "aaE1hIa650YPyxXVeRYKTQAAAYg"]
[Fri Feb 27 14:11:17.357543 2026] [:error] [pid 52073:tid 52097] [client 20.100.197.204:8938] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fault.php"] [unique_id "aaE1hYa650YPyxXVeRYKTgAAAZU"]
[Fri Feb 27 14:11:17.912138 2026] [:error] [pid 62998:tid 63019] [client 20.100.197.204:8923] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aaE1hVQeueXZDUmoLonOSQAAARE"]
[Fri Feb 27 14:11:18.444537 2026] [:error] [pid 62998:tid 63006] [client 20.100.197.204:50605] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aaE1hlQeueXZDUmoLonOTAAAAQQ"]
[Fri Feb 27 14:11:19.022328 2026] [:error] [pid 54101:tid 54123] [client 20.100.197.204:11151] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aaE1h1Y5qgRktcYTGFsTggAAAc8"]
[Fri Feb 27 14:11:19.547278 2026] [:error] [pid 62998:tid 63024] [client 20.100.197.204:55595] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aaE1h1QeueXZDUmoLonOUAAAARY"]
[Fri Feb 27 14:11:20.078081 2026] [:error] [pid 54231:tid 54242] [client 20.100.197.204:31470] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aaE1iOTvb5AeyJCdY7C2IAAAAEg"]
[Fri Feb 27 14:11:20.624520 2026] [:error] [pid 54231:tid 54236] [client 20.100.197.204:1267] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aaE1iOTvb5AeyJCdY7C2IQAAAEI"]
[Fri Feb 27 14:11:21.178306 2026] [:error] [pid 54231:tid 54237] [client 20.100.197.204:1458] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aaE1ieTvb5AeyJCdY7C2IwAAAEM"]
[Fri Feb 27 14:11:21.725079 2026] [:error] [pid 54231:tid 54239] [client 20.100.197.204:55362] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aaE1ieTvb5AeyJCdY7C2JgAAAEU"]
[Fri Feb 27 14:11:22.256619 2026] [:error] [pid 62998:tid 63019] [client 20.100.197.204:1390] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/leuk.php"] [unique_id "aaE1ilQeueXZDUmoLonOWwAAARE"]
[Fri Feb 27 14:11:22.814477 2026] [:error] [pid 49306:tid 49326] [client 20.100.197.204:26025] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/leuk.php"] [unique_id "aaE1ivnSUDZue59Px9srCgAAAVI"]
[Fri Feb 27 14:11:23.362935 2026] [:error] [pid 54102:tid 54162] [client 20.100.197.204:50564] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/leuk.php"] [unique_id "aaE1i3i74D4fiYUm_Gc5MQAAAJI"]
[Fri Feb 27 14:11:23.944797 2026] [:error] [pid 54102:tid 54165] [client 20.100.197.204:50613] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/leuk.php"] [unique_id "aaE1i3i74D4fiYUm_Gc5MwAAAJU"]
[Fri Feb 27 14:11:24.556080 2026] [:error] [pid 54102:tid 54159] [client 20.100.197.204:51065] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aaE1jHi74D4fiYUm_Gc5NgAAAI8"]
[Fri Feb 27 14:11:25.133132 2026] [:error] [pid 54231:tid 54250] [client 20.100.197.204:51013] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aaE1jeTvb5AeyJCdY7C2KgAAAFA"]
[Fri Feb 27 14:11:25.678110 2026] [:error] [pid 49306:tid 49310] [client 20.100.197.204:31466] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aaE1jfnSUDZue59Px9srDQAAAUI"]
[Fri Feb 27 14:11:26.329370 2026] [:error] [pid 54231:tid 54247] [client 20.100.197.204:1233] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aaE1juTvb5AeyJCdY7C2LQAAAE0"]
[Fri Feb 27 14:11:27.153868 2026] [:error] [pid 62998:tid 63001] [client 20.100.197.204:1236] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kolda.php"] [unique_id "aaE1j1QeueXZDUmoLonOYQAAAQA"]
[Fri Feb 27 14:11:27.821741 2026] [:error] [pid 52073:tid 52098] [client 20.100.197.204:1228] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kolda.php"] [unique_id "aaE1j4a650YPyxXVeRYKXAAAAZY"]
[Fri Feb 27 14:11:28.456482 2026] [:error] [pid 49306:tid 49318] [client 20.100.197.204:51387] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kolda.php"] [unique_id "aaE1kPnSUDZue59Px9srFwAAAUo"]
[Fri Feb 27 14:11:29.108403 2026] [:error] [pid 52073:tid 52094] [client 20.100.197.204:31707] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kolda.php"] [unique_id "aaE1kYa650YPyxXVeRYKYQAAAZI"]
[Fri Feb 27 14:11:29.646514 2026] [:error] [pid 52073:tid 52082] [client 20.100.197.204:24043] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "aaE1kYa650YPyxXVeRYKYwAAAYY"]
[Fri Feb 27 14:11:30.229412 2026] [:error] [pid 56075:tid 56080] [client 20.100.197.204:24047] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "aaE1ksKBhrfI6KNv9Rj4LQAAAAM"]
[Fri Feb 27 14:11:30.787275 2026] [:error] [pid 49306:tid 49309] [client 20.100.197.204:31424] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "aaE1kvnSUDZue59Px9srHAAAAUE"]
[Fri Feb 27 14:11:31.354256 2026] [:error] [pid 49306:tid 49308] [client 20.100.197.204:43964] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "aaE1k_nSUDZue59Px9srIQAAAUA"]
[Fri Feb 27 14:11:31.905999 2026] [:error] [pid 54103:tid 54187] [client 20.100.197.204:55366] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aaE1k-vG4MPCmE0B2sBiVwAAANA"]
[Fri Feb 27 14:11:32.438087 2026] [:error] [pid 56075:tid 56081] [client 20.100.197.204:50437] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aaE1lMKBhrfI6KNv9Rj4MQAAAAQ"]
[Fri Feb 27 14:11:32.974978 2026] [:error] [pid 49306:tid 49328] [client 20.100.197.204:1345] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aaE1lPnSUDZue59Px9srJAAAAVQ"]
[Fri Feb 27 14:11:33.553003 2026] [:error] [pid 49306:tid 49316] [client 20.100.197.204:1223] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aaE1lfnSUDZue59Px9srJwAAAUg"]
[Fri Feb 27 14:11:34.200097 2026] [:error] [pid 56075:tid 56082] [client 20.100.197.204:26034] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aaE1lsKBhrfI6KNv9Rj4NgAAAAU"]
[Fri Feb 27 14:11:34.725350 2026] [:error] [pid 56075:tid 56102] [client 20.100.197.204:11148] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aaE1lsKBhrfI6KNv9Rj4OAAAABg"]
[Fri Feb 27 14:11:35.473403 2026] [:error] [pid 56075:tid 56098] [client 20.100.197.204:8928] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aaE1l8KBhrfI6KNv9Rj4OwAAABQ"]
[Fri Feb 27 14:11:36.029166 2026] [:error] [pid 54102:tid 54154] [client 20.100.197.204:24016] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aaE1mHi74D4fiYUm_Gc5PAAAAIo"]
[Fri Feb 27 14:11:36.558358 2026] [:error] [pid 49306:tid 49311] [client 20.100.197.204:50478] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/un.php"] [unique_id "aaE1mPnSUDZue59Px9srKwAAAUM"]
[Fri Feb 27 14:11:37.146929 2026] [:error] [pid 49306:tid 49313] [client 20.100.197.204:26037] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/un.php"] [unique_id "aaE1mfnSUDZue59Px9srLAAAAUU"]
[Fri Feb 27 14:11:37.676818 2026] [:error] [pid 56075:tid 56080] [client 20.100.197.204:59093] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/un.php"] [unique_id "aaE1mcKBhrfI6KNv9Rj4QAAAAAM"]
[Fri Feb 27 14:11:38.336827 2026] [:error] [pid 49306:tid 49310] [client 20.100.197.204:31469] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/un.php"] [unique_id "aaE1mvnSUDZue59Px9srLwAAAUI"]
[Fri Feb 27 14:11:39.126145 2026] [:error] [pid 49306:tid 49319] [client 20.100.197.204:31702] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aaE1m_nSUDZue59Px9srMwAAAUs"]
[Fri Feb 27 14:11:39.913436 2026] [:error] [pid 49306:tid 49315] [client 20.100.197.204:25984] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aaE1m_nSUDZue59Px9srNgAAAUc"]
[Fri Feb 27 14:11:40.493925 2026] [:error] [pid 62998:tid 63019] [client 20.100.197.204:29557] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aaE1nFQeueXZDUmoLonOaQAAARE"]
[Fri Feb 27 14:11:41.185132 2026] [:error] [pid 52073:tid 52089] [client 20.100.197.204:31484] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aaE1nYa650YPyxXVeRYKdAAAAY0"]
[Fri Feb 27 14:11:41.746873 2026] [:error] [pid 52073:tid 52077] [client 20.100.197.204:24029] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aaE1nYa650YPyxXVeRYKdgAAAYE"]
[Fri Feb 27 14:11:42.395259 2026] [:error] [pid 52073:tid 52092] [client 20.100.197.204:43924] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aaE1noa650YPyxXVeRYKegAAAZA"]
[Fri Feb 27 14:11:42.952224 2026] [:error] [pid 52073:tid 52076] [client 20.100.197.204:2090] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aaE1noa650YPyxXVeRYKfwAAAYA"]
[Fri Feb 27 14:11:43.547141 2026] [:error] [pid 49306:tid 49308] [client 20.100.197.204:24001] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aaE1n_nSUDZue59Px9srPgAAAUA"]
[Fri Feb 27 14:11:44.154934 2026] [:error] [pid 49306:tid 49310] [client 20.100.197.204:59113] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aaE1oPnSUDZue59Px9srPwAAAUI"]
[Fri Feb 27 14:11:44.790631 2026] [:error] [pid 62998:tid 63026] [client 20.100.197.204:1364] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aaE1oFQeueXZDUmoLonOawAAARg"]
[Fri Feb 27 14:11:45.569544 2026] [:error] [pid 56075:tid 56101] [client 20.100.197.204:59128] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aaE1ocKBhrfI6KNv9Rj4SgAAABc"]
[Fri Feb 27 14:11:46.146932 2026] [:error] [pid 62998:tid 63015] [client 20.100.197.204:59123] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aaE1olQeueXZDUmoLonObwAAAQ0"]
[Fri Feb 27 14:11:46.973997 2026] [:error] [pid 56075:tid 56090] [client 20.100.197.204:31699] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/0.php"] [unique_id "aaE1osKBhrfI6KNv9Rj4UQAAAAw"]
[Fri Feb 27 14:11:47.580671 2026] [:error] [pid 52073:tid 52091] [client 20.100.197.204:8936] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/0.php"] [unique_id "aaE1o4a650YPyxXVeRYKkQAAAY8"]
[Fri Feb 27 14:11:48.162616 2026] [:error] [pid 52073:tid 52080] [client 20.100.197.204:2048] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/0.php"] [unique_id "aaE1pIa650YPyxXVeRYKnQAAAYQ"]
[Fri Feb 27 14:11:48.693802 2026] [:error] [pid 49306:tid 49313] [client 20.100.197.204:34130] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/0.php"] [unique_id "aaE1pPnSUDZue59Px9srTwAAAUU"]
[Fri Feb 27 14:11:49.334726 2026] [:error] [pid 52073:tid 52090] [client 20.100.197.204:8902] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aaE1pYa650YPyxXVeRYKowAAAY4"]
[Fri Feb 27 14:11:49.871573 2026] [:error] [pid 52073:tid 52100] [client 20.100.197.204:55423] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aaE1pYa650YPyxXVeRYKrwAAAZg"]
[Fri Feb 27 14:11:50.514989 2026] [:error] [pid 49306:tid 49308] [client 20.100.197.204:34175] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aaE1pvnSUDZue59Px9srUQAAAUA"]
[Fri Feb 27 14:11:51.039305 2026] [:error] [pid 49306:tid 49320] [client 20.100.197.204:29514] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aaE1p_nSUDZue59Px9srUgAAAUw"]
[Fri Feb 27 14:11:51.570595 2026] [:error] [pid 49306:tid 49322] [client 20.100.197.204:55407] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aaE1p_nSUDZue59Px9srWAAAAU4"]
[Fri Feb 27 14:11:52.114255 2026] [:error] [pid 54103:tid 54189] [client 20.100.197.204:2077] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aaE1qOvG4MPCmE0B2sBiYQAAANI"]
[Fri Feb 27 14:11:52.634534 2026] [:error] [pid 49306:tid 49317] [client 20.100.197.204:55391] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aaE1qPnSUDZue59Px9srXwAAAUk"]
[Fri Feb 27 14:11:53.187694 2026] [:error] [pid 49306:tid 49321] [client 20.100.197.204:59127] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aaE1qfnSUDZue59Px9srYgAAAU0"]
[Fri Feb 27 14:11:53.764925 2026] [:error] [pid 54102:tid 54144] [client 20.100.197.204:55402] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aaE1qXi74D4fiYUm_Gc5QAAAAIA"]
[Fri Feb 27 14:11:54.359431 2026] [:error] [pid 52073:tid 52091] [client 20.100.197.204:59115] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aaE1qoa650YPyxXVeRYK0QAAAY8"]
[Fri Feb 27 14:11:54.953985 2026] [:error] [pid 52073:tid 52077] [client 20.100.197.204:24037] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aaE1qoa650YPyxXVeRYK1AAAAYE"]
[Fri Feb 27 14:11:55.509169 2026] [:error] [pid 54231:tid 54239] [client 20.100.197.204:31696] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aaE1q-Tvb5AeyJCdY7C2RQAAAEU"]
[Fri Feb 27 14:11:56.028084 2026] [:error] [pid 54231:tid 54256] [client 20.100.197.204:59108] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "aaE1rOTvb5AeyJCdY7C2RwAAAFY"]
[Fri Feb 27 14:11:56.556057 2026] [:error] [pid 52073:tid 52098] [client 20.100.197.204:50465] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "aaE1rIa650YPyxXVeRYK2wAAAZY"]
[Fri Feb 27 14:11:57.094419 2026] [:error] [pid 62998:tid 63011] [client 20.100.197.204:2077] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "aaE1rVQeueXZDUmoLonOfAAAAQk"]
[Fri Feb 27 14:11:57.623328 2026] [:error] [pid 52073:tid 52093] [client 20.100.197.204:59075] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "aaE1rYa650YPyxXVeRYK4QAAAZE"]
[Fri Feb 27 14:11:58.144859 2026] [:error] [pid 52073:tid 52084] [client 20.100.197.204:31722] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a1vx.php"] [unique_id "aaE1roa650YPyxXVeRYK5AAAAYg"]
[Fri Feb 27 14:11:58.673074 2026] [:error] [pid 52073:tid 52099] [client 20.100.197.204:2082] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a1vx.php"] [unique_id "aaE1roa650YPyxXVeRYK5gAAAZc"]
[Fri Feb 27 14:11:59.199455 2026] [:error] [pid 52073:tid 52089] [client 20.100.197.204:26039] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a1vx.php"] [unique_id "aaE1r4a650YPyxXVeRYK6AAAAY0"]
[Fri Feb 27 14:11:59.783448 2026] [:error] [pid 54103:tid 54173] [client 20.100.197.204:2063] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a1vx.php"] [unique_id "aaE1r-vG4MPCmE0B2sBiZAAAAMI"]
[Fri Feb 27 14:12:00.325149 2026] [:error] [pid 54102:tid 54146] [client 20.100.197.204:29533] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aaE1sHi74D4fiYUm_Gc5QwAAAII"]
[Fri Feb 27 14:12:00.857837 2026] [:error] [pid 62998:tid 63026] [client 20.100.197.204:31703] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aaE1sFQeueXZDUmoLonOfwAAARg"]
[Fri Feb 27 14:12:01.384751 2026] [:error] [pid 52073:tid 52096] [client 20.100.197.204:50450] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aaE1sYa650YPyxXVeRYK6wAAAZQ"]
[Fri Feb 27 14:12:01.940889 2026] [:error] [pid 52073:tid 52091] [client 20.100.197.204:29533] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aaE1sYa650YPyxXVeRYK7wAAAY8"]
[Fri Feb 27 14:12:02.502971 2026] [:error] [pid 56075:tid 56100] [client 20.100.197.204:2101] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aaE1ssKBhrfI6KNv9Rj4iAAAABY"]
[Fri Feb 27 14:12:03.095510 2026] [:error] [pid 52073:tid 52097] [client 20.100.197.204:24865] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aaE1s4a650YPyxXVeRYK8AAAAZU"]
[Fri Feb 27 14:12:03.642619 2026] [:error] [pid 54103:tid 54180] [client 20.100.197.204:29563] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aaE1s-vG4MPCmE0B2sBiZQAAAMk"]
[Fri Feb 27 14:12:04.193494 2026] [:error] [pid 49306:tid 49312] [client 20.100.197.204:29518] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aaE1tPnSUDZue59Px9srdwAAAUQ"]
[Fri Feb 27 14:12:04.719086 2026] [:error] [pid 49306:tid 49316] [client 20.100.197.204:43923] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/06.php"] [unique_id "aaE1tPnSUDZue59Px9srewAAAUg"]
[Fri Feb 27 14:12:05.242517 2026] [:error] [pid 49306:tid 49324] [client 20.100.197.204:25490] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/06.php"] [unique_id "aaE1tfnSUDZue59Px9srgQAAAVA"]
[Fri Feb 27 14:12:05.798483 2026] [:error] [pid 52073:tid 52085] [client 20.100.197.204:21308] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/06.php"] [unique_id "aaE1tYa650YPyxXVeRYK8QAAAYk"]
[Fri Feb 27 14:12:06.326438 2026] [:error] [pid 49306:tid 49316] [client 20.100.197.204:29980] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/06.php"] [unique_id "aaE1tvnSUDZue59Px9srjgAAAUg"]
[Fri Feb 27 14:12:06.859683 2026] [:error] [pid 49306:tid 49320] [client 20.100.197.204:21274] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aaE1tvnSUDZue59Px9srlAAAAUw"]
[Fri Feb 27 14:12:07.439182 2026] [:error] [pid 49306:tid 49312] [client 20.100.197.204:22815] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aaE1t_nSUDZue59Px9srmQAAAUQ"]
[Fri Feb 27 14:12:07.977198 2026] [:error] [pid 49306:tid 49315] [client 20.100.197.204:21302] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aaE1t_nSUDZue59Px9srmwAAAUc"]
[Fri Feb 27 14:12:08.560323 2026] [:error] [pid 49306:tid 49330] [client 20.100.197.204:43102] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aaE1uPnSUDZue59Px9srnwAAAVY"]
[Fri Feb 27 14:12:09.115991 2026] [:error] [pid 52073:tid 52084] [client 20.100.197.204:56936] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fot.php"] [unique_id "aaE1uYa650YPyxXVeRYK8wAAAYg"]
[Fri Feb 27 14:12:09.638599 2026] [:error] [pid 52073:tid 52078] [client 20.100.197.204:24205] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fot.php"] [unique_id "aaE1uYa650YPyxXVeRYK-AAAAYI"]
[Fri Feb 27 14:12:17.995922 2026] [:error] [pid 49306:tid 49327] [client 20.100.197.204:26525] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/num.php"] [unique_id "aaE1wfnSUDZue59Px9srtgAAAVM"]
[Fri Feb 27 14:12:18.586639 2026] [:error] [pid 56075:tid 56079] [client 20.100.197.204:33680] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/num.php"] [unique_id "aaE1wsKBhrfI6KNv9Rj4nQAAAAI"]
[Fri Feb 27 14:12:19.110220 2026] [:error] [pid 56075:tid 56092] [client 20.100.197.204:7308] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/num.php"] [unique_id "aaE1w8KBhrfI6KNv9Rj4nwAAAA4"]
[Fri Feb 27 14:12:19.644216 2026] [:error] [pid 49306:tid 49328] [client 20.100.197.204:52691] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/num.php"] [unique_id "aaE1w_nSUDZue59Px9sryQAAAVQ"]
[Fri Feb 27 14:12:20.168817 2026] [:error] [pid 56075:tid 56091] [client 20.100.197.204:7113] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "aaE1xMKBhrfI6KNv9Rj4oAAAAA0"]
[Fri Feb 27 14:12:20.846098 2026] [:error] [pid 56075:tid 56085] [client 20.100.197.204:27130] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "aaE1xMKBhrfI6KNv9Rj4ogAAAAg"]
[Fri Feb 27 14:12:21.421782 2026] [:error] [pid 49306:tid 49329] [client 20.100.197.204:24704] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "aaE1xfnSUDZue59Px9sr2wAAAVU"]
[Fri Feb 27 14:12:21.958835 2026] [:error] [pid 56075:tid 56084] [client 20.100.197.204:7164] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "aaE1xcKBhrfI6KNv9Rj4qQAAAAc"]
[Fri Feb 27 14:12:22.509932 2026] [:error] [pid 49306:tid 49312] [client 20.100.197.204:53066] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vxrl.php"] [unique_id "aaE1xvnSUDZue59Px9sr4wAAAUQ"]
[Fri Feb 27 14:12:23.105403 2026] [:error] [pid 49306:tid 49329] [client 20.100.197.204:36321] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vxrl.php"] [unique_id "aaE1x_nSUDZue59Px9sr7wAAAVU"]
[Fri Feb 27 14:12:23.638541 2026] [:error] [pid 62998:tid 63012] [client 20.100.197.204:25436] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vxrl.php"] [unique_id "aaE1x1QeueXZDUmoLonOiwAAAQo"]
[Fri Feb 27 14:12:24.181943 2026] [:error] [pid 54231:tid 54239] [client 20.100.197.204:6967] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vxrl.php"] [unique_id "aaE1yOTvb5AeyJCdY7C2WgAAAEU"]
[Fri Feb 27 14:12:24.759765 2026] [:error] [pid 54103:tid 54188] [client 20.100.197.204:27075] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/in.php"] [unique_id "aaE1yOvG4MPCmE0B2sBiawAAANE"]
[Fri Feb 27 14:12:25.321327 2026] [:error] [pid 62998:tid 63019] [client 20.100.197.204:24767] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/in.php"] [unique_id "aaE1yVQeueXZDUmoLonOkAAAARE"]
[Fri Feb 27 14:12:25.944480 2026] [:error] [pid 56075:tid 56095] [client 20.100.197.204:29384] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/in.php"] [unique_id "aaE1ycKBhrfI6KNv9Rj4sQAAABE"]
[Fri Feb 27 14:12:26.536527 2026] [:error] [pid 56075:tid 56081] [client 20.100.197.204:10633] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/in.php"] [unique_id "aaE1ysKBhrfI6KNv9Rj4sgAAAAQ"]
[Fri Feb 27 14:12:27.148453 2026] [:error] [pid 52073:tid 52095] [client 20.100.197.204:57077] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/style.php"] [unique_id "aaE1y4a650YPyxXVeRYLIQAAAZM"]
[Fri Feb 27 14:12:27.715188 2026] [:error] [pid 52073:tid 52100] [client 20.100.197.204:57312] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/style.php"] [unique_id "aaE1y4a650YPyxXVeRYLJQAAAZg"]
[Fri Feb 27 14:12:28.353067 2026] [:error] [pid 52073:tid 52098] [client 20.100.197.204:10627] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/style.php"] [unique_id "aaE1zIa650YPyxXVeRYLKAAAAZY"]
[Fri Feb 27 14:12:28.891228 2026] [:error] [pid 52073:tid 52083] [client 20.100.197.204:57317] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/style.php"] [unique_id "aaE1zIa650YPyxXVeRYLLAAAAYc"]
[Fri Feb 27 14:12:29.417487 2026] [:error] [pid 56075:tid 56077] [client 20.100.197.204:57033] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aaE1zcKBhrfI6KNv9Rj4uAAAAAA"]
[Fri Feb 27 14:12:29.937001 2026] [:error] [pid 56075:tid 56097] [client 20.100.197.204:36333] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aaE1zcKBhrfI6KNv9Rj4ugAAABM"]
[Fri Feb 27 14:12:30.562673 2026] [:error] [pid 62998:tid 63012] [client 20.100.197.204:53059] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aaE1zlQeueXZDUmoLonOlQAAAQo"]
[Fri Feb 27 14:12:31.093008 2026] [:error] [pid 56075:tid 56102] [client 20.100.197.204:29383] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aaE1z8KBhrfI6KNv9Rj4vAAAABg"]
[Fri Feb 27 14:12:31.612600 2026] [:error] [pid 52073:tid 52095] [client 20.100.197.204:50071] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zwso.php"] [unique_id "aaE1z4a650YPyxXVeRYLMwAAAZM"]
[Fri Feb 27 14:12:32.151901 2026] [:error] [pid 52073:tid 52082] [client 20.100.197.204:53979] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zwso.php"] [unique_id "aaE10Ia650YPyxXVeRYLNQAAAYY"]
[Fri Feb 27 14:12:32.744489 2026] [:error] [pid 62998:tid 63004] [client 20.100.197.204:6482] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zwso.php"] [unique_id "aaE10FQeueXZDUmoLonOmwAAAQI"]
[Fri Feb 27 14:12:33.279774 2026] [:error] [pid 49306:tid 49328] [client 20.100.197.204:35510] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zwso.php"] [unique_id "aaE10fnSUDZue59Px9ssdQAAAVQ"]
[Fri Feb 27 14:12:33.843079 2026] [:error] [pid 49306:tid 49322] [client 20.100.197.204:50070] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/karak.php"] [unique_id "aaE10fnSUDZue59Px9sseQAAAU4"]
[Fri Feb 27 14:12:34.374151 2026] [:error] [pid 49306:tid 49314] [client 20.100.197.204:57340] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/karak.php"] [unique_id "aaE10vnSUDZue59Px9ssfwAAAUY"]
[Fri Feb 27 14:12:35.110299 2026] [:error] [pid 56075:tid 56085] [client 20.100.197.204:29381] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/karak.php"] [unique_id "aaE108KBhrfI6KNv9Rj4xAAAAAg"]
[Fri Feb 27 14:12:35.662632 2026] [:error] [pid 54102:tid 54164] [client 20.100.197.204:29187] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/karak.php"] [unique_id "aaE103i74D4fiYUm_Gc5RgAAAJQ"]
[Fri Feb 27 14:12:36.223036 2026] [:error] [pid 54102:tid 54158] [client 20.100.197.204:54011] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/prv8.php"] [unique_id "aaE11Hi74D4fiYUm_Gc5SAAAAI4"]
[Fri Feb 27 14:12:36.791196 2026] [:error] [pid 56075:tid 56078] [client 20.100.197.204:35464] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/prv8.php"] [unique_id "aaE11MKBhrfI6KNv9Rj4yQAAAAE"]
[Fri Feb 27 14:12:37.381811 2026] [:error] [pid 54231:tid 54251] [client 20.100.197.204:20883] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/prv8.php"] [unique_id "aaE11eTvb5AeyJCdY7C2aAAAAFE"]
[Fri Feb 27 14:12:37.962081 2026] [:error] [pid 52073:tid 52088] [client 20.100.197.204:55075] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/prv8.php"] [unique_id "aaE11Ya650YPyxXVeRYLPwAAAYw"]
[Fri Feb 27 14:12:38.521909 2026] [:error] [pid 52073:tid 52087] [client 20.100.197.204:57323] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a.php"] [unique_id "aaE11oa650YPyxXVeRYLQQAAAYs"]
[Fri Feb 27 14:12:39.083099 2026] [:error] [pid 52073:tid 52082] [client 20.100.197.204:35469] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a.php"] [unique_id "aaE114a650YPyxXVeRYLRgAAAYY"]
[Fri Feb 27 14:12:39.612773 2026] [:error] [pid 52073:tid 52077] [client 20.100.197.204:21757] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a.php"] [unique_id "aaE114a650YPyxXVeRYLSQAAAYE"]
[Fri Feb 27 14:12:40.136103 2026] [:error] [pid 54101:tid 54118] [client 20.100.197.204:36049] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a.php"] [unique_id "aaE12FY5qgRktcYTGFsTpAAAAco"]
[Fri Feb 27 14:12:40.679841 2026] [:error] [pid 62998:tid 63021] [client 20.100.197.204:42162] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aaE12FQeueXZDUmoLonOoQAAARM"]
[Fri Feb 27 14:12:41.215844 2026] [:error] [pid 52073:tid 52097] [client 20.100.197.204:50082] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aaE12Ya650YPyxXVeRYLTgAAAZU"]
[Fri Feb 27 14:12:41.759765 2026] [:error] [pid 52073:tid 52098] [client 20.100.197.204:35467] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aaE12Ya650YPyxXVeRYLUgAAAZY"]
[Fri Feb 27 14:12:42.324873 2026] [:error] [pid 62998:tid 63001] [client 20.100.197.204:10648] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aaE12lQeueXZDUmoLonOpgAAAQA"]
[Fri Feb 27 14:12:42.861678 2026] [:error] [pid 52073:tid 52095] [client 20.100.197.204:50078] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "aaE12oa650YPyxXVeRYLWQAAAZM"]
[Fri Feb 27 14:12:43.436084 2026] [:error] [pid 56075:tid 56079] [client 20.100.197.204:42142] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "aaE128KBhrfI6KNv9Rj40gAAAAI"]
[Fri Feb 27 14:12:43.986586 2026] [:error] [pid 52073:tid 52087] [client 20.100.197.204:42148] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "aaE124a650YPyxXVeRYLXgAAAYs"]
[Fri Feb 27 14:12:44.525018 2026] [:error] [pid 52073:tid 52098] [client 20.100.197.204:35474] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "aaE13Ia650YPyxXVeRYLYAAAAZY"]
[Fri Feb 27 14:12:45.055970 2026] [:error] [pid 54231:tid 54249] [client 20.100.197.204:50048] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aaE13eTvb5AeyJCdY7C2bQAAAE8"]
[Fri Feb 27 14:12:45.730462 2026] [:error] [pid 54103:tid 54189] [client 20.100.197.204:42144] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aaE13evG4MPCmE0B2sBibwAAANI"]
[Fri Feb 27 14:12:46.256659 2026] [:error] [pid 54103:tid 54179] [client 20.100.197.204:50051] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aaE13uvG4MPCmE0B2sBicAAAAMg"]
[Fri Feb 27 14:12:46.790911 2026] [:error] [pid 54231:tid 54250] [client 20.100.197.204:55041] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aaE13uTvb5AeyJCdY7C2cAAAAFA"]
[Fri Feb 27 14:12:47.319454 2026] [:error] [pid 52073:tid 52094] [client 20.100.197.204:53980] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/155.php"] [unique_id "aaE134a650YPyxXVeRYLaAAAAZI"]
[Fri Feb 27 14:12:47.855137 2026] [:error] [pid 52073:tid 52097] [client 20.100.197.204:57081] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/155.php"] [unique_id "aaE134a650YPyxXVeRYLawAAAZU"]
[Fri Feb 27 14:12:48.384427 2026] [:error] [pid 54102:tid 54154] [client 20.100.197.204:25464] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/155.php"] [unique_id "aaE14Hi74D4fiYUm_Gc5SgAAAIo"]
[Fri Feb 27 14:12:48.940946 2026] [:error] [pid 52073:tid 52091] [client 20.100.197.204:42120] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/155.php"] [unique_id "aaE14Ia650YPyxXVeRYLbwAAAY8"]
[Fri Feb 27 14:12:49.480734 2026] [:error] [pid 52073:tid 52088] [client 20.100.197.204:25442] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/goat.php"] [unique_id "aaE14Ya650YPyxXVeRYLcgAAAYw"]
[Fri Feb 27 14:12:50.020726 2026] [:error] [pid 54101:tid 54128] [client 20.100.197.204:52678] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/goat.php"] [unique_id "aaE14lY5qgRktcYTGFsTqgAAAdQ"]
[Fri Feb 27 14:12:50.566769 2026] [:error] [pid 62998:tid 63013] [client 20.100.197.204:23990] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/goat.php"] [unique_id "aaE14lQeueXZDUmoLonOswAAAQs"]
[Fri Feb 27 14:12:51.107200 2026] [:error] [pid 62998:tid 63024] [client 20.100.197.204:36059] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/goat.php"] [unique_id "aaE141QeueXZDUmoLonOtgAAARY"]
[Fri Feb 27 14:12:51.647986 2026] [:error] [pid 52073:tid 52094] [client 20.100.197.204:10680] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ext.php"] [unique_id "aaE144a650YPyxXVeRYLdwAAAZI"]
[Fri Feb 27 14:12:52.179320 2026] [:error] [pid 52073:tid 52087] [client 20.100.197.204:29435] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ext.php"] [unique_id "aaE15Ia650YPyxXVeRYLeQAAAYs"]
[Fri Feb 27 14:12:52.711666 2026] [:error] [pid 62998:tid 63022] [client 20.100.197.204:25469] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ext.php"] [unique_id "aaE15FQeueXZDUmoLonOvgAAARQ"]
[Fri Feb 27 14:12:53.295285 2026] [:error] [pid 62998:tid 63019] [client 20.100.197.204:55091] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ext.php"] [unique_id "aaE15VQeueXZDUmoLonOwgAAARE"]
[Fri Feb 27 14:12:53.860562 2026] [:error] [pid 62998:tid 63026] [client 20.100.197.204:53110] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aaE15VQeueXZDUmoLonOxQAAARg"]
[Fri Feb 27 14:12:54.566468 2026] [:error] [pid 54103:tid 54173] [client 20.100.197.204:55095] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aaE15uvG4MPCmE0B2sBicwAAAMI"]
[Fri Feb 27 14:12:55.119128 2026] [:error] [pid 54102:tid 54156] [client 20.100.197.204:6929] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aaE153i74D4fiYUm_Gc5TgAAAIw"]
[Fri Feb 27 14:12:56.000991 2026] [:error] [pid 62998:tid 63013] [client 20.100.197.204:46420] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aaE16FQeueXZDUmoLonOyQAAAQs"]
[Fri Feb 27 14:12:56.602783 2026] [:error] [pid 54102:tid 54144] [client 20.100.197.204:20820] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi.php"] [unique_id "aaE16Hi74D4fiYUm_Gc5UQAAAIA"]
[Fri Feb 27 14:12:57.214644 2026] [:error] [pid 54231:tid 54240] [client 20.100.197.204:24710] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi.php"] [unique_id "aaE16eTvb5AeyJCdY7C2eQAAAEY"]
[Fri Feb 27 14:12:57.901436 2026] [:error] [pid 54231:tid 54249] [client 20.100.197.204:27128] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi.php"] [unique_id "aaE16eTvb5AeyJCdY7C2fAAAAE8"]
[Fri Feb 27 14:12:58.519939 2026] [:error] [pid 54103:tid 54195] [client 20.100.197.204:36337] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi.php"] [unique_id "aaE16uvG4MPCmE0B2sBidgAAANg"]
[Fri Feb 27 14:12:59.153963 2026] [:error] [pid 54231:tid 54257] [client 20.100.197.204:6935] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aaE16-Tvb5AeyJCdY7C2fgAAAFc"]
[Fri Feb 27 14:12:59.718650 2026] [:error] [pid 62998:tid 63021] [client 20.100.197.204:7107] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aaE161QeueXZDUmoLonOywAAARM"]
[Fri Feb 27 14:13:00.270803 2026] [:error] [pid 54103:tid 54181] [client 20.100.197.204:36289] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aaE17OvG4MPCmE0B2sBidwAAAMo"]
[Fri Feb 27 14:13:00.830363 2026] [:error] [pid 54102:tid 54165] [client 20.100.197.204:6258] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aaE17Hi74D4fiYUm_Gc5VQAAAJU"]
[Fri Feb 27 14:13:01.424879 2026] [:error] [pid 56075:tid 56086] [client 20.100.197.204:22569] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ov.php"] [unique_id "aaE17cKBhrfI6KNv9Rj4-QAAAAk"]
[Fri Feb 27 14:13:01.951549 2026] [:error] [pid 56075:tid 56092] [client 20.100.197.204:30930] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ov.php"] [unique_id "aaE17cKBhrfI6KNv9Rj4_AAAAA4"]
[Fri Feb 27 14:13:02.510423 2026] [:error] [pid 62998:tid 63012] [client 20.100.197.204:23943] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ov.php"] [unique_id "aaE17lQeueXZDUmoLonO0AAAAQo"]
[Fri Feb 27 14:13:03.091581 2026] [:error] [pid 49306:tid 49326] [client 20.100.197.204:6217] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ov.php"] [unique_id "aaE17_nSUDZue59Px9stAQAAAVI"]
[Fri Feb 27 14:13:03.736533 2026] [:error] [pid 54103:tid 54170] [client 20.100.197.204:7726] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaE17-vG4MPCmE0B2sBiegAAAMA"]
[Fri Feb 27 14:13:04.291919 2026] [:error] [pid 54231:tid 54242] [client 20.100.197.204:7358] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaE18OTvb5AeyJCdY7C2hgAAAEg"]
[Fri Feb 27 14:13:04.884109 2026] [:error] [pid 54231:tid 54236] [client 20.100.197.204:29657] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaE18OTvb5AeyJCdY7C2hwAAAEI"]
[Fri Feb 27 14:13:05.406638 2026] [:error] [pid 54103:tid 54172] [client 20.100.197.204:32572] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaE18evG4MPCmE0B2sBifgAAAME"]
[Fri Feb 27 14:13:05.959653 2026] [:error] [pid 52073:tid 52094] [client 20.100.197.204:7326] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/default.php"] [unique_id "aaE18Ya650YPyxXVeRYLnQAAAZI"]
[Fri Feb 27 14:13:06.487165 2026] [:error] [pid 49306:tid 49314] [client 20.100.197.204:26498] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/default.php"] [unique_id "aaE18vnSUDZue59Px9stMAAAAUY"]
[Fri Feb 27 14:13:07.065080 2026] [:error] [pid 49306:tid 49311] [client 20.100.197.204:7724] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/default.php"] [unique_id "aaE18_nSUDZue59Px9stMwAAAUM"]
[Fri Feb 27 14:13:07.592633 2026] [:error] [pid 52073:tid 52084] [client 20.100.197.204:50114] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/default.php"] [unique_id "aaE184a650YPyxXVeRYLogAAAYg"]
[Fri Feb 27 14:13:08.174329 2026] [:error] [pid 49306:tid 49324] [client 20.100.197.204:7080] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "aaE19PnSUDZue59Px9stOwAAAVA"]
[Fri Feb 27 14:13:08.698967 2026] [:error] [pid 56075:tid 56098] [client 20.100.197.204:56193] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "aaE19MKBhrfI6KNv9Rj5EQAAABQ"]
[Fri Feb 27 14:13:09.234069 2026] [:error] [pid 49306:tid 49325] [client 20.100.197.204:31101] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "aaE19fnSUDZue59Px9stQAAAAVE"]
[Fri Feb 27 14:13:09.762219 2026] [:error] [pid 52073:tid 52086] [client 20.100.197.204:7047] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "aaE19Ya650YPyxXVeRYLqAAAAYo"]
[Fri Feb 27 14:13:10.294768 2026] [:error] [pid 54103:tid 54183] [client 20.100.197.204:56204] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aaE19uvG4MPCmE0B2sBigAAAAMw"]
[Fri Feb 27 14:13:10.822043 2026] [:error] [pid 56075:tid 56087] [client 20.100.197.204:23841] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aaE19sKBhrfI6KNv9Rj5GgAAAAo"]
[Fri Feb 27 14:13:11.344843 2026] [:error] [pid 56075:tid 56077] [client 20.100.197.204:29553] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aaE198KBhrfI6KNv9Rj5HAAAAAA"]
[Fri Feb 27 14:13:11.891984 2026] [:error] [pid 52073:tid 52094] [client 20.100.197.204:50114] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aaE194a650YPyxXVeRYLrAAAAZI"]
[Fri Feb 27 14:13:12.415866 2026] [:error] [pid 52073:tid 52089] [client 20.100.197.204:2088] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class.1.php"] [unique_id "aaE1-Ia650YPyxXVeRYLrgAAAY0"]
[Fri Feb 27 14:13:12.948328 2026] [:error] [pid 54103:tid 54178] [client 20.100.197.204:22825] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class.1.php"] [unique_id "aaE1-OvG4MPCmE0B2sBigQAAAMc"]
[Fri Feb 27 14:13:13.481175 2026] [:error] [pid 54231:tid 54241] [client 20.100.197.204:50445] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class.1.php"] [unique_id "aaE1-eTvb5AeyJCdY7C2iwAAAEc"]
[Fri Feb 27 14:13:14.054091 2026] [:error] [pid 52073:tid 52084] [client 20.100.197.204:22801] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class.1.php"] [unique_id "aaE1-oa650YPyxXVeRYLsgAAAYg"]
[Fri Feb 27 14:13:14.662467 2026] [:error] [pid 54231:tid 54243] [client 20.100.197.204:2053] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/async.php"] [unique_id "aaE1-uTvb5AeyJCdY7C2jAAAAEk"]
[Fri Feb 27 14:13:15.200847 2026] [:error] [pid 52073:tid 52078] [client 20.100.197.204:43930] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/async.php"] [unique_id "aaE1-4a650YPyxXVeRYLtwAAAYI"]
[Fri Feb 27 14:13:15.725546 2026] [:error] [pid 54103:tid 54191] [client 20.100.197.204:51016] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/async.php"] [unique_id "aaE1--vG4MPCmE0B2sBihwAAANQ"]
[Fri Feb 27 14:13:16.301604 2026] [:error] [pid 54231:tid 54235] [client 20.100.197.204:1372] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/async.php"] [unique_id "aaE1_OTvb5AeyJCdY7C2jwAAAEE"]
[Fri Feb 27 14:13:16.838237 2026] [:error] [pid 62998:tid 63011] [client 20.100.197.204:2579] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ff.php"] [unique_id "aaE1_FQeueXZDUmoLonO3AAAAQk"]
[Fri Feb 27 14:13:24.066083 2026] [:error] [pid 56075:tid 56098] [client 20.100.197.204:50576] [client 20.100.197.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaE2BMKBhrfI6KNv9Rj5NQAAABQ"]
[Fri Feb 27 14:13:25.166626 2026] [:error] [pid 54231:tid 54257] [client 20.100.197.204:11194] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "aaE2BeTvb5AeyJCdY7C2oAAAAFc"]
[Fri Feb 27 14:13:25.740022 2026] [:error] [pid 54103:tid 54178] [client 20.100.197.204:51420] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "aaE2BevG4MPCmE0B2sBikwAAAMc"]
[Fri Feb 27 14:13:26.277177 2026] [:error] [pid 56075:tid 56081] [client 20.100.197.204:7402] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "aaE2BsKBhrfI6KNv9Rj5NgAAAAQ"]
[Fri Feb 27 14:13:26.843475 2026] [:error] [pid 56075:tid 56095] [client 20.100.197.204:52236] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "aaE2BsKBhrfI6KNv9Rj5OAAAABE"]
[Fri Feb 27 14:13:27.417541 2026] [:error] [pid 49306:tid 49321] [client 20.100.197.204:12763] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/muzu.php"] [unique_id "aaE2B_nSUDZue59Px9staQAAAU0"]
[Fri Feb 27 14:13:27.944847 2026] [:error] [pid 52073:tid 52094] [client 20.100.197.204:57183] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/muzu.php"] [unique_id "aaE2B4a650YPyxXVeRYLxQAAAZI"]
[Fri Feb 27 14:13:28.493852 2026] [:error] [pid 49306:tid 49316] [client 20.100.197.204:31819] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/muzu.php"] [unique_id "aaE2CPnSUDZue59Px9stbQAAAUg"]
[Fri Feb 27 14:13:29.159302 2026] [:error] [pid 52073:tid 52090] [client 20.100.197.204:1297] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/muzu.php"] [unique_id "aaE2CYa650YPyxXVeRYLxwAAAY4"]
[Fri Feb 27 14:13:29.761486 2026] [:error] [pid 54101:tid 54122] [client 20.100.197.204:26235] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/reze.php"] [unique_id "aaE2CVY5qgRktcYTGFsTsgAAAc4"]
[Fri Feb 27 14:13:30.314116 2026] [:error] [pid 54231:tid 54255] [client 20.100.197.204:51411] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/reze.php"] [unique_id "aaE2CuTvb5AeyJCdY7C2owAAAFU"]
[Fri Feb 27 14:13:30.834759 2026] [:error] [pid 49306:tid 49320] [client 20.100.197.204:13129] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/reze.php"] [unique_id "aaE2CvnSUDZue59Px9stdQAAAUw"]
[Fri Feb 27 14:13:31.409013 2026] [:error] [pid 49306:tid 49327] [client 20.100.197.204:4848] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/reze.php"] [unique_id "aaE2C_nSUDZue59Px9steQAAAVM"]
[Fri Feb 27 14:13:31.938921 2026] [:error] [pid 49306:tid 49329] [client 20.100.197.204:7644] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/styll.php"] [unique_id "aaE2C_nSUDZue59Px9stegAAAVU"]
[Fri Feb 27 14:13:32.470781 2026] [:error] [pid 52073:tid 52099] [client 20.100.197.204:30873] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/styll.php"] [unique_id "aaE2DIa650YPyxXVeRYLzgAAAZc"]
[Fri Feb 27 14:13:33.076152 2026] [:error] [pid 52073:tid 52078] [client 20.100.197.204:29699] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/styll.php"] [unique_id "aaE2DYa650YPyxXVeRYLzwAAAYI"]
[Fri Feb 27 14:13:33.609965 2026] [:error] [pid 52073:tid 52088] [client 20.100.197.204:31828] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/styll.php"] [unique_id "aaE2DYa650YPyxXVeRYL0AAAAYw"]
[Fri Feb 27 14:13:34.193356 2026] [:error] [pid 52073:tid 52094] [client 20.100.197.204:31245] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x7.php"] [unique_id "aaE2Doa650YPyxXVeRYL0gAAAZI"]
[Fri Feb 27 14:13:34.750280 2026] [:error] [pid 56075:tid 56077] [client 20.100.197.204:57152] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x7.php"] [unique_id "aaE2DsKBhrfI6KNv9Rj5PwAAAAA"]
[Fri Feb 27 14:13:35.271917 2026] [:error] [pid 49306:tid 49320] [client 20.100.197.204:34054] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x7.php"] [unique_id "aaE2D_nSUDZue59Px9stfwAAAUw"]
[Fri Feb 27 14:13:35.791438 2026] [:error] [pid 52073:tid 52076] [client 20.100.197.204:7020] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x7.php"] [unique_id "aaE2D4a650YPyxXVeRYL1wAAAYA"]
[Fri Feb 27 14:13:36.334539 2026] [:error] [pid 49306:tid 49315] [client 20.100.197.204:20838] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/thebe.php"] [unique_id "aaE2EPnSUDZue59Px9sthAAAAUc"]
[Fri Feb 27 14:13:36.880190 2026] [:error] [pid 54231:tid 54256] [client 20.100.197.204:48961] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/thebe.php"] [unique_id "aaE2EOTvb5AeyJCdY7C2pwAAAFY"]
[Fri Feb 27 14:13:37.441317 2026] [:error] [pid 49306:tid 49329] [client 20.100.197.204:37747] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/thebe.php"] [unique_id "aaE2EfnSUDZue59Px9stigAAAVU"]
[Fri Feb 27 14:13:37.991633 2026] [:error] [pid 49306:tid 49322] [client 20.100.197.204:21532] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/thebe.php"] [unique_id "aaE2EfnSUDZue59Px9stjQAAAU4"]
[Fri Feb 27 14:13:38.529434 2026] [:error] [pid 49306:tid 49326] [client 20.100.197.204:34108] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ddd.php"] [unique_id "aaE2EvnSUDZue59Px9stkAAAAVI"]
[Fri Feb 27 14:13:39.053089 2026] [:error] [pid 56075:tid 56102] [client 20.100.197.204:21870] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ddd.php"] [unique_id "aaE2E8KBhrfI6KNv9Rj5QQAAABg"]
[Fri Feb 27 14:13:39.651140 2026] [:error] [pid 52073:tid 52095] [client 20.100.197.204:26188] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ddd.php"] [unique_id "aaE2E4a650YPyxXVeRYL2wAAAZM"]
[Fri Feb 27 14:13:40.186151 2026] [:error] [pid 52073:tid 52088] [client 20.100.197.204:31817] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ddd.php"] [unique_id "aaE2FIa650YPyxXVeRYL3AAAAYw"]
[Fri Feb 27 14:13:40.719327 2026] [:error] [pid 62998:tid 63011] [client 20.100.197.204:56644] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aaE2FFQeueXZDUmoLonO-wAAAQk"]
[Fri Feb 27 14:13:41.240791 2026] [:error] [pid 56075:tid 56098] [client 20.100.197.204:57181] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aaE2FcKBhrfI6KNv9Rj5RgAAABQ"]
[Fri Feb 27 14:13:41.771924 2026] [:error] [pid 56075:tid 56081] [client 20.100.197.204:8012] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aaE2FcKBhrfI6KNv9Rj5SQAAAAQ"]
[Fri Feb 27 14:13:42.406274 2026] [:error] [pid 56075:tid 56090] [client 20.100.197.204:57194] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aaE2FsKBhrfI6KNv9Rj5TQAAAAw"]
[Fri Feb 27 14:13:42.944599 2026] [:error] [pid 54103:tid 54170] [client 20.100.197.204:9059] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi.php"] [unique_id "aaE2FuvG4MPCmE0B2sBinAAAAMA"]
[Fri Feb 27 14:13:43.532790 2026] [:error] [pid 49306:tid 49315] [client 20.100.197.204:24072] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi.php"] [unique_id "aaE2F_nSUDZue59Px9stlQAAAUc"]
[Fri Feb 27 14:13:44.069419 2026] [:error] [pid 56075:tid 56080] [client 20.100.197.204:12653] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi.php"] [unique_id "aaE2GMKBhrfI6KNv9Rj5VAAAAAM"]
[Fri Feb 27 14:13:44.681558 2026] [:error] [pid 62998:tid 63018] [client 20.100.197.204:20962] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi.php"] [unique_id "aaE2GFQeueXZDUmoLonPCAAAARA"]
[Fri Feb 27 14:13:45.205563 2026] [:error] [pid 49306:tid 49324] [client 20.100.197.204:21521] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xpwer1.php"] [unique_id "aaE2GfnSUDZue59Px9stnAAAAVA"]
[Fri Feb 27 14:13:45.743772 2026] [:error] [pid 54102:tid 54164] [client 20.100.197.204:13169] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xpwer1.php"] [unique_id "aaE2GXi74D4fiYUm_Gc5ggAAAJQ"]
[Fri Feb 27 14:13:46.273313 2026] [:error] [pid 56075:tid 56084] [client 20.100.197.204:56927] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xpwer1.php"] [unique_id "aaE2GsKBhrfI6KNv9Rj5XAAAAAc"]
[Fri Feb 27 14:13:46.826439 2026] [:error] [pid 56075:tid 56091] [client 20.100.197.204:31843] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xpwer1.php"] [unique_id "aaE2GsKBhrfI6KNv9Rj5XgAAAA0"]
[Fri Feb 27 14:13:47.360801 2026] [:error] [pid 56075:tid 56100] [client 20.100.197.204:32006] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "aaE2G8KBhrfI6KNv9Rj5ZAAAABY"]
[Fri Feb 27 14:13:47.899764 2026] [:error] [pid 56075:tid 56083] [client 20.100.197.204:56930] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "aaE2G8KBhrfI6KNv9Rj5ZgAAAAY"]
[Fri Feb 27 14:13:48.506054 2026] [:error] [pid 49306:tid 49314] [client 20.100.197.204:21527] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "aaE2HPnSUDZue59Px9stqAAAAUY"]
[Fri Feb 27 14:13:49.049805 2026] [:error] [pid 56075:tid 56102] [client 20.100.197.204:24101] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "aaE2HcKBhrfI6KNv9Rj5agAAABg"]
[Fri Feb 27 14:13:49.598169 2026] [:error] [pid 62998:tid 63013] [client 20.100.197.204:52260] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aaE2HVQeueXZDUmoLonPEgAAAQs"]
[Fri Feb 27 14:13:50.171232 2026] [:error] [pid 62998:tid 63001] [client 20.100.197.204:34097] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aaE2HlQeueXZDUmoLonPFAAAAQA"]
[Fri Feb 27 14:13:50.742142 2026] [:error] [pid 54102:tid 54154] [client 20.100.197.204:20853] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aaE2Hni74D4fiYUm_Gc5hgAAAIo"]
[Fri Feb 27 14:13:51.331308 2026] [:error] [pid 49306:tid 49317] [client 20.100.197.204:44908] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aaE2H_nSUDZue59Px9strwAAAUk"]
[Fri Feb 27 14:13:51.986941 2026] [:error] [pid 62998:tid 63022] [client 20.100.197.204:56351] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aaE2H1QeueXZDUmoLonPGgAAARQ"]
[Fri Feb 27 14:13:52.544823 2026] [:error] [pid 56075:tid 56095] [client 20.100.197.204:56355] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aaE2IMKBhrfI6KNv9Rj5cAAAABE"]
[Fri Feb 27 14:13:53.061285 2026] [:error] [pid 52073:tid 52090] [client 20.100.197.204:32037] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aaE2IYa650YPyxXVeRYL3wAAAY4"]
[Fri Feb 27 14:13:53.597491 2026] [:error] [pid 62998:tid 63025] [client 20.100.197.204:12787] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aaE2IVQeueXZDUmoLonPHQAAARc"]
[Fri Feb 27 14:13:54.148709 2026] [:error] [pid 49306:tid 49310] [client 20.100.197.204:29736] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaE2IvnSUDZue59Px9sttQAAAUI"]
[Fri Feb 27 14:13:54.680023 2026] [:error] [pid 62998:tid 63008] [client 20.100.197.204:12726] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaE2IlQeueXZDUmoLonPHwAAAQY"]
[Fri Feb 27 14:13:55.230796 2026] [:error] [pid 49306:tid 49318] [client 20.100.197.204:20855] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaE2I_nSUDZue59Px9stuAAAAUo"]
[Fri Feb 27 14:13:55.803962 2026] [:error] [pid 49306:tid 49331] [client 20.100.197.204:53862] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaE2I_nSUDZue59Px9stvgAAAVc"]
[Fri Feb 27 14:13:56.371345 2026] [:error] [pid 49306:tid 49315] [client 20.100.197.204:24086] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaE2JPnSUDZue59Px9stwwAAAUc"]
[Fri Feb 27 14:13:56.944582 2026] [:error] [pid 49306:tid 49310] [client 20.100.197.204:7628] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaE2JPnSUDZue59Px9stxgAAAUI"]
[Fri Feb 27 14:13:57.492826 2026] [:error] [pid 56075:tid 56084] [client 20.100.197.204:7805] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaE2JcKBhrfI6KNv9Rj5dgAAAAc"]
[Fri Feb 27 14:13:58.035140 2026] [:error] [pid 49306:tid 49317] [client 20.100.197.204:7792] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaE2JvnSUDZue59Px9stywAAAUk"]
[Fri Feb 27 14:13:58.563320 2026] [:error] [pid 62998:tid 63010] [client 20.100.197.204:35390] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaE2JlQeueXZDUmoLonPIwAAAQg"]
[Fri Feb 27 14:13:59.111548 2026] [:error] [pid 54103:tid 54179] [client 20.100.197.204:7671] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaE2J-vG4MPCmE0B2sBiogAAAMg"]
[Fri Feb 27 14:13:59.674899 2026] [:error] [pid 52073:tid 52095] [client 20.100.197.204:37704] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaE2J4a650YPyxXVeRYL6QAAAZM"]
[Fri Feb 27 14:14:00.260834 2026] [:error] [pid 56075:tid 56081] [client 20.100.197.204:12762] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaE2KMKBhrfI6KNv9Rj5dwAAAAQ"]
[Fri Feb 27 14:14:00.798289 2026] [:error] [pid 56075:tid 56101] [client 20.100.197.204:31238] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaE2KMKBhrfI6KNv9Rj5eQAAABc"]
[Fri Feb 27 14:14:01.356354 2026] [:error] [pid 52073:tid 52086] [client 20.100.197.204:21825] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaE2KYa650YPyxXVeRYL7gAAAYo"]
[Fri Feb 27 14:14:01.911408 2026] [:error] [pid 56075:tid 56079] [client 20.100.197.204:37748] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaE2KcKBhrfI6KNv9Rj5fQAAAAI"]
[Fri Feb 27 14:14:02.441163 2026] [:error] [pid 54103:tid 54182] [client 20.100.197.204:56692] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaE2KuvG4MPCmE0B2sBiqQAAAMs"]
[Fri Feb 27 14:14:03.007849 2026] [:error] [pid 49306:tid 49313] [client 20.100.197.204:27849] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aaE2K_nSUDZue59Px9st3gAAAUU"]
[Fri Feb 27 14:14:03.562943 2026] [:error] [pid 49306:tid 49309] [client 20.100.197.204:31868] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aaE2K_nSUDZue59Px9st5QAAAUE"]
[Fri Feb 27 14:14:04.121445 2026] [:error] [pid 49306:tid 49329] [client 20.100.197.204:24091] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aaE2LPnSUDZue59Px9st6AAAAVU"]
[Fri Feb 27 14:14:04.651480 2026] [:error] [pid 49306:tid 49315] [client 20.100.197.204:21544] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aaE2LPnSUDZue59Px9st7gAAAUc"]
[Fri Feb 27 14:14:05.262939 2026] [:error] [pid 52073:tid 52096] [client 20.100.197.204:31815] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x/"] [unique_id "aaE2LYa650YPyxXVeRYL8wAAAZQ"]
[Fri Feb 27 14:14:05.868846 2026] [:error] [pid 52073:tid 52083] [client 20.100.197.204:4829] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x/"] [unique_id "aaE2LYa650YPyxXVeRYL9AAAAYc"]
[Fri Feb 27 14:14:06.421191 2026] [:error] [pid 49306:tid 49329] [client 20.100.197.204:56666] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x/"] [unique_id "aaE2LvnSUDZue59Px9st-AAAAVU"]
[Fri Feb 27 14:14:07.092788 2026] [:error] [pid 52073:tid 52077] [client 20.100.197.204:20811] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x/"] [unique_id "aaE2L4a650YPyxXVeRYL-QAAAYE"]
[Fri Feb 27 14:14:07.661784 2026] [:error] [pid 49306:tid 49312] [client 20.100.197.204:24094] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aaE2L_nSUDZue59Px9st-wAAAUQ"]
[Fri Feb 27 14:14:08.239701 2026] [:error] [pid 49306:tid 49311] [client 20.100.197.204:30892] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aaE2MPnSUDZue59Px9suAAAAAUM"]
[Fri Feb 27 14:14:08.920302 2026] [:error] [pid 49306:tid 49313] [client 20.100.197.204:15706] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aaE2MPnSUDZue59Px9suAwAAAUU"]
[Fri Feb 27 14:14:09.474804 2026] [:error] [pid 49306:tid 49310] [client 20.100.197.204:7679] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aaE2MfnSUDZue59Px9suBAAAAUI"]
[Fri Feb 27 14:14:10.034120 2026] [:error] [pid 62998:tid 63013] [client 20.100.197.204:26237] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aaE2MlQeueXZDUmoLonPNgAAAQs"]
[Fri Feb 27 14:14:10.592048 2026] [:error] [pid 54231:tid 54242] [client 20.100.197.204:6418] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aaE2MuTvb5AeyJCdY7C2xwAAAEg"]
[Fri Feb 27 14:14:11.189885 2026] [:error] [pid 56075:tid 56086] [client 20.100.197.204:26237] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aaE2M8KBhrfI6KNv9Rj5gQAAAAk"]
[Fri Feb 27 14:14:11.740717 2026] [:error] [pid 56075:tid 56087] [client 20.100.197.204:4823] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aaE2M8KBhrfI6KNv9Rj5gwAAAAo"]
[Fri Feb 27 14:14:12.283012 2026] [:error] [pid 54231:tid 54237] [client 20.100.197.204:48990] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aaE2NOTvb5AeyJCdY7C2ywAAAEM"]
[Fri Feb 27 14:14:12.813400 2026] [:error] [pid 49306:tid 49312] [client 20.100.197.204:59108] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aaE2NPnSUDZue59Px9suCQAAAUQ"]
[Fri Feb 27 14:14:13.381811 2026] [:error] [pid 56075:tid 56097] [client 20.100.197.204:57191] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aaE2NcKBhrfI6KNv9Rj5iAAAABM"]
[Fri Feb 27 14:14:13.979041 2026] [:error] [pid 52073:tid 52085] [client 20.100.197.204:1527] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/"] [unique_id "aaE2NYa650YPyxXVeRYMAQAAAYk"]
[Fri Feb 27 14:14:14.500112 2026] [:error] [pid 56075:tid 56099] [client 20.100.197.204:32001] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aaE2NsKBhrfI6KNv9Rj5iwAAABU"]
[Fri Feb 27 14:14:15.095203 2026] [:error] [pid 56075:tid 56096] [client 20.100.197.204:6129] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aaE2N8KBhrfI6KNv9Rj5jgAAABI"]
[Fri Feb 27 14:14:15.628144 2026] [:error] [pid 56075:tid 56091] [client 20.100.197.204:6086] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aaE2N8KBhrfI6KNv9Rj5kAAAAA0"]
[Fri Feb 27 14:14:16.161175 2026] [:error] [pid 54102:tid 54150] [client 20.100.197.204:1304] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aaE2OHi74D4fiYUm_Gc5kwAAAIY"]
[Fri Feb 27 14:14:16.701008 2026] [:error] [pid 52073:tid 52092] [client 20.100.197.204:12710] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaE2OIa650YPyxXVeRYMCQAAAZA"]
[Fri Feb 27 14:14:17.249439 2026] [:error] [pid 54103:tid 54172] [client 20.100.197.204:51440] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaE2OevG4MPCmE0B2sBirAAAAME"]
[Fri Feb 27 14:14:17.794712 2026] [:error] [pid 54103:tid 54176] [client 20.100.197.204:49002] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaE2OevG4MPCmE0B2sBirQAAAMU"]
[Fri Feb 27 14:14:18.363362 2026] [:error] [pid 54101:tid 54124] [client 20.100.197.204:31863] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaE2OlY5qgRktcYTGFsTyQAAAdA"]
[Fri Feb 27 14:14:18.926100 2026] [:error] [pid 52073:tid 52098] [client 20.100.197.204:12672] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f5.php"] [unique_id "aaE2Ooa650YPyxXVeRYMEgAAAZY"]
[Fri Feb 27 14:14:19.477078 2026] [:error] [pid 52073:tid 52095] [client 20.100.197.204:24112] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f5.php"] [unique_id "aaE2O4a650YPyxXVeRYMFwAAAZM"]
[Fri Feb 27 14:14:20.003939 2026] [:error] [pid 54103:tid 54179] [client 20.100.197.204:52754] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f5.php"] [unique_id "aaE2POvG4MPCmE0B2sBisQAAAMg"]
[Fri Feb 27 14:14:20.574379 2026] [:error] [pid 62998:tid 63004] [client 20.100.197.204:21840] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f5.php"] [unique_id "aaE2PFQeueXZDUmoLonPQAAAAQI"]
[Fri Feb 27 14:14:21.095896 2026] [:error] [pid 49306:tid 49329] [client 20.100.197.204:34085] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "aaE2PfnSUDZue59Px9suFAAAAVU"]
[Fri Feb 27 14:14:21.642607 2026] [:error] [pid 52073:tid 52086] [client 20.100.197.204:49569] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "aaE2PYa650YPyxXVeRYMHgAAAYo"]
[Fri Feb 27 14:14:22.173778 2026] [:error] [pid 52073:tid 52082] [client 20.100.197.204:21552] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "aaE2Poa650YPyxXVeRYMIQAAAYY"]
[Fri Feb 27 14:14:22.700432 2026] [:error] [pid 52073:tid 52085] [client 20.100.197.204:12744] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "aaE2Poa650YPyxXVeRYMJgAAAYk"]
[Fri Feb 27 14:14:23.247091 2026] [:error] [pid 56075:tid 56085] [client 20.100.197.204:20832] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aaE2P8KBhrfI6KNv9Rj5kwAAAAg"]
[Fri Feb 27 14:14:23.765666 2026] [:error] [pid 49306:tid 49327] [client 20.100.197.204:12637] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aaE2P_nSUDZue59Px9suGwAAAVM"]
[Fri Feb 27 14:14:27.334630 2026] [:error] [pid 56075:tid 56098] [client 20.100.197.204:4823] [client 20.100.197.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaE2Q8KBhrfI6KNv9Rj5pQAAABQ"]
[Fri Feb 27 14:14:31.703125 2026] [:error] [pid 62998:tid 63026] [client 20.100.197.204:31281] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aaE2R1QeueXZDUmoLonPSwAAARg"]
[Fri Feb 27 14:14:32.226432 2026] [:error] [pid 49306:tid 49311] [client 20.100.197.204:44910] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aaE2SPnSUDZue59Px9suNAAAAUM"]
[Fri Feb 27 14:14:32.761694 2026] [:error] [pid 49306:tid 49308] [client 20.100.197.204:33525] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aaE2SPnSUDZue59Px9suOgAAAUA"]
[Fri Feb 27 14:14:33.317302 2026] [:error] [pid 49306:tid 49326] [client 20.100.197.204:48683] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aaE2SfnSUDZue59Px9suPgAAAVI"]
[Fri Feb 27 14:14:33.854400 2026] [:error] [pid 49306:tid 49308] [client 20.100.197.204:4853] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaE2SfnSUDZue59Px9suRQAAAUA"]
[Fri Feb 27 14:14:34.379792 2026] [:error] [pid 49306:tid 49312] [client 20.100.197.204:27852] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaE2SvnSUDZue59Px9suTQAAAUQ"]
[Fri Feb 27 14:14:34.982965 2026] [:error] [pid 54101:tid 54119] [client 20.100.197.204:56672] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaE2SlY5qgRktcYTGFsTzAAAAcs"]
[Fri Feb 27 14:14:35.520489 2026] [:error] [pid 62998:tid 63017] [client 20.100.197.204:52598] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/about.php"] [unique_id "aaE2S1QeueXZDUmoLonPTgAAAQ8"]
[Fri Feb 27 14:14:36.080531 2026] [:error] [pid 52073:tid 52076] [client 20.100.197.204:30887] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "aaE2TIa650YPyxXVeRYMSwAAAYA"]
[Fri Feb 27 14:14:36.604776 2026] [:error] [pid 56075:tid 56085] [client 20.100.197.204:13069] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "aaE2TMKBhrfI6KNv9Rj51AAAAAg"]
[Fri Feb 27 14:14:37.126489 2026] [:error] [pid 62998:tid 63024] [client 20.100.197.204:37722] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "aaE2TVQeueXZDUmoLonPUAAAARY"]
[Fri Feb 27 14:14:37.644409 2026] [:error] [pid 56075:tid 56097] [client 20.100.197.204:13067] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "aaE2TcKBhrfI6KNv9Rj53gAAABM"]
[Fri Feb 27 14:14:38.178868 2026] [:error] [pid 49306:tid 49309] [client 20.100.197.204:12619] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaE2TvnSUDZue59Px9suYQAAAUE"]
[Fri Feb 27 14:14:38.715221 2026] [:error] [pid 52073:tid 52082] [client 20.100.197.204:21024] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaE2Toa650YPyxXVeRYMVAAAAYY"]
[Fri Feb 27 14:14:39.294246 2026] [:error] [pid 52073:tid 52085] [client 20.100.197.204:27870] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaE2T4a650YPyxXVeRYMVwAAAYk"]
[Fri Feb 27 14:14:39.853295 2026] [:error] [pid 52073:tid 52090] [client 20.100.197.204:29704] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaE2T4a650YPyxXVeRYMWgAAAY4"]
[Fri Feb 27 14:14:40.395503 2026] [:error] [pid 49306:tid 49311] [client 20.100.197.204:13063] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aaE2UPnSUDZue59Px9suaQAAAUM"]
[Fri Feb 27 14:14:40.947553 2026] [:error] [pid 49306:tid 49313] [client 20.100.197.204:24119] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aaE2UPnSUDZue59Px9suawAAAUU"]
[Fri Feb 27 14:14:41.481828 2026] [:error] [pid 52073:tid 52092] [client 20.100.197.204:24087] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aaE2UYa650YPyxXVeRYMXgAAAZA"]
[Fri Feb 27 14:14:42.166772 2026] [:error] [pid 49306:tid 49321] [client 20.100.197.204:29747] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aaE2UvnSUDZue59Px9sudAAAAU0"]
[Fri Feb 27 14:14:42.884714 2026] [:error] [pid 62998:tid 63018] [client 20.100.197.204:51461] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aaE2UlQeueXZDUmoLonPUwAAARA"]
[Fri Feb 27 14:14:43.541186 2026] [:error] [pid 49306:tid 49313] [client 20.100.197.204:55762] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aaE2U_nSUDZue59Px9sueQAAAUU"]
[Fri Feb 27 14:14:44.093104 2026] [:error] [pid 52073:tid 52095] [client 20.100.197.204:52583] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aaE2VIa650YPyxXVeRYMaQAAAZM"]
[Fri Feb 27 14:14:44.615951 2026] [:error] [pid 54231:tid 54253] [client 20.100.197.204:21830] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aaE2VOTvb5AeyJCdY7C25gAAAFM"]
[Fri Feb 27 14:14:45.180635 2026] [:error] [pid 52073:tid 52084] [client 20.100.197.204:12688] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aaE2VYa650YPyxXVeRYMbAAAAYg"]
[Fri Feb 27 14:14:45.724550 2026] [:error] [pid 49306:tid 49321] [client 20.100.197.204:55805] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aaE2VfnSUDZue59Px9sufwAAAU0"]
[Fri Feb 27 14:14:46.377263 2026] [:error] [pid 54103:tid 54184] [client 20.100.197.204:4831] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aaE2VuvG4MPCmE0B2sBivQAAAM0"]
[Fri Feb 27 14:14:46.922851 2026] [:error] [pid 54231:tid 54256] [client 20.100.197.204:51405] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/about.php"] [unique_id "aaE2VuTvb5AeyJCdY7C25wAAAFY"]
[Fri Feb 27 14:14:47.475555 2026] [:error] [pid 49306:tid 49319] [client 20.100.197.204:34107] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaE2V_nSUDZue59Px9suggAAAUs"]
[Fri Feb 27 14:14:48.016298 2026] [:error] [pid 49306:tid 49314] [client 20.100.197.204:56950] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaE2WPnSUDZue59Px9suhQAAAUY"]
[Fri Feb 27 14:14:48.601909 2026] [:error] [pid 54102:tid 54152] [client 20.100.197.204:7024] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaE2WHi74D4fiYUm_Gc5mQAAAIg"]
[Fri Feb 27 14:14:49.286296 2026] [:error] [pid 56075:tid 56096] [client 20.100.197.204:13133] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaE2WcKBhrfI6KNv9Rj58wAAABI"]
[Fri Feb 27 14:14:49.836487 2026] [:error] [pid 54231:tid 54244] [client 20.100.197.204:56367] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aaE2WeTvb5AeyJCdY7C26wAAAEo"]
[Fri Feb 27 14:14:50.429371 2026] [:error] [pid 56075:tid 56098] [client 20.100.197.204:13179] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aaE2WsKBhrfI6KNv9Rj59QAAABQ"]
[Fri Feb 27 14:14:51.055558 2026] [:error] [pid 56075:tid 56085] [client 20.100.197.204:48966] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aaE2W8KBhrfI6KNv9Rj5-wAAAAg"]
[Fri Feb 27 14:14:51.626270 2026] [:error] [pid 56075:tid 56101] [client 20.100.197.204:31257] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aaE2W8KBhrfI6KNv9Rj6AAAAABc"]
[Fri Feb 27 14:14:52.222454 2026] [:error] [pid 54101:tid 54111] [client 20.100.197.204:21854] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaE2XFY5qgRktcYTGFsT0AAAAcM"]
[Fri Feb 27 14:14:52.850159 2026] [:error] [pid 54102:tid 54153] [client 20.100.197.204:21018] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaE2XHi74D4fiYUm_Gc5oQAAAIk"]
[Fri Feb 27 14:14:53.450579 2026] [:error] [pid 54231:tid 54234] [client 20.100.197.204:56676] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaE2XeTvb5AeyJCdY7C27QAAAEA"]
[Fri Feb 27 14:14:53.984723 2026] [:error] [pid 54103:tid 54187] [client 20.100.197.204:56929] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaE2XevG4MPCmE0B2sBiyAAAANA"]
[Fri Feb 27 14:14:54.564481 2026] [:error] [pid 52073:tid 52087] [client 20.100.197.204:52570] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaE2Xoa650YPyxXVeRYMeQAAAYs"]
[Fri Feb 27 14:14:55.253904 2026] [:error] [pid 52073:tid 52096] [client 20.100.197.204:44900] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaE2X4a650YPyxXVeRYMegAAAZQ"]
[Fri Feb 27 14:14:55.823862 2026] [:error] [pid 56075:tid 56100] [client 20.100.197.204:13148] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaE2X8KBhrfI6KNv9Rj6DAAAABY"]
[Fri Feb 27 14:14:56.546055 2026] [:error] [pid 52073:tid 52083] [client 20.100.197.204:44866] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaE2YIa650YPyxXVeRYMfwAAAYc"]
[Fri Feb 27 14:14:57.174046 2026] [:error] [pid 52073:tid 52078] [client 20.100.197.204:53300] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/init.php"] [unique_id "aaE2YYa650YPyxXVeRYMgQAAAYI"]
[Fri Feb 27 14:14:57.956952 2026] [:error] [pid 54231:tid 54235] [client 20.100.197.204:4817] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/init.php"] [unique_id "aaE2YeTvb5AeyJCdY7C28gAAAEE"]
[Fri Feb 27 14:14:58.551953 2026] [:error] [pid 54231:tid 54254] [client 20.100.197.204:13084] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/init.php"] [unique_id "aaE2YuTvb5AeyJCdY7C28wAAAFQ"]
[Fri Feb 27 14:14:59.077174 2026] [:error] [pid 56075:tid 56094] [client 20.100.197.204:44917] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/init.php"] [unique_id "aaE2Y8KBhrfI6KNv9Rj6FQAAABA"]
[Fri Feb 27 14:14:59.625764 2026] [:error] [pid 52073:tid 52096] [client 20.100.197.204:13161] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaE2Y4a650YPyxXVeRYMjwAAAZQ"]
[Fri Feb 27 14:15:00.259382 2026] [:error] [pid 52073:tid 52084] [client 20.100.197.204:57112] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaE2ZIa650YPyxXVeRYMkgAAAYg"]
[Fri Feb 27 14:15:00.896008 2026] [:error] [pid 49306:tid 49318] [client 20.100.197.204:30850] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaE2ZPnSUDZue59Px9sungAAAUo"]
[Fri Feb 27 14:15:01.605716 2026] [:error] [pid 52073:tid 52076] [client 20.100.197.204:37732] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaE2ZYa650YPyxXVeRYMlwAAAYA"]
[Fri Feb 27 14:15:02.248712 2026] [:error] [pid 49306:tid 49331] [client 20.100.197.204:57113] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aaE2ZvnSUDZue59Px9supQAAAVc"]
[Fri Feb 27 14:15:02.848069 2026] [:error] [pid 54102:tid 54160] [client 20.100.197.204:1284] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aaE2Zni74D4fiYUm_Gc5pgAAAJA"]
[Fri Feb 27 14:15:03.477889 2026] [:error] [pid 54102:tid 54168] [client 20.100.197.204:56697] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aaE2Z3i74D4fiYUm_Gc5qAAAAJc"]
[Fri Feb 27 14:15:04.012186 2026] [:error] [pid 54102:tid 54166] [client 20.100.197.204:56674] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aaE2aHi74D4fiYUm_Gc5qQAAAJY"]
[Fri Feb 27 14:15:04.586418 2026] [:error] [pid 49306:tid 49332] [client 20.100.197.204:24079] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "aaE2aPnSUDZue59Px9surAAAAVg"]
[Fri Feb 27 14:15:05.122140 2026] [:error] [pid 56075:tid 56101] [client 20.100.197.204:53288] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "aaE2acKBhrfI6KNv9Rj6HAAAABc"]
[Fri Feb 27 14:15:05.641857 2026] [:error] [pid 52073:tid 52086] [client 20.100.197.204:31243] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "aaE2aYa650YPyxXVeRYMowAAAYo"]
[Fri Feb 27 14:15:06.240317 2026] [:error] [pid 49306:tid 49315] [client 20.100.197.204:37755] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "aaE2avnSUDZue59Px9susQAAAUc"]
[Fri Feb 27 14:15:06.780337 2026] [:error] [pid 49306:tid 49331] [client 20.100.197.204:50478] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/X7x.php"] [unique_id "aaE2avnSUDZue59Px9susgAAAVc"]
[Fri Feb 27 14:15:07.309650 2026] [:error] [pid 49306:tid 49330] [client 20.100.197.204:26208] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/X7x.php"] [unique_id "aaE2a_nSUDZue59Px9sutQAAAVY"]
[Fri Feb 27 14:15:07.833835 2026] [:error] [pid 52073:tid 52086] [client 20.100.197.204:13136] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/X7x.php"] [unique_id "aaE2a4a650YPyxXVeRYMrgAAAYo"]
[Fri Feb 27 14:15:08.370691 2026] [:error] [pid 56075:tid 56079] [client 20.100.197.204:32015] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/X7x.php"] [unique_id "aaE2bMKBhrfI6KNv9Rj6HwAAAAI"]
[Fri Feb 27 14:15:08.947263 2026] [:error] [pid 54102:tid 54162] [client 20.100.197.204:13182] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aaE2bHi74D4fiYUm_Gc5sQAAAJI"]
[Fri Feb 27 14:15:09.472981 2026] [:error] [pid 49306:tid 49319] [client 20.100.197.204:7636] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aaE2bfnSUDZue59Px9suvgAAAUs"]
[Fri Feb 27 14:15:10.056899 2026] [:error] [pid 49306:tid 49329] [client 20.100.197.204:48077] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aaE2bvnSUDZue59Px9suwgAAAVU"]
[Fri Feb 27 14:15:10.573846 2026] [:error] [pid 52073:tid 52100] [client 20.100.197.204:48075] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aaE2boa650YPyxXVeRYMsgAAAZg"]
[Fri Feb 27 14:15:11.095648 2026] [:error] [pid 49306:tid 49328] [client 20.100.197.204:48094] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plss3.php"] [unique_id "aaE2b_nSUDZue59Px9suxgAAAVQ"]
[Fri Feb 27 14:15:11.621214 2026] [:error] [pid 49306:tid 49327] [client 20.100.197.204:20861] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plss3.php"] [unique_id "aaE2b_nSUDZue59Px9suxwAAAVM"]
[Fri Feb 27 14:15:12.190961 2026] [:error] [pid 52073:tid 52077] [client 20.100.197.204:57147] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plss3.php"] [unique_id "aaE2cIa650YPyxXVeRYMuQAAAYE"]
[Fri Feb 27 14:15:12.746001 2026] [:error] [pid 62998:tid 63025] [client 20.100.197.204:48072] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plss3.php"] [unique_id "aaE2cFQeueXZDUmoLonPZQAAARc"]
[Fri Feb 27 14:15:13.304840 2026] [:error] [pid 49306:tid 49323] [client 20.100.197.204:20861] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaE2cfnSUDZue59Px9suzQAAAU8"]
[Fri Feb 27 14:15:13.834482 2026] [:error] [pid 49306:tid 49313] [client 20.100.197.204:7513] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaE2cfnSUDZue59Px9su0QAAAUU"]
[Fri Feb 27 14:15:14.360257 2026] [:error] [pid 49306:tid 49325] [client 20.100.197.204:54011] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaE2cvnSUDZue59Px9su1QAAAVE"]
[Fri Feb 27 14:15:14.906053 2026] [:error] [pid 49306:tid 49316] [client 20.100.197.204:24314] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aaE2cvnSUDZue59Px9su2QAAAUg"]
[Fri Feb 27 14:15:15.447427 2026] [:error] [pid 49306:tid 49332] [client 20.100.197.204:27887] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admins.php"] [unique_id "aaE2c_nSUDZue59Px9su3gAAAVg"]
[Fri Feb 27 14:15:16.101235 2026] [:error] [pid 49306:tid 49327] [client 20.100.197.204:57138] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admins.php"] [unique_id "aaE2dPnSUDZue59Px9su4QAAAVM"]
[Fri Feb 27 14:15:16.651542 2026] [:error] [pid 52073:tid 52100] [client 20.100.197.204:30863] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admins.php"] [unique_id "aaE2dIa650YPyxXVeRYMwgAAAZg"]
[Fri Feb 27 14:15:17.240714 2026] [:error] [pid 52073:tid 52091] [client 20.100.197.204:7651] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admins.php"] [unique_id "aaE2dYa650YPyxXVeRYMxwAAAY8"]
[Fri Feb 27 14:15:17.759038 2026] [:error] [pid 62998:tid 63013] [client 20.100.197.204:26176] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aaE2dVQeueXZDUmoLonPZgAAAQs"]
[Fri Feb 27 14:15:18.290325 2026] [:error] [pid 49306:tid 49331] [client 20.100.197.204:31240] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aaE2dvnSUDZue59Px9su5AAAAVc"]
[Fri Feb 27 14:15:18.835107 2026] [:error] [pid 49306:tid 49323] [client 20.100.197.204:7531] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aaE2dvnSUDZue59Px9su6AAAAU8"]
[Fri Feb 27 14:15:19.388804 2026] [:error] [pid 49306:tid 49318] [client 20.100.197.204:53284] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aaE2d_nSUDZue59Px9su7QAAAUo"]
[Fri Feb 27 14:15:19.908336 2026] [:error] [pid 52073:tid 52092] [client 20.100.197.204:44876] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/main.php"] [unique_id "aaE2d4a650YPyxXVeRYM0QAAAZA"]
[Fri Feb 27 14:15:20.435459 2026] [:error] [pid 54102:tid 54169] [client 20.100.197.204:48069] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/main.php"] [unique_id "aaE2eHi74D4fiYUm_Gc5swAAAJg"]
[Fri Feb 27 14:15:20.962711 2026] [:error] [pid 52073:tid 52078] [client 20.100.197.204:51500] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/main.php"] [unique_id "aaE2eIa650YPyxXVeRYM1QAAAYI"]
[Fri Feb 27 14:15:21.489927 2026] [:error] [pid 52073:tid 52077] [client 20.100.197.204:57119] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/main.php"] [unique_id "aaE2eYa650YPyxXVeRYM2QAAAYE"]
[Fri Feb 27 14:15:22.009184 2026] [:error] [pid 49306:tid 49308] [client 20.100.197.204:34074] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aaE2evnSUDZue59Px9su_QAAAUA"]
[Fri Feb 27 14:15:22.546060 2026] [:error] [pid 49306:tid 49309] [client 20.100.197.204:47983] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aaE2evnSUDZue59Px9su_wAAAUE"]
[Fri Feb 27 14:15:23.065458 2026] [:error] [pid 49306:tid 49323] [client 20.100.197.204:7528] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aaE2e_nSUDZue59Px9svBQAAAU8"]
[Fri Feb 27 14:15:23.590575 2026] [:error] [pid 52073:tid 52086] [client 20.100.197.204:37728] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aaE2e4a650YPyxXVeRYM8AAAAYo"]
[Fri Feb 27 14:15:24.133715 2026] [:error] [pid 49306:tid 49327] [client 20.100.197.204:24069] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "aaE2fPnSUDZue59Px9svDAAAAVM"]
[Fri Feb 27 14:15:24.659112 2026] [:error] [pid 54102:tid 54155] [client 20.100.197.204:7524] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "aaE2fHi74D4fiYUm_Gc5tAAAAIs"]
[Fri Feb 27 14:15:25.179173 2026] [:error] [pid 54231:tid 54258] [client 20.100.197.204:7533] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "aaE2feTvb5AeyJCdY7C3BAAAAFg"]
[Fri Feb 27 14:15:25.719139 2026] [:error] [pid 54231:tid 54240] [client 20.100.197.204:51883] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "aaE2feTvb5AeyJCdY7C3BwAAAEY"]
[Fri Feb 27 14:15:26.243565 2026] [:error] [pid 52073:tid 52092] [client 20.100.197.204:20800] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "aaE2foa650YPyxXVeRYM-wAAAZA"]
[Fri Feb 27 14:15:26.766459 2026] [:error] [pid 54103:tid 54175] [client 20.100.197.204:47975] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "aaE2fuvG4MPCmE0B2sBi0AAAAMQ"]
[Fri Feb 27 14:15:27.285317 2026] [:error] [pid 54103:tid 54194] [client 20.100.197.204:7551] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "aaE2f-vG4MPCmE0B2sBi0QAAANc"]
[Fri Feb 27 14:15:27.803328 2026] [:error] [pid 54231:tid 54234] [client 20.100.197.204:57128] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "aaE2f-Tvb5AeyJCdY7C3CwAAAEA"]
[Fri Feb 27 14:15:28.336544 2026] [:error] [pid 56075:tid 56077] [client 20.100.197.204:20843] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "aaE2gMKBhrfI6KNv9Rj6PgAAAAA"]
[Fri Feb 27 14:15:28.858304 2026] [:error] [pid 56075:tid 56094] [client 20.100.197.204:25310] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "aaE2gMKBhrfI6KNv9Rj6QQAAABA"]
[Fri Feb 27 14:15:29.377167 2026] [:error] [pid 52073:tid 52081] [client 20.100.197.204:13146] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "aaE2gYa650YPyxXVeRYNAwAAAYU"]
[Fri Feb 27 14:15:29.915529 2026] [:error] [pid 52073:tid 52092] [client 20.100.197.204:48972] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "aaE2gYa650YPyxXVeRYNCAAAAZA"]
[Fri Feb 27 14:15:30.450281 2026] [:error] [pid 56075:tid 56095] [client 20.100.197.204:31848] [client 20.100.197.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaE2gsKBhrfI6KNv9Rj6RAAAABE"]
[Fri Feb 27 14:15:30.984512 2026] [:error] [pid 52073:tid 52100] [client 20.100.197.204:24256] [client 20.100.197.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jsond.php"] [unique_id "aaE2goa650YPyxXVeRYNDgAAAZg"]
[Fri Feb 27 16:22:55.791175 2026] [:error] [pid 52073:tid 52078] [client 4.204.200.32:18368] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/opts.php"] [unique_id "aaFUX4a650YPyxXVeRZugQAAAYI"]
[Fri Feb 27 16:22:57.048698 2026] [:error] [pid 56075:tid 56091] [client 4.204.200.32:18376] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/opts.php"] [unique_id "aaFUYcKBhrfI6KNv9Rgq6QAAAA0"]
[Fri Feb 27 16:22:57.809948 2026] [:error] [pid 54103:tid 54188] [client 4.204.200.32:18422] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/opts.php"] [unique_id "aaFUYevG4MPCmE0B2sB1JgAAANE"]
[Fri Feb 27 16:22:58.747740 2026] [:error] [pid 49306:tid 49322] [client 4.204.200.32:18399] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/opts.php"] [unique_id "aaFUYvnSUDZue59Px9t70AAAAU4"]
[Fri Feb 27 16:22:59.719135 2026] [:error] [pid 54103:tid 54184] [client 4.204.200.32:18313] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/x123.php"] [unique_id "aaFUY-vG4MPCmE0B2sB1KQAAAM0"]
[Fri Feb 27 16:23:01.096010 2026] [:error] [pid 56075:tid 56101] [client 4.204.200.32:18402] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/x123.php"] [unique_id "aaFUZcKBhrfI6KNv9Rgq8AAAABc"]
[Fri Feb 27 16:23:02.039912 2026] [:error] [pid 56075:tid 56099] [client 4.204.200.32:18420] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/x123.php"] [unique_id "aaFUZsKBhrfI6KNv9Rgq9QAAABU"]
[Fri Feb 27 16:23:04.410057 2026] [:error] [pid 52073:tid 52097] [client 4.204.200.32:18381] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/x123.php"] [unique_id "aaFUaIa650YPyxXVeRZuowAAAZU"]
[Fri Feb 27 16:23:06.965357 2026] [:error] [pid 54103:tid 54174] [client 4.204.200.32:18392] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aaFUauvG4MPCmE0B2sB1MgAAAMM"]
[Fri Feb 27 16:23:08.229340 2026] [:error] [pid 52073:tid 52087] [client 4.204.200.32:18315] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aaFUbIa650YPyxXVeRZuuAAAAYs"]
[Fri Feb 27 16:23:10.714802 2026] [:error] [pid 52073:tid 52086] [client 4.204.200.32:18430] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aaFUboa650YPyxXVeRZuwAAAAYo"]
[Fri Feb 27 16:23:12.923593 2026] [:error] [pid 52073:tid 52100] [client 4.204.200.32:18391] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aaFUcIa650YPyxXVeRZuwwAAAZg"]
[Fri Feb 27 16:23:14.510619 2026] [:error] [pid 52073:tid 52099] [client 4.204.200.32:18412] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/moshou.php"] [unique_id "aaFUcoa650YPyxXVeRZuxwAAAZc"]
[Fri Feb 27 16:23:15.503357 2026] [:error] [pid 54231:tid 54241] [client 4.204.200.32:18395] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/moshou.php"] [unique_id "aaFUc-Tvb5AeyJCdY7DOvwAAAEc"]
[Fri Feb 27 16:23:16.341240 2026] [:error] [pid 54231:tid 54242] [client 4.204.200.32:18322] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/moshou.php"] [unique_id "aaFUdOTvb5AeyJCdY7DOwQAAAEg"]
[Fri Feb 27 16:23:17.544299 2026] [:error] [pid 56075:tid 56099] [client 4.204.200.32:18385] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/moshou.php"] [unique_id "aaFUdcKBhrfI6KNv9RgrFwAAABU"]
[Fri Feb 27 16:23:18.511833 2026] [:error] [pid 52073:tid 52097] [client 4.204.200.32:18423] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/seetox.php"] [unique_id "aaFUdoa650YPyxXVeRZu2wAAAZU"]
[Fri Feb 27 16:23:19.301890 2026] [:error] [pid 52073:tid 52081] [client 4.204.200.32:18431] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/seetox.php"] [unique_id "aaFUd4a650YPyxXVeRZu4AAAAYU"]
[Fri Feb 27 16:23:20.404250 2026] [:error] [pid 62998:tid 63012] [client 4.204.200.32:18414] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/seetox.php"] [unique_id "aaFUeFQeueXZDUmoLonvbgAAAQo"]
[Fri Feb 27 16:23:21.288701 2026] [:error] [pid 62998:tid 63016] [client 4.204.200.32:18341] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/seetox.php"] [unique_id "aaFUeVQeueXZDUmoLonvcQAAAQ4"]
[Fri Feb 27 16:23:21.991661 2026] [:error] [pid 49306:tid 49314] [client 4.204.200.32:18406] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/dom.php"] [unique_id "aaFUefnSUDZue59Px9t8AQAAAUY"]
[Fri Feb 27 16:23:22.946970 2026] [:error] [pid 49306:tid 49318] [client 4.204.200.32:18332] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/dom.php"] [unique_id "aaFUevnSUDZue59Px9t8BAAAAUo"]
[Fri Feb 27 16:23:23.601048 2026] [:error] [pid 49306:tid 49329] [client 4.204.200.32:18304] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/dom.php"] [unique_id "aaFUe_nSUDZue59Px9t8BwAAAVU"]
[Fri Feb 27 16:23:24.246262 2026] [:error] [pid 49306:tid 49319] [client 4.204.200.32:18396] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/dom.php"] [unique_id "aaFUfPnSUDZue59Px9t8CgAAAUs"]
[Fri Feb 27 16:23:25.282564 2026] [:error] [pid 54231:tid 54236] [client 4.204.200.32:18398] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws60.php"] [unique_id "aaFUfeTvb5AeyJCdY7DOxgAAAEI"]
[Fri Feb 27 16:23:26.377424 2026] [:error] [pid 62998:tid 63020] [client 4.204.200.32:18244] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws60.php"] [unique_id "aaFUflQeueXZDUmoLonvdQAAARI"]
[Fri Feb 27 16:23:28.129788 2026] [:error] [pid 49306:tid 49331] [client 4.204.200.32:18334] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws60.php"] [unique_id "aaFUgPnSUDZue59Px9t8EgAAAVc"]
[Fri Feb 27 16:23:29.420653 2026] [:error] [pid 54231:tid 54240] [client 4.204.200.32:18428] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws60.php"] [unique_id "aaFUgeTvb5AeyJCdY7DOygAAAEY"]
[Fri Feb 27 16:23:30.358943 2026] [:error] [pid 52073:tid 52094] [client 4.204.200.32:18318] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/samiri.php"] [unique_id "aaFUgoa650YPyxXVeRZu8gAAAZI"]
[Fri Feb 27 16:23:31.821855 2026] [:error] [pid 49306:tid 49312] [client 4.204.200.32:18317] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/samiri.php"] [unique_id "aaFUg_nSUDZue59Px9t8HwAAAUQ"]
[Fri Feb 27 16:23:33.966559 2026] [:error] [pid 49306:tid 49310] [client 4.204.200.32:18388] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/samiri.php"] [unique_id "aaFUhfnSUDZue59Px9t8JwAAAUI"]
[Fri Feb 27 16:23:34.727466 2026] [:error] [pid 54231:tid 54241] [client 4.204.200.32:18417] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/samiri.php"] [unique_id "aaFUhuTvb5AeyJCdY7DO0AAAAEc"]
[Fri Feb 27 16:23:35.911491 2026] [:error] [pid 56075:tid 56097] [client 4.204.200.32:18410] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/plugins.php"] [unique_id "aaFUh8KBhrfI6KNv9RgrKgAAABM"]
[Fri Feb 27 16:23:37.794441 2026] [:error] [pid 52073:tid 52078] [client 4.204.200.32:18340] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/plugins.php"] [unique_id "aaFUiYa650YPyxXVeRZu-QAAAYI"]
[Fri Feb 27 16:23:39.321660 2026] [:error] [pid 49306:tid 49314] [client 4.204.200.32:18310] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/plugins.php"] [unique_id "aaFUi_nSUDZue59Px9t8NAAAAUY"]
[Fri Feb 27 16:23:40.694910 2026] [:error] [pid 62998:tid 63016] [client 4.204.200.32:18312] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/plugins.php"] [unique_id "aaFUjFQeueXZDUmoLonvgAAAAQ4"]
[Fri Feb 27 16:23:42.119973 2026] [:error] [pid 49306:tid 49328] [client 4.204.200.32:18371] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xoot.php"] [unique_id "aaFUjvnSUDZue59Px9t8OgAAAVQ"]
[Fri Feb 27 16:23:43.258007 2026] [:error] [pid 54102:tid 54157] [client 4.204.200.32:18379] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xoot.php"] [unique_id "aaFUj3i74D4fiYUm_GdH1wAAAI0"]
[Fri Feb 27 16:23:44.120423 2026] [:error] [pid 54101:tid 54116] [client 4.204.200.32:18369] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xoot.php"] [unique_id "aaFUkFY5qgRktcYTGFshtQAAAcg"]
[Fri Feb 27 16:23:45.127229 2026] [:error] [pid 56075:tid 56084] [client 4.204.200.32:18387] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xoot.php"] [unique_id "aaFUkcKBhrfI6KNv9RgrNgAAAAc"]
[Fri Feb 27 16:23:46.139239 2026] [:error] [pid 54103:tid 54192] [client 4.204.200.32:18411] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/X57.php"] [unique_id "aaFUkuvG4MPCmE0B2sB1PAAAANU"]
[Fri Feb 27 16:23:46.848711 2026] [:error] [pid 54231:tid 54243] [client 4.204.200.32:18394] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/X57.php"] [unique_id "aaFUkuTvb5AeyJCdY7DO1wAAAEk"]
[Fri Feb 27 16:23:48.205307 2026] [:error] [pid 49306:tid 49332] [client 4.204.200.32:18307] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/X57.php"] [unique_id "aaFUlPnSUDZue59Px9t8RAAAAVg"]
[Fri Feb 27 16:23:49.980972 2026] [:error] [pid 54103:tid 54179] [client 4.204.200.32:18377] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/X57.php"] [unique_id "aaFUlevG4MPCmE0B2sB1QAAAAMg"]
[Fri Feb 27 16:23:51.079788 2026] [:error] [pid 52073:tid 52096] [client 4.204.200.32:18418] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aaFUl4a650YPyxXVeRZu_wAAAZQ"]
[Fri Feb 27 16:23:51.678103 2026] [:error] [pid 62998:tid 63010] [client 4.204.200.32:18389] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aaFUl1QeueXZDUmoLonvhgAAAQg"]
[Fri Feb 27 16:23:52.872711 2026] [:error] [pid 52073:tid 52098] [client 4.204.200.32:18429] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aaFUmIa650YPyxXVeRZvAgAAAZY"]
[Fri Feb 27 16:24:02.094803 2026] [:error] [pid 62998:tid 63008] [client 4.204.200.32:18314] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aaFUolQeueXZDUmoLonvpgAAAQY"]
[Fri Feb 27 16:24:02.927660 2026] [:error] [pid 62998:tid 63026] [client 4.204.200.32:18405] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aaFUolQeueXZDUmoLonvqQAAARg"]
[Fri Feb 27 16:24:03.776180 2026] [:error] [pid 52073:tid 52083] [client 4.204.200.32:18403] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aaFUo4a650YPyxXVeRZvJAAAAYc"]
[Fri Feb 27 16:24:04.480639 2026] [:error] [pid 56075:tid 56087] [client 4.204.200.32:18427] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aaFUpMKBhrfI6KNv9RgrUAAAAAo"]
[Fri Feb 27 16:24:05.488946 2026] [:error] [pid 62998:tid 63023] [client 4.204.200.32:18374] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/kolda.php"] [unique_id "aaFUpVQeueXZDUmoLonvqwAAARU"]
[Fri Feb 27 16:24:07.464599 2026] [:error] [pid 49306:tid 49318] [client 4.204.200.32:18339] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/kolda.php"] [unique_id "aaFUp_nSUDZue59Px9t8YQAAAUo"]
[Fri Feb 27 16:24:09.359156 2026] [:error] [pid 54231:tid 54253] [client 4.204.200.32:18305] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/kolda.php"] [unique_id "aaFUqeTvb5AeyJCdY7DO8AAAAFM"]
[Fri Feb 27 16:24:10.426752 2026] [:error] [pid 49306:tid 49326] [client 4.204.200.32:18393] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/kolda.php"] [unique_id "aaFUqvnSUDZue59Px9t8YwAAAVI"]
[Fri Feb 27 16:24:12.301999 2026] [:error] [pid 52073:tid 52094] [client 4.204.200.32:18317] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "aaFUrIa650YPyxXVeRZvNwAAAZI"]
[Fri Feb 27 16:24:13.502710 2026] [:error] [pid 62998:tid 63008] [client 4.204.200.32:18342] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "aaFUrVQeueXZDUmoLonvrgAAAQY"]
[Fri Feb 27 16:24:15.298600 2026] [:error] [pid 52073:tid 52100] [client 4.204.200.32:18242] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "aaFUr4a650YPyxXVeRZvQQAAAZg"]
[Fri Feb 27 16:24:16.785942 2026] [:error] [pid 52073:tid 52077] [client 4.204.200.32:18346] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "aaFUsIa650YPyxXVeRZvSwAAAYE"]
[Fri Feb 27 16:24:17.849574 2026] [:error] [pid 49306:tid 49313] [client 4.204.200.32:18311] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/god.php"] [unique_id "aaFUsfnSUDZue59Px9t8bQAAAUU"]
[Fri Feb 27 16:24:18.856929 2026] [:error] [pid 52073:tid 52085] [client 4.204.200.32:18404] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/god.php"] [unique_id "aaFUsoa650YPyxXVeRZvUwAAAYk"]
[Fri Feb 27 16:24:19.981516 2026] [:error] [pid 54103:tid 54175] [client 4.204.200.32:18349] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/god.php"] [unique_id "aaFUs-vG4MPCmE0B2sB1RAAAAMQ"]
[Fri Feb 27 16:24:20.888172 2026] [:error] [pid 54101:tid 54132] [client 4.204.200.32:18401] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/god.php"] [unique_id "aaFUtFY5qgRktcYTGFshwgAAAdg"]
[Fri Feb 27 16:24:22.494025 2026] [:error] [pid 49306:tid 49317] [client 4.204.200.32:18375] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aaFUtvnSUDZue59Px9t8dAAAAUk"]
[Fri Feb 27 16:24:23.967753 2026] [:error] [pid 62998:tid 63007] [client 4.204.200.32:18426] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aaFUt1QeueXZDUmoLonvsQAAAQU"]
[Fri Feb 27 16:24:25.225520 2026] [:error] [pid 49306:tid 49321] [client 4.204.200.32:18324] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aaFUufnSUDZue59Px9t8dwAAAU0"]
[Fri Feb 27 16:24:25.997902 2026] [:error] [pid 49306:tid 49319] [client 4.204.200.32:18337] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aaFUufnSUDZue59Px9t8egAAAUs"]
[Fri Feb 27 16:24:27.053308 2026] [:error] [pid 49306:tid 49318] [client 4.204.200.32:18382] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aaFUu_nSUDZue59Px9t8fAAAAUo"]
[Fri Feb 27 16:24:28.872683 2026] [:error] [pid 54103:tid 54184] [client 4.204.200.32:18323] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aaFUvOvG4MPCmE0B2sB1RwAAAM0"]
[Fri Feb 27 16:24:30.206488 2026] [:error] [pid 49306:tid 49326] [client 4.204.200.32:18335] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aaFUvvnSUDZue59Px9t8fgAAAVI"]
[Fri Feb 27 16:24:31.103158 2026] [:error] [pid 52073:tid 52077] [client 4.204.200.32:18333] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aaFUv4a650YPyxXVeRZvZAAAAYE"]
[Fri Feb 27 16:24:31.986208 2026] [:error] [pid 52073:tid 52080] [client 4.204.200.32:18355] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/un.php"] [unique_id "aaFUv4a650YPyxXVeRZvZgAAAYQ"]
[Fri Feb 27 16:24:32.907338 2026] [:error] [pid 52073:tid 52093] [client 4.204.200.32:18270] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/un.php"] [unique_id "aaFUwIa650YPyxXVeRZvaAAAAZE"]
[Fri Feb 27 16:24:33.701565 2026] [:error] [pid 49306:tid 49312] [client 4.204.200.32:18309] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/un.php"] [unique_id "aaFUwfnSUDZue59Px9t8hQAAAUQ"]
[Fri Feb 27 16:24:34.194976 2026] [:error] [pid 52073:tid 52082] [client 4.204.200.32:18386] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/un.php"] [unique_id "aaFUwoa650YPyxXVeRZvawAAAYY"]
[Fri Feb 27 16:24:34.865840 2026] [:error] [pid 56075:tid 56087] [client 4.204.200.32:18358] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aaFUwsKBhrfI6KNv9RgrVAAAAAo"]
[Fri Feb 27 16:24:36.014731 2026] [:error] [pid 49306:tid 49329] [client 4.204.200.32:18384] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aaFUxPnSUDZue59Px9t8iQAAAVU"]
[Fri Feb 27 16:24:36.689050 2026] [:error] [pid 52073:tid 52089] [client 4.204.200.32:18306] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aaFUxIa650YPyxXVeRZvcAAAAY0"]
[Fri Feb 27 16:24:37.353136 2026] [:error] [pid 52073:tid 52093] [client 4.204.200.32:18353] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aaFUxYa650YPyxXVeRZvcQAAAZE"]
[Fri Feb 27 16:24:39.165564 2026] [:error] [pid 54101:tid 54128] [client 4.204.200.32:18336] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aaFUx1Y5qgRktcYTGFshxQAAAdQ"]
[Fri Feb 27 16:24:41.288038 2026] [:error] [pid 49306:tid 49310] [client 4.204.200.32:18408] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aaFUyfnSUDZue59Px9t8kQAAAUI"]
[Fri Feb 27 16:24:43.141722 2026] [:error] [pid 54101:tid 54131] [client 4.204.200.32:18292] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aaFUy1Y5qgRktcYTGFshxgAAAdc"]
[Fri Feb 27 16:24:44.551851 2026] [:error] [pid 54102:tid 54149] [client 4.204.200.32:18372] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aaFUzHi74D4fiYUm_GdH5wAAAIU"]
[Fri Feb 27 16:24:45.468252 2026] [:error] [pid 62998:tid 63005] [client 4.204.200.32:18360] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/login8.php"] [unique_id "aaFUzVQeueXZDUmoLonvtQAAAQM"]
[Fri Feb 27 16:24:47.729994 2026] [:error] [pid 54102:tid 54166] [client 4.204.200.32:18268] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/login8.php"] [unique_id "aaFUz3i74D4fiYUm_GdH6AAAAJY"]
[Fri Feb 27 16:24:49.197363 2026] [:error] [pid 62998:tid 63011] [client 4.204.200.32:18345] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/login8.php"] [unique_id "aaFU0VQeueXZDUmoLonvtwAAAQk"]
[Fri Feb 27 16:24:50.009792 2026] [:error] [pid 49306:tid 49311] [client 4.204.200.32:18251] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/login8.php"] [unique_id "aaFU0vnSUDZue59Px9t8mAAAAUM"]
[Fri Feb 27 16:24:50.961426 2026] [:error] [pid 49306:tid 49329] [client 4.204.200.32:18329] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/nnyvn.php"] [unique_id "aaFU0vnSUDZue59Px9t8mQAAAVU"]
[Fri Feb 27 16:24:52.340347 2026] [:error] [pid 62998:tid 63004] [client 4.204.200.32:18397] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/nnyvn.php"] [unique_id "aaFU1FQeueXZDUmoLonvuAAAAQI"]
[Fri Feb 27 16:24:53.406667 2026] [:error] [pid 56075:tid 56078] [client 4.204.200.32:18308] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/nnyvn.php"] [unique_id "aaFU1cKBhrfI6KNv9RgrVQAAAAE"]
[Fri Feb 27 16:24:54.562331 2026] [:error] [pid 49306:tid 49316] [client 4.204.200.32:18347] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/nnyvn.php"] [unique_id "aaFU1vnSUDZue59Px9t8oAAAAUg"]
[Fri Feb 27 16:24:56.739334 2026] [:error] [pid 62998:tid 63009] [client 4.204.200.32:18216] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aaFU2FQeueXZDUmoLonvuwAAAQc"]
[Fri Feb 27 16:24:57.649699 2026] [:error] [pid 49306:tid 49331] [client 4.204.200.32:18326] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aaFU2fnSUDZue59Px9t8pQAAAVc"]
[Fri Feb 27 16:24:58.226073 2026] [:error] [pid 62998:tid 63014] [client 4.204.200.32:18351] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aaFU2lQeueXZDUmoLonvvQAAAQw"]
[Fri Feb 27 16:24:59.296491 2026] [:error] [pid 49306:tid 49317] [client 4.204.200.32:18241] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aaFU2_nSUDZue59Px9t8qwAAAUk"]
[Fri Feb 27 16:25:00.426008 2026] [:error] [pid 54103:tid 54180] [client 4.204.200.32:18252] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lul.php"] [unique_id "aaFU3OvG4MPCmE0B2sB1SgAAAMk"]
[Fri Feb 27 16:25:11.222907 2026] [:error] [pid 54231:tid 54238] [client 4.204.200.32:18348] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "aaFU5-Tvb5AeyJCdY7DPCQAAAEQ"]
[Fri Feb 27 16:25:12.000628 2026] [:error] [pid 52073:tid 52093] [client 4.204.200.32:18249] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "aaFU54a650YPyxXVeRZvhwAAAZE"]
[Fri Feb 27 16:25:13.996459 2026] [:error] [pid 54101:tid 54122] [client 4.204.200.32:18356] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "aaFU6VY5qgRktcYTGFsh1wAAAc4"]
[Fri Feb 27 16:25:14.800640 2026] [:error] [pid 49306:tid 49311] [client 4.204.200.32:18243] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "aaFU6vnSUDZue59Px9t8vAAAAUM"]
[Fri Feb 27 16:25:16.020654 2026] [:error] [pid 62998:tid 63010] [client 4.204.200.32:18302] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fot.php"] [unique_id "aaFU7FQeueXZDUmoLonvwAAAAQg"]
[Fri Feb 27 16:25:16.572349 2026] [:error] [pid 62998:tid 63018] [client 4.204.200.32:18350] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fot.php"] [unique_id "aaFU7FQeueXZDUmoLonvwQAAARA"]
[Fri Feb 27 16:25:17.833632 2026] [:error] [pid 54231:tid 54254] [client 4.204.200.32:18246] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fot.php"] [unique_id "aaFU7eTvb5AeyJCdY7DPDAAAAFQ"]
[Fri Feb 27 16:25:19.625504 2026] [:error] [pid 49306:tid 49321] [client 4.204.200.32:18293] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fot.php"] [unique_id "aaFU7_nSUDZue59Px9t8xAAAAU0"]
[Fri Feb 27 16:25:20.716521 2026] [:error] [pid 49306:tid 49310] [client 4.204.200.32:18407] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "aaFU8PnSUDZue59Px9t8yAAAAUI"]
[Fri Feb 27 16:25:22.592972 2026] [:error] [pid 49306:tid 49332] [client 4.204.200.32:18409] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "aaFU8vnSUDZue59Px9t80QAAAVg"]
[Fri Feb 27 16:25:23.861937 2026] [:error] [pid 52073:tid 52089] [client 4.204.200.32:18370] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "aaFU84a650YPyxXVeRZvnAAAAY0"]
[Fri Feb 27 16:25:27.641640 2026] [:error] [pid 49306:tid 49314] [client 4.204.200.32:18240] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "aaFU9_nSUDZue59Px9t81QAAAUY"]
[Fri Feb 27 16:25:29.971987 2026] [:error] [pid 52073:tid 52089] [client 4.204.200.32:18321] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/forbidals.php"] [unique_id "aaFU-Ya650YPyxXVeRZvrwAAAY0"]
[Fri Feb 27 16:25:30.526553 2026] [:error] [pid 52073:tid 52098] [client 4.204.200.32:18365] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/forbidals.php"] [unique_id "aaFU-oa650YPyxXVeRZvtAAAAZY"]
[Fri Feb 27 16:25:31.275970 2026] [:error] [pid 52073:tid 52094] [client 4.204.200.32:18263] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/forbidals.php"] [unique_id "aaFU-4a650YPyxXVeRZvtwAAAZI"]
[Fri Feb 27 16:25:32.190800 2026] [:error] [pid 52073:tid 52097] [client 4.204.200.32:18415] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/forbidals.php"] [unique_id "aaFU_Ia650YPyxXVeRZvuQAAAZU"]
[Fri Feb 27 16:25:33.064981 2026] [:error] [pid 52073:tid 52096] [client 4.204.200.32:18264] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "aaFU_Ya650YPyxXVeRZvugAAAZQ"]
[Fri Feb 27 16:25:33.832282 2026] [:error] [pid 62998:tid 63001] [client 4.204.200.32:18330] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "aaFU_VQeueXZDUmoLonvxQAAAQA"]
[Fri Feb 27 16:25:34.745851 2026] [:error] [pid 54102:tid 54162] [client 4.204.200.32:18373] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "aaFU_ni74D4fiYUm_GdH-wAAAJI"]
[Fri Feb 27 16:25:35.542953 2026] [:error] [pid 54231:tid 54242] [client 4.204.200.32:18378] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "aaFU_-Tvb5AeyJCdY7DPEQAAAEg"]
[Fri Feb 27 16:25:37.120861 2026] [:error] [pid 52073:tid 52076] [client 4.204.200.32:18419] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/dev1s.php"] [unique_id "aaFVAYa650YPyxXVeRZvvAAAAYA"]
[Fri Feb 27 16:25:38.141459 2026] [:error] [pid 52073:tid 52081] [client 4.204.200.32:18253] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/dev1s.php"] [unique_id "aaFVAoa650YPyxXVeRZvwAAAAYU"]
[Fri Feb 27 16:25:39.422986 2026] [:error] [pid 52073:tid 52082] [client 4.204.200.32:18273] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/dev1s.php"] [unique_id "aaFVA4a650YPyxXVeRZvxgAAAYY"]
[Fri Feb 27 16:25:40.603893 2026] [:error] [pid 49306:tid 49311] [client 4.204.200.32:18262] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/dev1s.php"] [unique_id "aaFVBPnSUDZue59Px9t82QAAAUM"]
[Fri Feb 27 16:25:41.834459 2026] [:error] [pid 54102:tid 54148] [client 4.204.200.32:18425] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ffd.php"] [unique_id "aaFVBXi74D4fiYUm_GdH_gAAAIQ"]
[Fri Feb 27 16:25:43.249712 2026] [:error] [pid 56075:tid 56094] [client 4.204.200.32:18265] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ffd.php"] [unique_id "aaFVB8KBhrfI6KNv9RgrbwAAABA"]
[Fri Feb 27 16:25:44.273763 2026] [:error] [pid 52073:tid 52093] [client 4.204.200.32:18266] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ffd.php"] [unique_id "aaFVCIa650YPyxXVeRZv2wAAAZE"]
[Fri Feb 27 16:25:45.009898 2026] [:error] [pid 52073:tid 52076] [client 4.204.200.32:18325] [client 4.204.200.32] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ffd.php"] [unique_id "aaFVCYa650YPyxXVeRZv3wAAAYA"]
[Fri Feb 27 17:24:52.084241 2026] [:error] [pid 62998:tid 63005] [client 20.104.81.240:56666] [client 20.104.81.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wk/index.php"] [unique_id "aaFi5FQeueXZDUmoLon9FgAAAQM"]
[Fri Feb 27 17:24:52.923240 2026] [:error] [pid 49306:tid 49310] [client 20.104.81.240:53011] [client 20.104.81.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wk/index.php"] [unique_id "aaFi5PnSUDZue59Px9uX5gAAAUI"]
[Fri Feb 27 17:24:53.760751 2026] [:error] [pid 54231:tid 54243] [client 20.104.81.240:53019] [client 20.104.81.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wk/index.php"] [unique_id "aaFi5eTvb5AeyJCdY7DZVwAAAEk"]
[Fri Feb 27 17:24:54.684989 2026] [:error] [pid 54103:tid 54194] [client 20.104.81.240:52999] [client 20.104.81.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wk/index.php"] [unique_id "aaFi5uvG4MPCmE0B2sB8ugAAANc"]
[Fri Feb 27 17:37:55.840930 2026] [:error] [pid 52073:tid 52076] [client 40.80.89.74:9416] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaFl84a650YPyxXVeRaeFAAAAYA"]
[Fri Feb 27 17:37:56.392606 2026] [:error] [pid 49306:tid 49323] [client 40.80.89.74:9425] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaFl9PnSUDZue59Px9ueFwAAAU8"]
[Fri Feb 27 17:37:56.958002 2026] [:error] [pid 54103:tid 54184] [client 40.80.89.74:6690] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaFl9OvG4MPCmE0B2sB_OwAAAM0"]
[Fri Feb 27 17:37:57.516925 2026] [:error] [pid 49306:tid 49310] [client 40.80.89.74:6683] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaFl9fnSUDZue59Px9ueJAAAAUI"]
[Fri Feb 27 19:14:37.935036 2026] [:error] [pid 54231:tid 54237] [client 52.169.5.4:6038] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/blackmini.php"] [unique_id "aaF8neTvb5AeyJCdY7Dv_QAAAEM"]
[Fri Feb 27 19:14:38.436182 2026] [:error] [pid 49306:tid 49328] [client 52.169.5.4:6033] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/blackmini.php"] [unique_id "aaF8nvnSUDZue59Px9vUZgAAAVQ"]
[Fri Feb 27 19:14:38.939011 2026] [:error] [pid 49306:tid 49309] [client 52.169.5.4:2406] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/blackmini.php"] [unique_id "aaF8nvnSUDZue59Px9vUaQAAAUE"]
[Fri Feb 27 19:14:39.481106 2026] [:error] [pid 49306:tid 49327] [client 52.169.5.4:6059] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/blackmini.php"] [unique_id "aaF8n_nSUDZue59Px9vUbAAAAVM"]
[Fri Feb 27 19:14:39.981020 2026] [:error] [pid 49306:tid 49312] [client 52.169.5.4:6056] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "aaF8n_nSUDZue59Px9vUcAAAAUQ"]
[Fri Feb 27 19:14:40.493774 2026] [:error] [pid 56075:tid 56101] [client 52.169.5.4:2186] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "aaF8oMKBhrfI6KNv9RhlOAAAABc"]
[Fri Feb 27 19:14:40.993157 2026] [:error] [pid 49306:tid 49314] [client 52.169.5.4:6703] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "aaF8oPnSUDZue59Px9vUdAAAAUY"]
[Fri Feb 27 19:14:41.515997 2026] [:error] [pid 62998:tid 63024] [client 52.169.5.4:3246] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "aaF8oVQeueXZDUmoLokbFgAAARY"]
[Fri Feb 27 19:14:42.016712 2026] [:error] [pid 49306:tid 49327] [client 52.169.5.4:2115] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/F19.php"] [unique_id "aaF8ovnSUDZue59Px9vUeQAAAVM"]
[Fri Feb 27 19:14:42.519840 2026] [:error] [pid 49306:tid 49317] [client 52.169.5.4:6693] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/F19.php"] [unique_id "aaF8ovnSUDZue59Px9vUgQAAAUk"]
[Fri Feb 27 19:14:43.019012 2026] [:error] [pid 49306:tid 49324] [client 52.169.5.4:7469] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/F19.php"] [unique_id "aaF8o_nSUDZue59Px9vUhQAAAVA"]
[Fri Feb 27 19:14:43.518168 2026] [:error] [pid 49306:tid 49327] [client 52.169.5.4:2232] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/F19.php"] [unique_id "aaF8o_nSUDZue59Px9vUjQAAAVM"]
[Fri Feb 27 19:14:44.040314 2026] [:error] [pid 49306:tid 49317] [client 52.169.5.4:15429] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/F1.php"] [unique_id "aaF8pPnSUDZue59Px9vUkAAAAUk"]
[Fri Feb 27 19:14:44.560723 2026] [:error] [pid 56075:tid 56078] [client 52.169.5.4:4426] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/F1.php"] [unique_id "aaF8pMKBhrfI6KNv9RhlRAAAAAE"]
[Fri Feb 27 19:14:45.061364 2026] [:error] [pid 52073:tid 52085] [client 52.169.5.4:2414] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/F1.php"] [unique_id "aaF8pYa650YPyxXVeRbtMAAAAYk"]
[Fri Feb 27 19:14:45.563689 2026] [:error] [pid 49306:tid 49313] [client 52.169.5.4:6025] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/F1.php"] [unique_id "aaF8pfnSUDZue59Px9vUmwAAAUU"]
[Fri Feb 27 19:14:46.087839 2026] [:error] [pid 56075:tid 56085] [client 52.169.5.4:6684] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aaF8psKBhrfI6KNv9RhlTQAAAAg"]
[Fri Feb 27 19:14:46.588685 2026] [:error] [pid 54102:tid 54155] [client 52.169.5.4:8365] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aaF8pni74D4fiYUm_GdbYwAAAIs"]
[Fri Feb 27 19:14:47.089475 2026] [:error] [pid 56075:tid 56093] [client 52.169.5.4:6071] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aaF8p8KBhrfI6KNv9RhlVQAAAA8"]
[Fri Feb 27 19:14:47.589548 2026] [:error] [pid 54231:tid 54236] [client 52.169.5.4:6712] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aaF8p-Tvb5AeyJCdY7DwBAAAAEI"]
[Fri Feb 27 19:14:48.124109 2026] [:error] [pid 54231:tid 54240] [client 52.169.5.4:7454] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/R57.php"] [unique_id "aaF8qOTvb5AeyJCdY7DwBQAAAEY"]
[Fri Feb 27 19:14:48.647496 2026] [:error] [pid 54101:tid 54118] [client 52.169.5.4:7300] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/R57.php"] [unique_id "aaF8qFY5qgRktcYTGFsx4gAAAco"]
[Fri Feb 27 19:14:49.171060 2026] [:error] [pid 56075:tid 56097] [client 52.169.5.4:7327] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/R57.php"] [unique_id "aaF8qcKBhrfI6KNv9RhlYQAAABM"]
[Fri Feb 27 19:14:49.670982 2026] [:error] [pid 62998:tid 63025] [client 52.169.5.4:7356] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/R57.php"] [unique_id "aaF8qVQeueXZDUmoLokbIAAAARc"]
[Fri Feb 27 19:14:50.193207 2026] [:error] [pid 54101:tid 54125] [client 52.169.5.4:15444] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/4h.php"] [unique_id "aaF8qlY5qgRktcYTGFsx5QAAAdE"]
[Fri Feb 27 19:14:50.699412 2026] [:error] [pid 54101:tid 54117] [client 52.169.5.4:7325] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/4h.php"] [unique_id "aaF8qlY5qgRktcYTGFsx5wAAAck"]
[Fri Feb 27 19:14:51.198685 2026] [:error] [pid 49306:tid 49314] [client 52.169.5.4:7484] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/4h.php"] [unique_id "aaF8q_nSUDZue59Px9vUvwAAAUY"]
[Fri Feb 27 19:14:51.720589 2026] [:error] [pid 49306:tid 49318] [client 52.169.5.4:2188] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/4h.php"] [unique_id "aaF8q_nSUDZue59Px9vUwwAAAUo"]
[Fri Feb 27 19:14:52.219544 2026] [:error] [pid 49306:tid 49330] [client 52.169.5.4:1737] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yussef.php"] [unique_id "aaF8rPnSUDZue59Px9vUxgAAAVY"]
[Fri Feb 27 19:14:52.742079 2026] [:error] [pid 54231:tid 54254] [client 52.169.5.4:5377] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yussef.php"] [unique_id "aaF8rOTvb5AeyJCdY7DwCQAAAFQ"]
[Fri Feb 27 19:14:53.240858 2026] [:error] [pid 54231:tid 54249] [client 52.169.5.4:6696] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yussef.php"] [unique_id "aaF8reTvb5AeyJCdY7DwDQAAAE8"]
[Fri Feb 27 19:14:53.740671 2026] [:error] [pid 54231:tid 54244] [client 52.169.5.4:7609] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yussef.php"] [unique_id "aaF8reTvb5AeyJCdY7DwDwAAAEo"]
[Fri Feb 27 19:14:54.289868 2026] [:error] [pid 49306:tid 49316] [client 52.169.5.4:2191] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "aaF8rvnSUDZue59Px9vU0gAAAUg"]
[Fri Feb 27 19:14:54.793300 2026] [:error] [pid 62998:tid 63007] [client 52.169.5.4:6074] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "aaF8rlQeueXZDUmoLokbJQAAAQU"]
[Fri Feb 27 19:14:55.330991 2026] [:error] [pid 62998:tid 63016] [client 52.169.5.4:6567] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "aaF8r1QeueXZDUmoLokbJwAAAQ4"]
[Fri Feb 27 19:14:55.831902 2026] [:error] [pid 49306:tid 49320] [client 52.169.5.4:6329] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "aaF8r_nSUDZue59Px9vU3QAAAUw"]
[Fri Feb 27 19:14:56.378788 2026] [:error] [pid 49306:tid 49316] [client 52.169.5.4:7593] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bengi.php"] [unique_id "aaF8sPnSUDZue59Px9vU4gAAAUg"]
[Fri Feb 27 19:14:56.911202 2026] [:error] [pid 54231:tid 54245] [client 52.169.5.4:6559] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bengi.php"] [unique_id "aaF8sOTvb5AeyJCdY7DwGQAAAEs"]
[Fri Feb 27 19:14:57.417299 2026] [:error] [pid 54231:tid 54237] [client 52.169.5.4:5411] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bengi.php"] [unique_id "aaF8seTvb5AeyJCdY7DwGwAAAEM"]
[Fri Feb 27 19:14:57.919253 2026] [:error] [pid 49306:tid 49332] [client 52.169.5.4:4432] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bengi.php"] [unique_id "aaF8sfnSUDZue59Px9vU7wAAAVg"]
[Fri Feb 27 19:14:58.441878 2026] [:error] [pid 54231:tid 54242] [client 52.169.5.4:1742] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lb.php"] [unique_id "aaF8suTvb5AeyJCdY7DwHAAAAEg"]
[Fri Feb 27 19:14:58.962133 2026] [:error] [pid 54231:tid 54251] [client 52.169.5.4:6061] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lb.php"] [unique_id "aaF8suTvb5AeyJCdY7DwHQAAAFE"]
[Fri Feb 27 19:14:59.461539 2026] [:error] [pid 54102:tid 54150] [client 52.169.5.4:6067] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lb.php"] [unique_id "aaF8s3i74D4fiYUm_GdbZwAAAIY"]
[Fri Feb 27 19:14:59.983370 2026] [:error] [pid 52073:tid 52080] [client 52.169.5.4:6068] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lb.php"] [unique_id "aaF8s4a650YPyxXVeRbtPQAAAYQ"]
[Fri Feb 27 19:15:00.496675 2026] [:error] [pid 52073:tid 52081] [client 52.169.5.4:7572] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/samfa.php"] [unique_id "aaF8tIa650YPyxXVeRbtPwAAAYU"]
[Fri Feb 27 19:15:00.998682 2026] [:error] [pid 52073:tid 52077] [client 52.169.5.4:7615] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/samfa.php"] [unique_id "aaF8tIa650YPyxXVeRbtQgAAAYE"]
[Fri Feb 27 19:15:01.497987 2026] [:error] [pid 56075:tid 56078] [client 52.169.5.4:4431] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/samfa.php"] [unique_id "aaF8tcKBhrfI6KNv9RhldwAAAAE"]
[Fri Feb 27 19:15:02.017236 2026] [:error] [pid 56075:tid 56086] [client 52.169.5.4:6296] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/samfa.php"] [unique_id "aaF8tsKBhrfI6KNv9RhleAAAAAk"]
[Fri Feb 27 19:15:02.524459 2026] [:error] [pid 54231:tid 54240] [client 52.169.5.4:2226] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/boots.php"] [unique_id "aaF8tuTvb5AeyJCdY7DwJAAAAEY"]
[Fri Feb 27 19:15:03.023002 2026] [:error] [pid 54103:tid 54190] [client 52.169.5.4:5565] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/boots.php"] [unique_id "aaF8t-vG4MPCmE0B2sCMKQAAANM"]
[Fri Feb 27 19:15:03.548662 2026] [:error] [pid 54231:tid 54253] [client 52.169.5.4:7431] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/boots.php"] [unique_id "aaF8t-Tvb5AeyJCdY7DwJwAAAFM"]
[Fri Feb 27 19:15:04.064028 2026] [:error] [pid 54103:tid 54189] [client 52.169.5.4:7456] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/boots.php"] [unique_id "aaF8uOvG4MPCmE0B2sCMLAAAANI"]
[Fri Feb 27 19:15:04.565772 2026] [:error] [pid 49306:tid 49308] [client 52.169.5.4:7310] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/logi.php"] [unique_id "aaF8uPnSUDZue59Px9vU-AAAAUA"]
[Fri Feb 27 19:15:05.064664 2026] [:error] [pid 54231:tid 54244] [client 52.169.5.4:5401] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/logi.php"] [unique_id "aaF8ueTvb5AeyJCdY7DwLAAAAEo"]
[Fri Feb 27 19:15:05.565460 2026] [:error] [pid 49306:tid 49314] [client 52.169.5.4:7304] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/logi.php"] [unique_id "aaF8ufnSUDZue59Px9vU_gAAAUY"]
[Fri Feb 27 19:15:06.089051 2026] [:error] [pid 49306:tid 49310] [client 52.169.5.4:7598] [client 52.169.5.4] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/logi.php"] [unique_id "aaF8uvnSUDZue59Px9vVAAAAAUI"]
[Fri Feb 27 19:17:42.535369 2026] [:error] [pid 49306:tid 49310] [client 20.104.81.240:64117] [client 20.104.81.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aaF9VvnSUDZue59Px9vWSgAAAUI"]
[Fri Feb 27 19:17:43.377673 2026] [:error] [pid 54103:tid 54195] [client 20.104.81.240:64116] [client 20.104.81.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aaF9V-vG4MPCmE0B2sCMhAAAANg"]
[Fri Feb 27 19:17:44.226147 2026] [:error] [pid 49306:tid 49308] [client 20.104.81.240:25226] [client 20.104.81.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aaF9WPnSUDZue59Px9vWTgAAAUA"]
[Fri Feb 27 19:17:45.057797 2026] [:error] [pid 49306:tid 49321] [client 20.104.81.240:25219] [client 20.104.81.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/class.php"] [unique_id "aaF9WfnSUDZue59Px9vWUAAAAU0"]
[Fri Feb 27 20:37:03.665683 2026] [:error] [pid 54101:tid 54118] [client 4.193.177.110:2763] [client 4.193.177.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaGP71Y5qgRktcYTGFs6cwAAAco"]
[Fri Feb 27 20:37:04.020845 2026] [:error] [pid 54103:tid 54179] [client 4.193.177.110:2219] [client 4.193.177.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaGP8OvG4MPCmE0B2sCcSAAAAMg"]
[Fri Feb 27 20:37:04.421754 2026] [:error] [pid 54231:tid 54257] [client 4.193.177.110:2525] [client 4.193.177.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaGP8OTvb5AeyJCdY7AEZAAAAFc"]
[Fri Feb 27 20:37:04.790662 2026] [:error] [pid 52073:tid 52085] [client 4.193.177.110:2197] [client 4.193.177.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaGP8Ia650YPyxXVeRYu3QAAAYk"]
[Sat Feb 28 01:57:06.399673 2026] [:error] [pid 38620:tid 38626] [client 91.224.92.164:41208] [client 91.224.92.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env"] [unique_id "aaHa8gP6I7SRqrhh7RovHgAAAUQ"]
[Sat Feb 28 01:57:07.749677 2026] [:error] [pid 15100:tid 15170] [client 91.224.92.164:18560] [client 91.224.92.164] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env"] [unique_id "aaHa80OEbzcINan_ctLQvQAAAEo"]
[Sat Feb 28 05:17:13.933870 2026] [:error] [pid 39292:tid 39306] [client 20.220.212.70:20785] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaIJ2aIAO5fN7BxyqcEb6AAAAMw"]
[Sat Feb 28 05:17:14.948557 2026] [:error] [pid 22194:tid 22199] [client 20.220.212.70:20759] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaIJ2n6mbajs3bzQGyvLfAAAAUM"]
[Sat Feb 28 05:17:15.892249 2026] [:error] [pid 39183:tid 39214] [client 20.220.212.70:20755] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaIJ2xCf4HvhVePw3LZY1wAAABY"]
[Sat Feb 28 05:17:16.799035 2026] [:error] [pid 22194:tid 22208] [client 20.220.212.70:20797] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaIJ3H6mbajs3bzQGyvLiAAAAUw"]
[Sat Feb 28 05:19:13.059046 2026] [:error] [pid 11791:tid 11812] [client 20.89.58.13:19674] [client 20.89.58.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/000.php"] [unique_id "aaIKUWuX5e1Q32gqxH2DHgAAARM"]
[Sat Feb 28 05:19:13.526370 2026] [:error] [pid 22194:tid 22207] [client 20.89.58.13:19634] [client 20.89.58.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/000.php"] [unique_id "aaIKUX6mbajs3bzQGyvNdAAAAUs"]
[Sat Feb 28 05:19:13.981092 2026] [:error] [pid 39183:tid 39206] [client 20.89.58.13:8425] [client 20.89.58.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/000.php"] [unique_id "aaIKURCf4HvhVePw3LZZfQAAAA4"]
[Sat Feb 28 05:19:14.463628 2026] [:error] [pid 22194:tid 22210] [client 20.89.58.13:14046] [client 20.89.58.13] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/000.php"] [unique_id "aaIKUn6mbajs3bzQGyvNdQAAAU4"]
[Sat Feb 28 05:28:16.641572 2026] [:error] [pid 22194:tid 22203] [client 192.253.248.11:56962] [client 192.253.248.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.git/HEAD"] [unique_id "aaIMcH6mbajs3bzQGyvSuAAAAUc"]
[Sat Feb 28 07:09:32.879206 2026] [:error] [pid 39292:tid 39310] [client 20.220.212.70:62472] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaIkLKIAO5fN7BxyqcGNcwAAANA"]
[Sat Feb 28 07:09:33.734991 2026] [:error] [pid 39185:tid 39270] [client 20.220.212.70:62588] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaIkLRVE-FfM89u7BQZbQQAAAJg"]
[Sat Feb 28 07:09:34.573854 2026] [:error] [pid 39185:tid 39248] [client 20.220.212.70:62543] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaIkLhVE-FfM89u7BQZbRAAAAII"]
[Sat Feb 28 07:09:35.404965 2026] [:error] [pid 39292:tid 39309] [client 20.220.212.70:62587] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaIkL6IAO5fN7BxyqcGNdAAAAM8"]
[Sat Feb 28 07:44:01.029456 2026] [:error] [pid 11791:tid 11799] [client 40.80.89.74:6979] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaIsQWuX5e1Q32gqxH3QCQAAAQY"]
[Sat Feb 28 07:44:01.589201 2026] [:error] [pid 11791:tid 11801] [client 40.80.89.74:10292] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaIsQWuX5e1Q32gqxH3QCgAAAQg"]
[Sat Feb 28 07:44:02.161308 2026] [:error] [pid 39183:tid 39202] [client 40.80.89.74:10263] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaIsQhCf4HvhVePw3LZ_gwAAAAo"]
[Sat Feb 28 07:44:02.724224 2026] [:error] [pid 39292:tid 39297] [client 40.80.89.74:10261] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaIsQqIAO5fN7BxyqcGywgAAAMM"]
[Sat Feb 28 08:52:42.164635 2026] [:error] [pid 11791:tid 11815] [client 173.244.55.31:40035] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "aaI8WmuX5e1Q32gqxH089wAAARY"]
[Sat Feb 28 08:52:43.945213 2026] [:error] [pid 39292:tid 39309] [client 173.244.55.21:37331] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aaI8W6IAO5fN7BxyqcFCFgAAAM8"]
[Sat Feb 28 08:52:46.175256 2026] [:error] [pid 39184:tid 39227] [client 173.244.55.31:51167] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aaI8XltZF9Zd_U7easCIyAAAAEg"]
[Sat Feb 28 08:52:48.858164 2026] [:error] [pid 11791:tid 11809] [client 173.244.55.20:62065] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.wp/wso.php"] [unique_id "aaI8YGuX5e1Q32gqxH09pgAAARA"]
[Sat Feb 28 08:52:52.403706 2026] [:error] [pid 11791:tid 11798] [client 173.244.55.21:55895] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file5.php"] [unique_id "aaI8ZGuX5e1Q32gqxH09_AAAAQU"]
[Sat Feb 28 08:52:53.272318 2026] [:error] [pid 39292:tid 39301] [client 173.244.55.26:30331] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file5.php"] [unique_id "aaI8ZaIAO5fN7BxyqcFCeQAAAMc"]
[Sat Feb 28 08:52:55.028464 2026] [:error] [pid 11791:tid 11800] [client 173.244.55.20:53669] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aaI8Z2uX5e1Q32gqxH0-UAAAAQc"]
[Sat Feb 28 08:52:55.907190 2026] [:error] [pid 11791:tid 11813] [client 173.244.55.23:63295] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aaI8Z2uX5e1Q32gqxH0-awAAARQ"]
[Sat Feb 28 08:52:59.059990 2026] [:error] [pid 11791:tid 11805] [client 173.244.55.26:54585] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/themes/zMousse/otuz1.php"] [unique_id "aaI8a2uX5e1Q32gqxH0-ugAAAQw"]
[Sat Feb 28 08:53:01.409821 2026] [:error] [pid 11791:tid 11816] [client 173.244.55.20:53551] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/edit-wolf.php"] [unique_id "aaI8bWuX5e1Q32gqxH0_CQAAARc"]
[Sat Feb 28 08:53:02.306710 2026] [:error] [pid 11791:tid 11800] [client 173.244.55.25:41269] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/edit-wolf.php"] [unique_id "aaI8bmuX5e1Q32gqxH0_HgAAAQc"]
[Sat Feb 28 08:53:03.179155 2026] [:error] [pid 22194:tid 22209] [client 173.244.55.28:41183] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/edit-wolf.php"] [unique_id "aaI8b36mbajs3bzQGyu0pgAAAU0"]
[Sat Feb 28 08:53:04.064640 2026] [:error] [pid 39183:tid 39202] [client 173.244.55.22:23365] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/edit-wolf.php"] [unique_id "aaI8cBCf4HvhVePw3LanegAAAAo"]
[Sat Feb 28 08:53:06.739325 2026] [:error] [pid 39292:tid 39306] [client 173.244.55.31:32653] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/seoplugins/db.php"] [unique_id "aaI8cqIAO5fN7BxyqcFDJgAAAMw"]
[Sat Feb 28 08:53:09.380075 2026] [:error] [pid 39292:tid 39314] [client 173.244.55.26:63447] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "aaI8daIAO5fN7BxyqcFDWAAAANQ"]
[Sat Feb 28 08:53:09.413724 2026] [:error] [pid 39292:tid 39296] [client 173.244.55.26:31063] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/modules/mod_simplefileuploadv1.3/elements/udd.php"] [unique_id "aaI8daIAO5fN7BxyqcFDWQAAAMI"]
[Sat Feb 28 08:53:10.262688 2026] [:error] [pid 39185:tid 39265] [client 173.244.55.26:26701] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "aaI8dhVE-FfM89u7BQavGwAAAJM"]
[Sat Feb 28 08:53:10.739963 2026] [:error] [pid 39185:tid 39248] [client 173.244.55.28:39193] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aaI8dhVE-FfM89u7BQavIgAAAII"]
[Sat Feb 28 08:53:12.071039 2026] [:error] [pid 11791:tid 11815] [client 173.244.55.25:40111] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/admin.php"] [unique_id "aaI8eGuX5e1Q32gqxH0_5gAAARY"]
[Sat Feb 28 08:53:13.410354 2026] [:error] [pid 22194:tid 22196] [client 173.244.55.29:42991] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/kill.php"] [unique_id "aaI8eX6mbajs3bzQGyu1NQAAAUA"]
[Sat Feb 28 08:53:13.792682 2026] [:error] [pid 39183:tid 39213] [client 173.244.55.28:62653] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aaI8eRCf4HvhVePw3LanoQAAABU"]
[Sat Feb 28 08:53:14.685811 2026] [:error] [pid 11791:tid 11795] [client 173.244.55.26:56869] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aaI8emuX5e1Q32gqxH1AIAAAAQI"]
[Sat Feb 28 08:53:14.719756 2026] [:error] [pid 11791:tid 11803] [client 173.244.55.21:38097] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aaI8emuX5e1Q32gqxH1AIgAAAQo"]
[Sat Feb 28 08:53:15.605160 2026] [:error] [pid 39184:tid 39243] [client 173.244.55.21:44377] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaI8e1tZF9Zd_U7easCJWQAAAFg"]
[Sat Feb 28 08:53:17.827211 2026] [:error] [pid 39184:tid 39240] [client 173.244.55.22:30751] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/robots.php"] [unique_id "aaI8fVtZF9Zd_U7easCJagAAAFU"]
[Sat Feb 28 08:53:18.740129 2026] [:error] [pid 22194:tid 22197] [client 173.244.55.31:61621] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/robots.php"] [unique_id "aaI8fn6mbajs3bzQGyu1aAAAAUE"]
[Sat Feb 28 08:53:19.200218 2026] [:error] [pid 39183:tid 39209] [client 173.244.55.23:37785] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaI8fxCf4HvhVePw3LanzgAAABE"]
[Sat Feb 28 08:53:19.621917 2026] [:error] [pid 11791:tid 11808] [client 173.244.55.26:20477] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/robots.php"] [unique_id "aaI8f2uX5e1Q32gqxH1AhQAAAQ8"]
[Sat Feb 28 08:53:20.503952 2026] [:error] [pid 39183:tid 39215] [client 173.244.55.29:46755] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/robots.php"] [unique_id "aaI8gBCf4HvhVePw3Lan1gAAABc"]
[Sat Feb 28 08:53:21.384603 2026] [:error] [pid 39183:tid 39211] [client 173.244.55.29:56627] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/robots.php"] [unique_id "aaI8gRCf4HvhVePw3Lan3gAAABM"]
[Sat Feb 28 08:53:21.450787 2026] [:error] [pid 11791:tid 11804] [client 173.244.55.22:56577] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aaI8gWuX5e1Q32gqxH1AvAAAAQs"]
[Sat Feb 28 08:53:24.986234 2026] [:error] [pid 22194:tid 22196] [client 173.244.55.26:57713] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aaI8hH6mbajs3bzQGyu1sgAAAUA"]
[Sat Feb 28 08:53:25.366307 2026] [:error] [pid 11791:tid 11795] [client 173.244.55.21:42601] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/lib/"] [unique_id "aaI8hWuX5e1Q32gqxH1BMwAAAQI"]
[Sat Feb 28 08:53:25.871961 2026] [:error] [pid 11791:tid 11817] [client 173.244.55.29:54045] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin/function.php"] [unique_id "aaI8hWuX5e1Q32gqxH1BPQAAARg"]
[Sat Feb 28 08:53:27.125386 2026] [:error] [pid 39185:tid 39258] [client 173.244.55.23:60975] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/"] [unique_id "aaI8hxVE-FfM89u7BQavtgAAAIw"]
[Sat Feb 28 08:53:27.233801 2026] [:error] [pid 22194:tid 22210] [client 173.244.55.23:34699] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aaI8h36mbajs3bzQGyu14gAAAU4"]
[Sat Feb 28 08:53:28.038129 2026] [:error] [pid 39292:tid 39315] [client 173.244.55.22:61741] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/"] [unique_id "aaI8iKIAO5fN7BxyqcFD5AAAANU"]
[Sat Feb 28 08:53:28.104574 2026] [:error] [pid 39292:tid 39301] [client 173.244.55.30:59333] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aaI8iKIAO5fN7BxyqcFD5gAAAMc"]
[Sat Feb 28 08:53:28.986664 2026] [:error] [pid 11791:tid 11815] [client 173.244.55.30:40577] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aaI8iGuX5e1Q32gqxH1BhwAAARY"]
[Sat Feb 28 08:53:29.867669 2026] [:error] [pid 39185:tid 39257] [client 173.244.55.29:34395] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aaI8iRVE-FfM89u7BQav2AAAAIs"]
[Sat Feb 28 08:53:30.254106 2026] [:error] [pid 39185:tid 39268] [client 173.244.55.20:62549] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/"] [unique_id "aaI8ihVE-FfM89u7BQav4AAAAJY"]
[Sat Feb 28 08:53:30.770404 2026] [:error] [pid 22194:tid 22216] [client 173.244.55.30:63397] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aaI8in6mbajs3bzQGyu2BAAAAVQ"]
[Sat Feb 28 08:53:32.096803 2026] [:error] [pid 39292:tid 39308] [client 173.244.55.23:63985] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aaI8jKIAO5fN7BxyqcFEDgAAAM4"]
[Sat Feb 28 08:53:33.852530 2026] [:error] [pid 22194:tid 22209] [client 173.244.55.30:53365] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "aaI8jX6mbajs3bzQGyu2LAAAAU0"]
[Sat Feb 28 08:53:35.179320 2026] [:error] [pid 39185:tid 39258] [client 173.244.55.23:36815] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/group/"] [unique_id "aaI8jxVE-FfM89u7BQawHgAAAIw"]
[Sat Feb 28 08:53:35.625581 2026] [:error] [pid 11791:tid 11809] [client 173.244.55.21:45875] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aaI8j2uX5e1Q32gqxH1CEwAAARA"]
[Sat Feb 28 08:53:36.053534 2026] [:error] [pid 39292:tid 39295] [client 173.244.55.22:45361] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/group/"] [unique_id "aaI8kKIAO5fN7BxyqcFEMgAAAME"]
[Sat Feb 28 08:53:36.930754 2026] [:error] [pid 39292:tid 39309] [client 173.244.55.26:52769] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/group/"] [unique_id "aaI8kKIAO5fN7BxyqcFEPAAAAM8"]
[Sat Feb 28 08:53:36.955632 2026] [:error] [pid 11791:tid 11801] [client 173.244.55.23:39221] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aaI8kGuX5e1Q32gqxH1CKQAAAQg"]
[Sat Feb 28 08:53:37.836264 2026] [:error] [pid 11791:tid 11797] [client 173.244.55.25:38139] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/function.php"] [unique_id "aaI8kWuX5e1Q32gqxH1CSwAAAQQ"]
[Sat Feb 28 08:53:38.716014 2026] [:error] [pid 39292:tid 39302] [client 173.244.55.20:45737] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/function.php"] [unique_id "aaI8kqIAO5fN7BxyqcFESQAAAMg"]
[Sat Feb 28 08:53:39.586737 2026] [:error] [pid 39184:tid 39223] [client 173.244.55.25:52057] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/function.php"] [unique_id "aaI8k1tZF9Zd_U7easCJ6wAAAEQ"]
[Sat Feb 28 08:53:40.913024 2026] [:error] [pid 22194:tid 22200] [client 173.244.55.28:26441] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aaI8lH6mbajs3bzQGyu2eQAAAUQ"]
[Sat Feb 28 08:53:41.796264 2026] [:error] [pid 11791:tid 11798] [client 173.244.55.31:47345] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-signup.php"] [unique_id "aaI8lWuX5e1Q32gqxH1CoAAAAQU"]
[Sat Feb 28 08:53:41.840961 2026] [:error] [pid 11791:tid 11802] [client 173.244.55.31:58373] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aaI8lWuX5e1Q32gqxH1CowAAAQk"]
[Sat Feb 28 08:53:44.057123 2026] [:error] [pid 39183:tid 39213] [client 173.244.55.25:65157] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/widget/"] [unique_id "aaI8mBCf4HvhVePw3LaoVgAAABU"]
[Sat Feb 28 08:53:45.346205 2026] [:error] [pid 22194:tid 22217] [client 173.244.55.26:44077] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aaI8mX6mbajs3bzQGyu26wAAAVU"]
[Sat Feb 28 08:53:46.695811 2026] [:error] [pid 39185:tid 39264] [client 173.244.55.31:21563] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aaI8mhVE-FfM89u7BQawdwAAAJI"]
[Sat Feb 28 08:53:47.586122 2026] [:error] [pid 39183:tid 39210] [client 173.244.55.31:51745] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/new.php"] [unique_id "aaI8mxCf4HvhVePw3LaoawAAABI"]
[Sat Feb 28 08:53:47.605888 2026] [:error] [pid 22194:tid 22197] [client 173.244.55.30:21781] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/"] [unique_id "aaI8m36mbajs3bzQGyu3JwAAAUE"]
[Sat Feb 28 08:53:48.489014 2026] [:error] [pid 11791:tid 11800] [client 173.244.55.29:42175] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/"] [unique_id "aaI8nGuX5e1Q32gqxH1DIQAAAQc"]
[Sat Feb 28 08:53:49.345475 2026] [:error] [pid 11791:tid 11802] [client 173.244.55.30:45635] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aaI8nWuX5e1Q32gqxH1DOAAAAQk"]
[Sat Feb 28 08:53:50.704523 2026] [:error] [pid 39185:tid 39265] [client 173.244.55.31:62689] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aaI8nhVE-FfM89u7BQawmwAAAJM"]
[Sat Feb 28 08:53:51.164538 2026] [:error] [pid 39184:tid 39233] [client 173.244.55.31:26959] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3"] [unique_id "aaI8n1tZF9Zd_U7easCKUQAAAE4"]
[Sat Feb 28 08:53:51.584478 2026] [:error] [pid 11791:tid 11804] [client 173.244.55.28:35411] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/shell20211028.php"] [unique_id "aaI8n2uX5e1Q32gqxH1DYQAAAQs"]
[Sat Feb 28 08:53:52.056878 2026] [:error] [pid 39184:tid 39232] [client 173.244.55.25:37271] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3"] [unique_id "aaI8oFtZF9Zd_U7easCKWgAAAE0"]
[Sat Feb 28 08:53:52.464499 2026] [:error] [pid 39292:tid 39308] [client 173.244.55.31:55005] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/shell20211028.php"] [unique_id "aaI8oKIAO5fN7BxyqcFEvwAAAM4"]
[Sat Feb 28 08:53:52.936808 2026] [:error] [pid 11791:tid 11799] [client 173.244.55.25:20941] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3"] [unique_id "aaI8oGuX5e1Q32gqxH1DiQAAAQY"]
[Sat Feb 28 08:53:53.817928 2026] [:error] [pid 39292:tid 39311] [client 173.244.55.31:32095] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3"] [unique_id "aaI8oaIAO5fN7BxyqcFEygAAANE"]
[Sat Feb 28 08:53:55.107315 2026] [:error] [pid 22194:tid 22200] [client 173.244.55.23:21875] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aaI8o36mbajs3bzQGyu3jwAAAUQ"]
[Sat Feb 28 08:53:56.019715 2026] [:error] [pid 22194:tid 22211] [client 173.244.55.23:61465] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/"] [unique_id "aaI8pH6mbajs3bzQGyu3ogAAAU8"]
[Sat Feb 28 08:53:56.437219 2026] [:error] [pid 39292:tid 39311] [client 173.244.55.28:48401] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aaI8pKIAO5fN7BxyqcFE8AAAANE"]
[Sat Feb 28 08:53:56.895847 2026] [:error] [pid 11791:tid 11816] [client 173.244.55.23:23585] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/"] [unique_id "aaI8pGuX5e1Q32gqxH1D1AAAARc"]
[Sat Feb 28 08:53:57.757094 2026] [:error] [pid 22194:tid 22220] [client 173.244.55.28:44625] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aaI8pX6mbajs3bzQGyu3vgAAAVg"]
[Sat Feb 28 08:53:58.643640 2026] [:error] [pid 22194:tid 22199] [client 173.244.55.21:40237] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aaI8pn6mbajs3bzQGyu3zQAAAUM"]
[Sat Feb 28 08:53:59.523688 2026] [:error] [pid 11791:tid 11814] [client 173.244.55.29:65531] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaI8p2uX5e1Q32gqxH1EJQAAARU"]
[Sat Feb 28 08:53:59.526798 2026] [:error] [pid 11791:tid 11808] [client 173.244.55.29:59821] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/ao_ccss/"] [unique_id "aaI8p2uX5e1Q32gqxH1EJgAAAQ8"]
[Sat Feb 28 08:54:00.405103 2026] [:error] [pid 11791:tid 11806] [client 173.244.55.29:28299] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/languages/404.php"] [unique_id "aaI8qGuX5e1Q32gqxH1EQAAAAQ0"]
[Sat Feb 28 08:54:02.189144 2026] [:error] [pid 22194:tid 22207] [client 173.244.55.20:25849] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/upload/image/"] [unique_id "aaI8qn6mbajs3bzQGyu4JQAAAUs"]
[Sat Feb 28 08:54:02.638010 2026] [:error] [pid 22194:tid 22206] [client 173.244.55.25:29825] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aaI8qn6mbajs3bzQGyu4LwAAAUo"]
[Sat Feb 28 08:54:03.071447 2026] [:error] [pid 39185:tid 39269] [client 173.244.55.30:33727] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/upload/image/"] [unique_id "aaI8qxVE-FfM89u7BQaw3wAAAJc"]
[Sat Feb 28 08:54:03.517217 2026] [:error] [pid 11791:tid 11799] [client 173.244.55.22:60293] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aaI8q2uX5e1Q32gqxH1EcgAAAQY"]
[Sat Feb 28 08:54:04.413012 2026] [:error] [pid 39183:tid 39215] [client 173.244.55.31:59147] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aaI8rBCf4HvhVePw3LaozgAAABc"]
[Sat Feb 28 08:54:04.461481 2026] [:error] [pid 39184:tid 39220] [client 173.244.55.25:62273] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wordpress/wp-content/uploads/"] [unique_id "aaI8rFtZF9Zd_U7easCKxQAAAEE"]
[Sat Feb 28 08:54:06.246168 2026] [:error] [pid 11791:tid 11812] [client 173.244.55.30:28979] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/blog/wp-includes/"] [unique_id "aaI8rmuX5e1Q32gqxH1EqgAAARM"]
[Sat Feb 28 08:54:07.098139 2026] [:error] [pid 22194:tid 22214] [client 173.244.55.25:32943] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/db.php"] [unique_id "aaI8r36mbajs3bzQGyu4bAAAAVI"]
[Sat Feb 28 08:54:11.139363 2026] [:error] [pid 22194:tid 22197] [client 173.244.55.31:35199] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aaI8s36mbajs3bzQGyu4wAAAAUE"]
[Sat Feb 28 08:54:11.206954 2026] [:error] [pid 39292:tid 39305] [client 173.244.55.31:48607] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin/uploads/"] [unique_id "aaI8s6IAO5fN7BxyqcFFjQAAAMs"]
[Sat Feb 28 08:54:12.029437 2026] [:error] [pid 11791:tid 11813] [client 173.244.55.25:36329] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/tflow/up.php"] [unique_id "aaI8tGuX5e1Q32gqxH1FDAAAARQ"]
[Sat Feb 28 08:54:12.918882 2026] [:error] [pid 39292:tid 39303] [client 173.244.55.25:64825] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/tflow/up.php"] [unique_id "aaI8tKIAO5fN7BxyqcFFpgAAAMk"]
[Sat Feb 28 08:54:14.244545 2026] [:error] [pid 11791:tid 11815] [client 173.244.55.26:61793] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/function.php"] [unique_id "aaI8tmuX5e1Q32gqxH1FQAAAARY"]
[Sat Feb 28 08:54:14.745491 2026] [:error] [pid 11791:tid 11812] [client 173.244.55.20:49743] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/"] [unique_id "aaI8tmuX5e1Q32gqxH1FSwAAARM"]
[Sat Feb 28 08:54:15.119505 2026] [:error] [pid 39292:tid 39305] [client 173.244.55.26:32721] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/function.php"] [unique_id "aaI8t6IAO5fN7BxyqcFFwQAAAMs"]
[Sat Feb 28 08:54:16.431219 2026] [:error] [pid 39183:tid 39212] [client 173.244.55.20:60381] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/templates/beez3/index.php"] [unique_id "aaI8uBCf4HvhVePw3LapGgAAABQ"]
[Sat Feb 28 08:54:17.305950 2026] [:error] [pid 22194:tid 22210] [client 173.244.55.21:36509] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/templates/beez3/index.php"] [unique_id "aaI8uX6mbajs3bzQGyu5GQAAAU4"]
[Sat Feb 28 08:54:17.409538 2026] [:error] [pid 22194:tid 22218] [client 173.244.55.21:22699] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/modules/"] [unique_id "aaI8uX6mbajs3bzQGyu5HAAAAVY"]
[Sat Feb 28 08:54:19.188033 2026] [:error] [pid 22194:tid 22199] [client 173.244.55.30:47163] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/mt/"] [unique_id "aaI8u36mbajs3bzQGyu5SAAAAUM"]
[Sat Feb 28 08:54:20.073245 2026] [:error] [pid 39183:tid 39202] [client 173.244.55.30:54109] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/mt/"] [unique_id "aaI8vBCf4HvhVePw3LapMAAAAAo"]
[Sat Feb 28 08:54:20.299588 2026] [:error] [pid 22194:tid 22212] [client 173.244.55.30:23513] [client 173.244.55.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.30, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aaI8vH6mbajs3bzQGyu5VwAAAVA"]
[Sat Feb 28 08:54:20.764621 2026] [:error] [pid 22194:tid 22206] [client 173.244.55.30:23513] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/install.php"] [unique_id "aaI8vH6mbajs3bzQGyu5XgAAAUo"]
[Sat Feb 28 08:54:20.957668 2026] [:error] [pid 11791:tid 11803] [client 173.244.55.31:39979] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/mt/"] [unique_id "aaI8vGuX5e1Q32gqxH1FqQAAAQo"]
[Sat Feb 28 08:54:21.640307 2026] [:error] [pid 22194:tid 22214] [client 173.244.55.30:36877] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/install.php"] [unique_id "aaI8vX6mbajs3bzQGyu5agAAAVI"]
[Sat Feb 28 08:54:23.399436 2026] [:error] [pid 39184:tid 39219] [client 173.244.55.28:32203] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/images/class-config.php"] [unique_id "aaI8v1tZF9Zd_U7easCLIwAAAEA"]
[Sat Feb 28 08:54:24.950035 2026] [:error] [pid 22194:tid 22204] [client 173.244.55.29:23161] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/ocean/"] [unique_id "aaI8wH6mbajs3bzQGyu5sQAAAUg"]
[Sat Feb 28 08:54:25.819477 2026] [:error] [pid 39292:tid 39312] [client 173.244.55.23:35093] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/ocean/"] [unique_id "aaI8waIAO5fN7BxyqcFGcQAAANI"]
[Sat Feb 28 08:54:27.131561 2026] [:error] [pid 22194:tid 22198] [client 173.244.55.21:45929] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/languages/"] [unique_id "aaI8w36mbajs3bzQGyu53QAAAUI"]
[Sat Feb 28 08:54:28.318632 2026] [:error] [pid 39183:tid 39207] [client 173.244.55.23:27735] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aaI8xBCf4HvhVePw3LapbAAAAA8"]
[Sat Feb 28 08:54:28.894314 2026] [:error] [pid 11791:tid 11808] [client 173.244.55.20:21355] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/2023/"] [unique_id "aaI8xGuX5e1Q32gqxH1GUAAAAQ8"]
[Sat Feb 28 08:54:29.817833 2026] [:error] [pid 39185:tid 39264] [client 173.244.55.25:46871] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/2023/"] [unique_id "aaI8xRVE-FfM89u7BQax7wAAAJI"]
[Sat Feb 28 08:54:30.120053 2026] [:error] [pid 39185:tid 39270] [client 173.244.55.29:38689] [client 173.244.55.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.29, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aaI8xhVE-FfM89u7BQax9AAAAJg"]
[Sat Feb 28 08:54:31.014677 2026] [:error] [pid 39185:tid 39257] [client 173.244.55.29:38689] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/item.php"] [unique_id "aaI8xxVE-FfM89u7BQayAQAAAIs"]
[Sat Feb 28 08:54:31.163591 2026] [:error] [pid 39292:tid 39298] [client 173.244.55.29:55281] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/2024/"] [unique_id "aaI8x6IAO5fN7BxyqcFGrQAAAMQ"]
[Sat Feb 28 08:54:32.034464 2026] [:error] [pid 39292:tid 39309] [client 173.244.55.21:46567] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/2024/"] [unique_id "aaI8yKIAO5fN7BxyqcFGuQAAAM8"]
[Sat Feb 28 08:54:33.216480 2026] [:error] [pid 39292:tid 39298] [client 173.244.55.26:49493] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/css/admin.php"] [unique_id "aaI8yaIAO5fN7BxyqcFGywAAAMQ"]
[Sat Feb 28 08:54:34.254904 2026] [:error] [pid 11791:tid 11811] [client 173.244.55.30:47079] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-includes/IXR/"] [unique_id "aaI8ymuX5e1Q32gqxH1GrgAAARI"]
[Sat Feb 28 08:54:34.526853 2026] [:error] [pid 22194:tid 22202] [client 173.244.55.25:54959] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aaI8yn6mbajs3bzQGyu6NgAAAUY"]
[Sat Feb 28 08:54:35.124175 2026] [:error] [pid 39185:tid 39257] [client 173.244.55.25:30853] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-includes/IXR/"] [unique_id "aaI8yxVE-FfM89u7BQayLAAAAIs"]
[Sat Feb 28 08:54:36.009119 2026] [:error] [pid 11791:tid 11800] [client 173.244.55.30:23165] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-includes/IXR/"] [unique_id "aaI8zGuX5e1Q32gqxH1G0wAAAQc"]
[Sat Feb 28 08:54:37.198328 2026] [:error] [pid 22194:tid 22197] [client 173.244.55.28:25727] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aaI8zX6mbajs3bzQGyu6bQAAAUE"]
[Sat Feb 28 08:54:38.078808 2026] [:error] [pid 39292:tid 39318] [client 173.244.55.28:44167] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aaI8zqIAO5fN7BxyqcFHBAAAANg"]
[Sat Feb 28 08:54:38.653683 2026] [:error] [pid 11791:tid 11805] [client 173.244.55.31:31929] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/wlw/"] [unique_id "aaI8zmuX5e1Q32gqxH1HGQAAAQw"]
[Sat Feb 28 08:54:38.961577 2026] [:error] [pid 11791:tid 11794] [client 173.244.55.31:20633] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aaI8zmuX5e1Q32gqxH1HIQAAAQE"]
[Sat Feb 28 08:54:39.524575 2026] [:error] [pid 22194:tid 22202] [client 173.244.55.28:42753] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/wlw/"] [unique_id "aaI8z36mbajs3bzQGyu6sgAAAUY"]
[Sat Feb 28 08:54:39.841620 2026] [:error] [pid 39292:tid 39304] [client 173.244.55.22:39805] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aaI8z6IAO5fN7BxyqcFHEQAAAMo"]
[Sat Feb 28 08:54:40.395515 2026] [:error] [pid 11791:tid 11816] [client 173.244.55.26:24369] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/wlw/"] [unique_id "aaI80GuX5e1Q32gqxH1HPQAAARc"]
[Sat Feb 28 08:54:41.296734 2026] [:error] [pid 39185:tid 39270] [client 173.244.55.28:26053] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/wlw/"] [unique_id "aaI80RVE-FfM89u7BQayWQAAAJg"]
[Sat Feb 28 08:54:42.177514 2026] [:error] [pid 39185:tid 39262] [client 173.244.55.26:43265] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/wlw/"] [unique_id "aaI80hVE-FfM89u7BQayXgAAAJA"]
[Sat Feb 28 08:54:44.304352 2026] [:error] [pid 22194:tid 22202] [client 173.244.55.20:27469] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaI81H6mbajs3bzQGyu7RQAAAUY"]
[Sat Feb 28 08:54:46.083836 2026] [:error] [pid 39185:tid 39269] [client 173.244.55.29:62593] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aaI81hVE-FfM89u7BQayegAAAJc"]
[Sat Feb 28 08:54:48.305119 2026] [:error] [pid 39292:tid 39315] [client 173.244.55.28:56363] [client 173.244.55.28] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.28, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aaI82KIAO5fN7BxyqcFHqQAAANU"]
[Sat Feb 28 08:54:48.751401 2026] [:error] [pid 39292:tid 39305] [client 173.244.55.28:56363] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aaI82KIAO5fN7BxyqcFHtAAAAMs"]
[Sat Feb 28 08:54:51.393882 2026] [:error] [pid 22194:tid 22205] [client 173.244.55.22:57423] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/wp-conflg.php"] [unique_id "aaI8236mbajs3bzQGyu7rgAAAUk"]
[Sat Feb 28 08:54:53.166880 2026] [:error] [pid 39184:tid 39231] [client 173.244.55.20:61851] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aaI83VtZF9Zd_U7easCMJQAAAEw"]
[Sat Feb 28 08:54:57.564654 2026] [:error] [pid 39292:tid 39296] [client 173.244.55.22:64913] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/gecko-litespeed.php"] [unique_id "aaI84aIAO5fN7BxyqcFIRAAAAMI"]
[Sat Feb 28 08:54:59.786299 2026] [:error] [pid 22194:tid 22219] [client 173.244.55.29:39187] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aaI8436mbajs3bzQGyu8IAAAAVc"]
[Sat Feb 28 08:55:01.984490 2026] [:error] [pid 39184:tid 39230] [client 173.244.55.20:41641] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aaI85VtZF9Zd_U7easCMdgAAAEs"]
[Sat Feb 28 08:55:02.873449 2026] [:error] [pid 39183:tid 39200] [client 173.244.55.30:31173] [client 173.244.55.30] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.30, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aaI85hCf4HvhVePw3LaqIgAAAAg"]
[Sat Feb 28 08:55:04.668281 2026] [:error] [pid 39183:tid 39197] [client 173.244.55.30:31173] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aaI86BCf4HvhVePw3LaqLAAAAAU"]
[Sat Feb 28 08:55:05.995098 2026] [:error] [pid 39185:tid 39253] [client 173.244.55.29:49423] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aaI86RVE-FfM89u7BQazPAAAAIc"]
[Sat Feb 28 08:55:07.767544 2026] [:error] [pid 11791:tid 11798] [client 173.244.55.21:55425] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aaI862uX5e1Q32gqxH1JjgAAAQU"]
[Sat Feb 28 08:55:09.114281 2026] [:error] [pid 39184:tid 39221] [client 173.244.55.23:42263] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/images/index22.php"] [unique_id "aaI87VtZF9Zd_U7easCMtQAAAEI"]
[Sat Feb 28 08:55:09.985449 2026] [:error] [pid 22194:tid 22211] [client 173.244.55.26:59331] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/images/index22.php"] [unique_id "aaI87X6mbajs3bzQGyu8mAAAAU8"]
[Sat Feb 28 08:55:11.325562 2026] [:error] [pid 11791:tid 11802] [client 173.244.55.20:30463] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-user.php"] [unique_id "aaI872uX5e1Q32gqxH1J1wAAAQk"]
[Sat Feb 28 08:55:12.644616 2026] [:error] [pid 11791:tid 11793] [client 173.244.55.26:49239] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aaI88GuX5e1Q32gqxH1J_QAAAQA"]
[Sat Feb 28 08:55:13.525847 2026] [:error] [pid 39292:tid 39312] [client 173.244.55.31:64089] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aaI88aIAO5fN7BxyqcFJKQAAANI"]
[Sat Feb 28 08:55:16.642714 2026] [:error] [pid 11791:tid 11815] [client 173.244.55.30:44263] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aaI89GuX5e1Q32gqxH1KrwAAARY"]
[Sat Feb 28 08:55:17.976285 2026] [:error] [pid 22194:tid 22205] [client 173.244.55.25:24043] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaI89X6mbajs3bzQGyu9JQAAAUk"]
[Sat Feb 28 08:55:20.303287 2026] [:error] [pid 39292:tid 39295] [client 173.244.55.25:58175] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/cache/index.php"] [unique_id "aaI8-KIAO5fN7BxyqcFJfwAAAME"]
[Sat Feb 28 08:55:22.077793 2026] [:error] [pid 22194:tid 22219] [client 173.244.55.20:61043] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aaI8-n6mbajs3bzQGyu9XgAAAVc"]
[Sat Feb 28 08:55:24.289054 2026] [:error] [pid 39183:tid 39208] [client 173.244.55.23:38103] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aaI8_BCf4HvhVePw3LaqWgAAABA"]
[Sat Feb 28 08:55:25.162585 2026] [:error] [pid 39292:tid 39314] [client 173.244.55.28:32285] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aaI8_aIAO5fN7BxyqcFJwgAAANQ"]
[Sat Feb 28 08:55:26.920795 2026] [:error] [pid 22194:tid 22215] [client 173.244.55.21:30675] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/click.php"] [unique_id "aaI8_n6mbajs3bzQGyu9ngAAAVM"]
[Sat Feb 28 08:55:27.806027 2026] [:error] [pid 22194:tid 22204] [client 173.244.55.30:63643] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/wp-conflg.php"] [unique_id "aaI8_36mbajs3bzQGyu9qQAAAUg"]
[Sat Feb 28 08:55:29.593968 2026] [:error] [pid 39185:tid 39249] [client 173.244.55.26:22461] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/widgets/bypass.php"] [unique_id "aaI9ARVE-FfM89u7BQa0AQAAAIM"]
[Sat Feb 28 08:55:30.905181 2026] [:error] [pid 11791:tid 11805] [client 173.244.55.22:27417] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aaI9AmuX5e1Q32gqxH1LxgAAAQw"]
[Sat Feb 28 08:55:34.881664 2026] [:error] [pid 39184:tid 39238] [client 173.244.55.30:45485] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aaI9BltZF9Zd_U7easCNdwAAAFM"]
[Sat Feb 28 08:55:35.762765 2026] [:error] [pid 22194:tid 22200] [client 173.244.55.26:61303] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aaI9B36mbajs3bzQGyu9-gAAAUQ"]
[Sat Feb 28 08:55:36.645021 2026] [:error] [pid 22194:tid 22205] [client 173.244.55.30:40127] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aaI9CH6mbajs3bzQGyu-BgAAAUk"]
[Sat Feb 28 08:55:37.554545 2026] [:error] [pid 39183:tid 39204] [client 173.244.55.29:24455] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aaI9CRCf4HvhVePw3LaqmAAAAAw"]
[Sat Feb 28 08:55:38.443519 2026] [:error] [pid 22194:tid 22219] [client 173.244.55.29:39857] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xp.php"] [unique_id "aaI9Cn6mbajs3bzQGyu-HgAAAVc"]
[Sat Feb 28 08:55:39.781690 2026] [:error] [pid 22194:tid 22210] [client 173.244.55.22:44475] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aaI9C36mbajs3bzQGyu-QAAAAU4"]
[Sat Feb 28 08:55:40.661841 2026] [:error] [pid 39184:tid 39222] [client 173.244.55.22:54061] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaI9DFtZF9Zd_U7easCNpQAAAEM"]
[Sat Feb 28 08:55:42.452961 2026] [:error] [pid 39184:tid 39220] [client 173.244.55.21:48307] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaI9DltZF9Zd_U7easCNvQAAAEE"]
[Sat Feb 28 08:55:43.345609 2026] [:error] [pid 11791:tid 11799] [client 173.244.55.20:50315] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aaI9D2uX5e1Q32gqxH1MbAAAAQY"]
[Sat Feb 28 08:55:44.223524 2026] [:error] [pid 39292:tid 39313] [client 173.244.55.28:64445] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aaI9EKIAO5fN7BxyqcFKjQAAANM"]
[Sat Feb 28 08:55:45.093409 2026] [:error] [pid 39183:tid 39205] [client 173.244.55.22:46021] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aaI9ERCf4HvhVePw3LaqvAAAAA0"]
[Sat Feb 28 08:55:46.420755 2026] [:error] [pid 39292:tid 39316] [client 173.244.55.29:23387] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aaI9EqIAO5fN7BxyqcFKngAAANY"]
[Sat Feb 28 08:55:48.215437 2026] [:error] [pid 39292:tid 39315] [client 173.244.55.21:41543] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aaI9FKIAO5fN7BxyqcFKqQAAANU"]
[Sat Feb 28 08:55:49.986846 2026] [:error] [pid 11791:tid 11799] [client 173.244.55.29:59129] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaI9FWuX5e1Q32gqxH1M0wAAAQY"]
[Sat Feb 28 08:55:50.875539 2026] [:error] [pid 39185:tid 39259] [client 173.244.55.29:62779] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaI9FhVE-FfM89u7BQa0pAAAAI0"]
[Sat Feb 28 08:55:52.635348 2026] [:error] [pid 39184:tid 39238] [client 173.244.55.30:54769] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aaI9GFtZF9Zd_U7easCOKQAAAFM"]
[Sat Feb 28 08:55:55.309985 2026] [:error] [pid 39292:tid 39312] [client 173.244.55.22:26955] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/templates/beez3/bypass.php"] [unique_id "aaI9G6IAO5fN7BxyqcFLDgAAANI"]
[Sat Feb 28 08:55:56.191641 2026] [:error] [pid 11791:tid 11812] [client 173.244.55.20:48287] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/templates/beez3/bypass.php"] [unique_id "aaI9HGuX5e1Q32gqxH1NPgAAARM"]
[Sat Feb 28 08:55:58.445362 2026] [:error] [pid 11791:tid 11806] [client 173.244.55.29:41059] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aaI9HmuX5e1Q32gqxH1NigAAAQ0"]
[Sat Feb 28 08:55:59.344289 2026] [:error] [pid 39292:tid 39317] [client 173.244.55.31:49941] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaI9H6IAO5fN7BxyqcFLOQAAANc"]
[Sat Feb 28 08:56:01.571981 2026] [:error] [pid 39185:tid 39252] [client 173.244.55.26:38767] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aaI9IRVE-FfM89u7BQa07wAAAIY"]
[Sat Feb 28 08:56:02.447789 2026] [:error] [pid 39292:tid 39316] [client 173.244.55.31:27359] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aaI9IqIAO5fN7BxyqcFLZgAAANY"]
[Sat Feb 28 08:56:05.091229 2026] [:error] [pid 39184:tid 39241] [client 173.244.55.23:23653] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aaI9JVtZF9Zd_U7easCOlAAAAFY"]
[Sat Feb 28 08:56:07.295455 2026] [:error] [pid 11791:tid 11804] [client 173.244.55.22:38719] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/install.php"] [unique_id "aaI9J2uX5e1Q32gqxH1OHQAAAQs"]
[Sat Feb 28 08:56:08.194995 2026] [proxy_fcgi:error] [pid 22194:tid 22207] [client 173.244.55.21:33709] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:56:08.632587 2026] [:error] [pid 22194:tid 22214] [client 173.244.55.21:33709] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/plugins.php"] [unique_id "aaI9KH6mbajs3bzQGyu__gAAAVI"]
[Sat Feb 28 08:56:09.514470 2026] [proxy_fcgi:error] [pid 39185:tid 39270] [client 173.244.55.20:40465] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:56:09.954307 2026] [:error] [pid 39185:tid 39259] [client 173.244.55.20:40465] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/license.php"] [unique_id "aaI9KRVE-FfM89u7BQa1MgAAAI0"]
[Sat Feb 28 08:56:10.848465 2026] [proxy_fcgi:error] [pid 39292:tid 39311] [client 173.244.55.30:50853] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:56:12.637567 2026] [:error] [pid 39292:tid 39306] [client 173.244.55.30:50853] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aaI9LKIAO5fN7BxyqcFL1QAAAMw"]
[Sat Feb 28 08:56:13.947493 2026] [:error] [pid 39184:tid 39233] [client 173.244.55.22:44675] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aaI9LVtZF9Zd_U7easCO0AAAAE4"]
[Sat Feb 28 08:56:14.829903 2026] [:error] [pid 39292:tid 39296] [client 173.244.55.20:26445] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aaI9LqIAO5fN7BxyqcFL4AAAAMI"]
[Sat Feb 28 08:56:15.707642 2026] [:error] [pid 11791:tid 11804] [client 173.244.55.20:44835] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aaI9L2uX5e1Q32gqxH1OwAAAAQs"]
[Sat Feb 28 08:56:16.586513 2026] [:error] [pid 39185:tid 39269] [client 173.244.55.29:48927] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aaI9MBVE-FfM89u7BQa1cAAAAJc"]
[Sat Feb 28 08:56:17.458855 2026] [:error] [pid 11791:tid 11808] [client 173.244.55.31:22415] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aaI9MWuX5e1Q32gqxH1PCAAAAQ8"]
[Sat Feb 28 08:56:18.329740 2026] [:error] [pid 22194:tid 22215] [client 173.244.55.21:33141] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aaI9Mn6mbajs3bzQGyvAaQAAAVM"]
[Sat Feb 28 08:56:19.649280 2026] [:error] [pid 22194:tid 22210] [client 173.244.55.31:32423] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aaI9M36mbajs3bzQGyvAggAAAU4"]
[Sat Feb 28 08:56:20.529721 2026] [:error] [pid 11791:tid 11802] [client 173.244.55.31:65453] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aaI9NGuX5e1Q32gqxH1PVwAAAQk"]
[Sat Feb 28 08:56:21.410290 2026] [:error] [pid 39183:tid 39202] [client 173.244.55.28:24905] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aaI9NRCf4HvhVePw3LareQAAAAo"]
[Sat Feb 28 08:56:22.284224 2026] [:error] [pid 22194:tid 22220] [client 173.244.55.26:56177] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aaI9Nn6mbajs3bzQGyvAuQAAAVg"]
[Sat Feb 28 08:56:24.064319 2026] [:error] [pid 39292:tid 39297] [client 173.244.55.20:36811] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aaI9OKIAO5fN7BxyqcFMKQAAAMM"]
[Sat Feb 28 08:56:25.407259 2026] [:error] [pid 39185:tid 39261] [client 173.244.55.26:53615] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aaI9ORVE-FfM89u7BQa1twAAAI8"]
[Sat Feb 28 08:56:27.203722 2026] [:error] [pid 11791:tid 11804] [client 173.244.55.20:57855] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aaI9O2uX5e1Q32gqxH1P4AAAAQs"]
[Sat Feb 28 08:56:28.993525 2026] [:error] [pid 39185:tid 39248] [client 173.244.55.21:41817] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aaI9PBVE-FfM89u7BQa10wAAAII"]
[Sat Feb 28 08:56:30.785124 2026] [:error] [pid 11791:tid 11801] [client 173.244.55.25:43051] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class.api.php"] [unique_id "aaI9PmuX5e1Q32gqxH1QWQAAAQg"]
[Sat Feb 28 08:56:31.657965 2026] [:error] [pid 11791:tid 11810] [client 173.244.55.23:31297] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class.api.php"] [unique_id "aaI9P2uX5e1Q32gqxH1QaQAAARE"]
[Sat Feb 28 08:56:32.990947 2026] [:error] [pid 22194:tid 22210] [client 173.244.55.28:60239] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aaI9QH6mbajs3bzQGyvBtAAAAU4"]
[Sat Feb 28 08:56:34.763668 2026] [:error] [pid 39292:tid 39297] [client 173.244.55.31:28039] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.alf.php"] [unique_id "aaI9QqIAO5fN7BxyqcFMeAAAAMM"]
[Sat Feb 28 08:56:36.095443 2026] [:error] [pid 22194:tid 22209] [client 173.244.55.20:63557] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wso.php"] [unique_id "aaI9RH6mbajs3bzQGyvB5AAAAU0"]
[Sat Feb 28 08:56:36.976613 2026] [:error] [pid 11791:tid 11804] [client 173.244.55.30:60845] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wso.php"] [unique_id "aaI9RGuX5e1Q32gqxH1Q4wAAAQs"]
[Sat Feb 28 08:56:38.297368 2026] [:error] [pid 39185:tid 39268] [client 173.244.55.25:23847] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aaI9RhVE-FfM89u7BQa2EwAAAJY"]
[Sat Feb 28 08:56:39.182511 2026] [:error] [pid 22194:tid 22201] [client 173.244.55.28:30651] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "aaI9R36mbajs3bzQGyvCDgAAAUU"]
[Sat Feb 28 08:56:40.512508 2026] [:error] [pid 39292:tid 39295] [client 173.244.55.22:58221] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aaI9SKIAO5fN7BxyqcFMowAAAME"]
[Sat Feb 28 08:56:41.395990 2026] [:error] [pid 39184:tid 39239] [client 173.244.55.20:59935] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/autoload_classmap.php"] [unique_id "aaI9SVtZF9Zd_U7easCPLAAAAFQ"]
[Sat Feb 28 08:56:44.491574 2026] [:error] [pid 39184:tid 39229] [client 173.244.55.20:50957] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.bod/.ll/ss.php"] [unique_id "aaI9TFtZF9Zd_U7easCPTwAAAEo"]
[Sat Feb 28 08:56:47.122177 2026] [:error] [pid 11791:tid 11805] [client 173.244.55.30:57775] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/as.php"] [unique_id "aaI9T2uX5e1Q32gqxH1RnwAAAQw"]
[Sat Feb 28 08:56:48.010427 2026] [:error] [pid 39292:tid 39313] [client 173.244.55.30:44261] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/as.php"] [unique_id "aaI9UKIAO5fN7BxyqcFNGwAAANM"]
[Sat Feb 28 08:56:50.682156 2026] [:error] [pid 39185:tid 39252] [client 173.244.55.26:25643] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/about.php"] [unique_id "aaI9UhVE-FfM89u7BQa2ZwAAAIY"]
[Sat Feb 28 08:56:52.914696 2026] [:error] [pid 22194:tid 22199] [client 173.244.55.28:42155] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aaI9VH6mbajs3bzQGyvCzQAAAUM"]
[Sat Feb 28 08:56:53.808358 2026] [:error] [pid 22194:tid 22213] [client 173.244.55.23:22023] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aaI9VX6mbajs3bzQGyvC5wAAAVE"]
[Sat Feb 28 08:56:54.686531 2026] [:error] [pid 11791:tid 11817] [client 173.244.55.22:38921] [client 173.244.55.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.22, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aaI9VmuX5e1Q32gqxH1SBQAAARg"]
[Sat Feb 28 08:56:55.570396 2026] [:error] [pid 11791:tid 11797] [client 173.244.55.22:38921] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aaI9V2uX5e1Q32gqxH1SDQAAAQQ"]
[Sat Feb 28 08:56:57.350530 2026] [:error] [pid 39184:tid 39236] [client 173.244.55.23:42961] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaI9WVtZF9Zd_U7easCPvQAAAFE"]
[Sat Feb 28 08:56:58.225978 2026] [:error] [pid 39185:tid 39266] [client 173.244.55.26:55029] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aaI9WhVE-FfM89u7BQa2lwAAAJQ"]
[Sat Feb 28 08:57:00.893109 2026] [:error] [pid 39184:tid 39236] [client 173.244.55.30:33499] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaI9XFtZF9Zd_U7easCP7gAAAFE"]
[Sat Feb 28 08:57:01.793258 2026] [:error] [pid 11791:tid 11814] [client 173.244.55.22:28505] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aaI9XWuX5e1Q32gqxH1SWAAAARU"]
[Sat Feb 28 08:57:04.934783 2026] [:error] [pid 11791:tid 11795] [client 173.244.55.20:58413] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aaI9YGuX5e1Q32gqxH1ShgAAAQI"]
[Sat Feb 28 08:57:05.817155 2026] [:error] [pid 22194:tid 22207] [client 173.244.55.20:20595] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin/index.php"] [unique_id "aaI9YX6mbajs3bzQGyvDowAAAUs"]
[Sat Feb 28 08:57:07.616457 2026] [proxy_fcgi:error] [pid 11791:tid 11802] [client 173.244.55.22:57847] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:57:08.505212 2026] [:error] [pid 11791:tid 11805] [client 173.244.55.22:57847] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/function.php"] [unique_id "aaI9ZGuX5e1Q32gqxH1StgAAAQw"]
[Sat Feb 28 08:57:09.388701 2026] [:error] [pid 39185:tid 39248] [client 173.244.55.22:45717] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aaI9ZRVE-FfM89u7BQa28wAAAII"]
[Sat Feb 28 08:57:10.272622 2026] [:error] [pid 39292:tid 39318] [client 173.244.55.23:49059] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/atomlib.php"] [unique_id "aaI9ZqIAO5fN7BxyqcFN8gAAANg"]
[Sat Feb 28 08:57:11.602157 2026] [:error] [pid 39185:tid 39253] [client 173.244.55.29:56353] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content.php"] [unique_id "aaI9ZxVE-FfM89u7BQa3DQAAAIc"]
[Sat Feb 28 08:57:12.482012 2026] [:error] [pid 39184:tid 39230] [client 173.244.55.29:55269] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content.php"] [unique_id "aaI9aFtZF9Zd_U7easCQSQAAAEs"]
[Sat Feb 28 08:57:13.794731 2026] [:error] [pid 39185:tid 39252] [client 173.244.55.21:24565] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aaI9aRVE-FfM89u7BQa3IQAAAIY"]
[Sat Feb 28 08:57:14.683146 2026] [:error] [pid 39292:tid 39304] [client 173.244.55.20:42177] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aaI9aqIAO5fN7BxyqcFOFAAAAMo"]
[Sat Feb 28 08:57:18.696345 2026] [:error] [pid 22194:tid 22201] [client 173.244.55.30:34477] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aaI9bn6mbajs3bzQGyvEMwAAAUU"]
[Sat Feb 28 08:57:19.579528 2026] [:error] [pid 39185:tid 39264] [client 173.244.55.21:42699] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aaI9bxVE-FfM89u7BQa3TQAAAJI"]
[Sat Feb 28 08:57:21.353055 2026] [:error] [pid 22194:tid 22216] [client 173.244.55.26:35419] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/light/alfa-rex.php"] [unique_id "aaI9cX6mbajs3bzQGyvEUAAAAVQ"]
[Sat Feb 28 08:57:23.138357 2026] [:error] [pid 22194:tid 22205] [client 173.244.55.23:59233] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/index.php"] [unique_id "aaI9c36mbajs3bzQGyvEcQAAAUk"]
[Sat Feb 28 08:57:24.013216 2026] [:error] [pid 39183:tid 39206] [client 173.244.55.22:26729] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aaI9dBCf4HvhVePw3LasngAAAA4"]
[Sat Feb 28 08:57:24.906241 2026] [:error] [pid 22194:tid 22206] [client 173.244.55.22:24437] [client 173.244.55.22] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aaI9dH6mbajs3bzQGyvEjgAAAUo"]
[Sat Feb 28 08:57:26.699448 2026] [:error] [pid 39184:tid 39219] [client 173.244.55.20:36481] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/widgets/about.php"] [unique_id "aaI9dltZF9Zd_U7easCQsQAAAEA"]
[Sat Feb 28 08:57:28.925500 2026] [:error] [pid 39183:tid 39210] [client 173.244.55.31:57691] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aaI9eBCf4HvhVePw3Las1AAAABI"]
[Sat Feb 28 08:57:30.250405 2026] [:error] [pid 11791:tid 11816] [client 173.244.55.23:28157] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aaI9emuX5e1Q32gqxH1UIgAAARc"]
[Sat Feb 28 08:57:34.209815 2026] [:error] [pid 11791:tid 11799] [client 173.244.55.26:30985] [client 173.244.55.26] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.26, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/js/wp-login.php"] [unique_id "aaI9fmuX5e1Q32gqxH1UYwAAAQY"]
[Sat Feb 28 08:57:36.862449 2026] [:error] [pid 11791:tid 11806] [client 173.244.55.26:30985] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aaI9gGuX5e1Q32gqxH1UhQAAAQ0"]
[Sat Feb 28 08:57:37.743536 2026] [:error] [pid 11791:tid 11817] [client 173.244.55.20:27781] [client 173.244.55.20] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.20, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aaI9gWuX5e1Q32gqxH1UlQAAARg"]
[Sat Feb 28 08:57:39.081339 2026] [:error] [pid 11791:tid 11813] [client 173.244.55.20:27781] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aaI9g2uX5e1Q32gqxH1UvQAAARQ"]
[Sat Feb 28 08:57:43.125788 2026] [:error] [pid 11791:tid 11811] [client 173.244.55.22:41865] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/update-core.php"] [unique_id "aaI9h2uX5e1Q32gqxH1VBAAAARI"]
[Sat Feb 28 08:57:44.900924 2026] [:error] [pid 11791:tid 11815] [client 173.244.55.21:21391] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-mail.php"] [unique_id "aaI9iGuX5e1Q32gqxH1VJwAAARY"]
[Sat Feb 28 08:57:45.788757 2026] [:error] [pid 11791:tid 11797] [client 173.244.55.21:21929] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-mail.php"] [unique_id "aaI9iWuX5e1Q32gqxH1VMgAAAQQ"]
[Sat Feb 28 08:57:48.011481 2026] [proxy_fcgi:error] [pid 39183:tid 39215] [client 173.244.55.20:46941] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:57:49.789409 2026] [:error] [pid 39183:tid 39213] [client 173.244.55.20:46941] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/2023/05/404.php"] [unique_id "aaI9jRCf4HvhVePw3LatkAAAABU"]
[Sat Feb 28 08:57:52.478854 2026] [:error] [pid 39184:tid 39240] [client 173.244.55.26:21565] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/index2.php"] [unique_id "aaI9kFtZF9Zd_U7easCRegAAAFU"]
[Sat Feb 28 08:57:54.256848 2026] [:error] [pid 39185:tid 39263] [client 173.244.55.23:58605] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/network/admin.php"] [unique_id "aaI9khVE-FfM89u7BQa4rwAAAJE"]
[Sat Feb 28 08:57:56.478076 2026] [:error] [pid 11791:tid 11793] [client 173.244.55.21:61517] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aaI9lGuX5e1Q32gqxH1WIwAAAQA"]
[Sat Feb 28 08:57:58.256197 2026] [:error] [pid 11791:tid 11805] [client 173.244.55.28:28077] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aaI9lmuX5e1Q32gqxH1WWQAAAQw"]
[Sat Feb 28 08:57:59.571279 2026] [:error] [pid 11791:tid 11808] [client 173.244.55.23:28231] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/install.php"] [unique_id "aaI9l2uX5e1Q32gqxH1WjAAAAQ8"]
[Sat Feb 28 08:58:01.344901 2026] [:error] [pid 22194:tid 22220] [client 173.244.55.28:52871] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aaI9mX6mbajs3bzQGyvGKQAAAVg"]
[Sat Feb 28 08:58:03.131629 2026] [:error] [pid 22194:tid 22215] [client 173.244.55.31:53485] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aaI9m36mbajs3bzQGyvGSgAAAVM"]
[Sat Feb 28 08:58:08.059901 2026] [:error] [pid 39184:tid 39236] [client 173.244.55.20:39653] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aaI9oFtZF9Zd_U7easCR_QAAAFE"]
[Sat Feb 28 08:58:09.405334 2026] [:error] [pid 39183:tid 39201] [client 173.244.55.20:29381] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wsa.php"] [unique_id "aaI9oRCf4HvhVePw3LauSwAAAAk"]
[Sat Feb 28 08:58:10.742334 2026] [:error] [pid 39185:tid 39264] [client 173.244.55.23:54611] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aaI9ohVE-FfM89u7BQa5dwAAAJI"]
[Sat Feb 28 08:58:12.079664 2026] [:error] [pid 39185:tid 39250] [client 173.244.55.30:32387] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aaI9pBVE-FfM89u7BQa5jQAAAIQ"]
[Sat Feb 28 08:58:14.747443 2026] [proxy_fcgi:error] [pid 39292:tid 39301] [client 173.244.55.25:56085] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:58:15.187332 2026] [proxy_fcgi:error] [pid 39292:tid 39302] [client 173.244.55.25:56085] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:58:15.628631 2026] [:error] [pid 39292:tid 39299] [client 173.244.55.25:56085] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aaI9p6IAO5fN7BxyqcFQrQAAAMU"]
[Sat Feb 28 08:58:16.501692 2026] [:error] [pid 11791:tid 11799] [client 173.244.55.29:62337] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aaI9qGuX5e1Q32gqxH1XfgAAAQY"]
[Sat Feb 28 08:58:17.815855 2026] [:error] [pid 39292:tid 39309] [client 173.244.55.28:54745] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/abc.php"] [unique_id "aaI9qaIAO5fN7BxyqcFQygAAAM8"]
[Sat Feb 28 08:58:18.715924 2026] [:error] [pid 39184:tid 39226] [client 173.244.55.30:37177] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/abc.php"] [unique_id "aaI9qltZF9Zd_U7easCShwAAAEc"]
[Sat Feb 28 08:58:19.624893 2026] [:error] [pid 39185:tid 39256] [client 173.244.55.23:37317] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/abc.php"] [unique_id "aaI9qxVE-FfM89u7BQa5xwAAAIo"]
[Sat Feb 28 08:58:20.505902 2026] [:error] [pid 39184:tid 39227] [client 173.244.55.23:58541] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/abc.php"] [unique_id "aaI9rFtZF9Zd_U7easCSlQAAAEg"]
[Sat Feb 28 08:58:24.097158 2026] [:error] [pid 39185:tid 39252] [client 173.244.55.20:62819] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aaI9sBVE-FfM89u7BQa6AQAAAIY"]
[Sat Feb 28 08:58:25.424971 2026] [:error] [pid 11791:tid 11801] [client 173.244.55.28:41093] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "aaI9sWuX5e1Q32gqxH1YIAAAAQg"]
[Sat Feb 28 08:58:27.713561 2026] [:error] [pid 39183:tid 39196] [client 173.244.55.26:46605] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aaI9sxCf4HvhVePw3LavBAAAAAQ"]
[Sat Feb 28 08:58:28.598855 2026] [:error] [pid 39292:tid 39305] [client 173.244.55.23:21373] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/erinyani/asasx.php"] [unique_id "aaI9tKIAO5fN7BxyqcFRJQAAAMs"]
[Sat Feb 28 08:58:32.647360 2026] [:error] [pid 39184:tid 39230] [client 173.244.55.26:60615] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aaI9uFtZF9Zd_U7easCS1wAAAEs"]
[Sat Feb 28 08:58:33.556454 2026] [proxy_fcgi:error] [pid 39292:tid 39315] [client 173.244.55.26:20719] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:58:34.917582 2026] [:error] [pid 39292:tid 39310] [client 173.244.55.26:20719] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aaI9uqIAO5fN7BxyqcFRdAAAANA"]
[Sat Feb 28 08:58:36.256671 2026] [:error] [pid 11791:tid 11796] [client 173.244.55.30:40657] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/theme.php"] [unique_id "aaI9vGuX5e1Q32gqxH1ZQgAAAQM"]
[Sat Feb 28 08:58:37.136839 2026] [:error] [pid 22194:tid 22216] [client 173.244.55.23:39103] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/theme.php"] [unique_id "aaI9vX6mbajs3bzQGyvIHgAAAVQ"]
[Sat Feb 28 08:58:38.470199 2026] [:error] [pid 11791:tid 11801] [client 173.244.55.25:50823] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentytwo/waf_defender.php"] [unique_id "aaI9vmuX5e1Q32gqxH1ZbwAAAQg"]
[Sat Feb 28 08:58:39.351206 2026] [:error] [pid 22194:tid 22197] [client 173.244.55.25:56701] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentytwo/waf_defender.php"] [unique_id "aaI9v36mbajs3bzQGyvINgAAAUE"]
[Sat Feb 28 08:58:40.695781 2026] [:error] [pid 39185:tid 39266] [client 173.244.55.26:54725] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/coffee/index.php"] [unique_id "aaI9wBVE-FfM89u7BQa6aQAAAJQ"]
[Sat Feb 28 08:58:41.589898 2026] [:error] [pid 11791:tid 11810] [client 173.244.55.29:30447] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/coffee/index.php"] [unique_id "aaI9wWuX5e1Q32gqxH1ZuAAAARE"]
[Sat Feb 28 08:58:42.924667 2026] [:error] [pid 11791:tid 11796] [client 173.244.55.23:36619] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Simple.php"] [unique_id "aaI9wmuX5e1Q32gqxH1Z3wAAAQM"]
[Sat Feb 28 08:58:44.267544 2026] [proxy_fcgi:error] [pid 11791:tid 11807] [client 173.244.55.25:29759] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:58:45.148971 2026] [:error] [pid 11791:tid 11794] [client 173.244.55.25:29759] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aaI9xWuX5e1Q32gqxH1aFQAAAQE"]
[Sat Feb 28 08:58:46.037967 2026] [:error] [pid 11791:tid 11799] [client 173.244.55.29:35961] [client 173.244.55.29] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.29, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aaI9xmuX5e1Q32gqxH1aMwAAAQY"]
[Sat Feb 28 08:58:50.905628 2026] [:error] [pid 11791:tid 11793] [client 173.244.55.29:35961] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aaI9ymuX5e1Q32gqxH1agAAAAQA"]
[Sat Feb 28 08:58:51.779800 2026] [:error] [pid 39184:tid 39233] [client 173.244.55.21:22487] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/small.php"] [unique_id "aaI9y1tZF9Zd_U7easCTXAAAAE4"]
[Sat Feb 28 08:58:53.086975 2026] [:error] [pid 39184:tid 39227] [client 173.244.55.28:24795] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aaI9zVtZF9Zd_U7easCTbwAAAEg"]
[Sat Feb 28 08:58:55.745687 2026] [:error] [pid 39185:tid 39268] [client 173.244.55.25:59077] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aaI9zxVE-FfM89u7BQa64wAAAJY"]
[Sat Feb 28 08:58:56.626246 2026] [:error] [pid 39292:tid 39313] [client 173.244.55.31:30697] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/languages/themes/index.php"] [unique_id "aaI90KIAO5fN7BxyqcFSUQAAANM"]
[Sat Feb 28 08:58:58.383403 2026] [:error] [pid 39184:tid 39220] [client 173.244.55.26:27837] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/functions.php"] [unique_id "aaI90ltZF9Zd_U7easCT0wAAAEE"]
[Sat Feb 28 08:58:59.270857 2026] [:error] [pid 39185:tid 39252] [client 173.244.55.22:59555] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/functions.php"] [unique_id "aaI90xVE-FfM89u7BQa7DQAAAIY"]
[Sat Feb 28 08:59:01.049316 2026] [:error] [pid 39185:tid 39255] [client 173.244.55.29:37431] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aaI91RVE-FfM89u7BQa7OQAAAIk"]
[Sat Feb 28 08:59:02.384577 2026] [:error] [pid 39183:tid 39215] [client 173.244.55.21:20863] [client 173.244.55.21] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aaI91hCf4HvhVePw3LawQAAAABc"]
[Sat Feb 28 08:59:04.614440 2026] [:error] [pid 11791:tid 11799] [client 173.244.55.30:38745] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aaI92GuX5e1Q32gqxH1bMQAAAQY"]
[Sat Feb 28 08:59:06.390445 2026] [proxy_fcgi:error] [pid 11791:tid 11805] [client 173.244.55.29:51779] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:59:06.831243 2026] [:error] [pid 11791:tid 11808] [client 173.244.55.29:51779] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aaI92muX5e1Q32gqxH1bYwAAAQ8"]
[Sat Feb 28 08:59:07.704449 2026] [:error] [pid 39185:tid 39264] [client 173.244.55.29:45961] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentyfour/functions.php"] [unique_id "aaI92xVE-FfM89u7BQa7gAAAAJI"]
[Sat Feb 28 08:59:09.037482 2026] [:error] [pid 39183:tid 39209] [client 173.244.55.23:55611] [client 173.244.55.23] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/db.php"] [unique_id "aaI93RCf4HvhVePw3LawdgAAABE"]
[Sat Feb 28 08:59:09.924855 2026] [:error] [pid 22194:tid 22216] [client 173.244.55.26:65457] [client 173.244.55.26] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aaI93X6mbajs3bzQGyvKIwAAAVQ"]
[Sat Feb 28 08:59:10.812899 2026] [:error] [pid 39184:tid 39229] [client 173.244.55.30:47123] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aaI93ltZF9Zd_U7easCUJQAAAEo"]
[Sat Feb 28 08:59:11.709211 2026] [:error] [pid 39185:tid 39248] [client 173.244.55.20:55243] [client 173.244.55.20] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aaI93xVE-FfM89u7BQa7xwAAAII"]
[Sat Feb 28 08:59:12.588327 2026] [:error] [pid 22194:tid 22214] [client 173.244.55.25:38329] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aaI94H6mbajs3bzQGyvKPwAAAVI"]
[Sat Feb 28 08:59:13.466339 2026] [:error] [pid 39185:tid 39266] [client 173.244.55.29:34361] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aaI94RVE-FfM89u7BQa75AAAAJQ"]
[Sat Feb 28 08:59:14.777109 2026] [:error] [pid 39184:tid 39224] [client 173.244.55.30:64719] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/light/colors.min.php"] [unique_id "aaI94ltZF9Zd_U7easCUQwAAAEU"]
[Sat Feb 28 08:59:16.104408 2026] [:error] [pid 39185:tid 39258] [client 173.244.55.29:34637] [client 173.244.55.29] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aaI95BVE-FfM89u7BQa7_QAAAIw"]
[Sat Feb 28 08:59:16.987384 2026] [:error] [pid 39185:tid 39265] [client 173.244.55.28:64443] [client 173.244.55.28] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aaI95BVE-FfM89u7BQa8BQAAAJM"]
[Sat Feb 28 08:59:17.867381 2026] [:error] [pid 39183:tid 39210] [client 173.244.55.30:49223] [client 173.244.55.30] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aaI95RCf4HvhVePw3LawygAAABI"]
[Sat Feb 28 08:59:19.195842 2026] [:error] [pid 39292:tid 39306] [client 173.244.55.25:40387] [client 173.244.55.25] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aaI956IAO5fN7BxyqcFTjwAAAMw"]
[Sat Feb 28 08:59:20.989793 2026] [:error] [pid 39183:tid 39200] [client 173.244.55.31:41987] [client 173.244.55.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aaI96BCf4HvhVePw3Law8AAAAAg"]
[Sat Feb 28 08:59:21.884470 2026] [proxy_fcgi:error] [pid 22194:tid 22204] [client 173.244.55.28:57187] AH01071: Got error 'Primary script unknown'
[Sat Feb 28 08:59:22.339737 2026] [:error] [pid 22194:tid 22198] [client 173.244.55.28:57187] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/upgrade/cc.php"] [unique_id "aaI96n6mbajs3bzQGyvKwwAAAUI"]
[Sat Feb 28 08:59:23.220779 2026] [:error] [pid 22194:tid 22208] [client 173.244.55.30:22505] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/upgrade/cc.php"] [unique_id "aaI9636mbajs3bzQGyvK0AAAAUw"]
[Sat Feb 28 08:59:24.113275 2026] [:error] [pid 11791:tid 11806] [client 173.244.55.23:53291] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/upgrade/cc.php"] [unique_id "aaI97GuX5e1Q32gqxH1cNwAAAQ0"]
[Sat Feb 28 08:59:26.359470 2026] [:error] [pid 22194:tid 22220] [client 173.244.55.21:37093] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aaI97n6mbajs3bzQGyvK_AAAAVg"]
[Sat Feb 28 08:59:27.243921 2026] [:error] [pid 39184:tid 39219] [client 173.244.55.22:54125] [client 173.244.55.22] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 173.244.55.22, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aaI971tZF9Zd_U7easCUswAAAEA"]
[Sat Feb 28 08:59:28.590497 2026] [:error] [pid 39184:tid 39221] [client 173.244.55.22:54125] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/includes/class-core-upgrader-first.php"] [unique_id "aaI98FtZF9Zd_U7easCUuwAAAEI"]
[Sat Feb 28 08:59:29.484141 2026] [:error] [pid 39292:tid 39295] [client 173.244.55.28:27015] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/includes/class-core-upgrader-first.php"] [unique_id "aaI98aIAO5fN7BxyqcFUAgAAAME"]
[Sat Feb 28 08:59:30.373012 2026] [:error] [pid 39292:tid 39311] [client 173.244.55.22:23073] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/includes/class-core-upgrader-first.php"] [unique_id "aaI98qIAO5fN7BxyqcFUGQAAANE"]
[Sat Feb 28 08:59:31.258016 2026] [:error] [pid 39292:tid 39310] [client 173.244.55.22:24785] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/includes/class-core-upgrader-first.php"] [unique_id "aaI986IAO5fN7BxyqcFUOwAAANA"]
[Sat Feb 28 08:59:32.138361 2026] [:error] [pid 39185:tid 39268] [client 173.244.55.28:26883] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/includes/class-core-upgrader-first.php"] [unique_id "aaI99BVE-FfM89u7BQa8rAAAAJY"]
[Sat Feb 28 08:59:33.466673 2026] [:error] [pid 39292:tid 39306] [client 173.244.55.25:35653] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aaI99aIAO5fN7BxyqcFUXQAAAMw"]
[Sat Feb 28 08:59:34.797895 2026] [:error] [pid 39184:tid 39239] [client 173.244.55.31:26449] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/"] [unique_id "aaI99ltZF9Zd_U7easCU8QAAAFQ"]
[Sat Feb 28 08:59:35.677024 2026] [:error] [pid 39183:tid 39214] [client 173.244.55.31:51925] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/"] [unique_id "aaI99xCf4HvhVePw3LaxOAAAABY"]
[Sat Feb 28 08:59:36.558611 2026] [:error] [pid 39184:tid 39237] [client 173.244.55.31:62017] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/"] [unique_id "aaI9-FtZF9Zd_U7easCVFgAAAFI"]
[Sat Feb 28 08:59:37.888204 2026] [:error] [pid 39184:tid 39231] [client 173.244.55.20:47069] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/"] [unique_id "aaI9-VtZF9Zd_U7easCVJgAAAEw"]
[Sat Feb 28 08:59:38.759794 2026] [:error] [pid 22194:tid 22213] [client 173.244.55.26:41421] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/"] [unique_id "aaI9-n6mbajs3bzQGyvLfQAAAVE"]
[Sat Feb 28 08:59:39.638549 2026] [:error] [pid 39185:tid 39247] [client 173.244.55.22:25773] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/"] [unique_id "aaI9-xVE-FfM89u7BQa9IAAAAIE"]
[Sat Feb 28 08:59:40.507054 2026] [:error] [pid 22194:tid 22217] [client 173.244.55.26:52265] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/"] [unique_id "aaI9_H6mbajs3bzQGyvLlQAAAVU"]
[Sat Feb 28 08:59:41.847450 2026] [:error] [pid 22194:tid 22203] [client 173.244.55.25:28879] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaI9_X6mbajs3bzQGyvLtQAAAUc"]
[Sat Feb 28 08:59:42.734955 2026] [:error] [pid 39183:tid 39213] [client 173.244.55.29:32187] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaI9_hCf4HvhVePw3LaxgQAAABU"]
[Sat Feb 28 08:59:43.615909 2026] [:error] [pid 11791:tid 11812] [client 173.244.55.25:55971] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/erinyani/"] [unique_id "aaI9_2uX5e1Q32gqxH1dYQAAARM"]
[Sat Feb 28 08:59:44.924141 2026] [:error] [pid 39185:tid 39258] [client 173.244.55.26:51803] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aaI-ABVE-FfM89u7BQa9TgAAAIw"]
[Sat Feb 28 08:59:47.600863 2026] [:error] [pid 39292:tid 39304] [client 173.244.55.25:55827] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/"] [unique_id "aaI-A6IAO5fN7BxyqcFU6gAAAMo"]
[Sat Feb 28 08:59:50.731689 2026] [:error] [pid 39184:tid 39220] [client 173.244.55.28:21431] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/sunrise/"] [unique_id "aaI-BltZF9Zd_U7easCVpAAAAEE"]
[Sat Feb 28 08:59:54.712102 2026] [:error] [pid 39185:tid 39262] [client 173.244.55.22:64141] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/group/"] [unique_id "aaI-ChVE-FfM89u7BQa-TAAAAJA"]
[Sat Feb 28 08:59:55.594276 2026] [:error] [pid 11791:tid 11802] [client 173.244.55.29:37281] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/group/"] [unique_id "aaI-C2uX5e1Q32gqxH1d9QAAAQk"]
[Sat Feb 28 08:59:57.834896 2026] [:error] [pid 39185:tid 39247] [client 173.244.55.25:62871] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/"] [unique_id "aaI-DRVE-FfM89u7BQa-dQAAAIE"]
[Sat Feb 28 08:59:58.714406 2026] [:error] [pid 11791:tid 11807] [client 173.244.55.29:37009] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/"] [unique_id "aaI-DmuX5e1Q32gqxH1eeQAAAQ4"]
[Sat Feb 28 09:00:00.057890 2026] [:error] [pid 11791:tid 11816] [client 173.244.55.20:61785] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/wp-class.php/wp-content/themes/travelscape/"] [unique_id "aaI-EGuX5e1Q32gqxH1emgAAARc"]
[Sat Feb 28 09:00:00.938186 2026] [:error] [pid 39183:tid 39214] [client 173.244.55.20:51479] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/wp-class.php/wp-content/themes/travelscape/"] [unique_id "aaI-EBCf4HvhVePw3LayDwAAABY"]
[Sat Feb 28 09:00:04.083020 2026] [:error] [pid 39184:tid 39243] [client 173.244.55.21:38117] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aaI-FFtZF9Zd_U7easCWEAAAAFg"]
[Sat Feb 28 09:00:08.511099 2026] [:error] [pid 39183:tid 39214] [client 173.244.55.25:35293] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/"] [unique_id "aaI-GBCf4HvhVePw3LayUQAAABY"]
[Sat Feb 28 09:00:09.400106 2026] [:error] [pid 11791:tid 11817] [client 173.244.55.29:29531] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/"] [unique_id "aaI-GWuX5e1Q32gqxH1fTwAAARg"]
[Sat Feb 28 09:00:12.086893 2026] [:error] [pid 39185:tid 39251] [client 173.244.55.30:36385] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wordpress/wp-admin/includes"] [unique_id "aaI-HBVE-FfM89u7BQa-9gAAAIU"]
[Sat Feb 28 09:00:12.958838 2026] [:error] [pid 22194:tid 22205] [client 173.244.55.26:58175] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wordpress/wp-admin/includes"] [unique_id "aaI-HH6mbajs3bzQGyvM7AAAAUk"]
[Sat Feb 28 09:00:13.844501 2026] [:error] [pid 39183:tid 39211] [client 173.244.55.28:35379] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wordpress/wp-admin/includes"] [unique_id "aaI-HRCf4HvhVePw3LayfgAAABM"]
[Sat Feb 28 09:00:16.541224 2026] [:error] [pid 39292:tid 39294] [client 173.244.55.21:27931] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/"] [unique_id "aaI-IKIAO5fN7BxyqcFWVAAAAMA"]
[Sat Feb 28 09:00:17.421075 2026] [:error] [pid 11791:tid 11810] [client 173.244.55.29:39625] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/"] [unique_id "aaI-IWuX5e1Q32gqxH1f1QAAARE"]
[Sat Feb 28 09:00:25.028972 2026] [:error] [pid 22194:tid 22212] [client 173.244.55.30:26463] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/blog/wp-includes/"] [unique_id "aaI-KX6mbajs3bzQGyvNoQAAAVA"]
[Sat Feb 28 09:00:28.128703 2026] [:error] [pid 22194:tid 22219] [client 173.244.55.29:65527] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin/controller/extension/extension/"] [unique_id "aaI-LH6mbajs3bzQGyvNxAAAAVc"]
[Sat Feb 28 09:00:29.013186 2026] [:error] [pid 22194:tid 22214] [client 173.244.55.29:55407] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin/controller/extension/extension/"] [unique_id "aaI-LX6mbajs3bzQGyvN0QAAAVI"]
[Sat Feb 28 09:00:30.344432 2026] [:error] [pid 39184:tid 39239] [client 173.244.55.31:21579] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin/editor/"] [unique_id "aaI-LltZF9Zd_U7easCW_AAAAFQ"]
[Sat Feb 28 09:00:31.233880 2026] [:error] [pid 39292:tid 39313] [client 173.244.55.31:43473] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin/editor/"] [unique_id "aaI-L6IAO5fN7BxyqcFWugAAANM"]
[Sat Feb 28 09:00:33.019487 2026] [:error] [pid 11791:tid 11801] [client 173.244.55.30:35271] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin/tmp/"] [unique_id "aaI-MWuX5e1Q32gqxH1hGAAAAQg"]
[Sat Feb 28 09:00:35.267589 2026] [:error] [pid 39292:tid 39314] [client 173.244.55.23:64005] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin/uploads/images/"] [unique_id "aaI-M6IAO5fN7BxyqcFW7QAAANQ"]
[Sat Feb 28 09:00:38.385797 2026] [:error] [pid 22194:tid 22219] [client 173.244.55.29:51131] [client 173.244.55.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/components/"] [unique_id "aaI-Nn6mbajs3bzQGyvOPwAAAVc"]
[Sat Feb 28 09:00:39.257040 2026] [:error] [pid 11791:tid 11806] [client 173.244.55.21:42777] [client 173.244.55.21] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/components/"] [unique_id "aaI-N2uX5e1Q32gqxH1heAAAAQ0"]
[Sat Feb 28 09:00:40.575820 2026] [:error] [pid 22194:tid 22212] [client 173.244.55.26:49533] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/home/"] [unique_id "aaI-OH6mbajs3bzQGyvOSQAAAVA"]
[Sat Feb 28 09:00:43.700930 2026] [:error] [pid 22194:tid 22215] [client 173.244.55.31:24025] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/site/wp-includes/"] [unique_id "aaI-O36mbajs3bzQGyvOaQAAAVM"]
[Sat Feb 28 09:00:45.492078 2026] [:error] [pid 39184:tid 39221] [client 173.244.55.20:32397] [client 173.244.55.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wordpress/wp-admin/includes/wp-admin/js/"] [unique_id "aaI-PVtZF9Zd_U7easCXUQAAAEI"]
[Sat Feb 28 09:00:49.060590 2026] [:error] [pid 11791:tid 11794] [client 173.244.55.26:23103] [client 173.244.55.26] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/2022/"] [unique_id "aaI-QWuX5e1Q32gqxH1igAAAAQE"]
[Sat Feb 28 09:00:50.394617 2026] [:error] [pid 39185:tid 39263] [client 173.244.55.28:24319] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/2023/"] [unique_id "aaI-QhVE-FfM89u7BQbAhAAAAJE"]
[Sat Feb 28 09:00:51.262721 2026] [:error] [pid 39184:tid 39239] [client 173.244.55.25:41871] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/2023/"] [unique_id "aaI-Q1tZF9Zd_U7easCXegAAAFQ"]
[Sat Feb 28 09:00:53.498224 2026] [:error] [pid 11791:tid 11816] [client 173.244.55.31:26769] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/"] [unique_id "aaI-RWuX5e1Q32gqxH1iygAAARc"]
[Sat Feb 28 09:00:55.275852 2026] [:error] [pid 39185:tid 39270] [client 173.244.55.25:46289] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "aaI-RxVE-FfM89u7BQbArwAAAJg"]
[Sat Feb 28 09:00:59.739480 2026] [:error] [pid 22194:tid 22198] [client 173.244.55.30:49039] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cache-wordpress/"] [unique_id "aaI-S36mbajs3bzQGyvPVgAAAUI"]
[Sat Feb 28 09:01:01.505031 2026] [:error] [pid 22194:tid 22204] [client 173.244.55.22:57189] [client 173.244.55.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/linkpreview/"] [unique_id "aaI-TX6mbajs3bzQGyvPcwAAAUg"]
[Sat Feb 28 09:01:03.725181 2026] [:error] [pid 22194:tid 22207] [client 173.244.55.28:35307] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/cache-wordpress/"] [unique_id "aaI-T36mbajs3bzQGyvPrAAAAUs"]
[Sat Feb 28 09:01:04.618446 2026] [:error] [pid 11791:tid 11807] [client 173.244.55.28:35695] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/cache-wordpress/"] [unique_id "aaI-UGuX5e1Q32gqxH1jgAAAAQ4"]
[Sat Feb 28 09:01:05.507922 2026] [:error] [pid 22194:tid 22198] [client 173.244.55.28:41701] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/cache-wordpress/"] [unique_id "aaI-UX6mbajs3bzQGyvPzAAAAUI"]
[Sat Feb 28 09:01:06.392979 2026] [:error] [pid 22194:tid 22204] [client 173.244.55.23:58513] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/cache-wordpress/"] [unique_id "aaI-Un6mbajs3bzQGyvP5gAAAUg"]
[Sat Feb 28 09:01:11.804017 2026] [:error] [pid 22194:tid 22201] [client 173.244.55.31:64057] [client 173.244.55.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/Uwogh-Segs/"] [unique_id "aaI-V36mbajs3bzQGyvQawAAAUU"]
[Sat Feb 28 09:01:12.694748 2026] [:error] [pid 39292:tid 39299] [client 173.244.55.28:35369] [client 173.244.55.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/Uwogh-Segs/"] [unique_id "aaI-WKIAO5fN7BxyqcFY2gAAAMU"]
[Sat Feb 28 09:01:13.587021 2026] [:error] [pid 22194:tid 22213] [client 173.244.55.25:26167] [client 173.244.55.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/Uwogh-Segs/"] [unique_id "aaI-WX6mbajs3bzQGyvQhAAAAVE"]
[Sat Feb 28 09:01:14.456589 2026] [:error] [pid 11791:tid 11816] [client 173.244.55.30:24421] [client 173.244.55.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/Uwogh-Segs/"] [unique_id "aaI-WmuX5e1Q32gqxH1kCQAAARc"]
[Sat Feb 28 09:01:15.358447 2026] [:error] [pid 22194:tid 22211] [client 173.244.55.23:47939] [client 173.244.55.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/Uwogh-Segs/"] [unique_id "aaI-W36mbajs3bzQGyvQmgAAAU8"]
[Sat Feb 28 10:26:55.147261 2026] [:error] [pid 52460:tid 52482] [client 4.193.177.110:5528] [client 4.193.177.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaJSb7LWOogAgHGh62SPtgAAAZM"]
[Sat Feb 28 10:26:55.511441 2026] [:error] [pid 52460:tid 52476] [client 4.193.177.110:5542] [client 4.193.177.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaJSb7LWOogAgHGh62SPugAAAY0"]
[Sat Feb 28 10:26:55.925776 2026] [:error] [pid 39185:tid 39261] [client 4.193.177.110:5511] [client 4.193.177.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaJSbxVE-FfM89u7BQYyyAAAAI8"]
[Sat Feb 28 10:26:56.302918 2026] [:error] [pid 39185:tid 39263] [client 4.193.177.110:5067] [client 4.193.177.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaJScBVE-FfM89u7BQYyzAAAAJE"]
[Sat Feb 28 11:01:47.945033 2026] [:error] [pid 11791:tid 11793] [client 20.220.232.240:21449] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dom.php"] [unique_id "aaJam2uX5e1Q32gqxH3WYAAAAQA"]
[Sat Feb 28 11:01:49.402178 2026] [:error] [pid 39183:tid 39212] [client 20.220.232.240:21445] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dom.php"] [unique_id "aaJanRCf4HvhVePw3LbSSQAAABQ"]
[Sat Feb 28 11:01:51.123904 2026] [:error] [pid 11791:tid 11804] [client 20.220.232.240:21475] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dom.php"] [unique_id "aaJan2uX5e1Q32gqxH3WaAAAAQs"]
[Sat Feb 28 11:01:51.759863 2026] [:error] [pid 39185:tid 39263] [client 20.220.232.240:21484] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dom.php"] [unique_id "aaJanxVE-FfM89u7BQZczwAAAJE"]
[Sat Feb 28 11:01:52.617979 2026] [:error] [pid 52460:tid 52463] [client 20.220.232.240:21385] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Okxob.php"] [unique_id "aaJaoLLWOogAgHGh62SuuQAAAYA"]
[Sat Feb 28 11:01:54.444904 2026] [:error] [pid 52460:tid 52475] [client 20.220.232.240:21392] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Okxob.php"] [unique_id "aaJaorLWOogAgHGh62SuxAAAAYw"]
[Sat Feb 28 11:01:55.194445 2026] [:error] [pid 39185:tid 39266] [client 20.220.232.240:21496] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Okxob.php"] [unique_id "aaJaoxVE-FfM89u7BQZc1AAAAJQ"]
[Sat Feb 28 11:01:57.806022 2026] [:error] [pid 52460:tid 52465] [client 20.220.232.240:21465] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Okxob.php"] [unique_id "aaJapbLWOogAgHGh62Su4QAAAYI"]
[Sat Feb 28 11:01:59.179405 2026] [:error] [pid 39184:tid 39237] [client 20.220.232.240:21440] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/moon3.php"] [unique_id "aaJap1tZF9Zd_U7easC-wwAAAFI"]
[Sat Feb 28 11:02:00.689005 2026] [:error] [pid 39185:tid 39264] [client 20.220.232.240:21448] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/moon3.php"] [unique_id "aaJaqBVE-FfM89u7BQZc4wAAAJI"]
[Sat Feb 28 11:02:01.353209 2026] [:error] [pid 39185:tid 39250] [client 20.220.232.240:21455] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/moon3.php"] [unique_id "aaJaqRVE-FfM89u7BQZc5gAAAIQ"]
[Sat Feb 28 11:02:02.015869 2026] [:error] [pid 39185:tid 39262] [client 20.220.232.240:21390] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/moon3.php"] [unique_id "aaJaqhVE-FfM89u7BQZc6gAAAJA"]
[Sat Feb 28 11:02:03.269257 2026] [:error] [pid 39184:tid 39236] [client 20.220.232.240:21494] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/thui.php"] [unique_id "aaJaq1tZF9Zd_U7easC-ygAAAFE"]
[Sat Feb 28 11:02:03.951123 2026] [:error] [pid 52460:tid 52481] [client 20.220.232.240:21470] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/thui.php"] [unique_id "aaJaq7LWOogAgHGh62Su8QAAAZI"]
[Sat Feb 28 11:02:05.331858 2026] [:error] [pid 11791:tid 11801] [client 20.220.232.240:21447] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/thui.php"] [unique_id "aaJarWuX5e1Q32gqxH3WeQAAAQg"]
[Sat Feb 28 11:02:06.559242 2026] [:error] [pid 39185:tid 39247] [client 20.220.232.240:21468] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/thui.php"] [unique_id "aaJarhVE-FfM89u7BQZc9wAAAIE"]
[Sat Feb 28 11:02:08.033646 2026] [:error] [pid 39185:tid 39262] [client 20.220.232.240:21467] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ebahvhhh.php"] [unique_id "aaJasBVE-FfM89u7BQZc-wAAAJA"]
[Sat Feb 28 11:02:09.168977 2026] [:error] [pid 39184:tid 39227] [client 20.220.232.240:21474] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ebahvhhh.php"] [unique_id "aaJasVtZF9Zd_U7easC-1AAAAEg"]
[Sat Feb 28 11:02:10.465865 2026] [:error] [pid 22194:tid 22202] [client 20.220.232.240:21482] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ebahvhhh.php"] [unique_id "aaJasn6mbajs3bzQGysaHQAAAUY"]
[Sat Feb 28 11:02:11.960768 2026] [:error] [pid 39185:tid 39270] [client 20.220.232.240:21379] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ebahvhhh.php"] [unique_id "aaJasxVE-FfM89u7BQZdDAAAAJg"]
[Sat Feb 28 11:02:12.633007 2026] [:error] [pid 52460:tid 52471] [client 20.220.232.240:21483] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/snq.php"] [unique_id "aaJatLLWOogAgHGh62SvFwAAAYg"]
[Sat Feb 28 11:02:13.441638 2026] [:error] [pid 39185:tid 39256] [client 20.220.232.240:21421] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/snq.php"] [unique_id "aaJatRVE-FfM89u7BQZdDwAAAIo"]
[Sat Feb 28 11:02:14.056900 2026] [:error] [pid 52460:tid 52474] [client 20.220.232.240:21495] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/snq.php"] [unique_id "aaJatrLWOogAgHGh62SvHAAAAYs"]
[Sat Feb 28 11:02:14.633319 2026] [:error] [pid 11791:tid 11798] [client 20.220.232.240:21433] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/snq.php"] [unique_id "aaJatmuX5e1Q32gqxH3WjgAAAQU"]
[Sat Feb 28 11:02:15.665702 2026] [:error] [pid 39183:tid 39194] [client 20.220.232.240:21450] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mcs.php"] [unique_id "aaJatxCf4HvhVePw3LbSYwAAAAI"]
[Sat Feb 28 11:02:16.590446 2026] [:error] [pid 52460:tid 52484] [client 20.220.232.240:21497] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mcs.php"] [unique_id "aaJauLLWOogAgHGh62SvJAAAAZU"]
[Sat Feb 28 11:02:17.225244 2026] [:error] [pid 52460:tid 52481] [client 20.220.232.240:21458] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mcs.php"] [unique_id "aaJaubLWOogAgHGh62SvJwAAAZI"]
[Sat Feb 28 11:02:17.943047 2026] [:error] [pid 39184:tid 39243] [client 20.220.232.240:21323] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mcs.php"] [unique_id "aaJauVtZF9Zd_U7easC-2AAAAFg"]
[Sat Feb 28 11:02:18.858273 2026] [:error] [pid 39183:tid 39211] [client 20.220.232.240:21454] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aaJauhCf4HvhVePw3LbSawAAABM"]
[Sat Feb 28 11:02:19.541336 2026] [:error] [pid 39184:tid 39222] [client 20.220.232.240:21487] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aaJau1tZF9Zd_U7easC-2gAAAEM"]
[Sat Feb 28 11:02:20.587630 2026] [:error] [pid 52460:tid 52480] [client 20.220.232.240:21377] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aaJavLLWOogAgHGh62SvQAAAAZE"]
[Sat Feb 28 11:02:21.494257 2026] [:error] [pid 11791:tid 11808] [client 20.220.232.240:21394] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aaJavWuX5e1Q32gqxH3WlAAAAQ8"]
[Sat Feb 28 11:02:22.430604 2026] [:error] [pid 11791:tid 11793] [client 20.220.232.240:21490] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xleet.php"] [unique_id "aaJavmuX5e1Q32gqxH3WlgAAAQA"]
[Sat Feb 28 11:02:23.177265 2026] [:error] [pid 52460:tid 52476] [client 20.220.232.240:21383] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xleet.php"] [unique_id "aaJav7LWOogAgHGh62SvbgAAAY0"]
[Sat Feb 28 11:02:23.755539 2026] [:error] [pid 11791:tid 11801] [client 20.220.232.240:21457] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xleet.php"] [unique_id "aaJav2uX5e1Q32gqxH3WmgAAAQg"]
[Sat Feb 28 11:02:24.484744 2026] [:error] [pid 39183:tid 39199] [client 20.220.232.240:21388] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xleet.php"] [unique_id "aaJawBCf4HvhVePw3LbScQAAAAc"]
[Sat Feb 28 11:02:25.179718 2026] [:error] [pid 39292:tid 39300] [client 20.220.232.240:21384] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aaJawaIAO5fN7BxyqcGkIgAAAMY"]
[Sat Feb 28 11:02:25.744811 2026] [:error] [pid 52460:tid 52470] [client 20.220.232.240:21437] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aaJawbLWOogAgHGh62SvhQAAAYc"]
[Sat Feb 28 11:02:26.440509 2026] [:error] [pid 11791:tid 11811] [client 20.220.232.240:21378] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aaJawmuX5e1Q32gqxH3WngAAARI"]
[Sat Feb 28 11:02:27.304312 2026] [:error] [pid 11791:tid 11800] [client 20.220.232.240:21453] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aaJaw2uX5e1Q32gqxH3WoAAAAQc"]
[Sat Feb 28 11:02:27.992659 2026] [:error] [pid 39183:tid 39203] [client 20.220.232.240:21479] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/wp-blog.php"] [unique_id "aaJawxCf4HvhVePw3LbSdQAAAAs"]
[Sat Feb 28 11:02:29.189150 2026] [:error] [pid 52460:tid 52482] [client 20.220.232.240:21486] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/wp-blog.php"] [unique_id "aaJaxbLWOogAgHGh62SvlAAAAZM"]
[Sat Feb 28 11:02:30.166410 2026] [:error] [pid 39185:tid 39257] [client 20.220.232.240:21460] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/wp-blog.php"] [unique_id "aaJaxhVE-FfM89u7BQZdOgAAAIs"]
[Sat Feb 28 11:02:31.787930 2026] [:error] [pid 52460:tid 52474] [client 20.220.232.240:21412] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/wp-blog.php"] [unique_id "aaJax7LWOogAgHGh62SvnAAAAYs"]
[Sat Feb 28 11:02:32.581364 2026] [:error] [pid 11791:tid 11809] [client 20.220.232.240:21444] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aaJayGuX5e1Q32gqxH3WrgAAARA"]
[Sat Feb 28 11:02:33.488607 2026] [:error] [pid 39185:tid 39252] [client 20.220.232.240:21489] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aaJayRVE-FfM89u7BQZdRgAAAIY"]
[Sat Feb 28 11:02:34.140196 2026] [:error] [pid 39185:tid 39250] [client 20.220.232.240:21386] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aaJayhVE-FfM89u7BQZdSgAAAIQ"]
[Sat Feb 28 11:02:34.930460 2026] [:error] [pid 22194:tid 22207] [client 20.220.232.240:21481] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aaJayn6mbajs3bzQGysaOAAAAUs"]
[Sat Feb 28 11:02:35.959032 2026] [:error] [pid 39184:tid 39233] [client 20.220.232.240:21332] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aaJay1tZF9Zd_U7easC-5gAAAE4"]
[Sat Feb 28 11:02:36.755194 2026] [:error] [pid 52460:tid 52486] [client 20.220.232.240:21498] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aaJazLLWOogAgHGh62SvqQAAAZc"]
[Sat Feb 28 11:02:37.567447 2026] [:error] [pid 39183:tid 39211] [client 20.220.232.240:21462] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aaJazRCf4HvhVePw3LbSfAAAABM"]
[Sat Feb 28 11:02:39.158425 2026] [:error] [pid 39185:tid 39267] [client 20.220.232.240:21409] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aaJazxVE-FfM89u7BQZdVgAAAJU"]
[Sat Feb 28 11:02:40.673883 2026] [:error] [pid 52460:tid 52472] [client 20.220.232.240:21493] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tmpls.php"] [unique_id "aaJa0LLWOogAgHGh62SvvAAAAYk"]
[Sat Feb 28 11:02:41.545121 2026] [:error] [pid 52460:tid 52471] [client 20.220.232.240:21333] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tmpls.php"] [unique_id "aaJa0bLWOogAgHGh62SvwQAAAYg"]
[Sat Feb 28 11:02:42.872053 2026] [:error] [pid 52460:tid 52476] [client 20.220.232.240:21501] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tmpls.php"] [unique_id "aaJa0rLWOogAgHGh62SvywAAAY0"]
[Sat Feb 28 11:02:44.262158 2026] [:error] [pid 11791:tid 11794] [client 20.220.232.240:21315] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tmpls.php"] [unique_id "aaJa1GuX5e1Q32gqxH3WwwAAAQE"]
[Sat Feb 28 11:02:46.281070 2026] [:error] [pid 52460:tid 52479] [client 20.220.232.240:21398] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bsg-management/php.php"] [unique_id "aaJa1rLWOogAgHGh62Sv6AAAAZA"]
[Sat Feb 28 11:02:58.938170 2026] [:error] [pid 52460:tid 52483] [client 20.220.232.240:21476] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws60.php"] [unique_id "aaJa4rLWOogAgHGh62SwLAAAAZQ"]
[Sat Feb 28 11:02:59.923204 2026] [:error] [pid 52460:tid 52480] [client 20.220.232.240:21413] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws60.php"] [unique_id "aaJa47LWOogAgHGh62SwMAAAAZE"]
[Sat Feb 28 11:03:00.644009 2026] [:error] [pid 39185:tid 39253] [client 20.220.232.240:21492] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws60.php"] [unique_id "aaJa5BVE-FfM89u7BQZdiQAAAIc"]
[Sat Feb 28 11:03:01.449202 2026] [:error] [pid 52460:tid 52466] [client 20.220.232.240:21473] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws60.php"] [unique_id "aaJa5bLWOogAgHGh62SwNAAAAYM"]
[Sat Feb 28 11:03:02.608030 2026] [:error] [pid 52460:tid 52480] [client 20.220.232.240:21342] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-freya.php"] [unique_id "aaJa5rLWOogAgHGh62SwPgAAAZE"]
[Sat Feb 28 11:03:03.457728 2026] [:error] [pid 39185:tid 39267] [client 20.220.232.240:21469] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-freya.php"] [unique_id "aaJa5xVE-FfM89u7BQZdkgAAAJU"]
[Sat Feb 28 11:03:04.411320 2026] [:error] [pid 39185:tid 39266] [client 20.220.232.240:21316] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-freya.php"] [unique_id "aaJa6BVE-FfM89u7BQZdmAAAAJQ"]
[Sat Feb 28 11:03:05.553060 2026] [:error] [pid 39292:tid 39317] [client 20.220.232.240:21389] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-freya.php"] [unique_id "aaJa6aIAO5fN7BxyqcGkSwAAANc"]
[Sat Feb 28 11:03:06.479125 2026] [:error] [pid 39292:tid 39318] [client 20.220.232.240:21480] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bb.php"] [unique_id "aaJa6qIAO5fN7BxyqcGkUQAAANg"]
[Sat Feb 28 11:03:08.061256 2026] [:error] [pid 22194:tid 22196] [client 20.220.232.240:21318] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bb.php"] [unique_id "aaJa7H6mbajs3bzQGysaUgAAAUA"]
[Sat Feb 28 11:03:10.698046 2026] [:error] [pid 52460:tid 52463] [client 20.220.232.240:21381] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bb.php"] [unique_id "aaJa7rLWOogAgHGh62SwUQAAAYA"]
[Sat Feb 28 11:03:13.150664 2026] [:error] [pid 39185:tid 39254] [client 20.220.232.240:21414] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bb.php"] [unique_id "aaJa8RVE-FfM89u7BQZd1AAAAIg"]
[Sat Feb 28 11:03:15.483154 2026] [:error] [pid 39292:tid 39301] [client 20.220.232.240:21435] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dsd.php"] [unique_id "aaJa86IAO5fN7BxyqcGkaAAAAMc"]
[Sat Feb 28 11:03:16.920114 2026] [:error] [pid 39184:tid 39234] [client 20.220.232.240:21340] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dsd.php"] [unique_id "aaJa9FtZF9Zd_U7easC_BgAAAE8"]
[Sat Feb 28 11:03:18.518189 2026] [:error] [pid 52460:tid 52478] [client 20.220.232.240:21456] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dsd.php"] [unique_id "aaJa9rLWOogAgHGh62SwigAAAY8"]
[Sat Feb 28 11:03:19.795757 2026] [:error] [pid 39185:tid 39250] [client 20.220.232.240:21502] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dsd.php"] [unique_id "aaJa9xVE-FfM89u7BQZd6wAAAIQ"]
[Sat Feb 28 11:03:21.293198 2026] [:error] [pid 39292:tid 39312] [client 20.220.232.240:21422] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/guk.php"] [unique_id "aaJa-aIAO5fN7BxyqcGkcAAAANI"]
[Sat Feb 28 11:03:21.966371 2026] [:error] [pid 39184:tid 39223] [client 20.220.232.240:21424] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/guk.php"] [unique_id "aaJa-VtZF9Zd_U7easC_DgAAAEQ"]
[Sat Feb 28 11:03:23.496989 2026] [:error] [pid 52460:tid 52463] [client 20.220.232.240:21396] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/guk.php"] [unique_id "aaJa-7LWOogAgHGh62SwsQAAAYA"]
[Sat Feb 28 11:03:25.118533 2026] [:error] [pid 39185:tid 39246] [client 20.220.232.240:21408] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/guk.php"] [unique_id "aaJa_RVE-FfM89u7BQZd8wAAAIA"]
[Sat Feb 28 11:03:26.563744 2026] [:error] [pid 22194:tid 22211] [client 20.220.232.240:21403] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/vx.php"] [unique_id "aaJa_n6mbajs3bzQGysabAAAAU8"]
[Sat Feb 28 11:03:28.285325 2026] [:error] [pid 39184:tid 39234] [client 20.220.232.240:21416] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/vx.php"] [unique_id "aaJbAFtZF9Zd_U7easC_GgAAAE8"]
[Sat Feb 28 11:03:30.618593 2026] [:error] [pid 11791:tid 11803] [client 20.220.232.240:21459] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/vx.php"] [unique_id "aaJbAmuX5e1Q32gqxH3XJAAAAQo"]
[Sat Feb 28 11:03:32.422783 2026] [:error] [pid 39185:tid 39263] [client 20.220.232.240:21410] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/vx.php"] [unique_id "aaJbBBVE-FfM89u7BQZeDgAAAJE"]
[Sat Feb 28 11:03:34.694554 2026] [:error] [pid 52460:tid 52476] [client 20.220.232.240:21334] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ze.php"] [unique_id "aaJbBrLWOogAgHGh62Sw0QAAAY0"]
[Sat Feb 28 11:03:35.954052 2026] [:error] [pid 11791:tid 11804] [client 20.220.232.240:21423] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ze.php"] [unique_id "aaJbB2uX5e1Q32gqxH3XMgAAAQs"]
[Sat Feb 28 11:03:37.194712 2026] [:error] [pid 52460:tid 52485] [client 20.220.232.240:21369] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ze.php"] [unique_id "aaJbCbLWOogAgHGh62Sw5wAAAZY"]
[Sat Feb 28 11:03:38.216844 2026] [:error] [pid 52460:tid 52468] [client 20.220.232.240:21401] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ze.php"] [unique_id "aaJbCrLWOogAgHGh62Sw8AAAAYU"]
[Sat Feb 28 11:03:39.110528 2026] [:error] [pid 39183:tid 39204] [client 20.220.232.240:21452] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file52.php"] [unique_id "aaJbCxCf4HvhVePw3LbSnQAAAAw"]
[Sat Feb 28 11:03:40.512817 2026] [:error] [pid 52460:tid 52484] [client 20.220.232.240:21393] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file52.php"] [unique_id "aaJbDLLWOogAgHGh62SxEAAAAZU"]
[Sat Feb 28 11:03:41.367587 2026] [:error] [pid 39292:tid 39307] [client 20.220.232.240:21397] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file52.php"] [unique_id "aaJbDaIAO5fN7BxyqcGkiwAAAM0"]
[Sat Feb 28 11:03:42.660754 2026] [:error] [pid 11791:tid 11812] [client 20.220.232.240:21336] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file52.php"] [unique_id "aaJbDmuX5e1Q32gqxH3XRAAAARM"]
[Sat Feb 28 11:03:43.578212 2026] [:error] [pid 52460:tid 52474] [client 20.220.232.240:21424] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tax.php"] [unique_id "aaJbD7LWOogAgHGh62SxKAAAAYs"]
[Sat Feb 28 11:03:44.292385 2026] [:error] [pid 39292:tid 39316] [client 20.220.232.240:21436] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tax.php"] [unique_id "aaJbEKIAO5fN7BxyqcGkkgAAANY"]
[Sat Feb 28 11:03:44.856643 2026] [:error] [pid 52460:tid 52464] [client 20.220.232.240:21442] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tax.php"] [unique_id "aaJbELLWOogAgHGh62SxNAAAAYE"]
[Sat Feb 28 11:03:45.784528 2026] [:error] [pid 39185:tid 39255] [client 20.220.232.240:21400] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tax.php"] [unique_id "aaJbERVE-FfM89u7BQZeLgAAAIk"]
[Sat Feb 28 11:03:46.670665 2026] [:error] [pid 39185:tid 39250] [client 20.220.232.240:21382] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/an7.php"] [unique_id "aaJbEhVE-FfM89u7BQZeNAAAAIQ"]
[Sat Feb 28 11:03:47.524729 2026] [:error] [pid 52460:tid 52486] [client 20.220.232.240:21255] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/an7.php"] [unique_id "aaJbE7LWOogAgHGh62SxRgAAAZc"]
[Sat Feb 28 11:03:48.374639 2026] [:error] [pid 52460:tid 52466] [client 20.220.232.240:21387] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/an7.php"] [unique_id "aaJbFLLWOogAgHGh62SxUAAAAYM"]
[Sat Feb 28 11:03:49.366118 2026] [:error] [pid 39292:tid 39302] [client 20.220.232.240:21488] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/an7.php"] [unique_id "aaJbFaIAO5fN7BxyqcGkmAAAAMg"]
[Sat Feb 28 11:03:50.580073 2026] [:error] [pid 22194:tid 22205] [client 20.220.232.240:21357] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ty.php"] [unique_id "aaJbFn6mbajs3bzQGysamAAAAUk"]
[Sat Feb 28 11:03:52.213018 2026] [:error] [pid 11791:tid 11815] [client 20.220.232.240:21371] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ty.php"] [unique_id "aaJbGGuX5e1Q32gqxH3XcAAAARY"]
[Sat Feb 28 11:03:53.634505 2026] [:error] [pid 39292:tid 39300] [client 20.220.232.240:21477] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ty.php"] [unique_id "aaJbGaIAO5fN7BxyqcGkoAAAAMY"]
[Sat Feb 28 11:03:54.699545 2026] [:error] [pid 11791:tid 11815] [client 20.220.232.240:21461] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ty.php"] [unique_id "aaJbGmuX5e1Q32gqxH3XgQAAARY"]
[Sat Feb 28 11:03:55.865806 2026] [:error] [pid 39184:tid 39223] [client 20.220.232.240:21466] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/brc.php"] [unique_id "aaJbG1tZF9Zd_U7easC_MwAAAEQ"]
[Sat Feb 28 11:03:56.859718 2026] [:error] [pid 52460:tid 52481] [client 20.220.232.240:21499] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/brc.php"] [unique_id "aaJbHLLWOogAgHGh62SxbwAAAZI"]
[Sat Feb 28 11:03:57.910621 2026] [:error] [pid 52460:tid 52467] [client 20.220.232.240:21415] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/brc.php"] [unique_id "aaJbHbLWOogAgHGh62SxeAAAAYQ"]
[Sat Feb 28 11:04:04.659870 2026] [:error] [pid 11791:tid 11811] [client 20.220.232.240:21418] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/clasa99.php"] [unique_id "aaJbJGuX5e1Q32gqxH3XvQAAARI"]
[Sat Feb 28 11:04:05.685182 2026] [:error] [pid 39292:tid 39318] [client 20.220.232.240:21443] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/clasa99.php"] [unique_id "aaJbJaIAO5fN7BxyqcGkuAAAANg"]
[Sat Feb 28 11:04:06.426568 2026] [:error] [pid 52460:tid 52475] [client 20.220.232.240:21344] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/clasa99.php"] [unique_id "aaJbJrLWOogAgHGh62SxxAAAAYw"]
[Sat Feb 28 11:04:07.416825 2026] [:error] [pid 11791:tid 11811] [client 20.220.232.240:21374] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/clasa99.php"] [unique_id "aaJbJ2uX5e1Q32gqxH3XzQAAARI"]
[Sat Feb 28 11:04:08.167729 2026] [:error] [pid 39183:tid 39209] [client 20.220.232.240:21420] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaJbKBCf4HvhVePw3LbStQAAABE"]
[Sat Feb 28 11:04:09.578531 2026] [:error] [pid 11791:tid 11794] [client 20.220.232.240:21439] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaJbKWuX5e1Q32gqxH3X0QAAAQE"]
[Sat Feb 28 11:04:10.253179 2026] [:error] [pid 39185:tid 39267] [client 20.220.232.240:21402] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaJbKhVE-FfM89u7BQZeWwAAAJU"]
[Sat Feb 28 11:04:11.847959 2026] [:error] [pid 22194:tid 22200] [client 20.220.232.240:21376] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaJbK36mbajs3bzQGysa0wAAAUQ"]
[Sat Feb 28 11:04:13.681752 2026] [:error] [pid 52460:tid 52471] [client 20.220.232.240:21404] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws62.php"] [unique_id "aaJbLbLWOogAgHGh62SyCAAAAYg"]
[Sat Feb 28 11:04:14.932983 2026] [:error] [pid 39185:tid 39246] [client 20.220.232.240:21314] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws62.php"] [unique_id "aaJbLhVE-FfM89u7BQZebAAAAIA"]
[Sat Feb 28 11:04:16.194674 2026] [:error] [pid 11791:tid 11794] [client 20.220.232.240:21363] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws62.php"] [unique_id "aaJbMGuX5e1Q32gqxH3X4gAAAQE"]
[Sat Feb 28 11:04:17.916005 2026] [:error] [pid 39185:tid 39263] [client 20.220.232.240:21432] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws62.php"] [unique_id "aaJbMRVE-FfM89u7BQZedAAAAJE"]
[Sat Feb 28 11:04:19.389533 2026] [:error] [pid 39185:tid 39262] [client 20.220.232.240:21368] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aaJbMxVE-FfM89u7BQZegQAAAJA"]
[Sat Feb 28 11:04:20.506352 2026] [:error] [pid 11791:tid 11804] [client 20.220.232.240:21312] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aaJbNGuX5e1Q32gqxH3X9gAAAQs"]
[Sat Feb 28 11:04:21.711883 2026] [:error] [pid 39185:tid 39249] [client 20.220.232.240:21380] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aaJbNRVE-FfM89u7BQZelAAAAIM"]
[Sat Feb 28 11:04:23.480340 2026] [:error] [pid 52460:tid 52483] [client 20.220.232.240:21317] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aaJbN7LWOogAgHGh62SyRAAAAZQ"]
[Sat Feb 28 11:04:24.229641 2026] [:error] [pid 22194:tid 22214] [client 20.220.232.240:21503] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aaJbOH6mbajs3bzQGysa8gAAAVI"]
[Sat Feb 28 11:04:25.174540 2026] [:error] [pid 39184:tid 39224] [client 20.220.232.240:21451] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aaJbOVtZF9Zd_U7easC_TQAAAEU"]
[Sat Feb 28 11:04:26.129862 2026] [:error] [pid 22194:tid 22211] [client 20.220.232.240:21319] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aaJbOn6mbajs3bzQGysa_wAAAU8"]
[Sat Feb 28 11:04:26.970746 2026] [:error] [pid 39185:tid 39267] [client 20.220.232.240:21325] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aaJbOhVE-FfM89u7BQZevAAAAJU"]
[Sat Feb 28 11:04:27.888659 2026] [:error] [pid 39185:tid 39262] [client 20.220.232.240:21343] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/co.php"] [unique_id "aaJbOxVE-FfM89u7BQZewgAAAJA"]
[Sat Feb 28 11:04:28.646338 2026] [:error] [pid 52460:tid 52464] [client 20.220.232.240:21352] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/co.php"] [unique_id "aaJbPLLWOogAgHGh62SyawAAAYE"]
[Sat Feb 28 11:04:29.379160 2026] [:error] [pid 52460:tid 52467] [client 20.220.232.240:21471] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/co.php"] [unique_id "aaJbPbLWOogAgHGh62SydQAAAYQ"]
[Sat Feb 28 11:04:30.585072 2026] [:error] [pid 11791:tid 11813] [client 20.220.232.240:21427] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/co.php"] [unique_id "aaJbPmuX5e1Q32gqxH3YFAAAARQ"]
[Sat Feb 28 11:04:32.034238 2026] [:error] [pid 52460:tid 52465] [client 20.220.232.240:21434] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cxc.php"] [unique_id "aaJbQLLWOogAgHGh62SyhgAAAYI"]
[Sat Feb 28 11:04:32.985103 2026] [:error] [pid 11791:tid 11814] [client 20.220.232.240:21355] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cxc.php"] [unique_id "aaJbQGuX5e1Q32gqxH3YHwAAARU"]
[Sat Feb 28 11:04:34.167897 2026] [:error] [pid 52460:tid 52466] [client 20.220.232.240:21249] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cxc.php"] [unique_id "aaJbQrLWOogAgHGh62SykgAAAYM"]
[Sat Feb 28 11:04:35.377867 2026] [:error] [pid 22194:tid 22197] [client 20.220.232.240:21332] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cxc.php"] [unique_id "aaJbQ36mbajs3bzQGysbDgAAAUE"]
[Sat Feb 28 11:04:36.348430 2026] [:error] [pid 39185:tid 39251] [client 20.220.232.240:21252] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gjm.php"] [unique_id "aaJbRBVE-FfM89u7BQZe2gAAAIU"]
[Sat Feb 28 11:04:37.159693 2026] [:error] [pid 52460:tid 52481] [client 20.220.232.240:21462] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gjm.php"] [unique_id "aaJbRbLWOogAgHGh62SyogAAAZI"]
[Sat Feb 28 11:04:37.943937 2026] [:error] [pid 52460:tid 52468] [client 20.220.232.240:21337] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gjm.php"] [unique_id "aaJbRbLWOogAgHGh62SypQAAAYU"]
[Sat Feb 28 11:04:38.610600 2026] [:error] [pid 52460:tid 52478] [client 20.220.232.240:21411] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gjm.php"] [unique_id "aaJbRrLWOogAgHGh62SyrAAAAY8"]
[Sat Feb 28 11:04:39.537282 2026] [:error] [pid 39292:tid 39312] [client 20.220.232.240:21322] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ex.php"] [unique_id "aaJbR6IAO5fN7BxyqcGlFQAAANI"]
[Sat Feb 28 11:04:40.221755 2026] [:error] [pid 39292:tid 39296] [client 20.220.232.240:21330] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ex.php"] [unique_id "aaJbSKIAO5fN7BxyqcGlFwAAAMI"]
[Sat Feb 28 11:04:41.046909 2026] [:error] [pid 52460:tid 52487] [client 20.220.232.240:21419] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ex.php"] [unique_id "aaJbSbLWOogAgHGh62SyuAAAAZg"]
[Sat Feb 28 11:04:41.947046 2026] [:error] [pid 39185:tid 39263] [client 20.220.232.240:21324] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ex.php"] [unique_id "aaJbSRVE-FfM89u7BQZe4QAAAJE"]
[Sat Feb 28 11:04:43.046359 2026] [:error] [pid 11791:tid 11803] [client 20.220.232.240:21399] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/post.php"] [unique_id "aaJbS2uX5e1Q32gqxH3YOAAAAQo"]
[Sat Feb 28 11:04:44.074623 2026] [:error] [pid 39185:tid 39264] [client 20.220.232.240:21429] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/post.php"] [unique_id "aaJbTBVE-FfM89u7BQZe6QAAAJI"]
[Sat Feb 28 11:04:44.658305 2026] [:error] [pid 39185:tid 39262] [client 20.220.232.240:21338] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/post.php"] [unique_id "aaJbTBVE-FfM89u7BQZe6wAAAJA"]
[Sat Feb 28 11:04:45.768215 2026] [:error] [pid 52460:tid 52485] [client 20.220.232.240:21268] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/post.php"] [unique_id "aaJbTbLWOogAgHGh62SyzgAAAZY"]
[Sat Feb 28 11:04:46.544324 2026] [:error] [pid 52460:tid 52463] [client 20.220.232.240:21349] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wpo.php"] [unique_id "aaJbTrLWOogAgHGh62Sy0wAAAYA"]
[Sat Feb 28 11:04:47.014546 2026] [:error] [pid 11791:tid 11814] [client 20.220.232.240:21326] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wpo.php"] [unique_id "aaJbT2uX5e1Q32gqxH3YOgAAARU"]
[Sat Feb 28 11:04:47.756285 2026] [:error] [pid 11791:tid 11800] [client 20.220.232.240:21405] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wpo.php"] [unique_id "aaJbT2uX5e1Q32gqxH3YPAAAAQc"]
[Sat Feb 28 11:04:48.492799 2026] [:error] [pid 39292:tid 39315] [client 20.220.232.240:21407] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wpo.php"] [unique_id "aaJbUKIAO5fN7BxyqcGlIgAAANU"]
[Sat Feb 28 11:04:49.274125 2026] [:error] [pid 52460:tid 52482] [client 20.220.232.240:21256] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jq.php"] [unique_id "aaJbUbLWOogAgHGh62Sy3QAAAZM"]
[Sat Feb 28 11:04:50.521535 2026] [:error] [pid 52460:tid 52484] [client 20.220.232.240:21491] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jq.php"] [unique_id "aaJbUrLWOogAgHGh62Sy7QAAAZU"]
[Sat Feb 28 11:04:51.785679 2026] [:error] [pid 39185:tid 39248] [client 20.220.232.240:21193] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jq.php"] [unique_id "aaJbUxVE-FfM89u7BQZe_AAAAII"]
[Sat Feb 28 11:04:52.705135 2026] [:error] [pid 39183:tid 39206] [client 20.220.232.240:21366] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jq.php"] [unique_id "aaJbVBCf4HvhVePw3LbS2QAAAA4"]
[Sat Feb 28 11:04:53.516435 2026] [:error] [pid 11791:tid 11794] [client 20.220.232.240:21441] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x7.php"] [unique_id "aaJbVWuX5e1Q32gqxH3YaAAAAQE"]
[Sat Feb 28 11:04:54.198190 2026] [:error] [pid 52460:tid 52486] [client 20.220.232.240:21283] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x7.php"] [unique_id "aaJbVrLWOogAgHGh62SzcAAAAZc"]
[Sat Feb 28 11:04:54.725072 2026] [:error] [pid 52460:tid 52484] [client 20.220.232.240:21306] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x7.php"] [unique_id "aaJbVrLWOogAgHGh62SzfwAAAZU"]
[Sat Feb 28 11:04:56.885033 2026] [:error] [pid 39185:tid 39266] [client 20.220.232.240:21351] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x7.php"] [unique_id "aaJbWBVE-FfM89u7BQZfMAAAAJQ"]
[Sat Feb 28 11:04:57.450554 2026] [:error] [pid 39184:tid 39229] [client 20.220.232.240:21293] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bes.php"] [unique_id "aaJbWVtZF9Zd_U7easC_mQAAAEo"]
[Sat Feb 28 11:04:57.952024 2026] [:error] [pid 39184:tid 39225] [client 20.220.232.240:21359] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bes.php"] [unique_id "aaJbWVtZF9Zd_U7easC_mwAAAEY"]
[Sat Feb 28 11:04:58.694278 2026] [:error] [pid 39292:tid 39315] [client 20.220.232.240:21395] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bes.php"] [unique_id "aaJbWqIAO5fN7BxyqcGlVwAAANU"]
[Sat Feb 28 11:04:59.484710 2026] [:error] [pid 22194:tid 22212] [client 20.220.232.240:21313] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bes.php"] [unique_id "aaJbW36mbajs3bzQGysbeAAAAVA"]
[Sat Feb 28 11:05:00.373070 2026] [:error] [pid 11791:tid 11801] [client 20.220.232.240:21485] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sadd.php"] [unique_id "aaJbXGuX5e1Q32gqxH3YsgAAAQg"]
[Sat Feb 28 11:05:00.906292 2026] [:error] [pid 52460:tid 52468] [client 20.220.232.240:21438] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sadd.php"] [unique_id "aaJbXLLWOogAgHGh62SztQAAAYU"]
[Sat Feb 28 11:05:01.843721 2026] [:error] [pid 52460:tid 52478] [client 20.220.232.240:21358] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sadd.php"] [unique_id "aaJbXbLWOogAgHGh62SzuwAAAY8"]
[Sat Feb 28 11:05:03.074437 2026] [:error] [pid 52460:tid 52469] [client 20.220.232.240:21197] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sadd.php"] [unique_id "aaJbX7LWOogAgHGh62SzwAAAAYY"]
[Sat Feb 28 11:05:03.755632 2026] [:error] [pid 11791:tid 11799] [client 20.220.232.240:21446] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vgtyu.php"] [unique_id "aaJbX2uX5e1Q32gqxH3YwQAAAQY"]
[Sat Feb 28 11:05:11.892547 2026] [:error] [pid 52460:tid 52468] [client 20.220.232.240:21353] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "aaJbZ7LWOogAgHGh62S0KwAAAYU"]
[Sat Feb 28 11:05:13.135667 2026] [:error] [pid 39292:tid 39299] [client 20.220.232.240:21348] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "aaJbaaIAO5fN7BxyqcGljQAAAMU"]
[Sat Feb 28 11:05:13.679503 2026] [:error] [pid 22194:tid 22217] [client 20.220.232.240:21184] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "aaJbaX6mbajs3bzQGysbowAAAVU"]
[Sat Feb 28 11:05:14.725599 2026] [:error] [pid 52460:tid 52468] [client 20.220.232.240:21284] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "aaJbarLWOogAgHGh62S01gAAAYU"]
[Sat Feb 28 11:05:15.434285 2026] [:error] [pid 39183:tid 39202] [client 20.220.232.240:21321] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws79.php"] [unique_id "aaJbaxCf4HvhVePw3LbTLgAAAAo"]
[Sat Feb 28 11:05:16.663101 2026] [:error] [pid 39185:tid 39263] [client 20.220.232.240:21354] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws79.php"] [unique_id "aaJbbBVE-FfM89u7BQZf_gAAAJE"]
[Sat Feb 28 11:05:17.241978 2026] [:error] [pid 52460:tid 52483] [client 20.220.232.240:21356] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws79.php"] [unique_id "aaJbbbLWOogAgHGh62S1zQAAAZQ"]
[Sat Feb 28 11:05:17.790275 2026] [:error] [pid 39185:tid 39267] [client 20.220.232.240:21345] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws79.php"] [unique_id "aaJbbRVE-FfM89u7BQZgKwAAAJU"]
[Sat Feb 28 11:05:18.556208 2026] [:error] [pid 39184:tid 39240] [client 20.220.232.240:21362] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1061.php"] [unique_id "aaJbbltZF9Zd_U7easC_xQAAAFU"]
[Sat Feb 28 11:05:19.580983 2026] [:error] [pid 39185:tid 39265] [client 20.220.232.240:21350] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1061.php"] [unique_id "aaJbbxVE-FfM89u7BQZgXQAAAJM"]
[Sat Feb 28 11:05:20.274789 2026] [:error] [pid 52460:tid 52475] [client 20.220.232.240:21253] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1061.php"] [unique_id "aaJbcLLWOogAgHGh62S2UgAAAYw"]
[Sat Feb 28 11:05:20.981768 2026] [:error] [pid 11791:tid 11812] [client 20.220.232.240:21308] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1061.php"] [unique_id "aaJbcGuX5e1Q32gqxH3aCQAAARM"]
[Sat Feb 28 11:05:21.494127 2026] [:error] [pid 39185:tid 39260] [client 20.220.232.240:21335] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zwq13.php"] [unique_id "aaJbcRVE-FfM89u7BQZgbgAAAI4"]
[Sat Feb 28 11:05:22.125434 2026] [:error] [pid 22194:tid 22216] [client 20.220.232.240:21265] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zwq13.php"] [unique_id "aaJbcn6mbajs3bzQGyscXgAAAVQ"]
[Sat Feb 28 11:05:22.906842 2026] [:error] [pid 39185:tid 39270] [client 20.220.232.240:21375] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zwq13.php"] [unique_id "aaJbchVE-FfM89u7BQZgdAAAAJg"]
[Sat Feb 28 11:05:23.564832 2026] [:error] [pid 39185:tid 39258] [client 20.220.232.240:21328] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zwq13.php"] [unique_id "aaJbcxVE-FfM89u7BQZgfwAAAIw"]
[Sat Feb 28 11:05:24.624032 2026] [:error] [pid 39185:tid 39270] [client 20.220.232.240:21425] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hello.php"] [unique_id "aaJbdBVE-FfM89u7BQZgjgAAAJg"]
[Sat Feb 28 11:05:25.243224 2026] [:error] [pid 52460:tid 52471] [client 20.220.232.240:21273] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hello.php"] [unique_id "aaJbdbLWOogAgHGh62S2hgAAAYg"]
[Sat Feb 28 11:05:26.020591 2026] [:error] [pid 52460:tid 52469] [client 20.220.232.240:21478] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hello.php"] [unique_id "aaJbdrLWOogAgHGh62S2lQAAAYY"]
[Sat Feb 28 11:05:26.666846 2026] [:error] [pid 22194:tid 22208] [client 20.220.232.240:21364] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hello.php"] [unique_id "aaJbdn6mbajs3bzQGysccAAAAUw"]
[Sat Feb 28 11:05:27.370470 2026] [:error] [pid 11791:tid 11808] [client 20.220.232.240:21430] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/05.php"] [unique_id "aaJbd2uX5e1Q32gqxH3aGAAAAQ8"]
[Sat Feb 28 11:05:28.424217 2026] [:error] [pid 39185:tid 39251] [client 20.220.232.240:21300] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/05.php"] [unique_id "aaJbeBVE-FfM89u7BQZglgAAAIU"]
[Sat Feb 28 11:05:29.368088 2026] [:error] [pid 52460:tid 52475] [client 20.220.232.240:21329] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/05.php"] [unique_id "aaJbebLWOogAgHGh62S2rwAAAYw"]
[Sat Feb 28 11:05:30.221618 2026] [:error] [pid 11791:tid 11815] [client 20.220.232.240:21463] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/05.php"] [unique_id "aaJbemuX5e1Q32gqxH3aLgAAARY"]
[Sat Feb 28 11:05:30.881735 2026] [:error] [pid 11791:tid 11793] [client 20.220.232.240:21346] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zxin.php"] [unique_id "aaJbemuX5e1Q32gqxH3aOgAAAQA"]
[Sat Feb 28 11:05:31.568985 2026] [:error] [pid 52460:tid 52486] [client 20.220.232.240:21470] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zxin.php"] [unique_id "aaJbe7LWOogAgHGh62S2vQAAAZc"]
[Sat Feb 28 11:05:32.337557 2026] [:error] [pid 52460:tid 52486] [client 20.220.232.240:21264] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zxin.php"] [unique_id "aaJbfLLWOogAgHGh62S2xwAAAZc"]
[Sat Feb 28 11:05:32.908483 2026] [:error] [pid 39185:tid 39264] [client 20.220.232.240:21270] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zxin.php"] [unique_id "aaJbfBVE-FfM89u7BQZgrwAAAJI"]
[Sat Feb 28 11:05:33.415208 2026] [:error] [pid 52460:tid 52478] [client 20.220.232.240:21279] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aaJbfbLWOogAgHGh62S20gAAAY8"]
[Sat Feb 28 11:05:34.176414 2026] [:error] [pid 52460:tid 52484] [client 20.220.232.240:21288] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aaJbfrLWOogAgHGh62S23wAAAZU"]
[Sat Feb 28 11:05:34.906270 2026] [:error] [pid 39292:tid 39311] [client 20.220.232.240:21254] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aaJbfqIAO5fN7BxyqcGmYgAAANE"]
[Sat Feb 28 11:05:35.754243 2026] [:error] [pid 52460:tid 52467] [client 20.220.232.240:21262] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aaJbf7LWOogAgHGh62S28AAAAYQ"]
[Sat Feb 28 11:05:36.572646 2026] [:error] [pid 39292:tid 39314] [client 20.220.232.240:21200] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "aaJbgKIAO5fN7BxyqcGmbgAAANQ"]
[Sat Feb 28 11:05:37.260174 2026] [:error] [pid 11791:tid 11795] [client 20.220.232.240:21287] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "aaJbgWuX5e1Q32gqxH3aYgAAAQI"]
[Sat Feb 28 11:05:37.866534 2026] [:error] [pid 22194:tid 22207] [client 20.220.232.240:21361] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "aaJbgX6mbajs3bzQGyscjwAAAUs"]
[Sat Feb 28 11:05:38.583275 2026] [:error] [pid 39185:tid 39249] [client 20.220.232.240:21310] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "aaJbghVE-FfM89u7BQZgzwAAAIM"]
[Sat Feb 28 11:05:39.069454 2026] [:error] [pid 52460:tid 52469] [client 20.220.232.240:21298] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aaJbg7LWOogAgHGh62S2-wAAAYY"]
[Sat Feb 28 11:05:39.608555 2026] [:error] [pid 22194:tid 22201] [client 20.220.232.240:21286] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aaJbg36mbajs3bzQGyscmAAAAUU"]
[Sat Feb 28 11:05:40.133497 2026] [:error] [pid 52460:tid 52466] [client 20.220.232.240:21261] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aaJbhLLWOogAgHGh62S3AQAAAYM"]
[Sat Feb 28 11:05:40.691911 2026] [:error] [pid 11791:tid 11794] [client 20.220.232.240:21275] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aaJbhGuX5e1Q32gqxH3aeAAAAQE"]
[Sat Feb 28 11:05:41.370670 2026] [:error] [pid 22194:tid 22220] [client 20.220.232.240:21258] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/iko.php"] [unique_id "aaJbhX6mbajs3bzQGyscnAAAAVg"]
[Sat Feb 28 11:05:41.880982 2026] [:error] [pid 52460:tid 52486] [client 20.220.232.240:21431] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/iko.php"] [unique_id "aaJbhbLWOogAgHGh62S3DwAAAZc"]
[Sat Feb 28 11:05:42.635794 2026] [:error] [pid 39184:tid 39221] [client 20.220.232.240:21428] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/iko.php"] [unique_id "aaJbhltZF9Zd_U7easC_4gAAAEI"]
[Sat Feb 28 11:05:43.278811 2026] [:error] [pid 52460:tid 52475] [client 20.220.232.240:21250] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/iko.php"] [unique_id "aaJbh7LWOogAgHGh62S3IgAAAYw"]
[Sat Feb 28 11:05:43.814997 2026] [:error] [pid 39292:tid 39311] [client 20.220.232.240:21295] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmy.php"] [unique_id "aaJbh6IAO5fN7BxyqcGmgAAAANE"]
[Sat Feb 28 11:05:44.380010 2026] [:error] [pid 11791:tid 11800] [client 20.220.232.240:21464] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmy.php"] [unique_id "aaJbiGuX5e1Q32gqxH3akQAAAQc"]
[Sat Feb 28 11:05:45.134718 2026] [:error] [pid 39185:tid 39270] [client 20.220.232.240:21285] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmy.php"] [unique_id "aaJbiRVE-FfM89u7BQZg4AAAAJg"]
[Sat Feb 28 11:05:46.028753 2026] [:error] [pid 39185:tid 39246] [client 20.220.232.240:21203] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmy.php"] [unique_id "aaJbihVE-FfM89u7BQZg6QAAAIA"]
[Sat Feb 28 11:05:46.794196 2026] [:error] [pid 11791:tid 11804] [client 20.220.232.240:21347] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fun.php"] [unique_id "aaJbimuX5e1Q32gqxH3aowAAAQs"]
[Sat Feb 28 11:05:47.710169 2026] [:error] [pid 39292:tid 39298] [client 20.220.232.240:21297] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fun.php"] [unique_id "aaJbi6IAO5fN7BxyqcGmlgAAAMQ"]
[Sat Feb 28 11:05:48.919246 2026] [:error] [pid 22194:tid 22219] [client 20.220.232.240:21278] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fun.php"] [unique_id "aaJbjH6mbajs3bzQGyscrAAAAVc"]
[Sat Feb 28 11:05:50.091435 2026] [:error] [pid 39292:tid 39300] [client 20.220.232.240:21213] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fun.php"] [unique_id "aaJbjqIAO5fN7BxyqcGmogAAAMY"]
[Sat Feb 28 11:05:50.953127 2026] [:error] [pid 52460:tid 52484] [client 20.220.232.240:21309] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/end.php"] [unique_id "aaJbjrLWOogAgHGh62S3VAAAAZU"]
[Sat Feb 28 11:05:51.433438 2026] [:error] [pid 52460:tid 52479] [client 20.220.232.240:21290] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/end.php"] [unique_id "aaJbj7LWOogAgHGh62S3WwAAAZA"]
[Sat Feb 28 11:05:51.930479 2026] [:error] [pid 22194:tid 22211] [client 20.220.232.240:21301] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/end.php"] [unique_id "aaJbj36mbajs3bzQGysctwAAAU8"]
[Sat Feb 28 11:05:52.716014 2026] [:error] [pid 52460:tid 52478] [client 20.220.232.240:21242] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/end.php"] [unique_id "aaJbkLLWOogAgHGh62S3ZwAAAY8"]
[Sat Feb 28 11:05:53.519662 2026] [:error] [pid 52460:tid 52469] [client 20.220.232.240:21216] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "aaJbkbLWOogAgHGh62S3bQAAAYY"]
[Sat Feb 28 11:05:54.282744 2026] [:error] [pid 22194:tid 22220] [client 20.220.232.240:21331] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "aaJbkn6mbajs3bzQGyscxQAAAVg"]
[Sat Feb 28 11:05:55.001194 2026] [:error] [pid 39183:tid 39211] [client 20.220.232.240:21281] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "aaJbkxCf4HvhVePw3LbTsQAAABM"]
[Sat Feb 28 11:05:55.624213 2026] [:error] [pid 39292:tid 39304] [client 20.220.232.240:21341] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "aaJbk6IAO5fN7BxyqcGmvgAAAMo"]
[Sat Feb 28 11:05:56.290600 2026] [:error] [pid 52460:tid 52482] [client 20.220.232.240:21196] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/scx.php7"] [unique_id "aaJblLLWOogAgHGh62S3dAAAAZM"]
[Sat Feb 28 11:05:57.107697 2026] [:error] [pid 52460:tid 52476] [client 20.220.232.240:21210] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/scx.php7"] [unique_id "aaJblbLWOogAgHGh62S3fwAAAY0"]
[Sat Feb 28 11:05:57.555886 2026] [:error] [pid 39292:tid 39298] [client 20.220.232.240:21365] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/scx.php7"] [unique_id "aaJblaIAO5fN7BxyqcGmygAAAMQ"]
[Sat Feb 28 11:05:58.191969 2026] [:error] [pid 11791:tid 11801] [client 20.220.232.240:21211] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/scx.php7"] [unique_id "aaJblmuX5e1Q32gqxH3auwAAAQg"]
[Sat Feb 28 11:05:58.755751 2026] [:error] [pid 11791:tid 11806] [client 20.220.232.240:21484] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/error1.php"] [unique_id "aaJblmuX5e1Q32gqxH3avQAAAQ0"]
[Sat Feb 28 11:05:59.226807 2026] [:error] [pid 11791:tid 11803] [client 20.220.232.240:21277] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/error1.php"] [unique_id "aaJbl2uX5e1Q32gqxH3awQAAAQo"]
[Sat Feb 28 11:05:59.900982 2026] [:error] [pid 39185:tid 39247] [client 20.220.232.240:21188] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/error1.php"] [unique_id "aaJblxVE-FfM89u7BQZhJQAAAIE"]
[Sat Feb 28 11:06:00.568255 2026] [:error] [pid 39185:tid 39255] [client 20.220.232.240:21327] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/error1.php"] [unique_id "aaJbmBVE-FfM89u7BQZhMAAAAIk"]
[Sat Feb 28 11:06:01.114448 2026] [:error] [pid 22194:tid 22197] [client 20.220.232.240:21194] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/thui.php"] [unique_id "aaJbmX6mbajs3bzQGysc7gAAAUE"]
[Sat Feb 28 11:06:01.573874 2026] [:error] [pid 22194:tid 22202] [client 20.220.232.240:21320] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/thui.php"] [unique_id "aaJbmX6mbajs3bzQGysc9AAAAUY"]
[Sat Feb 28 11:06:02.172890 2026] [:error] [pid 39184:tid 39243] [client 20.220.232.240:21372] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/thui.php"] [unique_id "aaJbmltZF9Zd_U7easC_9gAAAFg"]
[Sat Feb 28 11:06:02.704841 2026] [:error] [pid 39292:tid 39316] [client 20.220.232.240:21426] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/thui.php"] [unique_id "aaJbmqIAO5fN7BxyqcGm5AAAANY"]
[Sat Feb 28 11:06:03.279538 2026] [:error] [pid 39185:tid 39259] [client 20.220.232.240:21449] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "aaJbmxVE-FfM89u7BQZhOQAAAI0"]
[Sat Feb 28 11:06:03.867439 2026] [:error] [pid 52460:tid 52484] [client 20.220.232.240:21266] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "aaJbm7LWOogAgHGh62S3ogAAAZU"]
[Sat Feb 28 11:06:04.614440 2026] [:error] [pid 52460:tid 52473] [client 20.220.232.240:21304] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "aaJbnLLWOogAgHGh62S3qgAAAYo"]
[Sat Feb 28 11:06:05.163871 2026] [:error] [pid 39184:tid 39224] [client 20.220.232.240:21189] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "aaJbnVtZF9Zd_U7easC__gAAAEU"]
[Sat Feb 28 11:06:05.740816 2026] [:error] [pid 39185:tid 39257] [client 20.220.232.240:21500] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/sc.php"] [unique_id "aaJbnRVE-FfM89u7BQZhPgAAAIs"]
[Sat Feb 28 11:06:06.462216 2026] [:error] [pid 11791:tid 11795] [client 20.220.232.240:21373] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/sc.php"] [unique_id "aaJbnmuX5e1Q32gqxH3a1gAAAQI"]
[Sat Feb 28 11:06:07.381321 2026] [:error] [pid 39183:tid 39197] [client 20.220.232.240:21274] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/sc.php"] [unique_id "aaJbnxCf4HvhVePw3LbTwwAAAAU"]
[Sat Feb 28 11:06:08.257865 2026] [:error] [pid 52460:tid 52475] [client 20.220.232.240:21339] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/sc.php"] [unique_id "aaJboLLWOogAgHGh62S31gAAAYw"]
[Sat Feb 28 11:06:08.994992 2026] [:error] [pid 11791:tid 11805] [client 20.220.232.240:21370] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aaJboGuX5e1Q32gqxH3a3gAAAQw"]
[Sat Feb 28 11:06:09.869910 2026] [:error] [pid 39183:tid 39199] [client 20.220.232.240:21138] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aaJboRCf4HvhVePw3LbT1AAAAAc"]
[Sat Feb 28 11:06:10.660889 2026] [:error] [pid 52460:tid 52471] [client 20.220.232.240:21231] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aaJborLWOogAgHGh62S33wAAAYg"]
[Sat Feb 28 11:06:17.741374 2026] [:error] [pid 39184:tid 39240] [client 20.220.232.240:21233] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aaJbqVtZF9Zd_U7easDAIwAAAFU"]
[Sat Feb 28 11:06:18.252958 2026] [:error] [pid 52460:tid 52466] [client 20.220.232.240:21276] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aaJbqrLWOogAgHGh62S4UAAAAYM"]
[Sat Feb 28 11:06:19.182582 2026] [:error] [pid 39292:tid 39311] [client 20.220.232.240:21247] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aaJbq6IAO5fN7BxyqcGnHwAAANE"]
[Sat Feb 28 11:06:20.441835 2026] [:error] [pid 52460:tid 52470] [client 20.220.232.240:21215] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aaJbrLLWOogAgHGh62S4WgAAAYc"]
[Sat Feb 28 11:06:21.113978 2026] [:error] [pid 52460:tid 52469] [client 20.220.232.240:21289] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plugins.php"] [unique_id "aaJbrbLWOogAgHGh62S4ZQAAAYY"]
[Sat Feb 28 11:06:21.592746 2026] [:error] [pid 22194:tid 22209] [client 20.220.232.240:21296] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plugins.php"] [unique_id "aaJbrX6mbajs3bzQGysdKQAAAU0"]
[Sat Feb 28 11:06:22.075559 2026] [:error] [pid 52460:tid 52468] [client 20.220.232.240:21147] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plugins.php"] [unique_id "aaJbrrLWOogAgHGh62S4cQAAAYU"]
[Sat Feb 28 11:06:22.606819 2026] [:error] [pid 52460:tid 52477] [client 20.220.232.240:21195] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plugins.php"] [unique_id "aaJbrrLWOogAgHGh62S4gwAAAY4"]
[Sat Feb 28 11:06:23.399334 2026] [:error] [pid 52460:tid 52478] [client 20.220.232.240:21385] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/raw.php"] [unique_id "aaJbr7LWOogAgHGh62S4kwAAAY8"]
[Sat Feb 28 11:06:24.388191 2026] [:error] [pid 39292:tid 39303] [client 20.220.232.240:21440] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/raw.php"] [unique_id "aaJbsKIAO5fN7BxyqcGnKgAAAMk"]
[Sat Feb 28 11:06:25.261623 2026] [:error] [pid 39185:tid 39264] [client 20.220.232.240:21390] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/raw.php"] [unique_id "aaJbsRVE-FfM89u7BQZhdwAAAJI"]
[Sat Feb 28 11:06:25.912214 2026] [:error] [pid 39292:tid 39301] [client 20.220.232.240:21496] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/raw.php"] [unique_id "aaJbsaIAO5fN7BxyqcGnLgAAAMc"]
[Sat Feb 28 11:06:26.582758 2026] [:error] [pid 39185:tid 39255] [client 20.220.232.240:21392] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "aaJbshVE-FfM89u7BQZhegAAAIk"]
[Sat Feb 28 11:06:27.282705 2026] [:error] [pid 39185:tid 39263] [client 20.220.232.240:21455] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "aaJbsxVE-FfM89u7BQZhewAAAJE"]
[Sat Feb 28 11:06:27.836669 2026] [:error] [pid 39292:tid 39314] [client 20.220.232.240:21433] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "aaJbs6IAO5fN7BxyqcGnMgAAANQ"]
[Sat Feb 28 11:06:28.365893 2026] [:error] [pid 39292:tid 39296] [client 20.220.232.240:21198] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "aaJbtKIAO5fN7BxyqcGnNQAAAMI"]
[Sat Feb 28 11:06:29.014091 2026] [:error] [pid 39185:tid 39257] [client 20.220.232.240:21494] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rtx.php"] [unique_id "aaJbtRVE-FfM89u7BQZhfQAAAIs"]
[Sat Feb 28 11:06:29.586639 2026] [:error] [pid 39185:tid 39262] [client 20.220.232.240:21294] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rtx.php"] [unique_id "aaJbtRVE-FfM89u7BQZhgAAAAJA"]
[Sat Feb 28 11:06:30.338713 2026] [:error] [pid 39183:tid 39212] [client 20.220.232.240:21454] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rtx.php"] [unique_id "aaJbthCf4HvhVePw3LbT6wAAABQ"]
[Sat Feb 28 11:06:31.111552 2026] [:error] [pid 39292:tid 39300] [client 20.220.232.240:21323] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rtx.php"] [unique_id "aaJbt6IAO5fN7BxyqcGnOQAAAMY"]
[Sat Feb 28 11:06:31.638027 2026] [:error] [pid 39185:tid 39248] [client 20.220.232.240:21448] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "aaJbtxVE-FfM89u7BQZhiQAAAII"]
[Sat Feb 28 11:06:32.519845 2026] [:error] [pid 39183:tid 39198] [client 20.220.232.240:21391] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "aaJbuBCf4HvhVePw3LbT7QAAAAY"]
[Sat Feb 28 11:06:33.131488 2026] [:error] [pid 11791:tid 11802] [client 20.220.232.240:21222] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "aaJbuWuX5e1Q32gqxH3bIwAAAQk"]
[Sat Feb 28 11:06:33.682465 2026] [:error] [pid 39183:tid 39194] [client 20.220.232.240:21377] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "aaJbuRCf4HvhVePw3LbT8AAAAAI"]
[Sat Feb 28 11:06:34.410333 2026] [:error] [pid 39292:tid 39313] [client 20.220.232.240:21230] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "aaJbuqIAO5fN7BxyqcGnPwAAANM"]
[Sat Feb 28 11:06:35.448695 2026] [:error] [pid 52460:tid 52481] [client 20.220.232.240:21383] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "aaJbu7LWOogAgHGh62S4ygAAAZI"]
[Sat Feb 28 11:06:36.355861 2026] [:error] [pid 39184:tid 39225] [client 20.220.232.240:21457] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "aaJbvFtZF9Zd_U7easDANgAAAEY"]
[Sat Feb 28 11:06:37.506485 2026] [:error] [pid 39184:tid 39227] [client 20.220.232.240:21437] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "aaJbvVtZF9Zd_U7easDANwAAAEg"]
[Sat Feb 28 11:06:38.415784 2026] [:error] [pid 39185:tid 39266] [client 20.220.232.240:21243] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/0.php"] [unique_id "aaJbvhVE-FfM89u7BQZhkwAAAJQ"]
[Sat Feb 28 11:06:39.380836 2026] [:error] [pid 52460:tid 52474] [client 20.220.232.240:21191] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/0.php"] [unique_id "aaJbv7LWOogAgHGh62S41wAAAYs"]
[Sat Feb 28 11:06:40.741144 2026] [:error] [pid 52460:tid 52481] [client 20.220.232.240:21378] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/0.php"] [unique_id "aaJbwLLWOogAgHGh62S42gAAAZI"]
[Sat Feb 28 11:06:41.575568 2026] [:error] [pid 39185:tid 39265] [client 20.220.232.240:21228] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/0.php"] [unique_id "aaJbwRVE-FfM89u7BQZhoQAAAJM"]
[Sat Feb 28 11:06:42.148582 2026] [:error] [pid 39185:tid 39248] [client 20.220.232.240:21257] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/moon.php"] [unique_id "aaJbwhVE-FfM89u7BQZhpwAAAII"]
[Sat Feb 28 11:06:42.916914 2026] [:error] [pid 52460:tid 52478] [client 20.220.232.240:21483] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/moon.php"] [unique_id "aaJbwrLWOogAgHGh62S44QAAAY8"]
[Sat Feb 28 11:06:44.107915 2026] [:error] [pid 52460:tid 52486] [client 20.220.232.240:21498] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/moon.php"] [unique_id "aaJbxLLWOogAgHGh62S47gAAAZc"]
[Sat Feb 28 11:06:45.295557 2026] [:error] [pid 52460:tid 52470] [client 20.220.232.240:21384] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/moon.php"] [unique_id "aaJbxbLWOogAgHGh62S4-gAAAYc"]
[Sat Feb 28 11:06:46.159643 2026] [:error] [pid 39292:tid 39306] [client 20.220.232.240:21218] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aaJbxqIAO5fN7BxyqcGnVAAAAMw"]
[Sat Feb 28 11:06:46.884696 2026] [:error] [pid 39185:tid 39254] [client 20.220.232.240:21468] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aaJbxhVE-FfM89u7BQZhtQAAAIg"]
[Sat Feb 28 11:06:47.707119 2026] [:error] [pid 11791:tid 11794] [client 20.220.232.240:21445] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aaJbx2uX5e1Q32gqxH3bRgAAAQE"]
[Sat Feb 28 11:06:48.624212 2026] [:error] [pid 52460:tid 52476] [client 20.220.232.240:21453] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aaJbyLLWOogAgHGh62S5CAAAAY0"]
[Sat Feb 28 11:06:50.055022 2026] [:error] [pid 22194:tid 22208] [client 20.220.232.240:21490] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gec.php"] [unique_id "aaJbyn6mbajs3bzQGysdPwAAAUw"]
[Sat Feb 28 11:06:50.813227 2026] [:error] [pid 52460:tid 52467] [client 20.220.232.240:21271] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gec.php"] [unique_id "aaJbyrLWOogAgHGh62S5HwAAAYQ"]
[Sat Feb 28 11:06:51.576190 2026] [:error] [pid 39292:tid 39310] [client 20.220.232.240:21451] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gec.php"] [unique_id "aaJby6IAO5fN7BxyqcGnXwAAANA"]
[Sat Feb 28 11:06:52.512336 2026] [:error] [pid 11791:tid 11795] [client 20.220.232.240:21260] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gec.php"] [unique_id "aaJbzGuX5e1Q32gqxH3bTAAAAQI"]
[Sat Feb 28 11:06:53.347632 2026] [:error] [pid 52460:tid 52470] [client 20.220.232.240:21482] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sxdfrt.php"] [unique_id "aaJbzbLWOogAgHGh62S5MwAAAYc"]
[Sat Feb 28 11:06:54.129218 2026] [:error] [pid 39185:tid 39256] [client 20.220.232.240:21122] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sxdfrt.php"] [unique_id "aaJbzhVE-FfM89u7BQZh2AAAAIo"]
[Sat Feb 28 11:06:54.994030 2026] [:error] [pid 39185:tid 39255] [client 20.220.232.240:21263] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sxdfrt.php"] [unique_id "aaJbzhVE-FfM89u7BQZh3QAAAIk"]
[Sat Feb 28 11:06:55.608292 2026] [:error] [pid 52460:tid 52470] [client 20.220.232.240:21458] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sxdfrt.php"] [unique_id "aaJbz7LWOogAgHGh62S5QAAAAYc"]
[Sat Feb 28 11:06:56.458245 2026] [:error] [pid 52460:tid 52476] [client 20.220.232.240:21135] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "aaJb0LLWOogAgHGh62S5SAAAAY0"]
[Sat Feb 28 11:06:58.229857 2026] [:error] [pid 22194:tid 22202] [client 20.220.232.240:21291] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "aaJb0n6mbajs3bzQGysdRwAAAUY"]
[Sat Feb 28 11:06:58.790099 2026] [:error] [pid 52460:tid 52466] [client 20.220.232.240:21190] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "aaJb0rLWOogAgHGh62S5WQAAAYM"]
[Sat Feb 28 11:06:59.590654 2026] [:error] [pid 11791:tid 11796] [client 20.220.232.240:21241] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "aaJb02uX5e1Q32gqxH3bWwAAAQM"]
[Sat Feb 28 11:07:01.610657 2026] [:error] [pid 39185:tid 39268] [client 20.220.232.240:21280] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aaJb1RVE-FfM89u7BQZh9wAAAJY"]
[Sat Feb 28 11:07:03.301779 2026] [:error] [pid 11791:tid 11801] [client 20.220.232.240:21394] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aaJb12uX5e1Q32gqxH3bZQAAAQg"]
[Sat Feb 28 11:07:04.417851 2026] [:error] [pid 39185:tid 39259] [client 20.220.232.240:21497] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aaJb2BVE-FfM89u7BQZiBwAAAI0"]
[Sat Feb 28 11:07:05.970802 2026] [:error] [pid 52460:tid 52472] [client 20.220.232.240:21226] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aaJb2bLWOogAgHGh62S5dQAAAYk"]
[Sat Feb 28 11:07:07.624880 2026] [:error] [pid 52460:tid 52484] [client 20.220.232.240:21386] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aaJb27LWOogAgHGh62S5fwAAAZU"]
[Sat Feb 28 11:07:08.795996 2026] [:error] [pid 52460:tid 52485] [client 20.220.232.240:21120] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aaJb3LLWOogAgHGh62S5ggAAAZY"]
[Sat Feb 28 11:07:10.598738 2026] [:error] [pid 39184:tid 39238] [client 20.220.232.240:21204] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aaJb3ltZF9Zd_U7easDAXgAAAFM"]
[Sat Feb 28 11:07:11.211611 2026] [:error] [pid 39185:tid 39249] [client 20.220.232.240:21406] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aaJb3xVE-FfM89u7BQZiIwAAAIM"]
[Sat Feb 28 11:07:12.327711 2026] [:error] [pid 39292:tid 39308] [client 20.220.232.240:21209] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ocxla.php"] [unique_id "aaJb4KIAO5fN7BxyqcGniQAAAM4"]
[Sat Feb 28 11:07:13.077481 2026] [:error] [pid 52460:tid 52471] [client 20.220.232.240:21299] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ocxla.php"] [unique_id "aaJb4bLWOogAgHGh62S5jQAAAYg"]
[Sat Feb 28 11:07:13.642201 2026] [:error] [pid 52460:tid 52484] [client 20.220.232.240:21474] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ocxla.php"] [unique_id "aaJb4bLWOogAgHGh62S5kAAAAZU"]
[Sat Feb 28 11:07:14.865202 2026] [:error] [pid 22194:tid 22200] [client 20.220.232.240:21398] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ocxla.php"] [unique_id "aaJb4n6mbajs3bzQGysdWAAAAUQ"]
[Sat Feb 28 11:07:15.682632 2026] [:error] [pid 39185:tid 39266] [client 20.220.232.240:21303] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/god.php"] [unique_id "aaJb4xVE-FfM89u7BQZiKwAAAJQ"]
[Sat Feb 28 12:55:33.707599 2026] [:error] [pid 11791:tid 11794] [client 4.205.9.11:8926] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aaJ1RWuX5e1Q32gqxH0TBQAAAQE"]
[Sat Feb 28 12:55:34.140431 2026] [:error] [pid 22194:tid 22198] [client 4.205.9.11:9058] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aaJ1Rn6mbajs3bzQGys9SAAAAUI"]
[Sat Feb 28 12:55:34.673973 2026] [:error] [pid 39185:tid 39261] [client 4.205.9.11:41398] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aaJ1RhVE-FfM89u7BQa1dQAAAI8"]
[Sat Feb 28 12:55:35.203029 2026] [:error] [pid 39184:tid 39228] [client 4.205.9.11:43862] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aaJ1R1tZF9Zd_U7easDYuQAAAEk"]
[Sat Feb 28 12:55:35.840476 2026] [:error] [pid 39292:tid 39308] [client 4.205.9.11:8916] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shop.php"] [unique_id "aaJ1R6IAO5fN7BxyqcHO0gAAAM4"]
[Sat Feb 28 12:55:36.316368 2026] [:error] [pid 39185:tid 39270] [client 4.205.9.11:43864] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shop.php"] [unique_id "aaJ1SBVE-FfM89u7BQa1gwAAAJg"]
[Sat Feb 28 12:55:36.880355 2026] [:error] [pid 39185:tid 39265] [client 4.205.9.11:9045] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shop.php"] [unique_id "aaJ1SBVE-FfM89u7BQa1igAAAJM"]
[Sat Feb 28 12:55:37.409071 2026] [:error] [pid 39292:tid 39314] [client 4.205.9.11:8909] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shop.php"] [unique_id "aaJ1SaIAO5fN7BxyqcHO1AAAANQ"]
[Sat Feb 28 12:55:37.951286 2026] [:error] [pid 11791:tid 11817] [client 4.205.9.11:41375] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cxxuv.php"] [unique_id "aaJ1SWuX5e1Q32gqxH0TBwAAARg"]
[Sat Feb 28 12:55:38.603439 2026] [:error] [pid 11791:tid 11809] [client 4.205.9.11:43848] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cxxuv.php"] [unique_id "aaJ1SmuX5e1Q32gqxH0TCwAAARA"]
[Sat Feb 28 12:55:39.136941 2026] [:error] [pid 52460:tid 52469] [client 4.205.9.11:9084] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cxxuv.php"] [unique_id "aaJ1S7LWOogAgHGh62QniQAAAYY"]
[Sat Feb 28 12:55:39.622033 2026] [:error] [pid 39292:tid 39296] [client 4.205.9.11:41371] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cxxuv.php"] [unique_id "aaJ1S6IAO5fN7BxyqcHO3gAAAMI"]
[Sat Feb 28 12:55:40.175493 2026] [:error] [pid 11791:tid 11803] [client 4.205.9.11:43885] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/b.php"] [unique_id "aaJ1TGuX5e1Q32gqxH0TEAAAAQo"]
[Sat Feb 28 12:55:40.694232 2026] [:error] [pid 39185:tid 39248] [client 4.205.9.11:9044] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/b.php"] [unique_id "aaJ1TBVE-FfM89u7BQa1mgAAAII"]
[Sat Feb 28 12:55:41.166362 2026] [:error] [pid 52460:tid 52466] [client 4.205.9.11:8900] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/b.php"] [unique_id "aaJ1TbLWOogAgHGh62QnkAAAAYM"]
[Sat Feb 28 12:55:41.793993 2026] [:error] [pid 22194:tid 22220] [client 4.205.9.11:8958] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/b.php"] [unique_id "aaJ1TX6mbajs3bzQGys9UAAAAVg"]
[Sat Feb 28 12:55:42.230690 2026] [:error] [pid 52460:tid 52468] [client 4.205.9.11:43856] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gi.php"] [unique_id "aaJ1TrLWOogAgHGh62QnmwAAAYU"]
[Sat Feb 28 12:55:42.714554 2026] [:error] [pid 11791:tid 11795] [client 4.205.9.11:53032] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gi.php"] [unique_id "aaJ1TmuX5e1Q32gqxH0TFwAAAQI"]
[Sat Feb 28 12:55:43.277584 2026] [:error] [pid 11791:tid 11809] [client 4.205.9.11:53011] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gi.php"] [unique_id "aaJ1T2uX5e1Q32gqxH0TGgAAARA"]
[Sat Feb 28 12:55:43.801406 2026] [:error] [pid 11791:tid 11810] [client 4.205.9.11:41381] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gi.php"] [unique_id "aaJ1T2uX5e1Q32gqxH0TIgAAARE"]
[Sat Feb 28 12:55:44.359105 2026] [:error] [pid 39292:tid 39314] [client 4.205.9.11:48238] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/e0v9e95c.php"] [unique_id "aaJ1UKIAO5fN7BxyqcHO5gAAANQ"]
[Sat Feb 28 12:55:45.021977 2026] [:error] [pid 39292:tid 39299] [client 4.205.9.11:52251] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/e0v9e95c.php"] [unique_id "aaJ1UaIAO5fN7BxyqcHO6AAAAMU"]
[Sat Feb 28 12:55:45.520405 2026] [:error] [pid 11791:tid 11809] [client 4.205.9.11:58252] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/e0v9e95c.php"] [unique_id "aaJ1UWuX5e1Q32gqxH0TKwAAARA"]
[Sat Feb 28 12:55:46.067977 2026] [:error] [pid 39185:tid 39257] [client 4.205.9.11:8904] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/e0v9e95c.php"] [unique_id "aaJ1UhVE-FfM89u7BQa1tQAAAIs"]
[Sat Feb 28 12:55:46.684097 2026] [:error] [pid 52460:tid 52481] [client 4.205.9.11:8952] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2gz1dxix.php"] [unique_id "aaJ1UrLWOogAgHGh62QntAAAAZI"]
[Sat Feb 28 12:55:47.498017 2026] [:error] [pid 39183:tid 39208] [client 4.205.9.11:43896] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2gz1dxix.php"] [unique_id "aaJ1UxCf4HvhVePw3LbnoQAAABA"]
[Sat Feb 28 12:55:47.988349 2026] [:error] [pid 39183:tid 39204] [client 4.205.9.11:52235] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2gz1dxix.php"] [unique_id "aaJ1UxCf4HvhVePw3LbnpQAAAAw"]
[Sat Feb 28 12:55:48.416752 2026] [:error] [pid 11791:tid 11794] [client 4.205.9.11:8925] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2gz1dxix.php"] [unique_id "aaJ1VGuX5e1Q32gqxH0TNAAAAQE"]
[Sat Feb 28 12:55:48.948098 2026] [:error] [pid 11791:tid 11807] [client 4.205.9.11:8939] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws75.php"] [unique_id "aaJ1VGuX5e1Q32gqxH0TNQAAAQ4"]
[Sat Feb 28 12:55:49.419722 2026] [:error] [pid 11791:tid 11797] [client 4.205.9.11:8928] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws75.php"] [unique_id "aaJ1VWuX5e1Q32gqxH0TOQAAAQQ"]
[Sat Feb 28 12:55:50.030841 2026] [:error] [pid 52460:tid 52466] [client 4.205.9.11:53031] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws75.php"] [unique_id "aaJ1VrLWOogAgHGh62QnwgAAAYM"]
[Sat Feb 28 12:55:50.554299 2026] [:error] [pid 52460:tid 52465] [client 4.205.9.11:53010] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws75.php"] [unique_id "aaJ1VrLWOogAgHGh62QnywAAAYI"]
[Sat Feb 28 12:55:51.351866 2026] [:error] [pid 52460:tid 52478] [client 4.205.9.11:9071] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws49.php"] [unique_id "aaJ1V7LWOogAgHGh62Qn2AAAAY8"]
[Sat Feb 28 12:55:51.895139 2026] [:error] [pid 39185:tid 39266] [client 4.205.9.11:52264] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws49.php"] [unique_id "aaJ1VxVE-FfM89u7BQa1zAAAAJQ"]
[Sat Feb 28 12:55:52.446213 2026] [:error] [pid 39185:tid 39259] [client 4.205.9.11:9062] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws49.php"] [unique_id "aaJ1WBVE-FfM89u7BQa10wAAAI0"]
[Sat Feb 28 12:55:52.996194 2026] [:error] [pid 39185:tid 39269] [client 4.205.9.11:42239] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws49.php"] [unique_id "aaJ1WBVE-FfM89u7BQa12AAAAJc"]
[Sat Feb 28 12:55:53.426192 2026] [:error] [pid 39185:tid 39264] [client 4.205.9.11:58266] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bak.php"] [unique_id "aaJ1WRVE-FfM89u7BQa13gAAAJI"]
[Sat Feb 28 12:55:53.963010 2026] [:error] [pid 39185:tid 39247] [client 4.205.9.11:9031] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bak.php"] [unique_id "aaJ1WRVE-FfM89u7BQa16AAAAIE"]
[Sat Feb 28 12:55:54.522776 2026] [:error] [pid 11791:tid 11807] [client 4.205.9.11:52227] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bak.php"] [unique_id "aaJ1WmuX5e1Q32gqxH0TQAAAAQ4"]
[Sat Feb 28 12:55:54.995998 2026] [:error] [pid 39185:tid 39246] [client 4.205.9.11:41346] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bak.php"] [unique_id "aaJ1WhVE-FfM89u7BQa18AAAAIA"]
[Sat Feb 28 12:55:55.503480 2026] [:error] [pid 39185:tid 39258] [client 4.205.9.11:53040] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Y5MxLiVO9nK.php"] [unique_id "aaJ1WxVE-FfM89u7BQa19AAAAIw"]
[Sat Feb 28 12:55:56.042608 2026] [:error] [pid 39185:tid 39246] [client 4.205.9.11:41376] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Y5MxLiVO9nK.php"] [unique_id "aaJ1XBVE-FfM89u7BQa1-gAAAIA"]
[Sat Feb 28 12:55:56.566819 2026] [:error] [pid 39185:tid 39253] [client 4.205.9.11:52276] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Y5MxLiVO9nK.php"] [unique_id "aaJ1XBVE-FfM89u7BQa2BQAAAIc"]
[Sat Feb 28 12:55:57.037663 2026] [:error] [pid 39185:tid 39252] [client 4.205.9.11:41353] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Y5MxLiVO9nK.php"] [unique_id "aaJ1XRVE-FfM89u7BQa2DQAAAIY"]
[Sat Feb 28 12:55:57.541650 2026] [:error] [pid 39185:tid 39257] [client 4.205.9.11:53053] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-f.php"] [unique_id "aaJ1XRVE-FfM89u7BQa2EQAAAIs"]
[Sat Feb 28 12:55:57.992482 2026] [:error] [pid 52460:tid 52477] [client 4.205.9.11:9037] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-f.php"] [unique_id "aaJ1XbLWOogAgHGh62Qn7wAAAY4"]
[Sat Feb 28 12:55:58.415812 2026] [:error] [pid 52460:tid 52468] [client 4.205.9.11:41360] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-f.php"] [unique_id "aaJ1XrLWOogAgHGh62Qn8gAAAYU"]
[Sat Feb 28 12:55:58.855937 2026] [:error] [pid 52460:tid 52486] [client 4.205.9.11:53017] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-f.php"] [unique_id "aaJ1XrLWOogAgHGh62Qn9QAAAZc"]
[Sat Feb 28 12:55:59.322545 2026] [:error] [pid 39183:tid 39215] [client 4.205.9.11:41378] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/install.php"] [unique_id "aaJ1XxCf4HvhVePw3LbnrQAAABc"]
[Sat Feb 28 12:55:59.768996 2026] [:error] [pid 39185:tid 39255] [client 4.205.9.11:58275] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/install.php"] [unique_id "aaJ1XxVE-FfM89u7BQa2GgAAAIk"]
[Sat Feb 28 12:56:00.266697 2026] [:error] [pid 52460:tid 52473] [client 4.205.9.11:43841] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/install.php"] [unique_id "aaJ1YLLWOogAgHGh62Qn-gAAAYo"]
[Sat Feb 28 12:56:00.937508 2026] [:error] [pid 39183:tid 39205] [client 4.205.9.11:58253] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/install.php"] [unique_id "aaJ1YBCf4HvhVePw3LbnrwAAAA0"]
[Sat Feb 28 12:56:01.393608 2026] [:error] [pid 52460:tid 52471] [client 4.205.9.11:58270] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx78.php"] [unique_id "aaJ1YbLWOogAgHGh62QoAAAAAYg"]
[Sat Feb 28 12:56:01.866942 2026] [:error] [pid 39292:tid 39316] [client 4.205.9.11:9068] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx78.php"] [unique_id "aaJ1YaIAO5fN7BxyqcHO_gAAANY"]
[Sat Feb 28 12:56:02.365914 2026] [:error] [pid 39185:tid 39256] [client 4.205.9.11:58257] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx78.php"] [unique_id "aaJ1YhVE-FfM89u7BQa2IwAAAIo"]
[Sat Feb 28 12:56:02.852170 2026] [:error] [pid 39185:tid 39259] [client 4.205.9.11:58301] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx78.php"] [unique_id "aaJ1YhVE-FfM89u7BQa2JwAAAI0"]
[Sat Feb 28 12:56:03.277028 2026] [:error] [pid 39292:tid 39301] [client 4.205.9.11:47696] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp_bqLC0MQe.php"] [unique_id "aaJ1Y6IAO5fN7BxyqcHO_wAAAMc"]
[Sat Feb 28 12:56:03.715986 2026] [:error] [pid 52460:tid 52465] [client 4.205.9.11:52266] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp_bqLC0MQe.php"] [unique_id "aaJ1Y7LWOogAgHGh62QoCQAAAYI"]
[Sat Feb 28 12:56:04.137402 2026] [:error] [pid 39185:tid 39270] [client 4.205.9.11:58293] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp_bqLC0MQe.php"] [unique_id "aaJ1ZBVE-FfM89u7BQa2LQAAAJg"]
[Sat Feb 28 12:56:04.608153 2026] [:error] [pid 39183:tid 39196] [client 4.205.9.11:41345] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp_bqLC0MQe.php"] [unique_id "aaJ1ZBCf4HvhVePw3LbnsgAAAAQ"]
[Sat Feb 28 12:56:05.074465 2026] [:error] [pid 39184:tid 39239] [client 4.205.9.11:9048] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/0bb45ctt.php"] [unique_id "aaJ1ZVtZF9Zd_U7easDY0wAAAFQ"]
[Sat Feb 28 12:56:05.585338 2026] [:error] [pid 22194:tid 22198] [client 4.205.9.11:53019] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/0bb45ctt.php"] [unique_id "aaJ1ZX6mbajs3bzQGys9ZwAAAUI"]
[Sat Feb 28 12:56:06.045229 2026] [:error] [pid 39184:tid 39238] [client 4.205.9.11:8932] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/0bb45ctt.php"] [unique_id "aaJ1ZltZF9Zd_U7easDY1wAAAFM"]
[Sat Feb 28 12:56:06.498707 2026] [:error] [pid 39185:tid 39246] [client 4.205.9.11:45704] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/0bb45ctt.php"] [unique_id "aaJ1ZhVE-FfM89u7BQa2NgAAAIA"]
[Sat Feb 28 12:56:06.965944 2026] [:error] [pid 39185:tid 39258] [client 4.205.9.11:48212] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "aaJ1ZhVE-FfM89u7BQa2OwAAAIw"]
[Sat Feb 28 12:56:07.429360 2026] [:error] [pid 39185:tid 39252] [client 4.205.9.11:53008] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "aaJ1ZxVE-FfM89u7BQa2QAAAAIY"]
[Sat Feb 28 12:56:07.868781 2026] [:error] [pid 39292:tid 39302] [client 4.205.9.11:9072] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "aaJ1Z6IAO5fN7BxyqcHPCAAAAMg"]
[Sat Feb 28 12:56:08.292752 2026] [:error] [pid 39185:tid 39262] [client 4.205.9.11:8931] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "aaJ1aBVE-FfM89u7BQa2SAAAAJA"]
[Sat Feb 28 12:56:08.746381 2026] [:error] [pid 11791:tid 11801] [client 4.205.9.11:52281] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "aaJ1aGuX5e1Q32gqxH0TYAAAAQg"]
[Sat Feb 28 12:56:09.163914 2026] [:error] [pid 39185:tid 39258] [client 4.205.9.11:43895] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "aaJ1aRVE-FfM89u7BQa2UQAAAIw"]
[Sat Feb 28 12:56:09.623224 2026] [:error] [pid 22194:tid 22218] [client 4.205.9.11:41365] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "aaJ1aX6mbajs3bzQGys9cwAAAVY"]
[Sat Feb 28 12:56:10.087199 2026] [:error] [pid 39292:tid 39313] [client 4.205.9.11:52242] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "aaJ1aqIAO5fN7BxyqcHPDwAAANM"]
[Sat Feb 28 12:56:10.518406 2026] [:error] [pid 39292:tid 39309] [client 4.205.9.11:58242] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "aaJ1aqIAO5fN7BxyqcHPEQAAAM8"]
[Sat Feb 28 12:56:10.947774 2026] [:error] [pid 39183:tid 39214] [client 4.205.9.11:9082] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "aaJ1ahCf4HvhVePw3LbntwAAABY"]
[Sat Feb 28 12:56:11.404096 2026] [:error] [pid 39185:tid 39269] [client 4.205.9.11:41364] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "aaJ1axVE-FfM89u7BQa2WwAAAJc"]
[Sat Feb 28 12:56:11.843507 2026] [:error] [pid 39185:tid 39246] [client 4.205.9.11:47718] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "aaJ1axVE-FfM89u7BQa2XwAAAIA"]
[Sat Feb 28 12:56:12.325443 2026] [:error] [pid 22194:tid 22208] [client 4.205.9.11:58259] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aaJ1bH6mbajs3bzQGys9ewAAAUw"]
[Sat Feb 28 12:56:12.781822 2026] [:error] [pid 39184:tid 39233] [client 4.205.9.11:41387] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aaJ1bFtZF9Zd_U7easDY3gAAAE4"]
[Sat Feb 28 12:56:13.232817 2026] [:error] [pid 22194:tid 22205] [client 4.205.9.11:53045] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aaJ1bX6mbajs3bzQGys9fQAAAUk"]
[Sat Feb 28 12:56:13.688944 2026] [:error] [pid 22194:tid 22219] [client 4.205.9.11:41374] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aaJ1bX6mbajs3bzQGys9fwAAAVc"]
[Sat Feb 28 12:56:14.142385 2026] [:error] [pid 39292:tid 39314] [client 4.205.9.11:58278] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "aaJ1bqIAO5fN7BxyqcHPFAAAANQ"]
[Sat Feb 28 12:56:14.607617 2026] [:error] [pid 22194:tid 22209] [client 4.205.9.11:47690] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "aaJ1bn6mbajs3bzQGys9hAAAAU0"]
[Sat Feb 28 12:56:15.062099 2026] [:error] [pid 11791:tid 11798] [client 4.205.9.11:41347] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "aaJ1b2uX5e1Q32gqxH0TawAAAQU"]
[Sat Feb 28 12:56:15.580349 2026] [:error] [pid 11791:tid 11801] [client 4.205.9.11:52238] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "aaJ1b2uX5e1Q32gqxH0TbQAAAQg"]
[Sat Feb 28 12:56:16.036895 2026] [:error] [pid 52460:tid 52465] [client 4.205.9.11:58246] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/62ix02bk.php"] [unique_id "aaJ1cLLWOogAgHGh62QoKAAAAYI"]
[Sat Feb 28 12:56:16.476011 2026] [:error] [pid 39185:tid 39267] [client 4.205.9.11:47712] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/62ix02bk.php"] [unique_id "aaJ1cBVE-FfM89u7BQa2cAAAAJU"]
[Sat Feb 28 12:56:16.931353 2026] [:error] [pid 52460:tid 52482] [client 4.205.9.11:53007] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/62ix02bk.php"] [unique_id "aaJ1cLLWOogAgHGh62QoMwAAAZM"]
[Sat Feb 28 12:56:17.417349 2026] [:error] [pid 39185:tid 39254] [client 4.205.9.11:58241] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/62ix02bk.php"] [unique_id "aaJ1cRVE-FfM89u7BQa2egAAAIg"]
[Sat Feb 28 12:56:17.881896 2026] [:error] [pid 39292:tid 39299] [client 4.205.9.11:9043] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wdf.php"] [unique_id "aaJ1caIAO5fN7BxyqcHPGAAAAMU"]
[Sat Feb 28 12:56:18.347199 2026] [:error] [pid 39292:tid 39298] [client 4.205.9.11:58289] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wdf.php"] [unique_id "aaJ1cqIAO5fN7BxyqcHPHAAAAMQ"]
[Sat Feb 28 12:56:18.772544 2026] [:error] [pid 39292:tid 39296] [client 4.205.9.11:52246] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wdf.php"] [unique_id "aaJ1cqIAO5fN7BxyqcHPHgAAAMI"]
[Sat Feb 28 12:56:19.257436 2026] [:error] [pid 39292:tid 39317] [client 4.205.9.11:52256] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wdf.php"] [unique_id "aaJ1c6IAO5fN7BxyqcHPIgAAANc"]
[Sat Feb 28 12:56:19.676337 2026] [:error] [pid 11791:tid 11809] [client 4.205.9.11:8937] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f6ijmjpa.php"] [unique_id "aaJ1c2uX5e1Q32gqxH0TcwAAARA"]
[Sat Feb 28 12:56:20.127360 2026] [:error] [pid 52460:tid 52465] [client 4.205.9.11:52256] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f6ijmjpa.php"] [unique_id "aaJ1dLLWOogAgHGh62QoNgAAAYI"]
[Sat Feb 28 12:56:20.641367 2026] [:error] [pid 11791:tid 11814] [client 4.205.9.11:41384] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f6ijmjpa.php"] [unique_id "aaJ1dGuX5e1Q32gqxH0TdwAAARU"]
[Sat Feb 28 12:56:21.094065 2026] [:error] [pid 39185:tid 39269] [client 4.205.9.11:43877] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f6ijmjpa.php"] [unique_id "aaJ1dRVE-FfM89u7BQa2jQAAAJc"]
[Sat Feb 28 12:56:21.555137 2026] [:error] [pid 39185:tid 39253] [client 4.205.9.11:8956] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp_jVML8V37.php"] [unique_id "aaJ1dRVE-FfM89u7BQa2kgAAAIc"]
[Sat Feb 28 12:56:22.053012 2026] [:error] [pid 11791:tid 11798] [client 4.205.9.11:43888] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp_jVML8V37.php"] [unique_id "aaJ1dmuX5e1Q32gqxH0TegAAAQU"]
[Sat Feb 28 12:56:22.563734 2026] [:error] [pid 39185:tid 39257] [client 4.205.9.11:8935] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp_jVML8V37.php"] [unique_id "aaJ1dhVE-FfM89u7BQa2oAAAAIs"]
[Sat Feb 28 12:56:23.010464 2026] [:error] [pid 52460:tid 52482] [client 4.205.9.11:47707] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp_jVML8V37.php"] [unique_id "aaJ1d7LWOogAgHGh62QoPQAAAZM"]
[Sat Feb 28 12:56:23.441855 2026] [:error] [pid 52460:tid 52477] [client 4.205.9.11:50274] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/4wj632p1.php"] [unique_id "aaJ1d7LWOogAgHGh62QoQwAAAY4"]
[Sat Feb 28 12:56:23.911444 2026] [:error] [pid 52460:tid 52470] [client 4.205.9.11:52265] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/4wj632p1.php"] [unique_id "aaJ1d7LWOogAgHGh62QoSAAAAYc"]
[Sat Feb 28 12:56:24.460799 2026] [:error] [pid 39184:tid 39223] [client 4.205.9.11:53014] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/4wj632p1.php"] [unique_id "aaJ1eFtZF9Zd_U7easDY5wAAAEQ"]
[Sat Feb 28 12:56:24.925578 2026] [:error] [pid 39183:tid 39209] [client 4.205.9.11:9052] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/4wj632p1.php"] [unique_id "aaJ1eBCf4HvhVePw3LbnzAAAABE"]
[Sat Feb 28 12:56:25.351128 2026] [:error] [pid 39185:tid 39254] [client 4.205.9.11:53034] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws81.php"] [unique_id "aaJ1eRVE-FfM89u7BQa2vQAAAIg"]
[Sat Feb 28 12:56:25.784795 2026] [:error] [pid 39185:tid 39250] [client 4.205.9.11:9065] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws81.php"] [unique_id "aaJ1eRVE-FfM89u7BQa2vwAAAIQ"]
[Sat Feb 28 12:56:26.211179 2026] [:error] [pid 39185:tid 39251] [client 4.205.9.11:9046] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws81.php"] [unique_id "aaJ1ehVE-FfM89u7BQa2xgAAAIU"]
[Sat Feb 28 12:56:26.646211 2026] [:error] [pid 39292:tid 39299] [client 4.205.9.11:9027] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws81.php"] [unique_id "aaJ1eqIAO5fN7BxyqcHPKQAAAMU"]
[Sat Feb 28 12:56:27.067404 2026] [:error] [pid 39292:tid 39315] [client 4.205.9.11:8950] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/e31hmf9b.php"] [unique_id "aaJ1e6IAO5fN7BxyqcHPKwAAANU"]
[Sat Feb 28 12:56:27.489946 2026] [:error] [pid 11791:tid 11798] [client 4.205.9.11:41394] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/e31hmf9b.php"] [unique_id "aaJ1e2uX5e1Q32gqxH0TiwAAAQU"]
[Sat Feb 28 12:56:27.910752 2026] [:error] [pid 39183:tid 39194] [client 4.205.9.11:8955] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/e31hmf9b.php"] [unique_id "aaJ1exCf4HvhVePw3LbnzQAAAAI"]
[Sat Feb 28 12:56:28.377896 2026] [:error] [pid 11791:tid 11807] [client 4.205.9.11:56976] [client 4.205.9.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/e31hmf9b.php"] [unique_id "aaJ1fGuX5e1Q32gqxH0TkwAAAQ4"]
[Sat Feb 28 13:48:26.462101 2026] [:error] [pid 39185:tid 39256] [client 45.153.34.31:38850] [client 45.153.34.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aaKBqhVE-FfM89u7BQbrmgAAAIo"]
[Sat Feb 28 14:07:45.315300 2026] [:error] [pid 11791:tid 11795] [client 20.220.144.87:24564] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/blackmini.php"] [unique_id "aaKGMWuX5e1Q32gqxH08NwAAAQI"]
[Sat Feb 28 14:07:45.733584 2026] [:error] [pid 39292:tid 39298] [client 20.220.144.87:24467] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/blackmini.php"] [unique_id "aaKGMaIAO5fN7BxyqcHnOAAAAMQ"]
[Sat Feb 28 14:07:46.146235 2026] [:error] [pid 39185:tid 39259] [client 20.220.144.87:24520] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/blackmini.php"] [unique_id "aaKGMhVE-FfM89u7BQYCbwAAAI0"]
[Sat Feb 28 14:07:46.555129 2026] [:error] [pid 11791:tid 11804] [client 20.220.144.87:24524] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/blackmini.php"] [unique_id "aaKGMmuX5e1Q32gqxH08QwAAAQs"]
[Sat Feb 28 14:07:46.966811 2026] [:error] [pid 39185:tid 39266] [client 20.220.144.87:24549] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "aaKGMhVE-FfM89u7BQYCeAAAAJQ"]
[Sat Feb 28 14:07:47.380974 2026] [:error] [pid 39183:tid 39200] [client 20.220.144.87:24562] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "aaKGMxCf4HvhVePw3LbziAAAAAg"]
[Sat Feb 28 14:07:47.798773 2026] [:error] [pid 39184:tid 39242] [client 20.220.144.87:24530] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "aaKGM1tZF9Zd_U7easDo0QAAAFc"]
[Sat Feb 28 14:07:48.212310 2026] [:error] [pid 11791:tid 11815] [client 20.220.144.87:24539] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "aaKGNGuX5e1Q32gqxH08TQAAARY"]
[Sat Feb 28 14:07:48.622255 2026] [:error] [pid 39185:tid 39267] [client 20.220.144.87:24557] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/F19.php"] [unique_id "aaKGNBVE-FfM89u7BQYCgwAAAJU"]
[Sat Feb 28 14:07:49.031776 2026] [:error] [pid 11791:tid 11803] [client 20.220.144.87:24517] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/F19.php"] [unique_id "aaKGNWuX5e1Q32gqxH08VAAAAQo"]
[Sat Feb 28 14:07:49.443181 2026] [:error] [pid 39185:tid 39257] [client 20.220.144.87:24545] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/F19.php"] [unique_id "aaKGNRVE-FfM89u7BQYCiQAAAIs"]
[Sat Feb 28 14:07:49.853849 2026] [:error] [pid 39185:tid 39270] [client 20.220.144.87:24452] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/F19.php"] [unique_id "aaKGNRVE-FfM89u7BQYCjgAAAJg"]
[Sat Feb 28 14:07:50.265340 2026] [:error] [pid 39185:tid 39263] [client 20.220.144.87:24486] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/F1.php"] [unique_id "aaKGNhVE-FfM89u7BQYCkQAAAJE"]
[Sat Feb 28 14:07:50.681570 2026] [:error] [pid 39185:tid 39264] [client 20.220.144.87:24560] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/F1.php"] [unique_id "aaKGNhVE-FfM89u7BQYClQAAAJI"]
[Sat Feb 28 14:07:51.104600 2026] [:error] [pid 39184:tid 39224] [client 20.220.144.87:24540] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/F1.php"] [unique_id "aaKGN1tZF9Zd_U7easDo1AAAAEU"]
[Sat Feb 28 14:07:51.519747 2026] [:error] [pid 11791:tid 11799] [client 20.220.144.87:24547] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/F1.php"] [unique_id "aaKGN2uX5e1Q32gqxH08ZgAAAQY"]
[Sat Feb 28 14:07:51.935674 2026] [:error] [pid 39292:tid 39311] [client 20.220.144.87:24551] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aaKGN6IAO5fN7BxyqcHnPQAAANE"]
[Sat Feb 28 14:07:52.360621 2026] [:error] [pid 52460:tid 52474] [client 20.220.144.87:24550] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aaKGOLLWOogAgHGh62RdOAAAAYs"]
[Sat Feb 28 14:07:52.783276 2026] [:error] [pid 11791:tid 11808] [client 20.220.144.87:24575] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aaKGOGuX5e1Q32gqxH08cAAAAQ8"]
[Sat Feb 28 14:07:53.195141 2026] [:error] [pid 39185:tid 39270] [client 20.220.144.87:24542] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aaKGORVE-FfM89u7BQYCtAAAAJg"]
[Sat Feb 28 14:07:53.604448 2026] [:error] [pid 39185:tid 39263] [client 20.220.144.87:24462] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/R57.php"] [unique_id "aaKGORVE-FfM89u7BQYCuwAAAJE"]
[Sat Feb 28 14:07:54.014746 2026] [:error] [pid 52460:tid 52470] [client 20.220.144.87:24461] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/R57.php"] [unique_id "aaKGOrLWOogAgHGh62RdPQAAAYc"]
[Sat Feb 28 14:07:54.423983 2026] [:error] [pid 39185:tid 39248] [client 20.220.144.87:24526] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/R57.php"] [unique_id "aaKGOhVE-FfM89u7BQYCwgAAAII"]
[Sat Feb 28 14:07:54.967355 2026] [:error] [pid 52460:tid 52465] [client 20.220.144.87:24527] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "aaKGOrLWOogAgHGh62RdQAAAAYI"]
[Sat Feb 28 14:07:55.387507 2026] [:error] [pid 39185:tid 39249] [client 20.220.144.87:24451] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "aaKGOxVE-FfM89u7BQYCxwAAAIM"]
[Sat Feb 28 14:07:55.806871 2026] [:error] [pid 11791:tid 11798] [client 20.220.144.87:24456] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "aaKGO2uX5e1Q32gqxH08hQAAAQU"]
[Sat Feb 28 14:07:56.225349 2026] [:error] [pid 52460:tid 52471] [client 20.220.144.87:24473] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "aaKGPLLWOogAgHGh62RdRQAAAYg"]
[Sat Feb 28 14:07:56.640095 2026] [:error] [pid 52460:tid 52464] [client 20.220.144.87:24572] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bengi.php"] [unique_id "aaKGPLLWOogAgHGh62RdSAAAAYE"]
[Sat Feb 28 14:07:57.048946 2026] [:error] [pid 11791:tid 11817] [client 20.220.144.87:24469] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bengi.php"] [unique_id "aaKGPWuX5e1Q32gqxH08kQAAARg"]
[Sat Feb 28 14:07:57.458612 2026] [:error] [pid 52460:tid 52478] [client 20.220.144.87:24519] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bengi.php"] [unique_id "aaKGPbLWOogAgHGh62RdTgAAAY8"]
[Sat Feb 28 14:07:57.867882 2026] [:error] [pid 52460:tid 52473] [client 20.220.144.87:24450] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bengi.php"] [unique_id "aaKGPbLWOogAgHGh62RdVAAAAYo"]
[Sat Feb 28 14:07:58.283815 2026] [:error] [pid 39185:tid 39248] [client 20.220.144.87:24536] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lb.php"] [unique_id "aaKGPhVE-FfM89u7BQYCzQAAAII"]
[Sat Feb 28 14:07:58.699337 2026] [:error] [pid 11791:tid 11814] [client 20.220.144.87:24515] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lb.php"] [unique_id "aaKGPmuX5e1Q32gqxH08oAAAARU"]
[Sat Feb 28 14:07:59.116641 2026] [:error] [pid 52460:tid 52484] [client 20.220.144.87:24525] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lb.php"] [unique_id "aaKGP7LWOogAgHGh62RdYQAAAZU"]
[Sat Feb 28 14:07:59.531214 2026] [:error] [pid 11791:tid 11802] [client 20.220.144.87:24487] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lb.php"] [unique_id "aaKGP2uX5e1Q32gqxH08pwAAAQk"]
[Sat Feb 28 14:08:00.020557 2026] [:error] [pid 11791:tid 11811] [client 20.220.144.87:24470] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/samfa.php"] [unique_id "aaKGQGuX5e1Q32gqxH08rwAAARI"]
[Sat Feb 28 14:08:00.429401 2026] [:error] [pid 39292:tid 39313] [client 20.220.144.87:24541] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/samfa.php"] [unique_id "aaKGQKIAO5fN7BxyqcHnSAAAANM"]
[Sat Feb 28 14:08:00.839281 2026] [:error] [pid 39185:tid 39249] [client 20.220.144.87:24495] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/samfa.php"] [unique_id "aaKGQBVE-FfM89u7BQYC0wAAAIM"]
[Sat Feb 28 14:08:01.249786 2026] [:error] [pid 11791:tid 11796] [client 20.220.144.87:24460] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/samfa.php"] [unique_id "aaKGQWuX5e1Q32gqxH08tgAAAQM"]
[Sat Feb 28 14:08:01.665508 2026] [:error] [pid 52460:tid 52467] [client 20.220.144.87:24491] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/boots.php"] [unique_id "aaKGQbLWOogAgHGh62RdaAAAAYQ"]
[Sat Feb 28 14:08:02.087056 2026] [:error] [pid 52460:tid 52471] [client 20.220.144.87:24468] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/boots.php"] [unique_id "aaKGQrLWOogAgHGh62RdawAAAYg"]
[Sat Feb 28 14:08:02.505214 2026] [:error] [pid 52460:tid 52483] [client 20.220.144.87:24555] [client 20.220.144.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/boots.php"] [unique_id "aaKGQrLWOogAgHGh62RdbgAAAZQ"]
[Sat Feb 28 14:32:03.197202 2026] [:error] [pid 52460:tid 52486] [client 4.204.192.31:19778] [client 4.204.192.31] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/cah.php"] [unique_id "aaKL47LWOogAgHGh62RuCAAAAZc"]
[Sat Feb 28 14:32:09.942893 2026] [:error] [pid 22194:tid 22217] [client 4.204.192.31:19851] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Okxob.php"] [unique_id "aaKL6X6mbajs3bzQGytW9QAAAVU"]
[Sat Feb 28 14:32:10.886871 2026] [:error] [pid 39184:tid 39238] [client 4.204.192.31:19822] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Okxob.php"] [unique_id "aaKL6ltZF9Zd_U7easDtKwAAAFM"]
[Sat Feb 28 14:32:11.565875 2026] [:error] [pid 52460:tid 52465] [client 4.204.192.31:19798] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Okxob.php"] [unique_id "aaKL67LWOogAgHGh62RuHQAAAYI"]
[Sat Feb 28 14:32:12.297874 2026] [:error] [pid 22194:tid 22212] [client 4.204.192.31:19816] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Okxob.php"] [unique_id "aaKL7H6mbajs3bzQGytW-QAAAVA"]
[Sat Feb 28 14:32:14.020634 2026] [:error] [pid 22194:tid 22206] [client 4.204.192.31:19823] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wolf-shell.php"] [unique_id "aaKL7n6mbajs3bzQGytW-wAAAUo"]
[Sat Feb 28 14:32:15.360931 2026] [:error] [pid 39185:tid 39263] [client 4.204.192.31:19817] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wolf-shell.php"] [unique_id "aaKL7xVE-FfM89u7BQYaLgAAAJE"]
[Sat Feb 28 14:32:16.159004 2026] [:error] [pid 52460:tid 52485] [client 4.204.192.31:19810] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wolf-shell.php"] [unique_id "aaKL8LLWOogAgHGh62RuJgAAAZY"]
[Sat Feb 28 14:32:17.333727 2026] [:error] [pid 52460:tid 52487] [client 4.204.192.31:19795] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wolf-shell.php"] [unique_id "aaKL8bLWOogAgHGh62RuLAAAAZg"]
[Sat Feb 28 14:32:18.567268 2026] [:error] [pid 22194:tid 22215] [client 4.204.192.31:19831] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/core.php"] [unique_id "aaKL8n6mbajs3bzQGytXAgAAAVM"]
[Sat Feb 28 14:32:19.784943 2026] [:error] [pid 39185:tid 39251] [client 4.204.192.31:19782] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/core.php"] [unique_id "aaKL8xVE-FfM89u7BQYaPwAAAIU"]
[Sat Feb 28 14:32:21.072401 2026] [:error] [pid 39185:tid 39253] [client 4.204.192.31:19785] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/core.php"] [unique_id "aaKL9RVE-FfM89u7BQYaRQAAAIc"]
[Sat Feb 28 14:32:24.108844 2026] [:error] [pid 52460:tid 52485] [client 4.204.192.31:19784] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zeal.php"] [unique_id "aaKL-LLWOogAgHGh62RuNgAAAZY"]
[Sat Feb 28 14:32:25.767104 2026] [:error] [pid 22194:tid 22205] [client 4.204.192.31:19836] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zeal.php"] [unique_id "aaKL-X6mbajs3bzQGytXDgAAAUk"]
[Sat Feb 28 14:32:28.293505 2026] [:error] [pid 39185:tid 39254] [client 4.204.192.31:19781] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asf.php"] [unique_id "aaKL_BVE-FfM89u7BQYaXAAAAIg"]
[Sat Feb 28 14:32:29.017067 2026] [:error] [pid 39185:tid 39247] [client 4.204.192.31:19847] [client 4.204.192.31] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sa.php"] [unique_id "aaKL_RVE-FfM89u7BQYaYgAAAIE"]
[Sat Feb 28 14:37:21.206093 2026] [:error] [pid 39185:tid 39261] [client 20.220.196.236:14281] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/w4.php"] [unique_id "aaKNIRVE-FfM89u7BQYftwAAAI8"]
[Sat Feb 28 14:37:22.620718 2026] [:error] [pid 39292:tid 39318] [client 20.220.196.236:14330] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/w4.php"] [unique_id "aaKNIqIAO5fN7BxyqcHwCgAAANg"]
[Sat Feb 28 14:37:24.047131 2026] [:error] [pid 22194:tid 22213] [client 20.220.196.236:14312] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/w4.php"] [unique_id "aaKNJH6mbajs3bzQGytYigAAAVE"]
[Sat Feb 28 14:37:25.470615 2026] [:error] [pid 52460:tid 52476] [client 20.220.196.236:14279] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/w4.php"] [unique_id "aaKNJbLWOogAgHGh62RxNwAAAY0"]
[Sat Feb 28 14:37:26.893417 2026] [:error] [pid 39292:tid 39316] [client 20.220.196.236:14306] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/yawa.php"] [unique_id "aaKNJqIAO5fN7BxyqcHwFwAAANY"]
[Sat Feb 28 14:37:28.342339 2026] [:error] [pid 39185:tid 39267] [client 20.220.196.236:14305] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/yawa.php"] [unique_id "aaKNKBVE-FfM89u7BQYf1QAAAJU"]
[Sat Feb 28 14:37:29.754046 2026] [:error] [pid 39185:tid 39253] [client 20.220.196.236:14295] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/yawa.php"] [unique_id "aaKNKRVE-FfM89u7BQYf5gAAAIc"]
[Sat Feb 28 14:37:31.181339 2026] [:error] [pid 22194:tid 22214] [client 20.220.196.236:14278] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/yawa.php"] [unique_id "aaKNK36mbajs3bzQGytYlQAAAVI"]
[Sat Feb 28 14:37:32.601080 2026] [:error] [pid 39185:tid 39253] [client 20.220.196.236:14221] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wolv.php"] [unique_id "aaKNLBVE-FfM89u7BQYgAAAAAIc"]
[Sat Feb 28 14:37:34.024339 2026] [:error] [pid 39185:tid 39252] [client 20.220.196.236:14322] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wolv.php"] [unique_id "aaKNLhVE-FfM89u7BQYgEAAAAIY"]
[Sat Feb 28 14:37:35.462300 2026] [:error] [pid 52460:tid 52469] [client 20.220.196.236:14290] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wolv.php"] [unique_id "aaKNL7LWOogAgHGh62RxOgAAAYY"]
[Sat Feb 28 14:37:36.885040 2026] [:error] [pid 52460:tid 52475] [client 20.220.196.236:14224] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wolv.php"] [unique_id "aaKNMLLWOogAgHGh62RxQgAAAYw"]
[Sat Feb 28 14:37:38.330879 2026] [:error] [pid 22194:tid 22202] [client 20.220.196.236:14288] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/mml.php"] [unique_id "aaKNMn6mbajs3bzQGytYnAAAAUY"]
[Sat Feb 28 14:37:39.763828 2026] [:error] [pid 39183:tid 39216] [client 20.220.196.236:14283] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/mml.php"] [unique_id "aaKNMxCf4HvhVePw3Lb3_wAAABg"]
[Sat Feb 28 14:37:41.186919 2026] [:error] [pid 11791:tid 11804] [client 20.220.196.236:14333] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/mml.php"] [unique_id "aaKNNWuX5e1Q32gqxH1I0QAAAQs"]
[Sat Feb 28 14:37:42.598038 2026] [:error] [pid 22194:tid 22208] [client 20.220.196.236:14301] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/mml.php"] [unique_id "aaKNNn6mbajs3bzQGytYpAAAAUw"]
[Sat Feb 28 14:37:44.022271 2026] [:error] [pid 52460:tid 52484] [client 20.220.196.236:14328] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/test1.php"] [unique_id "aaKNOLLWOogAgHGh62RxTgAAAZU"]
[Sat Feb 28 14:37:45.447949 2026] [:error] [pid 11791:tid 11815] [client 20.220.196.236:14218] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/test1.php"] [unique_id "aaKNOWuX5e1Q32gqxH1I4gAAARY"]
[Sat Feb 28 14:37:46.871064 2026] [:error] [pid 11791:tid 11795] [client 20.220.196.236:14274] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/test1.php"] [unique_id "aaKNOmuX5e1Q32gqxH1I6AAAAQI"]
[Sat Feb 28 14:37:48.295495 2026] [:error] [pid 52460:tid 52467] [client 20.220.196.236:14314] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/test1.php"] [unique_id "aaKNPLLWOogAgHGh62RxVQAAAYQ"]
[Sat Feb 28 14:37:49.706830 2026] [:error] [pid 52460:tid 52479] [client 20.220.196.236:14304] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tymn.php"] [unique_id "aaKNPbLWOogAgHGh62RxXQAAAZA"]
[Sat Feb 28 14:37:51.131875 2026] [:error] [pid 52460:tid 52486] [client 20.220.196.236:14220] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tymn.php"] [unique_id "aaKNP7LWOogAgHGh62RxZwAAAZc"]
[Sat Feb 28 14:37:52.561778 2026] [:error] [pid 11791:tid 11801] [client 20.220.196.236:14212] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tymn.php"] [unique_id "aaKNQGuX5e1Q32gqxH1I7wAAAQg"]
[Sat Feb 28 14:37:53.981089 2026] [:error] [pid 22194:tid 22216] [client 20.220.196.236:14310] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tymn.php"] [unique_id "aaKNQX6mbajs3bzQGytYqwAAAVQ"]
[Sat Feb 28 14:37:55.402572 2026] [:error] [pid 39183:tid 39195] [client 20.220.196.236:14284] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/g.php"] [unique_id "aaKNQxCf4HvhVePw3Lb4CgAAAAM"]
[Sat Feb 28 14:37:56.823885 2026] [:error] [pid 39185:tid 39253] [client 20.220.196.236:14335] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/g.php"] [unique_id "aaKNRBVE-FfM89u7BQYgLwAAAIc"]
[Sat Feb 28 14:37:58.248425 2026] [:error] [pid 11791:tid 11794] [client 20.220.196.236:14144] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/g.php"] [unique_id "aaKNRmuX5e1Q32gqxH1JAQAAAQE"]
[Sat Feb 28 14:37:59.671188 2026] [:error] [pid 39185:tid 39258] [client 20.220.196.236:14239] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/g.php"] [unique_id "aaKNRxVE-FfM89u7BQYgNgAAAIw"]
[Sat Feb 28 14:38:01.101674 2026] [:error] [pid 11791:tid 11809] [client 20.220.196.236:14298] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "aaKNSWuX5e1Q32gqxH1JDQAAARA"]
[Sat Feb 28 14:38:02.517862 2026] [:error] [pid 39183:tid 39208] [client 20.220.196.236:14313] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "aaKNShCf4HvhVePw3Lb4FAAAABA"]
[Sat Feb 28 14:38:03.961790 2026] [:error] [pid 39185:tid 39260] [client 20.220.196.236:14219] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "aaKNSxVE-FfM89u7BQYgQwAAAI4"]
[Sat Feb 28 14:38:05.381660 2026] [:error] [pid 39292:tid 39303] [client 20.220.196.236:14241] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "aaKNTaIAO5fN7BxyqcHwUAAAAMk"]
[Sat Feb 28 14:38:06.807516 2026] [:error] [pid 39183:tid 39205] [client 20.220.196.236:14237] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bengi.php"] [unique_id "aaKNThCf4HvhVePw3Lb4HAAAAA0"]
[Sat Feb 28 14:38:08.231509 2026] [:error] [pid 39184:tid 39229] [client 20.220.196.236:14232] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bengi.php"] [unique_id "aaKNUFtZF9Zd_U7easDuUgAAAEo"]
[Sat Feb 28 14:38:09.659292 2026] [:error] [pid 39292:tid 39301] [client 20.220.196.236:14277] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bengi.php"] [unique_id "aaKNUaIAO5fN7BxyqcHwUwAAAMc"]
[Sat Feb 28 14:38:11.079223 2026] [:error] [pid 52460:tid 52482] [client 20.220.196.236:14325] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bengi.php"] [unique_id "aaKNU7LWOogAgHGh62RxeAAAAZM"]
[Sat Feb 28 14:38:12.502585 2026] [:error] [pid 22194:tid 22202] [client 20.220.196.236:14323] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lb.php"] [unique_id "aaKNVH6mbajs3bzQGytY8QAAAUY"]
[Sat Feb 28 14:38:13.910978 2026] [:error] [pid 39183:tid 39210] [client 20.220.196.236:14231] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lb.php"] [unique_id "aaKNVRCf4HvhVePw3Lb4HwAAABI"]
[Sat Feb 28 14:38:15.334568 2026] [:error] [pid 39292:tid 39318] [client 20.220.196.236:14316] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lb.php"] [unique_id "aaKNV6IAO5fN7BxyqcHwWQAAANg"]
[Sat Feb 28 14:38:16.758251 2026] [:error] [pid 39185:tid 39260] [client 20.220.196.236:14280] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lb.php"] [unique_id "aaKNWBVE-FfM89u7BQYgtQAAAI4"]
[Sat Feb 28 14:38:26.191120 2026] [:error] [pid 11791:tid 11807] [client 20.220.196.236:14315] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/w.php"] [unique_id "aaKNYmuX5e1Q32gqxH1JOwAAAQ4"]
[Sat Feb 28 14:38:27.601243 2026] [:error] [pid 11791:tid 11812] [client 20.220.196.236:14193] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/w.php"] [unique_id "aaKNY2uX5e1Q32gqxH1JPQAAARM"]
[Sat Feb 28 14:38:29.024348 2026] [:error] [pid 39292:tid 39304] [client 20.220.196.236:14332] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/w.php"] [unique_id "aaKNZaIAO5fN7BxyqcHwZgAAAMo"]
[Sat Feb 28 14:38:30.436454 2026] [:error] [pid 39292:tid 39317] [client 20.220.196.236:14214] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/w.php"] [unique_id "aaKNZqIAO5fN7BxyqcHwaQAAANc"]
[Sat Feb 28 14:38:31.880351 2026] [:error] [pid 52460:tid 52477] [client 20.220.196.236:14289] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/system.php"] [unique_id "aaKNZ7LWOogAgHGh62RxlwAAAY4"]
[Sat Feb 28 14:38:33.301757 2026] [:error] [pid 39292:tid 39314] [client 20.220.196.236:14242] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/system.php"] [unique_id "aaKNaaIAO5fN7BxyqcHwcQAAANQ"]
[Sat Feb 28 14:38:34.717898 2026] [:error] [pid 11791:tid 11795] [client 20.220.196.236:14293] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/system.php"] [unique_id "aaKNamuX5e1Q32gqxH1JTAAAAQI"]
[Sat Feb 28 14:38:36.135098 2026] [:error] [pid 52460:tid 52468] [client 20.220.196.236:14226] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/system.php"] [unique_id "aaKNbLLWOogAgHGh62RxpgAAAYU"]
[Sat Feb 28 14:38:37.560802 2026] [:error] [pid 22194:tid 22211] [client 20.220.196.236:14324] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/new.php"] [unique_id "aaKNbX6mbajs3bzQGytY-wAAAU8"]
[Sat Feb 28 14:38:38.987786 2026] [:error] [pid 39185:tid 39261] [client 20.220.196.236:14331] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/new.php"] [unique_id "aaKNbhVE-FfM89u7BQYhUQAAAI8"]
[Sat Feb 28 14:38:40.414239 2026] [:error] [pid 39185:tid 39270] [client 20.220.196.236:14229] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/new.php"] [unique_id "aaKNcBVE-FfM89u7BQYhXQAAAJg"]
[Sat Feb 28 14:38:41.836579 2026] [:error] [pid 52460:tid 52464] [client 20.220.196.236:14318] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/new.php"] [unique_id "aaKNcbLWOogAgHGh62RxtAAAAYE"]
[Sat Feb 28 14:38:43.261557 2026] [:error] [pid 39292:tid 39300] [client 20.220.196.236:14225] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aaKNc6IAO5fN7BxyqcHwdwAAAMY"]
[Sat Feb 28 14:38:44.694543 2026] [:error] [pid 22194:tid 22208] [client 20.220.196.236:14167] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aaKNdH6mbajs3bzQGytZEgAAAUw"]
[Sat Feb 28 14:38:46.115332 2026] [:error] [pid 39185:tid 39269] [client 20.220.196.236:14297] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aaKNdhVE-FfM89u7BQYhjwAAAJc"]
[Sat Feb 28 14:38:47.536669 2026] [:error] [pid 11791:tid 11813] [client 20.220.196.236:14243] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aaKNd2uX5e1Q32gqxH1JXwAAARQ"]
[Sat Feb 28 14:38:48.949085 2026] [:error] [pid 39185:tid 39251] [client 20.220.196.236:14319] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaKNeBVE-FfM89u7BQYhugAAAIU"]
[Sat Feb 28 14:38:50.368949 2026] [:error] [pid 39292:tid 39310] [client 20.220.196.236:14209] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaKNeqIAO5fN7BxyqcHwjQAAANA"]
[Sat Feb 28 14:38:51.796643 2026] [:error] [pid 39185:tid 39262] [client 20.220.196.236:14176] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaKNexVE-FfM89u7BQYhzAAAAJA"]
[Sat Feb 28 14:38:53.210866 2026] [:error] [pid 39185:tid 39259] [client 20.220.196.236:14210] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaKNfRVE-FfM89u7BQYh1gAAAI0"]
[Sat Feb 28 14:38:54.644146 2026] [:error] [pid 22194:tid 22202] [client 20.220.196.236:14327] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/pe9rsn.php"] [unique_id "aaKNfn6mbajs3bzQGytZLwAAAUY"]
[Sat Feb 28 14:38:56.056174 2026] [:error] [pid 52460:tid 52468] [client 20.220.196.236:14223] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/pe9rsn.php"] [unique_id "aaKNgLLWOogAgHGh62Rx0gAAAYU"]
[Sat Feb 28 14:38:57.481849 2026] [:error] [pid 39185:tid 39252] [client 20.220.196.236:14255] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/pe9rsn.php"] [unique_id "aaKNgRVE-FfM89u7BQYiBgAAAIY"]
[Sat Feb 28 14:38:58.892184 2026] [:error] [pid 22194:tid 22208] [client 20.220.196.236:14326] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/pe9rsn.php"] [unique_id "aaKNgn6mbajs3bzQGytZNAAAAUw"]
[Sat Feb 28 14:39:00.302912 2026] [:error] [pid 39292:tid 39309] [client 20.220.196.236:14259] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaKNhKIAO5fN7BxyqcHwowAAAM8"]
[Sat Feb 28 14:39:01.727290 2026] [:error] [pid 52460:tid 52463] [client 20.220.196.236:14248] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaKNhbLWOogAgHGh62Rx3wAAAYA"]
[Sat Feb 28 14:39:03.149351 2026] [:error] [pid 52460:tid 52472] [client 20.220.196.236:14300] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaKNh7LWOogAgHGh62Rx5QAAAYk"]
[Sat Feb 28 14:39:04.557630 2026] [:error] [pid 39184:tid 39242] [client 20.220.196.236:14263] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "aaKNiFtZF9Zd_U7easDueQAAAFc"]
[Sat Feb 28 14:39:05.982051 2026] [:error] [pid 39185:tid 39258] [client 20.220.196.236:14334] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aaKNiRVE-FfM89u7BQYiTAAAAIw"]
[Sat Feb 28 14:39:07.405761 2026] [:error] [pid 39292:tid 39295] [client 20.220.196.236:14302] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aaKNi6IAO5fN7BxyqcHwqwAAAME"]
[Sat Feb 28 14:39:08.830097 2026] [:error] [pid 39185:tid 39254] [client 20.220.196.236:14217] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aaKNjBVE-FfM89u7BQYiUQAAAIg"]
[Sat Feb 28 14:39:10.254514 2026] [:error] [pid 39292:tid 39300] [client 20.220.196.236:14234] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aaKNjqIAO5fN7BxyqcHwrgAAAMY"]
[Sat Feb 28 14:39:11.675532 2026] [:error] [pid 52460:tid 52468] [client 20.220.196.236:14236] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/special.php"] [unique_id "aaKNj7LWOogAgHGh62Rx_gAAAYU"]
[Sat Feb 28 14:39:13.101665 2026] [:error] [pid 39185:tid 39253] [client 20.220.196.236:14227] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/special.php"] [unique_id "aaKNkRVE-FfM89u7BQYiYQAAAIc"]
[Sat Feb 28 14:39:14.523857 2026] [:error] [pid 39292:tid 39310] [client 20.220.196.236:14329] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/special.php"] [unique_id "aaKNkqIAO5fN7BxyqcHwtAAAANA"]
[Sat Feb 28 14:39:15.963591 2026] [:error] [pid 39185:tid 39249] [client 20.220.196.236:14303] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/special.php"] [unique_id "aaKNkxVE-FfM89u7BQYiawAAAIM"]
[Sat Feb 28 14:39:17.373807 2026] [:error] [pid 22194:tid 22206] [client 20.220.196.236:14296] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bak.php"] [unique_id "aaKNlX6mbajs3bzQGytZSgAAAUo"]
[Sat Feb 28 14:39:18.796901 2026] [:error] [pid 52460:tid 52468] [client 20.220.196.236:14222] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bak.php"] [unique_id "aaKNlrLWOogAgHGh62RyCwAAAYU"]
[Sat Feb 28 14:39:20.208133 2026] [:error] [pid 39185:tid 39261] [client 20.220.196.236:14163] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bak.php"] [unique_id "aaKNmBVE-FfM89u7BQYigAAAAI8"]
[Sat Feb 28 14:39:21.631281 2026] [:error] [pid 39292:tid 39305] [client 20.220.196.236:14158] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bak.php"] [unique_id "aaKNmaIAO5fN7BxyqcHwvQAAAMs"]
[Sat Feb 28 14:39:25.557585 2026] [:error] [pid 22194:tid 22196] [client 20.220.196.236:14213] [client 20.220.196.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaKNnX6mbajs3bzQGytZWQAAAUA"]
[Sat Feb 28 14:39:30.862970 2026] [:error] [pid 39185:tid 39251] [client 20.220.196.236:14267] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/hi.php"] [unique_id "aaKNohVE-FfM89u7BQYivAAAAIU"]
[Sat Feb 28 14:39:32.275037 2026] [:error] [pid 52460:tid 52482] [client 20.220.196.236:14228] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/hi.php"] [unique_id "aaKNpLLWOogAgHGh62RyFAAAAZM"]
[Sat Feb 28 14:39:33.699212 2026] [:error] [pid 39184:tid 39240] [client 20.220.196.236:14238] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/hi.php"] [unique_id "aaKNpVtZF9Zd_U7easDuigAAAFU"]
[Sat Feb 28 14:39:35.130748 2026] [:error] [pid 39185:tid 39259] [client 20.220.196.236:14149] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/hi.php"] [unique_id "aaKNpxVE-FfM89u7BQYiygAAAI0"]
[Sat Feb 28 14:39:36.547933 2026] [:error] [pid 39185:tid 39256] [client 20.220.196.236:14261] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/cong.php"] [unique_id "aaKNqBVE-FfM89u7BQYiywAAAIo"]
[Sat Feb 28 14:39:37.972612 2026] [:error] [pid 39185:tid 39269] [client 20.220.196.236:14168] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/cong.php"] [unique_id "aaKNqRVE-FfM89u7BQYi1QAAAJc"]
[Sat Feb 28 14:39:39.394342 2026] [:error] [pid 39184:tid 39234] [client 20.220.196.236:14233] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/cong.php"] [unique_id "aaKNq1tZF9Zd_U7easDujQAAAE8"]
[Sat Feb 28 14:39:40.804737 2026] [:error] [pid 39185:tid 39255] [client 20.220.196.236:14179] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/cong.php"] [unique_id "aaKNrBVE-FfM89u7BQYi3QAAAIk"]
[Sat Feb 28 14:39:42.212875 2026] [:error] [pid 39185:tid 39247] [client 20.220.196.236:14107] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/index.php"] [unique_id "aaKNrhVE-FfM89u7BQYi5gAAAIE"]
[Sat Feb 28 14:39:43.637285 2026] [:error] [pid 39183:tid 39212] [client 20.220.196.236:14155] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/index.php"] [unique_id "aaKNrxCf4HvhVePw3Lb4ZQAAABQ"]
[Sat Feb 28 14:39:45.049754 2026] [:error] [pid 39183:tid 39197] [client 20.220.196.236:14247] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/index.php"] [unique_id "aaKNsRCf4HvhVePw3Lb4ZgAAAAU"]
[Sat Feb 28 14:39:46.478994 2026] [:error] [pid 39185:tid 39262] [client 20.220.196.236:14244] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/index.php"] [unique_id "aaKNshVE-FfM89u7BQYi8QAAAJA"]
[Sat Feb 28 14:39:47.897671 2026] [:error] [pid 39185:tid 39251] [client 20.220.196.236:14291] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.wp/wso.php"] [unique_id "aaKNsxVE-FfM89u7BQYi9wAAAIU"]
[Sat Feb 28 14:39:49.308269 2026] [:error] [pid 39292:tid 39315] [client 20.220.196.236:14150] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.wp/wso.php"] [unique_id "aaKNtaIAO5fN7BxyqcHwwwAAANU"]
[Sat Feb 28 14:39:50.731936 2026] [:error] [pid 52460:tid 52479] [client 20.220.196.236:14256] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.wp/wso.php"] [unique_id "aaKNtrLWOogAgHGh62RyJgAAAZA"]
[Sat Feb 28 14:39:52.155632 2026] [:error] [pid 39185:tid 39264] [client 20.220.196.236:14230] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.wp/wso.php"] [unique_id "aaKNuBVE-FfM89u7BQYjBAAAAJI"]
[Sat Feb 28 14:39:53.567873 2026] [:error] [pid 39185:tid 39251] [client 20.220.196.236:14317] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaKNuRVE-FfM89u7BQYjBQAAAIU"]
[Sat Feb 28 14:39:54.978456 2026] [:error] [pid 39185:tid 39270] [client 20.220.196.236:14172] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaKNuhVE-FfM89u7BQYjBwAAAJg"]
[Sat Feb 28 14:39:56.403722 2026] [:error] [pid 39185:tid 39269] [client 20.220.196.236:14245] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaKNvBVE-FfM89u7BQYjCgAAAJc"]
[Sat Feb 28 14:39:57.827628 2026] [:error] [pid 11791:tid 11800] [client 20.220.196.236:14185] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaKNvWuX5e1Q32gqxH1J2AAAAQc"]
[Sat Feb 28 14:39:59.252959 2026] [:error] [pid 11791:tid 11801] [client 20.220.196.236:14169] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aaKNv2uX5e1Q32gqxH1J3AAAAQg"]
[Sat Feb 28 14:40:00.678618 2026] [:error] [pid 11791:tid 11802] [client 20.220.196.236:14156] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aaKNwGuX5e1Q32gqxH1J5AAAAQk"]
[Sat Feb 28 14:40:02.102778 2026] [:error] [pid 52460:tid 52467] [client 20.220.196.236:14273] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aaKNwrLWOogAgHGh62RyMQAAAYQ"]
[Sat Feb 28 14:40:03.549768 2026] [:error] [pid 39185:tid 39249] [client 20.220.196.236:14180] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aaKNwxVE-FfM89u7BQYjLgAAAIM"]
[Sat Feb 28 14:40:04.969775 2026] [:error] [pid 39185:tid 39268] [client 20.220.196.236:14249] [client 20.220.196.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aaKNxBVE-FfM89u7BQYjNAAAAJY"]
[Sat Feb 28 14:40:06.396822 2026] [:error] [pid 52460:tid 52465] [client 20.220.196.236:14292] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/d2.php"] [unique_id "aaKNxrLWOogAgHGh62RyNwAAAYI"]
[Sat Feb 28 14:40:07.818538 2026] [:error] [pid 39185:tid 39262] [client 20.220.196.236:14148] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/d2.php"] [unique_id "aaKNxxVE-FfM89u7BQYjPQAAAJA"]
[Sat Feb 28 14:40:09.248008 2026] [:error] [pid 52460:tid 52471] [client 20.220.196.236:14211] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/d2.php"] [unique_id "aaKNybLWOogAgHGh62RyOwAAAYg"]
[Sat Feb 28 14:40:10.668586 2026] [:error] [pid 39185:tid 39263] [client 20.220.196.236:14154] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/new/index.php"] [unique_id "aaKNyhVE-FfM89u7BQYjTQAAAJE"]
[Sat Feb 28 14:40:12.092618 2026] [:error] [pid 52460:tid 52467] [client 20.220.196.236:14145] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/new/index.php"] [unique_id "aaKNzLLWOogAgHGh62RyQAAAAYQ"]
[Sat Feb 28 14:40:13.525311 2026] [:error] [pid 52460:tid 52474] [client 20.220.196.236:14294] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/new/index.php"] [unique_id "aaKNzbLWOogAgHGh62RyQwAAAYs"]
[Sat Feb 28 14:40:14.938170 2026] [:error] [pid 39185:tid 39266] [client 20.220.196.236:14161] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/new/index.php"] [unique_id "aaKNzhVE-FfM89u7BQYjYQAAAJQ"]
[Sat Feb 28 14:40:16.348843 2026] [:error] [pid 39185:tid 39269] [client 20.220.196.236:14307] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/css/dist/"] [unique_id "aaKN0BVE-FfM89u7BQYjdgAAAJc"]
[Sat Feb 28 14:40:17.771603 2026] [:error] [pid 39292:tid 39304] [client 20.220.196.236:14108] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/css/dist/"] [unique_id "aaKN0aIAO5fN7BxyqcHw1AAAAMo"]
[Sat Feb 28 14:40:19.195132 2026] [:error] [pid 39292:tid 39314] [client 20.220.196.236:14081] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/css/dist/"] [unique_id "aaKN06IAO5fN7BxyqcHw1wAAANQ"]
[Sat Feb 28 14:40:20.621154 2026] [:error] [pid 11791:tid 11796] [client 20.220.196.236:14184] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/css/dist/"] [unique_id "aaKN1GuX5e1Q32gqxH1J8wAAAQM"]
[Sat Feb 28 14:40:22.033174 2026] [:error] [pid 22194:tid 22197] [client 20.220.196.236:14152] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aaKN1n6mbajs3bzQGytZfwAAAUE"]
[Sat Feb 28 14:40:23.455287 2026] [:error] [pid 39183:tid 39214] [client 20.220.196.236:14287] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aaKN1xCf4HvhVePw3Lb4dgAAABY"]
[Sat Feb 28 14:40:24.879089 2026] [:error] [pid 11791:tid 11804] [client 20.220.196.236:14299] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aaKN2GuX5e1Q32gqxH1KAQAAAQs"]
[Sat Feb 28 14:40:34.128187 2026] [:error] [pid 22194:tid 22211] [client 20.220.196.236:14246] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/nw2.php"] [unique_id "aaKN4n6mbajs3bzQGytZpwAAAU8"]
[Sat Feb 28 14:40:35.540378 2026] [:error] [pid 52460:tid 52475] [client 20.220.196.236:14098] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/nw2.php"] [unique_id "aaKN47LWOogAgHGh62RybwAAAYw"]
[Sat Feb 28 14:40:36.957259 2026] [:error] [pid 39183:tid 39209] [client 20.220.196.236:14216] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/nw2.php"] [unique_id "aaKN5BCf4HvhVePw3Lb4gwAAABE"]
[Sat Feb 28 14:40:38.393697 2026] [:error] [pid 39185:tid 39270] [client 20.220.196.236:14320] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/nw2.php"] [unique_id "aaKN5hVE-FfM89u7BQYj5QAAAJg"]
[Sat Feb 28 14:40:39.807814 2026] [:error] [pid 39185:tid 39266] [client 20.220.196.236:14265] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/blackmini.php"] [unique_id "aaKN5xVE-FfM89u7BQYj8AAAAJQ"]
[Sat Feb 28 14:40:41.218880 2026] [:error] [pid 11791:tid 11815] [client 20.220.196.236:14194] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/blackmini.php"] [unique_id "aaKN6WuX5e1Q32gqxH1KEwAAARY"]
[Sat Feb 28 14:40:42.628241 2026] [:error] [pid 39292:tid 39305] [client 20.220.196.236:14091] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/blackmini.php"] [unique_id "aaKN6qIAO5fN7BxyqcHw8AAAAMs"]
[Sat Feb 28 14:40:44.053319 2026] [:error] [pid 52460:tid 52471] [client 20.220.196.236:14171] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/blackmini.php"] [unique_id "aaKN7LLWOogAgHGh62RymwAAAYg"]
[Sat Feb 28 14:40:45.478162 2026] [:error] [pid 39184:tid 39236] [client 20.220.196.236:14113] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "aaKN7VtZF9Zd_U7easDutAAAAFE"]
[Sat Feb 28 14:40:46.927596 2026] [:error] [pid 39292:tid 39306] [client 20.220.196.236:14127] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "aaKN7qIAO5fN7BxyqcHw9gAAAMw"]
[Sat Feb 28 14:40:48.341783 2026] [:error] [pid 11791:tid 11799] [client 20.220.196.236:14266] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "aaKN8GuX5e1Q32gqxH1KHgAAAQY"]
[Sat Feb 28 14:40:49.766536 2026] [:error] [pid 11791:tid 11800] [client 20.220.196.236:14182] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "aaKN8WuX5e1Q32gqxH1KJAAAAQc"]
[Sat Feb 28 14:40:51.191431 2026] [:error] [pid 22194:tid 22210] [client 20.220.196.236:14321] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/F19.php"] [unique_id "aaKN836mbajs3bzQGytZvAAAAU4"]
[Sat Feb 28 14:40:52.614197 2026] [:error] [pid 52460:tid 52472] [client 20.220.196.236:14116] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/F19.php"] [unique_id "aaKN9LLWOogAgHGh62RyzAAAAYk"]
[Sat Feb 28 14:40:54.037515 2026] [:error] [pid 11791:tid 11815] [client 20.220.196.236:14170] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/F19.php"] [unique_id "aaKN9muX5e1Q32gqxH1KKwAAARY"]
[Sat Feb 28 14:40:55.447137 2026] [:error] [pid 39292:tid 39305] [client 20.220.196.236:14106] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/F19.php"] [unique_id "aaKN96IAO5fN7BxyqcHxDgAAAMs"]
[Sat Feb 28 14:40:56.873778 2026] [:error] [pid 52460:tid 52486] [client 20.220.196.236:14309] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/F1.php"] [unique_id "aaKN-LLWOogAgHGh62Ry3QAAAZc"]
[Sat Feb 28 14:40:58.303769 2026] [:error] [pid 22194:tid 22204] [client 20.220.196.236:14159] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/F1.php"] [unique_id "aaKN-n6mbajs3bzQGytZxAAAAUg"]
[Sat Feb 28 14:40:59.721672 2026] [:error] [pid 22194:tid 22217] [client 20.220.196.236:14199] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/F1.php"] [unique_id "aaKN-36mbajs3bzQGytZygAAAVU"]
[Sat Feb 28 14:41:01.146108 2026] [:error] [pid 22194:tid 22219] [client 20.220.196.236:14271] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/F1.php"] [unique_id "aaKN_X6mbajs3bzQGytZ0QAAAVc"]
[Sat Feb 28 14:41:02.569002 2026] [:error] [pid 39292:tid 39302] [client 20.220.196.236:14054] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aaKN_qIAO5fN7BxyqcHxHgAAAMg"]
[Sat Feb 28 14:41:03.978897 2026] [:error] [pid 39292:tid 39298] [client 20.220.196.236:14117] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aaKN_6IAO5fN7BxyqcHxJAAAAMQ"]
[Sat Feb 28 14:41:05.389197 2026] [:error] [pid 39292:tid 39315] [client 20.220.196.236:14257] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aaKOAaIAO5fN7BxyqcHxKwAAANU"]
[Sat Feb 28 14:41:06.812777 2026] [:error] [pid 52460:tid 52478] [client 20.220.196.236:14190] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aaKOArLWOogAgHGh62Ry9AAAAY8"]
[Sat Feb 28 14:41:08.235921 2026] [:error] [pid 39184:tid 39228] [client 20.220.196.236:14275] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/R57.php"] [unique_id "aaKOBFtZF9Zd_U7easDuxgAAAEk"]
[Sat Feb 28 14:41:09.665624 2026] [:error] [pid 11791:tid 11815] [client 20.220.196.236:14258] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/R57.php"] [unique_id "aaKOBWuX5e1Q32gqxH1KQAAAARY"]
[Sat Feb 28 14:41:11.086341 2026] [:error] [pid 39185:tid 39268] [client 20.220.196.236:14105] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/R57.php"] [unique_id "aaKOBxVE-FfM89u7BQYkOwAAAJY"]
[Sat Feb 28 14:41:12.514574 2026] [:error] [pid 52460:tid 52485] [client 20.220.196.236:14311] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/R57.php"] [unique_id "aaKOCLLWOogAgHGh62Ry_QAAAZY"]
[Sat Feb 28 14:41:13.936209 2026] [:error] [pid 11791:tid 11817] [client 20.220.196.236:14264] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/4h.php"] [unique_id "aaKOCWuX5e1Q32gqxH1KQQAAARg"]
[Sat Feb 28 14:41:15.345850 2026] [:error] [pid 39184:tid 39230] [client 20.220.196.236:14268] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/4h.php"] [unique_id "aaKOC1tZF9Zd_U7easDuygAAAEs"]
[Sat Feb 28 14:41:16.770474 2026] [:error] [pid 39185:tid 39246] [client 20.220.196.236:14164] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/4h.php"] [unique_id "aaKODBVE-FfM89u7BQYkVQAAAIA"]
[Sat Feb 28 14:41:18.183239 2026] [:error] [pid 39292:tid 39315] [client 20.220.196.236:14270] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/4h.php"] [unique_id "aaKODqIAO5fN7BxyqcHxPAAAANU"]
[Sat Feb 28 14:41:19.607529 2026] [:error] [pid 22194:tid 22202] [client 20.220.196.236:14097] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/yussef.php"] [unique_id "aaKOD36mbajs3bzQGytaAgAAAUY"]
[Sat Feb 28 14:41:21.031349 2026] [:error] [pid 22194:tid 22210] [client 20.220.196.236:14187] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/yussef.php"] [unique_id "aaKOEX6mbajs3bzQGytaCQAAAU4"]
[Sat Feb 28 14:41:22.441506 2026] [:error] [pid 11791:tid 11814] [client 20.220.196.236:14240] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/yussef.php"] [unique_id "aaKOEmuX5e1Q32gqxH1KWAAAARU"]
[Sat Feb 28 14:41:23.855306 2026] [:error] [pid 39183:tid 39192] [client 20.220.196.236:14162] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/yussef.php"] [unique_id "aaKOExCf4HvhVePw3Lb4pgAAAAA"]
[Sat Feb 28 14:41:25.276827 2026] [:error] [pid 39184:tid 39220] [client 20.220.196.236:14206] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "aaKOFVtZF9Zd_U7easDu2AAAAEE"]
[Sat Feb 28 14:41:26.700715 2026] [:error] [pid 39185:tid 39260] [client 20.220.196.236:14308] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "aaKOFhVE-FfM89u7BQYkggAAAI4"]
[Sat Feb 28 14:41:28.141634 2026] [:error] [pid 11791:tid 11801] [client 20.220.196.236:14080] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "aaKOGGuX5e1Q32gqxH1KZwAAAQg"]
[Sat Feb 28 14:41:29.565779 2026] [:error] [pid 52460:tid 52477] [client 20.220.196.236:14120] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "aaKOGbLWOogAgHGh62RzDAAAAY4"]
[Sat Feb 28 14:41:31.011262 2026] [:error] [pid 52460:tid 52476] [client 20.220.196.236:14205] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "aaKOG7LWOogAgHGh62RzFQAAAY0"]
[Sat Feb 28 14:41:32.428839 2026] [:error] [pid 39185:tid 39256] [client 20.220.196.236:14250] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "aaKOHBVE-FfM89u7BQYkmwAAAIo"]
[Sat Feb 28 14:41:41.472494 2026] [:error] [pid 39183:tid 39214] [client 20.220.196.236:14100] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/file59.php"] [unique_id "aaKOJRCf4HvhVePw3Lb4vAAAABY"]
[Sat Feb 28 14:41:42.889942 2026] [:error] [pid 22194:tid 22198] [client 20.220.196.236:14306] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/file59.php"] [unique_id "aaKOJn6mbajs3bzQGytaIgAAAUI"]
[Sat Feb 28 14:41:44.299345 2026] [:error] [pid 39185:tid 39261] [client 20.220.196.236:14260] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/file59.php"] [unique_id "aaKOKBVE-FfM89u7BQYkwwAAAI8"]
[Sat Feb 28 14:41:45.723595 2026] [:error] [pid 11791:tid 11814] [client 20.220.196.236:14087] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/file59.php"] [unique_id "aaKOKWuX5e1Q32gqxH1KlwAAARU"]
[Sat Feb 28 14:41:47.133265 2026] [:error] [pid 22194:tid 22218] [client 20.220.196.236:14019] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaKOK36mbajs3bzQGytaJAAAAVY"]
[Sat Feb 28 14:41:48.549882 2026] [:error] [pid 39183:tid 39205] [client 20.220.196.236:14112] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaKOLBCf4HvhVePw3Lb4wwAAAA0"]
[Sat Feb 28 14:41:49.967118 2026] [:error] [pid 39185:tid 39247] [client 20.220.196.236:14301] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaKOLRVE-FfM89u7BQYk1gAAAIE"]
[Sat Feb 28 14:41:51.376863 2026] [:error] [pid 11791:tid 11802] [client 20.220.196.236:14295] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaKOL2uX5e1Q32gqxH1KqQAAAQk"]
[Sat Feb 28 14:41:52.819928 2026] [:error] [pid 52460:tid 52463] [client 20.220.196.236:14175] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aaKOMLLWOogAgHGh62RzTAAAAYA"]
[Sat Feb 28 14:41:54.241559 2026] [:error] [pid 39185:tid 39253] [client 20.220.196.236:14285] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aaKOMhVE-FfM89u7BQYk5wAAAIc"]
[Sat Feb 28 14:41:55.665346 2026] [:error] [pid 11791:tid 11798] [client 20.220.196.236:14252] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aaKOM2uX5e1Q32gqxH1KxAAAAQU"]
[Sat Feb 28 14:41:57.073892 2026] [:error] [pid 52460:tid 52467] [client 20.220.196.236:14157] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aaKONbLWOogAgHGh62RzXwAAAYQ"]
[Sat Feb 28 14:41:58.483734 2026] [:error] [pid 52460:tid 52468] [client 20.220.196.236:14136] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/er.php"] [unique_id "aaKONrLWOogAgHGh62RzaAAAAYU"]
[Sat Feb 28 14:41:59.893173 2026] [:error] [pid 39183:tid 39215] [client 20.220.196.236:14333] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/er.php"] [unique_id "aaKONxCf4HvhVePw3Lb4zQAAABc"]
[Sat Feb 28 14:42:01.317210 2026] [:error] [pid 39185:tid 39247] [client 20.220.196.236:14288] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/er.php"] [unique_id "aaKOORVE-FfM89u7BQYk-QAAAIE"]
[Sat Feb 28 14:42:02.741843 2026] [:error] [pid 11791:tid 11816] [client 20.220.196.236:14174] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/er.php"] [unique_id "aaKOOmuX5e1Q32gqxH1KyQAAARc"]
[Sat Feb 28 14:42:04.152904 2026] [:error] [pid 39185:tid 39269] [client 20.220.196.236:14085] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fault.php"] [unique_id "aaKOPBVE-FfM89u7BQYlFgAAAJc"]
[Sat Feb 28 14:42:05.577929 2026] [:error] [pid 11791:tid 11794] [client 20.220.196.236:14224] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fault.php"] [unique_id "aaKOPWuX5e1Q32gqxH1KzgAAAQE"]
[Sat Feb 28 14:42:06.989270 2026] [:error] [pid 39185:tid 39249] [client 20.220.196.236:14328] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fault.php"] [unique_id "aaKOPhVE-FfM89u7BQYlIAAAAIM"]
[Sat Feb 28 14:42:08.401184 2026] [:error] [pid 39183:tid 39193] [client 20.220.196.236:14251] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fault.php"] [unique_id "aaKOQBCf4HvhVePw3Lb44gAAAAE"]
[Sat Feb 28 14:42:09.825752 2026] [:error] [pid 52460:tid 52482] [client 20.220.196.236:14314] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aaKOQbLWOogAgHGh62RziAAAAZM"]
[Sat Feb 28 14:42:11.250979 2026] [:error] [pid 39185:tid 39247] [client 20.220.196.236:14220] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aaKOQxVE-FfM89u7BQYlLQAAAIE"]
[Sat Feb 28 14:42:12.671646 2026] [:error] [pid 11791:tid 11813] [client 20.220.196.236:14269] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aaKORGuX5e1Q32gqxH1K2gAAARQ"]
[Sat Feb 28 14:42:14.095565 2026] [:error] [pid 52460:tid 52476] [client 20.220.196.236:14016] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aaKORrLWOogAgHGh62RzlQAAAY0"]
[Sat Feb 28 14:42:15.522555 2026] [:error] [pid 39185:tid 39254] [client 20.220.196.236:14189] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aaKORxVE-FfM89u7BQYlPgAAAIg"]
[Sat Feb 28 14:42:16.946349 2026] [:error] [pid 11791:tid 11802] [client 20.220.196.236:14305] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aaKOSGuX5e1Q32gqxH1K4gAAAQk"]
[Sat Feb 28 14:42:18.362338 2026] [:error] [pid 11791:tid 11800] [client 20.220.196.236:14322] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aaKOSmuX5e1Q32gqxH1K5QAAAQc"]
[Sat Feb 28 14:42:19.779947 2026] [:error] [pid 39185:tid 39270] [client 20.220.196.236:14021] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aaKOSxVE-FfM89u7BQYlWQAAAJg"]
[Sat Feb 28 14:42:21.202909 2026] [:error] [pid 39185:tid 39252] [client 20.220.196.236:14241] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/leuk.php"] [unique_id "aaKOTRVE-FfM89u7BQYlYQAAAIY"]
[Sat Feb 28 14:42:22.628921 2026] [:error] [pid 11791:tid 11802] [client 20.220.196.236:14335] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/leuk.php"] [unique_id "aaKOTmuX5e1Q32gqxH1K8gAAAQk"]
[Sat Feb 28 14:42:24.036718 2026] [:error] [pid 22194:tid 22199] [client 20.220.196.236:14141] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/leuk.php"] [unique_id "aaKOUH6mbajs3bzQGytaUAAAAUM"]
[Sat Feb 28 14:42:25.447587 2026] [:error] [pid 11791:tid 11811] [client 20.220.196.236:14304] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/leuk.php"] [unique_id "aaKOUWuX5e1Q32gqxH1K-QAAARI"]
[Sat Feb 28 14:42:26.866879 2026] [:error] [pid 39185:tid 39252] [client 20.220.196.236:14330] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aaKOUhVE-FfM89u7BQYlcwAAAIY"]
[Sat Feb 28 14:42:28.279595 2026] [:error] [pid 22194:tid 22200] [client 20.220.196.236:14183] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aaKOVH6mbajs3bzQGytaVwAAAUQ"]
[Sat Feb 28 14:42:29.706537 2026] [:error] [pid 39184:tid 39230] [client 20.220.196.236:14123] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aaKOVVtZF9Zd_U7easDvFAAAAEs"]
[Sat Feb 28 14:42:31.129624 2026] [:error] [pid 39183:tid 39211] [client 20.220.196.236:14144] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aaKOVxCf4HvhVePw3Lb4_wAAABM"]
[Sat Feb 28 14:42:32.575065 2026] [:error] [pid 52460:tid 52486] [client 20.220.196.236:14283] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/kolda.php"] [unique_id "aaKOWLLWOogAgHGh62RzvAAAAZc"]
[Sat Feb 28 14:42:33.984930 2026] [:error] [pid 39183:tid 39203] [client 20.220.196.236:14316] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/kolda.php"] [unique_id "aaKOWRCf4HvhVePw3Lb5AgAAAAs"]
[Sat Feb 28 14:42:35.408336 2026] [:error] [pid 39183:tid 39204] [client 20.220.196.236:14325] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/kolda.php"] [unique_id "aaKOWxCf4HvhVePw3Lb5BgAAAAw"]
[Sat Feb 28 14:42:36.835464 2026] [:error] [pid 39185:tid 39261] [client 20.220.196.236:14254] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/kolda.php"] [unique_id "aaKOXBVE-FfM89u7BQYlhAAAAI8"]
[Sat Feb 28 14:42:44.238328 2026] [:error] [pid 52460:tid 52480] [client 20.220.196.236:14315] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aaKOZLLWOogAgHGh62Rz_AAAAZE"]
[Sat Feb 28 14:42:45.660647 2026] [:error] [pid 22194:tid 22203] [client 20.220.196.236:14192] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aaKOZX6mbajs3bzQGytaagAAAUc"]
[Sat Feb 28 14:42:47.084504 2026] [:error] [pid 11791:tid 11816] [client 20.220.196.236:14232] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aaKOZ2uX5e1Q32gqxH1LHQAAARc"]
[Sat Feb 28 14:42:48.508087 2026] [:error] [pid 39185:tid 39258] [client 20.220.196.236:14165] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aaKOaBVE-FfM89u7BQYlmgAAAIw"]
[Sat Feb 28 14:42:49.930981 2026] [:error] [pid 39185:tid 39252] [client 20.220.196.236:14196] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "aaKOaRVE-FfM89u7BQYlpgAAAIY"]
[Sat Feb 28 14:42:51.354056 2026] [:error] [pid 39185:tid 39264] [client 20.220.196.236:14062] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "aaKOaxVE-FfM89u7BQYlsQAAAJI"]
[Sat Feb 28 14:42:52.776543 2026] [:error] [pid 39185:tid 39248] [client 20.220.196.236:14146] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "aaKObBVE-FfM89u7BQYlwQAAAII"]
[Sat Feb 28 14:42:54.200598 2026] [:error] [pid 11791:tid 11803] [client 20.220.196.236:14103] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "aaKObmuX5e1Q32gqxH1LJAAAAQo"]
[Sat Feb 28 14:42:55.642919 2026] [:error] [pid 39184:tid 39233] [client 20.220.196.236:14323] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a1vx.php"] [unique_id "aaKOb1tZF9Zd_U7easDvJQAAAE4"]
[Sat Feb 28 14:42:57.061654 2026] [:error] [pid 39185:tid 39265] [client 20.220.196.236:14122] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a1vx.php"] [unique_id "aaKOcRVE-FfM89u7BQYl8gAAAJM"]
[Sat Feb 28 14:42:58.485525 2026] [:error] [pid 11791:tid 11794] [client 20.220.196.236:14095] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a1vx.php"] [unique_id "aaKOcmuX5e1Q32gqxH1LLQAAAQE"]
[Sat Feb 28 14:42:59.908226 2026] [:error] [pid 52460:tid 52484] [client 20.220.196.236:14231] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a1vx.php"] [unique_id "aaKOc7LWOogAgHGh62R0PAAAAZU"]
[Sat Feb 28 14:43:01.332924 2026] [:error] [pid 39184:tid 39222] [client 20.220.196.236:14277] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aaKOdVtZF9Zd_U7easDvKQAAAEM"]
[Sat Feb 28 14:43:02.757594 2026] [:error] [pid 39184:tid 39221] [client 20.220.196.236:14324] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aaKOdltZF9Zd_U7easDvLQAAAEI"]
[Sat Feb 28 14:43:04.177977 2026] [:error] [pid 39185:tid 39255] [client 20.220.196.236:14274] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aaKOeBVE-FfM89u7BQYmHwAAAIk"]
[Sat Feb 28 14:43:05.600928 2026] [:error] [pid 39183:tid 39192] [client 20.220.196.236:14166] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aaKOeRCf4HvhVePw3Lb5LAAAAAA"]
[Sat Feb 28 14:43:07.027953 2026] [:error] [pid 39184:tid 39219] [client 20.220.196.236:14319] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aaKOe1tZF9Zd_U7easDvPQAAAEA"]
[Sat Feb 28 14:43:08.465083 2026] [:error] [pid 39185:tid 39255] [client 20.220.196.236:14035] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aaKOfBVE-FfM89u7BQYmLQAAAIk"]
[Sat Feb 28 14:43:09.876788 2026] [:error] [pid 39185:tid 39258] [client 20.220.196.236:14212] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aaKOfRVE-FfM89u7BQYmOQAAAIw"]
[Sat Feb 28 14:43:11.301937 2026] [:error] [pid 52460:tid 52476] [client 20.220.196.236:14029] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aaKOf7LWOogAgHGh62R0WQAAAY0"]
[Sat Feb 28 14:43:12.722490 2026] [:error] [pid 22194:tid 22210] [client 20.220.196.236:14242] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/06.php"] [unique_id "aaKOgH6mbajs3bzQGytaoQAAAU4"]
[Sat Feb 28 14:43:14.145445 2026] [:error] [pid 52460:tid 52487] [client 20.220.196.236:14102] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/06.php"] [unique_id "aaKOgrLWOogAgHGh62R0aQAAAZg"]
[Sat Feb 28 14:43:15.555355 2026] [:error] [pid 39183:tid 39213] [client 20.220.196.236:14334] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/06.php"] [unique_id "aaKOgxCf4HvhVePw3Lb5NAAAABU"]
[Sat Feb 28 14:43:16.978095 2026] [:error] [pid 39185:tid 39269] [client 20.220.196.236:14173] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/06.php"] [unique_id "aaKOhBVE-FfM89u7BQYmXwAAAJc"]
[Sat Feb 28 14:43:18.402090 2026] [:error] [pid 39185:tid 39256] [client 20.220.196.236:14293] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aaKOhhVE-FfM89u7BQYmawAAAIo"]
[Sat Feb 28 14:43:19.831015 2026] [:error] [pid 52460:tid 52480] [client 20.220.196.236:14049] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aaKOh7LWOogAgHGh62R0cgAAAZE"]
[Sat Feb 28 14:43:21.248201 2026] [:error] [pid 39183:tid 39211] [client 20.220.196.236:14234] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aaKOiRCf4HvhVePw3Lb5NwAAABM"]
[Sat Feb 28 14:43:22.671654 2026] [:error] [pid 39184:tid 39228] [client 20.220.196.236:14114] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aaKOiltZF9Zd_U7easDvUQAAAEk"]
[Sat Feb 28 14:43:24.095535 2026] [:error] [pid 52460:tid 52477] [client 20.220.196.236:14331] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fot.php"] [unique_id "aaKOjLLWOogAgHGh62R0hgAAAY4"]
[Sat Feb 28 14:43:25.521305 2026] [:error] [pid 39184:tid 39220] [client 20.220.196.236:14313] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fot.php"] [unique_id "aaKOjVtZF9Zd_U7easDvVQAAAEE"]
[Sat Feb 28 14:43:26.945706 2026] [:error] [pid 39183:tid 39204] [client 20.220.196.236:14229] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fot.php"] [unique_id "aaKOjhCf4HvhVePw3Lb5PQAAAAw"]
[Sat Feb 28 14:43:28.374087 2026] [:error] [pid 39184:tid 39227] [client 20.220.196.236:14037] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fot.php"] [unique_id "aaKOkFtZF9Zd_U7easDvXwAAAEg"]
[Sat Feb 28 14:43:29.795798 2026] [:error] [pid 39292:tid 39307] [client 20.220.196.236:14302] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "aaKOkaIAO5fN7BxyqcHx6AAAAM0"]
[Sat Feb 28 14:43:31.208555 2026] [:error] [pid 39292:tid 39298] [client 20.220.196.236:14193] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "aaKOk6IAO5fN7BxyqcHx6wAAAMQ"]
[Sat Feb 28 14:43:32.617164 2026] [:error] [pid 39185:tid 39256] [client 20.220.196.236:14278] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "aaKOlBVE-FfM89u7BQYm6AAAAIo"]
[Sat Feb 28 14:43:34.028820 2026] [:error] [pid 39292:tid 39295] [client 20.220.196.236:14239] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "aaKOlqIAO5fN7BxyqcHx8AAAAME"]
[Sat Feb 28 14:43:35.452641 2026] [:error] [pid 39292:tid 39300] [client 20.220.196.236:14237] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/forbidals.php"] [unique_id "aaKOl6IAO5fN7BxyqcHx8QAAAMY"]
[Sat Feb 28 14:43:36.876674 2026] [:error] [pid 52460:tid 52463] [client 20.220.196.236:14326] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/forbidals.php"] [unique_id "aaKOmLLWOogAgHGh62R0uAAAAYA"]
[Sat Feb 28 14:43:38.302020 2026] [:error] [pid 11791:tid 11806] [client 20.220.196.236:14214] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/forbidals.php"] [unique_id "aaKOmmuX5e1Q32gqxH1LeQAAAQ0"]
[Sat Feb 28 14:43:39.726719 2026] [:error] [pid 52460:tid 52468] [client 20.220.196.236:14284] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/forbidals.php"] [unique_id "aaKOm7LWOogAgHGh62R0wwAAAYU"]
[Sat Feb 28 14:43:41.150922 2026] [:error] [pid 11791:tid 11804] [client 20.220.196.236:14213] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "aaKOnWuX5e1Q32gqxH1LhQAAAQs"]
[Sat Feb 28 14:43:48.500357 2026] [:error] [pid 52460:tid 52476] [client 20.220.196.236:14178] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/vxrl.php"] [unique_id "aaKOpLLWOogAgHGh62R04gAAAY0"]
[Sat Feb 28 14:43:49.916200 2026] [:error] [pid 39292:tid 39306] [client 20.220.196.236:14099] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/vxrl.php"] [unique_id "aaKOpaIAO5fN7BxyqcHyBwAAAMw"]
[Sat Feb 28 14:43:51.330506 2026] [:error] [pid 22194:tid 22216] [client 20.220.196.236:14208] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/vxrl.php"] [unique_id "aaKOp36mbajs3bzQGytavQAAAVQ"]
[Sat Feb 28 14:43:52.752252 2026] [:error] [pid 52460:tid 52485] [client 20.220.196.236:14228] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/vxrl.php"] [unique_id "aaKOqLLWOogAgHGh62R06wAAAZY"]
[Sat Feb 28 14:43:54.175518 2026] [:error] [pid 39185:tid 39247] [client 20.220.196.236:14221] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/in.php"] [unique_id "aaKOqhVE-FfM89u7BQYnZAAAAIE"]
[Sat Feb 28 14:43:55.585276 2026] [:error] [pid 11791:tid 11805] [client 20.220.196.236:14329] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/in.php"] [unique_id "aaKOq2uX5e1Q32gqxH1L-AAAAQw"]
[Sat Feb 28 14:43:57.009971 2026] [:error] [pid 52460:tid 52479] [client 20.220.196.236:14298] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/in.php"] [unique_id "aaKOrbLWOogAgHGh62R1BAAAAZA"]
[Sat Feb 28 14:43:58.433807 2026] [:error] [pid 52460:tid 52475] [client 20.220.196.236:14226] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/in.php"] [unique_id "aaKOrrLWOogAgHGh62R1DgAAAYw"]
[Sat Feb 28 14:43:59.846335 2026] [:error] [pid 39183:tid 39212] [client 20.220.196.236:14261] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/style.php"] [unique_id "aaKOrxCf4HvhVePw3Lb5UgAAABQ"]
[Sat Feb 28 14:44:01.256541 2026] [:error] [pid 22194:tid 22212] [client 20.220.196.236:14262] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/style.php"] [unique_id "aaKOsX6mbajs3bzQGytayAAAAVA"]
[Sat Feb 28 14:44:02.666912 2026] [:error] [pid 39185:tid 39259] [client 20.220.196.236:14310] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/style.php"] [unique_id "aaKOshVE-FfM89u7BQYnkAAAAI0"]
[Sat Feb 28 14:44:04.101497 2026] [:error] [pid 39185:tid 39249] [client 20.220.196.236:14210] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/style.php"] [unique_id "aaKOtBVE-FfM89u7BQYnoQAAAIM"]
[Sat Feb 28 14:44:05.514884 2026] [:error] [pid 39185:tid 39264] [client 20.220.196.236:14290] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aaKOtRVE-FfM89u7BQYnrAAAAJI"]
[Sat Feb 28 14:44:06.923953 2026] [:error] [pid 52460:tid 52474] [client 20.220.196.236:14300] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aaKOtrLWOogAgHGh62R1QAAAAYs"]
[Sat Feb 28 14:44:08.333905 2026] [:error] [pid 39185:tid 39261] [client 20.220.196.236:14149] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aaKOuBVE-FfM89u7BQYnxgAAAI8"]
[Sat Feb 28 14:44:09.756941 2026] [:error] [pid 39185:tid 39255] [client 20.220.196.236:14151] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aaKOuRVE-FfM89u7BQYn5gAAAIk"]
[Sat Feb 28 14:44:11.181638 2026] [:error] [pid 39185:tid 39247] [client 20.220.196.236:14245] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/zwso.php"] [unique_id "aaKOuxVE-FfM89u7BQYn-QAAAIE"]
[Sat Feb 28 14:44:12.605758 2026] [:error] [pid 39185:tid 39265] [client 20.220.196.236:14312] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/zwso.php"] [unique_id "aaKOvBVE-FfM89u7BQYoFQAAAJM"]
[Sat Feb 28 14:44:14.061828 2026] [:error] [pid 52460:tid 52469] [client 20.220.196.236:14253] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/zwso.php"] [unique_id "aaKOvrLWOogAgHGh62R1ZwAAAYY"]
[Sat Feb 28 14:44:15.502641 2026] [:error] [pid 39185:tid 39256] [client 20.220.196.236:14303] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/zwso.php"] [unique_id "aaKOvxVE-FfM89u7BQYoPgAAAIo"]
[Sat Feb 28 14:44:16.927681 2026] [:error] [pid 39185:tid 39260] [client 20.220.196.236:14218] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/karak.php"] [unique_id "aaKOwBVE-FfM89u7BQYoSAAAAI4"]
[Sat Feb 28 14:44:18.348434 2026] [:error] [pid 39183:tid 39214] [client 20.220.196.236:14211] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/karak.php"] [unique_id "aaKOwhCf4HvhVePw3Lb5ZwAAABY"]
[Sat Feb 28 14:44:19.760562 2026] [:error] [pid 52460:tid 52478] [client 20.220.196.236:14219] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/karak.php"] [unique_id "aaKOw7LWOogAgHGh62R1eQAAAY8"]
[Sat Feb 28 14:44:21.183764 2026] [:error] [pid 52460:tid 52482] [client 20.220.196.236:14167] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/karak.php"] [unique_id "aaKOxbLWOogAgHGh62R1hwAAAZM"]
[Sat Feb 28 14:44:22.595069 2026] [:error] [pid 39185:tid 39253] [client 20.220.196.236:14197] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/prv8.php"] [unique_id "aaKOxhVE-FfM89u7BQYoVAAAAIc"]
[Sat Feb 28 14:44:24.016340 2026] [:error] [pid 39185:tid 39256] [client 20.220.196.236:14207] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/prv8.php"] [unique_id "aaKOyBVE-FfM89u7BQYoYQAAAIo"]
[Sat Feb 28 14:44:25.432372 2026] [:error] [pid 11791:tid 11802] [client 20.220.196.236:14225] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/prv8.php"] [unique_id "aaKOyWuX5e1Q32gqxH1MzwAAAQk"]
[Sat Feb 28 14:44:26.870287 2026] [:error] [pid 39185:tid 39267] [client 20.220.196.236:14185] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/prv8.php"] [unique_id "aaKOyhVE-FfM89u7BQYobQAAAJU"]
[Sat Feb 28 14:44:28.295495 2026] [:error] [pid 52460:tid 52476] [client 20.220.196.236:14292] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a.php"] [unique_id "aaKOzLLWOogAgHGh62R1rwAAAY0"]
[Sat Feb 28 14:44:29.722644 2026] [:error] [pid 52460:tid 52485] [client 20.220.196.236:14154] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a.php"] [unique_id "aaKOzbLWOogAgHGh62R1swAAAZY"]
[Sat Feb 28 14:44:31.145111 2026] [:error] [pid 39184:tid 39228] [client 20.220.196.236:14244] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a.php"] [unique_id "aaKOz1tZF9Zd_U7easDvzwAAAEk"]
[Sat Feb 28 14:44:32.568764 2026] [:error] [pid 11791:tid 11808] [client 20.220.196.236:14317] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a.php"] [unique_id "aaKO0GuX5e1Q32gqxH1M4AAAAQ8"]
[Sat Feb 28 14:44:33.992727 2026] [:error] [pid 39185:tid 39247] [client 20.220.196.236:14104] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aaKO0RVE-FfM89u7BQYofgAAAIE"]
[Sat Feb 28 14:44:35.415524 2026] [:error] [pid 39185:tid 39254] [client 20.220.196.236:14230] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aaKO0xVE-FfM89u7BQYohgAAAIg"]
[Sat Feb 28 14:44:36.839273 2026] [:error] [pid 39292:tid 39296] [client 20.220.196.236:14256] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aaKO1KIAO5fN7BxyqcHyTQAAAMI"]
[Sat Feb 28 14:44:38.263875 2026] [:error] [pid 39185:tid 39268] [client 20.220.196.236:14227] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aaKO1hVE-FfM89u7BQYojQAAAJY"]
[Sat Feb 28 14:44:39.687196 2026] [:error] [pid 39185:tid 39249] [client 20.220.196.236:14139] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "aaKO1xVE-FfM89u7BQYokQAAAIM"]
[Sat Feb 28 14:44:41.109908 2026] [:error] [pid 52460:tid 52470] [client 20.220.196.236:14238] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "aaKO2bLWOogAgHGh62R1yQAAAYc"]
[Sat Feb 28 14:44:42.524301 2026] [:error] [pid 11791:tid 11811] [client 20.220.196.236:14276] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "aaKO2muX5e1Q32gqxH1M-wAAARI"]
[Sat Feb 28 14:44:43.944964 2026] [:error] [pid 39183:tid 39202] [client 20.220.196.236:14246] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "aaKO2xCf4HvhVePw3Lb5hwAAAAo"]
[Sat Feb 28 14:44:45.377147 2026] [:error] [pid 39183:tid 39198] [client 20.220.196.236:14156] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aaKO3RCf4HvhVePw3Lb5iwAAAAY"]
[Sat Feb 28 14:44:46.794782 2026] [:error] [pid 52460:tid 52471] [client 20.220.196.236:14179] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "aaKO3rLWOogAgHGh62R14gAAAYg"]
[Sat Feb 28 14:44:54.200805 2026] [:error] [pid 39185:tid 39246] [client 20.220.196.236:14118] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "aaKO5hVE-FfM89u7BQYozAAAAIA"]
[Sat Feb 28 14:44:55.618600 2026] [:error] [pid 52460:tid 52467] [client 20.220.196.236:14088] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "aaKO57LWOogAgHGh62R2AwAAAYQ"]
[Sat Feb 28 14:44:57.044074 2026] [:error] [pid 39184:tid 39227] [client 20.220.196.236:14107] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "aaKO6VtZF9Zd_U7easDv6QAAAEg"]
[Sat Feb 28 14:44:58.478564 2026] [:error] [pid 52460:tid 52473] [client 20.220.196.236:14089] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "aaKO6rLWOogAgHGh62R2EQAAAYo"]
[Sat Feb 28 14:44:59.887330 2026] [:error] [pid 39185:tid 39255] [client 20.220.196.236:14148] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aaKO6xVE-FfM89u7BQYo3wAAAIk"]
[Sat Feb 28 14:45:01.317023 2026] [:error] [pid 39185:tid 39265] [client 20.220.196.236:14318] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aaKO7RVE-FfM89u7BQYo5AAAAJM"]
[Sat Feb 28 14:45:02.736064 2026] [:error] [pid 52460:tid 52466] [client 20.220.196.236:14200] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aaKO7rLWOogAgHGh62R2IwAAAYM"]
[Sat Feb 28 14:45:04.159200 2026] [:error] [pid 22194:tid 22215] [client 20.220.196.236:14111] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aaKO8H6mbajs3bzQGytbFQAAAVM"]
[Sat Feb 28 14:45:05.568174 2026] [:error] [pid 39185:tid 39264] [client 20.220.196.236:14209] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/class.1.php"] [unique_id "aaKO8RVE-FfM89u7BQYo7wAAAJI"]
[Sat Feb 28 14:45:06.998293 2026] [:error] [pid 39185:tid 39257] [client 20.220.196.236:14090] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/class.1.php"] [unique_id "aaKO8hVE-FfM89u7BQYo-QAAAIs"]
[Sat Feb 28 14:45:08.418902 2026] [:error] [pid 39185:tid 39249] [client 20.220.196.236:14138] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/class.1.php"] [unique_id "aaKO9BVE-FfM89u7BQYpAQAAAIM"]
[Sat Feb 28 14:45:09.854687 2026] [:error] [pid 39292:tid 39315] [client 20.220.196.236:14327] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/class.1.php"] [unique_id "aaKO9aIAO5fN7BxyqcHykwAAANU"]
[Sat Feb 28 14:45:11.265638 2026] [:error] [pid 39185:tid 39246] [client 20.220.196.236:14332] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/async.php"] [unique_id "aaKO9xVE-FfM89u7BQYpDgAAAIA"]
[Sat Feb 28 14:45:12.677427 2026] [:error] [pid 52460:tid 52473] [client 20.220.196.236:14186] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/async.php"] [unique_id "aaKO-LLWOogAgHGh62R2PQAAAYo"]
[Sat Feb 28 14:45:14.099309 2026] [:error] [pid 22194:tid 22218] [client 20.220.196.236:14236] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/async.php"] [unique_id "aaKO-n6mbajs3bzQGytbHwAAAVY"]
[Sat Feb 28 14:45:15.510668 2026] [:error] [pid 22194:tid 22213] [client 20.220.196.236:14309] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/async.php"] [unique_id "aaKO-36mbajs3bzQGytbJgAAAVE"]
[Sat Feb 28 14:45:16.936962 2026] [:error] [pid 11791:tid 11816] [client 20.220.196.236:14307] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ff.php"] [unique_id "aaKO_GuX5e1Q32gqxH1NMQAAARc"]
[Sat Feb 28 14:45:18.357252 2026] [:error] [pid 39185:tid 39255] [client 20.220.196.236:14258] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ff.php"] [unique_id "aaKO_hVE-FfM89u7BQYpLwAAAIk"]
[Sat Feb 28 14:45:19.780275 2026] [:error] [pid 52460:tid 52477] [client 20.220.196.236:14282] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ff.php"] [unique_id "aaKO_7LWOogAgHGh62R2RgAAAY4"]
[Sat Feb 28 14:45:21.228867 2026] [:error] [pid 39184:tid 39219] [client 20.220.196.236:14201] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ff.php"] [unique_id "aaKPAVtZF9Zd_U7easDv8gAAAEA"]
[Sat Feb 28 14:45:22.644121 2026] [:error] [pid 39185:tid 39248] [client 20.220.196.236:14217] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aaKPAhVE-FfM89u7BQYpQAAAAII"]
[Sat Feb 28 14:45:24.066452 2026] [:error] [pid 39184:tid 39242] [client 20.220.196.236:14110] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aaKPBFtZF9Zd_U7easDv9AAAAFc"]
[Sat Feb 28 14:45:25.476543 2026] [:error] [pid 22194:tid 22213] [client 20.220.196.236:14263] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aaKPBX6mbajs3bzQGytbMwAAAVE"]
[Sat Feb 28 14:45:26.885901 2026] [:error] [pid 11791:tid 11806] [client 20.220.196.236:14082] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aaKPBmuX5e1Q32gqxH1NRQAAAQ0"]
[Sat Feb 28 14:45:28.309958 2026] [:error] [pid 52460:tid 52477] [client 20.220.196.236:14273] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "aaKPCLLWOogAgHGh62R2UgAAAY4"]
[Sat Feb 28 14:45:29.719916 2026] [:error] [pid 22194:tid 22215] [client 20.220.196.236:14279] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "aaKPCX6mbajs3bzQGytbOAAAAVM"]
[Sat Feb 28 14:45:31.155360 2026] [:error] [pid 39184:tid 39241] [client 20.220.196.236:14264] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "aaKPC1tZF9Zd_U7easDv9wAAAFY"]
[Sat Feb 28 14:45:32.571497 2026] [:error] [pid 52460:tid 52483] [client 20.220.196.236:14248] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/manager.php"] [unique_id "aaKPDLLWOogAgHGh62R2VwAAAZQ"]
[Sat Feb 28 14:45:33.995013 2026] [:error] [pid 39185:tid 39268] [client 20.220.196.236:14299] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-update.php"] [unique_id "aaKPDRVE-FfM89u7BQYpRwAAAJY"]
[Sat Feb 28 14:45:35.421910 2026] [:error] [pid 52460:tid 52481] [client 20.220.196.236:14191] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-update.php"] [unique_id "aaKPD7LWOogAgHGh62R2YAAAAZI"]
[Sat Feb 28 14:45:36.846181 2026] [:error] [pid 52460:tid 52475] [client 20.220.196.236:14281] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-update.php"] [unique_id "aaKPELLWOogAgHGh62R2ZwAAAYw"]
[Sat Feb 28 14:45:38.270196 2026] [:error] [pid 52460:tid 52482] [client 20.220.196.236:14294] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-update.php"] [unique_id "aaKPErLWOogAgHGh62R2cgAAAZM"]
[Sat Feb 28 14:45:39.708857 2026] [:error] [pid 39185:tid 39270] [client 20.220.196.236:14150] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aaKPExVE-FfM89u7BQYpUAAAAJg"]
[Sat Feb 28 14:45:41.128776 2026] [:error] [pid 52460:tid 52476] [client 20.220.196.236:14311] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aaKPFbLWOogAgHGh62R2gQAAAY0"]
[Sat Feb 28 14:45:42.552882 2026] [:error] [pid 39183:tid 39197] [client 20.220.196.236:14267] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aaKPFhCf4HvhVePw3Lb5rQAAAAU"]
[Sat Feb 28 14:45:43.973560 2026] [:error] [pid 11791:tid 11817] [client 20.220.196.236:14161] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aaKPF2uX5e1Q32gqxH1NTAAAARg"]
[Sat Feb 28 14:45:45.390641 2026] [:error] [pid 39185:tid 39254] [client 20.220.196.236:14321] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lc.php"] [unique_id "aaKPGRVE-FfM89u7BQYpUgAAAIg"]
[Sat Feb 28 14:45:46.814491 2026] [:error] [pid 39183:tid 39203] [client 20.220.196.236:14216] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lc.php"] [unique_id "aaKPGhCf4HvhVePw3Lb5sAAAAAs"]
[Sat Feb 28 14:45:48.239486 2026] [:error] [pid 52460:tid 52465] [client 20.220.196.236:14127] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lc.php"] [unique_id "aaKPHLLWOogAgHGh62R2ogAAAYI"]
[Sat Feb 28 14:45:49.663865 2026] [:error] [pid 39185:tid 39246] [client 20.220.196.236:14171] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lc.php"] [unique_id "aaKPHRVE-FfM89u7BQYpWwAAAIA"]
[Sat Feb 28 14:45:51.078201 2026] [:error] [pid 39185:tid 39259] [client 20.220.196.236:14098] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/cbrfo.php"] [unique_id "aaKPHxVE-FfM89u7BQYpYgAAAI0"]
[Sat Feb 28 14:45:55.846205 2026] [:error] [pid 11791:tid 11806] [client 20.220.196.236:14188] [client 20.220.196.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaKPI2uX5e1Q32gqxH1NVwAAAQ0"]
[Sat Feb 28 14:45:59.886797 2026] [:error] [pid 39185:tid 39251] [client 20.220.196.236:14159] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/thebe.php"] [unique_id "aaKPJxVE-FfM89u7BQYplwAAAIU"]
[Sat Feb 28 14:46:01.313825 2026] [:error] [pid 39185:tid 39255] [client 20.220.196.236:14133] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/thebe.php"] [unique_id "aaKPKRVE-FfM89u7BQYpmgAAAIk"]
[Sat Feb 28 14:46:02.735808 2026] [:error] [pid 52460:tid 52476] [client 20.220.196.236:14204] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/thebe.php"] [unique_id "aaKPKrLWOogAgHGh62R2rgAAAY0"]
[Sat Feb 28 14:46:04.160570 2026] [:error] [pid 39292:tid 39310] [client 20.220.196.236:14184] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/thebe.php"] [unique_id "aaKPLKIAO5fN7BxyqcHzCgAAANA"]
[Sat Feb 28 14:46:05.587766 2026] [:error] [pid 39292:tid 39307] [client 20.220.196.236:14259] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ddd.php"] [unique_id "aaKPLaIAO5fN7BxyqcHzDAAAAM0"]
[Sat Feb 28 14:46:07.028779 2026] [:error] [pid 39185:tid 39265] [client 20.220.196.236:14250] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ddd.php"] [unique_id "aaKPLxVE-FfM89u7BQYpoQAAAJM"]
[Sat Feb 28 14:46:08.439805 2026] [:error] [pid 39185:tid 39256] [client 20.220.196.236:14027] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ddd.php"] [unique_id "aaKPMBVE-FfM89u7BQYppQAAAIo"]
[Sat Feb 28 14:46:09.861435 2026] [:error] [pid 52460:tid 52485] [client 20.220.196.236:14158] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ddd.php"] [unique_id "aaKPMbLWOogAgHGh62R2yQAAAZY"]
[Sat Feb 28 14:46:11.270547 2026] [:error] [pid 22194:tid 22218] [client 20.220.196.236:14147] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aaKPM36mbajs3bzQGytbXAAAAVY"]
[Sat Feb 28 14:46:12.697823 2026] [:error] [pid 39185:tid 39268] [client 20.220.196.236:14160] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aaKPNBVE-FfM89u7BQYpqgAAAJY"]
[Sat Feb 28 14:46:14.121552 2026] [:error] [pid 52460:tid 52471] [client 20.220.196.236:14233] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aaKPNrLWOogAgHGh62R21wAAAYg"]
[Sat Feb 28 14:46:15.535661 2026] [:error] [pid 11791:tid 11811] [client 20.220.196.236:14257] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aaKPN2uX5e1Q32gqxH1NcAAAARI"]
[Sat Feb 28 14:46:16.957273 2026] [:error] [pid 39185:tid 39256] [client 20.220.196.236:14194] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ioxi.php"] [unique_id "aaKPOBVE-FfM89u7BQYpvAAAAIo"]
[Sat Feb 28 14:46:18.392060 2026] [:error] [pid 39292:tid 39297] [client 20.220.196.236:14328] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ioxi.php"] [unique_id "aaKPOqIAO5fN7BxyqcHzIQAAAMM"]
[Sat Feb 28 14:46:19.827313 2026] [:error] [pid 52460:tid 52486] [client 20.220.196.236:14224] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ioxi.php"] [unique_id "aaKPO7LWOogAgHGh62R24gAAAZc"]
[Sat Feb 28 14:46:22.352661 2026] [:error] [pid 39185:tid 39258] [client 20.220.196.236:14286] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ioxi.php"] [unique_id "aaKPPhVE-FfM89u7BQYp1QAAAIw"]
[Sat Feb 28 14:46:23.775403 2026] [:error] [pid 11791:tid 11805] [client 20.220.196.236:14252] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xpwer1.php"] [unique_id "aaKPP2uX5e1Q32gqxH1NfgAAAQw"]
[Sat Feb 28 14:46:25.194790 2026] [:error] [pid 39185:tid 39270] [client 20.220.196.236:14205] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xpwer1.php"] [unique_id "aaKPQRVE-FfM89u7BQYp5QAAAJg"]
[Sat Feb 28 14:46:26.617993 2026] [:error] [pid 11791:tid 11803] [client 20.220.196.236:14305] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xpwer1.php"] [unique_id "aaKPQmuX5e1Q32gqxH1NhAAAAQo"]
[Sat Feb 28 14:46:28.077186 2026] [:error] [pid 39292:tid 39298] [client 20.220.196.236:14176] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xpwer1.php"] [unique_id "aaKPRKIAO5fN7BxyqcHzIwAAAMQ"]
[Sat Feb 28 14:46:29.500550 2026] [:error] [pid 52460:tid 52478] [client 20.220.196.236:14157] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "aaKPRbLWOogAgHGh62R27wAAAY8"]
[Sat Feb 28 14:46:30.925002 2026] [:error] [pid 22194:tid 22197] [client 20.220.196.236:14295] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "aaKPRn6mbajs3bzQGytbawAAAUE"]
[Sat Feb 28 14:46:32.335574 2026] [:error] [pid 52460:tid 52469] [client 20.220.196.236:14093] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "aaKPSLLWOogAgHGh62R29AAAAYY"]
[Sat Feb 28 14:46:33.759091 2026] [:error] [pid 11791:tid 11811] [client 20.220.196.236:14109] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "aaKPSWuX5e1Q32gqxH1NjwAAARI"]
[Sat Feb 28 14:46:35.183132 2026] [:error] [pid 39292:tid 39310] [client 20.220.196.236:14101] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aaKPS6IAO5fN7BxyqcHzLgAAANA"]
[Sat Feb 28 14:46:36.610557 2026] [:error] [pid 39292:tid 39306] [client 20.220.196.236:14215] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aaKPTKIAO5fN7BxyqcHzMgAAAMw"]
[Sat Feb 28 14:46:38.033768 2026] [:error] [pid 52460:tid 52465] [client 20.220.196.236:14223] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aaKPTrLWOogAgHGh62R2_gAAAYI"]
[Sat Feb 28 14:46:39.443205 2026] [:error] [pid 39185:tid 39247] [client 20.220.196.236:14172] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aaKPTxVE-FfM89u7BQYqGAAAAIE"]
[Sat Feb 28 14:46:40.868059 2026] [:error] [pid 52460:tid 52465] [client 20.220.196.236:14287] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aaKPULLWOogAgHGh62R3EgAAAYI"]
[Sat Feb 28 14:46:42.292941 2026] [:error] [pid 39185:tid 39267] [client 20.220.196.236:14106] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aaKPUhVE-FfM89u7BQYqIAAAAJU"]
[Sat Feb 28 14:46:43.716544 2026] [:error] [pid 39185:tid 39246] [client 20.220.196.236:14091] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aaKPUxVE-FfM89u7BQYqLgAAAIA"]
[Sat Feb 28 14:46:45.140162 2026] [:error] [pid 39183:tid 39196] [client 20.220.196.236:14304] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/commentv.php"] [unique_id "aaKPVRCf4HvhVePw3Lb5zwAAAAQ"]
[Sat Feb 28 14:46:46.577476 2026] [:error] [pid 52460:tid 52482] [client 20.220.196.236:14143] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaKPVrLWOogAgHGh62R3JwAAAZM"]
[Sat Feb 28 14:46:47.989878 2026] [:error] [pid 52460:tid 52463] [client 20.220.196.236:14169] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaKPV7LWOogAgHGh62R3LgAAAYA"]
[Sat Feb 28 14:46:49.415331 2026] [:error] [pid 52460:tid 52477] [client 20.220.196.236:14314] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaKPWbLWOogAgHGh62R3OwAAAY4"]
[Sat Feb 28 14:46:50.838186 2026] [:error] [pid 11791:tid 11813] [client 20.220.196.236:14289] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaKPWmuX5e1Q32gqxH1NowAAARQ"]
[Sat Feb 28 14:46:52.248723 2026] [:error] [pid 52460:tid 52464] [client 20.220.196.236:14335] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaKPXLLWOogAgHGh62R3RQAAAYE"]
[Sat Feb 28 14:46:53.670367 2026] [:error] [pid 39185:tid 39264] [client 20.220.196.236:14288] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaKPXRVE-FfM89u7BQYqbQAAAJI"]
[Sat Feb 28 14:46:55.094797 2026] [:error] [pid 52460:tid 52469] [client 20.220.196.236:14024] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaKPX7LWOogAgHGh62R3SgAAAYY"]
[Sat Feb 28 14:46:56.519589 2026] [:error] [pid 11791:tid 11805] [client 20.220.196.236:14254] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaKPYGuX5e1Q32gqxH1NqwAAAQw"]
[Sat Feb 28 14:47:03.933922 2026] [:error] [pid 39185:tid 39255] [client 20.220.196.236:14165] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "aaKPZxVE-FfM89u7BQYq6AAAAIk"]
[Sat Feb 28 14:47:05.354149 2026] [:error] [pid 39184:tid 39234] [client 20.220.196.236:14192] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "aaKPaVtZF9Zd_U7easDwHwAAAE8"]
[Sat Feb 28 14:47:06.776906 2026] [:error] [pid 39185:tid 39260] [client 20.220.196.236:14318] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "aaKPahVE-FfM89u7BQYq-QAAAI4"]
[Sat Feb 28 14:47:08.187245 2026] [:error] [pid 39185:tid 39266] [client 20.220.196.236:14291] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "aaKPbBVE-FfM89u7BQYrBAAAAJQ"]
[Sat Feb 28 14:47:09.610275 2026] [:error] [pid 39185:tid 39270] [client 20.220.196.236:14243] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aaKPbRVE-FfM89u7BQYrEAAAAJg"]
[Sat Feb 28 14:47:11.022869 2026] [:error] [pid 39185:tid 39262] [client 20.220.196.236:13956] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aaKPbxVE-FfM89u7BQYrLQAAAJA"]
[Sat Feb 28 14:47:12.442806 2026] [:error] [pid 39292:tid 39318] [client 20.220.196.236:14283] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aaKPcKIAO5fN7BxyqcHzQAAAANg"]
[Sat Feb 28 14:47:13.868812 2026] [:error] [pid 52460:tid 52478] [client 20.220.196.236:14266] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aaKPcbLWOogAgHGh62R3tQAAAY8"]
[Sat Feb 28 14:47:15.314530 2026] [:error] [pid 39184:tid 39235] [client 20.220.196.236:14016] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aaKPc1tZF9Zd_U7easDwKQAAAFA"]
[Sat Feb 28 14:47:16.732791 2026] [:error] [pid 39292:tid 39315] [client 20.220.196.236:14231] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aaKPdKIAO5fN7BxyqcHzRwAAANU"]
[Sat Feb 28 14:47:18.141718 2026] [:error] [pid 39185:tid 39264] [client 20.220.196.236:14306] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aaKPdhVE-FfM89u7BQYrXQAAAJI"]
[Sat Feb 28 14:47:19.566737 2026] [:error] [pid 11791:tid 11802] [client 20.220.196.236:14162] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aaKPd2uX5e1Q32gqxH1N1gAAAQk"]
[Sat Feb 28 14:47:20.991298 2026] [:error] [pid 11791:tid 11809] [client 20.220.196.236:14180] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aaKPeGuX5e1Q32gqxH1N3gAAARA"]
[Sat Feb 28 14:47:22.414554 2026] [:error] [pid 39185:tid 39263] [client 20.220.196.236:14140] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aaKPehVE-FfM89u7BQYrfgAAAJE"]
[Sat Feb 28 14:47:23.822993 2026] [:error] [pid 39185:tid 39257] [client 20.220.196.236:14322] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aaKPexVE-FfM89u7BQYrjgAAAIs"]
[Sat Feb 28 14:47:25.237100 2026] [:error] [pid 52460:tid 52467] [client 20.220.196.236:14320] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aaKPfbLWOogAgHGh62R30wAAAYQ"]
[Sat Feb 28 14:47:26.655543 2026] [:error] [pid 52460:tid 52474] [client 20.220.196.236:14102] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aaKPfrLWOogAgHGh62R31wAAAYs"]
[Sat Feb 28 14:47:28.067581 2026] [:error] [pid 39185:tid 39253] [client 20.220.196.236:14206] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aaKPgBVE-FfM89u7BQYrqAAAAIc"]
[Sat Feb 28 14:47:29.495441 2026] [:error] [pid 39183:tid 39213] [client 20.220.196.236:14249] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aaKPgRCf4HvhVePw3Lb56QAAABU"]
[Sat Feb 28 14:47:30.914918 2026] [:error] [pid 39185:tid 39247] [client 20.220.196.236:14242] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aaKPghVE-FfM89u7BQYrtgAAAIE"]
[Sat Feb 28 14:47:32.323948 2026] [:error] [pid 39292:tid 39303] [client 20.220.196.236:14241] [client 20.220.196.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaKPhKIAO5fN7BxyqcHzVQAAAMk"]
[Sat Feb 28 14:47:33.758769 2026] [:error] [pid 39183:tid 39212] [client 20.220.196.236:14229] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "aaKPhRCf4HvhVePw3Lb5_gAAABQ"]
[Sat Feb 28 14:47:35.172060 2026] [:error] [pid 39183:tid 39210] [client 20.220.196.236:14041] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "aaKPhxCf4HvhVePw3Lb6IgAAABI"]
[Sat Feb 28 14:47:36.585324 2026] [:error] [pid 11791:tid 11795] [client 20.220.196.236:14042] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "aaKPiGuX5e1Q32gqxH1N-wAAAQI"]
[Sat Feb 28 14:47:38.008064 2026] [:error] [pid 39185:tid 39263] [client 20.220.196.236:14187] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "aaKPihVE-FfM89u7BQYsCQAAAJE"]
[Sat Feb 28 14:47:39.433932 2026] [:error] [pid 39185:tid 39251] [client 20.220.196.236:14163] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/jane.php"] [unique_id "aaKPixVE-FfM89u7BQYsGwAAAIU"]
[Sat Feb 28 14:47:40.857551 2026] [:error] [pid 52460:tid 52485] [client 20.220.196.236:14270] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/jane.php"] [unique_id "aaKPjLLWOogAgHGh62R39wAAAZY"]
[Sat Feb 28 14:47:42.269308 2026] [:error] [pid 39185:tid 39259] [client 20.220.196.236:14315] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/jane.php"] [unique_id "aaKPjhVE-FfM89u7BQYsMQAAAI0"]
[Sat Feb 28 14:47:43.693145 2026] [:error] [pid 11791:tid 11810] [client 20.220.196.236:14274] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/jane.php"] [unique_id "aaKPj2uX5e1Q32gqxH1OAgAAARE"]
[Sat Feb 28 14:47:45.106553 2026] [:error] [pid 39185:tid 39256] [client 20.220.196.236:14326] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aaKPkRVE-FfM89u7BQYsTQAAAIo"]
[Sat Feb 28 14:47:46.527641 2026] [:error] [pid 39184:tid 39224] [client 20.220.196.236:14265] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aaKPkltZF9Zd_U7easDwNwAAAEU"]
[Sat Feb 28 14:47:47.946171 2026] [:error] [pid 11791:tid 11794] [client 20.220.196.236:14239] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aaKPk2uX5e1Q32gqxH1OCQAAAQE"]
[Sat Feb 28 14:47:49.366692 2026] [:error] [pid 52460:tid 52465] [client 20.220.196.236:14313] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/css.php"] [unique_id "aaKPlbLWOogAgHGh62R4DgAAAYI"]
[Sat Feb 28 14:47:50.779898 2026] [:error] [pid 22194:tid 22205] [client 20.220.196.236:14260] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aaKPln6mbajs3bzQGytbpQAAAUk"]
[Sat Feb 28 14:47:52.218200 2026] [:error] [pid 22194:tid 22218] [client 20.220.196.236:14182] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aaKPmH6mbajs3bzQGytbpwAAAVY"]
[Sat Feb 28 14:47:53.651342 2026] [:error] [pid 22194:tid 22207] [client 20.220.196.236:14146] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aaKPmX6mbajs3bzQGytbqgAAAUs"]
[Sat Feb 28 14:47:55.078903 2026] [:error] [pid 39185:tid 39256] [client 20.220.196.236:14213] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "aaKPmxVE-FfM89u7BQYsmAAAAIo"]
[Sat Feb 28 14:47:56.520541 2026] [:error] [pid 52460:tid 52465] [client 20.220.196.236:14301] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aaKPnLLWOogAgHGh62R4HQAAAYI"]
[Sat Feb 28 14:47:57.958274 2026] [:error] [pid 52460:tid 52483] [client 20.220.196.236:14222] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aaKPnbLWOogAgHGh62R4JAAAAZQ"]
[Sat Feb 28 14:47:59.390565 2026] [:error] [pid 39185:tid 39260] [client 20.220.196.236:14208] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aaKPnxVE-FfM89u7BQYstQAAAI4"]
[Sat Feb 28 14:48:00.815513 2026] [:error] [pid 39292:tid 39312] [client 20.220.196.236:14174] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aaKPoKIAO5fN7BxyqcHzjwAAANI"]
[Sat Feb 28 14:48:02.231295 2026] [:error] [pid 52460:tid 52485] [client 20.220.196.236:14251] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xxxx.php"] [unique_id "aaKPorLWOogAgHGh62R4KwAAAZY"]
[Sat Feb 28 14:48:09.832094 2026] [:error] [pid 39185:tid 39261] [client 20.220.196.236:14214] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aaKPqRVE-FfM89u7BQYs7wAAAI8"]
[Sat Feb 28 14:48:11.249194 2026] [:error] [pid 39292:tid 39305] [client 20.220.196.236:14175] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aaKPq6IAO5fN7BxyqcHzlAAAAMs"]
[Sat Feb 28 14:48:12.660660 2026] [:error] [pid 39292:tid 39310] [client 20.220.196.236:14333] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aaKPrKIAO5fN7BxyqcHzlQAAANA"]
[Sat Feb 28 14:48:14.082762 2026] [:error] [pid 39185:tid 39266] [client 20.220.196.236:14272] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/setup-config.php"] [unique_id "aaKPrhVE-FfM89u7BQYs-AAAAJQ"]
[Sat Feb 28 14:48:15.505348 2026] [:error] [pid 52460:tid 52486] [client 20.220.196.236:14036] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaKPr7LWOogAgHGh62R4OQAAAZc"]
[Sat Feb 28 14:48:16.913337 2026] [:error] [pid 11791:tid 11811] [client 20.220.196.236:14310] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaKPsGuX5e1Q32gqxH1OLQAAARI"]
[Sat Feb 28 14:48:18.341785 2026] [:error] [pid 39183:tid 39204] [client 20.220.196.236:14245] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaKPshCf4HvhVePw3Lb6OwAAAAw"]
[Sat Feb 28 14:48:19.760741 2026] [:error] [pid 52460:tid 52485] [client 20.220.196.236:14330] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aaKPs7LWOogAgHGh62R4OgAAAZY"]
[Sat Feb 28 14:48:21.183335 2026] [:error] [pid 39185:tid 39266] [client 20.220.196.236:14226] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaKPtRVE-FfM89u7BQYtGAAAAJQ"]
[Sat Feb 28 14:48:22.597080 2026] [:error] [pid 52460:tid 52466] [client 20.220.196.236:14181] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaKPtrLWOogAgHGh62R4QQAAAYM"]
[Sat Feb 28 14:48:26.039495 2026] [:error] [pid 52460:tid 52472] [client 20.220.196.236:14212] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaKPurLWOogAgHGh62R4SwAAAYk"]
[Sat Feb 28 14:48:27.449903 2026] [:error] [pid 11791:tid 11800] [client 20.220.196.236:14323] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/admin.php"] [unique_id "aaKPu2uX5e1Q32gqxH1ONwAAAQc"]
[Sat Feb 28 14:48:28.861820 2026] [:error] [pid 52460:tid 52476] [client 20.220.196.236:14085] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/init.php"] [unique_id "aaKPvLLWOogAgHGh62R4ZAAAAY0"]
[Sat Feb 28 14:48:30.284676 2026] [:error] [pid 39185:tid 39270] [client 20.220.196.236:14211] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/init.php"] [unique_id "aaKPvhVE-FfM89u7BQYtYgAAAJg"]
[Sat Feb 28 14:48:31.709439 2026] [:error] [pid 11791:tid 11809] [client 20.220.196.236:14173] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/init.php"] [unique_id "aaKPv2uX5e1Q32gqxH1OQAAAARA"]
[Sat Feb 28 14:48:33.132206 2026] [:error] [pid 39185:tid 39267] [client 20.220.196.236:14221] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/init.php"] [unique_id "aaKPwRVE-FfM89u7BQYteAAAAJU"]
[Sat Feb 28 14:48:34.542899 2026] [:error] [pid 39292:tid 39302] [client 20.220.196.236:14210] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaKPwqIAO5fN7BxyqcHznwAAAMg"]
[Sat Feb 28 14:48:35.955625 2026] [:error] [pid 39184:tid 39233] [client 20.220.196.236:14025] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaKPw1tZF9Zd_U7easDwvwAAAE4"]
[Sat Feb 28 14:48:37.383172 2026] [:error] [pid 52460:tid 52471] [client 20.220.196.236:14218] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaKPxbLWOogAgHGh62R4iwAAAYg"]
[Sat Feb 28 14:48:38.805432 2026] [:error] [pid 39185:tid 39254] [client 20.220.196.236:14234] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaKPxhVE-FfM89u7BQYtpgAAAIg"]
[Sat Feb 28 14:48:40.217300 2026] [:error] [pid 22194:tid 22205] [client 20.220.196.236:14149] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aaKPyH6mbajs3bzQGytclAAAAUk"]
[Sat Feb 28 14:48:41.642732 2026] [:error] [pid 39185:tid 39251] [client 20.220.196.236:14084] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aaKPyRVE-FfM89u7BQYtrgAAAIU"]
[Sat Feb 28 14:48:43.065745 2026] [:error] [pid 52460:tid 52486] [client 20.220.196.236:14334] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aaKPy7LWOogAgHGh62R4nAAAAZc"]
[Sat Feb 28 14:48:44.491951 2026] [:error] [pid 39292:tid 39318] [client 20.220.196.236:14319] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aaKPzKIAO5fN7BxyqcHzqQAAANg"]
[Sat Feb 28 14:48:45.914752 2026] [:error] [pid 11791:tid 11798] [client 20.220.196.236:14284] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "aaKPzWuX5e1Q32gqxH1OVQAAAQU"]
[Sat Feb 28 14:48:47.364813 2026] [:error] [pid 52460:tid 52482] [client 20.220.196.236:14293] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "aaKPz7LWOogAgHGh62R4owAAAZM"]
[Sat Feb 28 14:48:48.780477 2026] [:error] [pid 39185:tid 39246] [client 20.220.196.236:14145] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "aaKP0BVE-FfM89u7BQYtvAAAAIA"]
[Sat Feb 28 14:48:50.204508 2026] [:error] [pid 22194:tid 22203] [client 20.220.196.236:14308] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "aaKP0n6mbajs3bzQGytcnQAAAUc"]
[Sat Feb 28 14:48:51.628553 2026] [:error] [pid 39183:tid 39198] [client 20.220.196.236:14108] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/X7x.php"] [unique_id "aaKP0xCf4HvhVePw3Lb6QgAAAAY"]
[Sat Feb 28 14:48:53.042304 2026] [:error] [pid 11791:tid 11800] [client 20.220.196.236:14240] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/X7x.php"] [unique_id "aaKP1WuX5e1Q32gqxH1OYwAAAQc"]
[Sat Feb 28 14:48:54.456382 2026] [:error] [pid 39184:tid 39242] [client 20.220.196.236:14228] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/X7x.php"] [unique_id "aaKP1ltZF9Zd_U7easDwyQAAAFc"]
[Sat Feb 28 14:48:55.880275 2026] [:error] [pid 39292:tid 39300] [client 20.220.196.236:14297] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/X7x.php"] [unique_id "aaKP16IAO5fN7BxyqcHztgAAAMY"]
[Sat Feb 28 14:48:57.301996 2026] [:error] [pid 52460:tid 52470] [client 20.220.196.236:14178] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aaKP2bLWOogAgHGh62R4rgAAAYc"]
[Sat Feb 28 14:48:58.728970 2026] [:error] [pid 39184:tid 39236] [client 20.220.196.236:14120] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aaKP2ltZF9Zd_U7easDwzgAAAFE"]
[Sat Feb 28 14:49:00.154939 2026] [:error] [pid 39292:tid 39298] [client 20.220.196.236:14278] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aaKP3KIAO5fN7BxyqcHzugAAAMQ"]
[Sat Feb 28 14:49:01.577321 2026] [:error] [pid 52460:tid 52469] [client 20.220.196.236:14179] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aaKP3bLWOogAgHGh62R4sgAAAYY"]
[Sat Feb 28 14:49:02.999090 2026] [:error] [pid 22194:tid 22207] [client 20.220.196.236:14144] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/plss3.php"] [unique_id "aaKP3n6mbajs3bzQGytcpgAAAUs"]
[Sat Feb 28 14:49:04.418905 2026] [:error] [pid 22194:tid 22215] [client 20.220.196.236:14280] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/plss3.php"] [unique_id "aaKP4H6mbajs3bzQGytcsAAAAVM"]
[Sat Feb 28 14:49:05.833400 2026] [:error] [pid 39185:tid 39269] [client 20.220.196.236:14152] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/plss3.php"] [unique_id "aaKP4RVE-FfM89u7BQYt1QAAAJc"]
[Sat Feb 28 14:49:07.258670 2026] [:error] [pid 11791:tid 11815] [client 20.220.196.236:14232] [client 20.220.196.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/plss3.php"] [unique_id "aaKP42uX5e1Q32gqxH1OeAAAARY"]
[Sat Feb 28 14:49:14.954301 2026] [:error] [pid 52460:tid 52484] [client 20.220.196.236:14227] [client 20.220.196.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaKP6rLWOogAgHGh62R4yQAAAZU"]
[Sat Feb 28 18:47:01.864803 2026] [:error] [pid 39292:tid 39309] [client 20.220.212.70:30081] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaLHpaIAO5fN7BxyqcFJRwAAAM8"]
[Sat Feb 28 18:47:02.711129 2026] [:error] [pid 49763:tid 49785] [client 20.220.212.70:30089] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaLHprTHSOG_yf2PpqF8BQAAAdM"]
[Sat Feb 28 18:47:03.568991 2026] [:error] [pid 39183:tid 39193] [client 20.220.212.70:30246] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaLHpxCf4HvhVePw3LaZzAAAAAE"]
[Sat Feb 28 18:47:04.418151 2026] [:error] [pid 49763:tid 49768] [client 20.220.212.70:30208] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaLHqLTHSOG_yf2PpqF8EwAAAcI"]
[Sat Feb 28 19:30:58.056156 2026] [:error] [pid 49763:tid 49773] [client 45.153.34.31:33412] [client 45.153.34.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aaLR8rTHSOG_yf2PpqHGgAAAAcc"]
[Sat Feb 28 20:18:31.402403 2026] [:error] [pid 11791:tid 11814] [client 20.220.13.5:20557] [client 20.220.13.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaLdF2uX5e1Q32gqxH21zgAAARU"]
[Sat Feb 28 20:18:32.926819 2026] [:error] [pid 11791:tid 11800] [client 20.220.13.5:20601] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/"] [unique_id "aaLdGGuX5e1Q32gqxH212AAAAQc"]
[Sat Feb 28 20:18:33.773908 2026] [:error] [pid 49763:tid 49766] [client 20.220.13.5:20570] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/"] [unique_id "aaLdGbTHSOG_yf2PpqEapgAAAcA"]
[Sat Feb 28 20:18:34.619849 2026] [:error] [pid 39184:tid 39235] [client 20.220.13.5:64045] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/"] [unique_id "aaLdGltZF9Zd_U7easCi8wAAAFA"]
[Sat Feb 28 20:18:35.452239 2026] [:error] [pid 39292:tid 39312] [client 20.220.13.5:64047] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/"] [unique_id "aaLdG6IAO5fN7BxyqcFo6wAAANI"]
[Sat Feb 28 20:18:50.698065 2026] [:error] [pid 22194:tid 22210] [client 40.85.218.222:40520] [client 40.85.218.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wk/index.php"] [unique_id "aaLdKn6mbajs3bzQGyuX7QAAAU4"]
[Sat Feb 28 20:18:51.538008 2026] [:error] [pid 39183:tid 39207] [client 40.85.218.222:60929] [client 40.85.218.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wk/index.php"] [unique_id "aaLdKxCf4HvhVePw3LYKPwAAAA8"]
[Sat Feb 28 20:18:52.383934 2026] [:error] [pid 22194:tid 22211] [client 40.85.218.222:3352] [client 40.85.218.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wk/index.php"] [unique_id "aaLdLH6mbajs3bzQGyuX9wAAAU8"]
[Sat Feb 28 20:18:53.246533 2026] [:error] [pid 49763:tid 49783] [client 40.85.218.222:3420] [client 40.85.218.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wk/index.php"] [unique_id "aaLdLbTHSOG_yf2PpqEbYgAAAdE"]
[Sat Feb 28 20:31:17.919903 2026] [:error] [pid 39183:tid 39197] [client 20.220.212.70:29504] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaLgFRCf4HvhVePw3LYWfwAAAAU"]
[Sat Feb 28 20:31:18.766176 2026] [:error] [pid 49763:tid 49766] [client 20.220.212.70:29548] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaLgFrTHSOG_yf2PpqErdQAAAcA"]
[Sat Feb 28 20:31:19.589095 2026] [:error] [pid 52460:tid 52475] [client 20.220.212.70:29520] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaLgF7LWOogAgHGh62RjcQAAAYw"]
[Sat Feb 28 20:31:20.433527 2026] [:error] [pid 52460:tid 52472] [client 20.220.212.70:29561] [client 20.220.212.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaLgGLLWOogAgHGh62RjdwAAAYk"]
[Sat Feb 28 21:34:24.540463 2026] [:error] [pid 49763:tid 49788] [client 20.151.2.242:62100] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fetch.php"] [unique_id "aaLu4LTHSOG_yf2PpqGBcgAAAdY"]
[Sat Feb 28 21:34:24.964194 2026] [:error] [pid 49763:tid 49784] [client 20.151.2.242:62169] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fetch.php"] [unique_id "aaLu4LTHSOG_yf2PpqGBewAAAdI"]
[Sat Feb 28 21:34:25.385896 2026] [:error] [pid 39183:tid 39203] [client 20.151.2.242:62164] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fetch.php"] [unique_id "aaLu4RCf4HvhVePw3LZWogAAAAs"]
[Sat Feb 28 21:34:25.896812 2026] [:error] [pid 39183:tid 39199] [client 20.151.2.242:62109] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fetch.php"] [unique_id "aaLu4RCf4HvhVePw3LZWqwAAAAc"]
[Sat Feb 28 21:34:26.430213 2026] [:error] [pid 52460:tid 52485] [client 20.151.2.242:62182] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aaLu4rLWOogAgHGh62SUoAAAAZY"]
[Sat Feb 28 21:34:26.953077 2026] [:error] [pid 52460:tid 52469] [client 20.151.2.242:62191] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aaLu4rLWOogAgHGh62SUpAAAAYY"]
[Sat Feb 28 21:34:27.492106 2026] [:error] [pid 49763:tid 49779] [client 20.151.2.242:62106] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aaLu47THSOG_yf2PpqGBkQAAAc0"]
[Sat Feb 28 21:34:28.439735 2026] [:error] [pid 39184:tid 39234] [client 20.151.2.242:62186] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aaLu5FtZF9Zd_U7easDKnAAAAE8"]
[Sat Feb 28 21:34:28.987700 2026] [:error] [pid 49763:tid 49783] [client 20.151.2.242:62154] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aaLu5LTHSOG_yf2PpqGBoAAAAdE"]
[Sat Feb 28 21:34:29.402966 2026] [:error] [pid 49763:tid 49774] [client 20.151.2.242:62184] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aaLu5bTHSOG_yf2PpqGBogAAAcg"]
[Sat Feb 28 21:34:29.936785 2026] [:error] [pid 39184:tid 39241] [client 20.151.2.242:62116] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aaLu5VtZF9Zd_U7easDKowAAAFY"]
[Sat Feb 28 21:34:30.407348 2026] [:error] [pid 39183:tid 39214] [client 20.151.2.242:62130] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aaLu5hCf4HvhVePw3LZWxwAAABY"]
[Sat Feb 28 21:34:30.932699 2026] [:error] [pid 11791:tid 11802] [client 20.151.2.242:62180] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f.PhP7"] [unique_id "aaLu5muX5e1Q32gqxH3KcAAAAQk"]
[Sat Feb 28 21:34:31.706640 2026] [:error] [pid 49763:tid 49790] [client 20.151.2.242:62206] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f.PhP7"] [unique_id "aaLu57THSOG_yf2PpqGBtgAAAdg"]
[Sat Feb 28 21:34:32.186984 2026] [:error] [pid 39292:tid 39297] [client 20.151.2.242:62179] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f.PhP7"] [unique_id "aaLu6KIAO5fN7BxyqcGDuwAAAMM"]
[Sat Feb 28 21:34:32.797666 2026] [:error] [pid 39183:tid 39212] [client 20.151.2.242:62097] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f.PhP7"] [unique_id "aaLu6BCf4HvhVePw3LZW2AAAABQ"]
[Sat Feb 28 21:34:33.284295 2026] [:error] [pid 39183:tid 39216] [client 20.151.2.242:62198] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aaLu6RCf4HvhVePw3LZW4wAAABg"]
[Sat Feb 28 21:34:33.738474 2026] [:error] [pid 52460:tid 52485] [client 20.151.2.242:62094] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aaLu6bLWOogAgHGh62SUsgAAAZY"]
[Sat Feb 28 21:34:34.188551 2026] [:error] [pid 39183:tid 39195] [client 20.151.2.242:62158] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aaLu6hCf4HvhVePw3LZW8QAAAAM"]
[Sat Feb 28 21:34:34.623656 2026] [:error] [pid 39183:tid 39202] [client 20.151.2.242:62081] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aaLu6hCf4HvhVePw3LZW9gAAAAo"]
[Sat Feb 28 21:34:35.081797 2026] [:error] [pid 39184:tid 39235] [client 20.151.2.242:62136] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "aaLu61tZF9Zd_U7easDKrwAAAFA"]
[Sat Feb 28 21:34:35.539926 2026] [:error] [pid 39184:tid 39223] [client 20.151.2.242:62133] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "aaLu61tZF9Zd_U7easDKswAAAEQ"]
[Sat Feb 28 21:34:36.057742 2026] [:error] [pid 49763:tid 49784] [client 20.151.2.242:62175] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "aaLu7LTHSOG_yf2PpqGBzwAAAdI"]
[Sat Feb 28 21:34:36.570636 2026] [:error] [pid 49763:tid 49775] [client 20.151.2.242:62160] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "aaLu7LTHSOG_yf2PpqGB1QAAAck"]
[Sat Feb 28 21:34:37.022854 2026] [:error] [pid 49763:tid 49789] [client 20.151.2.242:62183] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/pp.php"] [unique_id "aaLu7bTHSOG_yf2PpqGB3QAAAdc"]
[Sat Feb 28 21:34:37.460546 2026] [:error] [pid 49763:tid 49786] [client 20.151.2.242:62090] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/pp.php"] [unique_id "aaLu7bTHSOG_yf2PpqGB4gAAAdQ"]
[Sat Feb 28 21:34:37.894114 2026] [:error] [pid 49763:tid 49771] [client 20.151.2.242:62144] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/pp.php"] [unique_id "aaLu7bTHSOG_yf2PpqGB6gAAAcU"]
[Sat Feb 28 21:34:38.349129 2026] [:error] [pid 49763:tid 49789] [client 20.151.2.242:62150] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/pp.php"] [unique_id "aaLu7rTHSOG_yf2PpqGB7AAAAdc"]
[Sat Feb 28 21:34:38.829979 2026] [:error] [pid 49763:tid 49774] [client 20.151.2.242:62124] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/trx24.php"] [unique_id "aaLu7rTHSOG_yf2PpqGB8QAAAcg"]
[Sat Feb 28 21:34:39.262812 2026] [:error] [pid 49763:tid 49773] [client 20.151.2.242:62172] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/trx24.php"] [unique_id "aaLu77THSOG_yf2PpqGB9wAAAcc"]
[Sat Feb 28 21:34:39.685465 2026] [:error] [pid 39292:tid 39303] [client 20.151.2.242:62121] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/trx24.php"] [unique_id "aaLu76IAO5fN7BxyqcGDvwAAAMk"]
[Sat Feb 28 21:34:40.113625 2026] [:error] [pid 39183:tid 39203] [client 20.151.2.242:62085] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/trx24.php"] [unique_id "aaLu8BCf4HvhVePw3LZXAgAAAAs"]
[Sat Feb 28 21:34:40.575149 2026] [:error] [pid 39185:tid 39265] [client 20.151.2.242:62177] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "aaLu8BVE-FfM89u7BQalqgAAAJM"]
[Sat Feb 28 21:34:40.993481 2026] [:error] [pid 39183:tid 39207] [client 20.151.2.242:62125] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "aaLu8BCf4HvhVePw3LZXBQAAAA8"]
[Sat Feb 28 21:34:41.527996 2026] [:error] [pid 49763:tid 49790] [client 20.151.2.242:62153] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "aaLu8bTHSOG_yf2PpqGCBAAAAdg"]
[Sat Feb 28 21:34:42.102581 2026] [:error] [pid 49763:tid 49772] [client 20.151.2.242:62178] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "aaLu8rTHSOG_yf2PpqGCBgAAAcY"]
[Sat Feb 28 21:34:42.765984 2026] [:error] [pid 52460:tid 52479] [client 20.151.2.242:62135] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/advanc.php"] [unique_id "aaLu8rLWOogAgHGh62SUugAAAZA"]
[Sat Feb 28 21:34:43.351947 2026] [:error] [pid 39183:tid 39209] [client 20.151.2.242:62089] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/advanc.php"] [unique_id "aaLu8xCf4HvhVePw3LZXFAAAABE"]
[Sat Feb 28 21:34:44.181908 2026] [:error] [pid 39292:tid 39296] [client 20.151.2.242:62192] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/advanc.php"] [unique_id "aaLu9KIAO5fN7BxyqcGDwAAAAMI"]
[Sat Feb 28 21:34:44.979289 2026] [:error] [pid 39184:tid 39243] [client 20.151.2.242:62155] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/advanc.php"] [unique_id "aaLu9FtZF9Zd_U7easDKwQAAAFg"]
[Sat Feb 28 21:34:45.467502 2026] [:error] [pid 39184:tid 39234] [client 20.151.2.242:62111] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aaLu9VtZF9Zd_U7easDKwwAAAE8"]
[Sat Feb 28 21:34:46.533819 2026] [:error] [pid 49763:tid 49779] [client 20.151.2.242:62151] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aaLu9rTHSOG_yf2PpqGCKwAAAc0"]
[Sat Feb 28 21:34:47.105902 2026] [:error] [pid 52460:tid 52485] [client 20.151.2.242:62162] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aaLu97LWOogAgHGh62SU3wAAAZY"]
[Sat Feb 28 21:34:47.561417 2026] [:error] [pid 49763:tid 49775] [client 20.151.2.242:62194] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aaLu97THSOG_yf2PpqGCOgAAAck"]
[Sat Feb 28 21:34:47.996183 2026] [:error] [pid 22194:tid 22211] [client 20.151.2.242:62084] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ftyude.php"] [unique_id "aaLu936mbajs3bzQGyuokQAAAU8"]
[Sat Feb 28 21:34:48.433547 2026] [:error] [pid 52460:tid 52485] [client 20.151.2.242:59165] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ftyude.php"] [unique_id "aaLu-LLWOogAgHGh62SU8gAAAZY"]
[Sat Feb 28 21:34:49.183189 2026] [:error] [pid 52460:tid 52474] [client 20.151.2.242:62114] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ftyude.php"] [unique_id "aaLu-bLWOogAgHGh62SU-gAAAYs"]
[Sat Feb 28 21:34:49.785520 2026] [:error] [pid 52460:tid 52468] [client 20.151.2.242:62115] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ftyude.php"] [unique_id "aaLu-bLWOogAgHGh62SVAAAAAYU"]
[Sat Feb 28 21:34:50.300586 2026] [:error] [pid 52460:tid 52484] [client 20.151.2.242:62174] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xy.php"] [unique_id "aaLu-rLWOogAgHGh62SVBwAAAZU"]
[Sat Feb 28 21:34:50.750235 2026] [:error] [pid 49763:tid 49774] [client 20.151.2.242:62147] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xy.php"] [unique_id "aaLu-rTHSOG_yf2PpqGCTwAAAcg"]
[Sat Feb 28 21:34:51.244126 2026] [:error] [pid 49763:tid 49769] [client 20.151.2.242:62161] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xy.php"] [unique_id "aaLu-7THSOG_yf2PpqGCVQAAAcM"]
[Sat Feb 28 21:34:51.818626 2026] [:error] [pid 49763:tid 49767] [client 20.151.2.242:62132] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xy.php"] [unique_id "aaLu-7THSOG_yf2PpqGCWwAAAcE"]
[Sat Feb 28 21:34:52.488439 2026] [:error] [pid 39183:tid 39202] [client 20.151.2.242:62202] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tox.php"] [unique_id "aaLu_BCf4HvhVePw3LZXOQAAAAo"]
[Sat Feb 28 21:34:53.030948 2026] [:error] [pid 49763:tid 49777] [client 20.151.2.242:62126] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tox.php"] [unique_id "aaLu_bTHSOG_yf2PpqGCYgAAAcs"]
[Sat Feb 28 21:34:53.491564 2026] [:error] [pid 39185:tid 39267] [client 20.151.2.242:62204] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tox.php"] [unique_id "aaLu_RVE-FfM89u7BQalrAAAAJU"]
[Sat Feb 28 21:34:54.002967 2026] [:error] [pid 49763:tid 49771] [client 20.151.2.242:62099] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tox.php"] [unique_id "aaLu_rTHSOG_yf2PpqGCbQAAAcU"]
[Sat Feb 28 21:34:54.487178 2026] [:error] [pid 49763:tid 49782] [client 20.151.2.242:59137] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vgtyu.php"] [unique_id "aaLu_rTHSOG_yf2PpqGCcwAAAdA"]
[Sat Feb 28 21:34:55.078819 2026] [:error] [pid 49763:tid 49775] [client 20.151.2.242:62103] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vgtyu.php"] [unique_id "aaLu_7THSOG_yf2PpqGCfAAAAck"]
[Sat Feb 28 21:34:55.504331 2026] [:error] [pid 49763:tid 49779] [client 20.151.2.242:62118] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vgtyu.php"] [unique_id "aaLu_7THSOG_yf2PpqGCggAAAc0"]
[Sat Feb 28 21:34:56.001296 2026] [:error] [pid 49763:tid 49769] [client 20.151.2.242:62156] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vgtyu.php"] [unique_id "aaLvALTHSOG_yf2PpqGChQAAAcM"]
[Sat Feb 28 21:34:56.441107 2026] [:error] [pid 49763:tid 49767] [client 20.151.2.242:62138] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sxdfrt.php"] [unique_id "aaLvALTHSOG_yf2PpqGCkwAAAcE"]
[Sat Feb 28 21:34:56.938160 2026] [:error] [pid 49763:tid 49774] [client 20.151.2.242:59072] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sxdfrt.php"] [unique_id "aaLvALTHSOG_yf2PpqGCnAAAAcg"]
[Sat Feb 28 21:34:57.376828 2026] [:error] [pid 49763:tid 49788] [client 20.151.2.242:62173] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sxdfrt.php"] [unique_id "aaLvAbTHSOG_yf2PpqGCoQAAAdY"]
[Sat Feb 28 21:34:57.915628 2026] [:error] [pid 39183:tid 39200] [client 20.151.2.242:62104] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sxdfrt.php"] [unique_id "aaLvARCf4HvhVePw3LZXSwAAAAg"]
[Sat Feb 28 21:34:58.345905 2026] [:error] [pid 39183:tid 39199] [client 20.151.2.242:62157] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-x.php"] [unique_id "aaLvAhCf4HvhVePw3LZXTQAAAAc"]
[Sat Feb 28 21:34:58.895759 2026] [:error] [pid 49763:tid 49769] [client 20.151.2.242:62152] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-x.php"] [unique_id "aaLvArTHSOG_yf2PpqGCvAAAAcM"]
[Sat Feb 28 21:34:59.395777 2026] [:error] [pid 39292:tid 39314] [client 20.151.2.242:62080] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-x.php"] [unique_id "aaLvA6IAO5fN7BxyqcGDyAAAANQ"]
[Sat Feb 28 21:35:00.163736 2026] [:error] [pid 39183:tid 39201] [client 20.151.2.242:62159] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-x.php"] [unique_id "aaLvBBCf4HvhVePw3LZXVAAAAAk"]
[Sat Feb 28 21:35:00.867956 2026] [:error] [pid 52460:tid 52466] [client 20.151.2.242:62127] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aaLvBLLWOogAgHGh62SVSQAAAYM"]
[Sat Feb 28 21:35:01.344079 2026] [:error] [pid 52460:tid 52469] [client 20.151.2.242:59161] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aaLvBbLWOogAgHGh62SVTQAAAYY"]
[Sat Feb 28 21:35:01.847529 2026] [:error] [pid 52460:tid 52475] [client 20.151.2.242:62093] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aaLvBbLWOogAgHGh62SVUwAAAYw"]
[Sat Feb 28 21:35:02.485615 2026] [:error] [pid 39292:tid 39299] [client 20.151.2.242:62110] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aaLvBqIAO5fN7BxyqcGDygAAAMU"]
[Sat Feb 28 21:35:03.044813 2026] [:error] [pid 39292:tid 39308] [client 20.151.2.242:59149] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asd67.php"] [unique_id "aaLvB6IAO5fN7BxyqcGDzAAAAM4"]
[Sat Feb 28 21:35:03.564325 2026] [:error] [pid 39184:tid 39232] [client 20.151.2.242:62145] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asd67.php"] [unique_id "aaLvB1tZF9Zd_U7easDK4wAAAE0"]
[Sat Feb 28 21:35:04.138697 2026] [:error] [pid 52460:tid 52470] [client 20.151.2.242:62082] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asd67.php"] [unique_id "aaLvCLLWOogAgHGh62SVZAAAAYc"]
[Sat Feb 28 21:35:04.708988 2026] [:error] [pid 52460:tid 52487] [client 20.151.2.242:62188] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asd67.php"] [unique_id "aaLvCLLWOogAgHGh62SVaQAAAZg"]
[Sat Feb 28 21:35:05.260536 2026] [:error] [pid 39292:tid 39296] [client 20.151.2.242:59169] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zr.php"] [unique_id "aaLvCaIAO5fN7BxyqcGD0wAAAMI"]
[Sat Feb 28 21:35:05.694551 2026] [:error] [pid 11791:tid 11794] [client 20.151.2.242:62131] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zr.php"] [unique_id "aaLvCWuX5e1Q32gqxH3KewAAAQE"]
[Sat Feb 28 21:35:06.388565 2026] [:error] [pid 52460:tid 52478] [client 20.151.2.242:59197] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zr.php"] [unique_id "aaLvCrLWOogAgHGh62SVgQAAAY8"]
[Sat Feb 28 21:35:06.843053 2026] [:error] [pid 52460:tid 52473] [client 20.151.2.242:62196] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zr.php"] [unique_id "aaLvCrLWOogAgHGh62SViwAAAYo"]
[Sat Feb 28 21:35:07.515352 2026] [:error] [pid 49763:tid 49784] [client 20.151.2.242:59090] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aaLvC7THSOG_yf2PpqGC7QAAAdI"]
[Sat Feb 28 21:35:08.101186 2026] [:error] [pid 11791:tid 11809] [client 20.151.2.242:59197] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aaLvDGuX5e1Q32gqxH3KfQAAARA"]
[Sat Feb 28 21:35:08.754959 2026] [:error] [pid 39292:tid 39300] [client 20.151.2.242:62086] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aaLvDKIAO5fN7BxyqcGD1gAAAMY"]
[Sat Feb 28 21:35:09.315652 2026] [:error] [pid 22194:tid 22201] [client 20.151.2.242:59105] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aaLvDX6mbajs3bzQGyuonAAAAUU"]
[Sat Feb 28 21:35:09.907978 2026] [:error] [pid 11791:tid 11813] [client 20.151.2.242:62203] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1a.php"] [unique_id "aaLvDWuX5e1Q32gqxH3KgwAAARQ"]
[Sat Feb 28 21:35:10.414305 2026] [:error] [pid 39184:tid 39231] [client 20.151.2.242:62128] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1a.php"] [unique_id "aaLvDltZF9Zd_U7easDK8gAAAEw"]
[Sat Feb 28 21:35:10.894170 2026] [:error] [pid 11791:tid 11795] [client 20.151.2.242:62199] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1a.php"] [unique_id "aaLvDmuX5e1Q32gqxH3KhwAAAQI"]
[Sat Feb 28 21:35:11.399784 2026] [:error] [pid 39292:tid 39299] [client 20.151.2.242:59144] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1a.php"] [unique_id "aaLvD6IAO5fN7BxyqcGD3QAAAMU"]
[Sat Feb 28 21:35:11.818874 2026] [:error] [pid 11791:tid 11808] [client 20.151.2.242:59162] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/moshou.php"] [unique_id "aaLvD2uX5e1Q32gqxH3KjAAAAQ8"]
[Sat Feb 28 21:35:12.235059 2026] [:error] [pid 39183:tid 39205] [client 20.151.2.242:62105] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/moshou.php"] [unique_id "aaLvEBCf4HvhVePw3LZXjQAAAA0"]
[Sat Feb 28 21:35:12.702042 2026] [:error] [pid 49763:tid 49767] [client 20.151.2.242:62139] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/moshou.php"] [unique_id "aaLvELTHSOG_yf2PpqGDBgAAAcE"]
[Sat Feb 28 21:35:13.197937 2026] [:error] [pid 49763:tid 49783] [client 20.151.2.242:62149] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/moshou.php"] [unique_id "aaLvEbTHSOG_yf2PpqGDCQAAAdE"]
[Sat Feb 28 21:35:13.645827 2026] [:error] [pid 49763:tid 49770] [client 20.151.2.242:62195] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/leu.php"] [unique_id "aaLvEbTHSOG_yf2PpqGDEAAAAcQ"]
[Sat Feb 28 21:35:14.099266 2026] [:error] [pid 49763:tid 49772] [client 20.151.2.242:62200] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/leu.php"] [unique_id "aaLvErTHSOG_yf2PpqGDEwAAAcY"]
[Sat Feb 28 21:35:14.569666 2026] [:error] [pid 39292:tid 39313] [client 20.151.2.242:62165] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/leu.php"] [unique_id "aaLvEqIAO5fN7BxyqcGD4gAAANM"]
[Sat Feb 28 21:35:15.012735 2026] [:error] [pid 49763:tid 49769] [client 20.151.2.242:59147] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/leu.php"] [unique_id "aaLvE7THSOG_yf2PpqGDHAAAAcM"]
[Sat Feb 28 21:35:15.438628 2026] [:error] [pid 49763:tid 49770] [client 20.151.2.242:59093] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mh.php"] [unique_id "aaLvE7THSOG_yf2PpqGDHgAAAcQ"]
[Sat Feb 28 21:35:15.885953 2026] [:error] [pid 39185:tid 39266] [client 20.151.2.242:59194] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mh.php"] [unique_id "aaLvExVE-FfM89u7BQaltAAAAJQ"]
[Sat Feb 28 21:35:16.407571 2026] [:error] [pid 49763:tid 49788] [client 20.151.2.242:59138] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mh.php"] [unique_id "aaLvFLTHSOG_yf2PpqGDJQAAAdY"]
[Sat Feb 28 21:35:16.864192 2026] [:error] [pid 52460:tid 52471] [client 20.151.2.242:62087] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mh.php"] [unique_id "aaLvFLLWOogAgHGh62SVrQAAAYg"]
[Sat Feb 28 21:35:17.289690 2026] [:error] [pid 49763:tid 49768] [client 20.151.2.242:62096] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aaLvFbTHSOG_yf2PpqGDLAAAAcI"]
[Sat Feb 28 21:35:17.708246 2026] [:error] [pid 49763:tid 49789] [client 20.151.2.242:59170] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aaLvFbTHSOG_yf2PpqGDLwAAAdc"]
[Sat Feb 28 21:35:18.133810 2026] [:error] [pid 49763:tid 49774] [client 20.151.2.242:62134] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aaLvFrTHSOG_yf2PpqGDOAAAAcg"]
[Sat Feb 28 21:35:18.569135 2026] [:error] [pid 49763:tid 49767] [client 20.151.2.242:59080] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aaLvFrTHSOG_yf2PpqGDPgAAAcE"]
[Sat Feb 28 21:35:19.025070 2026] [:error] [pid 49763:tid 49790] [client 20.151.2.242:62098] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mon.php"] [unique_id "aaLvF7THSOG_yf2PpqGDRAAAAdg"]
[Sat Feb 28 21:35:19.445803 2026] [:error] [pid 49763:tid 49782] [client 20.151.2.242:62197] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mon.php"] [unique_id "aaLvF7THSOG_yf2PpqGDSgAAAdA"]
[Sat Feb 28 21:35:19.882208 2026] [:error] [pid 49763:tid 49773] [client 20.151.2.242:59087] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mon.php"] [unique_id "aaLvF7THSOG_yf2PpqGDUwAAAcc"]
[Sat Feb 28 21:35:20.291303 2026] [:error] [pid 52460:tid 52473] [client 20.151.2.242:59175] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mon.php"] [unique_id "aaLvGLLWOogAgHGh62SVsAAAAYo"]
[Sat Feb 28 21:35:20.701704 2026] [:error] [pid 52460:tid 52481] [client 20.151.2.242:59152] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yas.php"] [unique_id "aaLvGLLWOogAgHGh62SVswAAAZI"]
[Sat Feb 28 21:35:21.121261 2026] [:error] [pid 52460:tid 52467] [client 20.151.2.242:59173] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yas.php"] [unique_id "aaLvGbLWOogAgHGh62SVtQAAAYQ"]
[Sat Feb 28 21:35:21.577189 2026] [:error] [pid 39184:tid 39237] [client 20.151.2.242:59073] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yas.php"] [unique_id "aaLvGVtZF9Zd_U7easDLAAAAAFI"]
[Sat Feb 28 21:35:21.996140 2026] [:error] [pid 52460:tid 52486] [client 20.151.2.242:59159] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yas.php"] [unique_id "aaLvGbLWOogAgHGh62SVuwAAAZc"]
[Sat Feb 28 21:35:22.413242 2026] [:error] [pid 39183:tid 39203] [client 20.151.2.242:59157] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aaLvGhCf4HvhVePw3LZXsAAAAAs"]
[Sat Feb 28 21:35:22.831846 2026] [:error] [pid 49763:tid 49787] [client 20.151.2.242:62108] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aaLvGrTHSOG_yf2PpqGDYQAAAdU"]
[Sat Feb 28 21:35:23.258843 2026] [:error] [pid 52460:tid 52482] [client 20.151.2.242:59115] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aaLvG7LWOogAgHGh62SVwQAAAZM"]
[Sat Feb 28 21:35:23.727852 2026] [:error] [pid 52460:tid 52474] [client 20.151.2.242:59167] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aaLvG7LWOogAgHGh62SVwgAAAYs"]
[Sat Feb 28 21:35:30.524712 2026] [:error] [pid 39183:tid 39194] [client 20.151.2.242:59149] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yaiid.php"] [unique_id "aaLvIhCf4HvhVePw3LZX2gAAAAI"]
[Sat Feb 28 21:35:30.942979 2026] [:error] [pid 39183:tid 39198] [client 20.151.2.242:59131] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yaiid.php"] [unique_id "aaLvIhCf4HvhVePw3LZX3QAAAAY"]
[Sat Feb 28 21:35:31.374562 2026] [:error] [pid 52460:tid 52471] [client 20.151.2.242:59141] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yaiid.php"] [unique_id "aaLvI7LWOogAgHGh62SV5AAAAYg"]
[Sat Feb 28 21:35:31.852933 2026] [:error] [pid 49763:tid 49777] [client 20.151.2.242:62119] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yaiid.php"] [unique_id "aaLvI7THSOG_yf2PpqGDiQAAAcs"]
[Sat Feb 28 21:35:32.293091 2026] [:error] [pid 11791:tid 11809] [client 20.151.2.242:59109] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ww.php"] [unique_id "aaLvJGuX5e1Q32gqxH3KkQAAARA"]
[Sat Feb 28 21:35:32.725585 2026] [:error] [pid 39184:tid 39236] [client 20.151.2.242:59151] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ww.php"] [unique_id "aaLvJFtZF9Zd_U7easDLDwAAAFE"]
[Sat Feb 28 21:35:33.198032 2026] [:error] [pid 39184:tid 39232] [client 20.151.2.242:59083] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ww.php"] [unique_id "aaLvJVtZF9Zd_U7easDLEgAAAE0"]
[Sat Feb 28 21:35:33.640481 2026] [:error] [pid 49763:tid 49770] [client 20.151.2.242:59171] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ww.php"] [unique_id "aaLvJbTHSOG_yf2PpqGDiwAAAcQ"]
[Sat Feb 28 21:35:34.064536 2026] [:error] [pid 52460:tid 52465] [client 20.151.2.242:59192] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x12.php"] [unique_id "aaLvJrLWOogAgHGh62SV7wAAAYI"]
[Sat Feb 28 21:35:34.532717 2026] [:error] [pid 49763:tid 49767] [client 20.151.2.242:62137] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x12.php"] [unique_id "aaLvJrTHSOG_yf2PpqGDjQAAAcE"]
[Sat Feb 28 21:35:34.974270 2026] [:error] [pid 39183:tid 39205] [client 20.151.2.242:62166] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x12.php"] [unique_id "aaLvJhCf4HvhVePw3LZX5QAAAA0"]
[Sat Feb 28 21:35:35.418765 2026] [:error] [pid 39185:tid 39248] [client 20.151.2.242:62190] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x12.php"] [unique_id "aaLvJxVE-FfM89u7BQaluQAAAII"]
[Sat Feb 28 21:35:35.854418 2026] [:error] [pid 39183:tid 39213] [client 20.151.2.242:62181] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fz.php"] [unique_id "aaLvJxCf4HvhVePw3LZX6QAAABU"]
[Sat Feb 28 21:35:36.273813 2026] [:error] [pid 39183:tid 39196] [client 20.151.2.242:62193] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fz.php"] [unique_id "aaLvKBCf4HvhVePw3LZX7AAAAAQ"]
[Sat Feb 28 21:35:36.720269 2026] [:error] [pid 39183:tid 39212] [client 20.151.2.242:62201] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fz.php"] [unique_id "aaLvKBCf4HvhVePw3LZX7QAAABQ"]
[Sat Feb 28 21:35:37.173824 2026] [:error] [pid 49763:tid 49785] [client 20.151.2.242:59184] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fz.php"] [unique_id "aaLvKbTHSOG_yf2PpqGDpQAAAdM"]
[Sat Feb 28 21:35:37.613125 2026] [:error] [pid 52460:tid 52482] [client 20.151.2.242:6749] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Jcrop.php"] [unique_id "aaLvKbLWOogAgHGh62SV-wAAAZM"]
[Sat Feb 28 21:35:38.063147 2026] [:error] [pid 39183:tid 39214] [client 20.151.2.242:59145] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Jcrop.php"] [unique_id "aaLvKhCf4HvhVePw3LZX8AAAABY"]
[Sat Feb 28 21:35:38.485840 2026] [:error] [pid 49763:tid 49778] [client 20.151.2.242:62117] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Jcrop.php"] [unique_id "aaLvKrTHSOG_yf2PpqGDrgAAAcw"]
[Sat Feb 28 21:35:38.939049 2026] [:error] [pid 49763:tid 49769] [client 20.151.2.242:59132] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Jcrop.php"] [unique_id "aaLvKrTHSOG_yf2PpqGDswAAAcM"]
[Sat Feb 28 21:35:39.377308 2026] [:error] [pid 49763:tid 49776] [client 20.151.2.242:62187] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8o82nc.php"] [unique_id "aaLvK7THSOG_yf2PpqGDugAAAco"]
[Sat Feb 28 21:35:39.886982 2026] [:error] [pid 39292:tid 39318] [client 20.151.2.242:59143] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8o82nc.php"] [unique_id "aaLvK6IAO5fN7BxyqcGD7gAAANg"]
[Sat Feb 28 21:35:40.354615 2026] [:error] [pid 49763:tid 49788] [client 20.151.2.242:62129] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8o82nc.php"] [unique_id "aaLvLLTHSOG_yf2PpqGDxwAAAdY"]
[Sat Feb 28 21:35:40.907728 2026] [:error] [pid 11791:tid 11804] [client 20.151.2.242:59099] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8o82nc.php"] [unique_id "aaLvLGuX5e1Q32gqxH3KkwAAAQs"]
[Sat Feb 28 21:35:41.415604 2026] [:error] [pid 11791:tid 11795] [client 20.151.2.242:59164] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byp8.php"] [unique_id "aaLvLWuX5e1Q32gqxH3KlgAAAQI"]
[Sat Feb 28 21:35:41.860709 2026] [:error] [pid 39183:tid 39204] [client 20.151.2.242:59177] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byp8.php"] [unique_id "aaLvLRCf4HvhVePw3LZX9wAAAAw"]
[Sat Feb 28 21:35:42.439342 2026] [:error] [pid 22194:tid 22218] [client 20.151.2.242:59136] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byp8.php"] [unique_id "aaLvLn6mbajs3bzQGyuopgAAAVY"]
[Sat Feb 28 21:35:42.889669 2026] [:error] [pid 22194:tid 22219] [client 20.151.2.242:6724] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byp8.php"] [unique_id "aaLvLn6mbajs3bzQGyuoqQAAAVc"]
[Sat Feb 28 21:35:43.582194 2026] [:error] [pid 39183:tid 39212] [client 20.151.2.242:6735] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/opotv.php"] [unique_id "aaLvLxCf4HvhVePw3LZYAgAAABQ"]
[Sat Feb 28 21:35:44.093229 2026] [:error] [pid 39183:tid 39197] [client 20.151.2.242:59090] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/opotv.php"] [unique_id "aaLvMBCf4HvhVePw3LZYCAAAAAU"]
[Sat Feb 28 21:35:44.817256 2026] [:error] [pid 39183:tid 39213] [client 20.151.2.242:62122] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/opotv.php"] [unique_id "aaLvMBCf4HvhVePw3LZYDgAAABU"]
[Sat Feb 28 21:35:45.456658 2026] [:error] [pid 22194:tid 22200] [client 20.151.2.242:59112] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/opotv.php"] [unique_id "aaLvMX6mbajs3bzQGyuorAAAAUQ"]
[Sat Feb 28 21:35:45.922440 2026] [:error] [pid 52460:tid 52465] [client 20.151.2.242:62141] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/pu9.php"] [unique_id "aaLvMbLWOogAgHGh62SWDQAAAYI"]
[Sat Feb 28 21:35:46.390550 2026] [:error] [pid 11791:tid 11806] [client 20.151.2.242:59191] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/pu9.php"] [unique_id "aaLvMmuX5e1Q32gqxH3KnAAAAQ0"]
[Sat Feb 28 21:35:46.856878 2026] [:error] [pid 49763:tid 49780] [client 20.151.2.242:59193] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/pu9.php"] [unique_id "aaLvMrTHSOG_yf2PpqGD6wAAAc4"]
[Sat Feb 28 21:35:47.307081 2026] [:error] [pid 39292:tid 39308] [client 20.151.2.242:59146] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/pu9.php"] [unique_id "aaLvM6IAO5fN7BxyqcGD-QAAAM4"]
[Sat Feb 28 21:35:47.747100 2026] [:error] [pid 22194:tid 22201] [client 20.151.2.242:62189] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/qoepq.php"] [unique_id "aaLvM36mbajs3bzQGyuorgAAAUU"]
[Sat Feb 28 21:35:48.170425 2026] [:error] [pid 22194:tid 22206] [client 20.151.2.242:62140] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/qoepq.php"] [unique_id "aaLvNH6mbajs3bzQGyuorwAAAUo"]
[Sat Feb 28 21:35:48.664752 2026] [:error] [pid 52460:tid 52485] [client 20.151.2.242:59154] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/qoepq.php"] [unique_id "aaLvNLLWOogAgHGh62SWGQAAAZY"]
[Sat Feb 28 21:35:49.153934 2026] [:error] [pid 49763:tid 49771] [client 20.151.2.242:59187] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/qoepq.php"] [unique_id "aaLvNbTHSOG_yf2PpqGD-AAAAcU"]
[Sat Feb 28 21:35:49.656073 2026] [:error] [pid 22194:tid 22213] [client 20.151.2.242:6768] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fodds.php"] [unique_id "aaLvNX6mbajs3bzQGyuosAAAAVE"]
[Sat Feb 28 21:35:50.124196 2026] [:error] [pid 39183:tid 39207] [client 20.151.2.242:59189] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fodds.php"] [unique_id "aaLvNhCf4HvhVePw3LZYHgAAAA8"]
[Sat Feb 28 21:35:50.545436 2026] [:error] [pid 39183:tid 39198] [client 20.151.2.242:59076] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fodds.php"] [unique_id "aaLvNhCf4HvhVePw3LZYHwAAAAY"]
[Sat Feb 28 21:35:51.021923 2026] [:error] [pid 39184:tid 39233] [client 20.151.2.242:59178] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fodds.php"] [unique_id "aaLvN1tZF9Zd_U7easDLJQAAAE4"]
[Sat Feb 28 21:35:51.452026 2026] [:error] [pid 39292:tid 39307] [client 20.151.2.242:6755] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gaigu.php"] [unique_id "aaLvN6IAO5fN7BxyqcGEDgAAAM0"]
[Sat Feb 28 21:35:51.944604 2026] [:error] [pid 11791:tid 11810] [client 20.151.2.242:59190] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gaigu.php"] [unique_id "aaLvN2uX5e1Q32gqxH3KnQAAARE"]
[Sat Feb 28 21:35:52.643711 2026] [:error] [pid 49763:tid 49785] [client 20.151.2.242:59082] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gaigu.php"] [unique_id "aaLvOLTHSOG_yf2PpqGEIAAAAdM"]
[Sat Feb 28 21:35:53.180814 2026] [:error] [pid 49763:tid 49784] [client 20.151.2.242:59106] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gaigu.php"] [unique_id "aaLvObTHSOG_yf2PpqGELQAAAdI"]
[Sat Feb 28 21:35:53.749252 2026] [:error] [pid 49763:tid 49788] [client 20.151.2.242:6220] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ad2.php"] [unique_id "aaLvObTHSOG_yf2PpqGENAAAAdY"]
[Sat Feb 28 21:35:54.195180 2026] [:error] [pid 52460:tid 52465] [client 20.151.2.242:59113] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ad2.php"] [unique_id "aaLvOrLWOogAgHGh62SWIAAAAYI"]
[Sat Feb 28 21:35:54.641661 2026] [:error] [pid 11791:tid 11805] [client 20.151.2.242:62092] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ad2.php"] [unique_id "aaLvOmuX5e1Q32gqxH3KoAAAAQw"]
[Sat Feb 28 21:35:55.192873 2026] [:error] [pid 49763:tid 49783] [client 20.151.2.242:6233] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ad2.php"] [unique_id "aaLvO7THSOG_yf2PpqGERgAAAdE"]
[Sat Feb 28 21:35:55.668690 2026] [:error] [pid 49763:tid 49777] [client 20.151.2.242:59097] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sad8rd1.php"] [unique_id "aaLvO7THSOG_yf2PpqGETgAAAcs"]
[Sat Feb 28 21:35:56.215196 2026] [:error] [pid 49763:tid 49785] [client 20.151.2.242:59139] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sad8rd1.php"] [unique_id "aaLvPLTHSOG_yf2PpqGEWAAAAdM"]
[Sat Feb 28 21:35:56.947079 2026] [:error] [pid 39184:tid 39224] [client 20.151.2.242:59129] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sad8rd1.php"] [unique_id "aaLvPFtZF9Zd_U7easDLKgAAAEU"]
[Sat Feb 28 21:35:57.373510 2026] [:error] [pid 49763:tid 49780] [client 20.151.2.242:62142] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sad8rd1.php"] [unique_id "aaLvPbTHSOG_yf2PpqGEZwAAAc4"]
[Sat Feb 28 21:35:58.000612 2026] [:error] [pid 39292:tid 39317] [client 20.151.2.242:6726] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/network/user-new.php"] [unique_id "aaLvPaIAO5fN7BxyqcGEEwAAANc"]
[Sat Feb 28 21:35:58.418631 2026] [:error] [pid 22194:tid 22207] [client 20.151.2.242:59199] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/network/user-new.php"] [unique_id "aaLvPn6mbajs3bzQGyuosQAAAUs"]
[Sat Feb 28 21:35:58.853812 2026] [:error] [pid 39183:tid 39207] [client 20.151.2.242:59094] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/network/user-new.php"] [unique_id "aaLvPhCf4HvhVePw3LZYLAAAAA8"]
[Sat Feb 28 21:35:59.302250 2026] [:error] [pid 49763:tid 49787] [client 20.151.2.242:59155] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/network/user-new.php"] [unique_id "aaLvP7THSOG_yf2PpqGEcAAAAdU"]
[Sat Feb 28 21:35:59.751946 2026] [:error] [pid 11791:tid 11801] [client 20.151.2.242:59156] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asix.php"] [unique_id "aaLvP2uX5e1Q32gqxH3KowAAAQg"]
[Sat Feb 28 21:36:00.181439 2026] [:error] [pid 49763:tid 49784] [client 20.151.2.242:59084] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asix.php"] [unique_id "aaLvQLTHSOG_yf2PpqGEdAAAAdI"]
[Sat Feb 28 21:36:00.661517 2026] [:error] [pid 49763:tid 49780] [client 20.151.2.242:59079] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asix.php"] [unique_id "aaLvQLTHSOG_yf2PpqGEewAAAc4"]
[Sat Feb 28 21:36:01.141329 2026] [:error] [pid 39183:tid 39203] [client 20.151.2.242:59185] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asix.php"] [unique_id "aaLvQRCf4HvhVePw3LZYMgAAAAs"]
[Sat Feb 28 21:36:01.664605 2026] [:error] [pid 39183:tid 39206] [client 20.151.2.242:62207] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gems.php"] [unique_id "aaLvQRCf4HvhVePw3LZYOgAAAA4"]
[Sat Feb 28 21:36:02.124633 2026] [:error] [pid 52460:tid 52480] [client 20.151.2.242:6247] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gems.php"] [unique_id "aaLvQrLWOogAgHGh62SWLwAAAZE"]
[Sat Feb 28 21:36:02.558056 2026] [:error] [pid 11791:tid 11798] [client 20.151.2.242:59158] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gems.php"] [unique_id "aaLvQmuX5e1Q32gqxH3KqAAAAQU"]
[Sat Feb 28 21:36:02.987069 2026] [:error] [pid 39292:tid 39318] [client 20.151.2.242:59086] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gems.php"] [unique_id "aaLvQqIAO5fN7BxyqcGEGAAAANg"]
[Sat Feb 28 21:36:03.420594 2026] [:error] [pid 39183:tid 39212] [client 20.151.2.242:6734] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xxd.php"] [unique_id "aaLvQxCf4HvhVePw3LZYRwAAABQ"]
[Sat Feb 28 21:36:03.856884 2026] [:error] [pid 39183:tid 39198] [client 20.151.2.242:59100] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xxd.php"] [unique_id "aaLvQxCf4HvhVePw3LZYaAAAAAY"]
[Sat Feb 28 21:36:04.287777 2026] [:error] [pid 49763:tid 49787] [client 20.151.2.242:62095] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xxd.php"] [unique_id "aaLvRLTHSOG_yf2PpqGEgQAAAdU"]
[Sat Feb 28 21:36:04.788884 2026] [:error] [pid 39183:tid 39193] [client 20.151.2.242:62170] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xxd.php"] [unique_id "aaLvRBCf4HvhVePw3LZYqgAAAAE"]
[Sat Feb 28 21:36:05.211682 2026] [:error] [pid 39184:tid 39238] [client 20.151.2.242:6748] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2sx.php"] [unique_id "aaLvRVtZF9Zd_U7easDLNgAAAFM"]
[Sat Feb 28 21:36:05.624521 2026] [:error] [pid 52460:tid 52475] [client 20.151.2.242:59125] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2sx.php"] [unique_id "aaLvRbLWOogAgHGh62SWNAAAAYw"]
[Sat Feb 28 21:36:06.087138 2026] [:error] [pid 39183:tid 39215] [client 20.151.2.242:6741] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2sx.php"] [unique_id "aaLvRhCf4HvhVePw3LZYxAAAABc"]
[Sat Feb 28 21:36:06.531709 2026] [:error] [pid 39184:tid 39227] [client 20.151.2.242:62185] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2sx.php"] [unique_id "aaLvRltZF9Zd_U7easDLOAAAAEg"]
[Sat Feb 28 21:36:06.942405 2026] [:error] [pid 11791:tid 11803] [client 20.151.2.242:6723] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aaq.php"] [unique_id "aaLvRmuX5e1Q32gqxH3KqQAAAQo"]
[Sat Feb 28 21:36:07.366648 2026] [:error] [pid 11791:tid 11808] [client 20.151.2.242:59160] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aaq.php"] [unique_id "aaLvR2uX5e1Q32gqxH3KqwAAAQ8"]
[Sat Feb 28 21:36:07.790592 2026] [:error] [pid 39292:tid 39301] [client 20.151.2.242:6211] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aaq.php"] [unique_id "aaLvR6IAO5fN7BxyqcGEHQAAAMc"]
[Sat Feb 28 21:36:08.205584 2026] [:error] [pid 52460:tid 52467] [client 20.151.2.242:59183] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aaq.php"] [unique_id "aaLvSLLWOogAgHGh62SWNwAAAYQ"]
[Sat Feb 28 21:36:08.635468 2026] [:error] [pid 39183:tid 39212] [client 20.151.2.242:62167] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/000.php"] [unique_id "aaLvSBCf4HvhVePw3LZY1QAAABQ"]
[Sat Feb 28 21:36:09.075016 2026] [:error] [pid 39183:tid 39199] [client 20.151.2.242:59096] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/000.php"] [unique_id "aaLvSRCf4HvhVePw3LZY2QAAAAc"]
[Sat Feb 28 21:36:09.486340 2026] [:error] [pid 49763:tid 49767] [client 20.151.2.242:62171] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/000.php"] [unique_id "aaLvSbTHSOG_yf2PpqGExAAAAcE"]
[Sat Feb 28 21:36:09.909107 2026] [:error] [pid 49763:tid 49783] [client 20.151.2.242:59196] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/000.php"] [unique_id "aaLvSbTHSOG_yf2PpqGEyAAAAdE"]
[Sat Feb 28 21:36:10.348070 2026] [:error] [pid 49763:tid 49772] [client 20.151.2.242:59077] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aaLvSrTHSOG_yf2PpqGEzwAAAcY"]
[Sat Feb 28 21:36:10.815897 2026] [:error] [pid 49763:tid 49787] [client 20.151.2.242:59188] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aaLvSrTHSOG_yf2PpqGE2AAAAdU"]
[Sat Feb 28 21:36:11.276913 2026] [:error] [pid 49763:tid 49781] [client 20.151.2.242:6742] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aaLvS7THSOG_yf2PpqGE5gAAAc8"]
[Sat Feb 28 21:36:11.730097 2026] [:error] [pid 49763:tid 49788] [client 20.151.2.242:6783] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aaLvS7THSOG_yf2PpqGE8wAAAdY"]
[Sat Feb 28 21:36:12.175461 2026] [:error] [pid 49763:tid 49788] [client 20.151.2.242:59095] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cwclass.php"] [unique_id "aaLvTLTHSOG_yf2PpqGE_QAAAdY"]
[Sat Feb 28 21:36:12.641293 2026] [:error] [pid 49763:tid 49786] [client 20.151.2.242:62176] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cwclass.php"] [unique_id "aaLvTLTHSOG_yf2PpqGFCAAAAdQ"]
[Sat Feb 28 21:36:13.059720 2026] [:error] [pid 39184:tid 39239] [client 20.151.2.242:59166] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cwclass.php"] [unique_id "aaLvTVtZF9Zd_U7easDLRwAAAFQ"]
[Sat Feb 28 21:36:13.492957 2026] [:error] [pid 39184:tid 39238] [client 20.151.2.242:59198] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cwclass.php"] [unique_id "aaLvTVtZF9Zd_U7easDLSgAAAFM"]
[Sat Feb 28 21:36:13.944566 2026] [:error] [pid 39183:tid 39209] [client 20.151.2.242:62163] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a6s2.php"] [unique_id "aaLvTRCf4HvhVePw3LZY4gAAABE"]
[Sat Feb 28 21:36:14.379035 2026] [:error] [pid 49763:tid 49786] [client 20.151.2.242:59180] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a6s2.php"] [unique_id "aaLvTrTHSOG_yf2PpqGFGAAAAdQ"]
[Sat Feb 28 21:36:14.858615 2026] [:error] [pid 49763:tid 49767] [client 20.151.2.242:59176] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a6s2.php"] [unique_id "aaLvTrTHSOG_yf2PpqGFHgAAAcE"]
[Sat Feb 28 21:36:15.276195 2026] [:error] [pid 52460:tid 52477] [client 20.151.2.242:59123] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a6s2.php"] [unique_id "aaLvT7LWOogAgHGh62SWRQAAAY4"]
[Sat Feb 28 21:36:15.737633 2026] [:error] [pid 49763:tid 49782] [client 20.151.2.242:62083] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aki.php"] [unique_id "aaLvT7THSOG_yf2PpqGFLAAAAdA"]
[Sat Feb 28 21:36:16.164204 2026] [:error] [pid 52460:tid 52476] [client 20.151.2.242:59172] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aki.php"] [unique_id "aaLvULLWOogAgHGh62SWTAAAAY0"]
[Sat Feb 28 21:36:16.625133 2026] [:error] [pid 52460:tid 52482] [client 20.151.2.242:59092] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aki.php"] [unique_id "aaLvULLWOogAgHGh62SWTQAAAZM"]
[Sat Feb 28 21:36:17.135684 2026] [:error] [pid 39184:tid 39235] [client 20.151.2.242:62112] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aki.php"] [unique_id "aaLvUVtZF9Zd_U7easDLVgAAAFA"]
[Sat Feb 28 21:36:17.563466 2026] [:error] [pid 52460:tid 52463] [client 20.151.2.242:59091] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/R57.php"] [unique_id "aaLvUbLWOogAgHGh62SWTwAAAYA"]
[Sat Feb 28 21:36:18.026466 2026] [:error] [pid 39183:tid 39205] [client 20.151.2.242:6760] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/R57.php"] [unique_id "aaLvUhCf4HvhVePw3LZY7AAAAA0"]
[Sat Feb 28 21:36:18.466757 2026] [:error] [pid 49763:tid 49781] [client 20.151.2.242:62088] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/R57.php"] [unique_id "aaLvUrTHSOG_yf2PpqGFSAAAAc8"]
[Sat Feb 28 21:36:18.914169 2026] [:error] [pid 11791:tid 11807] [client 20.151.2.242:59142] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/R57.php"] [unique_id "aaLvUmuX5e1Q32gqxH3KsgAAAQ4"]
[Sat Feb 28 21:36:19.349670 2026] [:error] [pid 39183:tid 39212] [client 20.151.2.242:6758] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/pepe.php"] [unique_id "aaLvUxCf4HvhVePw3LZY8AAAABQ"]
[Sat Feb 28 21:36:19.780546 2026] [:error] [pid 49763:tid 49775] [client 20.151.2.242:62091] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/pepe.php"] [unique_id "aaLvU7THSOG_yf2PpqGFWgAAAck"]
[Sat Feb 28 21:36:20.344758 2026] [:error] [pid 52460:tid 52464] [client 20.151.2.242:62168] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/pepe.php"] [unique_id "aaLvVLLWOogAgHGh62SWWgAAAYE"]
[Sat Feb 28 21:36:20.776009 2026] [:error] [pid 49763:tid 49783] [client 20.151.2.242:62205] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/pepe.php"] [unique_id "aaLvVLTHSOG_yf2PpqGFeQAAAdE"]
[Sat Feb 28 21:36:21.221079 2026] [:error] [pid 39185:tid 39256] [client 20.151.2.242:6731] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aaLvVRVE-FfM89u7BQal-wAAAIo"]
[Sat Feb 28 21:36:21.649681 2026] [:error] [pid 39183:tid 39204] [client 20.151.2.242:6762] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aaLvVRCf4HvhVePw3LZY9gAAAAw"]
[Sat Feb 28 21:36:22.077291 2026] [:error] [pid 11791:tid 11802] [client 20.151.2.242:59126] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aaLvVmuX5e1Q32gqxH3KtwAAAQk"]
[Sat Feb 28 21:36:22.518928 2026] [:error] [pid 39183:tid 39210] [client 20.151.2.242:62113] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "aaLvVhCf4HvhVePw3LZZCAAAABI"]
[Sat Feb 28 21:36:23.018285 2026] [:error] [pid 39292:tid 39313] [client 20.151.2.242:59101] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aaLvV6IAO5fN7BxyqcGEJAAAANM"]
[Sat Feb 28 21:36:23.467909 2026] [:error] [pid 52460:tid 52471] [client 20.151.2.242:6770] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aaLvV7LWOogAgHGh62SWXwAAAYg"]
[Sat Feb 28 21:36:23.906494 2026] [:error] [pid 52460:tid 52470] [client 20.151.2.242:6759] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aaLvV7LWOogAgHGh62SWaQAAAYc"]
[Sat Feb 28 21:36:24.362606 2026] [:error] [pid 49763:tid 49789] [client 20.151.2.242:6744] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aaLvWLTHSOG_yf2PpqGFrwAAAdc"]
[Sat Feb 28 21:36:24.783597 2026] [:error] [pid 52460:tid 52478] [client 20.151.2.242:6236] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/ms-edit.php"] [unique_id "aaLvWLLWOogAgHGh62SWdAAAAY8"]
[Sat Feb 28 21:36:25.251753 2026] [:error] [pid 49763:tid 49782] [client 20.151.2.242:6766] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/ms-edit.php"] [unique_id "aaLvWbTHSOG_yf2PpqGFxwAAAdA"]
[Sat Feb 28 21:36:25.672961 2026] [:error] [pid 39292:tid 39318] [client 20.151.2.242:59168] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/ms-edit.php"] [unique_id "aaLvWaIAO5fN7BxyqcGEJgAAANg"]
[Sat Feb 28 21:36:26.096632 2026] [:error] [pid 49763:tid 49772] [client 20.151.2.242:6213] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/ms-edit.php"] [unique_id "aaLvWrTHSOG_yf2PpqGF1AAAAcY"]
[Sat Feb 28 21:36:26.519440 2026] [:error] [pid 49763:tid 49775] [client 20.151.2.242:59114] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/user-new.php"] [unique_id "aaLvWrTHSOG_yf2PpqGF3gAAAck"]
[Sat Feb 28 21:36:26.959091 2026] [:error] [pid 52460:tid 52475] [client 20.151.2.242:59120] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/user-new.php"] [unique_id "aaLvWrLWOogAgHGh62SWfQAAAYw"]
[Sat Feb 28 21:36:27.377284 2026] [:error] [pid 39292:tid 39299] [client 20.151.2.242:6217] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/user-new.php"] [unique_id "aaLvW6IAO5fN7BxyqcGEKwAAAMU"]
[Sat Feb 28 21:36:27.872250 2026] [:error] [pid 52460:tid 52465] [client 20.151.2.242:59089] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/user-new.php"] [unique_id "aaLvW7LWOogAgHGh62SWiAAAAYI"]
[Sat Feb 28 21:36:28.322368 2026] [:error] [pid 39183:tid 39207] [client 20.151.2.242:6720] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/themes.php"] [unique_id "aaLvXBCf4HvhVePw3LZZGgAAAA8"]
[Sat Feb 28 21:36:28.751714 2026] [:error] [pid 39184:tid 39239] [client 20.151.2.242:6218] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/themes.php"] [unique_id "aaLvXFtZF9Zd_U7easDLfAAAAFQ"]
[Sat Feb 28 21:36:29.174024 2026] [:error] [pid 49763:tid 49784] [client 20.151.2.242:59171] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/themes.php"] [unique_id "aaLvXbTHSOG_yf2PpqGGFgAAAdI"]
[Sat Feb 28 21:36:29.611513 2026] [:error] [pid 49763:tid 49780] [client 20.151.2.242:59150] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/themes.php"] [unique_id "aaLvXbTHSOG_yf2PpqGGIwAAAc4"]
[Sat Feb 28 21:36:33.315665 2026] [:error] [pid 39183:tid 39197] [client 20.151.2.242:59122] [client 20.151.2.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/pu8.php"] [unique_id "aaLvYRCf4HvhVePw3LZZNAAAAAU"]
[Sat Feb 28 21:36:33.751887 2026] [:error] [pid 39292:tid 39300] [client 20.151.2.242:6751] [client 20.151.2.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/pu9.php"] [unique_id "aaLvYaIAO5fN7BxyqcGEPgAAAMY"]
[Sat Feb 28 21:36:34.176876 2026] [:error] [pid 49763:tid 49788] [client 20.151.2.242:59081] [client 20.151.2.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/povoy.php"] [unique_id "aaLvYrTHSOG_yf2PpqGGeQAAAdY"]
[Sat Feb 28 21:36:34.617475 2026] [:error] [pid 49763:tid 49788] [client 20.151.2.242:6232] [client 20.151.2.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/t00l.php"] [unique_id "aaLvYrTHSOG_yf2PpqGGhQAAAdY"]
[Sat Feb 28 21:36:35.071216 2026] [:error] [pid 39183:tid 39202] [client 20.151.2.242:59148] [client 20.151.2.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/rcc8.php"] [unique_id "aaLvYxCf4HvhVePw3LZZQQAAAAo"]
[Sat Feb 28 21:36:35.496155 2026] [:error] [pid 39183:tid 39215] [client 20.151.2.242:62107] [client 20.151.2.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/rcc9.php"] [unique_id "aaLvYxCf4HvhVePw3LZZSwAAABc"]
[Sat Feb 28 21:36:36.051865 2026] [:error] [pid 39292:tid 39309] [client 20.151.2.242:59163] [client 20.151.2.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/xl9.php"] [unique_id "aaLvZKIAO5fN7BxyqcGEQQAAAM8"]
[Sat Feb 28 21:36:36.522678 2026] [:error] [pid 11791:tid 11793] [client 20.151.2.242:59127] [client 20.151.2.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/gxoxx.php"] [unique_id "aaLvZGuX5e1Q32gqxH3K0QAAAQA"]
[Sat Feb 28 21:36:36.944211 2026] [:error] [pid 49763:tid 49772] [client 20.151.2.242:6733] [client 20.151.2.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/g06akt.php"] [unique_id "aaLvZLTHSOG_yf2PpqGGpwAAAcY"]
[Sat Feb 28 21:36:39.613273 2026] [:error] [pid 11791:tid 11802] [client 20.151.2.242:59186] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/install.php"] [unique_id "aaLvZ2uX5e1Q32gqxH3K3QAAAQk"]
[Sat Feb 28 21:36:40.045683 2026] [:error] [pid 49763:tid 49785] [client 20.151.2.242:59195] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/install.php"] [unique_id "aaLvaLTHSOG_yf2PpqGG2AAAAdM"]
[Sat Feb 28 21:36:40.478189 2026] [:error] [pid 39184:tid 39223] [client 20.151.2.242:6803] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/install.php"] [unique_id "aaLvaFtZF9Zd_U7easDLnQAAAEQ"]
[Sat Feb 28 21:36:40.907317 2026] [:error] [pid 39292:tid 39296] [client 20.151.2.242:62123] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/install.php"] [unique_id "aaLvaKIAO5fN7BxyqcGETgAAAMI"]
[Sat Feb 28 21:36:41.329900 2026] [:error] [pid 52460:tid 52475] [client 20.151.2.242:59103] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/akcc.php"] [unique_id "aaLvabLWOogAgHGh62SWugAAAYw"]
[Sat Feb 28 21:36:41.759958 2026] [:error] [pid 39292:tid 39318] [client 20.151.2.242:6248] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/akcc.php"] [unique_id "aaLvaaIAO5fN7BxyqcGETwAAANg"]
[Sat Feb 28 21:36:42.189057 2026] [:error] [pid 49763:tid 49777] [client 20.151.2.242:59119] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/akcc.php"] [unique_id "aaLvarTHSOG_yf2PpqGG8wAAAcs"]
[Sat Feb 28 21:36:42.624315 2026] [:error] [pid 49763:tid 49790] [client 20.151.2.242:6732] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/akcc.php"] [unique_id "aaLvarTHSOG_yf2PpqGG_QAAAdg"]
[Sat Feb 28 21:36:43.095549 2026] [:error] [pid 52460:tid 52463] [client 20.151.2.242:59110] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaLva7LWOogAgHGh62SWygAAAYA"]
[Sat Feb 28 21:36:43.534569 2026] [:error] [pid 52460:tid 52477] [client 20.151.2.242:59140] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaLva7LWOogAgHGh62SWzwAAAY4"]
[Sat Feb 28 21:36:44.020336 2026] [:error] [pid 49763:tid 49770] [client 20.151.2.242:6256] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaLvbLTHSOG_yf2PpqGHHwAAAcQ"]
[Sat Feb 28 21:36:44.435015 2026] [:error] [pid 39183:tid 39216] [client 20.151.2.242:59074] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "aaLvbBCf4HvhVePw3LZZeAAAABg"]
[Sat Feb 28 21:36:44.860879 2026] [:error] [pid 39184:tid 39235] [client 20.151.2.242:6739] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-atom.php"] [unique_id "aaLvbFtZF9Zd_U7easDLpAAAAFA"]
[Sat Feb 28 21:36:45.395822 2026] [:error] [pid 49763:tid 49770] [client 20.151.2.242:6239] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-atom.php"] [unique_id "aaLvbbTHSOG_yf2PpqGHMwAAAcQ"]
[Sat Feb 28 21:36:45.819406 2026] [:error] [pid 49763:tid 49779] [client 20.151.2.242:6422] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-atom.php"] [unique_id "aaLvbbTHSOG_yf2PpqGHRQAAAc0"]
[Sat Feb 28 21:36:46.279451 2026] [:error] [pid 49763:tid 49781] [client 20.151.2.242:62135] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-atom.php"] [unique_id "aaLvbrTHSOG_yf2PpqGHVwAAAc8"]
[Sat Feb 28 21:36:46.790739 2026] [:error] [pid 52460:tid 52464] [client 20.151.2.242:6736] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaLvbrLWOogAgHGh62SW4AAAAYE"]
[Sat Feb 28 21:36:47.257158 2026] [:error] [pid 39185:tid 39248] [client 20.151.2.242:6824] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaLvbxVE-FfM89u7BQamKAAAAII"]
[Sat Feb 28 21:36:47.739900 2026] [:error] [pid 39184:tid 39240] [client 20.151.2.242:62101] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaLvb1tZF9Zd_U7easDLuAAAAFU"]
[Sat Feb 28 21:36:48.164792 2026] [:error] [pid 49763:tid 49768] [client 20.151.2.242:59116] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/wp-conflg.php"] [unique_id "aaLvcLTHSOG_yf2PpqGHewAAAcI"]
[Sat Feb 28 21:36:48.620577 2026] [:error] [pid 49763:tid 49769] [client 20.151.2.242:6253] [client 20.151.2.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aaLvcLTHSOG_yf2PpqGHhAAAAcM"]
[Sat Feb 28 21:36:49.135344 2026] [:error] [pid 49763:tid 49790] [client 20.151.2.242:6782] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws66.php"] [unique_id "aaLvcbTHSOG_yf2PpqGHkgAAAdg"]
[Sat Feb 28 21:36:49.564217 2026] [:error] [pid 49763:tid 49767] [client 20.151.2.242:6764] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws66.php"] [unique_id "aaLvcbTHSOG_yf2PpqGHmQAAAcE"]
[Sat Feb 28 21:36:50.093120 2026] [:error] [pid 39184:tid 39221] [client 20.151.2.242:59085] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws66.php"] [unique_id "aaLvcltZF9Zd_U7easDLxQAAAEI"]
[Sat Feb 28 21:36:50.511878 2026] [:error] [pid 49763:tid 49787] [client 20.151.2.242:6729] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws66.php"] [unique_id "aaLvcrTHSOG_yf2PpqGHrwAAAdU"]
[Sat Feb 28 21:36:50.940146 2026] [:error] [pid 49763:tid 49772] [client 20.151.2.242:59128] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/goat.php"] [unique_id "aaLvcrTHSOG_yf2PpqGHtwAAAcY"]
[Sat Feb 28 21:36:51.422457 2026] [:error] [pid 39183:tid 39195] [client 20.151.2.242:59118] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/goat.php"] [unique_id "aaLvcxCf4HvhVePw3LZZnwAAAAM"]
[Sat Feb 28 21:36:51.846362 2026] [:error] [pid 49763:tid 49775] [client 20.151.2.242:6227] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/goat.php"] [unique_id "aaLvc7THSOG_yf2PpqGHzwAAAck"]
[Sat Feb 28 21:36:52.291433 2026] [:error] [pid 11791:tid 11808] [client 20.151.2.242:62120] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/goat.php"] [unique_id "aaLvdGuX5e1Q32gqxH3LKQAAAQ8"]
[Sat Feb 28 21:36:52.852178 2026] [:error] [pid 11791:tid 11799] [client 20.151.2.242:6746] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaLvdGuX5e1Q32gqxH3LKwAAAQY"]
[Sat Feb 28 21:36:53.295357 2026] [:error] [pid 39183:tid 39200] [client 20.151.2.242:59111] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaLvdRCf4HvhVePw3LZZrQAAAAg"]
[Sat Feb 28 21:36:53.740039 2026] [:error] [pid 39184:tid 39223] [client 20.151.2.242:6813] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaLvdVtZF9Zd_U7easDL2QAAAEQ"]
[Sat Feb 28 21:36:54.270047 2026] [:error] [pid 39185:tid 39249] [client 20.151.2.242:6773] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaLvdhVE-FfM89u7BQamNAAAAIM"]
[Sat Feb 28 21:36:54.911843 2026] [:error] [pid 49763:tid 49770] [client 20.151.2.242:6777] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/txets.php"] [unique_id "aaLvdrTHSOG_yf2PpqGH-AAAAcQ"]
[Sat Feb 28 21:36:55.402276 2026] [:error] [pid 49763:tid 49774] [client 20.151.2.242:59088] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/txets.php"] [unique_id "aaLvd7THSOG_yf2PpqGIAgAAAcg"]
[Sat Feb 28 21:36:55.846241 2026] [:error] [pid 39183:tid 39213] [client 20.151.2.242:6775] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/txets.php"] [unique_id "aaLvdxCf4HvhVePw3LZZtgAAABU"]
[Sat Feb 28 21:36:56.356670 2026] [:error] [pid 39292:tid 39299] [client 20.151.2.242:6728] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/txets.php"] [unique_id "aaLveKIAO5fN7BxyqcGEeAAAAMU"]
[Sat Feb 28 21:36:56.800311 2026] [:error] [pid 49763:tid 49773] [client 20.151.2.242:6800] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aaLveLTHSOG_yf2PpqGIGgAAAcc"]
[Sat Feb 28 21:36:57.215313 2026] [:error] [pid 39183:tid 39216] [client 20.151.2.242:6237] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aaLveRCf4HvhVePw3LZZwgAAABg"]
[Sat Feb 28 21:36:57.806967 2026] [:error] [pid 49763:tid 49790] [client 20.151.2.242:6815] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aaLvebTHSOG_yf2PpqGINAAAAdg"]
[Sat Feb 28 21:36:58.316513 2026] [:error] [pid 52460:tid 52470] [client 20.151.2.242:6802] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aaLverLWOogAgHGh62SXKAAAAYc"]
[Sat Feb 28 21:36:58.742480 2026] [:error] [pid 39185:tid 39263] [client 20.151.2.242:6215] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aaLvehVE-FfM89u7BQamOQAAAJE"]
[Sat Feb 28 21:36:59.183617 2026] [:error] [pid 39292:tid 39300] [client 20.151.2.242:6241] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aaLve6IAO5fN7BxyqcGEfQAAAMY"]
[Sat Feb 28 21:36:59.594955 2026] [:error] [pid 39183:tid 39202] [client 20.151.2.242:6752] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aaLvexCf4HvhVePw3LZZzQAAAAo"]
[Sat Feb 28 21:37:00.020878 2026] [:error] [pid 39183:tid 39200] [client 20.151.2.242:6721] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aaLvfBCf4HvhVePw3LZZzwAAAAg"]
[Sat Feb 28 21:37:00.440013 2026] [:error] [pid 39183:tid 39214] [client 20.151.2.242:6791] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/X57.php"] [unique_id "aaLvfBCf4HvhVePw3LZZ1AAAABY"]
[Sat Feb 28 21:37:00.895546 2026] [:error] [pid 39183:tid 39197] [client 20.151.2.242:6743] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/X57.php"] [unique_id "aaLvfBCf4HvhVePw3LZZ3AAAAAU"]
[Sat Feb 28 21:37:01.347268 2026] [:error] [pid 39183:tid 39196] [client 20.151.2.242:6763] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/X57.php"] [unique_id "aaLvfRCf4HvhVePw3LZZ6AAAAAQ"]
[Sat Feb 28 21:37:01.798524 2026] [:error] [pid 39184:tid 39221] [client 20.151.2.242:6265] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/X57.php"] [unique_id "aaLvfVtZF9Zd_U7easDL6AAAAEI"]
[Sat Feb 28 21:37:02.274443 2026] [:error] [pid 22194:tid 22211] [client 20.151.2.242:6229] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aaLvfn6mbajs3bzQGyuo-gAAAU8"]
[Sat Feb 28 21:37:02.758519 2026] [:error] [pid 49763:tid 49787] [client 20.151.2.242:6221] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aaLvfrTHSOG_yf2PpqGIYQAAAdU"]
[Sat Feb 28 21:37:03.199256 2026] [:error] [pid 11791:tid 11798] [client 20.151.2.242:62146] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aaLvf2uX5e1Q32gqxH3LPgAAAQU"]
[Sat Feb 28 21:37:03.671440 2026] [:error] [pid 52460:tid 52481] [client 20.151.2.242:6212] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aaLvf7LWOogAgHGh62SXVgAAAZI"]
[Sat Feb 28 21:37:04.116473 2026] [:error] [pid 39185:tid 39247] [client 20.151.2.242:6747] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aaLvgBVE-FfM89u7BQamQwAAAIE"]
[Sat Feb 28 21:37:04.527735 2026] [:error] [pid 11791:tid 11801] [client 20.151.2.242:6778] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aaLvgGuX5e1Q32gqxH3LTAAAAQg"]
[Sat Feb 28 21:37:04.960259 2026] [:error] [pid 11791:tid 11795] [client 20.151.2.242:6250] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aaLvgGuX5e1Q32gqxH3LTgAAAQI"]
[Sat Feb 28 21:37:05.386402 2026] [:error] [pid 39184:tid 39237] [client 20.151.2.242:62102] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aaLvgVtZF9Zd_U7easDL9wAAAFI"]
[Sat Feb 28 21:37:05.801719 2026] [:error] [pid 39184:tid 39225] [client 20.151.2.242:6833] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/item.php"] [unique_id "aaLvgVtZF9Zd_U7easDL-gAAAEY"]
[Sat Feb 28 21:37:06.245223 2026] [:error] [pid 49763:tid 49787] [client 20.151.2.242:59117] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/item.php"] [unique_id "aaLvgrTHSOG_yf2PpqGIdAAAAdU"]
[Sat Feb 28 21:37:06.727509 2026] [:error] [pid 49763:tid 49789] [client 20.151.2.242:6750] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/item.php"] [unique_id "aaLvgrTHSOG_yf2PpqGIewAAAdc"]
[Sat Feb 28 21:37:07.151055 2026] [:error] [pid 52460:tid 52485] [client 20.151.2.242:6246] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/item.php"] [unique_id "aaLvg7LWOogAgHGh62SXcQAAAZY"]
[Sat Feb 28 21:37:07.607088 2026] [:error] [pid 49763:tid 49777] [client 20.151.2.242:6745] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/my.php"] [unique_id "aaLvg7THSOG_yf2PpqGIgAAAAcs"]
[Sat Feb 28 21:37:08.052304 2026] [:error] [pid 49763:tid 49787] [client 20.151.2.242:6271] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/my.php"] [unique_id "aaLvhLTHSOG_yf2PpqGIhAAAAdU"]
[Sat Feb 28 21:37:08.502954 2026] [:error] [pid 52460:tid 52487] [client 20.151.2.242:6410] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/my.php"] [unique_id "aaLvhLLWOogAgHGh62SXegAAAZg"]
[Sat Feb 28 21:37:08.924763 2026] [:error] [pid 52460:tid 52472] [client 20.151.2.242:6730] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/my.php"] [unique_id "aaLvhLLWOogAgHGh62SXfgAAAYk"]
[Sat Feb 28 21:37:09.370914 2026] [:error] [pid 52460:tid 52480] [client 20.151.2.242:6740] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aaLvhbLWOogAgHGh62SXgwAAAZE"]
[Sat Feb 28 21:37:09.796222 2026] [:error] [pid 11791:tid 11793] [client 20.151.2.242:6796] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aaLvhWuX5e1Q32gqxH3LUQAAAQA"]
[Sat Feb 28 21:37:10.278107 2026] [:error] [pid 11791:tid 11798] [client 20.151.2.242:6216] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aaLvhmuX5e1Q32gqxH3LUwAAAQU"]
[Sat Feb 28 21:37:10.729594 2026] [:error] [pid 39183:tid 39211] [client 20.151.2.242:6841] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aaLvhhCf4HvhVePw3LZaHAAAABM"]
[Sat Feb 28 21:37:11.206478 2026] [:error] [pid 39184:tid 39228] [client 20.151.2.242:6235] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lp6.php"] [unique_id "aaLvh1tZF9Zd_U7easDMAQAAAEk"]
[Sat Feb 28 21:37:11.641174 2026] [:error] [pid 22194:tid 22205] [client 20.151.2.242:6753] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lp6.php"] [unique_id "aaLvh36mbajs3bzQGyupBgAAAUk"]
[Sat Feb 28 21:37:12.123554 2026] [:error] [pid 49763:tid 49772] [client 20.151.2.242:6210] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lp6.php"] [unique_id "aaLviLTHSOG_yf2PpqGImgAAAcY"]
[Sat Feb 28 21:37:12.608772 2026] [:error] [pid 39184:tid 39231] [client 20.151.2.242:6224] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lp6.php"] [unique_id "aaLviFtZF9Zd_U7easDMBQAAAEw"]
[Sat Feb 28 21:37:13.037459 2026] [:error] [pid 39185:tid 39261] [client 20.151.2.242:59153] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-4doption1.php"] [unique_id "aaLviRVE-FfM89u7BQamTwAAAI8"]
[Sat Feb 28 21:37:13.505443 2026] [:error] [pid 39183:tid 39214] [client 20.151.2.242:6262] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-4doption1.php"] [unique_id "aaLviRCf4HvhVePw3LZaJgAAABY"]
[Sat Feb 28 21:37:14.254287 2026] [:error] [pid 39184:tid 39241] [client 20.151.2.242:6258] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-4doption1.php"] [unique_id "aaLviltZF9Zd_U7easDMCQAAAFY"]
[Sat Feb 28 21:37:14.682214 2026] [:error] [pid 39183:tid 39195] [client 20.151.2.242:6772] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-4doption1.php"] [unique_id "aaLvihCf4HvhVePw3LZaKgAAAAM"]
[Sat Feb 28 21:37:15.153082 2026] [:error] [pid 39183:tid 39196] [client 20.151.2.242:6722] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aaLvixCf4HvhVePw3LZaLwAAAAQ"]
[Sat Feb 28 21:37:15.630752 2026] [:error] [pid 39292:tid 39300] [client 20.151.2.242:6769] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aaLvi6IAO5fN7BxyqcGEnQAAAMY"]
[Sat Feb 28 21:37:16.075790 2026] [:error] [pid 39183:tid 39203] [client 20.151.2.242:59075] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aaLvjBCf4HvhVePw3LZaOAAAAAs"]
[Sat Feb 28 21:37:16.489955 2026] [:error] [pid 39292:tid 39318] [client 20.151.2.242:59102] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aaLvjKIAO5fN7BxyqcGEowAAANg"]
[Sat Feb 28 21:37:16.963002 2026] [:error] [pid 39183:tid 39213] [client 20.151.2.242:6827] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-setting.php"] [unique_id "aaLvjBCf4HvhVePw3LZaQwAAABU"]
[Sat Feb 28 21:37:17.383102 2026] [:error] [pid 52460:tid 52479] [client 20.151.2.242:59108] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-setting.php"] [unique_id "aaLvjbLWOogAgHGh62SXlQAAAZA"]
[Sat Feb 28 21:37:17.818069 2026] [:error] [pid 39183:tid 39214] [client 20.151.2.242:59136] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-setting.php"] [unique_id "aaLvjRCf4HvhVePw3LZaTQAAABY"]
[Sat Feb 28 21:37:18.258809 2026] [:error] [pid 39183:tid 39215] [client 20.151.2.242:59133] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-setting.php"] [unique_id "aaLvjhCf4HvhVePw3LZaVQAAABc"]
[Sat Feb 28 21:37:18.678638 2026] [:error] [pid 22194:tid 22211] [client 20.151.2.242:6771] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaLvjn6mbajs3bzQGyupDQAAAU8"]
[Sat Feb 28 21:37:19.105710 2026] [:error] [pid 39184:tid 39223] [client 20.151.2.242:6266] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaLvj1tZF9Zd_U7easDMDgAAAEQ"]
[Sat Feb 28 21:37:19.522502 2026] [:error] [pid 52460:tid 52466] [client 20.151.2.242:6450] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaLvj7LWOogAgHGh62SXlgAAAYM"]
[Sat Feb 28 21:37:19.938819 2026] [:error] [pid 39185:tid 39259] [client 20.151.2.242:62099] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaLvjxVE-FfM89u7BQamWAAAAI0"]
[Sat Feb 28 21:37:20.363262 2026] [:error] [pid 49763:tid 49773] [client 20.151.2.242:6222] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aaLvkLTHSOG_yf2PpqGItwAAAcc"]
[Sat Feb 28 21:37:20.777213 2026] [:error] [pid 49763:tid 49777] [client 20.151.2.242:59179] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aaLvkLTHSOG_yf2PpqGIvAAAAcs"]
[Sat Feb 28 21:37:21.189583 2026] [:error] [pid 49763:tid 49766] [client 20.151.2.242:6822] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aaLvkbTHSOG_yf2PpqGIwAAAAcA"]
[Sat Feb 28 21:37:21.605303 2026] [:error] [pid 52460:tid 52474] [client 20.151.2.242:6828] [client 20.151.2.242] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aaLvkbLWOogAgHGh62SXnQAAAYs"]
[Sat Feb 28 21:48:53.054781 2026] [:error] [pid 39184:tid 39237] [client 40.80.89.74:11596] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaLyRVtZF9Zd_U7easDThgAAAFI"]
[Sat Feb 28 21:48:53.637475 2026] [:error] [pid 11791:tid 11803] [client 40.80.89.74:11640] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaLyRWuX5e1Q32gqxH3OwwAAAQo"]
[Sat Feb 28 21:48:54.219072 2026] [:error] [pid 11791:tid 11799] [client 40.80.89.74:8751] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaLyRmuX5e1Q32gqxH3OxQAAAQY"]
[Sat Feb 28 21:48:54.809370 2026] [:error] [pid 49763:tid 49782] [client 40.80.89.74:8763] [client 40.80.89.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaLyRrTHSOG_yf2PpqGWMgAAAdA"]
[Sat Feb 28 21:52:08.958301 2026] [:error] [pid 49763:tid 49774] [client 20.198.0.58:60363] [client 20.198.0.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aaLzCLTHSOG_yf2PpqGaWgAAAcg"]
[Sat Feb 28 21:52:09.530005 2026] [:error] [pid 39183:tid 39194] [client 20.198.0.58:59287] [client 20.198.0.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aaLzCRCf4HvhVePw3LZoVAAAAAI"]
[Sat Feb 28 21:52:10.089769 2026] [:error] [pid 39292:tid 39312] [client 20.198.0.58:51520] [client 20.198.0.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aaLzCqIAO5fN7BxyqcGJhwAAANI"]
[Sat Feb 28 21:52:10.667494 2026] [:error] [pid 39185:tid 39258] [client 20.198.0.58:50963] [client 20.198.0.58] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aaLzChVE-FfM89u7BQap8QAAAIw"]
[Sat Feb 28 23:13:53.913474 2026] [:error] [pid 39183:tid 39196] [client 20.220.13.5:20480] [client 20.220.13.5] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaMGMRCf4HvhVePw3LbOfQAAAAQ"]
[Sat Feb 28 23:13:55.632121 2026] [:error] [pid 39184:tid 39228] [client 20.220.13.5:20997] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin.php"] [unique_id "aaMGM1tZF9Zd_U7easD6DgAAAEk"]
[Sat Feb 28 23:13:56.454862 2026] [:error] [pid 39183:tid 39194] [client 20.220.13.5:64702] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin.php"] [unique_id "aaMGNBCf4HvhVePw3LbOiwAAAAI"]
[Sat Feb 28 23:13:57.288721 2026] [:error] [pid 52460:tid 52464] [client 20.220.13.5:64092] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin.php"] [unique_id "aaMGNbLWOogAgHGh62TcaQAAAYE"]
[Sat Feb 28 23:13:58.117734 2026] [:error] [pid 39183:tid 39208] [client 20.220.13.5:64087] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin.php"] [unique_id "aaMGNhCf4HvhVePw3LbOmQAAABA"]
[Sat Feb 28 23:59:32.340866 2026] [:error] [pid 49763:tid 49787] [client 40.85.218.222:3338] [client 40.85.218.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaMQ5LTHSOG_yf2PpqEvFQAAAdU"]
[Sat Feb 28 23:59:33.229994 2026] [:error] [pid 52460:tid 52482] [client 40.85.218.222:3341] [client 40.85.218.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaMQ5bLWOogAgHGh62T9WQAAAZM"]
[Sat Feb 28 23:59:34.090014 2026] [:error] [pid 39184:tid 39242] [client 40.85.218.222:57882] [client 40.85.218.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaMQ5ltZF9Zd_U7easAQfgAAAFc"]
[Sat Feb 28 23:59:34.951168 2026] [:error] [pid 39292:tid 39315] [client 40.85.218.222:47619] [client 40.85.218.222] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaMQ5qIAO5fN7BxyqcG0KwAAANU"]
[Sun Mar 01 00:21:22.100507 2026] [:error] [pid 31190:tid 31227] [client 4.193.177.110:2450] [client 4.193.177.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaMWAhfvwGOholYpM1E4VAAAANU"]
[Sun Mar 01 00:21:22.452871 2026] [:error] [pid 30795:tid 30821] [client 4.193.177.110:2970] [client 4.193.177.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaMWAmuI44IL94Zgti-hbAAAAA0"]
[Sun Mar 01 00:21:22.821646 2026] [:error] [pid 30797:tid 30890] [client 4.193.177.110:2986] [client 4.193.177.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaMWAvQmcmSQL-3rvLD2zQAAAFM"]
[Sun Mar 01 00:21:23.172516 2026] [:error] [pid 30798:tid 30907] [client 4.193.177.110:2945] [client 4.193.177.110] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaMWA8BkD73gO8wTonY3dgAAAIg"]
[Sun Mar 01 00:23:46.621467 2026] [:error] [pid 30795:tid 30828] [client 20.151.11.236:15333] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "aaMWkmuI44IL94Zgti-juQAAABQ"]
[Sun Mar 01 00:23:47.845428 2026] [:error] [pid 30797:tid 30874] [client 20.151.11.236:15342] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "aaMWk_QmcmSQL-3rvLD33QAAAEM"]
[Sun Mar 01 00:23:49.841466 2026] [:error] [pid 31190:tid 31219] [client 20.151.11.236:15246] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "aaMWlRfvwGOholYpM1E7ngAAAM0"]
[Sun Mar 01 00:23:51.076528 2026] [:error] [pid 30798:tid 30915] [client 20.151.11.236:15236] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "aaMWl8BkD73gO8wTonY43AAAAJA"]
[Sun Mar 01 00:23:51.705981 2026] [:error] [pid 30797:tid 30880] [client 20.151.11.236:15302] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/path.php"] [unique_id "aaMWl_QmcmSQL-3rvLD34wAAAEk"]
[Sun Mar 01 00:23:52.634791 2026] [:error] [pid 53600:tid 53618] [client 20.151.11.236:15303] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/path.php"] [unique_id "aaMWmA2UMRAYWtDB23ScwQAAAQ8"]
[Sun Mar 01 00:23:53.225104 2026] [:error] [pid 53600:tid 53626] [client 20.151.11.236:15310] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/path.php"] [unique_id "aaMWmQ2UMRAYWtDB23SczQAAARc"]
[Sun Mar 01 00:23:53.723109 2026] [:error] [pid 31190:tid 31206] [client 20.151.11.236:15319] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/path.php"] [unique_id "aaMWmRfvwGOholYpM1E7uAAAAMA"]
[Sun Mar 01 00:23:54.951952 2026] [:error] [pid 31190:tid 31213] [client 20.151.11.236:15324] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wdf.php"] [unique_id "aaMWmhfvwGOholYpM1E7wwAAAMc"]
[Sun Mar 01 00:23:56.224104 2026] [:error] [pid 31190:tid 31218] [client 20.151.11.236:15234] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wdf.php"] [unique_id "aaMWnBfvwGOholYpM1E7ygAAAMw"]
[Sun Mar 01 00:23:57.188643 2026] [:error] [pid 30797:tid 30878] [client 20.151.11.236:15359] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wdf.php"] [unique_id "aaMWnfQmcmSQL-3rvLD37gAAAEc"]
[Sun Mar 01 00:23:58.064283 2026] [:error] [pid 53600:tid 53614] [client 20.151.11.236:15350] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wdf.php"] [unique_id "aaMWng2UMRAYWtDB23Sc_AAAAQs"]
[Sun Mar 01 00:23:58.575022 2026] [:error] [pid 53600:tid 53609] [client 20.151.11.236:15352] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fleen.php"] [unique_id "aaMWng2UMRAYWtDB23SdAwAAAQY"]
[Sun Mar 01 00:23:59.086099 2026] [:error] [pid 30795:tid 30817] [client 20.151.11.236:15332] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fleen.php"] [unique_id "aaMWn2uI44IL94Zgti-j3wAAAAk"]
[Sun Mar 01 00:23:59.561736 2026] [:error] [pid 30797:tid 30874] [client 20.151.11.236:15306] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fleen.php"] [unique_id "aaMWn_QmcmSQL-3rvLD38AAAAEM"]
[Sun Mar 01 00:24:01.439256 2026] [:error] [pid 30795:tid 30823] [client 20.151.11.236:15235] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fleen.php"] [unique_id "aaMWoWuI44IL94Zgti-j5gAAAA8"]
[Sun Mar 01 00:24:02.198841 2026] [:error] [pid 53600:tid 53606] [client 20.151.11.236:15250] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-tem.php"] [unique_id "aaMWog2UMRAYWtDB23SdHwAAAQM"]
[Sun Mar 01 00:24:02.771230 2026] [:error] [pid 31190:tid 31224] [client 20.151.11.236:15318] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-tem.php"] [unique_id "aaMWohfvwGOholYpM1E76gAAANI"]
[Sun Mar 01 00:24:03.217240 2026] [:error] [pid 53600:tid 53605] [client 20.151.11.236:15232] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-tem.php"] [unique_id "aaMWow2UMRAYWtDB23SdKQAAAQI"]
[Sun Mar 01 00:24:03.880210 2026] [:error] [pid 30798:tid 30923] [client 20.151.11.236:15241] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-tem.php"] [unique_id "aaMWo8BkD73gO8wTonY48AAAAJc"]
[Sun Mar 01 00:24:04.382565 2026] [:error] [pid 30795:tid 30823] [client 20.151.11.236:15243] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/av6m.php"] [unique_id "aaMWpGuI44IL94Zgti-j9gAAAA8"]
[Sun Mar 01 00:24:04.936354 2026] [:error] [pid 31190:tid 31221] [client 20.151.11.236:15200] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/av6m.php"] [unique_id "aaMWpBfvwGOholYpM1E78gAAAM8"]
[Sun Mar 01 00:24:05.595227 2026] [:error] [pid 53600:tid 53609] [client 20.151.11.236:15282] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/av6m.php"] [unique_id "aaMWpQ2UMRAYWtDB23SdQQAAAQY"]
[Sun Mar 01 00:24:06.314720 2026] [:error] [pid 31190:tid 31206] [client 20.151.11.236:15253] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/av6m.php"] [unique_id "aaMWphfvwGOholYpM1E7-QAAAMA"]
[Sun Mar 01 00:24:07.429865 2026] [:error] [pid 53600:tid 53621] [client 20.151.11.236:15301] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/autogooey.php"] [unique_id "aaMWpw2UMRAYWtDB23SdUQAAARI"]
[Sun Mar 01 00:24:08.126450 2026] [:error] [pid 30798:tid 30922] [client 20.151.11.236:15343] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/autogooey.php"] [unique_id "aaMWqMBkD73gO8wTonY5DAAAAJY"]
[Sun Mar 01 00:24:08.598541 2026] [:error] [pid 30798:tid 30915] [client 20.151.11.236:15251] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/autogooey.php"] [unique_id "aaMWqMBkD73gO8wTonY5EQAAAJA"]
[Sun Mar 01 00:24:09.149449 2026] [:error] [pid 31190:tid 31206] [client 20.151.11.236:15242] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/autogooey.php"] [unique_id "aaMWqRfvwGOholYpM1E8BwAAAMA"]
[Sun Mar 01 00:24:09.605723 2026] [:error] [pid 30795:tid 30816] [client 20.151.11.236:15244] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/btx25.php"] [unique_id "aaMWqWuI44IL94Zgti-kDgAAAAg"]
[Sun Mar 01 00:24:10.105675 2026] [:error] [pid 30798:tid 30905] [client 20.151.11.236:15354] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/btx25.php"] [unique_id "aaMWqsBkD73gO8wTonY5GgAAAIY"]
[Sun Mar 01 00:24:10.566890 2026] [:error] [pid 30798:tid 30900] [client 20.151.11.236:15322] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/btx25.php"] [unique_id "aaMWqsBkD73gO8wTonY5HQAAAIE"]
[Sun Mar 01 00:24:10.999658 2026] [:error] [pid 30795:tid 30828] [client 20.151.11.236:15317] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/btx25.php"] [unique_id "aaMWqmuI44IL94Zgti-kHQAAABQ"]
[Sun Mar 01 00:24:11.613890 2026] [:error] [pid 53600:tid 53620] [client 20.151.11.236:15339] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mga.php"] [unique_id "aaMWqw2UMRAYWtDB23SdeAAAARE"]
[Sun Mar 01 00:24:12.162069 2026] [:error] [pid 31190:tid 31210] [client 20.151.11.236:15334] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mga.php"] [unique_id "aaMWrBfvwGOholYpM1E8EAAAAMQ"]
[Sun Mar 01 00:24:12.734613 2026] [:error] [pid 30795:tid 30828] [client 20.151.11.236:15341] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mga.php"] [unique_id "aaMWrGuI44IL94Zgti-kKgAAABQ"]
[Sun Mar 01 00:24:13.328330 2026] [:error] [pid 53600:tid 53614] [client 20.151.11.236:15357] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mga.php"] [unique_id "aaMWrQ2UMRAYWtDB23SdhwAAAQs"]
[Sun Mar 01 00:24:13.814443 2026] [:error] [pid 53600:tid 53608] [client 20.151.11.236:15249] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/maxro.php"] [unique_id "aaMWrQ2UMRAYWtDB23SdjgAAAQU"]
[Sun Mar 01 00:24:14.516347 2026] [:error] [pid 30797:tid 30892] [client 20.151.11.236:15258] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/maxro.php"] [unique_id "aaMWrvQmcmSQL-3rvLD4CwAAAFU"]
[Sun Mar 01 00:24:15.290832 2026] [:error] [pid 31190:tid 31220] [client 20.151.11.236:15357] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/maxro.php"] [unique_id "aaMWrxfvwGOholYpM1E8HAAAAM4"]
[Sun Mar 01 00:24:15.842729 2026] [:error] [pid 31190:tid 31210] [client 20.151.11.236:15347] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/maxro.php"] [unique_id "aaMWrxfvwGOholYpM1E8HQAAAMQ"]
[Sun Mar 01 00:24:16.454340 2026] [:error] [pid 53600:tid 53613] [client 20.151.11.236:15313] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/agg.php"] [unique_id "aaMWsA2UMRAYWtDB23SdogAAAQo"]
[Sun Mar 01 00:24:16.942742 2026] [:error] [pid 30798:tid 30914] [client 20.151.11.236:15290] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/agg.php"] [unique_id "aaMWsMBkD73gO8wTonY5NwAAAI8"]
[Sun Mar 01 00:24:17.429460 2026] [:error] [pid 31190:tid 31212] [client 20.151.11.236:15356] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/agg.php"] [unique_id "aaMWsRfvwGOholYpM1E8IAAAAMY"]
[Sun Mar 01 00:24:18.126860 2026] [:error] [pid 53600:tid 53627] [client 20.151.11.236:15182] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/agg.php"] [unique_id "aaMWsg2UMRAYWtDB23SdsAAAARg"]
[Sun Mar 01 00:24:18.589743 2026] [:error] [pid 31190:tid 31207] [client 20.151.11.236:15323] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/pass4.php"] [unique_id "aaMWshfvwGOholYpM1E8KAAAAME"]
[Sun Mar 01 00:24:19.132027 2026] [:error] [pid 31190:tid 31228] [client 20.151.11.236:15307] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/pass4.php"] [unique_id "aaMWsxfvwGOholYpM1E8LgAAANY"]
[Sun Mar 01 00:24:19.557575 2026] [:error] [pid 30798:tid 30918] [client 20.151.11.236:15204] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/pass4.php"] [unique_id "aaMWs8BkD73gO8wTonY5QAAAAJM"]
[Sun Mar 01 00:24:20.271989 2026] [:error] [pid 30795:tid 30825] [client 20.151.11.236:15240] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/pass4.php"] [unique_id "aaMWtGuI44IL94Zgti-kRgAAABE"]
[Sun Mar 01 00:24:21.026220 2026] [:error] [pid 30798:tid 30910] [client 20.151.11.236:15204] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wsvvs.php"] [unique_id "aaMWtcBkD73gO8wTonY5UAAAAIs"]
[Sun Mar 01 00:24:21.584479 2026] [:error] [pid 31190:tid 31206] [client 20.151.11.236:15355] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wsvvs.php"] [unique_id "aaMWtRfvwGOholYpM1E8TQAAAMA"]
[Sun Mar 01 00:24:22.247447 2026] [:error] [pid 31190:tid 31216] [client 20.151.11.236:15273] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wsvvs.php"] [unique_id "aaMWthfvwGOholYpM1E8UgAAAMo"]
[Sun Mar 01 00:24:22.689467 2026] [:error] [pid 53600:tid 53626] [client 20.151.11.236:15259] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wsvvs.php"] [unique_id "aaMWtg2UMRAYWtDB23Sd7QAAARc"]
[Sun Mar 01 00:24:23.138856 2026] [:error] [pid 31190:tid 31217] [client 20.151.11.236:15196] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/G-In.php"] [unique_id "aaMWtxfvwGOholYpM1E8WwAAAMs"]
[Sun Mar 01 00:24:23.548728 2026] [:error] [pid 53600:tid 53607] [client 20.151.11.236:15340] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/G-In.php"] [unique_id "aaMWtw2UMRAYWtDB23Sd-AAAAQQ"]
[Sun Mar 01 00:24:23.972618 2026] [:error] [pid 31190:tid 31217] [client 20.151.11.236:15320] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/G-In.php"] [unique_id "aaMWtxfvwGOholYpM1E8ZwAAAMs"]
[Sun Mar 01 00:24:24.477516 2026] [:error] [pid 30797:tid 30892] [client 20.151.11.236:15267] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/G-In.php"] [unique_id "aaMWuPQmcmSQL-3rvLD4FgAAAFU"]
[Sun Mar 01 00:24:24.891172 2026] [:error] [pid 30798:tid 30915] [client 20.151.11.236:15285] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aaMWuMBkD73gO8wTonY5XAAAAJA"]
[Sun Mar 01 00:24:25.356921 2026] [:error] [pid 30795:tid 30831] [client 20.151.11.236:15315] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aaMWuWuI44IL94Zgti-kYwAAABc"]
[Sun Mar 01 00:24:25.951764 2026] [:error] [pid 30795:tid 30811] [client 20.151.11.236:15296] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aaMWuWuI44IL94Zgti-kaQAAAAM"]
[Sun Mar 01 00:24:26.516341 2026] [:error] [pid 30795:tid 30824] [client 20.151.11.236:15197] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aaMWumuI44IL94Zgti-kbwAAABA"]
[Sun Mar 01 00:24:27.028859 2026] [:error] [pid 30795:tid 30807] [client 20.151.11.236:15260] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aaMWu2uI44IL94Zgti-kcQAAAAA"]
[Sun Mar 01 00:24:27.955853 2026] [:error] [pid 30798:tid 30900] [client 20.151.11.236:15297] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aaMWu8BkD73gO8wTonY5ZAAAAIE"]
[Sun Mar 01 00:24:28.614948 2026] [:error] [pid 30795:tid 30822] [client 20.151.11.236:15237] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aaMWvGuI44IL94Zgti-kegAAAA4"]
[Sun Mar 01 00:24:29.537101 2026] [:error] [pid 30795:tid 30830] [client 20.151.11.236:15304] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aaMWvWuI44IL94Zgti-kfgAAABY"]
[Sun Mar 01 00:24:30.215864 2026] [:error] [pid 31190:tid 31224] [client 20.151.11.236:15293] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaMWvhfvwGOholYpM1E8kAAAANI"]
[Sun Mar 01 00:24:30.945665 2026] [:error] [pid 53600:tid 53618] [client 20.151.11.236:15195] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaMWvg2UMRAYWtDB23SeIAAAAQ8"]
[Sun Mar 01 00:24:31.407017 2026] [:error] [pid 31190:tid 31208] [client 20.151.11.236:15351] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaMWvxfvwGOholYpM1E8mAAAAMI"]
[Sun Mar 01 00:24:32.281579 2026] [:error] [pid 53600:tid 53626] [client 20.151.11.236:15311] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaMWwA2UMRAYWtDB23SeOgAAARc"]
[Sun Mar 01 00:24:33.594477 2026] [:error] [pid 53600:tid 53605] [client 20.151.11.236:15281] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aaMWwQ2UMRAYWtDB23SeTAAAAQI"]
[Sun Mar 01 00:24:34.755005 2026] [:error] [pid 53600:tid 53612] [client 20.151.11.236:15183] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aaMWwg2UMRAYWtDB23SeYAAAAQk"]
[Sun Mar 01 00:24:35.750157 2026] [:error] [pid 53600:tid 53617] [client 20.151.11.236:15175] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aaMWww2UMRAYWtDB23SecAAAAQ4"]
[Sun Mar 01 00:24:36.798101 2026] [:error] [pid 31190:tid 31207] [client 20.151.11.236:15280] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aaMWxBfvwGOholYpM1E8qwAAAME"]
[Sun Mar 01 00:24:37.467748 2026] [:error] [pid 30798:tid 30923] [client 20.151.11.236:15270] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaMWxcBkD73gO8wTonY5eAAAAJc"]
[Sun Mar 01 00:24:38.382247 2026] [:error] [pid 31190:tid 31210] [client 20.151.11.236:15191] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaMWxhfvwGOholYpM1E8tgAAAMQ"]
[Sun Mar 01 00:24:39.026936 2026] [:error] [pid 31190:tid 31224] [client 20.151.11.236:15316] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaMWxxfvwGOholYpM1E8uQAAANI"]
[Sun Mar 01 00:24:39.742156 2026] [:error] [pid 30795:tid 30830] [client 20.151.11.236:15176] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "aaMWx2uI44IL94Zgti-koAAAABY"]
[Sun Mar 01 00:24:40.465242 2026] [:error] [pid 31190:tid 31219] [client 20.151.11.236:15272] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aaMWyBfvwGOholYpM1E8vwAAAM0"]
[Sun Mar 01 00:24:41.348153 2026] [:error] [pid 30795:tid 30809] [client 20.151.11.236:15247] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aaMWyWuI44IL94Zgti-kpAAAAAE"]
[Sun Mar 01 00:24:41.964771 2026] [:error] [pid 53600:tid 53605] [client 20.151.11.236:15213] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aaMWyQ2UMRAYWtDB23SepAAAAQI"]
[Sun Mar 01 00:24:42.624473 2026] [:error] [pid 31190:tid 31208] [client 20.151.11.236:15252] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aaMWyhfvwGOholYpM1E81QAAAMI"]
[Sun Mar 01 00:24:43.382292 2026] [:error] [pid 53600:tid 53620] [client 20.151.11.236:15248] [client 20.151.11.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aaMWyw2UMRAYWtDB23SesgAAARE"]
[Sun Mar 01 00:24:44.326065 2026] [:error] [pid 53600:tid 53607] [client 20.151.11.236:15335] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "aaMWzA2UMRAYWtDB23SeuQAAAQQ"]
[Sun Mar 01 00:24:56.690877 2026] [:error] [pid 53600:tid 53621] [client 20.151.11.236:15344] [client 20.151.11.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.151.11.236, incrementing ddos counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aaMW2A2UMRAYWtDB23SfJwAAARI"]
[Sun Mar 01 00:24:56.930865 2026] [:error] [pid 30797:tid 30883] [client 20.151.11.236:15243] [client 20.151.11.236] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.151.11.236, incrementing ddos counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aaMW2PQmcmSQL-3rvLD4VQAAAEw"]
[Sun Mar 01 00:25:00.011022 2026] [:error] [pid 53600:tid 53611] [client 20.151.11.236:15344] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aaMW3A2UMRAYWtDB23SfOgAAAQg"]
[Sun Mar 01 00:25:00.536177 2026] [:error] [pid 30795:tid 30830] [client 20.151.11.236:15219] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aaMW3GuI44IL94Zgti-k9AAAABY"]
[Sun Mar 01 00:25:01.160638 2026] [:error] [pid 30795:tid 30814] [client 20.151.11.236:15327] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aaMW3WuI44IL94Zgti-k-QAAAAY"]
[Sun Mar 01 00:25:01.606908 2026] [:error] [pid 31190:tid 31215] [client 20.151.11.236:15245] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aaMW3RfvwGOholYpM1E9QAAAAMk"]
[Sun Mar 01 00:25:02.442929 2026] [:error] [pid 30795:tid 30816] [client 20.151.11.236:15227] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sc.php"] [unique_id "aaMW3muI44IL94Zgti-k_wAAAAg"]
[Sun Mar 01 00:25:02.883226 2026] [:error] [pid 31190:tid 31218] [client 20.151.11.236:15337] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sc.php"] [unique_id "aaMW3hfvwGOholYpM1E9RAAAAMw"]
[Sun Mar 01 00:25:03.332740 2026] [:error] [pid 30795:tid 30812] [client 20.151.11.236:15184] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sc.php"] [unique_id "aaMW32uI44IL94Zgti-lBgAAAAQ"]
[Sun Mar 01 00:25:03.947457 2026] [:error] [pid 53600:tid 53622] [client 20.151.11.236:15123] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sc.php"] [unique_id "aaMW3w2UMRAYWtDB23SfQAAAARM"]
[Sun Mar 01 00:25:04.466101 2026] [:error] [pid 31190:tid 31211] [client 20.151.11.236:15321] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/av.php"] [unique_id "aaMW4BfvwGOholYpM1E9RwAAAMU"]
[Sun Mar 01 00:25:05.180615 2026] [:error] [pid 30795:tid 30821] [client 20.151.11.236:15198] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/av.php"] [unique_id "aaMW4WuI44IL94Zgti-lCwAAAA0"]
[Sun Mar 01 00:25:05.822110 2026] [:error] [pid 31190:tid 31227] [client 20.151.11.236:15283] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/av.php"] [unique_id "aaMW4RfvwGOholYpM1E9SwAAANU"]
[Sun Mar 01 00:25:06.461794 2026] [:error] [pid 30795:tid 30815] [client 20.151.11.236:15345] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/av.php"] [unique_id "aaMW4muI44IL94Zgti-lFQAAAAc"]
[Sun Mar 01 00:25:07.089504 2026] [:error] [pid 31190:tid 31209] [client 20.151.11.236:15291] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aaMW4xfvwGOholYpM1E9UAAAAMM"]
[Sun Mar 01 00:25:07.701085 2026] [:error] [pid 53600:tid 53620] [client 20.151.11.236:15298] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aaMW4w2UMRAYWtDB23SfUQAAARE"]
[Sun Mar 01 00:25:08.275153 2026] [:error] [pid 31190:tid 31214] [client 20.151.11.236:15265] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aaMW5BfvwGOholYpM1E9WQAAAMg"]
[Sun Mar 01 00:25:08.841558 2026] [:error] [pid 53600:tid 53609] [client 20.151.11.236:15174] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aaMW5A2UMRAYWtDB23SfWAAAAQY"]
[Sun Mar 01 00:25:09.321297 2026] [:error] [pid 30798:tid 30909] [client 20.151.11.236:15256] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aaMW5cBkD73gO8wTonY5tAAAAIo"]
[Sun Mar 01 00:25:09.930095 2026] [:error] [pid 31190:tid 31214] [client 20.151.11.236:15254] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aaMW5RfvwGOholYpM1E9ZAAAAMg"]
[Sun Mar 01 00:25:10.576147 2026] [:error] [pid 53600:tid 53619] [client 20.151.11.236:15326] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aaMW5g2UMRAYWtDB23SfYwAAARA"]
[Sun Mar 01 00:25:11.064930 2026] [:error] [pid 30798:tid 30902] [client 20.151.11.236:15105] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aaMW58BkD73gO8wTonY5uAAAAIM"]
[Sun Mar 01 00:25:11.527711 2026] [:error] [pid 53600:tid 53625] [client 20.151.11.236:15274] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file59.php"] [unique_id "aaMW5w2UMRAYWtDB23SfbAAAARY"]
[Sun Mar 01 00:25:12.698970 2026] [:error] [pid 53600:tid 53614] [client 20.151.11.236:15203] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file59.php"] [unique_id "aaMW6A2UMRAYWtDB23SfcwAAAQs"]
[Sun Mar 01 00:25:13.338639 2026] [:error] [pid 53600:tid 53619] [client 20.151.11.236:15263] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file59.php"] [unique_id "aaMW6Q2UMRAYWtDB23SfeQAAARA"]
[Sun Mar 01 00:25:14.313563 2026] [:error] [pid 53600:tid 53608] [client 20.151.11.236:15314] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file59.php"] [unique_id "aaMW6g2UMRAYWtDB23SfhwAAAQU"]
[Sun Mar 01 00:25:15.366628 2026] [:error] [pid 53600:tid 53604] [client 20.151.11.236:15353] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "aaMW6w2UMRAYWtDB23SfjwAAAQE"]
[Sun Mar 01 00:25:16.016925 2026] [:error] [pid 31190:tid 31220] [client 20.151.11.236:15338] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "aaMW7BfvwGOholYpM1E9cwAAAM4"]
[Sun Mar 01 00:25:17.409434 2026] [:error] [pid 30795:tid 30815] [client 20.151.11.236:15180] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "aaMW7WuI44IL94Zgti-lNwAAAAc"]
[Sun Mar 01 00:25:18.266484 2026] [:error] [pid 53600:tid 53606] [client 20.151.11.236:15121] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bless.php"] [unique_id "aaMW7g2UMRAYWtDB23SfrAAAAQM"]
[Sun Mar 01 00:25:18.878756 2026] [:error] [pid 53600:tid 53621] [client 20.151.11.236:15255] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "aaMW7g2UMRAYWtDB23SfsQAAARI"]
[Sun Mar 01 00:25:20.061912 2026] [:error] [pid 31190:tid 31221] [client 20.151.11.236:15299] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "aaMW8BfvwGOholYpM1E9igAAAM8"]
[Sun Mar 01 00:25:20.527500 2026] [:error] [pid 30798:tid 30905] [client 20.151.11.236:15145] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "aaMW8MBkD73gO8wTonY5ygAAAIY"]
[Sun Mar 01 00:25:21.039780 2026] [:error] [pid 53600:tid 53613] [client 20.151.11.236:15239] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "aaMW8Q2UMRAYWtDB23Sf0AAAAQo"]
[Sun Mar 01 00:25:21.461482 2026] [:error] [pid 53600:tid 53623] [client 20.151.11.236:15179] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aaMW8Q2UMRAYWtDB23Sf1QAAARQ"]
[Sun Mar 01 00:25:21.881759 2026] [:error] [pid 53600:tid 53604] [client 20.151.11.236:15261] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aaMW8Q2UMRAYWtDB23Sf2AAAAQE"]
[Sun Mar 01 00:25:22.364519 2026] [:error] [pid 30797:tid 30877] [client 20.151.11.236:15269] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aaMW8vQmcmSQL-3rvLD4bQAAAEY"]
[Sun Mar 01 00:25:23.166553 2026] [:error] [pid 53600:tid 53606] [client 20.151.11.236:15192] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aaMW8w2UMRAYWtDB23Sf6gAAAQM"]
[Sun Mar 01 00:25:23.949527 2026] [:error] [pid 53600:tid 53620] [client 20.151.11.236:15131] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aaMW8w2UMRAYWtDB23Sf9wAAARE"]
[Sun Mar 01 00:25:24.479623 2026] [:error] [pid 53600:tid 53610] [client 20.151.11.236:15308] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aaMW9A2UMRAYWtDB23Sf-gAAAQc"]
[Sun Mar 01 00:25:25.469129 2026] [:error] [pid 30795:tid 30818] [client 20.151.11.236:15189] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aaMW9WuI44IL94Zgti-lUAAAAAo"]
[Sun Mar 01 00:25:26.193628 2026] [:error] [pid 30795:tid 30823] [client 20.151.11.236:15279] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aaMW9muI44IL94Zgti-lUwAAAA8"]
[Sun Mar 01 00:25:27.242338 2026] [:error] [pid 30795:tid 30816] [client 20.151.11.236:15223] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aaMW92uI44IL94Zgti-lVwAAAAg"]
[Sun Mar 01 00:25:27.948169 2026] [:error] [pid 30795:tid 30811] [client 20.151.11.236:15305] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aaMW92uI44IL94Zgti-lXQAAAAM"]
[Sun Mar 01 00:25:28.602121 2026] [:error] [pid 31190:tid 31224] [client 20.151.11.236:15257] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aaMW-BfvwGOholYpM1E9nwAAANI"]
[Sun Mar 01 00:25:29.460024 2026] [:error] [pid 53600:tid 53614] [client 20.151.11.236:15292] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aaMW-Q2UMRAYWtDB23SgGAAAAQs"]
[Sun Mar 01 00:25:30.321948 2026] [:error] [pid 53600:tid 53604] [client 20.151.11.236:15329] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaMW-g2UMRAYWtDB23SgHQAAAQE"]
[Sun Mar 01 00:25:31.514908 2026] [:error] [pid 31190:tid 31224] [client 20.151.11.236:15288] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaMW-xfvwGOholYpM1E9sgAAANI"]
[Sun Mar 01 00:25:32.973326 2026] [:error] [pid 31190:tid 31229] [client 20.151.11.236:15190] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaMW_BfvwGOholYpM1E9uwAAANc"]
[Sun Mar 01 00:25:33.915632 2026] [:error] [pid 53600:tid 53613] [client 20.151.11.236:15221] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaMW_Q2UMRAYWtDB23SgJQAAAQo"]
[Sun Mar 01 00:25:34.607529 2026] [:error] [pid 30798:tid 30917] [client 20.151.11.236:15115] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a.php"] [unique_id "aaMW_sBkD73gO8wTonY55AAAAJI"]
[Sun Mar 01 00:25:36.261571 2026] [:error] [pid 31190:tid 31229] [client 20.151.11.236:15300] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a.php"] [unique_id "aaMXABfvwGOholYpM1E9xQAAANc"]
[Sun Mar 01 00:25:37.657092 2026] [:error] [pid 53600:tid 53622] [client 20.151.11.236:15278] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a.php"] [unique_id "aaMXAQ2UMRAYWtDB23SgRQAAARM"]
[Sun Mar 01 00:25:38.665634 2026] [:error] [pid 53600:tid 53625] [client 20.151.11.236:15058] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a.php"] [unique_id "aaMXAg2UMRAYWtDB23SgWAAAARY"]
[Sun Mar 01 00:25:39.338648 2026] [:error] [pid 31190:tid 31213] [client 20.151.11.236:15284] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/06.php"] [unique_id "aaMXAxfvwGOholYpM1E9ygAAAMc"]
[Sun Mar 01 00:25:40.040630 2026] [:error] [pid 30797:tid 30884] [client 20.151.11.236:15271] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/06.php"] [unique_id "aaMXBPQmcmSQL-3rvLD4hQAAAE0"]
[Sun Mar 01 00:25:40.465050 2026] [:error] [pid 30795:tid 30807] [client 20.151.11.236:15181] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/06.php"] [unique_id "aaMXBGuI44IL94Zgti-lfAAAAAA"]
[Sun Mar 01 00:25:41.030414 2026] [:error] [pid 53600:tid 53613] [client 20.151.11.236:15186] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/06.php"] [unique_id "aaMXBQ2UMRAYWtDB23SgbAAAAQo"]
[Sun Mar 01 00:25:41.469136 2026] [:error] [pid 53600:tid 53607] [client 20.151.11.236:15309] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plss3.php"] [unique_id "aaMXBQ2UMRAYWtDB23SgbwAAAQQ"]
[Sun Mar 01 00:25:42.106076 2026] [:error] [pid 53600:tid 53616] [client 20.151.11.236:15268] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plss3.php"] [unique_id "aaMXBg2UMRAYWtDB23SgdAAAAQ0"]
[Sun Mar 01 00:25:44.747977 2026] [:error] [pid 53600:tid 53612] [client 20.151.11.236:15201] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plss3.php"] [unique_id "aaMXCA2UMRAYWtDB23SgiwAAAQk"]
[Sun Mar 01 00:25:46.341329 2026] [:error] [pid 30795:tid 30830] [client 20.151.11.236:15229] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plss3.php"] [unique_id "aaMXCmuI44IL94Zgti-ljgAAABY"]
[Sun Mar 01 00:25:48.691922 2026] [:error] [pid 31190:tid 31217] [client 20.151.11.236:15199] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "aaMXDBfvwGOholYpM1E95gAAAMs"]
[Sun Mar 01 00:25:49.421703 2026] [:error] [pid 31190:tid 31221] [client 20.151.11.236:15348] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "aaMXDRfvwGOholYpM1E98AAAAM8"]
[Sun Mar 01 00:25:49.912502 2026] [:error] [pid 30795:tid 30832] [client 20.151.11.236:15116] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "aaMXDWuI44IL94Zgti-lpAAAABg"]
[Sun Mar 01 00:25:50.510541 2026] [:error] [pid 30798:tid 30920] [client 20.151.11.236:15312] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "aaMXDsBkD73gO8wTonY5-gAAAJQ"]
[Sun Mar 01 00:25:51.014760 2026] [:error] [pid 53600:tid 53610] [client 20.151.11.236:15233] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aaMXDw2UMRAYWtDB23Sg1AAAAQc"]
[Sun Mar 01 00:25:51.628069 2026] [:error] [pid 31190:tid 31208] [client 20.151.11.236:15286] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aaMXDxfvwGOholYpM1E99AAAAMI"]
[Sun Mar 01 00:25:52.087784 2026] [:error] [pid 30795:tid 30829] [client 20.151.11.236:15262] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aaMXEGuI44IL94Zgti-lqwAAABU"]
[Sun Mar 01 00:25:52.655088 2026] [:error] [pid 53600:tid 53610] [client 20.151.11.236:15178] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aaMXEA2UMRAYWtDB23Sg4wAAAQc"]
[Sun Mar 01 00:25:53.391720 2026] [:error] [pid 30797:tid 30880] [client 20.151.11.236:15225] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aaMXEfQmcmSQL-3rvLD4lAAAAEk"]
[Sun Mar 01 00:25:54.360115 2026] [:error] [pid 53600:tid 53625] [client 20.151.11.236:15172] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aaMXEg2UMRAYWtDB23Sg7AAAARY"]
[Sun Mar 01 00:25:55.142299 2026] [:error] [pid 31190:tid 31217] [client 20.151.11.236:15187] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aaMXExfvwGOholYpM1E-AQAAAMs"]
[Sun Mar 01 00:25:55.708752 2026] [:error] [pid 30795:tid 30824] [client 20.151.11.236:15129] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aaMXE2uI44IL94Zgti-ltAAAABA"]
[Sun Mar 01 00:25:56.309227 2026] [:error] [pid 31190:tid 31218] [client 20.151.11.236:15331] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaMXFBfvwGOholYpM1E-CAAAAMw"]
[Sun Mar 01 00:25:57.044835 2026] [:error] [pid 31190:tid 31216] [client 20.151.11.236:15109] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaMXFRfvwGOholYpM1E-CwAAAMo"]
[Sun Mar 01 00:25:57.906057 2026] [:error] [pid 31190:tid 31214] [client 20.151.11.236:15110] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaMXFRfvwGOholYpM1E-DgAAAMg"]
[Sun Mar 01 00:25:58.821082 2026] [:error] [pid 53600:tid 53609] [client 20.151.11.236:15214] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aaMXFg2UMRAYWtDB23ShCwAAAQY"]
[Sun Mar 01 00:26:07.765184 2026] [:error] [pid 53600:tid 53605] [client 20.151.11.236:15277] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fleen.php"] [unique_id "aaMXHw2UMRAYWtDB23ShUgAAAQI"]
[Sun Mar 01 00:26:08.792102 2026] [:error] [pid 30795:tid 30825] [client 20.151.11.236:15228] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fleen.php"] [unique_id "aaMXIGuI44IL94Zgti-l1AAAABE"]
[Sun Mar 01 00:26:10.166889 2026] [:error] [pid 31190:tid 31224] [client 20.151.11.236:15226] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fleen.php"] [unique_id "aaMXIhfvwGOholYpM1E-MgAAANI"]
[Sun Mar 01 00:26:12.170794 2026] [:error] [pid 31190:tid 31226] [client 20.151.11.236:15275] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fleen.php"] [unique_id "aaMXJBfvwGOholYpM1E-PAAAANQ"]
[Sun Mar 01 00:26:13.072239 2026] [:error] [pid 30797:tid 30875] [client 20.151.11.236:15167] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaMXJfQmcmSQL-3rvLD4nQAAAEQ"]
[Sun Mar 01 00:26:13.805016 2026] [:error] [pid 30797:tid 30884] [client 20.151.11.236:15207] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaMXJfQmcmSQL-3rvLD4nwAAAE0"]
[Sun Mar 01 00:26:14.819319 2026] [:error] [pid 53600:tid 53607] [client 20.151.11.236:15128] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaMXJg2UMRAYWtDB23ShdQAAAQQ"]
[Sun Mar 01 00:26:15.716976 2026] [:error] [pid 30797:tid 30872] [client 20.151.11.236:15264] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaMXJ_QmcmSQL-3rvLD4pgAAAEE"]
[Sun Mar 01 00:26:17.075866 2026] [:error] [pid 31190:tid 31210] [client 20.151.11.236:15220] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aaMXKRfvwGOholYpM1E-SQAAAMQ"]
[Sun Mar 01 00:26:17.689629 2026] [:error] [pid 53600:tid 53616] [client 20.151.11.236:15135] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aaMXKQ2UMRAYWtDB23ShiwAAAQ0"]
[Sun Mar 01 00:26:19.098909 2026] [:error] [pid 30795:tid 30819] [client 20.151.11.236:15206] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aaMXK2uI44IL94Zgti-l8gAAAAs"]
[Sun Mar 01 00:26:19.622838 2026] [:error] [pid 30798:tid 30912] [client 20.151.11.236:15119] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aaMXK8BkD73gO8wTonY6FwAAAI0"]
[Sun Mar 01 00:26:20.651876 2026] [:error] [pid 31190:tid 31214] [client 20.151.11.236:15054] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aaMXLBfvwGOholYpM1E-VAAAAMg"]
[Sun Mar 01 00:26:21.581050 2026] [:error] [pid 53600:tid 53608] [client 20.151.11.236:15289] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aaMXLQ2UMRAYWtDB23ShngAAAQU"]
[Sun Mar 01 00:26:24.347016 2026] [:error] [pid 53600:tid 53611] [client 20.151.11.236:15168] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aaMXMA2UMRAYWtDB23ShrgAAAQg"]
[Sun Mar 01 00:26:27.048704 2026] [:error] [pid 31190:tid 31221] [client 20.151.11.236:15118] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aaMXMxfvwGOholYpM1E-agAAAM8"]
[Sun Mar 01 00:26:28.292617 2026] [:error] [pid 53600:tid 53610] [client 20.151.11.236:15040] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "aaMXNA2UMRAYWtDB23ShwwAAAQc"]
[Sun Mar 01 00:26:30.214300 2026] [:error] [pid 31190:tid 31230] [client 20.151.11.236:15349] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "aaMXNhfvwGOholYpM1E-eQAAANg"]
[Sun Mar 01 00:26:33.106757 2026] [:error] [pid 53600:tid 53613] [client 20.151.11.236:15170] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "aaMXOQ2UMRAYWtDB23Sh5AAAAQo"]
[Sun Mar 01 00:26:33.872187 2026] [:error] [pid 31190:tid 31229] [client 20.151.11.236:15217] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "aaMXORfvwGOholYpM1E-pwAAANc"]
[Sun Mar 01 00:26:34.345681 2026] [:error] [pid 53600:tid 53606] [client 20.151.11.236:15144] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aaMXOg2UMRAYWtDB23Sh9QAAAQM"]
[Sun Mar 01 00:26:34.814009 2026] [:error] [pid 31190:tid 31206] [client 20.151.11.236:15107] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aaMXOhfvwGOholYpM1E-rAAAAMA"]
[Sun Mar 01 00:26:35.365804 2026] [:error] [pid 30795:tid 30825] [client 20.151.11.236:15141] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aaMXO2uI44IL94Zgti-mYQAAABE"]
[Sun Mar 01 00:26:35.813490 2026] [:error] [pid 53600:tid 53606] [client 20.151.11.236:15294] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aaMXOw2UMRAYWtDB23SiAAAAAQM"]
[Sun Mar 01 00:26:36.311498 2026] [:error] [pid 53600:tid 53616] [client 20.151.11.236:15211] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aaMXPA2UMRAYWtDB23SiAwAAAQ0"]
[Sun Mar 01 00:26:36.995632 2026] [:error] [pid 53600:tid 53625] [client 20.151.11.236:15124] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aaMXPA2UMRAYWtDB23SiCgAAARY"]
[Sun Mar 01 00:26:37.677285 2026] [:error] [pid 53600:tid 53611] [client 20.151.11.236:15161] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aaMXPQ2UMRAYWtDB23SiEAAAAQg"]
[Sun Mar 01 00:26:38.251344 2026] [:error] [pid 53600:tid 53608] [client 20.151.11.236:15328] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aaMXPg2UMRAYWtDB23SiEwAAAQU"]
[Sun Mar 01 00:26:38.703594 2026] [:error] [pid 30795:tid 30824] [client 20.151.11.236:15140] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plugins.php"] [unique_id "aaMXPmuI44IL94Zgti-mfwAAABA"]
[Sun Mar 01 00:26:39.140388 2026] [:error] [pid 53600:tid 53617] [client 20.151.11.236:15104] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plugins.php"] [unique_id "aaMXPw2UMRAYWtDB23SiGwAAAQ4"]
[Sun Mar 01 00:26:39.557448 2026] [:error] [pid 30795:tid 30814] [client 20.151.11.236:15041] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plugins.php"] [unique_id "aaMXP2uI44IL94Zgti-mhwAAAAY"]
[Sun Mar 01 00:26:40.502648 2026] [:error] [pid 53600:tid 53603] [client 20.151.11.236:15185] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plugins.php"] [unique_id "aaMXQA2UMRAYWtDB23SiKQAAAQA"]
[Sun Mar 01 00:26:41.031493 2026] [:error] [pid 53600:tid 53613] [client 20.151.11.236:15048] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaMXQQ2UMRAYWtDB23SiLwAAAQo"]
[Sun Mar 01 00:26:41.749407 2026] [:error] [pid 30795:tid 30817] [client 20.151.11.236:14986] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaMXQWuI44IL94Zgti-mlgAAAAk"]
[Sun Mar 01 00:26:43.139117 2026] [:error] [pid 53600:tid 53619] [client 20.151.11.236:15210] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaMXQw2UMRAYWtDB23SiPQAAARA"]
[Sun Mar 01 00:26:44.538579 2026] [:error] [pid 31190:tid 31214] [client 20.151.11.236:15132] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aaMXRBfvwGOholYpM1E-xQAAAMg"]
[Sun Mar 01 00:26:45.613929 2026] [:error] [pid 53600:tid 53612] [client 20.151.11.236:15113] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aaMXRQ2UMRAYWtDB23SiSgAAAQk"]
[Sun Mar 01 00:26:46.993835 2026] [:error] [pid 53600:tid 53611] [client 20.151.11.236:15164] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aaMXRg2UMRAYWtDB23SiUgAAAQg"]
[Sun Mar 01 00:26:49.908230 2026] [:error] [pid 30795:tid 30831] [client 20.151.11.236:15218] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aaMXSWuI44IL94Zgti-mywAAABc"]
[Sun Mar 01 00:26:51.478288 2026] [:error] [pid 30797:tid 30889] [client 20.151.11.236:15202] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "aaMXS_QmcmSQL-3rvLD4xgAAAFI"]
[Sun Mar 01 00:26:52.252295 2026] [:error] [pid 31190:tid 31221] [client 20.151.11.236:15158] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "aaMXTBfvwGOholYpM1E-3QAAAM8"]
[Sun Mar 01 00:26:52.824475 2026] [:error] [pid 31190:tid 31224] [client 20.151.11.236:15193] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "aaMXTBfvwGOholYpM1E-4QAAANI"]
[Sun Mar 01 00:26:53.573924 2026] [:error] [pid 53600:tid 53613] [client 20.151.11.236:15215] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "aaMXTQ2UMRAYWtDB23SihgAAAQo"]
[Sun Mar 01 00:26:54.318115 2026] [:error] [pid 53600:tid 53618] [client 20.151.11.236:15157] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "aaMXTg2UMRAYWtDB23SikQAAAQ8"]
[Sun Mar 01 00:26:57.234308 2026] [:error] [pid 30795:tid 30822] [client 20.151.11.236:15166] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aaMXUWuI44IL94Zgti-m9QAAAA4"]
[Sun Mar 01 00:26:58.595847 2026] [:error] [pid 53600:tid 53624] [client 20.151.11.236:15358] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aaMXUg2UMRAYWtDB23SivgAAARU"]
[Sun Mar 01 00:26:59.899907 2026] [:error] [pid 53600:tid 53608] [client 20.151.11.236:15194] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aaMXUw2UMRAYWtDB23SiyQAAAQU"]
[Sun Mar 01 00:27:00.775361 2026] [:error] [pid 53600:tid 53620] [client 20.151.11.236:15330] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aaMXVA2UMRAYWtDB23Si0QAAARE"]
[Sun Mar 01 00:27:01.321225 2026] [:error] [pid 31190:tid 31206] [client 20.151.11.236:15208] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aaMXVRfvwGOholYpM1E_CwAAAMA"]
[Sun Mar 01 00:27:02.533595 2026] [:error] [pid 53600:tid 53606] [client 20.151.11.236:15055] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aaMXVg2UMRAYWtDB23Si4AAAAQM"]
[Sun Mar 01 00:27:03.075642 2026] [:error] [pid 30795:tid 30807] [client 20.151.11.236:15159] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aaMXV2uI44IL94Zgti-nDAAAAAA"]
[Sun Mar 01 00:27:03.856652 2026] [:error] [pid 53600:tid 53613] [client 20.151.11.236:15120] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aaMXVw2UMRAYWtDB23Si5QAAAQo"]
[Sun Mar 01 00:27:04.775556 2026] [:error] [pid 53600:tid 53606] [client 20.151.11.236:15209] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/goat.php"] [unique_id "aaMXWA2UMRAYWtDB23Si7QAAAQM"]
[Sun Mar 01 00:27:06.251661 2026] [:error] [pid 30798:tid 30911] [client 20.151.11.236:15230] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/goat.php"] [unique_id "aaMXWsBkD73gO8wTonY6TgAAAIw"]
[Sun Mar 01 00:27:06.961919 2026] [:error] [pid 53600:tid 53625] [client 20.151.11.236:15231] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/goat.php"] [unique_id "aaMXWg2UMRAYWtDB23Si9AAAARY"]
[Sun Mar 01 00:27:18.224803 2026] [:error] [pid 53600:tid 53607] [client 20.151.11.236:15112] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aaMXZg2UMRAYWtDB23SjKAAAAQQ"]
[Sun Mar 01 00:27:20.678120 2026] [:error] [pid 31190:tid 31226] [client 20.151.11.236:15176] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aaMXaBfvwGOholYpM1E_VwAAANQ"]
[Sun Mar 01 00:27:21.602233 2026] [:error] [pid 31190:tid 31217] [client 20.151.11.236:15130] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aaMXaRfvwGOholYpM1E_XwAAAMs"]
[Sun Mar 01 00:27:22.841439 2026] [:error] [pid 53600:tid 53607] [client 20.151.11.236:15295] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aaMXag2UMRAYWtDB23SjMQAAAQQ"]
[Sun Mar 01 00:27:23.546097 2026] [:error] [pid 31190:tid 31217] [client 20.151.11.236:15151] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/assets/css/index.php"] [unique_id "aaMXaxfvwGOholYpM1E_awAAAMs"]
[Sun Mar 01 00:27:24.168164 2026] [:error] [pid 30798:tid 30918] [client 20.151.11.236:15111] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/assets/css/index.php"] [unique_id "aaMXbMBkD73gO8wTonY6YwAAAJM"]
[Sun Mar 01 00:27:24.632495 2026] [:error] [pid 30798:tid 30902] [client 20.151.11.236:15216] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/assets/css/index.php"] [unique_id "aaMXbMBkD73gO8wTonY6ZgAAAIM"]
[Sun Mar 01 00:27:25.106199 2026] [:error] [pid 53600:tid 53613] [client 20.151.11.236:15059] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/assets/css/index.php"] [unique_id "aaMXbQ2UMRAYWtDB23SjNQAAAQo"]
[Sun Mar 01 00:27:25.545197 2026] [:error] [pid 53600:tid 53622] [client 20.151.11.236:15149] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/w4.php"] [unique_id "aaMXbQ2UMRAYWtDB23SjNwAAARM"]
[Sun Mar 01 00:27:26.136320 2026] [:error] [pid 53600:tid 53607] [client 20.151.11.236:15071] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/w4.php"] [unique_id "aaMXbg2UMRAYWtDB23SjPQAAAQQ"]
[Sun Mar 01 00:27:26.613570 2026] [:error] [pid 31190:tid 31216] [client 20.151.11.236:15205] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/w4.php"] [unique_id "aaMXbhfvwGOholYpM1E_eQAAAMo"]
[Sun Mar 01 00:27:27.129836 2026] [:error] [pid 53600:tid 53614] [client 20.151.11.236:15266] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/w4.php"] [unique_id "aaMXbw2UMRAYWtDB23SjQgAAAQs"]
[Sun Mar 01 00:27:27.566479 2026] [:error] [pid 31190:tid 31217] [client 20.151.11.236:15169] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaMXbxfvwGOholYpM1E_egAAAMs"]
[Sun Mar 01 00:27:28.251605 2026] [:error] [pid 31190:tid 31226] [client 20.151.11.236:14922] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaMXcBfvwGOholYpM1E_gQAAANQ"]
[Sun Mar 01 00:27:28.794438 2026] [:error] [pid 30798:tid 30918] [client 20.151.11.236:15063] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaMXcMBkD73gO8wTonY6cwAAAJM"]
[Sun Mar 01 00:27:29.281219 2026] [:error] [pid 30795:tid 30813] [client 20.151.11.236:15108] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/widgets/index.php"] [unique_id "aaMXcWuI44IL94Zgti-njQAAAAU"]
[Sun Mar 01 00:27:30.082906 2026] [:error] [pid 31190:tid 31227] [client 20.151.11.236:15060] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aaMXchfvwGOholYpM1E_igAAANU"]
[Sun Mar 01 00:27:31.082982 2026] [:error] [pid 53600:tid 53623] [client 20.151.11.236:15224] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aaMXcw2UMRAYWtDB23SjTAAAARQ"]
[Sun Mar 01 00:27:32.001085 2026] [:error] [pid 53600:tid 53626] [client 20.151.11.236:15051] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aaMXdA2UMRAYWtDB23SjUQAAARc"]
[Sun Mar 01 00:27:32.617251 2026] [:error] [pid 30795:tid 30822] [client 20.151.11.236:14984] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aaMXdGuI44IL94Zgti-npQAAAA4"]
[Sun Mar 01 00:27:33.112473 2026] [:error] [pid 31190:tid 31225] [client 20.151.11.236:15139] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aaMXdRfvwGOholYpM1E_lAAAANM"]
[Sun Mar 01 00:27:34.318178 2026] [:error] [pid 53600:tid 53624] [client 20.151.11.236:15171] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aaMXdg2UMRAYWtDB23SjXgAAARU"]
[Sun Mar 01 00:27:34.986847 2026] [:error] [pid 53600:tid 53615] [client 20.151.11.236:15222] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aaMXdg2UMRAYWtDB23SjYgAAAQw"]
[Sun Mar 01 00:27:35.545166 2026] [:error] [pid 30795:tid 30813] [client 20.151.11.236:15325] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aaMXd2uI44IL94Zgti-nvgAAAAU"]
[Sun Mar 01 00:27:36.733704 2026] [:error] [pid 53600:tid 53616] [client 20.151.11.236:15287] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tymn.php"] [unique_id "aaMXeA2UMRAYWtDB23SjaAAAAQ0"]
[Sun Mar 01 00:27:37.798560 2026] [:error] [pid 53600:tid 53618] [client 20.151.11.236:15049] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tymn.php"] [unique_id "aaMXeQ2UMRAYWtDB23SjcAAAAQ8"]
[Sun Mar 01 00:27:38.432265 2026] [:error] [pid 30795:tid 30824] [client 20.151.11.236:15212] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tymn.php"] [unique_id "aaMXemuI44IL94Zgti-nzQAAABA"]
[Sun Mar 01 00:27:39.272111 2026] [:error] [pid 53600:tid 53622] [client 20.151.11.236:15125] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tymn.php"] [unique_id "aaMXew2UMRAYWtDB23SjeAAAARM"]
[Sun Mar 01 00:27:40.419362 2026] [:error] [pid 53600:tid 53616] [client 20.151.11.236:15148] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bak.php"] [unique_id "aaMXfA2UMRAYWtDB23SjfgAAAQ0"]
[Sun Mar 01 00:27:42.147834 2026] [:error] [pid 31190:tid 31220] [client 20.151.11.236:15173] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bak.php"] [unique_id "aaMXfhfvwGOholYpM1E_pgAAAM4"]
[Sun Mar 01 00:27:42.705764 2026] [:error] [pid 53600:tid 53620] [client 20.151.11.236:15069] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bak.php"] [unique_id "aaMXfg2UMRAYWtDB23SjiAAAARE"]
[Sun Mar 01 00:27:43.410464 2026] [:error] [pid 53600:tid 53608] [client 20.151.11.236:14960] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bak.php"] [unique_id "aaMXfw2UMRAYWtDB23SjigAAAQU"]
[Sun Mar 01 00:27:43.964022 2026] [:error] [pid 31190:tid 31218] [client 20.151.11.236:15067] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aaMXfxfvwGOholYpM1E_rAAAAMw"]
[Sun Mar 01 00:27:44.578332 2026] [:error] [pid 31190:tid 31219] [client 20.151.11.236:15137] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aaMXgBfvwGOholYpM1E_rwAAAM0"]
[Sun Mar 01 00:27:45.074441 2026] [:error] [pid 30795:tid 30818] [client 20.151.11.236:15142] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aaMXgWuI44IL94Zgti-n4gAAAAo"]
[Sun Mar 01 00:27:45.842348 2026] [:error] [pid 30798:tid 30922] [client 20.151.11.236:15150] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aaMXgcBkD73gO8wTonY6nQAAAJY"]
[Sun Mar 01 00:27:46.340574 2026] [:error] [pid 30797:tid 30886] [client 20.151.11.236:15086] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aaMXgvQmcmSQL-3rvLD4_QAAAE8"]
[Sun Mar 01 00:27:46.845669 2026] [:error] [pid 31190:tid 31208] [client 20.151.11.236:15106] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aaMXghfvwGOholYpM1E_tgAAAMI"]
[Sun Mar 01 00:27:47.390005 2026] [:error] [pid 53600:tid 53621] [client 20.151.11.236:15156] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aaMXgw2UMRAYWtDB23SjmAAAARI"]
[Sun Mar 01 00:27:48.136643 2026] [:error] [pid 53600:tid 53625] [client 20.151.11.236:15276] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aaMXhA2UMRAYWtDB23SjngAAARY"]
[Sun Mar 01 00:27:48.614403 2026] [:error] [pid 30795:tid 30824] [client 20.151.11.236:15046] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aaMXhGuI44IL94Zgti-n6gAAABA"]
[Sun Mar 01 00:27:49.040659 2026] [:error] [pid 30795:tid 30822] [client 20.151.11.236:15291] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aaMXhWuI44IL94Zgti-n7gAAAA4"]
[Sun Mar 01 00:27:49.463939 2026] [:error] [pid 53600:tid 53612] [client 20.151.11.236:15154] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aaMXhQ2UMRAYWtDB23SjoQAAAQk"]
[Sun Mar 01 00:27:50.153768 2026] [:error] [pid 53600:tid 53614] [client 20.151.11.236:15090] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aaMXhg2UMRAYWtDB23SjqQAAAQs"]
[Sun Mar 01 00:27:50.651708 2026] [:error] [pid 53600:tid 53609] [client 20.151.11.236:15085] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aaMXhg2UMRAYWtDB23SjrwAAAQY"]
[Sun Mar 01 00:27:51.165408 2026] [:error] [pid 30798:tid 30920] [client 20.151.11.236:15072] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aaMXh8BkD73gO8wTonY6owAAAJQ"]
[Sun Mar 01 00:27:51.729808 2026] [:error] [pid 30795:tid 30814] [client 20.151.11.236:15153] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aaMXh2uI44IL94Zgti-n9QAAAAY"]
[Sun Mar 01 00:27:52.230644 2026] [:error] [pid 30797:tid 30887] [client 20.151.11.236:14995] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aaMXiPQmcmSQL-3rvLD5AgAAAFA"]
[Sun Mar 01 00:27:52.797210 2026] [:error] [pid 53600:tid 53606] [client 20.151.11.236:15188] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/av.php"] [unique_id "aaMXiA2UMRAYWtDB23SjuAAAAQM"]
[Sun Mar 01 00:27:53.265961 2026] [:error] [pid 53600:tid 53603] [client 20.151.11.236:15056] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/av.php"] [unique_id "aaMXiQ2UMRAYWtDB23SjvgAAAQA"]
[Sun Mar 01 00:27:53.720773 2026] [:error] [pid 53600:tid 53618] [client 20.151.11.236:15155] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/av.php"] [unique_id "aaMXiQ2UMRAYWtDB23SjwgAAAQ8"]
[Sun Mar 01 00:27:54.132203 2026] [:error] [pid 30795:tid 30827] [client 20.151.11.236:15089] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/av.php"] [unique_id "aaMXimuI44IL94Zgti-n_wAAABM"]
[Sun Mar 01 00:27:54.547845 2026] [:error] [pid 30795:tid 30821] [client 20.151.11.236:15133] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aaMXimuI44IL94Zgti-oAgAAAA0"]
[Sun Mar 01 00:27:54.957445 2026] [:error] [pid 31190:tid 31224] [client 20.151.11.236:15238] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aaMXihfvwGOholYpM1E_ywAAANI"]
[Sun Mar 01 00:27:55.377644 2026] [:error] [pid 30797:tid 30888] [client 20.151.11.236:14979] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aaMXi_QmcmSQL-3rvLD5AwAAAFE"]
[Sun Mar 01 00:27:55.791297 2026] [:error] [pid 31190:tid 31210] [client 20.151.11.236:15143] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aaMXixfvwGOholYpM1E_1wAAAMQ"]
[Sun Mar 01 00:27:56.223667 2026] [:error] [pid 53600:tid 53609] [client 20.151.11.236:15134] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/init.php"] [unique_id "aaMXjA2UMRAYWtDB23Sj1wAAAQY"]
[Sun Mar 01 00:27:56.637229 2026] [:error] [pid 31190:tid 31229] [client 20.151.11.236:15053] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/init.php"] [unique_id "aaMXjBfvwGOholYpM1E_3gAAANc"]
[Sun Mar 01 00:27:57.049520 2026] [:error] [pid 30795:tid 30811] [client 20.151.11.236:15346] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/init.php"] [unique_id "aaMXjWuI44IL94Zgti-oDAAAAAM"]
[Sun Mar 01 00:27:57.463725 2026] [:error] [pid 53600:tid 53607] [client 20.151.11.236:15057] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/init.php"] [unique_id "aaMXjQ2UMRAYWtDB23Sj4QAAAQQ"]
[Sun Mar 01 00:27:57.910268 2026] [:error] [pid 31190:tid 31219] [client 20.151.11.236:15342] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "aaMXjRfvwGOholYpM1E_5QAAAM0"]
[Sun Mar 01 00:27:58.320508 2026] [:error] [pid 30795:tid 30813] [client 20.151.11.236:15021] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "aaMXjmuI44IL94Zgti-oEAAAAAU"]
[Sun Mar 01 00:27:58.785079 2026] [:error] [pid 30795:tid 30821] [client 20.151.11.236:15073] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "aaMXjmuI44IL94Zgti-oEQAAAA0"]
[Sun Mar 01 00:27:59.378281 2026] [:error] [pid 30795:tid 30815] [client 20.151.11.236:15114] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "aaMXj2uI44IL94Zgti-oEwAAAAc"]
[Sun Mar 01 00:27:59.793731 2026] [:error] [pid 53600:tid 53609] [client 20.151.11.236:15082] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aaMXjw2UMRAYWtDB23Sj5QAAAQY"]
[Sun Mar 01 00:28:00.344659 2026] [:error] [pid 31190:tid 31206] [client 20.151.11.236:15045] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aaMXkBfvwGOholYpM1E_8QAAAMA"]
[Sun Mar 01 00:28:00.776160 2026] [:error] [pid 53600:tid 53608] [client 20.151.11.236:15070] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aaMXkA2UMRAYWtDB23Sj6gAAAQU"]
[Sun Mar 01 00:28:01.323126 2026] [:error] [pid 30797:tid 30890] [client 20.151.11.236:15319] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aaMXkfQmcmSQL-3rvLD5BQAAAFM"]
[Sun Mar 01 00:28:01.791819 2026] [:error] [pid 53600:tid 53620] [client 20.151.11.236:15333] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "aaMXkQ2UMRAYWtDB23Sj7wAAARE"]
[Sun Mar 01 00:28:02.252457 2026] [:error] [pid 31190:tid 31217] [client 20.151.11.236:15147] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "aaMXkhfvwGOholYpM1E_9gAAAMs"]
[Sun Mar 01 00:28:02.668950 2026] [:error] [pid 30795:tid 30823] [client 20.151.11.236:15076] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "aaMXkmuI44IL94Zgti-oIQAAAA8"]
[Sun Mar 01 00:28:03.258503 2026] [:error] [pid 31190:tid 31211] [client 20.151.11.236:15101] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "aaMXkxfvwGOholYpM1E_-QAAAMU"]
[Sun Mar 01 00:28:03.780934 2026] [:error] [pid 30795:tid 30828] [client 20.151.11.236:14997] [client 20.151.11.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aaMXk2uI44IL94Zgti-oJgAAABQ"]
[Sun Mar 01 00:28:04.233350 2026] [:error] [pid 31190:tid 31206] [client 20.151.11.236:15152] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aaMXlBfvwGOholYpM1FAAAAAAMA"]
[Sun Mar 01 00:28:04.948388 2026] [:error] [pid 53600:tid 53611] [client 20.151.11.236:15093] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aaMXlA2UMRAYWtDB23Sj-wAAAQg"]
[Sun Mar 01 00:28:05.441191 2026] [:error] [pid 53600:tid 53616] [client 20.151.11.236:15050] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aaMXlQ2UMRAYWtDB23Sj_gAAAQ0"]
[Sun Mar 01 00:28:05.972254 2026] [:error] [pid 31190:tid 31220] [client 20.151.11.236:15332] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aaMXlRfvwGOholYpM1FAEAAAAM4"]
[Sun Mar 01 00:28:06.513054 2026] [:error] [pid 31190:tid 31207] [client 20.151.11.236:14924] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hi.php"] [unique_id "aaMXlhfvwGOholYpM1FAEwAAAME"]
[Sun Mar 01 00:28:06.948805 2026] [:error] [pid 30795:tid 30819] [client 20.151.11.236:15236] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hi.php"] [unique_id "aaMXlmuI44IL94Zgti-oMwAAAAs"]
[Sun Mar 01 00:28:07.402995 2026] [:error] [pid 31190:tid 31222] [client 20.151.11.236:15094] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hi.php"] [unique_id "aaMXlxfvwGOholYpM1FAGwAAANA"]
[Sun Mar 01 00:28:07.899313 2026] [:error] [pid 31190:tid 31206] [client 20.151.11.236:15042] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hi.php"] [unique_id "aaMXlxfvwGOholYpM1FAHwAAAMA"]
[Sun Mar 01 00:28:08.758962 2026] [:error] [pid 30798:tid 30915] [client 20.151.11.236:15074] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "aaMXmMBkD73gO8wTonY6yQAAAJA"]
[Sun Mar 01 00:28:09.321719 2026] [:error] [pid 30798:tid 30900] [client 20.151.11.236:15138] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "aaMXmcBkD73gO8wTonY6ygAAAIE"]
[Sun Mar 01 00:28:09.785472 2026] [:error] [pid 53600:tid 53611] [client 20.151.11.236:15000] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "aaMXmQ2UMRAYWtDB23SkCwAAAQg"]
[Sun Mar 01 00:28:10.213725 2026] [:error] [pid 31190:tid 31221] [client 20.151.11.236:15234] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "aaMXmhfvwGOholYpM1FAMgAAAM8"]
[Sun Mar 01 00:28:10.672135 2026] [:error] [pid 30795:tid 30832] [client 20.151.11.236:15350] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lb.php"] [unique_id "aaMXmmuI44IL94Zgti-oPgAAABg"]
[Sun Mar 01 00:28:11.087774 2026] [:error] [pid 30795:tid 30813] [client 20.151.11.236:15084] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lb.php"] [unique_id "aaMXm2uI44IL94Zgti-oQQAAAAU"]
[Sun Mar 01 00:28:11.531686 2026] [:error] [pid 31190:tid 31210] [client 20.151.11.236:15336] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lb.php"] [unique_id "aaMXmxfvwGOholYpM1FAOQAAAMQ"]
[Sun Mar 01 00:28:12.006617 2026] [:error] [pid 30795:tid 30825] [client 20.151.11.236:15027] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lb.php"] [unique_id "aaMXnGuI44IL94Zgti-oQwAAABE"]
[Sun Mar 01 00:28:12.488490 2026] [:error] [pid 30795:tid 30819] [client 20.151.11.236:15091] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaMXnGuI44IL94Zgti-oRQAAAAs"]
[Sun Mar 01 00:28:12.916511 2026] [:error] [pid 30795:tid 30822] [client 20.151.11.236:15301] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaMXnGuI44IL94Zgti-oRwAAAA4"]
[Sun Mar 01 00:28:13.366623 2026] [:error] [pid 53600:tid 53616] [client 20.151.11.236:15235] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaMXnQ2UMRAYWtDB23SkDAAAAQ0"]
[Sun Mar 01 00:28:13.778545 2026] [:error] [pid 31190:tid 31212] [client 20.151.11.236:15117] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aaMXnRfvwGOholYpM1FAQAAAAMY"]
[Sun Mar 01 00:28:14.215691 2026] [:error] [pid 30797:tid 30888] [client 20.151.11.236:15282] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/0.php"] [unique_id "aaMXnvQmcmSQL-3rvLD5FAAAAFE"]
[Sun Mar 01 00:28:14.701259 2026] [:error] [pid 53600:tid 53627] [client 20.151.11.236:14998] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/0.php"] [unique_id "aaMXng2UMRAYWtDB23SkEQAAARg"]
[Sun Mar 01 00:28:15.115734 2026] [:error] [pid 31190:tid 31226] [client 20.151.11.236:15343] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/0.php"] [unique_id "aaMXnxfvwGOholYpM1FARwAAANQ"]
[Sun Mar 01 00:28:15.571314 2026] [:error] [pid 53600:tid 53624] [client 20.151.11.236:14954] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/0.php"] [unique_id "aaMXnw2UMRAYWtDB23SkFQAAARU"]
[Sun Mar 01 00:28:16.008099 2026] [:error] [pid 30798:tid 30904] [client 20.151.11.236:15302] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/core.php"] [unique_id "aaMXoMBkD73gO8wTonY60gAAAIU"]
[Sun Mar 01 00:28:16.520773 2026] [:error] [pid 31190:tid 31220] [client 20.151.11.236:15102] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/core.php"] [unique_id "aaMXoBfvwGOholYpM1FATgAAAM4"]
[Sun Mar 01 00:28:16.965773 2026] [:error] [pid 30798:tid 30922] [client 20.151.11.236:15098] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/core.php"] [unique_id "aaMXoMBkD73gO8wTonY61QAAAJY"]
[Sun Mar 01 00:28:23.144207 2026] [:error] [pid 31190:tid 31229] [client 20.151.11.236:15078] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "aaMXpxfvwGOholYpM1FApAAAANc"]
[Sun Mar 01 00:28:23.603769 2026] [:error] [pid 30798:tid 30901] [client 20.151.11.236:15250] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "aaMXp8BkD73gO8wTonY64gAAAII"]
[Sun Mar 01 00:28:24.020991 2026] [:error] [pid 31190:tid 31220] [client 20.151.11.236:15347] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "aaMXqBfvwGOholYpM1FArAAAAM4"]
[Sun Mar 01 00:28:24.474888 2026] [:error] [pid 53600:tid 53612] [client 20.151.11.236:15077] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "aaMXqA2UMRAYWtDB23SkLwAAAQk"]
[Sun Mar 01 00:28:25.022478 2026] [:error] [pid 30797:tid 30871] [client 20.151.11.236:15010] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bengi.php"] [unique_id "aaMXqfQmcmSQL-3rvLD5IQAAAEA"]
[Sun Mar 01 00:28:25.547620 2026] [:error] [pid 31190:tid 31223] [client 20.151.11.236:15146] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bengi.php"] [unique_id "aaMXqRfvwGOholYpM1FAugAAANE"]
[Sun Mar 01 00:28:26.009091 2026] [:error] [pid 30797:tid 30888] [client 20.151.11.236:15359] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bengi.php"] [unique_id "aaMXqvQmcmSQL-3rvLD5IgAAAFE"]
[Sun Mar 01 00:28:26.450347 2026] [:error] [pid 31190:tid 31212] [client 20.151.11.236:15243] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bengi.php"] [unique_id "aaMXqhfvwGOholYpM1FAwwAAAMY"]
[Sun Mar 01 00:28:26.972199 2026] [:error] [pid 53600:tid 53626] [client 20.151.11.236:15244] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/log.php"] [unique_id "aaMXqg2UMRAYWtDB23SkOQAAARc"]
[Sun Mar 01 00:28:27.476918 2026] [:error] [pid 31190:tid 31213] [client 20.151.11.236:15341] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/log.php"] [unique_id "aaMXqxfvwGOholYpM1FAzQAAAMc"]
[Sun Mar 01 00:28:27.892668 2026] [:error] [pid 30795:tid 30830] [client 20.151.11.236:15065] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/log.php"] [unique_id "aaMXq2uI44IL94Zgti-oZAAAABY"]
[Sun Mar 01 00:28:28.341266 2026] [:error] [pid 30795:tid 30821] [client 20.151.11.236:15052] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/log.php"] [unique_id "aaMXrGuI44IL94Zgti-oZQAAAA0"]
[Sun Mar 01 00:28:28.781962 2026] [:error] [pid 31190:tid 31222] [client 20.151.11.236:15310] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/miansha.php"] [unique_id "aaMXrBfvwGOholYpM1FA3gAAANA"]
[Sun Mar 01 00:28:29.240543 2026] [:error] [pid 30795:tid 30815] [client 20.151.11.236:15339] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/miansha.php"] [unique_id "aaMXrWuI44IL94Zgti-obQAAAAc"]
[Sun Mar 01 00:28:29.887518 2026] [:error] [pid 31190:tid 31217] [client 20.151.11.236:14996] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/miansha.php"] [unique_id "aaMXrRfvwGOholYpM1FA4gAAAMs"]
[Sun Mar 01 00:28:30.358476 2026] [:error] [pid 31190:tid 31221] [client 20.151.11.236:15317] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/miansha.php"] [unique_id "aaMXrhfvwGOholYpM1FA5QAAAM8"]
[Sun Mar 01 00:28:30.784793 2026] [:error] [pid 31190:tid 31218] [client 20.151.11.236:15066] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "aaMXrhfvwGOholYpM1FA6AAAAMw"]
[Sun Mar 01 00:28:31.350400 2026] [:error] [pid 53600:tid 53625] [client 20.151.11.236:15320] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "aaMXrw2UMRAYWtDB23SkQQAAARY"]
[Sun Mar 01 00:28:31.784144 2026] [:error] [pid 30795:tid 30821] [client 20.151.11.236:15352] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "aaMXr2uI44IL94Zgti-odwAAAA0"]
[Sun Mar 01 00:28:32.216066 2026] [:error] [pid 31190:tid 31209] [client 20.151.11.236:15273] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "aaMXsBfvwGOholYpM1FA9QAAAMM"]
[Sun Mar 01 00:28:32.711405 2026] [:error] [pid 53600:tid 53623] [client 20.151.11.236:15099] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaMXsA2UMRAYWtDB23SkRgAAARQ"]
[Sun Mar 01 00:28:33.265834 2026] [:error] [pid 30798:tid 30912] [client 20.151.11.236:14978] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaMXscBkD73gO8wTonY69wAAAI0"]
[Sun Mar 01 00:28:33.680738 2026] [:error] [pid 31190:tid 31218] [client 20.151.11.236:15313] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaMXsRfvwGOholYpM1FA-gAAAMw"]
[Sun Mar 01 00:28:34.128087 2026] [:error] [pid 31190:tid 31227] [client 20.151.11.236:15096] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aaMXshfvwGOholYpM1FA-wAAANU"]
[Sun Mar 01 00:28:34.604230 2026] [:error] [pid 30795:tid 30807] [client 20.151.11.236:15356] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/X57.php"] [unique_id "aaMXsmuI44IL94Zgti-oiAAAAAA"]
[Sun Mar 01 00:28:35.128838 2026] [:error] [pid 53600:tid 53604] [client 20.151.11.236:15253] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/X57.php"] [unique_id "aaMXsw2UMRAYWtDB23SkTgAAAQE"]
[Sun Mar 01 00:28:35.593930 2026] [:error] [pid 30795:tid 30818] [client 20.151.11.236:15126] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/X57.php"] [unique_id "aaMXs2uI44IL94Zgti-ojQAAAAo"]
[Sun Mar 01 00:28:36.101477 2026] [:error] [pid 30795:tid 30824] [client 20.151.11.236:15237] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/X57.php"] [unique_id "aaMXtGuI44IL94Zgti-ojgAAABA"]
[Sun Mar 01 00:28:36.534019 2026] [:error] [pid 31190:tid 31213] [client 20.151.11.236:15259] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "aaMXtBfvwGOholYpM1FBBwAAAMc"]
[Sun Mar 01 00:28:37.025913 2026] [:error] [pid 30798:tid 30924] [client 20.151.11.236:15033] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "aaMXtcBkD73gO8wTonY7AAAAAJg"]
[Sun Mar 01 00:28:37.539466 2026] [:error] [pid 53600:tid 53626] [client 20.151.11.236:15357] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "aaMXtQ2UMRAYWtDB23SkVwAAARc"]
[Sun Mar 01 00:28:37.996453 2026] [:error] [pid 53600:tid 53606] [client 20.151.11.236:15251] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "aaMXtQ2UMRAYWtDB23SkWQAAAQM"]
[Sun Mar 01 00:28:38.442603 2026] [:error] [pid 31190:tid 31216] [client 20.151.11.236:15204] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alfashell.php"] [unique_id "aaMXthfvwGOholYpM1FBEAAAAMo"]
[Sun Mar 01 00:28:38.889057 2026] [:error] [pid 30795:tid 30830] [client 20.151.11.236:15047] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alfashell.php"] [unique_id "aaMXtmuI44IL94Zgti-olgAAABY"]
[Sun Mar 01 00:28:39.307246 2026] [:error] [pid 31190:tid 31213] [client 20.151.11.236:14976] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alfashell.php"] [unique_id "aaMXtxfvwGOholYpM1FBFQAAAMc"]
[Sun Mar 01 00:28:39.746874 2026] [:error] [pid 30795:tid 30831] [client 20.151.11.236:15083] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alfashell.php"] [unique_id "aaMXt2uI44IL94Zgti-omgAAABc"]
[Sun Mar 01 00:28:40.156259 2026] [:error] [pid 31190:tid 31228] [client 20.151.11.236:15196] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/myfile.php"] [unique_id "aaMXuBfvwGOholYpM1FBGwAAANY"]
[Sun Mar 01 00:28:40.602740 2026] [:error] [pid 53600:tid 53622] [client 20.151.11.236:15249] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/myfile.php"] [unique_id "aaMXuA2UMRAYWtDB23SkawAAARM"]
[Sun Mar 01 00:28:41.097318 2026] [:error] [pid 53600:tid 53621] [client 20.151.11.236:15160] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/myfile.php"] [unique_id "aaMXuQ2UMRAYWtDB23SkcQAAARI"]
[Sun Mar 01 00:28:41.532593 2026] [:error] [pid 53600:tid 53617] [client 20.151.11.236:15354] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/myfile.php"] [unique_id "aaMXuQ2UMRAYWtDB23SkdAAAAQ4"]
[Sun Mar 01 00:28:41.978610 2026] [:error] [pid 53600:tid 53625] [client 20.151.11.236:15009] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/re.php"] [unique_id "aaMXuQ2UMRAYWtDB23SkegAAARY"]
[Sun Mar 01 00:28:42.437885 2026] [:error] [pid 53600:tid 53617] [client 20.151.11.236:15182] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/re.php"] [unique_id "aaMXug2UMRAYWtDB23SkfwAAAQ4"]
[Sun Mar 01 00:28:42.888920 2026] [:error] [pid 53600:tid 53603] [client 20.151.11.236:15197] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/re.php"] [unique_id "aaMXug2UMRAYWtDB23SkggAAAQA"]
[Sun Mar 01 00:28:43.367618 2026] [:error] [pid 53600:tid 53613] [client 20.151.11.236:15330] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/re.php"] [unique_id "aaMXuw2UMRAYWtDB23SkiQAAAQo"]
[Sun Mar 01 00:28:43.781600 2026] [:error] [pid 31190:tid 31215] [client 20.151.11.236:15039] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/styll.php"] [unique_id "aaMXuxfvwGOholYpM1FBLQAAAMk"]
[Sun Mar 01 00:28:44.233569 2026] [:error] [pid 31190:tid 31209] [client 20.151.11.236:15290] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/styll.php"] [unique_id "aaMXvBfvwGOholYpM1FBMAAAAMM"]
[Sun Mar 01 00:28:44.707153 2026] [:error] [pid 30795:tid 30810] [client 20.151.11.236:15240] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/styll.php"] [unique_id "aaMXvGuI44IL94Zgti-oqgAAAAI"]
[Sun Mar 01 00:28:45.122110 2026] [:error] [pid 30797:tid 30872] [client 20.151.11.236:14981] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/styll.php"] [unique_id "aaMXvfQmcmSQL-3rvLD5MAAAAEE"]
[Sun Mar 01 00:28:45.611329 2026] [:error] [pid 30798:tid 30924] [client 20.151.11.236:15043] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "aaMXvcBkD73gO8wTonY7DgAAAJg"]
[Sun Mar 01 00:28:46.062051 2026] [:error] [pid 30797:tid 30890] [client 20.151.11.236:15034] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "aaMXvvQmcmSQL-3rvLD5OAAAAFM"]
[Sun Mar 01 00:28:46.474019 2026] [:error] [pid 30798:tid 30910] [client 20.151.11.236:15163] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "aaMXvsBkD73gO8wTonY7GAAAAIs"]
[Sun Mar 01 00:28:46.943201 2026] [:error] [pid 53600:tid 53619] [client 20.151.11.236:14991] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "aaMXvg2UMRAYWtDB23SkkQAAARA"]
[Sun Mar 01 00:28:47.380065 2026] [:error] [pid 31190:tid 31226] [client 20.151.11.236:15191] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/flower2.php"] [unique_id "aaMXvxfvwGOholYpM1FBNgAAANQ"]
[Sun Mar 01 00:28:47.913678 2026] [:error] [pid 30795:tid 30832] [client 20.151.11.236:14930] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/flower2.php"] [unique_id "aaMXv2uI44IL94Zgti-ouAAAABg"]
[Sun Mar 01 00:28:48.443255 2026] [:error] [pid 30798:tid 30901] [client 20.151.11.236:15014] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/flower2.php"] [unique_id "aaMXwMBkD73gO8wTonY7JgAAAII"]
[Sun Mar 01 00:28:48.910821 2026] [:error] [pid 30795:tid 30809] [client 20.151.11.236:15004] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/flower2.php"] [unique_id "aaMXwGuI44IL94Zgti-ovAAAAAE"]
[Sun Mar 01 00:28:49.397368 2026] [:error] [pid 53600:tid 53607] [client 20.151.11.236:15232] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/4h.php"] [unique_id "aaMXwQ2UMRAYWtDB23SklgAAAQQ"]
[Sun Mar 01 00:28:49.874837 2026] [:error] [pid 31190:tid 31209] [client 20.151.11.236:15183] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/4h.php"] [unique_id "aaMXwRfvwGOholYpM1FBPAAAAMM"]
[Sun Mar 01 00:28:50.314979 2026] [:error] [pid 30795:tid 30828] [client 20.151.11.236:15044] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/4h.php"] [unique_id "aaMXwmuI44IL94Zgti-owAAAABQ"]
[Sun Mar 01 00:28:50.834732 2026] [:error] [pid 30795:tid 30818] [client 20.151.11.236:15005] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/4h.php"] [unique_id "aaMXwmuI44IL94Zgti-oxAAAAAo"]
[Sun Mar 01 00:28:51.286140 2026] [:error] [pid 31190:tid 31209] [client 20.151.11.236:15022] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aaMXwxfvwGOholYpM1FBTAAAAMM"]
[Sun Mar 01 00:28:51.786984 2026] [:error] [pid 31190:tid 31230] [client 20.151.11.236:15272] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aaMXwxfvwGOholYpM1FBUwAAANg"]
[Sun Mar 01 00:28:52.313854 2026] [:error] [pid 53600:tid 53603] [client 20.151.11.236:14994] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aaMXxA2UMRAYWtDB23SkoQAAAQA"]
[Sun Mar 01 00:28:52.730505 2026] [:error] [pid 30795:tid 30820] [client 20.151.11.236:15252] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aaMXxGuI44IL94Zgti-oyQAAAAw"]
[Sun Mar 01 00:28:53.186802 2026] [:error] [pid 53600:tid 53617] [client 20.151.11.236:15311] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aaMXxQ2UMRAYWtDB23SkpQAAAQ4"]
[Sun Mar 01 00:28:53.630328 2026] [:error] [pid 30795:tid 30810] [client 20.151.11.236:15246] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aaMXxWuI44IL94Zgti-oywAAAAI"]
[Sun Mar 01 00:28:54.109184 2026] [:error] [pid 53600:tid 53612] [client 20.151.11.236:15248] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aaMXxg2UMRAYWtDB23SksgAAAQk"]
[Sun Mar 01 00:28:54.607145 2026] [:error] [pid 30795:tid 30811] [client 20.151.11.236:15247] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aaMXxmuI44IL94Zgti-ozwAAAAM"]
[Sun Mar 01 00:28:55.059913 2026] [:error] [pid 53600:tid 53616] [client 20.151.11.236:15334] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/database.php"] [unique_id "aaMXxw2UMRAYWtDB23SktwAAAQ0"]
[Sun Mar 01 00:28:55.476271 2026] [:error] [pid 53600:tid 53623] [client 20.151.11.236:15127] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/database.php"] [unique_id "aaMXxw2UMRAYWtDB23SkvAAAARQ"]
[Sun Mar 01 00:28:55.896713 2026] [:error] [pid 30795:tid 30807] [client 20.151.11.236:15313] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/database.php"] [unique_id "aaMXx2uI44IL94Zgti-o1AAAAAA"]
[Sun Mar 01 00:28:56.346217 2026] [:error] [pid 53600:tid 53603] [client 20.151.11.236:15001] [client 20.151.11.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/database.php"] [unique_id "aaMXyA2UMRAYWtDB23SkxAAAAQA"]
[Sun Mar 01 02:10:59.029521 2026] [:error] [pid 30798:tid 30914] [client 20.220.13.5:21255] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/server.php"] [unique_id "aaMvs8BkD73gO8wTonabmwAAAI8"]
[Sun Mar 01 02:10:59.944073 2026] [:error] [pid 53600:tid 53623] [client 20.220.13.5:21284] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/server.php"] [unique_id "aaMvsw2UMRAYWtDB23TwfwAAARQ"]
[Sun Mar 01 02:11:00.853352 2026] [:error] [pid 7644:tid 7653] [client 20.220.13.5:62808] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/server.php"] [unique_id "aaMvtPqeDUGmVAHX7VCpigAAAUc"]
[Sun Mar 01 02:11:01.743932 2026] [:error] [pid 53600:tid 53611] [client 20.220.13.5:62796] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/server.php"] [unique_id "aaMvtQ2UMRAYWtDB23TwiAAAAQg"]
[Sun Mar 01 02:52:46.867087 2026] [:error] [pid 7644:tid 7647] [client 134.149.59.124:1838] [client 134.149.59.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/cah.php"] [unique_id "aaM5fvqeDUGmVAHX7VC01AAAAUE"]
[Sun Mar 01 02:52:52.564052 2026] [:error] [pid 30798:tid 30916] [client 134.149.59.124:4591] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/as1337.php"] [unique_id "aaM5hMBkD73gO8wTona-YgAAAJE"]
[Sun Mar 01 02:52:53.075305 2026] [:error] [pid 53600:tid 53622] [client 134.149.59.124:1832] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/as1337.php"] [unique_id "aaM5hQ2UMRAYWtDB23T_nAAAARM"]
[Sun Mar 01 02:52:53.572602 2026] [:error] [pid 53600:tid 53608] [client 134.149.59.124:2180] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/as1337.php"] [unique_id "aaM5hQ2UMRAYWtDB23T_nwAAAQU"]
[Sun Mar 01 02:52:54.072993 2026] [:error] [pid 30798:tid 30905] [client 134.149.59.124:2200] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/as1337.php"] [unique_id "aaM5hsBkD73gO8wTona-ZQAAAIY"]
[Sun Mar 01 02:52:54.571162 2026] [:error] [pid 11920:tid 11947] [client 134.149.59.124:2496] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/Okxob.php"] [unique_id "aaM5hizLNJUKxvBorrAfdwAAAZc"]
[Sun Mar 01 02:52:55.069293 2026] [:error] [pid 11920:tid 11944] [client 134.149.59.124:1738] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/Okxob.php"] [unique_id "aaM5hyzLNJUKxvBorrAfegAAAZQ"]
[Sun Mar 01 02:52:55.568409 2026] [:error] [pid 30798:tid 30911] [client 134.149.59.124:5466] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/Okxob.php"] [unique_id "aaM5h8BkD73gO8wTona-dQAAAIw"]
[Sun Mar 01 02:52:56.067208 2026] [:error] [pid 11920:tid 11933] [client 134.149.59.124:4523] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/Okxob.php"] [unique_id "aaM5iCzLNJUKxvBorrAfhAAAAYk"]
[Sun Mar 01 02:52:56.566668 2026] [:error] [pid 30798:tid 30906] [client 134.149.59.124:14388] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wolf-shell.php"] [unique_id "aaM5iMBkD73gO8wTona-fQAAAIc"]
[Sun Mar 01 02:52:57.070349 2026] [:error] [pid 7644:tid 7666] [client 134.149.59.124:1691] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wolf-shell.php"] [unique_id "aaM5ifqeDUGmVAHX7VC06wAAAVQ"]
[Sun Mar 01 02:52:57.569857 2026] [:error] [pid 30798:tid 30910] [client 134.149.59.124:1762] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wolf-shell.php"] [unique_id "aaM5icBkD73gO8wTona-gQAAAIs"]
[Sun Mar 01 02:52:58.075399 2026] [:error] [pid 30798:tid 30913] [client 134.149.59.124:5488] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wolf-shell.php"] [unique_id "aaM5isBkD73gO8wTona-hgAAAI4"]
[Sun Mar 01 02:52:58.575470 2026] [:error] [pid 30798:tid 30907] [client 134.149.59.124:1805] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/core.php"] [unique_id "aaM5isBkD73gO8wTona-jAAAAIg"]
[Sun Mar 01 02:52:59.073507 2026] [:error] [pid 31190:tid 31211] [client 134.149.59.124:4555] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/core.php"] [unique_id "aaM5ixfvwGOholYpM1G0pQAAAMU"]
[Sun Mar 01 02:52:59.572451 2026] [:error] [pid 30798:tid 30924] [client 134.149.59.124:4582] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/core.php"] [unique_id "aaM5i8BkD73gO8wTona-lwAAAJg"]
[Sun Mar 01 02:53:00.085495 2026] [:error] [pid 31190:tid 31215] [client 134.149.59.124:5512] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/core.php"] [unique_id "aaM5jBfvwGOholYpM1G0qwAAAMk"]
[Sun Mar 01 02:53:00.585776 2026] [:error] [pid 31190:tid 31212] [client 134.149.59.124:14399] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/zeal.php"] [unique_id "aaM5jBfvwGOholYpM1G0sQAAAMY"]
[Sun Mar 01 02:53:01.091550 2026] [:error] [pid 11920:tid 11929] [client 134.149.59.124:4491] [client 134.149.59.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/zeal.php"] [unique_id "aaM5jSzLNJUKxvBorrAflwAAAYU"]
[Sun Mar 01 05:12:13.338528 2026] [:error] [pid 21263:tid 21269] [client 20.220.13.5:21147] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aaNaLdAxjzLvN1upBhncngAAAMI"]
[Sun Mar 01 05:12:14.197484 2026] [:error] [pid 21263:tid 21285] [client 20.220.13.5:21139] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aaNaLtAxjzLvN1upBhncpAAAANI"]
[Sun Mar 01 05:12:15.022448 2026] [:error] [pid 21156:tid 21189] [client 20.220.13.5:21181] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aaNaL6saG_9IkG8N2p3msQAAABc"]
[Sun Mar 01 05:12:15.846478 2026] [:error] [pid 24576:tid 24602] [client 20.220.13.5:21194] [client 20.220.13.5] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/autoload_classmap.php"] [unique_id "aaNaL4vfb5CnctJh073xJAAAARY"]
[Sun Mar 01 10:15:36.263571 2026] [:error] [pid 21263:tid 21274] [client 185.193.156.145:54290] [client 185.193.156.145] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 185.193.156.145, incrementing ddos counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aaOhSNAxjzLvN1upBhkNzgAAAMc"]
[Sun Mar 01 10:15:38.131506 2026] [:error] [pid 21263:tid 21274] [client 185.193.156.145:54290] [client 185.193.156.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aaOhStAxjzLvN1upBhkN2gAAAMc"]
[Sun Mar 01 10:15:38.735165 2026] [:error] [pid 8688:tid 8703] [client 185.193.156.145:54306] [client 185.193.156.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aaOhSjHJ4Nn-RvulD0rSrAAAAU0"]
[Sun Mar 01 10:15:39.333061 2026] [:error] [pid 34552:tid 34573] [client 185.193.156.145:39952] [client 185.193.156.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aaOhS3BlU_DRqGi4yvsBbQAAAtI"]
[Sun Mar 01 10:15:39.943860 2026] [:error] [pid 33229:tid 33243] [client 185.193.156.145:39964] [client 185.193.156.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aaOhS3zT4c9ddlGE6FxJSgAAAYw"]
[Sun Mar 01 10:15:40.575867 2026] [:error] [pid 33229:tid 33254] [client 185.193.156.145:39970] [client 185.193.156.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aaOhTHzT4c9ddlGE6FxJTAAAAZc"]
[Sun Mar 01 10:15:41.198904 2026] [:error] [pid 34552:tid 34573] [client 185.193.156.145:39978] [client 185.193.156.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aaOhTXBlU_DRqGi4yvsBbwAAAtI"]
[Sun Mar 01 10:15:41.795682 2026] [:error] [pid 34286:tid 34311] [client 185.193.156.145:39988] [client 185.193.156.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aaOhTXPFxpCIhHW6XmmcIgAAApc"]
[Sun Mar 01 11:18:50.562798 2026] [:error] [pid 33767:tid 33773] [client 20.211.1.210:26084] [client 20.211.1.210] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 20.211.1.210, incrementing ddos counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aaOwGkGyeKe3MWsxvBgPegAAAgM"]
[Sun Mar 01 11:18:50.783227 2026] [:error] [pid 33767:tid 33773] [client 20.211.1.210:26084] [client 20.211.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaOwGkGyeKe3MWsxvBgPggAAAgM"]
[Sun Mar 01 11:18:50.873221 2026] [:error] [pid 33767:tid 33773] [client 20.211.1.210:14573] [client 20.211.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaOwGkGyeKe3MWsxvBgPgwAAAgM"]
[Sun Mar 01 11:18:50.933244 2026] [:error] [pid 21159:tid 21243] [client 20.211.1.210:13685] [client 20.211.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaOwGuLi3ouy1NZIkgpP7gAAAJY"]
[Sun Mar 01 11:18:50.994370 2026] [:error] [pid 33767:tid 33773] [client 20.211.1.210:2501] [client 20.211.1.210] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/autoload_classmap.php"] [unique_id "aaOwGkGyeKe3MWsxvBgPhAAAAgM"]
[Sun Mar 01 18:27:48.952004 2026] [:error] [pid 7165:tid 7191] [client 20.63.80.2:63082] [client 20.63.80.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aaQUpBRjCrA8qWBjgG-y3QAAAlg"]
[Sun Mar 01 18:27:50.657654 2026] [proxy_fcgi:error] [pid 38241:tid 38268] [client 20.63.80.2:51058] AH01071: Got error 'Primary script unknown'
[Sun Mar 01 18:27:51.305468 2026] [:error] [pid 38241:tid 38264] [client 20.63.80.2:51058] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aaQUp_KRPk6YnJBxw_y6mwAAANQ"]
[Sun Mar 01 18:27:52.147815 2026] [:error] [pid 7133:tid 7151] [client 20.63.80.2:51035] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aaQUqPCtubh8pR64qB8EGQAAAFA"]
[Sun Mar 01 18:27:52.970835 2026] [:error] [pid 33822:tid 33828] [client 20.63.80.2:51025] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aaQUqG6W3ygu1YVssubytgAAAoQ"]
[Sun Mar 01 18:27:53.793947 2026] [:error] [pid 33822:tid 33847] [client 20.63.80.2:63057] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aaQUqW6W3ygu1YVssubyuAAAApc"]
[Sun Mar 01 19:30:09.147563 2026] [:error] [pid 7165:tid 7190] [client 169.150.203.237:33620] [client 169.150.203.237] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 169.150.203.237, incrementing ddos counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aaQjQRRjCrA8qWBjgG_qtgAAAlc"]
[Sun Mar 01 19:30:11.076579 2026] [:error] [pid 7165:tid 7179] [client 169.150.203.237:33620] [client 169.150.203.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aaQjQxRjCrA8qWBjgG_q2AAAAkw"]
[Sun Mar 01 19:30:11.696975 2026] [:error] [pid 40750:tid 40760] [client 169.150.203.237:57452] [client 169.150.203.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aaQjQwfBuk03yQKDyqvD9gAAAcc"]
[Sun Mar 01 19:30:12.317858 2026] [:error] [pid 40750:tid 40770] [client 169.150.203.237:57464] [client 169.150.203.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aaQjRAfBuk03yQKDyqvD-QAAAdE"]
[Sun Mar 01 19:30:12.941653 2026] [:error] [pid 40750:tid 40767] [client 169.150.203.237:57476] [client 169.150.203.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aaQjRAfBuk03yQKDyqvEAAAAAc4"]
[Sun Mar 01 19:30:13.561743 2026] [:error] [pid 7165:tid 7176] [client 169.150.203.237:57486] [client 169.150.203.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aaQjRRRjCrA8qWBjgG_q6gAAAkk"]
[Sun Mar 01 19:30:14.183663 2026] [:error] [pid 38034:tid 38036] [client 169.150.203.237:57488] [client 169.150.203.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aaQjRgxtfZjwlJok9K8CTQAAAQA"]
[Sun Mar 01 19:30:14.804830 2026] [:error] [pid 38034:tid 38060] [client 169.150.203.237:57502] [client 169.150.203.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aaQjRgxtfZjwlJok9K8CTgAAARY"]
[Sun Mar 01 19:48:49.532440 2026] [:error] [pid 38241:tid 38267] [client 20.41.98.49:4120] [client 20.41.98.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaQnofKRPk6YnJBxw_zoXgAAANc"]
[Sun Mar 01 19:48:50.095440 2026] [:error] [pid 38241:tid 38257] [client 20.41.98.49:7039] [client 20.41.98.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaQnovKRPk6YnJBxw_zoYwAAAM0"]
[Sun Mar 01 19:48:50.647836 2026] [:error] [pid 38241:tid 38255] [client 20.41.98.49:24321] [client 20.41.98.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaQnovKRPk6YnJBxw_zoZwAAAMs"]
[Sun Mar 01 19:48:51.190104 2026] [:error] [pid 33822:tid 33824] [client 20.41.98.49:4106] [client 20.41.98.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaQno26W3ygu1YVssuYKCgAAAoA"]
[Sun Mar 01 20:39:10.819642 2026] [:error] [pid 40750:tid 40771] [client 20.89.52.173:9251] [client 20.89.52.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaQzbgfBuk03yQKDyqsRPQAAAdI"]
[Sun Mar 01 20:39:11.274860 2026] [:error] [pid 44644:tid 44664] [client 20.89.52.173:9246] [client 20.89.52.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaQzb53RJaXMcw3y9V_aFwAAABE"]
[Sun Mar 01 20:39:11.732026 2026] [:error] [pid 40750:tid 40754] [client 20.89.52.173:6210] [client 20.89.52.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaQzbwfBuk03yQKDyqsRQAAAAcE"]
[Sun Mar 01 20:39:12.365775 2026] [:error] [pid 7133:tid 7153] [client 20.89.52.173:9263] [client 20.89.52.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaQzcPCtubh8pR64qB82igAAAFI"]
[Sun Mar 01 20:58:39.908597 2026] [:error] [pid 38241:tid 38261] [client 20.220.162.180:12431] [client 20.220.162.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaQ3__KRPk6YnJBxw_wJcQAAANE"]
[Sun Mar 01 20:58:40.734944 2026] [:error] [pid 38241:tid 38267] [client 20.220.162.180:12784] [client 20.220.162.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaQ4APKRPk6YnJBxw_wJcgAAANc"]
[Sun Mar 01 20:58:41.569598 2026] [:error] [pid 7165:tid 7170] [client 20.220.162.180:12777] [client 20.220.162.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaQ4ARRjCrA8qWBjgG8tawAAAkM"]
[Sun Mar 01 20:58:42.408514 2026] [:error] [pid 38241:tid 38260] [client 20.220.162.180:12775] [client 20.220.162.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaQ4AvKRPk6YnJBxw_wJdgAAANA"]
[Sun Mar 01 21:21:59.291967 2026] [:error] [pid 44644:tid 44653] [client 20.63.80.2:51038] [client 20.63.80.2] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aaQ9d53RJaXMcw3y9V_e1QAAAAY"]
[Sun Mar 01 21:22:01.004536 2026] [:error] [pid 40750:tid 40764] [client 20.63.80.2:51161] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin.php"] [unique_id "aaQ9eQfBuk03yQKDyqs_OQAAAcs"]
[Sun Mar 01 21:22:01.831169 2026] [:error] [pid 40750:tid 40768] [client 20.63.80.2:51009] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin.php"] [unique_id "aaQ9eQfBuk03yQKDyqs_QgAAAc8"]
[Sun Mar 01 21:22:02.655844 2026] [:error] [pid 33822:tid 33825] [client 20.63.80.2:51165] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin.php"] [unique_id "aaQ9em6W3ygu1YVssuYgqQAAAoE"]
[Sun Mar 01 21:22:03.479876 2026] [:error] [pid 33822:tid 33842] [client 20.63.80.2:51060] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin.php"] [unique_id "aaQ9e26W3ygu1YVssuYgrAAAApI"]
[Sun Mar 01 22:14:12.591172 2026] [:error] [pid 33822:tid 33831] [client 20.151.11.87:57609] [client 20.151.11.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ds.php"] [unique_id "aaRJtG6W3ygu1YVssuYubQAAAoc"]
[Sun Mar 01 22:14:13.419471 2026] [:error] [pid 38241:tid 38245] [client 20.151.11.87:57637] [client 20.151.11.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ds.php"] [unique_id "aaRJtfKRPk6YnJBxw_wtUgAAAME"]
[Sun Mar 01 22:14:14.263259 2026] [:error] [pid 7165:tid 7183] [client 20.151.11.87:57663] [client 20.151.11.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ds.php"] [unique_id "aaRJthRjCrA8qWBjgG9vNgAAAlA"]
[Sun Mar 01 22:14:15.117087 2026] [:error] [pid 40750:tid 40763] [client 20.151.11.87:53427] [client 20.151.11.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ds.php"] [unique_id "aaRJtwfBuk03yQKDyqtopgAAAco"]
[Sun Mar 01 22:45:32.918523 2026] [:error] [pid 7133:tid 7137] [client 20.63.44.70:27589] [client 20.63.44.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaRRDPCtubh8pR64qB9kwwAAAEI"]
[Sun Mar 01 22:45:33.757197 2026] [:error] [pid 7165:tid 7180] [client 20.63.44.70:27636] [client 20.63.44.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaRRDRRjCrA8qWBjgG-PgwAAAk0"]
[Sun Mar 01 22:45:34.601994 2026] [:error] [pid 7133:tid 7144] [client 20.63.44.70:27612] [client 20.63.44.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaRRDvCtubh8pR64qB9kyAAAAEk"]
[Sun Mar 01 22:45:35.438640 2026] [:error] [pid 7133:tid 7143] [client 20.63.44.70:27266] [client 20.63.44.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaRRD_Ctubh8pR64qB9kzQAAAEg"]
[Mon Mar 02 00:18:22.498502 2026] [:error] [pid 40750:tid 40772] [client 20.63.80.2:50300] [client 20.63.80.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.63.80.2, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "aaRmzgfBuk03yQKDyqu9_wAAAdM"]
[Mon Mar 02 00:18:23.400901 2026] [:error] [pid 40750:tid 40755] [client 20.63.80.2:50300] [client 20.63.80.2] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.63.80.2, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aaRmzwfBuk03yQKDyqu-BQAAAcI"]
[Mon Mar 02 00:18:23.861217 2026] [:error] [pid 40750:tid 40766] [client 20.63.80.2:50300] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aaRmzwfBuk03yQKDyqu-CQAAAc0"]
[Mon Mar 02 00:18:24.689679 2026] [:error] [pid 37032:tid 37050] [client 20.63.80.2:50561] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aaRm0Ou0U4o7eSImsVSatwAAAZA"]
[Mon Mar 02 00:18:25.513796 2026] [:error] [pid 41780:tid 41790] [client 20.63.80.2:50603] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aaRm0cONkVoocLIqzy07xQAAA8c"]
[Mon Mar 02 00:18:26.347038 2026] [:error] [pid 7165:tid 7185] [client 20.63.80.2:50269] [client 20.63.80.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aaRm0hRjCrA8qWBjgG_njQAAAlI"]
[Mon Mar 02 00:50:27.302720 2026] [:error] [pid 53181:tid 53529] [client 20.220.162.180:49282] [client 20.220.162.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaRuU4r_0T1SazTrJOAhmAAAAQ4"]
[Mon Mar 02 00:50:28.134897 2026] [:error] [pid 53182:tid 53568] [client 20.220.162.180:12688] [client 20.220.162.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaRuVPv073cA6eM1YCSsCwAAANg"]
[Mon Mar 02 00:50:28.967865 2026] [:error] [pid 53182:tid 53561] [client 20.220.162.180:12676] [client 20.220.162.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaRuVPv073cA6eM1YCSsEwAAANE"]
[Mon Mar 02 00:50:29.796147 2026] [:error] [pid 53585:tid 53597] [client 20.220.162.180:49303] [client 20.220.162.180] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaRuVXbCvYsvu6kKhM1vKwAAAAk"]
[Mon Mar 02 01:31:05.601290 2026] [:error] [pid 26940:tid 26953] [client 20.205.226.191:10281] [client 20.205.226.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aaR32RrUg-j5GLDtRFmcdwAAAEk"]
[Mon Mar 02 01:31:05.972304 2026] [:error] [pid 26940:tid 26952] [client 20.205.226.191:10217] [client 20.205.226.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aaR32RrUg-j5GLDtRFmcfAAAAEg"]
[Mon Mar 02 01:31:06.328387 2026] [:error] [pid 26940:tid 26948] [client 20.205.226.191:10216] [client 20.205.226.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aaR32hrUg-j5GLDtRFmcgQAAAEQ"]
[Mon Mar 02 01:31:06.703818 2026] [:error] [pid 53180:tid 53452] [client 20.205.226.191:10242] [client 20.205.226.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aaR32jPPJpDOBvYnaa1TBQAAAYg"]
[Mon Mar 02 06:34:11.339862 2026] [:error] [pid 28908:tid 28932] [client 20.104.97.185:32991] [client 20.104.97.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaS-44qJmC8ih_lQQnA4_QAAANY"]
[Mon Mar 02 06:34:12.175073 2026] [:error] [pid 28794:tid 28854] [client 20.104.97.185:32902] [client 20.104.97.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaS-5KVy2qpaelbUob0iXgAAAFI"]
[Mon Mar 02 06:34:13.013215 2026] [:error] [pid 31257:tid 31264] [client 20.104.97.185:32911] [client 20.104.97.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaS-5f-JFLfishX45N9i2QAAAQE"]
[Mon Mar 02 06:34:13.852326 2026] [:error] [pid 28793:tid 28821] [client 20.104.97.185:32988] [client 20.104.97.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaS-5Q2_fxBANaHo1f4XZgAAAA4"]
[Mon Mar 02 07:34:59.563824 2026] [:error] [pid 28908:tid 28911] [client 20.220.232.240:25565] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "aaTNI4qJmC8ih_lQQnCLMQAAAME"]
[Mon Mar 02 07:34:59.986762 2026] [:error] [pid 31257:tid 31282] [client 20.220.232.240:25547] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "aaTNI_-JFLfishX45N-X7AAAARM"]
[Mon Mar 02 07:35:00.439897 2026] [:error] [pid 28908:tid 28920] [client 20.220.232.240:25587] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "aaTNJIqJmC8ih_lQQnCLOgAAAMo"]
[Mon Mar 02 07:35:00.927299 2026] [:error] [pid 28795:tid 28879] [client 20.220.232.240:25485] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "aaTNJLROd53wZBkdI_dhywAAAJA"]
[Mon Mar 02 07:35:01.362022 2026] [:error] [pid 31257:tid 31279] [client 20.220.232.240:25557] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/path.php"] [unique_id "aaTNJf-JFLfishX45N-X8AAAARA"]
[Mon Mar 02 07:35:01.811773 2026] [:error] [pid 28908:tid 28912] [client 20.220.232.240:25580] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/path.php"] [unique_id "aaTNJYqJmC8ih_lQQnCLSAAAAMI"]
[Mon Mar 02 07:35:02.306181 2026] [:error] [pid 28908:tid 28928] [client 20.220.232.240:25480] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/path.php"] [unique_id "aaTNJoqJmC8ih_lQQnCLUgAAANI"]
[Mon Mar 02 07:35:02.740550 2026] [:error] [pid 28908:tid 28920] [client 20.220.232.240:25568] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/path.php"] [unique_id "aaTNJoqJmC8ih_lQQnCLXAAAAMo"]
[Mon Mar 02 07:35:03.249154 2026] [:error] [pid 28908:tid 28914] [client 20.220.232.240:25574] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wdf.php"] [unique_id "aaTNJ4qJmC8ih_lQQnCLYAAAAMQ"]
[Mon Mar 02 07:35:03.768971 2026] [:error] [pid 28795:tid 28875] [client 20.220.232.240:25478] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wdf.php"] [unique_id "aaTNJ7ROd53wZBkdI_dh0wAAAIw"]
[Mon Mar 02 07:35:04.194685 2026] [:error] [pid 28794:tid 28857] [client 20.220.232.240:25498] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wdf.php"] [unique_id "aaTNKKVy2qpaelbUob0-SwAAAFU"]
[Mon Mar 02 07:35:04.673517 2026] [:error] [pid 31257:tid 31263] [client 20.220.232.240:25578] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wdf.php"] [unique_id "aaTNKP-JFLfishX45N-X-gAAAQA"]
[Mon Mar 02 07:35:05.139666 2026] [:error] [pid 31257:tid 31286] [client 20.220.232.240:25414] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fleen.php"] [unique_id "aaTNKf-JFLfishX45N-X_QAAARc"]
[Mon Mar 02 07:35:05.625546 2026] [:error] [pid 28908:tid 28928] [client 20.220.232.240:25569] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fleen.php"] [unique_id "aaTNKYqJmC8ih_lQQnCLaAAAANI"]
[Mon Mar 02 07:35:06.061722 2026] [:error] [pid 28908:tid 28912] [client 20.220.232.240:25562] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fleen.php"] [unique_id "aaTNKoqJmC8ih_lQQnCLawAAAMI"]
[Mon Mar 02 07:35:06.608802 2026] [:error] [pid 28908:tid 28922] [client 20.220.232.240:25538] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fleen.php"] [unique_id "aaTNKoqJmC8ih_lQQnCLbwAAAMw"]
[Mon Mar 02 07:35:07.041895 2026] [:error] [pid 28795:tid 28869] [client 20.220.232.240:25595] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-tem.php"] [unique_id "aaTNK7ROd53wZBkdI_dh1gAAAIY"]
[Mon Mar 02 07:35:07.484566 2026] [:error] [pid 31257:tid 31264] [client 20.220.232.240:25584] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-tem.php"] [unique_id "aaTNK_-JFLfishX45N-YCAAAAQE"]
[Mon Mar 02 07:35:07.904095 2026] [:error] [pid 31257:tid 31287] [client 20.220.232.240:25563] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-tem.php"] [unique_id "aaTNK_-JFLfishX45N-YCQAAARg"]
[Mon Mar 02 07:35:08.327596 2026] [:error] [pid 31257:tid 31268] [client 20.220.232.240:25514] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-tem.php"] [unique_id "aaTNLP-JFLfishX45N-YDAAAAQU"]
[Mon Mar 02 07:35:08.828294 2026] [:error] [pid 28795:tid 28871] [client 20.220.232.240:25598] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/avim.php"] [unique_id "aaTNLLROd53wZBkdI_dh3QAAAIg"]
[Mon Mar 02 07:35:09.297975 2026] [:error] [pid 28795:tid 28875] [client 20.220.232.240:25540] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/avim.php"] [unique_id "aaTNLbROd53wZBkdI_dh3wAAAIw"]
[Mon Mar 02 07:35:09.731828 2026] [:error] [pid 28908:tid 28933] [client 20.220.232.240:25487] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/avim.php"] [unique_id "aaTNLYqJmC8ih_lQQnCLdwAAANc"]
[Mon Mar 02 07:35:10.151924 2026] [:error] [pid 28908:tid 28914] [client 20.220.232.240:25585] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/avim.php"] [unique_id "aaTNLoqJmC8ih_lQQnCLegAAAMQ"]
[Mon Mar 02 07:35:10.573813 2026] [:error] [pid 31257:tid 31263] [client 20.220.232.240:25488] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/autogooey.php"] [unique_id "aaTNLv-JFLfishX45N-YHQAAAQA"]
[Mon Mar 02 07:35:11.022991 2026] [:error] [pid 28795:tid 28887] [client 20.220.232.240:25483] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/autogooey.php"] [unique_id "aaTNL7ROd53wZBkdI_dh5gAAAJg"]
[Mon Mar 02 07:35:11.472256 2026] [:error] [pid 28795:tid 28866] [client 20.220.232.240:25492] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/autogooey.php"] [unique_id "aaTNL7ROd53wZBkdI_dh6gAAAIM"]
[Mon Mar 02 07:35:11.902286 2026] [:error] [pid 28908:tid 28922] [client 20.220.232.240:25592] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/autogooey.php"] [unique_id "aaTNL4qJmC8ih_lQQnCLhQAAAMw"]
[Mon Mar 02 07:35:12.342405 2026] [:error] [pid 28908:tid 28932] [client 20.220.232.240:25503] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/btx25.php"] [unique_id "aaTNMIqJmC8ih_lQQnCLiQAAANY"]
[Mon Mar 02 07:35:12.764376 2026] [:error] [pid 28793:tid 28810] [client 20.220.232.240:25570] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/btx25.php"] [unique_id "aaTNMA2_fxBANaHo1f4sQgAAAAM"]
[Mon Mar 02 07:35:13.198613 2026] [:error] [pid 28908:tid 28926] [client 20.220.232.240:25422] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/btx25.php"] [unique_id "aaTNMYqJmC8ih_lQQnCLjwAAANA"]
[Mon Mar 02 07:35:13.626155 2026] [:error] [pid 28795:tid 28872] [client 20.220.232.240:25559] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/btx25.php"] [unique_id "aaTNMbROd53wZBkdI_dh7QAAAIk"]
[Mon Mar 02 07:35:14.061912 2026] [:error] [pid 28794:tid 28841] [client 20.220.232.240:25495] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mga.php"] [unique_id "aaTNMqVy2qpaelbUob0-YwAAAEU"]
[Mon Mar 02 07:35:14.481552 2026] [:error] [pid 28908:tid 28917] [client 20.220.232.240:25560] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mga.php"] [unique_id "aaTNMoqJmC8ih_lQQnCLmgAAAMc"]
[Mon Mar 02 07:35:14.899087 2026] [:error] [pid 28795:tid 28868] [client 20.220.232.240:25473] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mga.php"] [unique_id "aaTNMrROd53wZBkdI_dh8gAAAIU"]
[Mon Mar 02 07:35:15.323263 2026] [:error] [pid 31257:tid 31265] [client 20.220.232.240:25513] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mga.php"] [unique_id "aaTNM_-JFLfishX45N-YJwAAAQI"]
[Mon Mar 02 07:35:15.738912 2026] [:error] [pid 28793:tid 28816] [client 20.220.232.240:25599] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/maxro.php"] [unique_id "aaTNMw2_fxBANaHo1f4sRwAAAAk"]
[Mon Mar 02 07:35:16.168438 2026] [:error] [pid 28908:tid 28921] [client 20.220.232.240:25499] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/maxro.php"] [unique_id "aaTNNIqJmC8ih_lQQnCLpgAAAMs"]
[Mon Mar 02 07:35:16.591807 2026] [:error] [pid 28795:tid 28884] [client 20.220.232.240:25476] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/maxro.php"] [unique_id "aaTNNLROd53wZBkdI_dh9wAAAJU"]
[Mon Mar 02 07:35:17.041808 2026] [:error] [pid 28908:tid 28925] [client 20.220.232.240:25472] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/maxro.php"] [unique_id "aaTNNYqJmC8ih_lQQnCLqgAAAM8"]
[Mon Mar 02 07:35:17.454197 2026] [:error] [pid 31257:tid 31285] [client 20.220.232.240:25593] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/agg.php"] [unique_id "aaTNNf-JFLfishX45N-YLgAAARY"]
[Mon Mar 02 07:35:17.866231 2026] [:error] [pid 31257:tid 31270] [client 20.220.232.240:25597] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/agg.php"] [unique_id "aaTNNf-JFLfishX45N-YMQAAAQc"]
[Mon Mar 02 07:35:18.298001 2026] [:error] [pid 28793:tid 28826] [client 20.220.232.240:25482] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/agg.php"] [unique_id "aaTNNg2_fxBANaHo1f4sSgAAABM"]
[Mon Mar 02 07:35:18.710938 2026] [:error] [pid 31257:tid 31279] [client 20.220.232.240:25516] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/agg.php"] [unique_id "aaTNNv-JFLfishX45N-YNwAAARA"]
[Mon Mar 02 07:35:19.148700 2026] [:error] [pid 28908:tid 28917] [client 20.220.232.240:25494] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/pass4.php"] [unique_id "aaTNN4qJmC8ih_lQQnCLsgAAAMc"]
[Mon Mar 02 07:35:19.558223 2026] [:error] [pid 28908:tid 28923] [client 20.220.232.240:25491] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/pass4.php"] [unique_id "aaTNN4qJmC8ih_lQQnCLtQAAAM0"]
[Mon Mar 02 07:35:19.975952 2026] [:error] [pid 28795:tid 28868] [client 20.220.232.240:25554] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/pass4.php"] [unique_id "aaTNN7ROd53wZBkdI_dh_wAAAIU"]
[Mon Mar 02 07:35:20.398829 2026] [:error] [pid 31257:tid 31285] [client 20.220.232.240:25517] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/pass4.php"] [unique_id "aaTNOP-JFLfishX45N-YQQAAARY"]
[Mon Mar 02 07:35:20.813612 2026] [:error] [pid 31257:tid 31276] [client 20.220.232.240:25589] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wsws.php"] [unique_id "aaTNOP-JFLfishX45N-YRgAAAQ0"]
[Mon Mar 02 07:35:21.274291 2026] [:error] [pid 28795:tid 28885] [client 20.220.232.240:25537] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wsws.php"] [unique_id "aaTNObROd53wZBkdI_diBAAAAJY"]
[Mon Mar 02 07:35:21.697997 2026] [:error] [pid 28908:tid 28930] [client 20.220.232.240:25555] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wsws.php"] [unique_id "aaTNOYqJmC8ih_lQQnCLugAAANQ"]
[Mon Mar 02 07:35:22.112267 2026] [:error] [pid 28908:tid 28912] [client 20.220.232.240:25573] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wsws.php"] [unique_id "aaTNOoqJmC8ih_lQQnCLvQAAAMI"]
[Mon Mar 02 07:35:22.546011 2026] [:error] [pid 28908:tid 28913] [client 20.220.232.240:25596] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/G-in.php"] [unique_id "aaTNOoqJmC8ih_lQQnCLwAAAAMM"]
[Mon Mar 02 07:35:22.957327 2026] [:error] [pid 28908:tid 28921] [client 20.220.232.240:25489] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/G-in.php"] [unique_id "aaTNOoqJmC8ih_lQQnCLxAAAAMs"]
[Mon Mar 02 07:35:23.369540 2026] [:error] [pid 28793:tid 28808] [client 20.220.232.240:25571] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/G-in.php"] [unique_id "aaTNOw2_fxBANaHo1f4sTgAAAAE"]
[Mon Mar 02 07:35:23.783844 2026] [:error] [pid 28908:tid 28931] [client 20.220.232.240:25505] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/G-in.php"] [unique_id "aaTNO4qJmC8ih_lQQnCLywAAANU"]
[Mon Mar 02 07:35:24.214045 2026] [:error] [pid 31257:tid 31286] [client 20.220.232.240:25549] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aaTNPP-JFLfishX45N-YVgAAARc"]
[Mon Mar 02 07:35:24.629837 2026] [:error] [pid 31257:tid 31279] [client 20.220.232.240:25528] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aaTNPP-JFLfishX45N-YWwAAARA"]
[Mon Mar 02 07:35:25.045435 2026] [:error] [pid 28794:tid 28858] [client 20.220.232.240:25420] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aaTNPaVy2qpaelbUob0-dQAAAFY"]
[Mon Mar 02 07:35:25.461423 2026] [:error] [pid 28794:tid 28836] [client 20.220.232.240:25539] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aaTNPaVy2qpaelbUob0-dgAAAEA"]
[Mon Mar 02 07:35:25.874525 2026] [:error] [pid 28908:tid 28915] [client 20.220.232.240:25502] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/loxi-o.php"] [unique_id "aaTNPYqJmC8ih_lQQnCL0wAAAMU"]
[Mon Mar 02 07:35:26.287116 2026] [:error] [pid 28908:tid 28930] [client 20.220.232.240:25419] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/loxi-o.php"] [unique_id "aaTNPoqJmC8ih_lQQnCL1QAAANQ"]
[Mon Mar 02 07:35:26.701143 2026] [:error] [pid 28908:tid 28912] [client 20.220.232.240:25561] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/loxi-o.php"] [unique_id "aaTNPoqJmC8ih_lQQnCL2AAAAMI"]
[Mon Mar 02 07:35:27.123124 2026] [:error] [pid 28794:tid 28841] [client 20.220.232.240:25512] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/loxi-o.php"] [unique_id "aaTNP6Vy2qpaelbUob0-gAAAAEU"]
[Mon Mar 02 07:35:27.571878 2026] [:error] [pid 31257:tid 31283] [client 20.220.232.240:25577] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaTNP_-JFLfishX45N-YbgAAARQ"]
[Mon Mar 02 07:35:27.982660 2026] [:error] [pid 31257:tid 31278] [client 20.220.232.240:25435] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaTNP_-JFLfishX45N-YcQAAAQ8"]
[Mon Mar 02 07:35:28.418212 2026] [:error] [pid 28908:tid 28925] [client 20.220.232.240:25447] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaTNQIqJmC8ih_lQQnCL4gAAAM8"]
[Mon Mar 02 07:35:28.834063 2026] [:error] [pid 28795:tid 28869] [client 20.220.232.240:25471] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aaTNQLROd53wZBkdI_diDQAAAIY"]
[Mon Mar 02 07:35:29.261696 2026] [:error] [pid 31257:tid 31266] [client 20.220.232.240:25475] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aaTNQf-JFLfishX45N-YeAAAAQM"]
[Mon Mar 02 07:35:29.671203 2026] [:error] [pid 28793:tid 28814] [client 20.220.232.240:25509] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aaTNQQ2_fxBANaHo1f4sVwAAAAc"]
[Mon Mar 02 07:35:30.079575 2026] [:error] [pid 31257:tid 31267] [client 20.220.232.240:25484] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aaTNQv-JFLfishX45N-YfAAAAQQ"]
[Mon Mar 02 07:35:30.493069 2026] [:error] [pid 28908:tid 28915] [client 20.220.232.240:25558] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aaTNQoqJmC8ih_lQQnCL7QAAAMU"]
[Mon Mar 02 07:35:30.930528 2026] [:error] [pid 31257:tid 31276] [client 20.220.232.240:25508] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite"] [unique_id "aaTNQv-JFLfishX45N-YhQAAAQ0"]
[Mon Mar 02 07:35:31.340294 2026] [:error] [pid 31257:tid 31286] [client 20.220.232.240:25550] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite"] [unique_id "aaTNQ_-JFLfishX45N-YhwAAARc"]
[Mon Mar 02 07:35:31.779459 2026] [:error] [pid 28795:tid 28875] [client 20.220.232.240:25479] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite"] [unique_id "aaTNQ7ROd53wZBkdI_diFwAAAIw"]
[Mon Mar 02 07:35:32.189352 2026] [:error] [pid 28908:tid 28928] [client 20.220.232.240:25583] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite"] [unique_id "aaTNRIqJmC8ih_lQQnCL8QAAANI"]
[Mon Mar 02 07:35:32.598613 2026] [:error] [pid 31257:tid 31266] [client 20.220.232.240:25590] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/olfclass.php"] [unique_id "aaTNRP-JFLfishX45N-YkQAAAQM"]
[Mon Mar 02 07:35:33.006894 2026] [:error] [pid 28908:tid 28920] [client 20.220.232.240:25511] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/olfclass.php"] [unique_id "aaTNRYqJmC8ih_lQQnCL-wAAAMo"]
[Mon Mar 02 07:35:33.416709 2026] [:error] [pid 28908:tid 28922] [client 20.220.232.240:25426] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/olfclass.php"] [unique_id "aaTNRYqJmC8ih_lQQnCMAwAAAMw"]
[Mon Mar 02 07:35:33.829856 2026] [:error] [pid 31257:tid 31263] [client 20.220.232.240:25477] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/olfclass.php"] [unique_id "aaTNRf-JFLfishX45N-YkwAAAQA"]
[Mon Mar 02 07:35:34.247531 2026] [:error] [pid 28908:tid 28920] [client 20.220.232.240:25433] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file59.php"] [unique_id "aaTNRoqJmC8ih_lQQnCMCQAAAMo"]
[Mon Mar 02 07:35:34.658634 2026] [:error] [pid 28908:tid 28929] [client 20.220.232.240:25515] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file59.php"] [unique_id "aaTNRoqJmC8ih_lQQnCMDQAAANM"]
[Mon Mar 02 07:35:35.096247 2026] [:error] [pid 28794:tid 28844] [client 20.220.232.240:25566] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file59.php"] [unique_id "aaTNR6Vy2qpaelbUob0-iAAAAEg"]
[Mon Mar 02 07:35:35.506914 2026] [:error] [pid 31257:tid 31287] [client 20.220.232.240:25474] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file59.php"] [unique_id "aaTNR_-JFLfishX45N-YmQAAARg"]
[Mon Mar 02 07:35:35.914479 2026] [:error] [pid 28795:tid 28887] [client 20.220.232.240:25409] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aaTNR7ROd53wZBkdI_diIAAAAJg"]
[Mon Mar 02 07:35:36.327854 2026] [:error] [pid 31257:tid 31273] [client 20.220.232.240:25493] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aaTNSP-JFLfishX45N-YogAAAQo"]
[Mon Mar 02 07:35:36.761470 2026] [:error] [pid 28795:tid 28871] [client 20.220.232.240:25449] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aaTNSLROd53wZBkdI_diIgAAAIg"]
[Mon Mar 02 07:35:37.212126 2026] [:error] [pid 28795:tid 28875] [client 20.220.232.240:25507] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aaTNSbROd53wZBkdI_diJQAAAIw"]
[Mon Mar 02 07:35:37.672803 2026] [:error] [pid 28908:tid 28910] [client 20.220.232.240:25496] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "aaTNSYqJmC8ih_lQQnCMKAAAAMA"]
[Mon Mar 02 07:35:38.097654 2026] [:error] [pid 28908:tid 28918] [client 20.220.232.240:25490] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "aaTNSoqJmC8ih_lQQnCMLQAAAMg"]
[Mon Mar 02 07:35:38.522519 2026] [:error] [pid 28908:tid 28913] [client 20.220.232.240:25556] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "aaTNSoqJmC8ih_lQQnCMMgAAAMM"]
[Mon Mar 02 07:35:38.974618 2026] [:error] [pid 28908:tid 28916] [client 20.220.232.240:25545] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "aaTNSoqJmC8ih_lQQnCMNwAAAMY"]
[Mon Mar 02 07:35:39.426635 2026] [:error] [pid 31257:tid 31286] [client 20.220.232.240:25548] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/X57.php"] [unique_id "aaTNS_-JFLfishX45N-YsgAAARc"]
[Mon Mar 02 07:35:39.872488 2026] [:error] [pid 28794:tid 28855] [client 20.220.232.240:25582] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/X57.php"] [unique_id "aaTNS6Vy2qpaelbUob0-lAAAAFM"]
[Mon Mar 02 07:35:40.301609 2026] [:error] [pid 28908:tid 28913] [client 20.220.232.240:25437] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/X57.php"] [unique_id "aaTNTIqJmC8ih_lQQnCMjQAAAMM"]
[Mon Mar 02 07:35:40.741250 2026] [:error] [pid 31257:tid 31280] [client 20.220.232.240:25532] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/X57.php"] [unique_id "aaTNTP-JFLfishX45N-YtwAAARE"]
[Mon Mar 02 07:35:41.161460 2026] [:error] [pid 28793:tid 28813] [client 20.220.232.240:25551] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wpver.php"] [unique_id "aaTNTQ2_fxBANaHo1f4sewAAAAY"]
[Mon Mar 02 07:35:41.635601 2026] [:error] [pid 28908:tid 28926] [client 20.220.232.240:25536] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wpver.php"] [unique_id "aaTNTYqJmC8ih_lQQnCMlgAAANA"]
[Mon Mar 02 07:35:42.087564 2026] [:error] [pid 31257:tid 31276] [client 20.220.232.240:25463] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wpver.php"] [unique_id "aaTNTv-JFLfishX45N-YvwAAAQ0"]
[Mon Mar 02 07:35:42.584287 2026] [:error] [pid 28795:tid 28880] [client 20.220.232.240:25520] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wpver.php"] [unique_id "aaTNTrROd53wZBkdI_diNAAAAJE"]
[Mon Mar 02 07:35:43.046818 2026] [:error] [pid 28794:tid 28851] [client 20.220.232.240:25591] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/hi.php"] [unique_id "aaTNT6Vy2qpaelbUob0-mQAAAE8"]
[Mon Mar 02 07:35:43.461061 2026] [:error] [pid 31257:tid 31279] [client 20.220.232.240:25497] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/hi.php"] [unique_id "aaTNT_-JFLfishX45N-YwQAAARA"]
[Mon Mar 02 07:35:43.886361 2026] [:error] [pid 28908:tid 28930] [client 20.220.232.240:25541] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/hi.php"] [unique_id "aaTNT4qJmC8ih_lQQnCMnAAAANQ"]
[Mon Mar 02 07:35:44.307906 2026] [:error] [pid 28908:tid 28924] [client 20.220.232.240:25576] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/hi.php"] [unique_id "aaTNUIqJmC8ih_lQQnCMngAAAM4"]
[Mon Mar 02 07:35:44.747277 2026] [:error] [pid 31257:tid 31268] [client 20.220.232.240:25534] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/z.php"] [unique_id "aaTNUP-JFLfishX45N-YygAAAQU"]
[Mon Mar 02 07:35:45.159711 2026] [:error] [pid 28908:tid 28925] [client 20.220.232.240:25446] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/z.php"] [unique_id "aaTNUYqJmC8ih_lQQnCMogAAAM8"]
[Mon Mar 02 07:35:45.575647 2026] [:error] [pid 28793:tid 28827] [client 20.220.232.240:25567] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/z.php"] [unique_id "aaTNUQ2_fxBANaHo1f4sfQAAABQ"]
[Mon Mar 02 07:35:46.016705 2026] [:error] [pid 28793:tid 28829] [client 20.220.232.240:25460] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/z.php"] [unique_id "aaTNUg2_fxBANaHo1f4sfgAAABY"]
[Mon Mar 02 07:35:46.442568 2026] [:error] [pid 28908:tid 28926] [client 20.220.232.240:25522] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aaTNUoqJmC8ih_lQQnCMqAAAANA"]
[Mon Mar 02 07:35:46.923374 2026] [:error] [pid 28795:tid 28873] [client 20.220.232.240:25581] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aaTNUrROd53wZBkdI_diUAAAAIo"]
[Mon Mar 02 07:35:47.332348 2026] [:error] [pid 28795:tid 28879] [client 20.220.232.240:25500] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aaTNU7ROd53wZBkdI_diUQAAAJA"]
[Mon Mar 02 07:35:47.762583 2026] [:error] [pid 28794:tid 28853] [client 20.220.232.240:25415] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aaTNU6Vy2qpaelbUob0-nwAAAFE"]
[Mon Mar 02 07:35:48.214454 2026] [:error] [pid 28795:tid 28881] [client 20.220.232.240:25458] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wqqs.php"] [unique_id "aaTNVLROd53wZBkdI_diVgAAAJI"]
[Mon Mar 02 07:35:48.648107 2026] [:error] [pid 28795:tid 28885] [client 20.220.232.240:25357] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wqqs.php"] [unique_id "aaTNVLROd53wZBkdI_diWAAAAJY"]
[Mon Mar 02 07:35:49.088594 2026] [:error] [pid 28793:tid 28819] [client 20.220.232.240:25586] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wqqs.php"] [unique_id "aaTNVQ2_fxBANaHo1f4sgwAAAAw"]
[Mon Mar 02 07:35:49.515042 2026] [:error] [pid 28793:tid 28825] [client 20.220.232.240:25525] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wqqs.php"] [unique_id "aaTNVQ2_fxBANaHo1f4shQAAABI"]
[Mon Mar 02 07:35:49.937353 2026] [:error] [pid 28795:tid 28877] [client 20.220.232.240:25410] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zc-318.php"] [unique_id "aaTNVbROd53wZBkdI_diXQAAAI4"]
[Mon Mar 02 07:35:50.358367 2026] [:error] [pid 28908:tid 28928] [client 20.220.232.240:25533] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zc-318.php"] [unique_id "aaTNVoqJmC8ih_lQQnCMuQAAANI"]
[Mon Mar 02 07:35:50.801035 2026] [:error] [pid 31257:tid 31272] [client 20.220.232.240:25412] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zc-318.php"] [unique_id "aaTNVv-JFLfishX45N-Y2gAAAQk"]
[Mon Mar 02 07:35:51.217255 2026] [:error] [pid 28908:tid 28927] [client 20.220.232.240:25362] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zc-318.php"] [unique_id "aaTNV4qJmC8ih_lQQnCMvwAAANE"]
[Mon Mar 02 07:35:51.632984 2026] [:error] [pid 28908:tid 28934] [client 20.220.232.240:25432] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dom.php"] [unique_id "aaTNV4qJmC8ih_lQQnCMwgAAANg"]
[Mon Mar 02 07:35:52.054752 2026] [:error] [pid 28795:tid 28874] [client 20.220.232.240:25417] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dom.php"] [unique_id "aaTNWLROd53wZBkdI_diYwAAAIs"]
[Mon Mar 02 07:35:52.470081 2026] [:error] [pid 28908:tid 28928] [client 20.220.232.240:25424] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dom.php"] [unique_id "aaTNWIqJmC8ih_lQQnCMxgAAANI"]
[Mon Mar 02 07:35:52.950735 2026] [:error] [pid 28908:tid 28910] [client 20.220.232.240:25535] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dom.php"] [unique_id "aaTNWIqJmC8ih_lQQnCMyAAAAMA"]
[Mon Mar 02 07:35:53.376231 2026] [:error] [pid 28908:tid 28929] [client 20.220.232.240:25416] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Okxob.php"] [unique_id "aaTNWYqJmC8ih_lQQnCMzAAAANM"]
[Mon Mar 02 07:35:53.801975 2026] [:error] [pid 28908:tid 28912] [client 20.220.232.240:25453] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Okxob.php"] [unique_id "aaTNWYqJmC8ih_lQQnCM0AAAAMI"]
[Mon Mar 02 07:35:54.222646 2026] [:error] [pid 28908:tid 28917] [client 20.220.232.240:25459] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Okxob.php"] [unique_id "aaTNWoqJmC8ih_lQQnCM1AAAAMc"]
[Mon Mar 02 07:35:54.640783 2026] [:error] [pid 28795:tid 28876] [client 20.220.232.240:25553] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Okxob.php"] [unique_id "aaTNWrROd53wZBkdI_diagAAAI0"]
[Mon Mar 02 07:35:55.070072 2026] [:error] [pid 28908:tid 28923] [client 20.220.232.240:25527] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/moon3.php"] [unique_id "aaTNW4qJmC8ih_lQQnCM2gAAAM0"]
[Mon Mar 02 07:35:55.496507 2026] [:error] [pid 28794:tid 28856] [client 20.220.232.240:25440] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/moon3.php"] [unique_id "aaTNW6Vy2qpaelbUob0-qQAAAFQ"]
[Mon Mar 02 07:35:55.934334 2026] [:error] [pid 28908:tid 28912] [client 20.220.232.240:25370] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/moon3.php"] [unique_id "aaTNW4qJmC8ih_lQQnCM3gAAAMI"]
[Mon Mar 02 07:35:56.365782 2026] [:error] [pid 28908:tid 28918] [client 20.220.232.240:25521] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/moon3.php"] [unique_id "aaTNXIqJmC8ih_lQQnCM4gAAAMg"]
[Mon Mar 02 07:35:56.778147 2026] [:error] [pid 31257:tid 31274] [client 20.220.232.240:25448] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/thui.php"] [unique_id "aaTNXP-JFLfishX45N-Y5gAAAQs"]
[Mon Mar 02 07:35:57.208778 2026] [:error] [pid 28908:tid 28919] [client 20.220.232.240:25439] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/thui.php"] [unique_id "aaTNXYqJmC8ih_lQQnCNAQAAAMk"]
[Mon Mar 02 07:35:57.629468 2026] [:error] [pid 28908:tid 28920] [client 20.220.232.240:25546] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/thui.php"] [unique_id "aaTNXYqJmC8ih_lQQnCNEgAAAMo"]
[Mon Mar 02 07:35:58.052169 2026] [:error] [pid 28795:tid 28866] [client 20.220.232.240:25531] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/thui.php"] [unique_id "aaTNXrROd53wZBkdI_dibwAAAIM"]
[Mon Mar 02 07:35:58.470693 2026] [:error] [pid 28795:tid 28864] [client 20.220.232.240:25386] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ebahvhhh.php"] [unique_id "aaTNXrROd53wZBkdI_dicgAAAIE"]
[Mon Mar 02 07:35:58.880839 2026] [:error] [pid 28908:tid 28912] [client 20.220.232.240:25352] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ebahvhhh.php"] [unique_id "aaTNXoqJmC8ih_lQQnCNHgAAAMI"]
[Mon Mar 02 07:36:04.788628 2026] [:error] [pid 28908:tid 28932] [client 20.220.232.240:25360] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws61.php"] [unique_id "aaTNZIqJmC8ih_lQQnCNTQAAANY"]
[Mon Mar 02 07:36:05.212948 2026] [:error] [pid 28795:tid 28876] [client 20.220.232.240:25429] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws61.php"] [unique_id "aaTNZbROd53wZBkdI_dihgAAAI0"]
[Mon Mar 02 07:36:05.672419 2026] [:error] [pid 31257:tid 31266] [client 20.220.232.240:25543] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws61.php"] [unique_id "aaTNZf-JFLfishX45N-ZCwAAAQM"]
[Mon Mar 02 07:36:06.111315 2026] [:error] [pid 28795:tid 28870] [client 20.220.232.240:25454] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws61.php"] [unique_id "aaTNZrROd53wZBkdI_diiAAAAIc"]
[Mon Mar 02 07:36:06.649357 2026] [:error] [pid 28908:tid 28930] [client 20.220.232.240:25365] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaTNZoqJmC8ih_lQQnCNVgAAANQ"]
[Mon Mar 02 07:36:07.238943 2026] [:error] [pid 31257:tid 31287] [client 20.220.232.240:25345] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaTNZ_-JFLfishX45N-ZEAAAARg"]
[Mon Mar 02 07:36:07.719292 2026] [:error] [pid 28908:tid 28911] [client 20.220.232.240:25389] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaTNZ4qJmC8ih_lQQnCNWgAAAME"]
[Mon Mar 02 07:36:08.568752 2026] [:error] [pid 28795:tid 28864] [client 20.220.232.240:25397] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aaTNaLROd53wZBkdI_dijgAAAIE"]
[Mon Mar 02 07:36:09.059950 2026] [:error] [pid 31257:tid 31274] [client 20.220.232.240:25486] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/app.php"] [unique_id "aaTNaf-JFLfishX45N-ZFAAAAQs"]
[Mon Mar 02 07:36:09.844840 2026] [:error] [pid 28794:tid 28848] [client 20.220.232.240:25380] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/app.php"] [unique_id "aaTNaaVy2qpaelbUob0-sgAAAEw"]
[Mon Mar 02 07:36:10.432184 2026] [:error] [pid 28908:tid 28926] [client 20.220.232.240:25464] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/app.php"] [unique_id "aaTNaoqJmC8ih_lQQnCNZgAAANA"]
[Mon Mar 02 07:36:11.113930 2026] [:error] [pid 28908:tid 28919] [client 20.220.232.240:25407] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/app.php"] [unique_id "aaTNa4qJmC8ih_lQQnCNagAAAMk"]
[Mon Mar 02 07:36:12.433992 2026] [:error] [pid 31257:tid 31287] [client 20.220.232.240:25594] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws59.php"] [unique_id "aaTNbP-JFLfishX45N-ZIAAAARg"]
[Mon Mar 02 07:36:13.020275 2026] [:error] [pid 28794:tid 28858] [client 20.220.232.240:25346] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws59.php"] [unique_id "aaTNbaVy2qpaelbUob0-tgAAAFY"]
[Mon Mar 02 07:36:13.583950 2026] [:error] [pid 28795:tid 28870] [client 20.220.232.240:25572] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws59.php"] [unique_id "aaTNbbROd53wZBkdI_dimgAAAIc"]
[Mon Mar 02 07:36:14.048208 2026] [:error] [pid 28795:tid 28875] [client 20.220.232.240:25470] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws59.php"] [unique_id "aaTNbrROd53wZBkdI_dimwAAAIw"]
[Mon Mar 02 07:36:14.537098 2026] [:error] [pid 28908:tid 28911] [client 20.220.232.240:25413] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aaTNboqJmC8ih_lQQnCNdgAAAME"]
[Mon Mar 02 07:36:15.053825 2026] [:error] [pid 28795:tid 28864] [client 20.220.232.240:25501] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aaTNb7ROd53wZBkdI_dingAAAIE"]
[Mon Mar 02 07:36:15.494459 2026] [:error] [pid 28908:tid 28910] [client 20.220.232.240:25366] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aaTNb4qJmC8ih_lQQnCNdwAAAMA"]
[Mon Mar 02 07:36:15.944136 2026] [:error] [pid 28795:tid 28866] [client 20.220.232.240:25465] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aaTNb7ROd53wZBkdI_dioAAAAIM"]
[Mon Mar 02 07:36:16.408223 2026] [:error] [pid 31257:tid 31282] [client 20.220.232.240:25579] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mamzi.php"] [unique_id "aaTNcP-JFLfishX45N-ZLAAAARM"]
[Mon Mar 02 07:36:16.832319 2026] [:error] [pid 28908:tid 28914] [client 20.220.232.240:25552] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mamzi.php"] [unique_id "aaTNcIqJmC8ih_lQQnCNfQAAAMQ"]
[Mon Mar 02 07:36:17.243941 2026] [:error] [pid 28795:tid 28885] [client 20.220.232.240:25434] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mamzi.php"] [unique_id "aaTNcbROd53wZBkdI_dipgAAAJY"]
[Mon Mar 02 07:36:17.758520 2026] [:error] [pid 31257:tid 31278] [client 20.220.232.240:25456] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mamzi.php"] [unique_id "aaTNcf-JFLfishX45N-ZMwAAAQ8"]
[Mon Mar 02 07:36:18.181661 2026] [:error] [pid 31257:tid 31264] [client 20.220.232.240:25564] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aaTNcv-JFLfishX45N-ZNgAAAQE"]
[Mon Mar 02 07:36:18.771481 2026] [:error] [pid 31257:tid 31283] [client 20.220.232.240:25371] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aaTNcv-JFLfishX45N-ZOAAAARQ"]
[Mon Mar 02 07:36:19.194347 2026] [:error] [pid 28908:tid 28920] [client 20.220.232.240:25369] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aaTNc4qJmC8ih_lQQnCNfwAAAMo"]
[Mon Mar 02 07:36:19.661083 2026] [:error] [pid 28908:tid 28926] [client 20.220.232.240:25588] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aaTNc4qJmC8ih_lQQnCNgwAAANA"]
[Mon Mar 02 07:36:20.092069 2026] [:error] [pid 28908:tid 28931] [client 20.220.232.240:25524] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ae.php"] [unique_id "aaTNdIqJmC8ih_lQQnCNhgAAANU"]
[Mon Mar 02 07:36:20.518056 2026] [:error] [pid 28908:tid 28914] [client 20.220.232.240:25443] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ae.php"] [unique_id "aaTNdIqJmC8ih_lQQnCNiQAAAMQ"]
[Mon Mar 02 07:36:20.957570 2026] [:error] [pid 28795:tid 28882] [client 20.220.232.240:25457] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ae.php"] [unique_id "aaTNdLROd53wZBkdI_ditQAAAJM"]
[Mon Mar 02 07:36:21.409044 2026] [:error] [pid 28908:tid 28924] [client 20.220.232.240:25436] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ae.php"] [unique_id "aaTNdYqJmC8ih_lQQnCNjwAAAM4"]
[Mon Mar 02 07:36:21.826780 2026] [:error] [pid 28908:tid 28925] [client 20.220.232.240:25451] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/06.php"] [unique_id "aaTNdYqJmC8ih_lQQnCNkQAAAM8"]
[Mon Mar 02 07:36:22.322612 2026] [:error] [pid 28908:tid 28911] [client 20.220.232.240:25526] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/06.php"] [unique_id "aaTNdoqJmC8ih_lQQnCNlAAAAME"]
[Mon Mar 02 07:36:22.778884 2026] [:error] [pid 28908:tid 28923] [client 20.220.232.240:25469] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/06.php"] [unique_id "aaTNdoqJmC8ih_lQQnCNlgAAAM0"]
[Mon Mar 02 07:36:23.222700 2026] [:error] [pid 28908:tid 28932] [client 20.220.232.240:25467] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/06.php"] [unique_id "aaTNd4qJmC8ih_lQQnCNmQAAANY"]
[Mon Mar 02 07:36:23.651895 2026] [:error] [pid 28794:tid 28849] [client 20.220.232.240:25351] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws60.php"] [unique_id "aaTNd6Vy2qpaelbUob0-xwAAAE0"]
[Mon Mar 02 07:36:24.115235 2026] [:error] [pid 28908:tid 28925] [client 20.220.232.240:25408] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws60.php"] [unique_id "aaTNeIqJmC8ih_lQQnCNngAAAM8"]
[Mon Mar 02 07:36:24.544853 2026] [:error] [pid 31257:tid 31282] [client 20.220.232.240:25353] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws60.php"] [unique_id "aaTNeP-JFLfishX45N-ZPgAAARM"]
[Mon Mar 02 07:36:24.956265 2026] [:error] [pid 28794:tid 28844] [client 20.220.232.240:25431] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws60.php"] [unique_id "aaTNeKVy2qpaelbUob0-ygAAAEg"]
[Mon Mar 02 07:36:25.400747 2026] [:error] [pid 28795:tid 28868] [client 20.220.232.240:25411] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-freya.php"] [unique_id "aaTNebROd53wZBkdI_divwAAAIU"]
[Mon Mar 02 07:36:25.855578 2026] [:error] [pid 28794:tid 28838] [client 20.220.232.240:25442] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-freya.php"] [unique_id "aaTNeaVy2qpaelbUob0-zgAAAEI"]
[Mon Mar 02 07:36:26.317594 2026] [:error] [pid 28794:tid 28854] [client 20.220.232.240:25428] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-freya.php"] [unique_id "aaTNeqVy2qpaelbUob0-0QAAAFI"]
[Mon Mar 02 07:36:26.737225 2026] [:error] [pid 28795:tid 28875] [client 20.220.232.240:25510] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-freya.php"] [unique_id "aaTNerROd53wZBkdI_dixAAAAIw"]
[Mon Mar 02 07:36:27.155855 2026] [:error] [pid 31257:tid 31276] [client 20.220.232.240:25398] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bb.php"] [unique_id "aaTNe_-JFLfishX45N-ZRAAAAQ0"]
[Mon Mar 02 07:36:27.569993 2026] [:error] [pid 28794:tid 28839] [client 20.220.232.240:25302] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bb.php"] [unique_id "aaTNe6Vy2qpaelbUob0-0wAAAEM"]
[Mon Mar 02 07:36:27.985811 2026] [:error] [pid 31257:tid 31278] [client 20.220.232.240:25481] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bb.php"] [unique_id "aaTNe_-JFLfishX45N-ZRgAAAQ8"]
[Mon Mar 02 07:36:28.433828 2026] [:error] [pid 31257:tid 31267] [client 20.220.232.240:25401] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bb.php"] [unique_id "aaTNfP-JFLfishX45N-ZSQAAAQQ"]
[Mon Mar 02 07:36:28.863516 2026] [:error] [pid 31257:tid 31286] [client 20.220.232.240:25354] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dsd.php"] [unique_id "aaTNfP-JFLfishX45N-ZSgAAARc"]
[Mon Mar 02 07:36:29.285108 2026] [:error] [pid 31257:tid 31284] [client 20.220.232.240:25444] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dsd.php"] [unique_id "aaTNff-JFLfishX45N-ZSwAAARU"]
[Mon Mar 02 07:36:29.715837 2026] [:error] [pid 31257:tid 31264] [client 20.220.232.240:25313] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dsd.php"] [unique_id "aaTNff-JFLfishX45N-ZTAAAAQE"]
[Mon Mar 02 07:36:30.133388 2026] [:error] [pid 28795:tid 28886] [client 20.220.232.240:25348] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dsd.php"] [unique_id "aaTNfrROd53wZBkdI_diywAAAJc"]
[Mon Mar 02 07:36:30.563201 2026] [:error] [pid 28795:tid 28872] [client 20.220.232.240:25281] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/guk.php"] [unique_id "aaTNfrROd53wZBkdI_dizAAAAIk"]
[Mon Mar 02 07:36:30.990648 2026] [:error] [pid 28908:tid 28925] [client 20.220.232.240:25382] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/guk.php"] [unique_id "aaTNfoqJmC8ih_lQQnCNtQAAAM8"]
[Mon Mar 02 07:36:31.403050 2026] [:error] [pid 28795:tid 28882] [client 20.220.232.240:25356] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/guk.php"] [unique_id "aaTNf7ROd53wZBkdI_di0wAAAJM"]
[Mon Mar 02 07:36:31.831768 2026] [:error] [pid 28908:tid 28931] [client 20.220.232.240:25381] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/guk.php"] [unique_id "aaTNf4qJmC8ih_lQQnCNuwAAANU"]
[Mon Mar 02 07:36:32.259715 2026] [:error] [pid 31257:tid 31268] [client 20.220.232.240:25283] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/vx.php"] [unique_id "aaTNgP-JFLfishX45N-ZUAAAAQU"]
[Mon Mar 02 07:36:32.756156 2026] [:error] [pid 28793:tid 28825] [client 20.220.232.240:25427] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/vx.php"] [unique_id "aaTNgA2_fxBANaHo1f4soAAAABI"]
[Mon Mar 02 07:36:33.174616 2026] [:error] [pid 28793:tid 28815] [client 20.220.232.240:25384] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/vx.php"] [unique_id "aaTNgQ2_fxBANaHo1f4sowAAAAg"]
[Mon Mar 02 07:36:33.588461 2026] [:error] [pid 31257:tid 31266] [client 20.220.232.240:25375] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/vx.php"] [unique_id "aaTNgf-JFLfishX45N-ZVAAAAQM"]
[Mon Mar 02 07:36:34.094490 2026] [:error] [pid 28794:tid 28840] [client 20.220.232.240:25318] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ze.php"] [unique_id "aaTNgqVy2qpaelbUob0-2AAAAEQ"]
[Mon Mar 02 07:36:34.557771 2026] [:error] [pid 28793:tid 28817] [client 20.220.232.240:25363] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ze.php"] [unique_id "aaTNgg2_fxBANaHo1f4ssQAAAAo"]
[Mon Mar 02 07:36:34.974921 2026] [:error] [pid 31257:tid 31281] [client 20.220.232.240:25347] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ze.php"] [unique_id "aaTNgv-JFLfishX45N-ZWAAAARI"]
[Mon Mar 02 07:36:35.517604 2026] [:error] [pid 28794:tid 28848] [client 20.220.232.240:25376] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ze.php"] [unique_id "aaTNg6Vy2qpaelbUob0-3AAAAEw"]
[Mon Mar 02 07:36:35.943196 2026] [:error] [pid 28795:tid 28867] [client 20.220.232.240:25289] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file52.php"] [unique_id "aaTNg7ROd53wZBkdI_di5wAAAIQ"]
[Mon Mar 02 07:36:36.411056 2026] [:error] [pid 28908:tid 28913] [client 20.220.232.240:25523] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file52.php"] [unique_id "aaTNhIqJmC8ih_lQQnCNwwAAAMM"]
[Mon Mar 02 07:36:36.832605 2026] [:error] [pid 28908:tid 28922] [client 20.220.232.240:25575] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file52.php"] [unique_id "aaTNhIqJmC8ih_lQQnCNxAAAAMw"]
[Mon Mar 02 07:36:37.264818 2026] [:error] [pid 28908:tid 28929] [client 20.220.232.240:25518] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file52.php"] [unique_id "aaTNhYqJmC8ih_lQQnCNyAAAANM"]
[Mon Mar 02 07:36:37.720595 2026] [:error] [pid 28793:tid 28810] [client 20.220.232.240:25445] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tax.php"] [unique_id "aaTNhQ2_fxBANaHo1f4szwAAAAM"]
[Mon Mar 02 07:36:38.209852 2026] [:error] [pid 28908:tid 28928] [client 20.220.232.240:25334] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tax.php"] [unique_id "aaTNhoqJmC8ih_lQQnCN0QAAANI"]
[Mon Mar 02 07:36:38.672082 2026] [:error] [pid 28908:tid 28911] [client 20.220.232.240:25425] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tax.php"] [unique_id "aaTNhoqJmC8ih_lQQnCN2AAAAME"]
[Mon Mar 02 07:36:39.127143 2026] [:error] [pid 28794:tid 28857] [client 20.220.232.240:25299] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tax.php"] [unique_id "aaTNh6Vy2qpaelbUob0-4AAAAFU"]
[Mon Mar 02 07:36:39.565434 2026] [:error] [pid 28795:tid 28873] [client 20.220.232.240:25325] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/an7.php"] [unique_id "aaTNh7ROd53wZBkdI_di7AAAAIo"]
[Mon Mar 02 07:36:40.001849 2026] [:error] [pid 31257:tid 31265] [client 20.220.232.240:25504] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/an7.php"] [unique_id "aaTNiP-JFLfishX45N-ZXgAAAQI"]
[Mon Mar 02 07:36:40.421321 2026] [:error] [pid 28908:tid 28931] [client 20.220.232.240:25404] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/an7.php"] [unique_id "aaTNiIqJmC8ih_lQQnCN4AAAANU"]
[Mon Mar 02 07:36:40.844473 2026] [:error] [pid 28908:tid 28927] [client 20.220.232.240:25421] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/an7.php"] [unique_id "aaTNiIqJmC8ih_lQQnCN4wAAANE"]
[Mon Mar 02 07:36:41.275305 2026] [:error] [pid 28794:tid 28841] [client 20.220.232.240:25364] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ty.php"] [unique_id "aaTNiaVy2qpaelbUob0-5QAAAEU"]
[Mon Mar 02 07:36:41.694485 2026] [:error] [pid 28793:tid 28812] [client 20.220.232.240:25285] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ty.php"] [unique_id "aaTNiQ2_fxBANaHo1f4s2AAAAAU"]
[Mon Mar 02 07:36:42.117416 2026] [:error] [pid 31257:tid 31269] [client 20.220.232.240:25438] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ty.php"] [unique_id "aaTNiv-JFLfishX45N-ZYgAAAQY"]
[Mon Mar 02 07:36:42.533023 2026] [:error] [pid 28908:tid 28914] [client 20.220.232.240:25529] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ty.php"] [unique_id "aaTNioqJmC8ih_lQQnCN6AAAAMQ"]
[Mon Mar 02 07:36:42.993130 2026] [:error] [pid 28908:tid 28916] [client 20.220.232.240:25314] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/brc.php"] [unique_id "aaTNioqJmC8ih_lQQnCN7AAAAMY"]
[Mon Mar 02 07:36:43.466538 2026] [:error] [pid 31257:tid 31275] [client 20.220.232.240:25309] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/brc.php"] [unique_id "aaTNi_-JFLfishX45N-ZZQAAAQw"]
[Mon Mar 02 07:36:43.887703 2026] [:error] [pid 28794:tid 28847] [client 20.220.232.240:25378] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/brc.php"] [unique_id "aaTNi6Vy2qpaelbUob0-7gAAAEs"]
[Mon Mar 02 07:36:44.411679 2026] [:error] [pid 31257:tid 31270] [client 20.220.232.240:25350] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/brc.php"] [unique_id "aaTNjP-JFLfishX45N-ZagAAAQc"]
[Mon Mar 02 07:36:44.829399 2026] [:error] [pid 31257:tid 31287] [client 20.220.232.240:25367] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/koiy.php"] [unique_id "aaTNjP-JFLfishX45N-ZbwAAARg"]
[Mon Mar 02 07:36:45.251493 2026] [:error] [pid 28794:tid 28838] [client 20.220.232.240:25450] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/koiy.php"] [unique_id "aaTNjaVy2qpaelbUob0-8wAAAEI"]
[Mon Mar 02 07:36:45.682855 2026] [:error] [pid 28794:tid 28848] [client 20.220.232.240:25418] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/koiy.php"] [unique_id "aaTNjaVy2qpaelbUob0-9AAAAEw"]
[Mon Mar 02 07:36:46.146090 2026] [:error] [pid 31257:tid 31286] [client 20.220.232.240:25291] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/koiy.php"] [unique_id "aaTNjv-JFLfishX45N-ZdAAAARc"]
[Mon Mar 02 07:36:46.597676 2026] [:error] [pid 28794:tid 28858] [client 20.220.232.240:25387] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/myfile.php"] [unique_id "aaTNjqVy2qpaelbUob0-_gAAAFY"]
[Mon Mar 02 07:36:47.069848 2026] [:error] [pid 31257:tid 31280] [client 20.220.232.240:25297] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/myfile.php"] [unique_id "aaTNj_-JFLfishX45N-ZdwAAARE"]
[Mon Mar 02 07:36:47.486210 2026] [:error] [pid 31257:tid 31282] [client 20.220.232.240:25486] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/myfile.php"] [unique_id "aaTNj_-JFLfishX45N-ZeQAAARM"]
[Mon Mar 02 07:36:47.918032 2026] [:error] [pid 31257:tid 31279] [client 20.220.232.240:25403] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/myfile.php"] [unique_id "aaTNj_-JFLfishX45N-ZfAAAARA"]
[Mon Mar 02 07:36:48.410016 2026] [:error] [pid 28795:tid 28871] [client 20.220.232.240:25391] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fr/ms.php"] [unique_id "aaTNkLROd53wZBkdI_djAAAAAIg"]
[Mon Mar 02 07:36:48.939189 2026] [:error] [pid 28795:tid 28865] [client 20.220.232.240:25506] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fr/ms.php"] [unique_id "aaTNkLROd53wZBkdI_djBAAAAII"]
[Mon Mar 02 07:36:49.351057 2026] [:error] [pid 28795:tid 28873] [client 20.220.232.240:25355] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fr/ms.php"] [unique_id "aaTNkbROd53wZBkdI_djBQAAAIo"]
[Mon Mar 02 07:36:49.808752 2026] [:error] [pid 31257:tid 31266] [client 20.220.232.240:25294] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fr/ms.php"] [unique_id "aaTNkf-JFLfishX45N-ZgwAAAQM"]
[Mon Mar 02 07:36:50.258625 2026] [:error] [pid 31257:tid 31280] [client 20.220.232.240:25288] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aaTNkv-JFLfishX45N-ZhQAAARE"]
[Mon Mar 02 07:36:50.677274 2026] [:error] [pid 28794:tid 28852] [client 20.220.232.240:25394] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aaTNkqVy2qpaelbUob0_DAAAAFA"]
[Mon Mar 02 07:36:51.168551 2026] [:error] [pid 28908:tid 28916] [client 20.220.232.240:25519] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aaTNk4qJmC8ih_lQQnCN9QAAAMY"]
[Mon Mar 02 07:36:51.680812 2026] [:error] [pid 28794:tid 28840] [client 20.220.232.240:25441] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aaTNk6Vy2qpaelbUob0_EAAAAEQ"]
[Mon Mar 02 07:36:52.121692 2026] [:error] [pid 28908:tid 28934] [client 20.220.232.240:25303] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gool.php"] [unique_id "aaTNlIqJmC8ih_lQQnCN-gAAANg"]
[Mon Mar 02 07:36:52.587811 2026] [:error] [pid 31257:tid 31280] [client 20.220.232.240:25395] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gool.php"] [unique_id "aaTNlP-JFLfishX45N-ZkAAAARE"]
[Mon Mar 02 07:36:53.039669 2026] [:error] [pid 28908:tid 28928] [client 20.220.232.240:25468] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gool.php"] [unique_id "aaTNlYqJmC8ih_lQQnCN_gAAANI"]
[Mon Mar 02 07:36:53.473381 2026] [:error] [pid 28908:tid 28923] [client 20.220.232.240:25282] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gool.php"] [unique_id "aaTNlYqJmC8ih_lQQnCOAQAAAM0"]
[Mon Mar 02 07:36:53.998253 2026] [:error] [pid 31257:tid 31284] [client 20.220.232.240:25330] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a1vx.php"] [unique_id "aaTNlf-JFLfishX45N-ZlgAAARU"]
[Mon Mar 02 07:36:54.475341 2026] [:error] [pid 28794:tid 28858] [client 20.220.232.240:25388] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a1vx.php"] [unique_id "aaTNlqVy2qpaelbUob0_FQAAAFY"]
[Mon Mar 02 07:36:54.939632 2026] [:error] [pid 28794:tid 28855] [client 20.220.232.240:25461] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a1vx.php"] [unique_id "aaTNlqVy2qpaelbUob0_GQAAAFM"]
[Mon Mar 02 07:36:55.395499 2026] [:error] [pid 31257:tid 31287] [client 20.220.232.240:25229] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a1vx.php"] [unique_id "aaTNl_-JFLfishX45N-ZmgAAARg"]
[Mon Mar 02 07:36:55.852297 2026] [:error] [pid 28795:tid 28882] [client 20.220.232.240:25284] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mans.php"] [unique_id "aaTNl7ROd53wZBkdI_djHQAAAJM"]
[Mon Mar 02 07:36:56.262115 2026] [:error] [pid 28908:tid 28911] [client 20.220.232.240:25530] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mans.php"] [unique_id "aaTNmIqJmC8ih_lQQnCOCQAAAME"]
[Mon Mar 02 07:36:56.703482 2026] [:error] [pid 28794:tid 28837] [client 20.220.232.240:25359] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mans.php"] [unique_id "aaTNmKVy2qpaelbUob0_HwAAAEE"]
[Mon Mar 02 07:36:57.131408 2026] [:error] [pid 28795:tid 28878] [client 20.220.232.240:25287] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mans.php"] [unique_id "aaTNmbROd53wZBkdI_djIQAAAI8"]
[Mon Mar 02 07:36:57.558538 2026] [:error] [pid 28908:tid 28928] [client 20.220.232.240:25405] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rum.php"] [unique_id "aaTNmYqJmC8ih_lQQnCODQAAANI"]
[Mon Mar 02 07:36:57.985577 2026] [:error] [pid 28908:tid 28929] [client 20.220.232.240:25400] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rum.php"] [unique_id "aaTNmYqJmC8ih_lQQnCODwAAANM"]
[Mon Mar 02 07:36:58.422073 2026] [:error] [pid 28794:tid 28849] [client 20.220.232.240:25406] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rum.php"] [unique_id "aaTNmqVy2qpaelbUob0_IAAAAE0"]
[Mon Mar 02 07:36:58.835049 2026] [:error] [pid 28795:tid 28880] [client 20.220.232.240:25379] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rum.php"] [unique_id "aaTNmrROd53wZBkdI_djIwAAAJE"]
[Mon Mar 02 07:36:59.288728 2026] [:error] [pid 28908:tid 28931] [client 20.220.232.240:25368] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aaTNm4qJmC8ih_lQQnCOFwAAANU"]
[Mon Mar 02 07:36:59.712743 2026] [:error] [pid 28908:tid 28922] [client 20.220.232.240:25423] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aaTNm4qJmC8ih_lQQnCOHAAAAMw"]
[Mon Mar 02 07:37:00.167489 2026] [:error] [pid 28908:tid 28930] [client 20.220.232.240:25372] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aaTNnIqJmC8ih_lQQnCOIAAAANQ"]
[Mon Mar 02 07:37:00.681481 2026] [:error] [pid 28908:tid 28920] [client 20.220.232.240:25300] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aaTNnIqJmC8ih_lQQnCOJQAAAMo"]
[Mon Mar 02 07:37:01.165206 2026] [:error] [pid 31257:tid 31265] [client 20.220.232.240:25286] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wio.php"] [unique_id "aaTNnf-JFLfishX45N-ZtgAAAQI"]
[Mon Mar 02 07:37:01.646945 2026] [:error] [pid 31257:tid 31266] [client 20.220.232.240:25462] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wio.php"] [unique_id "aaTNnf-JFLfishX45N-ZugAAAQM"]
[Mon Mar 02 07:37:02.070651 2026] [:error] [pid 28795:tid 28873] [client 20.220.232.240:25267] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wio.php"] [unique_id "aaTNnrROd53wZBkdI_djKQAAAIo"]
[Mon Mar 02 07:37:02.489016 2026] [:error] [pid 28793:tid 28808] [client 20.220.232.240:25240] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wio.php"] [unique_id "aaTNng2_fxBANaHo1f4s5gAAAAE"]
[Mon Mar 02 07:37:02.946094 2026] [:error] [pid 28793:tid 28810] [client 20.220.232.240:25311] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/clasa99.php"] [unique_id "aaTNng2_fxBANaHo1f4s6gAAAAM"]
[Mon Mar 02 07:37:03.388378 2026] [:error] [pid 28793:tid 28825] [client 20.220.232.240:25336] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/clasa99.php"] [unique_id "aaTNnw2_fxBANaHo1f4s7QAAABI"]
[Mon Mar 02 07:37:03.804737 2026] [:error] [pid 28908:tid 28929] [client 20.220.232.240:25217] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/clasa99.php"] [unique_id "aaTNn4qJmC8ih_lQQnCONwAAANM"]
[Mon Mar 02 07:37:10.005817 2026] [:error] [pid 28908:tid 28921] [client 20.220.232.240:25224] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jq.php"] [unique_id "aaTNpoqJmC8ih_lQQnCOaAAAAMs"]
[Mon Mar 02 07:37:10.506792 2026] [:error] [pid 31257:tid 31277] [client 20.220.232.240:25338] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jq.php"] [unique_id "aaTNpv-JFLfishX45N-Z2QAAAQ4"]
[Mon Mar 02 07:37:11.040882 2026] [:error] [pid 28908:tid 28922] [client 20.220.232.240:25399] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jq.php"] [unique_id "aaTNp4qJmC8ih_lQQnCObQAAAMw"]
[Mon Mar 02 07:37:11.482303 2026] [:error] [pid 28793:tid 28830] [client 20.220.232.240:25256] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jq.php"] [unique_id "aaTNpw2_fxBANaHo1f4s-wAAABc"]
[Mon Mar 02 07:37:11.898600 2026] [:error] [pid 28908:tid 28931] [client 20.220.232.240:25219] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x7.php"] [unique_id "aaTNp4qJmC8ih_lQQnCOdQAAANU"]
[Mon Mar 02 07:37:12.310682 2026] [:error] [pid 28794:tid 28843] [client 20.220.232.240:25335] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x7.php"] [unique_id "aaTNqKVy2qpaelbUob0_NAAAAEc"]
[Mon Mar 02 07:37:12.827591 2026] [:error] [pid 28908:tid 28920] [client 20.220.232.240:25305] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x7.php"] [unique_id "aaTNqIqJmC8ih_lQQnCOdwAAAMo"]
[Mon Mar 02 07:37:13.294777 2026] [:error] [pid 28908:tid 28932] [client 20.220.232.240:25222] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x7.php"] [unique_id "aaTNqYqJmC8ih_lQQnCOeQAAANY"]
[Mon Mar 02 07:37:13.791986 2026] [:error] [pid 28794:tid 28859] [client 20.220.232.240:25390] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bes.php"] [unique_id "aaTNqaVy2qpaelbUob0_OgAAAFc"]
[Mon Mar 02 07:37:14.223626 2026] [:error] [pid 28908:tid 28916] [client 20.220.232.240:25231] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bes.php"] [unique_id "aaTNqoqJmC8ih_lQQnCOewAAAMY"]
[Mon Mar 02 07:37:14.655369 2026] [:error] [pid 31257:tid 31263] [client 20.220.232.240:25327] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bes.php"] [unique_id "aaTNqv-JFLfishX45N-Z6AAAAQA"]
[Mon Mar 02 07:37:15.092631 2026] [:error] [pid 28795:tid 28886] [client 20.220.232.240:25088] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bes.php"] [unique_id "aaTNq7ROd53wZBkdI_djPAAAAJc"]
[Mon Mar 02 07:37:15.544944 2026] [:error] [pid 28908:tid 28919] [client 20.220.232.240:25544] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sadd.php"] [unique_id "aaTNq4qJmC8ih_lQQnCOfwAAAMk"]
[Mon Mar 02 07:37:16.027537 2026] [:error] [pid 28908:tid 28933] [client 20.220.232.240:25233] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sadd.php"] [unique_id "aaTNrIqJmC8ih_lQQnCOggAAANc"]
[Mon Mar 02 07:37:16.475256 2026] [:error] [pid 28908:tid 28923] [client 20.220.232.240:25235] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sadd.php"] [unique_id "aaTNrIqJmC8ih_lQQnCOhQAAAM0"]
[Mon Mar 02 07:37:16.898285 2026] [:error] [pid 28908:tid 28910] [client 20.220.232.240:25324] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sadd.php"] [unique_id "aaTNrIqJmC8ih_lQQnCOiAAAAMA"]
[Mon Mar 02 07:37:17.343600 2026] [:error] [pid 28908:tid 28913] [client 20.220.232.240:25165] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vgtyu.php"] [unique_id "aaTNrYqJmC8ih_lQQnCOjgAAAMM"]
[Mon Mar 02 07:37:17.826493 2026] [:error] [pid 28795:tid 28870] [client 20.220.232.240:25280] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vgtyu.php"] [unique_id "aaTNrbROd53wZBkdI_djQwAAAIc"]
[Mon Mar 02 07:37:18.253319 2026] [:error] [pid 28908:tid 28928] [client 20.220.232.240:25392] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vgtyu.php"] [unique_id "aaTNroqJmC8ih_lQQnCOmAAAANI"]
[Mon Mar 02 07:37:18.672477 2026] [:error] [pid 28908:tid 28924] [client 20.220.232.240:25295] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vgtyu.php"] [unique_id "aaTNroqJmC8ih_lQQnCOngAAAM4"]
[Mon Mar 02 07:37:19.082466 2026] [:error] [pid 31257:tid 31282] [client 20.220.232.240:25332] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aaTNr_-JFLfishX45N-Z8QAAARM"]
[Mon Mar 02 07:37:19.492243 2026] [:error] [pid 31257:tid 31272] [client 20.220.232.240:25466] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aaTNr_-JFLfishX45N-Z8gAAAQk"]
[Mon Mar 02 07:37:19.970178 2026] [:error] [pid 28795:tid 28885] [client 20.220.232.240:25296] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aaTNr7ROd53wZBkdI_djSwAAAJY"]
[Mon Mar 02 07:37:20.845879 2026] [:error] [pid 28794:tid 28845] [client 20.220.232.240:25319] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aaTNsKVy2qpaelbUob0_QAAAAEk"]
[Mon Mar 02 07:37:21.269066 2026] [:error] [pid 28794:tid 28839] [client 20.220.232.240:25265] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aaTNsaVy2qpaelbUob0_QQAAAEM"]
[Mon Mar 02 07:37:21.680716 2026] [:error] [pid 28908:tid 28912] [client 20.220.232.240:25307] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aaTNsYqJmC8ih_lQQnCOpgAAAMI"]
[Mon Mar 02 07:37:22.119242 2026] [:error] [pid 28908:tid 28920] [client 20.220.232.240:25156] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aaTNsoqJmC8ih_lQQnCOqQAAAMo"]
[Mon Mar 02 07:37:22.539294 2026] [:error] [pid 31257:tid 31275] [client 20.220.232.240:25358] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aaTNsv-JFLfishX45N-Z-AAAAQw"]
[Mon Mar 02 07:37:22.950238 2026] [:error] [pid 31257:tid 31263] [client 20.220.232.240:25393] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/c4.php"] [unique_id "aaTNsv-JFLfishX45N-Z_AAAAQA"]
[Mon Mar 02 07:37:23.361330 2026] [:error] [pid 31257:tid 31282] [client 20.220.232.240:25373] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/c4.php"] [unique_id "aaTNs_-JFLfishX45N-Z_wAAARM"]
[Mon Mar 02 07:37:23.789232 2026] [:error] [pid 31257:tid 31278] [client 20.220.232.240:25383] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/c4.php"] [unique_id "aaTNs_-JFLfishX45N-aBQAAAQ8"]
[Mon Mar 02 07:37:24.231637 2026] [:error] [pid 28793:tid 28825] [client 20.220.232.240:25337] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/c4.php"] [unique_id "aaTNtA2_fxBANaHo1f4tFAAAABI"]
[Mon Mar 02 07:37:24.657618 2026] [:error] [pid 28794:tid 28845] [client 20.220.232.240:25430] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/eauu.php"] [unique_id "aaTNtKVy2qpaelbUob0_UQAAAEk"]
[Mon Mar 02 07:37:25.078199 2026] [:error] [pid 28908:tid 28929] [client 20.220.232.240:25310] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/eauu.php"] [unique_id "aaTNtYqJmC8ih_lQQnCOsAAAANM"]
[Mon Mar 02 07:37:25.500781 2026] [:error] [pid 28795:tid 28885] [client 20.220.232.240:25344] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/eauu.php"] [unique_id "aaTNtbROd53wZBkdI_djWgAAAJY"]
[Mon Mar 02 07:37:25.924674 2026] [:error] [pid 28795:tid 28882] [client 20.220.232.240:25268] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/eauu.php"] [unique_id "aaTNtbROd53wZBkdI_djWwAAAJM"]
[Mon Mar 02 07:37:26.351591 2026] [:error] [pid 28793:tid 28807] [client 20.220.232.240:25348] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fasx.php"] [unique_id "aaTNtg2_fxBANaHo1f4tFgAAAAA"]
[Mon Mar 02 07:37:26.774225 2026] [:error] [pid 31257:tid 31277] [client 20.220.232.240:25301] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fasx.php"] [unique_id "aaTNtv-JFLfishX45N-aEQAAAQ4"]
[Mon Mar 02 07:37:27.194862 2026] [:error] [pid 31257:tid 31265] [client 20.220.232.240:25251] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fasx.php"] [unique_id "aaTNt_-JFLfishX45N-aFgAAAQI"]
[Mon Mar 02 07:37:27.613700 2026] [:error] [pid 28908:tid 28931] [client 20.220.232.240:25298] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fasx.php"] [unique_id "aaTNt4qJmC8ih_lQQnCOvAAAANU"]
[Mon Mar 02 07:37:28.042858 2026] [:error] [pid 28908:tid 28920] [client 20.220.232.240:25317] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/opts.php"] [unique_id "aaTNuIqJmC8ih_lQQnCOwAAAAMo"]
[Mon Mar 02 07:37:28.457718 2026] [:error] [pid 28908:tid 28924] [client 20.220.232.240:25226] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/opts.php"] [unique_id "aaTNuIqJmC8ih_lQQnCOwwAAAM4"]
[Mon Mar 02 07:37:28.872985 2026] [:error] [pid 28795:tid 28870] [client 20.220.232.240:25244] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/opts.php"] [unique_id "aaTNuLROd53wZBkdI_djYAAAAIc"]
[Mon Mar 02 07:37:29.286533 2026] [:error] [pid 28908:tid 28926] [client 20.220.232.240:25262] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/opts.php"] [unique_id "aaTNuYqJmC8ih_lQQnCOywAAANA"]
[Mon Mar 02 07:37:29.699747 2026] [:error] [pid 28908:tid 28912] [client 20.220.232.240:25243] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nzv.php"] [unique_id "aaTNuYqJmC8ih_lQQnCOzgAAAMI"]
[Mon Mar 02 07:37:30.118455 2026] [:error] [pid 28793:tid 28822] [client 20.220.232.240:25343] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nzv.php"] [unique_id "aaTNug2_fxBANaHo1f4tGQAAAA8"]
[Mon Mar 02 07:37:30.535940 2026] [:error] [pid 31257:tid 31272] [client 20.220.232.240:25279] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nzv.php"] [unique_id "aaTNuv-JFLfishX45N-aHgAAAQk"]
[Mon Mar 02 07:37:30.953671 2026] [:error] [pid 31257:tid 31281] [client 20.220.232.240:25162] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nzv.php"] [unique_id "aaTNuv-JFLfishX45N-aIwAAARI"]
[Mon Mar 02 07:37:31.374246 2026] [:error] [pid 28908:tid 28915] [client 20.220.232.240:25264] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aaTNu4qJmC8ih_lQQnCO0gAAAMU"]
[Mon Mar 02 07:37:31.788751 2026] [:error] [pid 28795:tid 28883] [client 20.220.232.240:25321] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aaTNu7ROd53wZBkdI_djaAAAAJQ"]
[Mon Mar 02 07:37:32.208788 2026] [:error] [pid 28793:tid 28831] [client 20.220.232.240:25193] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aaTNvA2_fxBANaHo1f4tIwAAABg"]
[Mon Mar 02 07:37:32.629042 2026] [:error] [pid 31257:tid 31276] [client 20.220.232.240:25312] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aaTNvP-JFLfishX45N-aJwAAAQ0"]
[Mon Mar 02 07:37:33.050443 2026] [:error] [pid 31257:tid 31269] [client 20.220.232.240:25349] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byp8.php"] [unique_id "aaTNvf-JFLfishX45N-aKQAAAQY"]
[Mon Mar 02 07:37:33.463808 2026] [:error] [pid 31257:tid 31271] [client 20.220.232.240:25178] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byp8.php"] [unique_id "aaTNvf-JFLfishX45N-aKwAAAQg"]
[Mon Mar 02 07:37:33.887323 2026] [:error] [pid 31257:tid 31274] [client 20.220.232.240:25333] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byp8.php"] [unique_id "aaTNvf-JFLfishX45N-aLAAAAQs"]
[Mon Mar 02 07:37:34.316160 2026] [:error] [pid 28908:tid 28915] [client 20.220.232.240:25396] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byp8.php"] [unique_id "aaTNvoqJmC8ih_lQQnCO1wAAAMU"]
[Mon Mar 02 07:37:34.726937 2026] [:error] [pid 31257:tid 31273] [client 20.220.232.240:25329] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nhr.php"] [unique_id "aaTNvv-JFLfishX45N-aMwAAAQo"]
[Mon Mar 02 07:37:35.149528 2026] [:error] [pid 28908:tid 28921] [client 20.220.232.240:25266] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nhr.php"] [unique_id "aaTNv4qJmC8ih_lQQnCO2gAAAMs"]
[Mon Mar 02 07:37:35.566180 2026] [:error] [pid 31257:tid 31270] [client 20.220.232.240:25170] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nhr.php"] [unique_id "aaTNv_-JFLfishX45N-aOAAAAQc"]
[Mon Mar 02 07:37:35.983685 2026] [:error] [pid 28794:tid 28851] [client 20.220.232.240:25293] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nhr.php"] [unique_id "aaTNv6Vy2qpaelbUob0_bgAAAE8"]
[Mon Mar 02 07:37:36.398544 2026] [:error] [pid 28794:tid 28838] [client 20.220.232.240:25374] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "aaTNwKVy2qpaelbUob0_bwAAAEI"]
[Mon Mar 02 07:37:36.832700 2026] [:error] [pid 28794:tid 28858] [client 20.220.232.240:25455] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "aaTNwKVy2qpaelbUob0_cAAAAFY"]
[Mon Mar 02 07:37:37.252870 2026] [:error] [pid 28795:tid 28871] [client 20.220.232.240:25524] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "aaTNwbROd53wZBkdI_djcwAAAIg"]
[Mon Mar 02 07:37:37.668216 2026] [:error] [pid 28794:tid 28849] [client 20.220.232.240:25157] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "aaTNwaVy2qpaelbUob0_cwAAAE0"]
[Mon Mar 02 07:37:38.079220 2026] [:error] [pid 28794:tid 28852] [client 20.220.232.240:25236] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws79.php"] [unique_id "aaTNwqVy2qpaelbUob0_dgAAAFA"]
[Mon Mar 02 07:37:38.489347 2026] [:error] [pid 28908:tid 28931] [client 20.220.232.240:25315] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws79.php"] [unique_id "aaTNwoqJmC8ih_lQQnCO4QAAANU"]
[Mon Mar 02 07:37:38.902264 2026] [:error] [pid 28908:tid 28922] [client 20.220.232.240:25216] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws79.php"] [unique_id "aaTNwoqJmC8ih_lQQnCO4gAAAMw"]
[Mon Mar 02 07:37:39.310654 2026] [:error] [pid 28908:tid 28924] [client 20.220.232.240:25377] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws79.php"] [unique_id "aaTNw4qJmC8ih_lQQnCO5AAAAM4"]
[Mon Mar 02 07:37:39.723995 2026] [:error] [pid 28794:tid 28841] [client 20.220.232.240:25191] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1061.php"] [unique_id "aaTNw6Vy2qpaelbUob0_ewAAAEU"]
[Mon Mar 02 07:37:40.133514 2026] [:error] [pid 28794:tid 28847] [client 20.220.232.240:25258] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1061.php"] [unique_id "aaTNxKVy2qpaelbUob0_fgAAAEs"]
[Mon Mar 02 07:37:40.550791 2026] [:error] [pid 28794:tid 28853] [client 20.220.232.240:25227] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1061.php"] [unique_id "aaTNxKVy2qpaelbUob0_gAAAAFE"]
[Mon Mar 02 07:37:40.982296 2026] [:error] [pid 28794:tid 28848] [client 20.220.232.240:25304] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1061.php"] [unique_id "aaTNxKVy2qpaelbUob0_ggAAAEw"]
[Mon Mar 02 07:37:41.394423 2026] [:error] [pid 28795:tid 28886] [client 20.220.232.240:25308] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zwq13.php"] [unique_id "aaTNxbROd53wZBkdI_djegAAAJc"]
[Mon Mar 02 07:37:41.805157 2026] [:error] [pid 28908:tid 28918] [client 20.220.232.240:25234] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zwq13.php"] [unique_id "aaTNxYqJmC8ih_lQQnCO7QAAAMg"]
[Mon Mar 02 07:37:42.215603 2026] [:error] [pid 28794:tid 28846] [client 20.220.232.240:25257] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zwq13.php"] [unique_id "aaTNxqVy2qpaelbUob0_hgAAAEo"]
[Mon Mar 02 07:37:42.634980 2026] [:error] [pid 31257:tid 31282] [client 20.220.232.240:25095] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zwq13.php"] [unique_id "aaTNxv-JFLfishX45N-aQwAAARM"]
[Mon Mar 02 07:37:43.053423 2026] [:error] [pid 31257:tid 31277] [client 20.220.232.240:25242] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hello.php"] [unique_id "aaTNx_-JFLfishX45N-aRQAAAQ4"]
[Mon Mar 02 07:37:43.476700 2026] [:error] [pid 31257:tid 31264] [client 20.220.232.240:25255] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hello.php"] [unique_id "aaTNx_-JFLfishX45N-aRgAAAQE"]
[Mon Mar 02 07:37:43.893466 2026] [:error] [pid 28908:tid 28920] [client 20.220.232.240:25239] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hello.php"] [unique_id "aaTNx4qJmC8ih_lQQnCO9QAAAMo"]
[Mon Mar 02 07:37:44.304576 2026] [:error] [pid 31257:tid 31278] [client 20.220.232.240:25278] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hello.php"] [unique_id "aaTNyP-JFLfishX45N-aSQAAAQ8"]
[Mon Mar 02 07:37:44.721583 2026] [:error] [pid 31257:tid 31287] [client 20.220.232.240:25166] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/05.php"] [unique_id "aaTNyP-JFLfishX45N-aTAAAARg"]
[Mon Mar 02 07:37:45.140931 2026] [:error] [pid 31257:tid 31276] [client 20.220.232.240:25361] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/05.php"] [unique_id "aaTNyf-JFLfishX45N-aTgAAAQ0"]
[Mon Mar 02 07:37:45.553874 2026] [:error] [pid 28908:tid 28913] [client 20.220.232.240:25183] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/05.php"] [unique_id "aaTNyYqJmC8ih_lQQnCO_AAAAMM"]
[Mon Mar 02 07:37:45.962968 2026] [:error] [pid 31257:tid 31268] [client 20.220.232.240:25225] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/05.php"] [unique_id "aaTNyf-JFLfishX45N-aUQAAAQU"]
[Mon Mar 02 07:37:46.374358 2026] [:error] [pid 28794:tid 28842] [client 20.220.232.240:25340] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zxin.php"] [unique_id "aaTNyqVy2qpaelbUob0_jgAAAEY"]
[Mon Mar 02 07:37:46.818605 2026] [:error] [pid 28908:tid 28915] [client 20.220.232.240:25277] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zxin.php"] [unique_id "aaTNyoqJmC8ih_lQQnCO_gAAAMU"]
[Mon Mar 02 07:37:47.225913 2026] [:error] [pid 28794:tid 28836] [client 20.220.232.240:25202] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zxin.php"] [unique_id "aaTNy6Vy2qpaelbUob0_kAAAAEA"]
[Mon Mar 02 07:37:47.639532 2026] [:error] [pid 28794:tid 28839] [client 20.220.232.240:25542] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zxin.php"] [unique_id "aaTNy6Vy2qpaelbUob0_lAAAAEM"]
[Mon Mar 02 07:37:48.059995 2026] [:error] [pid 28908:tid 28925] [client 20.220.232.240:25316] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aaTNzIqJmC8ih_lQQnCPAgAAAM8"]
[Mon Mar 02 07:37:48.471210 2026] [:error] [pid 28795:tid 28872] [client 20.220.232.240:25323] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aaTNzLROd53wZBkdI_djhwAAAIk"]
[Mon Mar 02 07:37:48.882726 2026] [:error] [pid 28795:tid 28863] [client 20.220.232.240:25292] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aaTNzLROd53wZBkdI_djiAAAAIA"]
[Mon Mar 02 07:37:49.298151 2026] [:error] [pid 31257:tid 31280] [client 20.220.232.240:25252] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aaTNzf-JFLfishX45N-aVQAAARE"]
[Mon Mar 02 07:37:49.716823 2026] [:error] [pid 31257:tid 31285] [client 20.220.232.240:25328] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "aaTNzf-JFLfishX45N-aVwAAARY"]
[Mon Mar 02 07:37:50.145176 2026] [:error] [pid 31257:tid 31287] [client 20.220.232.240:25342] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "aaTNzv-JFLfishX45N-aWgAAARg"]
[Mon Mar 02 07:37:50.562134 2026] [:error] [pid 28794:tid 28837] [client 20.220.232.240:25254] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "aaTNzqVy2qpaelbUob0_mwAAAEE"]
[Mon Mar 02 07:37:50.982869 2026] [:error] [pid 28908:tid 28921] [client 20.220.232.240:25310] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "aaTNzoqJmC8ih_lQQnCPCAAAAMs"]
[Mon Mar 02 07:37:51.400508 2026] [:error] [pid 28908:tid 28925] [client 20.220.232.240:25221] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aaTNz4qJmC8ih_lQQnCPCQAAAM8"]
[Mon Mar 02 07:37:51.818414 2026] [:error] [pid 28795:tid 28869] [client 20.220.232.240:25136] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aaTNz7ROd53wZBkdI_djjQAAAIY"]
[Mon Mar 02 07:37:52.244055 2026] [:error] [pid 28908:tid 28922] [client 20.220.232.240:25249] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aaTN0IqJmC8ih_lQQnCPCwAAAMw"]
[Mon Mar 02 07:37:52.653549 2026] [:error] [pid 28794:tid 28841] [client 20.220.232.240:25188] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aaTN0KVy2qpaelbUob0_oAAAAEU"]
[Mon Mar 02 07:37:53.066829 2026] [:error] [pid 28908:tid 28912] [client 20.220.232.240:25177] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/iko.php"] [unique_id "aaTN0YqJmC8ih_lQQnCPDgAAAMI"]
[Mon Mar 02 07:37:53.478732 2026] [:error] [pid 28794:tid 28856] [client 20.220.232.240:25331] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/iko.php"] [unique_id "aaTN0aVy2qpaelbUob0_ogAAAFQ"]
[Mon Mar 02 07:37:53.886922 2026] [:error] [pid 28795:tid 28876] [client 20.220.232.240:25155] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/iko.php"] [unique_id "aaTN0bROd53wZBkdI_djkgAAAI0"]
[Mon Mar 02 07:37:54.309467 2026] [:error] [pid 28794:tid 28859] [client 20.220.232.240:25245] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/iko.php"] [unique_id "aaTN0qVy2qpaelbUob0_pAAAAFc"]
[Mon Mar 02 07:37:54.726172 2026] [:error] [pid 28908:tid 28929] [client 20.220.232.240:25152] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmy.php"] [unique_id "aaTN0oqJmC8ih_lQQnCPFAAAANM"]
[Mon Mar 02 07:37:55.153238 2026] [:error] [pid 28795:tid 28867] [client 20.220.232.240:25290] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmy.php"] [unique_id "aaTN07ROd53wZBkdI_djlwAAAIQ"]
[Mon Mar 02 07:37:55.567771 2026] [:error] [pid 28795:tid 28870] [client 20.220.232.240:25326] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmy.php"] [unique_id "aaTN07ROd53wZBkdI_djmAAAAIc"]
[Mon Mar 02 07:37:55.983830 2026] [:error] [pid 28793:tid 28816] [client 20.220.232.240:25273] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmy.php"] [unique_id "aaTN0w2_fxBANaHo1f4tMQAAAAk"]
[Mon Mar 02 07:37:56.425433 2026] [:error] [pid 28793:tid 28813] [client 20.220.232.240:25159] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fun.php"] [unique_id "aaTN1A2_fxBANaHo1f4tMgAAAAY"]
[Mon Mar 02 07:37:56.839418 2026] [:error] [pid 28794:tid 28851] [client 20.220.232.240:25241] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fun.php"] [unique_id "aaTN1KVy2qpaelbUob0_pwAAAE8"]
[Mon Mar 02 07:37:57.343580 2026] [:error] [pid 28793:tid 28818] [client 20.220.232.240:25179] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fun.php"] [unique_id "aaTN1Q2_fxBANaHo1f4tMwAAAAs"]
[Mon Mar 02 07:37:57.753897 2026] [:error] [pid 28794:tid 28837] [client 20.220.232.240:25306] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fun.php"] [unique_id "aaTN1aVy2qpaelbUob0_qAAAAEE"]
[Mon Mar 02 07:37:58.163315 2026] [:error] [pid 28794:tid 28849] [client 20.220.232.240:25158] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/end.php"] [unique_id "aaTN1qVy2qpaelbUob0_qgAAAE0"]
[Mon Mar 02 07:37:58.577303 2026] [:error] [pid 28793:tid 28809] [client 20.220.232.240:25206] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/end.php"] [unique_id "aaTN1g2_fxBANaHo1f4tNgAAAAI"]
[Mon Mar 02 07:37:58.990068 2026] [:error] [pid 28793:tid 28814] [client 20.220.232.240:25271] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/end.php"] [unique_id "aaTN1g2_fxBANaHo1f4tOAAAAAc"]
[Mon Mar 02 07:37:59.405884 2026] [:error] [pid 28795:tid 28881] [client 20.220.232.240:25230] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/end.php"] [unique_id "aaTN17ROd53wZBkdI_djrQAAAJI"]
[Mon Mar 02 07:37:59.820927 2026] [:error] [pid 28908:tid 28932] [client 20.220.232.240:25339] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "aaTN14qJmC8ih_lQQnCPFwAAANY"]
[Mon Mar 02 07:38:00.236290 2026] [:error] [pid 28793:tid 28828] [client 20.220.232.240:25274] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "aaTN2A2_fxBANaHo1f4tOgAAABU"]
[Mon Mar 02 07:38:00.654695 2026] [:error] [pid 28908:tid 28930] [client 20.220.232.240:25218] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "aaTN2IqJmC8ih_lQQnCPHAAAANQ"]
[Mon Mar 02 07:38:01.071095 2026] [:error] [pid 28908:tid 28921] [client 20.220.232.240:25194] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "aaTN2YqJmC8ih_lQQnCPHwAAAMs"]
[Mon Mar 02 07:38:01.492102 2026] [:error] [pid 28908:tid 28933] [client 20.220.232.240:25208] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/scx.php7"] [unique_id "aaTN2YqJmC8ih_lQQnCPIgAAANc"]
[Mon Mar 02 07:38:01.915858 2026] [:error] [pid 28908:tid 28919] [client 20.220.232.240:25182] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/scx.php7"] [unique_id "aaTN2YqJmC8ih_lQQnCPJAAAAMk"]
[Mon Mar 02 07:38:02.335829 2026] [:error] [pid 28908:tid 28917] [client 20.220.232.240:25385] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/scx.php7"] [unique_id "aaTN2oqJmC8ih_lQQnCPJwAAAMc"]
[Mon Mar 02 07:38:02.752051 2026] [:error] [pid 28795:tid 28868] [client 20.220.232.240:25128] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/scx.php7"] [unique_id "aaTN2rROd53wZBkdI_djvQAAAIU"]
[Mon Mar 02 07:38:03.175547 2026] [:error] [pid 28794:tid 28846] [client 20.220.232.240:25125] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/error1.php"] [unique_id "aaTN26Vy2qpaelbUob0_rwAAAEo"]
[Mon Mar 02 07:38:03.596608 2026] [:error] [pid 28795:tid 28880] [client 20.220.232.240:25160] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/error1.php"] [unique_id "aaTN27ROd53wZBkdI_djwgAAAJE"]
[Mon Mar 02 07:38:04.011230 2026] [:error] [pid 28908:tid 28924] [client 20.220.232.240:25248] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/error1.php"] [unique_id "aaTN3IqJmC8ih_lQQnCPLgAAAM4"]
[Mon Mar 02 07:38:04.428513 2026] [:error] [pid 28795:tid 28882] [client 20.220.232.240:25269] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/error1.php"] [unique_id "aaTN3LROd53wZBkdI_djxAAAAJM"]
[Mon Mar 02 07:38:04.843464 2026] [:error] [pid 28795:tid 28887] [client 20.220.232.240:25228] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/thui.php"] [unique_id "aaTN3LROd53wZBkdI_djxwAAAJg"]
[Mon Mar 02 07:38:05.254039 2026] [:error] [pid 28795:tid 28870] [client 20.220.232.240:25200] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/thui.php"] [unique_id "aaTN3bROd53wZBkdI_djyQAAAIc"]
[Mon Mar 02 07:38:05.666614 2026] [:error] [pid 28795:tid 28864] [client 20.220.232.240:25164] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/thui.php"] [unique_id "aaTN3bROd53wZBkdI_djzAAAAIE"]
[Mon Mar 02 07:38:06.083073 2026] [:error] [pid 28795:tid 28880] [client 20.220.232.240:25275] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/thui.php"] [unique_id "aaTN3rROd53wZBkdI_dj0AAAAJE"]
[Mon Mar 02 07:38:06.496987 2026] [:error] [pid 28795:tid 28874] [client 20.220.232.240:25261] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "aaTN3rROd53wZBkdI_dj0gAAAIs"]
[Mon Mar 02 07:38:06.915164 2026] [:error] [pid 28908:tid 28924] [client 20.220.232.240:25232] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "aaTN3oqJmC8ih_lQQnCPOgAAAM4"]
[Mon Mar 02 07:38:07.335786 2026] [:error] [pid 28795:tid 28884] [client 20.220.232.240:25122] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "aaTN37ROd53wZBkdI_dj1AAAAJU"]
[Mon Mar 02 07:38:07.752987 2026] [:error] [pid 31257:tid 31275] [client 20.220.232.240:25175] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "aaTN3_-JFLfishX45N-aaAAAAQw"]
[Mon Mar 02 07:38:08.175305 2026] [:error] [pid 31257:tid 31278] [client 20.220.232.240:25168] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/sc.php"] [unique_id "aaTN4P-JFLfishX45N-aaQAAAQ8"]
[Mon Mar 02 07:38:08.588832 2026] [:error] [pid 31257:tid 31269] [client 20.220.232.240:25211] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/sc.php"] [unique_id "aaTN4P-JFLfishX45N-abAAAAQY"]
[Mon Mar 02 07:38:14.379336 2026] [:error] [pid 28908:tid 28925] [client 20.220.232.240:25099] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/koiy.php"] [unique_id "aaTN5oqJmC8ih_lQQnCPUwAAAM8"]
[Mon Mar 02 07:38:14.816179 2026] [:error] [pid 28794:tid 28852] [client 20.220.232.240:25204] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/koiy.php"] [unique_id "aaTN5qVy2qpaelbUob0_vgAAAFA"]
[Mon Mar 02 07:38:15.230046 2026] [:error] [pid 28908:tid 28912] [client 20.220.232.240:25209] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/koiy.php"] [unique_id "aaTN54qJmC8ih_lQQnCPWQAAAMI"]
[Mon Mar 02 07:38:15.641351 2026] [:error] [pid 31257:tid 31285] [client 20.220.232.240:25192] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/koiy.php"] [unique_id "aaTN5_-JFLfishX45N-aiwAAARY"]
[Mon Mar 02 07:38:16.053085 2026] [:error] [pid 28908:tid 28924] [client 20.220.232.240:25133] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aaTN6IqJmC8ih_lQQnCPXAAAAM4"]
[Mon Mar 02 07:38:16.461528 2026] [:error] [pid 28908:tid 28934] [client 20.220.232.240:25153] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aaTN6IqJmC8ih_lQQnCPXwAAANg"]
[Mon Mar 02 07:38:16.877032 2026] [:error] [pid 31257:tid 31283] [client 20.220.232.240:25203] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aaTN6P-JFLfishX45N-akAAAARQ"]
[Mon Mar 02 07:38:17.296436 2026] [:error] [pid 28908:tid 28925] [client 20.220.232.240:25238] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aaTN6YqJmC8ih_lQQnCPYgAAAM8"]
[Mon Mar 02 07:38:17.711677 2026] [:error] [pid 28908:tid 28920] [client 20.220.232.240:25253] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plugins.php"] [unique_id "aaTN6YqJmC8ih_lQQnCPZQAAAMo"]
[Mon Mar 02 07:38:18.122645 2026] [:error] [pid 28794:tid 28840] [client 20.220.232.240:25196] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plugins.php"] [unique_id "aaTN6qVy2qpaelbUob0_xQAAAEQ"]
[Mon Mar 02 07:38:18.532711 2026] [:error] [pid 31257:tid 31282] [client 20.220.232.240:25187] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plugins.php"] [unique_id "aaTN6v-JFLfishX45N-akgAAARM"]
[Mon Mar 02 07:38:18.961833 2026] [:error] [pid 31257:tid 31276] [client 20.220.232.240:25215] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plugins.php"] [unique_id "aaTN6v-JFLfishX45N-alAAAAQ0"]
[Mon Mar 02 07:38:19.378995 2026] [:error] [pid 28908:tid 28924] [client 20.220.232.240:25331] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/raw.php"] [unique_id "aaTN64qJmC8ih_lQQnCPaQAAAM4"]
[Mon Mar 02 07:38:19.795126 2026] [:error] [pid 28794:tid 28838] [client 20.220.232.240:25169] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/raw.php"] [unique_id "aaTN66Vy2qpaelbUob0_ygAAAEI"]
[Mon Mar 02 07:38:20.213353 2026] [:error] [pid 28794:tid 28843] [client 20.220.232.240:25213] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/raw.php"] [unique_id "aaTN7KVy2qpaelbUob0_zAAAAEc"]
[Mon Mar 02 07:38:20.627709 2026] [:error] [pid 28794:tid 28858] [client 20.220.232.240:25244] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/raw.php"] [unique_id "aaTN7KVy2qpaelbUob0_zgAAAFY"]
[Mon Mar 02 07:38:21.042823 2026] [:error] [pid 31257:tid 31273] [client 20.220.232.240:25263] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "aaTN7f-JFLfishX45N-amgAAAQo"]
[Mon Mar 02 07:38:21.455898 2026] [:error] [pid 28908:tid 28912] [client 20.220.232.240:25272] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "aaTN7YqJmC8ih_lQQnCPcQAAAMI"]
[Mon Mar 02 07:38:21.864618 2026] [:error] [pid 28795:tid 28883] [client 20.220.232.240:25173] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "aaTN7bROd53wZBkdI_dj3gAAAJQ"]
[Mon Mar 02 07:38:22.309175 2026] [:error] [pid 28908:tid 28925] [client 20.220.232.240:25110] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "aaTN7oqJmC8ih_lQQnCPdwAAAM8"]
[Mon Mar 02 07:38:22.719024 2026] [:error] [pid 28795:tid 28865] [client 20.220.232.240:25121] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rtx.php"] [unique_id "aaTN7rROd53wZBkdI_dj4AAAAII"]
[Mon Mar 02 07:38:23.132535 2026] [:error] [pid 28908:tid 28931] [client 20.220.232.240:25260] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rtx.php"] [unique_id "aaTN74qJmC8ih_lQQnCPewAAANU"]
[Mon Mar 02 07:38:23.554369 2026] [:error] [pid 28908:tid 28925] [client 20.220.232.240:25172] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rtx.php"] [unique_id "aaTN74qJmC8ih_lQQnCPfgAAAM8"]
[Mon Mar 02 07:38:23.973493 2026] [:error] [pid 28908:tid 28919] [client 20.220.232.240:25050] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rtx.php"] [unique_id "aaTN74qJmC8ih_lQQnCPgAAAAMk"]
[Mon Mar 02 07:38:24.388539 2026] [:error] [pid 28908:tid 28921] [client 20.220.232.240:25205] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "aaTN8IqJmC8ih_lQQnCPhAAAAMs"]
[Mon Mar 02 07:38:24.808276 2026] [:error] [pid 31257:tid 31263] [client 20.220.232.240:25210] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "aaTN8P-JFLfishX45N-apgAAAQA"]
[Mon Mar 02 07:38:25.229115 2026] [:error] [pid 31257:tid 31274] [client 20.220.232.240:25038] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "aaTN8f-JFLfishX45N-aqQAAAQs"]
[Mon Mar 02 07:38:25.645787 2026] [:error] [pid 28908:tid 28915] [client 20.220.232.240:25195] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "aaTN8YqJmC8ih_lQQnCPiQAAAMU"]
[Mon Mar 02 07:38:26.056873 2026] [:error] [pid 28908:tid 28912] [client 20.220.232.240:25402] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "aaTN8oqJmC8ih_lQQnCPigAAAMI"]
[Mon Mar 02 07:38:26.470212 2026] [:error] [pid 31257:tid 31269] [client 20.220.232.240:25027] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "aaTN8v-JFLfishX45N-arwAAAQY"]
[Mon Mar 02 07:38:26.891587 2026] [:error] [pid 31257:tid 31277] [client 20.220.232.240:25148] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "aaTN8v-JFLfishX45N-asgAAAQ4"]
[Mon Mar 02 07:38:27.310985 2026] [:error] [pid 28795:tid 28882] [client 20.220.232.240:25118] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "aaTN87ROd53wZBkdI_dj5QAAAJM"]
[Mon Mar 02 07:38:27.728731 2026] [:error] [pid 31257:tid 31285] [client 20.220.232.240:25212] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/0.php"] [unique_id "aaTN8_-JFLfishX45N-atQAAARY"]
[Mon Mar 02 07:38:28.143069 2026] [:error] [pid 28908:tid 28934] [client 20.220.232.240:25184] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/0.php"] [unique_id "aaTN9IqJmC8ih_lQQnCPjwAAANg"]
[Mon Mar 02 07:38:28.557271 2026] [:error] [pid 31257:tid 31279] [client 20.220.232.240:25042] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/0.php"] [unique_id "aaTN9P-JFLfishX45N-augAAARA"]
[Mon Mar 02 07:38:28.977145 2026] [:error] [pid 28908:tid 28925] [client 20.220.232.240:25181] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/0.php"] [unique_id "aaTN9IqJmC8ih_lQQnCPkQAAAM8"]
[Mon Mar 02 07:38:29.390555 2026] [:error] [pid 28908:tid 28916] [client 20.220.232.240:25102] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/moon.php"] [unique_id "aaTN9YqJmC8ih_lQQnCPkwAAAMY"]
[Mon Mar 02 07:38:29.803838 2026] [:error] [pid 28908:tid 28930] [client 20.220.232.240:25129] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/moon.php"] [unique_id "aaTN9YqJmC8ih_lQQnCPmAAAANQ"]
[Mon Mar 02 07:38:30.223476 2026] [:error] [pid 28908:tid 28934] [client 20.220.232.240:25220] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/moon.php"] [unique_id "aaTN9oqJmC8ih_lQQnCPmQAAANg"]
[Mon Mar 02 07:38:30.640554 2026] [:error] [pid 28908:tid 28929] [client 20.220.232.240:25259] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/moon.php"] [unique_id "aaTN9oqJmC8ih_lQQnCPngAAANM"]
[Mon Mar 02 07:38:31.072240 2026] [:error] [pid 28908:tid 28928] [client 20.220.232.240:25139] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aaTN94qJmC8ih_lQQnCPpQAAANI"]
[Mon Mar 02 07:38:31.502742 2026] [:error] [pid 28908:tid 28929] [client 20.220.232.240:25058] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aaTN94qJmC8ih_lQQnCPqwAAANM"]
[Mon Mar 02 07:38:31.917110 2026] [:error] [pid 28908:tid 28919] [client 20.220.232.240:25269] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aaTN94qJmC8ih_lQQnCPsQAAAMk"]
[Mon Mar 02 07:38:32.348963 2026] [:error] [pid 28908:tid 28916] [client 20.220.232.240:25094] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aaTN-IqJmC8ih_lQQnCPtgAAAMY"]
[Mon Mar 02 07:38:32.761041 2026] [:error] [pid 31257:tid 31271] [client 20.220.232.240:25237] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gec.php"] [unique_id "aaTN-P-JFLfishX45N-awwAAAQg"]
[Mon Mar 02 07:38:33.174517 2026] [:error] [pid 28794:tid 28844] [client 20.220.232.240:25452] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gec.php"] [unique_id "aaTN-aVy2qpaelbUob0_0wAAAEg"]
[Mon Mar 02 07:38:33.607926 2026] [:error] [pid 28908:tid 28922] [client 20.220.232.240:25201] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gec.php"] [unique_id "aaTN-YqJmC8ih_lQQnCPvgAAAMw"]
[Mon Mar 02 07:38:34.017405 2026] [:error] [pid 28795:tid 28872] [client 20.220.232.240:25197] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gec.php"] [unique_id "aaTN-rROd53wZBkdI_dj7QAAAIk"]
[Mon Mar 02 07:38:34.425720 2026] [:error] [pid 28795:tid 28883] [client 20.220.232.240:25174] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sxdfrt.php"] [unique_id "aaTN-rROd53wZBkdI_dj7wAAAJQ"]
[Mon Mar 02 07:38:34.836495 2026] [:error] [pid 28795:tid 28865] [client 20.220.232.240:25112] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sxdfrt.php"] [unique_id "aaTN-rROd53wZBkdI_dj8QAAAII"]
[Mon Mar 02 07:38:35.256118 2026] [:error] [pid 28908:tid 28918] [client 20.220.232.240:25089] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sxdfrt.php"] [unique_id "aaTN-4qJmC8ih_lQQnCPxAAAAMg"]
[Mon Mar 02 07:38:35.669108 2026] [:error] [pid 28908:tid 28913] [client 20.220.232.240:25246] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sxdfrt.php"] [unique_id "aaTN-4qJmC8ih_lQQnCPxwAAAMM"]
[Mon Mar 02 07:38:36.084189 2026] [:error] [pid 28908:tid 28922] [client 20.220.232.240:25053] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aaTN_IqJmC8ih_lQQnCPyQAAAMw"]
[Mon Mar 02 07:38:36.494912 2026] [:error] [pid 28908:tid 28910] [client 20.220.232.240:25141] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aaTN_IqJmC8ih_lQQnCPzgAAAMA"]
[Mon Mar 02 07:38:36.906533 2026] [:error] [pid 28908:tid 28919] [client 20.220.232.240:25033] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aaTN_IqJmC8ih_lQQnCP0QAAAMk"]
[Mon Mar 02 07:38:37.320159 2026] [:error] [pid 28793:tid 28809] [client 20.220.232.240:25167] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aaTN_Q2_fxBANaHo1f4tRwAAAAI"]
[Mon Mar 02 07:38:37.747307 2026] [:error] [pid 28908:tid 28927] [client 20.220.232.240:25115] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aaTN_YqJmC8ih_lQQnCP1gAAANE"]
[Mon Mar 02 07:38:38.172148 2026] [:error] [pid 28908:tid 28915] [client 20.220.232.240:25117] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aaTN_oqJmC8ih_lQQnCP2gAAAMU"]
[Mon Mar 02 07:38:38.590220 2026] [:error] [pid 28908:tid 28919] [client 20.220.232.240:25320] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aaTN_oqJmC8ih_lQQnCP3QAAAMk"]
[Mon Mar 02 07:38:38.999449 2026] [:error] [pid 28908:tid 28932] [client 20.220.232.240:25198] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aaTN_oqJmC8ih_lQQnCP3wAAANY"]
[Mon Mar 02 07:38:39.421191 2026] [:error] [pid 31257:tid 31272] [client 20.220.232.240:25171] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ocxla.php"] [unique_id "aaTN__-JFLfishX45N-azAAAAQk"]
[Mon Mar 02 07:38:39.835694 2026] [:error] [pid 28795:tid 28881] [client 20.220.232.240:25138] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ocxla.php"] [unique_id "aaTN_7ROd53wZBkdI_dj9gAAAJI"]
[Mon Mar 02 07:38:40.245065 2026] [:error] [pid 28795:tid 28876] [client 20.220.232.240:25322] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ocxla.php"] [unique_id "aaTOALROd53wZBkdI_dj-AAAAI0"]
[Mon Mar 02 07:38:40.663519 2026] [:error] [pid 28793:tid 28818] [client 20.220.232.240:25114] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ocxla.php"] [unique_id "aaTOAA2_fxBANaHo1f4tSAAAAAs"]
[Mon Mar 02 07:38:41.100694 2026] [:error] [pid 28795:tid 28872] [client 20.220.232.240:25316] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/god.php"] [unique_id "aaTOAbROd53wZBkdI_dj-QAAAIk"]
[Mon Mar 02 07:38:41.522042 2026] [:error] [pid 28793:tid 28820] [client 20.220.232.240:25161] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/god.php"] [unique_id "aaTOAQ2_fxBANaHo1f4tSgAAAA0"]
[Mon Mar 02 07:38:41.945989 2026] [:error] [pid 28795:tid 28870] [client 20.220.232.240:25250] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/god.php"] [unique_id "aaTOAbROd53wZBkdI_dj_QAAAIc"]
[Mon Mar 02 07:38:42.365760 2026] [:error] [pid 28793:tid 28825] [client 20.220.232.240:25090] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/god.php"] [unique_id "aaTOAg2_fxBANaHo1f4tTgAAABI"]
[Mon Mar 02 07:38:42.814383 2026] [:error] [pid 31257:tid 31263] [client 20.220.232.240:25176] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aaTOAv-JFLfishX45N-a0wAAAQA"]
[Mon Mar 02 07:38:43.228836 2026] [:error] [pid 31257:tid 31265] [client 20.220.232.240:25116] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aaTOA_-JFLfishX45N-a1QAAAQI"]
[Mon Mar 02 07:38:43.654296 2026] [:error] [pid 28795:tid 28871] [client 20.220.232.240:25203] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aaTOA7ROd53wZBkdI_dkAAAAAIg"]
[Mon Mar 02 07:38:44.068351 2026] [:error] [pid 31257:tid 31285] [client 20.220.232.240:24998] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aaTOBP-JFLfishX45N-a2wAAARY"]
[Mon Mar 02 07:38:44.476224 2026] [:error] [pid 31257:tid 31270] [client 20.220.232.240:25034] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zz.php"] [unique_id "aaTOBP-JFLfishX45N-a3AAAAQc"]
[Mon Mar 02 07:38:44.888085 2026] [:error] [pid 31257:tid 31286] [client 20.220.232.240:24969] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zz.php"] [unique_id "aaTOBP-JFLfishX45N-a3gAAARc"]
[Mon Mar 02 07:38:45.298221 2026] [:error] [pid 31257:tid 31274] [client 20.220.232.240:25207] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zz.php"] [unique_id "aaTOBf-JFLfishX45N-a4AAAAQs"]
[Mon Mar 02 07:38:45.709195 2026] [:error] [pid 28908:tid 28934] [client 20.220.232.240:25096] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zz.php"] [unique_id "aaTOBYqJmC8ih_lQQnCP6QAAANg"]
[Mon Mar 02 07:38:46.117601 2026] [:error] [pid 31257:tid 31263] [client 20.220.232.240:25098] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aaTOBv-JFLfishX45N-a4gAAAQA"]
[Mon Mar 02 07:38:46.526700 2026] [:error] [pid 31257:tid 31269] [client 20.220.232.240:25026] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aaTOBv-JFLfishX45N-a4wAAAQY"]
[Mon Mar 02 07:38:46.941839 2026] [:error] [pid 28908:tid 28927] [client 20.220.232.240:24990] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aaTOBoqJmC8ih_lQQnCP7wAAANE"]
[Mon Mar 02 07:38:47.360381 2026] [:error] [pid 28908:tid 28915] [client 20.220.232.240:25131] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aaTOB4qJmC8ih_lQQnCP8wAAAMU"]
[Mon Mar 02 07:38:47.772976 2026] [:error] [pid 28908:tid 28934] [client 20.220.232.240:25092] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sdsa.php"] [unique_id "aaTOB4qJmC8ih_lQQnCP9gAAANg"]
[Mon Mar 02 07:38:48.194186 2026] [:error] [pid 31257:tid 31265] [client 20.220.232.240:25147] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sdsa.php"] [unique_id "aaTOCP-JFLfishX45N-a5QAAAQI"]
[Mon Mar 02 07:38:48.621340 2026] [:error] [pid 28793:tid 28807] [client 20.220.232.240:25214] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sdsa.php"] [unique_id "aaTOCA2_fxBANaHo1f4tVgAAAAA"]
[Mon Mar 02 07:38:49.032174 2026] [:error] [pid 31257:tid 31270] [client 20.220.232.240:25031] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sdsa.php"] [unique_id "aaTOCf-JFLfishX45N-a6gAAAQc"]
[Mon Mar 02 07:38:49.441624 2026] [:error] [pid 31257:tid 31287] [client 20.220.232.240:25091] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aaTOCf-JFLfishX45N-a7AAAARg"]
[Mon Mar 02 07:38:49.882915 2026] [:error] [pid 28793:tid 28826] [client 20.220.232.240:25111] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aaTOCQ2_fxBANaHo1f4tWQAAABM"]
[Mon Mar 02 07:38:50.299802 2026] [:error] [pid 31257:tid 31281] [client 20.220.232.240:25109] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aaTOCv-JFLfishX45N-a7wAAARI"]
[Mon Mar 02 07:38:50.719595 2026] [:error] [pid 31257:tid 31280] [client 20.220.232.240:25146] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aaTOCv-JFLfishX45N-a8QAAARE"]
[Mon Mar 02 07:38:51.135932 2026] [:error] [pid 31257:tid 31264] [client 20.220.232.240:25190] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-conflg.php"] [unique_id "aaTOC_-JFLfishX45N-a9AAAAQE"]
[Mon Mar 02 07:38:51.570238 2026] [:error] [pid 31257:tid 31270] [client 20.220.232.240:25103] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-conflg.php"] [unique_id "aaTOC_-JFLfishX45N-a-QAAAQc"]
[Mon Mar 02 07:38:51.989152 2026] [:error] [pid 31257:tid 31286] [client 20.220.232.240:25180] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-conflg.php"] [unique_id "aaTOC_-JFLfishX45N-a-wAAARc"]
[Mon Mar 02 07:38:52.403819 2026] [:error] [pid 31257:tid 31278] [client 20.220.232.240:25185] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-conflg.php"] [unique_id "aaTODP-JFLfishX45N-a_QAAAQ8"]
[Mon Mar 02 07:38:52.822347 2026] [:error] [pid 28795:tid 28880] [client 20.220.232.240:25056] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/un.php"] [unique_id "aaTODLROd53wZBkdI_dkCwAAAJE"]
[Mon Mar 02 07:38:53.238009 2026] [:error] [pid 28795:tid 28877] [client 20.220.232.240:25189] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/un.php"] [unique_id "aaTODbROd53wZBkdI_dkDgAAAI4"]
[Mon Mar 02 07:38:53.647558 2026] [:error] [pid 28794:tid 28848] [client 20.220.232.240:25036] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/un.php"] [unique_id "aaTODaVy2qpaelbUob0_4QAAAEw"]
[Mon Mar 02 07:38:54.061334 2026] [:error] [pid 28795:tid 28887] [client 20.220.232.240:25154] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/un.php"] [unique_id "aaTODrROd53wZBkdI_dkEgAAAJg"]
[Mon Mar 02 07:38:54.473893 2026] [:error] [pid 31257:tid 31264] [client 20.220.232.240:25143] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/100.kb.php"] [unique_id "aaTODv-JFLfishX45N-bBAAAAQE"]
[Mon Mar 02 07:38:54.892269 2026] [:error] [pid 28794:tid 28858] [client 20.220.232.240:25212] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/100.kb.php"] [unique_id "aaTODqVy2qpaelbUob0_5AAAAFY"]
[Mon Mar 02 07:38:55.307407 2026] [:error] [pid 31257:tid 31285] [client 20.220.232.240:25107] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/100.kb.php"] [unique_id "aaTOD_-JFLfishX45N-bBwAAARY"]
[Mon Mar 02 07:38:55.721785 2026] [:error] [pid 31257:tid 31287] [client 20.220.232.240:25070] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/100.kb.php"] [unique_id "aaTOD_-JFLfishX45N-bCQAAARg"]
[Mon Mar 02 07:38:56.132610 2026] [:error] [pid 31257:tid 31282] [client 20.220.232.240:25100] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aaTOEP-JFLfishX45N-bDQAAARM"]
[Mon Mar 02 07:38:56.542157 2026] [:error] [pid 28795:tid 28883] [client 20.220.232.240:25126] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aaTOELROd53wZBkdI_dkGQAAAJQ"]
[Mon Mar 02 07:38:56.955994 2026] [:error] [pid 28908:tid 28916] [client 20.220.232.240:25132] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aaTOEIqJmC8ih_lQQnCP_gAAAMY"]
[Mon Mar 02 07:38:57.374693 2026] [:error] [pid 28908:tid 28933] [client 20.220.232.240:25247] [client 20.220.232.240] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aaTOEYqJmC8ih_lQQnCQAgAAANc"]
[Mon Mar 02 09:10:26.814054 2026] [:error] [pid 23872:tid 23892] [client 20.41.98.49:4951] [client 20.41.98.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaTjgkzkQFuA2qBk8UNPfQAAAZE"]
[Mon Mar 02 09:10:27.366856 2026] [:error] [pid 23872:tid 23887] [client 20.41.98.49:4950] [client 20.41.98.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaTjg0zkQFuA2qBk8UNPhgAAAYw"]
[Mon Mar 02 09:10:27.917758 2026] [:error] [pid 23872:tid 23885] [client 20.41.98.49:4947] [client 20.41.98.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaTjg0zkQFuA2qBk8UNPjAAAAYo"]
[Mon Mar 02 09:10:28.485128 2026] [:error] [pid 23872:tid 23897] [client 20.41.98.49:6793] [client 20.41.98.49] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaTjhEzkQFuA2qBk8UNPlQAAAZY"]
[Mon Mar 02 09:18:34.599902 2026] [:error] [pid 28794:tid 28844] [client 20.89.52.173:6348] [client 20.89.52.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaTlaqVy2qpaelbUob1hxwAAAEg"]
[Mon Mar 02 09:18:35.054680 2026] [:error] [pid 21575:tid 21591] [client 20.89.52.173:7023] [client 20.89.52.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaTlayrocdArcJqFfImGbgAAAUw"]
[Mon Mar 02 09:18:35.509509 2026] [:error] [pid 23872:tid 23889] [client 20.89.52.173:6990] [client 20.89.52.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaTla0zkQFuA2qBk8UNazQAAAY4"]
[Mon Mar 02 09:18:35.992354 2026] [:error] [pid 23872:tid 23875] [client 20.89.52.173:6359] [client 20.89.52.173] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaTla0zkQFuA2qBk8UNa0gAAAYA"]
[Mon Mar 02 09:35:03.280906 2026] [autoindex:error] [pid 28908:tid 28912] [client 20.205.226.191:11370] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive
[Mon Mar 02 09:35:04.542121 2026] [:error] [pid 28908:tid 28931] [client 20.205.226.191:11370] [client 20.205.226.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aaTpSIqJmC8ih_lQQnDtrwAAANU"]
[Mon Mar 02 09:35:04.893592 2026] [:error] [pid 21575:tid 21586] [client 20.205.226.191:6244] [client 20.205.226.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aaTpSCrocdArcJqFfImRagAAAUc"]
[Mon Mar 02 09:35:05.244980 2026] [:error] [pid 28908:tid 28921] [client 20.205.226.191:9777] [client 20.205.226.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aaTpSYqJmC8ih_lQQnDtsAAAAMs"]
[Mon Mar 02 09:35:05.600583 2026] [:error] [pid 21575:tid 21588] [client 20.205.226.191:6340] [client 20.205.226.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aaTpSSrocdArcJqFfImRbQAAAUk"]
[Mon Mar 02 11:58:12.117764 2026] [:error] [pid 23872:tid 23888] [client 20.104.206.150:31701] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-configss.php"] [unique_id "aaUK1EzkQFuA2qBk8UMDMgAAAY0"]
[Mon Mar 02 11:58:12.545333 2026] [:error] [pid 21575:tid 21597] [client 20.104.206.150:31709] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-configss.php"] [unique_id "aaUK1CrocdArcJqFfIkGbAAAAVI"]
[Mon Mar 02 11:58:12.962780 2026] [:error] [pid 23872:tid 23881] [client 20.104.206.150:31697] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-configss.php"] [unique_id "aaUK1EzkQFuA2qBk8UMDNgAAAYY"]
[Mon Mar 02 11:58:13.390469 2026] [:error] [pid 23872:tid 23895] [client 20.104.206.150:31680] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-configss.php"] [unique_id "aaUK1UzkQFuA2qBk8UMDOAAAAZQ"]
[Mon Mar 02 11:58:13.804468 2026] [:error] [pid 21575:tid 21600] [client 20.104.206.150:31692] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yanz.php"] [unique_id "aaUK1SrocdArcJqFfIkGcgAAAVU"]
[Mon Mar 02 11:58:14.223706 2026] [:error] [pid 21575:tid 21581] [client 20.104.206.150:31725] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yanz.php"] [unique_id "aaUK1irocdArcJqFfIkGeAAAAUI"]
[Mon Mar 02 11:58:14.648177 2026] [:error] [pid 28908:tid 28923] [client 20.104.206.150:31704] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yanz.php"] [unique_id "aaUK1oqJmC8ih_lQQnBH-QAAAM0"]
[Mon Mar 02 11:58:15.065669 2026] [:error] [pid 21575:tid 21596] [client 20.104.206.150:31619] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yanz.php"] [unique_id "aaUK1yrocdArcJqFfIkGggAAAVE"]
[Mon Mar 02 11:58:15.485971 2026] [:error] [pid 21575:tid 21603] [client 20.104.206.150:31628] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file.phpa"] [unique_id "aaUK1yrocdArcJqFfIkGhQAAAVg"]
[Mon Mar 02 11:58:15.901642 2026] [:error] [pid 14466:tid 14481] [client 20.104.206.150:31631] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file.phpa"] [unique_id "aaUK1_8w-ahEIiUSqM5PBwAAAc0"]
[Mon Mar 02 11:58:16.312211 2026] [:error] [pid 28908:tid 28934] [client 20.104.206.150:31681] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file.phpa"] [unique_id "aaUK2IqJmC8ih_lQQnBIAAAAANg"]
[Mon Mar 02 11:58:16.735035 2026] [:error] [pid 21575:tid 21585] [client 20.104.206.150:31727] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file.phpa"] [unique_id "aaUK2CrocdArcJqFfIkGiAAAAUY"]
[Mon Mar 02 11:58:17.152732 2026] [:error] [pid 28908:tid 28926] [client 20.104.206.150:31742] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/defaults.php"] [unique_id "aaUK2YqJmC8ih_lQQnBIAwAAANA"]
[Mon Mar 02 11:58:17.578049 2026] [:error] [pid 21575:tid 21598] [client 20.104.206.150:31695] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/defaults.php"] [unique_id "aaUK2SrocdArcJqFfIkGjwAAAVM"]
[Mon Mar 02 11:58:17.997029 2026] [:error] [pid 28908:tid 28914] [client 20.104.206.150:31729] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/defaults.php"] [unique_id "aaUK2YqJmC8ih_lQQnBICQAAAMQ"]
[Mon Mar 02 11:58:18.417025 2026] [:error] [pid 28908:tid 28921] [client 20.104.206.150:31707] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/defaults.php"] [unique_id "aaUK2oqJmC8ih_lQQnBIDQAAAMs"]
[Mon Mar 02 11:58:18.839993 2026] [:error] [pid 21575:tid 21596] [client 20.104.206.150:31716] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/im.php"] [unique_id "aaUK2irocdArcJqFfIkGlgAAAVE"]
[Mon Mar 02 11:58:19.254564 2026] [:error] [pid 28908:tid 28928] [client 20.104.206.150:31739] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/im.php"] [unique_id "aaUK24qJmC8ih_lQQnBIEwAAANI"]
[Mon Mar 02 11:58:19.671288 2026] [:error] [pid 21575:tid 21590] [client 20.104.206.150:31694] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/im.php"] [unique_id "aaUK2yrocdArcJqFfIkGmwAAAUs"]
[Mon Mar 02 11:58:20.090075 2026] [:error] [pid 23872:tid 23892] [client 20.104.206.150:31698] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/im.php"] [unique_id "aaUK3EzkQFuA2qBk8UMDTQAAAZE"]
[Mon Mar 02 11:58:20.503684 2026] [:error] [pid 23872:tid 23895] [client 20.104.206.150:31623] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-comments-post.php"] [unique_id "aaUK3EzkQFuA2qBk8UMDUAAAAZQ"]
[Mon Mar 02 11:58:20.917341 2026] [:error] [pid 28794:tid 28837] [client 20.104.206.150:31719] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-comments-post.php"] [unique_id "aaUK3KVy2qpaelbUob2BEgAAAEE"]
[Mon Mar 02 11:58:21.330287 2026] [:error] [pid 23872:tid 23896] [client 20.104.206.150:31714] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-comments-post.php"] [unique_id "aaUK3UzkQFuA2qBk8UMDVAAAAZU"]
[Mon Mar 02 11:58:21.752013 2026] [:error] [pid 14466:tid 14476] [client 20.104.206.150:31734] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-comments-post.php"] [unique_id "aaUK3f8w-ahEIiUSqM5PDgAAAcg"]
[Mon Mar 02 11:58:22.182485 2026] [:error] [pid 21575:tid 21595] [client 20.104.206.150:31720] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cache-compat.php"] [unique_id "aaUK3irocdArcJqFfIkGtwAAAVA"]
[Mon Mar 02 11:58:22.612489 2026] [:error] [pid 23872:tid 23885] [client 20.104.206.150:31621] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cache-compat.php"] [unique_id "aaUK3kzkQFuA2qBk8UMDVwAAAYo"]
[Mon Mar 02 11:58:23.040472 2026] [:error] [pid 23872:tid 23875] [client 20.104.206.150:31616] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cache-compat.php"] [unique_id "aaUK30zkQFuA2qBk8UMDWQAAAYA"]
[Mon Mar 02 11:58:23.466037 2026] [:error] [pid 28794:tid 28836] [client 20.104.206.150:31740] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cache-compat.php"] [unique_id "aaUK36Vy2qpaelbUob2BEwAAAEA"]
[Mon Mar 02 11:58:23.892523 2026] [:error] [pid 28793:tid 28825] [client 20.104.206.150:31629] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fw.php"] [unique_id "aaUK3w2_fxBANaHo1f5fugAAABI"]
[Mon Mar 02 11:58:24.320482 2026] [:error] [pid 28908:tid 28925] [client 20.104.206.150:31617] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fw.php"] [unique_id "aaUK4IqJmC8ih_lQQnBIJQAAAM8"]
[Mon Mar 02 11:58:24.743719 2026] [:error] [pid 28908:tid 28910] [client 20.104.206.150:31712] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fw.php"] [unique_id "aaUK4IqJmC8ih_lQQnBILQAAAMA"]
[Mon Mar 02 11:58:25.161405 2026] [:error] [pid 28795:tid 28886] [client 20.104.206.150:31636] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fw.php"] [unique_id "aaUK4bROd53wZBkdI_e8wgAAAJc"]
[Mon Mar 02 11:58:25.573210 2026] [:error] [pid 21575:tid 21593] [client 20.104.206.150:31741] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/berlin.php"] [unique_id "aaUK4SrocdArcJqFfIkG0wAAAU4"]
[Mon Mar 02 11:58:25.981119 2026] [:error] [pid 23872:tid 23889] [client 20.104.206.150:31690] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/berlin.php"] [unique_id "aaUK4UzkQFuA2qBk8UMDaAAAAY4"]
[Mon Mar 02 11:58:26.404252 2026] [:error] [pid 28908:tid 28925] [client 20.104.206.150:31730] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/berlin.php"] [unique_id "aaUK4oqJmC8ih_lQQnBIOwAAAM8"]
[Mon Mar 02 11:58:26.830050 2026] [:error] [pid 23872:tid 23876] [client 20.104.206.150:31561] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/berlin.php"] [unique_id "aaUK4kzkQFuA2qBk8UMDawAAAYE"]
[Mon Mar 02 11:58:27.262949 2026] [:error] [pid 23872:tid 23893] [client 20.104.206.150:31743] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abe.php"] [unique_id "aaUK40zkQFuA2qBk8UMDbQAAAZI"]
[Mon Mar 02 11:58:27.689851 2026] [:error] [pid 23872:tid 23898] [client 20.104.206.150:31733] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abe.php"] [unique_id "aaUK40zkQFuA2qBk8UMDcQAAAZc"]
[Mon Mar 02 11:58:28.109874 2026] [:error] [pid 28908:tid 28924] [client 20.104.206.150:31646] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abe.php"] [unique_id "aaUK5IqJmC8ih_lQQnBIQwAAAM4"]
[Mon Mar 02 11:58:28.529781 2026] [:error] [pid 28908:tid 28912] [client 20.104.206.150:31626] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abe.php"] [unique_id "aaUK5IqJmC8ih_lQQnBISgAAAMI"]
[Mon Mar 02 11:58:28.950559 2026] [:error] [pid 28908:tid 28927] [client 20.104.206.150:31652] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/otuz1.php"] [unique_id "aaUK5IqJmC8ih_lQQnBIUwAAANE"]
[Mon Mar 02 11:58:29.370991 2026] [:error] [pid 28908:tid 28916] [client 20.104.206.150:31670] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/otuz1.php"] [unique_id "aaUK5YqJmC8ih_lQQnBIVwAAAMY"]
[Mon Mar 02 11:58:29.797638 2026] [:error] [pid 28908:tid 28912] [client 20.104.206.150:31644] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/otuz1.php"] [unique_id "aaUK5YqJmC8ih_lQQnBIYAAAAMI"]
[Mon Mar 02 11:58:30.217598 2026] [:error] [pid 28908:tid 28927] [client 20.104.206.150:31715] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/otuz1.php"] [unique_id "aaUK5oqJmC8ih_lQQnBIZwAAANE"]
[Mon Mar 02 11:58:30.633599 2026] [:error] [pid 28908:tid 28916] [client 20.104.206.150:31677] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-files.php"] [unique_id "aaUK5oqJmC8ih_lQQnBIbAAAAMY"]
[Mon Mar 02 11:58:31.051442 2026] [:error] [pid 28908:tid 28927] [client 20.104.206.150:31618] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-files.php"] [unique_id "aaUK54qJmC8ih_lQQnBIcwAAANE"]
[Mon Mar 02 11:58:31.472793 2026] [:error] [pid 28794:tid 28858] [client 20.104.206.150:31637] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-files.php"] [unique_id "aaUK56Vy2qpaelbUob2BFQAAAFY"]
[Mon Mar 02 11:58:31.895022 2026] [:error] [pid 21575:tid 21592] [client 20.104.206.150:31699] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-files.php"] [unique_id "aaUK5yrocdArcJqFfIkG4QAAAU0"]
[Mon Mar 02 11:58:32.312177 2026] [:error] [pid 28908:tid 28915] [client 20.104.206.150:31685] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aj.php"] [unique_id "aaUK6IqJmC8ih_lQQnBIewAAAMU"]
[Mon Mar 02 11:58:32.729861 2026] [:error] [pid 21575:tid 21601] [client 20.104.206.150:31700] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aj.php"] [unique_id "aaUK6CrocdArcJqFfIkG4wAAAVY"]
[Mon Mar 02 11:58:33.149987 2026] [:error] [pid 28793:tid 28815] [client 20.104.206.150:31735] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aj.php"] [unique_id "aaUK6Q2_fxBANaHo1f5fvAAAAAg"]
[Mon Mar 02 11:58:33.565495 2026] [:error] [pid 23872:tid 23890] [client 20.104.206.150:31632] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aj.php"] [unique_id "aaUK6UzkQFuA2qBk8UMDegAAAY8"]
[Mon Mar 02 11:58:33.981011 2026] [:error] [pid 28908:tid 28923] [client 20.104.206.150:31627] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/he.php"] [unique_id "aaUK6YqJmC8ih_lQQnBIigAAAM0"]
[Mon Mar 02 11:58:34.401791 2026] [:error] [pid 23872:tid 23891] [client 20.104.206.150:31624] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/he.php"] [unique_id "aaUK6kzkQFuA2qBk8UMDfQAAAZA"]
[Mon Mar 02 11:58:34.823932 2026] [:error] [pid 31257:tid 31287] [client 20.104.206.150:31620] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/he.php"] [unique_id "aaUK6v-JFLfishX45N9iogAAARg"]
[Mon Mar 02 11:58:35.248655 2026] [:error] [pid 28908:tid 28917] [client 20.104.206.150:31576] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/he.php"] [unique_id "aaUK64qJmC8ih_lQQnBIkQAAAMc"]
[Mon Mar 02 11:58:35.658054 2026] [:error] [pid 21575:tid 21593] [client 20.104.206.150:31688] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cache.php"] [unique_id "aaUK6yrocdArcJqFfIkG9gAAAU4"]
[Mon Mar 02 11:58:36.077325 2026] [:error] [pid 21575:tid 21599] [client 20.104.206.150:31671] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cache.php"] [unique_id "aaUK7CrocdArcJqFfIkG-gAAAVQ"]
[Mon Mar 02 11:58:36.494103 2026] [:error] [pid 28794:tid 28842] [client 20.104.206.150:31693] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cache.php"] [unique_id "aaUK7KVy2qpaelbUob2BHgAAAEY"]
[Mon Mar 02 11:58:36.914897 2026] [:error] [pid 28908:tid 28931] [client 20.104.206.150:31642] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cache.php"] [unique_id "aaUK7IqJmC8ih_lQQnBImQAAANU"]
[Mon Mar 02 11:58:37.338675 2026] [:error] [pid 28908:tid 28915] [client 20.104.206.150:31633] [client 20.104.206.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "aaUK7YqJmC8ih_lQQnBInQAAAMU"]
[Mon Mar 02 11:58:37.763491 2026] [:error] [pid 14466:tid 14468] [client 20.104.206.150:31630] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-load.php"] [unique_id "aaUK7f8w-ahEIiUSqM5PIQAAAcA"]
[Mon Mar 02 11:58:38.194448 2026] [:error] [pid 28908:tid 28933] [client 20.104.206.150:31673] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-load.php"] [unique_id "aaUK7oqJmC8ih_lQQnBIqwAAANc"]
[Mon Mar 02 11:58:38.640242 2026] [:error] [pid 28908:tid 28919] [client 20.104.206.150:31728] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-load.php"] [unique_id "aaUK7oqJmC8ih_lQQnBIsAAAAMk"]
[Mon Mar 02 11:58:39.106149 2026] [:error] [pid 28908:tid 28925] [client 20.104.206.150:31726] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-load.php"] [unique_id "aaUK74qJmC8ih_lQQnBItAAAAM8"]
[Mon Mar 02 11:58:39.536835 2026] [:error] [pid 28908:tid 28911] [client 20.104.206.150:31635] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/blog.php"] [unique_id "aaUK74qJmC8ih_lQQnBItwAAAME"]
[Mon Mar 02 11:58:39.958611 2026] [:error] [pid 23872:tid 23877] [client 20.104.206.150:31675] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/blog.php"] [unique_id "aaUK70zkQFuA2qBk8UMDjAAAAYI"]
[Mon Mar 02 11:58:40.384676 2026] [:error] [pid 23872:tid 23885] [client 20.104.206.150:31638] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/blog.php"] [unique_id "aaUK8EzkQFuA2qBk8UMDjQAAAYo"]
[Mon Mar 02 11:58:40.810926 2026] [:error] [pid 21575:tid 21588] [client 20.104.206.150:31731] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/blog.php"] [unique_id "aaUK8CrocdArcJqFfIkHDQAAAUk"]
[Mon Mar 02 11:58:41.226899 2026] [:error] [pid 21575:tid 21596] [client 20.104.206.150:31566] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alfanew.php7"] [unique_id "aaUK8SrocdArcJqFfIkHEgAAAVE"]
[Mon Mar 02 11:58:41.667009 2026] [:error] [pid 28908:tid 28926] [client 20.104.206.150:31713] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alfanew.php7"] [unique_id "aaUK8YqJmC8ih_lQQnBIxAAAANA"]
[Mon Mar 02 11:58:42.103200 2026] [:error] [pid 28908:tid 28925] [client 20.104.206.150:31648] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alfanew.php7"] [unique_id "aaUK8oqJmC8ih_lQQnBIxwAAAM8"]
[Mon Mar 02 11:58:42.539569 2026] [:error] [pid 21575:tid 21583] [client 20.104.206.150:31564] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alfanew.php7"] [unique_id "aaUK8irocdArcJqFfIkHGwAAAUQ"]
[Mon Mar 02 11:58:42.959677 2026] [:error] [pid 28908:tid 28924] [client 20.104.206.150:31647] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lufix.php"] [unique_id "aaUK8oqJmC8ih_lQQnBIzgAAAM4"]
[Mon Mar 02 11:58:43.380591 2026] [:error] [pid 21575:tid 21594] [client 20.104.206.150:31664] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lufix.php"] [unique_id "aaUK8yrocdArcJqFfIkHHQAAAU8"]
[Mon Mar 02 11:58:43.799450 2026] [:error] [pid 21575:tid 21603] [client 20.104.206.150:31643] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lufix.php"] [unique_id "aaUK8yrocdArcJqFfIkHIQAAAVg"]
[Mon Mar 02 11:58:44.216855 2026] [:error] [pid 28908:tid 28933] [client 20.104.206.150:31659] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lufix.php"] [unique_id "aaUK9IqJmC8ih_lQQnBI1QAAANc"]
[Mon Mar 02 11:58:44.629642 2026] [:error] [pid 14466:tid 14471] [client 20.104.206.150:31655] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ajax-actions.php"] [unique_id "aaUK9P8w-ahEIiUSqM5PMAAAAcM"]
[Mon Mar 02 11:58:45.044603 2026] [:error] [pid 28908:tid 28916] [client 20.104.206.150:31583] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ajax-actions.php"] [unique_id "aaUK9YqJmC8ih_lQQnBI3AAAAMY"]
[Mon Mar 02 11:58:45.460345 2026] [:error] [pid 28908:tid 28923] [client 20.104.206.150:31661] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ajax-actions.php"] [unique_id "aaUK9YqJmC8ih_lQQnBI3wAAAM0"]
[Mon Mar 02 11:58:45.872488 2026] [:error] [pid 14466:tid 14490] [client 20.104.206.150:31614] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ajax-actions.php"] [unique_id "aaUK9f8w-ahEIiUSqM5PMwAAAdY"]
[Mon Mar 02 11:58:46.280310 2026] [:error] [pid 28908:tid 28933] [client 20.104.206.150:31683] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaUK9oqJmC8ih_lQQnBI7QAAANc"]
[Mon Mar 02 11:58:46.692782 2026] [:error] [pid 28908:tid 28916] [client 20.104.206.150:31706] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaUK9oqJmC8ih_lQQnBI9gAAAMY"]
[Mon Mar 02 11:58:47.110969 2026] [:error] [pid 28908:tid 28923] [client 20.104.206.150:31625] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaUK94qJmC8ih_lQQnBI_QAAAM0"]
[Mon Mar 02 11:58:47.526124 2026] [:error] [pid 28908:tid 28926] [client 20.104.206.150:31588] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alfa-rex.php7"] [unique_id "aaUK94qJmC8ih_lQQnBJBAAAANA"]
[Mon Mar 02 11:58:47.934582 2026] [:error] [pid 28794:tid 28849] [client 20.104.206.150:31603] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cc.php"] [unique_id "aaUK96Vy2qpaelbUob2BIgAAAE0"]
[Mon Mar 02 11:58:48.348339 2026] [:error] [pid 28908:tid 28910] [client 20.104.206.150:31737] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cc.php"] [unique_id "aaUK-IqJmC8ih_lQQnBJCwAAAMA"]
[Mon Mar 02 11:58:48.770101 2026] [:error] [pid 28795:tid 28887] [client 20.104.206.150:31679] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cc.php"] [unique_id "aaUK-LROd53wZBkdI_e86wAAAJg"]
[Mon Mar 02 11:58:49.193895 2026] [:error] [pid 28908:tid 28915] [client 20.104.206.150:31554] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cc.php"] [unique_id "aaUK-YqJmC8ih_lQQnBJDgAAAMU"]
[Mon Mar 02 11:58:49.622566 2026] [:error] [pid 23872:tid 23895] [client 20.104.206.150:31587] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bypass.php"] [unique_id "aaUK-UzkQFuA2qBk8UMDnAAAAZQ"]
[Mon Mar 02 11:58:50.038437 2026] [:error] [pid 23872:tid 23884] [client 20.104.206.150:31645] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bypass.php"] [unique_id "aaUK-kzkQFuA2qBk8UMDoAAAAYk"]
[Mon Mar 02 11:58:50.458271 2026] [:error] [pid 21575:tid 21589] [client 20.104.206.150:31575] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bypass.php"] [unique_id "aaUK-irocdArcJqFfIkHMAAAAUo"]
[Mon Mar 02 11:58:50.874980 2026] [:error] [pid 23872:tid 23882] [client 20.104.206.150:31556] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bypass.php"] [unique_id "aaUK-kzkQFuA2qBk8UMDpgAAAYc"]
[Mon Mar 02 11:58:51.324349 2026] [:error] [pid 28908:tid 28910] [client 20.104.206.150:31578] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/browse.php"] [unique_id "aaUK-4qJmC8ih_lQQnBJHwAAAMA"]
[Mon Mar 02 11:58:51.754401 2026] [:error] [pid 28908:tid 28912] [client 20.104.206.150:31622] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/browse.php"] [unique_id "aaUK-4qJmC8ih_lQQnBJJQAAAMI"]
[Mon Mar 02 11:58:52.176092 2026] [:error] [pid 28795:tid 28867] [client 20.104.206.150:31568] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/browse.php"] [unique_id "aaUK_LROd53wZBkdI_e87AAAAIQ"]
[Mon Mar 02 11:58:52.600078 2026] [:error] [pid 28795:tid 28879] [client 20.104.206.150:31574] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/browse.php"] [unique_id "aaUK_LROd53wZBkdI_e87QAAAJA"]
[Mon Mar 02 11:58:53.012481 2026] [:error] [pid 28908:tid 28917] [client 20.104.206.150:31691] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/license.php"] [unique_id "aaUK_YqJmC8ih_lQQnBJMgAAAMc"]
[Mon Mar 02 11:58:53.426049 2026] [:error] [pid 23872:tid 23876] [client 20.104.206.150:31724] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/license.php"] [unique_id "aaUK_UzkQFuA2qBk8UMDrgAAAYE"]
[Mon Mar 02 11:58:53.843755 2026] [:error] [pid 21575:tid 21585] [client 20.104.206.150:31584] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/license.php"] [unique_id "aaUK_SrocdArcJqFfIkHMwAAAUY"]
[Mon Mar 02 11:58:54.262560 2026] [:error] [pid 23872:tid 23892] [client 20.104.206.150:31582] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/license.php"] [unique_id "aaUK_kzkQFuA2qBk8UMDtAAAAZE"]
[Mon Mar 02 11:58:54.686950 2026] [:error] [pid 28908:tid 28913] [client 20.104.206.150:31736] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/contact.php"] [unique_id "aaUK_oqJmC8ih_lQQnBJPQAAAMM"]
[Mon Mar 02 11:58:55.103295 2026] [:error] [pid 28908:tid 28910] [client 20.104.206.150:31598] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/contact.php"] [unique_id "aaUK_4qJmC8ih_lQQnBJQQAAAMA"]
[Mon Mar 02 11:58:55.528493 2026] [:error] [pid 28908:tid 28932] [client 20.104.206.150:31570] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/contact.php"] [unique_id "aaUK_4qJmC8ih_lQQnBJRwAAANY"]
[Mon Mar 02 11:58:55.940523 2026] [:error] [pid 28908:tid 28933] [client 20.104.206.150:31571] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/contact.php"] [unique_id "aaUK_4qJmC8ih_lQQnBJSwAAANc"]
[Mon Mar 02 11:58:56.360344 2026] [:error] [pid 23872:tid 23887] [client 20.104.206.150:31489] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/minik.php"] [unique_id "aaULAEzkQFuA2qBk8UMDugAAAYw"]
[Mon Mar 02 11:58:56.790368 2026] [:error] [pid 28908:tid 28919] [client 20.104.206.150:31676] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/minik.php"] [unique_id "aaULAIqJmC8ih_lQQnBJWgAAAMk"]
[Mon Mar 02 11:58:57.207635 2026] [:error] [pid 28908:tid 28913] [client 20.104.206.150:31612] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/minik.php"] [unique_id "aaULAYqJmC8ih_lQQnBJXQAAAMM"]
[Mon Mar 02 11:58:57.636478 2026] [:error] [pid 21575:tid 21582] [client 20.104.206.150:31634] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/minik.php"] [unique_id "aaULASrocdArcJqFfIkHPQAAAUM"]
[Mon Mar 02 11:58:58.049811 2026] [:error] [pid 28908:tid 28921] [client 20.104.206.150:31656] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/st.php"] [unique_id "aaULAoqJmC8ih_lQQnBJZgAAAMs"]
[Mon Mar 02 11:58:58.474834 2026] [:error] [pid 31257:tid 31280] [client 20.104.206.150:31610] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/st.php"] [unique_id "aaULAv-JFLfishX45N9iwQAAARE"]
[Mon Mar 02 11:58:58.898127 2026] [:error] [pid 21575:tid 21600] [client 20.104.206.150:31722] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/st.php"] [unique_id "aaULAirocdArcJqFfIkHQwAAAVU"]
[Mon Mar 02 11:58:59.313713 2026] [:error] [pid 28908:tid 28921] [client 20.104.206.150:31702] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/st.php"] [unique_id "aaULA4qJmC8ih_lQQnBJbgAAAMs"]
[Mon Mar 02 11:58:59.729677 2026] [:error] [pid 28908:tid 28931] [client 20.104.206.150:31667] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/upgrade.php"] [unique_id "aaULA4qJmC8ih_lQQnBJcQAAANU"]
[Mon Mar 02 11:59:00.152685 2026] [:error] [pid 28908:tid 28932] [client 20.104.206.150:31686] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/upgrade.php"] [unique_id "aaULBIqJmC8ih_lQQnBJdwAAANY"]
[Mon Mar 02 11:59:00.571576 2026] [:error] [pid 28908:tid 28917] [client 20.104.206.150:31738] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/upgrade.php"] [unique_id "aaULBIqJmC8ih_lQQnBJfAAAAMc"]
[Mon Mar 02 11:59:01.008578 2026] [:error] [pid 31257:tid 31265] [client 20.104.206.150:31658] [client 20.104.206.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/upgrade.php"] [unique_id "aaULBf-JFLfishX45N9iyAAAAQI"]
[Mon Mar 02 18:16:59.229249 2026] [:error] [pid 59602:tid 59668] [client 20.104.86.139:39839] [client 20.104.86.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaVjmzMtSo_Fr0lHnSYkKwAAAIM"]
[Mon Mar 02 18:17:01.723452 2026] [:error] [pid 59600:tid 59610] [client 20.104.86.139:39838] [client 20.104.86.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaVjnYQ5lE4yocV9IBf7hAAAAAE"]
[Mon Mar 02 18:17:03.524436 2026] [:error] [pid 59734:tid 59740] [client 20.104.86.139:39922] [client 20.104.86.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaVjn5eWQx7ZQG9NybH1RQAAAUQ"]
[Mon Mar 02 18:17:05.091405 2026] [:error] [pid 28847:tid 28857] [client 20.104.86.139:39927] [client 20.104.86.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaVjoZ9xbBq8VfeqVDa7YQAAAMg"]
[Mon Mar 02 20:03:20.889913 2026] [:error] [pid 28847:tid 28869] [client 20.104.86.139:12341] [client 20.104.86.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaV8iJ9xbBq8VfeqVDYUmgAAANQ"]
[Mon Mar 02 20:03:21.897122 2026] [:error] [pid 59734:tid 59736] [client 20.104.86.139:41557] [client 20.104.86.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaV8iZeWQx7ZQG9NybEVxQAAAUA"]
[Mon Mar 02 20:03:22.964176 2026] [:error] [pid 59600:tid 59618] [client 20.104.86.139:41563] [client 20.104.86.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaV8ioQ5lE4yocV9IBc5EQAAAAk"]
[Mon Mar 02 20:03:24.156432 2026] [:error] [pid 28847:tid 28873] [client 20.104.86.139:12310] [client 20.104.86.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aaV8jJ9xbBq8VfeqVDYUqQAAANg"]
[Mon Mar 02 20:22:42.286953 2026] [:error] [pid 59602:tid 59666] [client 35.197.31.204:57721] [client 35.197.31.204] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.197.31.204, incrementing ddos counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aaWBEjMtSo_Fr0lHnSZWoQAAAIE"]
[Mon Mar 02 20:22:44.489282 2026] [:error] [pid 59602:tid 59675] [client 35.197.31.204:57721] [client 35.197.31.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aaWBFDMtSo_Fr0lHnSZWtgAAAIo"]
[Mon Mar 02 20:22:45.204017 2026] [:error] [pid 28847:tid 28868] [client 35.197.31.204:61570] [client 35.197.31.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aaWBFZ9xbBq8VfeqVDYg9AAAANM"]
[Mon Mar 02 20:22:45.916081 2026] [:error] [pid 28847:tid 28860] [client 35.197.31.204:51401] [client 35.197.31.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aaWBFZ9xbBq8VfeqVDYg_AAAAMs"]
[Mon Mar 02 20:22:46.622646 2026] [:error] [pid 59600:tid 59620] [client 35.197.31.204:50501] [client 35.197.31.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aaWBFoQ5lE4yocV9IBdB6QAAAAs"]
[Mon Mar 02 20:22:47.330904 2026] [:error] [pid 28847:tid 28866] [client 35.197.31.204:54893] [client 35.197.31.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aaWBF59xbBq8VfeqVDYhCAAAANE"]
[Mon Mar 02 20:22:48.033171 2026] [:error] [pid 59600:tid 59609] [client 35.197.31.204:57028] [client 35.197.31.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aaWBGIQ5lE4yocV9IBdB8AAAAAA"]
[Mon Mar 02 20:22:48.754561 2026] [:error] [pid 59601:tid 59654] [client 35.197.31.204:53215] [client 35.197.31.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aaWBGMQ1lXfvWN0-ZQmI0wAAAFA"]
[Mon Mar 02 21:53:41.673428 2026] [:error] [pid 59701:tid 59705] [client 51.103.128.176:11367] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aaWWZeUmTDVso96U9_Lg0gAAAQE"]
[Mon Mar 02 21:53:43.725574 2026] [:error] [pid 28847:tid 28850] [client 51.103.128.176:5902] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aaWWZ59xbBq8VfeqVDZrZwAAAME"]
[Mon Mar 02 21:53:45.659901 2026] [:error] [pid 59734:tid 59740] [client 51.103.128.176:5945] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aaWWaZeWQx7ZQG9NybE0PAAAAUQ"]
[Mon Mar 02 21:53:47.086044 2026] [:error] [pid 59602:tid 59683] [client 51.103.128.176:9274] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aaWWazMtSo_Fr0lHnSZ7lgAAAJI"]
[Mon Mar 02 21:53:48.173911 2026] [:error] [pid 28847:tid 28871] [client 51.103.128.176:9257] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/t.php"] [unique_id "aaWWbJ9xbBq8VfeqVDZrdgAAANY"]
[Mon Mar 02 21:53:50.001148 2026] [:error] [pid 28847:tid 28852] [client 51.103.128.176:11819] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/t.php"] [unique_id "aaWWbp9xbBq8VfeqVDZrgQAAAMM"]
[Mon Mar 02 21:53:50.601769 2026] [:error] [pid 28847:tid 28857] [client 51.103.128.176:13092] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/t.php"] [unique_id "aaWWbp9xbBq8VfeqVDZrhQAAAMg"]
[Mon Mar 02 21:53:51.799133 2026] [:error] [pid 59734:tid 59754] [client 51.103.128.176:11955] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/t.php"] [unique_id "aaWWb5eWQx7ZQG9NybE0SgAAAVI"]
[Mon Mar 02 21:53:52.515146 2026] [:error] [pid 59734:tid 59744] [client 51.103.128.176:6908] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aaWWcJeWQx7ZQG9NybE0TwAAAUg"]
[Mon Mar 02 21:53:53.338282 2026] [:error] [pid 59602:tid 59667] [client 51.103.128.176:6872] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aaWWcTMtSo_Fr0lHnSZ7nQAAAII"]
[Mon Mar 02 21:53:55.705975 2026] [:error] [pid 28847:tid 28871] [client 51.103.128.176:6548] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aaWWc59xbBq8VfeqVDZrkgAAANY"]
[Mon Mar 02 21:53:58.210638 2026] [:error] [pid 59600:tid 59618] [client 51.103.128.176:6887] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aaWWdoQ5lE4yocV9IBd2JwAAAAk"]
[Mon Mar 02 21:53:59.897260 2026] [:error] [pid 59600:tid 59628] [client 51.103.128.176:5743] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asus.php"] [unique_id "aaWWd4Q5lE4yocV9IBd2KwAAABM"]
[Mon Mar 02 21:54:00.969924 2026] [:error] [pid 28847:tid 28855] [client 51.103.128.176:10446] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asus.php"] [unique_id "aaWWeJ9xbBq8VfeqVDZrpAAAAMY"]
[Mon Mar 02 21:54:05.520484 2026] [:error] [pid 28847:tid 28865] [client 51.103.128.176:13056] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asus.php"] [unique_id "aaWWfZ9xbBq8VfeqVDZrtAAAANA"]
[Mon Mar 02 21:54:06.555479 2026] [:error] [pid 28847:tid 28858] [client 51.103.128.176:11700] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asus.php"] [unique_id "aaWWfp9xbBq8VfeqVDZruQAAAMk"]
[Mon Mar 02 21:54:07.656302 2026] [:error] [pid 59600:tid 59615] [client 51.103.128.176:14153] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dox.php"] [unique_id "aaWWf4Q5lE4yocV9IBd2NwAAAAY"]
[Mon Mar 02 21:54:08.707281 2026] [:error] [pid 28847:tid 28855] [client 51.103.128.176:9398] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dox.php"] [unique_id "aaWWgJ9xbBq8VfeqVDZrxAAAAMY"]
[Mon Mar 02 21:54:10.725399 2026] [:error] [pid 28847:tid 28871] [client 51.103.128.176:5181] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dox.php"] [unique_id "aaWWgp9xbBq8VfeqVDZrzgAAANY"]
[Mon Mar 02 21:54:12.037062 2026] [:error] [pid 59601:tid 59641] [client 51.103.128.176:14401] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dox.php"] [unique_id "aaWWhMQ1lXfvWN0-ZQmZugAAAEM"]
[Mon Mar 02 21:54:13.750741 2026] [:error] [pid 59602:tid 59686] [client 51.103.128.176:9390] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/s.php"] [unique_id "aaWWhTMtSo_Fr0lHnSZ7qAAAAJU"]
[Mon Mar 02 21:54:14.900032 2026] [:error] [pid 59600:tid 59622] [client 51.103.128.176:6546] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/s.php"] [unique_id "aaWWhoQ5lE4yocV9IBd2PwAAAA0"]
[Mon Mar 02 21:54:15.997079 2026] [:error] [pid 59701:tid 59705] [client 51.103.128.176:5750] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/s.php"] [unique_id "aaWWh-UmTDVso96U9_Lg3gAAAQE"]
[Mon Mar 02 21:54:16.774566 2026] [:error] [pid 59601:tid 59661] [client 51.103.128.176:14181] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/s.php"] [unique_id "aaWWiMQ1lXfvWN0-ZQmZvQAAAFc"]
[Mon Mar 02 21:54:21.883216 2026] [:error] [pid 28847:tid 28861] [client 51.103.128.176:8946] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aaWWjZ9xbBq8VfeqVDZr7QAAAMw"]
[Mon Mar 02 21:54:23.427208 2026] [:error] [pid 59600:tid 59609] [client 51.103.128.176:11454] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aaWWj4Q5lE4yocV9IBd2UwAAAAA"]
[Mon Mar 02 21:54:30.522976 2026] [:error] [pid 59734:tid 59743] [client 51.103.128.176:2630] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file.php"] [unique_id "aaWWlpeWQx7ZQG9NybE0YgAAAUc"]
[Mon Mar 02 21:54:36.214974 2026] [:error] [pid 28847:tid 28869] [client 51.103.128.176:11997] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aaWWnJ9xbBq8VfeqVDZsDAAAANQ"]
[Mon Mar 02 21:54:37.103368 2026] [:error] [pid 28847:tid 28865] [client 51.103.128.176:11242] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aaWWnZ9xbBq8VfeqVDZsDwAAANA"]
[Mon Mar 02 21:55:00.888872 2026] [:error] [pid 28847:tid 28861] [client 51.103.128.176:5745] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gfd.php"] [unique_id "aaWWtJ9xbBq8VfeqVDZseQAAAMw"]
[Mon Mar 02 21:55:06.176697 2026] [:error] [pid 59734:tid 59749] [client 51.103.128.176:10785] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gfd.php"] [unique_id "aaWWupeWQx7ZQG9NybE0dgAAAU0"]
[Mon Mar 02 21:55:14.833655 2026] [:error] [pid 59701:tid 59723] [client 51.103.128.176:11259] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gfd.php"] [unique_id "aaWWwuUmTDVso96U9_LhAgAAARM"]
[Mon Mar 02 21:55:21.607138 2026] [:error] [pid 59601:tid 59638] [client 51.103.128.176:2842] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "aaWWycQ1lXfvWN0-ZQmZ2QAAAEA"]
[Mon Mar 02 21:55:25.050290 2026] [:error] [pid 28847:tid 28858] [client 51.103.128.176:14195] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "aaWWzZ9xbBq8VfeqVDZsxQAAAMk"]
[Mon Mar 02 21:55:30.207653 2026] [:error] [pid 59602:tid 59673] [client 51.103.128.176:11228] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "aaWW0jMtSo_Fr0lHnSZ7_gAAAIg"]
[Mon Mar 02 21:55:33.703505 2026] [:error] [pid 59602:tid 59669] [client 51.103.128.176:11234] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "aaWW1TMtSo_Fr0lHnSZ8DAAAAIQ"]
[Mon Mar 02 21:55:43.449590 2026] [:error] [pid 59734:tid 59737] [client 51.103.128.176:10756] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wefile.php"] [unique_id "aaWW35eWQx7ZQG9NybE0lQAAAUE"]
[Mon Mar 02 21:55:44.220052 2026] [:error] [pid 59602:tid 59679] [client 51.103.128.176:12622] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wefile.php"] [unique_id "aaWW4DMtSo_Fr0lHnSZ8LAAAAI4"]
[Mon Mar 02 21:55:47.350200 2026] [:error] [pid 59734:tid 59759] [client 51.103.128.176:8237] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wefile.php"] [unique_id "aaWW45eWQx7ZQG9NybE0mgAAAVc"]
[Mon Mar 02 21:55:50.761348 2026] [:error] [pid 59602:tid 59685] [client 51.103.128.176:13276] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/55.php"] [unique_id "aaWW5jMtSo_Fr0lHnSZ8LwAAAJQ"]
[Mon Mar 02 21:55:51.523852 2026] [:error] [pid 59602:tid 59668] [client 51.103.128.176:12620] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/55.php"] [unique_id "aaWW5zMtSo_Fr0lHnSZ8MgAAAIM"]
[Mon Mar 02 21:55:54.784611 2026] [:error] [pid 59602:tid 59687] [client 51.103.128.176:13341] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/55.php"] [unique_id "aaWW6jMtSo_Fr0lHnSZ8OQAAAJY"]
[Mon Mar 02 21:56:24.753919 2026] [:error] [pid 59602:tid 59685] [client 51.103.128.176:13286] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aaWXCDMtSo_Fr0lHnSZ8eAAAAJQ"]
[Mon Mar 02 21:56:25.449907 2026] [:error] [pid 28847:tid 28851] [client 51.103.128.176:2867] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aaWXCZ9xbBq8VfeqVDZtnQAAAMI"]
[Mon Mar 02 21:56:26.164502 2026] [:error] [pid 28847:tid 28853] [client 51.103.128.176:13361] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aaWXCp9xbBq8VfeqVDZtowAAAMQ"]
[Mon Mar 02 21:56:27.180218 2026] [:error] [pid 59602:tid 59683] [client 51.103.128.176:11346] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aaWXCzMtSo_Fr0lHnSZ8fAAAAJI"]
[Mon Mar 02 21:56:28.306621 2026] [:error] [pid 59600:tid 59625] [client 51.103.128.176:8363] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin-footer.php"] [unique_id "aaWXDIQ5lE4yocV9IBd3XwAAABA"]
[Mon Mar 02 21:56:29.110287 2026] [:error] [pid 59600:tid 59619] [client 51.103.128.176:11348] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin-footer.php"] [unique_id "aaWXDYQ5lE4yocV9IBd3YAAAAAo"]
[Mon Mar 02 21:56:31.750387 2026] [:error] [pid 59602:tid 59686] [client 51.103.128.176:6946] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin-footer.php"] [unique_id "aaWXDzMtSo_Fr0lHnSZ8hQAAAJU"]
[Mon Mar 02 21:56:33.062364 2026] [:error] [pid 59701:tid 59705] [client 51.103.128.176:11235] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin-footer.php"] [unique_id "aaWXEeUmTDVso96U9_LhOAAAAQE"]
[Mon Mar 02 21:56:33.960062 2026] [:error] [pid 28847:tid 28870] [client 51.103.128.176:13368] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aaWXEZ9xbBq8VfeqVDZttwAAANU"]
[Mon Mar 02 21:56:34.900051 2026] [:error] [pid 59601:tid 59658] [client 51.103.128.176:7921] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aaWXEsQ1lXfvWN0-ZQmaBwAAAFQ"]
[Mon Mar 02 21:56:36.326881 2026] [:error] [pid 28847:tid 28873] [client 51.103.128.176:13269] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aaWXFJ9xbBq8VfeqVDZtvQAAANg"]
[Mon Mar 02 21:56:38.395737 2026] [:error] [pid 28847:tid 28856] [client 51.103.128.176:8206] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aaWXFp9xbBq8VfeqVDZtxQAAAMc"]
[Mon Mar 02 21:56:38.972646 2026] [:error] [pid 28847:tid 28858] [client 51.103.128.176:13038] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "aaWXFp9xbBq8VfeqVDZtyAAAAMk"]
[Mon Mar 02 21:56:40.444217 2026] [:error] [pid 28847:tid 28850] [client 51.103.128.176:6971] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "aaWXGJ9xbBq8VfeqVDZtzQAAAME"]
[Mon Mar 02 21:56:41.147508 2026] [:error] [pid 28847:tid 28849] [client 51.103.128.176:13280] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "aaWXGZ9xbBq8VfeqVDZt0wAAAMA"]
[Mon Mar 02 21:56:43.258533 2026] [:error] [pid 28847:tid 28862] [client 51.103.128.176:10758] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "aaWXG59xbBq8VfeqVDZt4gAAAM0"]
[Mon Mar 02 21:56:55.866659 2026] [:error] [pid 59734:tid 59758] [client 51.103.128.176:11339] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "aaWXJ5eWQx7ZQG9NybE09AAAAVY"]
[Mon Mar 02 21:57:04.796374 2026] [:error] [pid 59701:tid 59715] [client 51.103.128.176:13275] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aaWXMOUmTDVso96U9_LhWwAAAQs"]
[Mon Mar 02 21:57:06.492850 2026] [:error] [pid 59602:tid 59689] [client 51.103.128.176:13354] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aaWXMjMtSo_Fr0lHnSZ8ogAAAJg"]
[Mon Mar 02 21:57:08.668890 2026] [:error] [pid 28847:tid 28872] [client 51.103.128.176:2874] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aaWXNJ9xbBq8VfeqVDZuMQAAANc"]
[Mon Mar 02 21:57:10.784909 2026] [:error] [pid 28847:tid 28868] [client 51.103.128.176:12630] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aaWXNp9xbBq8VfeqVDZuNgAAANM"]
[Mon Mar 02 21:57:16.074088 2026] [:error] [pid 59600:tid 59627] [client 51.103.128.176:8334] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xxw.php"] [unique_id "aaWXPIQ5lE4yocV9IBd3oAAAABI"]
[Mon Mar 02 21:57:17.080351 2026] [:error] [pid 59734:tid 59755] [client 51.103.128.176:8254] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xxw.php"] [unique_id "aaWXPZeWQx7ZQG9NybE1CAAAAVM"]
[Mon Mar 02 21:57:18.415730 2026] [:error] [pid 28847:tid 28855] [client 51.103.128.176:8239] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xxw.php"] [unique_id "aaWXPp9xbBq8VfeqVDZuPQAAAMY"]
[Mon Mar 02 21:57:19.736943 2026] [:error] [pid 59600:tid 59610] [client 51.103.128.176:10753] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xxw.php"] [unique_id "aaWXP4Q5lE4yocV9IBd3pwAAAAE"]
[Mon Mar 02 21:57:20.480053 2026] [:error] [pid 28847:tid 28857] [client 51.103.128.176:10764] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/callback.php"] [unique_id "aaWXQJ9xbBq8VfeqVDZuSQAAAMg"]
[Mon Mar 02 21:57:22.368319 2026] [:error] [pid 59600:tid 59622] [client 51.103.128.176:13028] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/callback.php"] [unique_id "aaWXQoQ5lE4yocV9IBd3sQAAAA0"]
[Mon Mar 02 21:57:33.245020 2026] [:error] [pid 59701:tid 59708] [client 51.103.128.176:10772] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "aaWXTeUmTDVso96U9_LhfAAAAQQ"]
[Mon Mar 02 21:57:34.439073 2026] [:error] [pid 59600:tid 59612] [client 51.103.128.176:8322] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "aaWXToQ5lE4yocV9IBd3vwAAAAM"]
[Mon Mar 02 21:57:37.634130 2026] [:error] [pid 59600:tid 59618] [client 51.103.128.176:8377] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "aaWXUYQ5lE4yocV9IBd3ywAAAAk"]
[Mon Mar 02 21:57:54.259312 2026] [:error] [pid 59600:tid 59615] [client 51.103.128.176:10790] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file59.php"] [unique_id "aaWXYoQ5lE4yocV9IBd39QAAAAY"]
[Mon Mar 02 21:57:55.268473 2026] [:error] [pid 59601:tid 59638] [client 51.103.128.176:7890] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file59.php"] [unique_id "aaWXY8Q1lXfvWN0-ZQmaXAAAAEA"]
[Mon Mar 02 21:57:57.339018 2026] [:error] [pid 59734:tid 59744] [client 51.103.128.176:12634] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file59.php"] [unique_id "aaWXZZeWQx7ZQG9NybE1VgAAAUg"]
[Mon Mar 02 21:57:59.793345 2026] [:error] [pid 59600:tid 59622] [client 51.103.128.176:12661] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file59.php"] [unique_id "aaWXZ4Q5lE4yocV9IBd4AwAAAA0"]
[Mon Mar 02 21:58:00.802792 2026] [:error] [pid 59601:tid 59654] [client 51.103.128.176:12619] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/myfile.php"] [unique_id "aaWXaMQ1lXfvWN0-ZQmaYgAAAFA"]
[Mon Mar 02 21:58:02.490047 2026] [:error] [pid 59601:tid 59651] [client 51.103.128.176:10806] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/myfile.php"] [unique_id "aaWXasQ1lXfvWN0-ZQmaZAAAAE0"]
[Mon Mar 02 21:58:19.228484 2026] [:error] [pid 28847:tid 28865] [client 51.103.128.176:6947] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "aaWXe59xbBq8VfeqVDZuzgAAANA"]
[Mon Mar 02 21:58:20.043006 2026] [:error] [pid 28847:tid 28856] [client 51.103.128.176:6951] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "aaWXfJ9xbBq8VfeqVDZu1QAAAMc"]
[Mon Mar 02 21:58:20.991780 2026] [:error] [pid 59600:tid 59629] [client 51.103.128.176:10485] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "aaWXfIQ5lE4yocV9IBd4MQAAABQ"]
[Mon Mar 02 21:58:24.498937 2026] [:error] [pid 59600:tid 59631] [client 51.103.128.176:13180] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "aaWXgIQ5lE4yocV9IBd4PAAAABY"]
[Mon Mar 02 21:58:25.566806 2026] [:error] [pid 59600:tid 59633] [client 51.103.128.176:7276] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aaWXgYQ5lE4yocV9IBd4QAAAABg"]
[Mon Mar 02 21:58:27.642424 2026] [:error] [pid 59600:tid 59615] [client 51.103.128.176:7242] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aaWXg4Q5lE4yocV9IBd4SQAAAAY"]
[Mon Mar 02 21:58:29.107955 2026] [:error] [pid 59600:tid 59623] [client 51.103.128.176:12739] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aaWXhYQ5lE4yocV9IBd4TwAAAA4"]
[Mon Mar 02 21:58:30.588858 2026] [:error] [pid 59602:tid 59666] [client 51.103.128.176:6096] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aaWXhjMtSo_Fr0lHnSZ9MAAAAIE"]
[Mon Mar 02 21:58:49.018945 2026] [:error] [pid 28847:tid 28869] [client 51.103.128.176:8862] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aaWXmZ9xbBq8VfeqVDZvnAAAANQ"]
[Mon Mar 02 21:59:01.887837 2026] [:error] [pid 28847:tid 28867] [client 51.103.128.176:9977] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aaWXpZ9xbBq8VfeqVDZv3AAAANI"]
[Mon Mar 02 21:59:11.135401 2026] [:error] [pid 59600:tid 59622] [client 51.103.128.176:13797] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aaWXr4Q5lE4yocV9IBd44AAAAA0"]
[Mon Mar 02 21:59:13.400750 2026] [:error] [pid 59734:tid 59736] [client 51.103.128.176:9454] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aaWXsZeWQx7ZQG9NybE1rAAAAUA"]
[Mon Mar 02 21:59:15.286459 2026] [:error] [pid 59602:tid 59688] [client 51.103.128.176:10649] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aaWXszMtSo_Fr0lHnSZ9fQAAAJc"]
[Mon Mar 02 21:59:17.584847 2026] [:error] [pid 28847:tid 28870] [client 51.103.128.176:7185] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aaWXtZ9xbBq8VfeqVDZwJAAAANU"]
[Mon Mar 02 21:59:19.782635 2026] [:error] [pid 28847:tid 28873] [client 51.103.128.176:10634] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/work.php"] [unique_id "aaWXt59xbBq8VfeqVDZwLAAAANg"]
[Mon Mar 02 21:59:21.914809 2026] [:error] [pid 28847:tid 28854] [client 51.103.128.176:12329] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/work.php"] [unique_id "aaWXuZ9xbBq8VfeqVDZwNQAAAMU"]
[Mon Mar 02 21:59:23.523712 2026] [:error] [pid 59600:tid 59625] [client 51.103.128.176:9906] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/work.php"] [unique_id "aaWXu4Q5lE4yocV9IBd5BAAAABA"]
[Mon Mar 02 21:59:27.436481 2026] [:error] [pid 28847:tid 28853] [client 51.103.128.176:9870] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/work.php"] [unique_id "aaWXv59xbBq8VfeqVDZwVwAAAMQ"]
[Mon Mar 02 21:59:39.877604 2026] [:error] [pid 59701:tid 59713] [client 51.103.128.176:12846] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/06.php"] [unique_id "aaWXy-UmTDVso96U9_Lh7AAAAQk"]
[Mon Mar 02 21:59:45.463970 2026] [:error] [pid 28847:tid 28849] [client 51.103.128.176:12317] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/god.php"] [unique_id "aaWX0Z9xbBq8VfeqVDZxHQAAAMA"]
[Mon Mar 02 22:00:12.557217 2026] [:error] [pid 28847:tid 28872] [client 51.103.128.176:13855] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws77.php"] [unique_id "aaWX7J9xbBq8VfeqVDZxowAAANc"]
[Mon Mar 02 22:00:31.049119 2026] [:error] [pid 28847:tid 28849] [client 51.103.128.176:8770] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "aaWX_59xbBq8VfeqVDZx6gAAAMA"]
[Mon Mar 02 22:00:35.484088 2026] [:error] [pid 28847:tid 28853] [client 51.103.128.176:8557] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "aaWYA59xbBq8VfeqVDZx_AAAAMQ"]
[Mon Mar 02 22:00:39.246030 2026] [:error] [pid 28847:tid 28860] [client 51.103.128.176:12178] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "aaWYB59xbBq8VfeqVDZyCwAAAMs"]
[Mon Mar 02 22:00:41.136044 2026] [:error] [pid 59600:tid 59629] [client 51.103.128.176:12576] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "aaWYCYQ5lE4yocV9IBd6HQAAABQ"]
[Mon Mar 02 22:00:42.228100 2026] [:error] [pid 59602:tid 59670] [client 51.103.128.176:8501] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws81.php"] [unique_id "aaWYCjMtSo_Fr0lHnSZ-VgAAAIU"]
[Mon Mar 02 22:00:44.122256 2026] [:error] [pid 59734:tid 59738] [client 51.103.128.176:5835] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws81.php"] [unique_id "aaWYDJeWQx7ZQG9NybE2KAAAAUI"]
[Mon Mar 02 22:00:45.007134 2026] [:error] [pid 59602:tid 59679] [client 51.103.128.176:2453] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws81.php"] [unique_id "aaWYDTMtSo_Fr0lHnSZ-WwAAAI4"]
[Mon Mar 02 22:00:50.534589 2026] [:error] [pid 59602:tid 59665] [client 51.103.128.176:5849] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws81.php"] [unique_id "aaWYEjMtSo_Fr0lHnSZ-ZAAAAIA"]
[Mon Mar 02 22:00:53.902077 2026] [:error] [pid 28847:tid 28871] [client 51.103.128.176:6033] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/install.php"] [unique_id "aaWYFZ9xbBq8VfeqVDZyXQAAANY"]
[Mon Mar 02 22:00:54.544639 2026] [:error] [pid 59701:tid 59713] [client 51.103.128.176:13830] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/install.php"] [unique_id "aaWYFuUmTDVso96U9_LiVQAAAQk"]
[Mon Mar 02 22:00:56.885504 2026] [:error] [pid 59602:tid 59686] [client 51.103.128.176:5259] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/install.php"] [unique_id "aaWYGDMtSo_Fr0lHnSZ-dgAAAJU"]
[Mon Mar 02 22:00:58.401816 2026] [:error] [pid 59601:tid 59649] [client 51.103.128.176:5788] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/install.php"] [unique_id "aaWYGsQ1lXfvWN0-ZQma1gAAAEs"]
[Mon Mar 02 22:01:00.738836 2026] [:error] [pid 59602:tid 59683] [client 51.103.128.176:13667] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aaWYHDMtSo_Fr0lHnSZ-rAAAAJI"]
[Mon Mar 02 22:01:01.789785 2026] [:error] [pid 28847:tid 28863] [client 51.103.128.176:6043] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aaWYHZ9xbBq8VfeqVDZylQAAAM4"]
[Mon Mar 02 22:01:03.231706 2026] [:error] [pid 59602:tid 59684] [client 51.103.128.176:11187] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aaWYHzMtSo_Fr0lHnSZ-uQAAAJM"]
[Mon Mar 02 22:01:04.671541 2026] [:error] [pid 59602:tid 59685] [client 51.103.128.176:12835] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aaWYIDMtSo_Fr0lHnSZ-vwAAAJQ"]
[Mon Mar 02 22:01:06.451058 2026] [:error] [pid 59600:tid 59615] [client 51.103.128.176:11458] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/v.php"] [unique_id "aaWYIoQ5lE4yocV9IBd6VQAAAAY"]
[Mon Mar 02 22:01:07.463905 2026] [:error] [pid 28847:tid 28850] [client 51.103.128.176:12803] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/v.php"] [unique_id "aaWYI59xbBq8VfeqVDZypAAAAME"]
[Mon Mar 02 22:01:08.409246 2026] [:error] [pid 59600:tid 59624] [client 51.103.128.176:2315] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/v.php"] [unique_id "aaWYJIQ5lE4yocV9IBd6XQAAAA8"]
[Mon Mar 02 22:01:09.290825 2026] [:error] [pid 28847:tid 28862] [client 51.103.128.176:12851] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/v.php"] [unique_id "aaWYJZ9xbBq8VfeqVDZyqgAAAM0"]
[Mon Mar 02 22:01:11.107089 2026] [:error] [pid 28847:tid 28861] [client 51.103.128.176:5310] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aaWYJ59xbBq8VfeqVDZytwAAAMw"]
[Mon Mar 02 22:01:20.051490 2026] [:error] [pid 59602:tid 59681] [client 51.103.128.176:5378] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bak.php"] [unique_id "aaWYMDMtSo_Fr0lHnSZ-3wAAAJA"]
[Mon Mar 02 22:01:20.729213 2026] [:error] [pid 59600:tid 59609] [client 51.103.128.176:10314] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bak.php"] [unique_id "aaWYMIQ5lE4yocV9IBd6egAAAAA"]
[Mon Mar 02 22:01:23.115234 2026] [:error] [pid 59600:tid 59622] [client 51.103.128.176:12219] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bak.php"] [unique_id "aaWYM4Q5lE4yocV9IBd6gQAAAA0"]
[Mon Mar 02 22:01:29.118733 2026] [:error] [pid 59600:tid 59630] [client 51.103.128.176:8426] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bak.php"] [unique_id "aaWYOYQ5lE4yocV9IBd6jgAAABU"]
[Mon Mar 02 22:01:30.054187 2026] [:error] [pid 59602:tid 59680] [client 51.103.128.176:2073] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws49.php"] [unique_id "aaWYOjMtSo_Fr0lHnSZ-8AAAAI8"]
[Mon Mar 02 22:01:31.890132 2026] [:error] [pid 59601:tid 59649] [client 51.103.128.176:11439] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws49.php"] [unique_id "aaWYO8Q1lXfvWN0-ZQmbGQAAAEs"]
[Mon Mar 02 22:01:41.471313 2026] [:error] [pid 28847:tid 28856] [client 51.103.128.176:5777] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws49.php"] [unique_id "aaWYRZ9xbBq8VfeqVDZy9AAAAMc"]
[Mon Mar 02 22:01:42.434556 2026] [:error] [pid 59600:tid 59617] [client 51.103.128.176:8816] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws49.php"] [unique_id "aaWYRoQ5lE4yocV9IBd6vAAAAAg"]
[Mon Mar 02 22:01:47.577371 2026] [:error] [pid 59600:tid 59614] [client 51.103.128.176:5798] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "aaWYS4Q5lE4yocV9IBd62QAAAAU"]
[Mon Mar 02 22:01:48.944064 2026] [:error] [pid 28847:tid 28867] [client 51.103.128.176:11177] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "aaWYTJ9xbBq8VfeqVDZzEwAAANI"]
[Mon Mar 02 22:01:54.107170 2026] [:error] [pid 28847:tid 28859] [client 51.103.128.176:5778] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "aaWYUp9xbBq8VfeqVDZzHwAAAMo"]
[Mon Mar 02 22:01:56.062019 2026] [:error] [pid 28847:tid 28855] [client 51.103.128.176:8757] [client 51.103.128.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "aaWYVJ9xbBq8VfeqVDZzKQAAAMY"]
[Mon Mar 02 22:08:52.570220 2026] [:error] [pid 28847:tid 28868] [client 20.104.86.139:16570] [client 20.104.86.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaWZ9J9xbBq8VfeqVDZ31wAAANM"]
[Mon Mar 02 22:08:53.417142 2026] [:error] [pid 28847:tid 28872] [client 20.104.86.139:17292] [client 20.104.86.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaWZ9Z9xbBq8VfeqVDZ37QAAANc"]
[Mon Mar 02 22:08:54.260191 2026] [:error] [pid 59600:tid 59614] [client 20.104.86.139:17281] [client 20.104.86.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaWZ9oQ5lE4yocV9IBd_TQAAAAU"]
[Mon Mar 02 22:08:55.113314 2026] [:error] [pid 59734:tid 59743] [client 20.104.86.139:53236] [client 20.104.86.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaWZ95eWQx7ZQG9NybE5SAAAAUc"]
[Mon Mar 02 23:40:30.539923 2026] [:error] [pid 59602:tid 59667] [client 20.104.86.139:58870] [client 20.104.86.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaWvbjMtSo_Fr0lHnSamQAAAAII"]
[Mon Mar 02 23:40:31.430007 2026] [:error] [pid 59602:tid 59669] [client 20.104.86.139:58867] [client 20.104.86.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaWvbzMtSo_Fr0lHnSamRgAAAIQ"]
[Mon Mar 02 23:40:32.273933 2026] [:error] [pid 59602:tid 59677] [client 20.104.86.139:61075] [client 20.104.86.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaWvcDMtSo_Fr0lHnSamSwAAAIw"]
[Mon Mar 02 23:40:33.119236 2026] [:error] [pid 59602:tid 59676] [client 20.104.86.139:61063] [client 20.104.86.139] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aaWvcTMtSo_Fr0lHnSamTQAAAIs"]
[Tue Mar 03 04:29:59.366784 2026] [:error] [pid 36897:tid 36922] [client 136.111.251.129:37202] [client 136.111.251.129] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aaXzRyZC69_8eM0Uouu29QAAANQ"]
[Tue Mar 03 20:44:37.996198 2026] [:error] [pid 20872:tid 20880] [client 185.192.69.189:50141] [client 185.192.69.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aabXtYlYbNk3E_3CgBg0bgAAAQY"]
[Tue Mar 03 20:44:39.517957 2026] [:error] [pid 36785:tid 36855] [client 185.192.69.193:64697] [client 185.192.69.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aabXt3hJejauENG9qTjjLwAAAIU"]
[Tue Mar 03 20:44:42.084310 2026] [:error] [pid 36785:tid 36862] [client 185.192.69.198:49827] [client 185.192.69.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aabXunhJejauENG9qTjjPQAAAIw"]
[Tue Mar 03 20:44:43.567609 2026] [:error] [pid 36783:tid 36804] [client 45.89.242.44:53005] [client 45.89.242.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aabXuz4tNYh5NtLaTXe6KAAAAAo"]
[Tue Mar 03 20:44:45.999877 2026] [:error] [pid 36784:tid 36847] [client 45.89.242.48:53795] [client 45.89.242.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aabXvXNeKOSGbW9kDgTOJgAAAFg"]
[Tue Mar 03 20:44:46.882475 2026] [:error] [pid 36785:tid 36859] [client 185.192.69.200:37297] [client 185.192.69.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aabXvnhJejauENG9qTjjTgAAAIk"]
[Tue Mar 03 20:44:47.461697 2026] [:error] [pid 36897:tid 36910] [client 185.192.69.184:21569] [client 185.192.69.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aabXvyZC69_8eM0Uoutq1wAAAMg"]
[Tue Mar 03 20:44:48.056416 2026] [:error] [pid 36897:tid 36907] [client 45.89.242.43:20283] [client 45.89.242.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aabXwCZC69_8eM0Uoutq2gAAAMU"]
[Tue Mar 03 20:44:48.662498 2026] [:error] [pid 62485:tid 62501] [client 185.192.69.187:35803] [client 185.192.69.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aabXwP9R7DZ1ENjPMXR0xgAAAcw"]
[Tue Mar 03 20:44:50.263059 2026] [:error] [pid 36785:tid 36855] [client 185.192.69.174:41385] [client 185.192.69.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aabXwnhJejauENG9qTjjUwAAAIU"]
[Tue Mar 03 20:44:51.142007 2026] [:error] [pid 36784:tid 36828] [client 185.192.69.180:21223] [client 185.192.69.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aabXw3NeKOSGbW9kDgTOLgAAAEU"]
[Tue Mar 03 20:44:52.336071 2026] [:error] [pid 14042:tid 14055] [client 185.192.69.175:32237] [client 185.192.69.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "aabXxGeHGCmSEiIBcK5yCwAAAYs"]
[Tue Mar 03 20:44:53.539837 2026] [:error] [pid 36897:tid 36904] [client 185.192.69.189:50837] [client 185.192.69.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aabXxSZC69_8eM0Uoutq4QAAAMI"]
[Tue Mar 03 20:44:54.409021 2026] [:error] [pid 36897:tid 36923] [client 185.192.69.203:42639] [client 185.192.69.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aabXxiZC69_8eM0Uoutq4wAAANU"]
[Tue Mar 03 20:44:55.409099 2026] [:error] [pid 36785:tid 36851] [client 45.89.242.49:52441] [client 45.89.242.49] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aabXx3hJejauENG9qTjjYAAAAIE"]
[Tue Mar 03 20:44:57.801979 2026] [:error] [pid 36897:tid 36924] [client 185.192.69.197:60845] [client 185.192.69.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aabXySZC69_8eM0Uoutq8QAAANY"]
[Tue Mar 03 20:44:58.681706 2026] [:error] [pid 20872:tid 20881] [client 185.192.69.172:21505] [client 185.192.69.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aabXyolYbNk3E_3CgBg0dQAAAQc"]
[Tue Mar 03 20:44:59.914452 2026] [:error] [pid 20872:tid 20895] [client 185.192.69.171:62527] [client 185.192.69.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aabXy4lYbNk3E_3CgBg0fAAAARU"]
[Tue Mar 03 20:45:00.913598 2026] [:error] [pid 36784:tid 36830] [client 185.192.69.207:43165] [client 185.192.69.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aabXzHNeKOSGbW9kDgTOQQAAAEc"]
[Tue Mar 03 20:45:02.998963 2026] [:error] [pid 36784:tid 36832] [client 185.192.69.186:45919] [client 185.192.69.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aabXznNeKOSGbW9kDgTOUAAAAEk"]
[Tue Mar 03 20:45:05.580289 2026] [:error] [pid 36897:tid 36908] [client 185.192.69.175:62307] [client 185.192.69.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aabX0SZC69_8eM0Uoutq-QAAAMY"]
[Tue Mar 03 20:45:14.158387 2026] [:error] [pid 14042:tid 14058] [client 185.192.69.174:41267] [client 185.192.69.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aabX2meHGCmSEiIBcK5yKQAAAY4"]
[Tue Mar 03 20:45:14.760997 2026] [:error] [pid 14042:tid 14046] [client 45.89.242.43:57663] [client 45.89.242.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aabX2meHGCmSEiIBcK5yLAAAAYI"]
[Tue Mar 03 20:45:15.511566 2026] [:error] [pid 36897:tid 36924] [client 45.89.242.43:31045] [client 45.89.242.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aabX2yZC69_8eM0UoutrCgAAANY"]
[Tue Mar 03 20:45:17.180103 2026] [:error] [pid 36784:tid 36831] [client 185.192.69.171:29127] [client 185.192.69.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aabX3XNeKOSGbW9kDgTOVgAAAEg"]
[Tue Mar 03 20:45:17.778791 2026] [:error] [pid 36897:tid 36914] [client 185.192.69.197:52093] [client 185.192.69.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aabX3SZC69_8eM0UoutrEgAAAMw"]
[Tue Mar 03 20:45:18.370341 2026] [:error] [pid 36897:tid 36905] [client 185.192.69.194:24599] [client 185.192.69.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aabX3iZC69_8eM0UoutrFgAAAMM"]
[Tue Mar 03 20:45:21.573791 2026] [:error] [pid 36785:tid 36872] [client 185.192.69.192:26439] [client 185.192.69.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aabX4XhJejauENG9qTjjfAAAAJY"]
[Tue Mar 03 20:45:23.075521 2026] [:error] [pid 36897:tid 36909] [client 45.89.242.50:58371] [client 45.89.242.50] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.89.242.50, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aabX4yZC69_8eM0UoutrJgAAAMc"]
[Tue Mar 03 20:45:26.768538 2026] [:error] [pid 36897:tid 36903] [client 45.89.242.50:58371] [client 45.89.242.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aabX5iZC69_8eM0UoutrMgAAAME"]
[Tue Mar 03 20:45:28.085150 2026] [:error] [pid 36783:tid 36796] [client 45.89.242.50:36069] [client 45.89.242.50] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.89.242.50, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aabX6D4tNYh5NtLaTXe6fAAAAAI"]
[Tue Mar 03 20:45:28.688356 2026] [:error] [pid 36783:tid 36816] [client 45.89.242.50:36069] [client 45.89.242.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/item.php"] [unique_id "aabX6D4tNYh5NtLaTXe6fgAAABY"]
[Tue Mar 03 20:45:31.883879 2026] [:error] [pid 26186:tid 26188] [client 185.192.69.176:55869] [client 185.192.69.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aabX6_bZCNtk8wDak9fLkAAAAUA"]
[Tue Mar 03 20:45:35.496380 2026] [:error] [pid 36897:tid 36924] [client 185.192.69.173:59065] [client 185.192.69.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aabX7yZC69_8eM0UoutrUwAAANY"]
[Tue Mar 03 20:45:36.774038 2026] [:error] [pid 26186:tid 26189] [client 185.192.69.180:29545] [client 185.192.69.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aabX8PbZCNtk8wDak9fLmwAAAUE"]
[Tue Mar 03 20:45:38.745466 2026] [:error] [pid 20872:tid 20878] [client 185.192.69.190:29591] [client 185.192.69.190] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.192.69.190, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aabX8olYbNk3E_3CgBg0kwAAAQQ"]
[Tue Mar 03 20:45:39.030922 2026] [:error] [pid 20872:tid 20886] [client 185.192.69.190:29591] [client 185.192.69.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aabX84lYbNk3E_3CgBg0lAAAAQw"]
[Tue Mar 03 20:45:45.178611 2026] [:error] [pid 14042:tid 14055] [client 185.192.69.181:50859] [client 185.192.69.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aabX-WeHGCmSEiIBcK5ySgAAAYs"]
[Tue Mar 03 20:45:47.805151 2026] [:error] [pid 36785:tid 36858] [client 185.192.69.174:35977] [client 185.192.69.174] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.192.69.174, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aabX-3hJejauENG9qTjjmwAAAIg"]
[Tue Mar 03 20:45:49.109756 2026] [:error] [pid 36785:tid 36871] [client 185.192.69.174:35977] [client 185.192.69.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aabX_XhJejauENG9qTjjqAAAAJU"]
[Tue Mar 03 20:45:49.994371 2026] [:error] [pid 36784:tid 36832] [client 185.192.69.192:48831] [client 185.192.69.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aabX_XNeKOSGbW9kDgTObgAAAEk"]
[Tue Mar 03 20:45:51.197171 2026] [:error] [pid 14042:tid 14065] [client 185.192.69.181:63613] [client 185.192.69.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aabX_2eHGCmSEiIBcK5yUAAAAZU"]
[Tue Mar 03 20:45:52.706844 2026] [:error] [pid 62485:tid 62501] [client 185.192.69.195:50481] [client 185.192.69.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aabYAP9R7DZ1ENjPMXR09gAAAcw"]
[Tue Mar 03 20:45:53.328597 2026] [:error] [pid 36897:tid 36904] [client 185.192.69.180:41599] [client 185.192.69.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aabYASZC69_8eM0UoutroQAAAMI"]
[Tue Mar 03 20:45:55.408880 2026] [:error] [pid 36783:tid 36807] [client 185.192.69.205:30319] [client 185.192.69.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aabYAz4tNYh5NtLaTXe6lAAAAA0"]
[Tue Mar 03 20:45:56.345497 2026] [:error] [pid 36897:tid 36920] [client 45.89.242.46:21861] [client 45.89.242.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aabYBCZC69_8eM0UoutrqQAAANI"]
[Tue Mar 03 20:45:57.826756 2026] [:error] [pid 36783:tid 36797] [client 185.192.69.174:22943] [client 185.192.69.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aabYBT4tNYh5NtLaTXe6mQAAAAM"]
[Tue Mar 03 20:45:59.297010 2026] [:error] [pid 36784:tid 36846] [client 185.192.69.175:30571] [client 185.192.69.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aabYB3NeKOSGbW9kDgTOdQAAAFc"]
[Tue Mar 03 20:46:00.543308 2026] [:error] [pid 62485:tid 62508] [client 185.192.69.195:56237] [client 185.192.69.195] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/click.php"] [unique_id "aabYCP9R7DZ1ENjPMXR0-wAAAdM"]
[Tue Mar 03 20:46:03.430554 2026] [:error] [pid 36897:tid 36915] [client 45.89.242.47:35783] [client 45.89.242.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aabYCyZC69_8eM0UoutrtgAAAM0"]
[Tue Mar 03 20:46:06.650094 2026] [:error] [pid 62485:tid 62497] [client 185.192.69.179:25987] [client 185.192.69.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aabYDv9R7DZ1ENjPMXR1CAAAAcg"]
[Tue Mar 03 20:46:07.198365 2026] [:error] [pid 36897:tid 36903] [client 185.192.69.186:45573] [client 185.192.69.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aabYDyZC69_8eM0UoutruwAAAME"]
[Tue Mar 03 20:46:07.818102 2026] [:error] [pid 36897:tid 36905] [client 185.192.69.172:32527] [client 185.192.69.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aabYDyZC69_8eM0UoutrwQAAAMM"]
[Tue Mar 03 20:46:08.419884 2026] [:error] [pid 36897:tid 36926] [client 185.192.69.183:59623] [client 185.192.69.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aabYECZC69_8eM0UoutrxAAAANg"]
[Tue Mar 03 20:46:09.312695 2026] [:error] [pid 36897:tid 36919] [client 185.192.69.189:44123] [client 185.192.69.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aabYESZC69_8eM0UoutrzQAAANE"]
[Tue Mar 03 20:46:09.896961 2026] [:error] [pid 36897:tid 36914] [client 185.192.69.210:24487] [client 185.192.69.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aabYESZC69_8eM0UoutrzgAAAMw"]
[Tue Mar 03 20:46:11.083590 2026] [:error] [pid 36785:tid 36864] [client 185.192.69.190:31641] [client 185.192.69.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aabYE3hJejauENG9qTjj2gAAAI4"]
[Tue Mar 03 20:46:11.702138 2026] [:error] [pid 36785:tid 36855] [client 185.192.69.190:58795] [client 185.192.69.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aabYE3hJejauENG9qTjj3QAAAIU"]
[Tue Mar 03 20:46:12.271072 2026] [:error] [pid 20872:tid 20881] [client 185.192.69.204:47005] [client 185.192.69.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aabYFIlYbNk3E_3CgBg0ogAAAQc"]
[Tue Mar 03 20:46:12.864298 2026] [:error] [pid 36785:tid 36862] [client 185.192.69.191:22565] [client 185.192.69.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aabYFHhJejauENG9qTjj4wAAAIw"]
[Tue Mar 03 20:46:13.788402 2026] [:error] [pid 36897:tid 36906] [client 185.192.69.194:44169] [client 185.192.69.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aabYFSZC69_8eM0Uoutr1QAAAMQ"]
[Tue Mar 03 20:46:14.979316 2026] [:error] [pid 36783:tid 36799] [client 185.192.69.170:22727] [client 185.192.69.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aabYFj4tNYh5NtLaTXe6qwAAAAU"]
[Tue Mar 03 20:46:16.763153 2026] [:error] [pid 36784:tid 36844] [client 185.192.69.172:59673] [client 185.192.69.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aabYGHNeKOSGbW9kDgTOhQAAAFU"]
[Tue Mar 03 20:46:19.511951 2026] [:error] [pid 36784:tid 36825] [client 185.192.69.206:29225] [client 185.192.69.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aabYG3NeKOSGbW9kDgTOkAAAAEI"]
[Tue Mar 03 20:46:21.103336 2026] [:error] [pid 20872:tid 20877] [client 185.192.69.189:58675] [client 185.192.69.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aabYHYlYbNk3E_3CgBg0pgAAAQM"]
[Tue Mar 03 20:46:21.646229 2026] [:error] [pid 36897:tid 36921] [client 185.192.69.175:32299] [client 185.192.69.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aabYHSZC69_8eM0Uoutr9wAAANM"]
[Tue Mar 03 20:46:23.427956 2026] [:error] [pid 36897:tid 36919] [client 185.192.69.211:64977] [client 185.192.69.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aabYHyZC69_8eM0UoutsCgAAANE"]
[Tue Mar 03 20:46:24.958331 2026] [proxy_fcgi:error] [pid 36897:tid 36908] [client 185.192.69.190:41943] AH01071: Got error 'Primary script unknown'
[Tue Mar 03 20:46:25.254161 2026] [proxy_fcgi:error] [pid 36897:tid 36902] [client 185.192.69.190:41943] AH01071: Got error 'Primary script unknown'
[Tue Mar 03 20:46:25.547718 2026] [proxy_fcgi:error] [pid 36897:tid 36907] [client 185.192.69.190:41943] AH01071: Got error 'Primary script unknown'
[Tue Mar 03 20:46:27.001162 2026] [:error] [pid 36897:tid 36923] [client 185.192.69.190:41943] [client 185.192.69.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aabYIyZC69_8eM0UoutsLgAAANU"]
[Tue Mar 03 20:46:27.607091 2026] [:error] [pid 26186:tid 26191] [client 45.89.242.42:22743] [client 45.89.242.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aabYI_bZCNtk8wDak9fLzQAAAUM"]
[Tue Mar 03 20:46:28.254874 2026] [:error] [pid 36897:tid 36906] [client 185.192.69.186:24965] [client 185.192.69.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aabYJCZC69_8eM0UoutsNQAAAMQ"]
[Tue Mar 03 20:46:28.881563 2026] [:error] [pid 36897:tid 36902] [client 45.89.242.45:64387] [client 45.89.242.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aabYJCZC69_8eM0UoutsPAAAAMA"]
[Tue Mar 03 20:46:29.489827 2026] [:error] [pid 36785:tid 36873] [client 185.192.69.199:23679] [client 185.192.69.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aabYJXhJejauENG9qTjj_AAAAJc"]
[Tue Mar 03 20:46:30.107653 2026] [:error] [pid 36897:tid 36914] [client 185.192.69.208:50959] [client 185.192.69.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aabYJiZC69_8eM0UoutsUQAAAMw"]
[Tue Mar 03 20:46:30.956014 2026] [:error] [pid 36897:tid 36919] [client 185.192.69.170:44129] [client 185.192.69.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aabYJiZC69_8eM0UoutsZAAAANE"]
[Tue Mar 03 20:46:31.490839 2026] [:error] [pid 36897:tid 36920] [client 45.89.242.51:41121] [client 45.89.242.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aabYJyZC69_8eM0UoutscQAAANI"]
[Tue Mar 03 20:46:32.057247 2026] [:error] [pid 36785:tid 36866] [client 45.89.242.43:64227] [client 45.89.242.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aabYKHhJejauENG9qTjkFwAAAJA"]
[Tue Mar 03 20:46:32.658056 2026] [:error] [pid 36897:tid 36920] [client 185.192.69.181:39407] [client 185.192.69.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aabYKCZC69_8eM0UoutsfwAAANI"]
[Tue Mar 03 20:46:33.825952 2026] [:error] [pid 36785:tid 36873] [client 185.192.69.211:56259] [client 185.192.69.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aabYKXhJejauENG9qTjkLgAAAJc"]
[Tue Mar 03 20:46:34.740337 2026] [:error] [pid 36785:tid 36873] [client 185.192.69.192:45727] [client 185.192.69.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aabYKnhJejauENG9qTjkPQAAAJc"]
[Tue Mar 03 20:46:35.963620 2026] [:error] [pid 36785:tid 36855] [client 185.192.69.202:31687] [client 185.192.69.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aabYK3hJejauENG9qTjkTgAAAIU"]
[Tue Mar 03 20:46:37.482742 2026] [:error] [pid 36897:tid 36926] [client 185.192.69.196:24661] [client 185.192.69.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aabYLSZC69_8eM0UoutszwAAANg"]
[Tue Mar 03 20:46:39.469161 2026] [:error] [pid 36783:tid 36795] [client 185.192.69.201:32769] [client 185.192.69.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aabYLz4tNYh5NtLaTXe6swAAAAE"]
[Tue Mar 03 20:46:41.228902 2026] [:error] [pid 14042:tid 14061] [client 45.89.242.50:44687] [client 45.89.242.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aabYMWeHGCmSEiIBcK5ydAAAAZE"]
[Tue Mar 03 20:46:42.151103 2026] [:error] [pid 62485:tid 62510] [client 185.192.69.172:25801] [client 185.192.69.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aabYMv9R7DZ1ENjPMXR1FQAAAdU"]
[Tue Mar 03 20:46:47.558460 2026] [:error] [pid 36784:tid 36827] [client 185.192.69.211:55507] [client 185.192.69.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aabYN3NeKOSGbW9kDgTOvAAAAEQ"]
[Tue Mar 03 20:46:48.156786 2026] [:error] [pid 36785:tid 36854] [client 185.192.69.193:64023] [client 185.192.69.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aabYOHhJejauENG9qTjkaQAAAIQ"]
[Tue Mar 03 20:46:48.716533 2026] [:error] [pid 36897:tid 36903] [client 45.89.242.51:24631] [client 45.89.242.51] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.89.242.51, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aabYOCZC69_8eM0Uouts8AAAAME"]
[Tue Mar 03 20:46:49.295584 2026] [:error] [pid 36897:tid 36906] [client 45.89.242.51:24631] [client 45.89.242.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aabYOSZC69_8eM0Uouts8gAAAMQ"]
[Tue Mar 03 20:46:50.541061 2026] [:error] [pid 36897:tid 36923] [client 185.192.69.203:64765] [client 185.192.69.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aabYOiZC69_8eM0Uouts-AAAANU"]
[Tue Mar 03 20:46:51.138195 2026] [:error] [pid 36785:tid 36853] [client 185.192.69.188:32443] [client 185.192.69.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aabYO3hJejauENG9qTjkbgAAAIM"]
[Tue Mar 03 20:46:52.962386 2026] [:error] [pid 20872:tid 20890] [client 45.89.242.46:28979] [client 45.89.242.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aabYPIlYbNk3E_3CgBg0ugAAARA"]
[Tue Mar 03 20:46:53.562275 2026] [:error] [pid 14042:tid 14046] [client 185.192.69.186:45351] [client 185.192.69.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aabYPWeHGCmSEiIBcK5yfQAAAYI"]
[Tue Mar 03 20:46:56.022813 2026] [:error] [pid 14042:tid 14053] [client 185.192.69.211:58245] [client 185.192.69.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aabYQGeHGCmSEiIBcK5yhAAAAYk"]
[Tue Mar 03 20:46:58.292322 2026] [proxy_fcgi:error] [pid 26186:tid 26207] [client 185.192.69.172:34891] AH01071: Got error 'Primary script unknown'
[Tue Mar 03 20:46:59.043335 2026] [:error] [pid 26186:tid 26192] [client 185.192.69.172:34891] [client 185.192.69.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/function.php"] [unique_id "aabYQ_bZCNtk8wDak9fL3AAAAUQ"]
[Tue Mar 03 20:46:59.740827 2026] [:error] [pid 62485:tid 62492] [client 185.192.69.182:26959] [client 185.192.69.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aabYQ_9R7DZ1ENjPMXR1HQAAAcM"]
[Tue Mar 03 20:47:00.926298 2026] [:error] [pid 36785:tid 36854] [client 185.192.69.197:37197] [client 185.192.69.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aabYRHhJejauENG9qTjkfQAAAIQ"]
[Tue Mar 03 20:47:01.576301 2026] [:error] [pid 36897:tid 36918] [client 185.192.69.188:64331] [client 185.192.69.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aabYRSZC69_8eM0UouttBgAAANA"]
[Tue Mar 03 20:47:04.315767 2026] [:error] [pid 36784:tid 36824] [client 45.89.242.44:45869] [client 45.89.242.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aabYSHNeKOSGbW9kDgTO1AAAAEE"]
[Tue Mar 03 20:47:04.919909 2026] [:error] [pid 36897:tid 36911] [client 45.89.242.51:35993] [client 45.89.242.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aabYSCZC69_8eM0UouttDAAAAMk"]
[Tue Mar 03 20:47:06.757880 2026] [:error] [pid 36897:tid 36924] [client 185.192.69.193:33119] [client 185.192.69.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/index.php"] [unique_id "aabYSiZC69_8eM0UouttFwAAANY"]
[Tue Mar 03 20:47:08.411316 2026] [:error] [pid 36784:tid 36833] [client 45.89.242.50:37263] [client 45.89.242.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aabYTHNeKOSGbW9kDgTO1wAAAEo"]
[Tue Mar 03 20:47:09.007793 2026] [:error] [pid 36784:tid 36844] [client 185.192.69.196:65415] [client 185.192.69.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aabYTXNeKOSGbW9kDgTO2AAAAFU"]
[Tue Mar 03 20:47:11.178106 2026] [:error] [pid 36897:tid 36905] [client 185.192.69.187:51917] [client 185.192.69.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aabYTyZC69_8eM0UouttKwAAAMM"]
[Tue Mar 03 20:47:12.042988 2026] [:error] [pid 36897:tid 36913] [client 185.192.69.191:37129] [client 185.192.69.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aabYUCZC69_8eM0UouttLgAAAMs"]
[Tue Mar 03 20:47:14.982086 2026] [:error] [pid 36897:tid 36925] [client 185.192.69.180:34463] [client 185.192.69.180] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.192.69.180, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/js/wp-login.php"] [unique_id "aabYUiZC69_8eM0UouttPAAAANc"]
[Tue Mar 03 20:47:16.773327 2026] [:error] [pid 36897:tid 36923] [client 185.192.69.180:34463] [client 185.192.69.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/bk/index.php"] [unique_id "aabYVCZC69_8eM0UouttRQAAANU"]
[Tue Mar 03 20:47:17.361886 2026] [:error] [pid 36897:tid 36908] [client 45.89.242.42:22555] [client 45.89.242.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.89.242.42, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aabYVSZC69_8eM0UouttRwAAAMY"]
[Tue Mar 03 20:47:20.685629 2026] [proxy_fcgi:error] [pid 36897:tid 36905] [client 45.89.242.42:22555] AH01071: Got error 'Primary script unknown'
[Tue Mar 03 20:47:26.227083 2026] [:error] [pid 36897:tid 36905] [client 45.89.242.42:22555] [client 45.89.242.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aabYXiZC69_8eM0UouttiAAAAMM"]
[Tue Mar 03 20:47:29.064313 2026] [:error] [pid 36897:tid 36917] [client 185.192.69.199:61699] [client 185.192.69.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aabYYSZC69_8eM0UouttkwAAAM8"]
[Tue Mar 03 20:47:30.511793 2026] [:error] [pid 14042:tid 14063] [client 45.89.242.42:35567] [client 45.89.242.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aabYYmeHGCmSEiIBcK5ynAAAAZM"]
[Tue Mar 03 20:47:33.806395 2026] [:error] [pid 14042:tid 14045] [client 45.89.242.51:61883] [client 45.89.242.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aabYZWeHGCmSEiIBcK5yqwAAAYE"]
[Tue Mar 03 20:47:34.985290 2026] [:error] [pid 62485:tid 62490] [client 185.192.69.179:59753] [client 185.192.69.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aabYZv9R7DZ1ENjPMXR1OgAAAcE"]
[Tue Mar 03 20:47:35.876077 2026] [:error] [pid 36897:tid 36912] [client 185.192.69.198:33819] [client 185.192.69.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aabYZyZC69_8eM0UouttnQAAAMo"]
[Tue Mar 03 20:47:37.707963 2026] [proxy_fcgi:error] [pid 36783:tid 36810] [client 185.192.69.191:43613] AH01071: Got error 'Primary script unknown'
[Tue Mar 03 20:47:37.974708 2026] [proxy_fcgi:error] [pid 36783:tid 36808] [client 185.192.69.191:43613] AH01071: Got error 'Primary script unknown'
[Tue Mar 03 20:47:38.251528 2026] [:error] [pid 36783:tid 36800] [client 185.192.69.191:43613] [client 185.192.69.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aabYaj4tNYh5NtLaTXe7DQAAAAY"]
[Tue Mar 03 20:47:38.805045 2026] [:error] [pid 36784:tid 36827] [client 185.192.69.197:50141] [client 185.192.69.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aabYanNeKOSGbW9kDgTO6wAAAEQ"]
[Tue Mar 03 20:47:42.727424 2026] [:error] [pid 36897:tid 36904] [client 185.192.69.194:28991] [client 185.192.69.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aabYbiZC69_8eM0UouttswAAAMI"]
[Tue Mar 03 20:47:44.149941 2026] [:error] [pid 36897:tid 36920] [client 185.192.69.204:64175] [client 185.192.69.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "aabYcCZC69_8eM0UouttuwAAANI"]
[Tue Mar 03 20:47:45.992328 2026] [:error] [pid 36783:tid 36816] [client 185.192.69.211:64361] [client 185.192.69.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aabYcT4tNYh5NtLaTXe7FAAAABY"]
[Tue Mar 03 20:47:51.046378 2026] [:error] [pid 36897:tid 36924] [client 45.89.242.46:45869] [client 45.89.242.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aabYdyZC69_8eM0UouttzwAAANY"]
[Tue Mar 03 20:47:51.631362 2026] [proxy_fcgi:error] [pid 36785:tid 36872] [client 185.192.69.201:49525] AH01071: Got error 'Primary script unknown'
[Tue Mar 03 20:47:52.989872 2026] [:error] [pid 36785:tid 36853] [client 185.192.69.201:49525] [client 185.192.69.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aabYeHhJejauENG9qTjkywAAAIM"]
[Tue Mar 03 20:47:56.193073 2026] [proxy_fcgi:error] [pid 36897:tid 36914] [client 45.89.242.42:30437] AH01071: Got error 'Primary script unknown'
[Tue Mar 03 20:47:56.932740 2026] [:error] [pid 36897:tid 36921] [client 45.89.242.42:30437] [client 45.89.242.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.89.242.42, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aabYfCZC69_8eM0Uoutt6wAAANM"]
[Tue Mar 03 20:47:59.565457 2026] [:error] [pid 36897:tid 36926] [client 45.89.242.42:30437] [client 45.89.242.42] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aabYfyZC69_8eM0Uoutt_AAAANg"]
[Tue Mar 03 20:48:02.140205 2026] [:error] [pid 36784:tid 36828] [client 185.192.69.176:23315] [client 185.192.69.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aabYgnNeKOSGbW9kDgTPIAAAAEU"]
[Tue Mar 03 20:48:05.432512 2026] [:error] [pid 14042:tid 14066] [client 185.192.69.173:29543] [client 185.192.69.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aabYhWeHGCmSEiIBcK5yvgAAAZY"]
[Tue Mar 03 20:48:09.692559 2026] [:error] [pid 36897:tid 36909] [client 185.192.69.207:52935] [client 185.192.69.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aabYiSZC69_8eM0UoutuGAAAAMc"]
[Tue Mar 03 20:48:11.243651 2026] [:error] [pid 36897:tid 36902] [client 185.192.69.175:44795] [client 185.192.69.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aabYiyZC69_8eM0UoutuGgAAAMA"]
[Tue Mar 03 20:48:13.325944 2026] [:error] [pid 36897:tid 36926] [client 185.192.69.178:28717] [client 185.192.69.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aabYjSZC69_8eM0UoutuJgAAANg"]
[Tue Mar 03 20:48:16.574796 2026] [proxy_fcgi:error] [pid 26186:tid 26205] [client 185.192.69.201:51095] AH01071: Got error 'Primary script unknown'
[Tue Mar 03 20:48:17.231238 2026] [:error] [pid 26186:tid 26191] [client 185.192.69.201:51095] [client 185.192.69.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aabYkfbZCNtk8wDak9fMKQAAAUM"]
[Tue Mar 03 20:48:18.765225 2026] [:error] [pid 36785:tid 36863] [client 185.192.69.183:41247] [client 185.192.69.183] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/db.php"] [unique_id "aabYknhJejauENG9qTjk-gAAAI0"]
[Tue Mar 03 20:48:19.525999 2026] [:error] [pid 36897:tid 36920] [client 185.192.69.181:29417] [client 185.192.69.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aabYkyZC69_8eM0UoutuNwAAANI"]
[Tue Mar 03 20:48:20.482525 2026] [:error] [pid 26186:tid 26197] [client 185.192.69.192:35055] [client 185.192.69.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aabYlPbZCNtk8wDak9fMOgAAAUk"]
[Tue Mar 03 20:48:21.305571 2026] [:error] [pid 36785:tid 36865] [client 45.89.242.45:22481] [client 45.89.242.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aabYlXhJejauENG9qTjk_gAAAI8"]
[Tue Mar 03 20:48:22.214982 2026] [:error] [pid 36785:tid 36869] [client 185.192.69.208:42973] [client 185.192.69.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aabYlnhJejauENG9qTjlAwAAAJM"]
[Tue Mar 03 20:48:22.886658 2026] [:error] [pid 36897:tid 36923] [client 185.192.69.209:63323] [client 185.192.69.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aabYliZC69_8eM0UoutuPAAAANU"]
[Tue Mar 03 20:48:24.397311 2026] [:error] [pid 36897:tid 36911] [client 185.192.69.174:30111] [client 185.192.69.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aabYmCZC69_8eM0UoutuRgAAAMk"]
[Tue Mar 03 20:48:25.274900 2026] [:error] [pid 36785:tid 36853] [client 185.192.69.188:56335] [client 185.192.69.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aabYmXhJejauENG9qTjlCwAAAIM"]
[Tue Mar 03 20:48:26.128139 2026] [:error] [pid 36785:tid 36867] [client 185.192.69.177:25091] [client 185.192.69.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aabYmnhJejauENG9qTjlDgAAAJE"]
[Tue Mar 03 20:48:28.282640 2026] [:error] [pid 36785:tid 36867] [client 45.89.242.51:38229] [client 45.89.242.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aabYnHhJejauENG9qTjlFQAAAJE"]
[Tue Mar 03 20:48:30.123407 2026] [:error] [pid 36897:tid 36921] [client 185.192.69.174:44647] [client 185.192.69.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aabYniZC69_8eM0UoutuUAAAANM"]
[Tue Mar 03 20:48:30.657194 2026] [proxy_fcgi:error] [pid 36783:tid 36801] [client 185.192.69.184:36583] AH01071: Got error 'Primary script unknown'
[Tue Mar 03 20:48:32.184076 2026] [:error] [pid 36783:tid 36799] [client 185.192.69.184:36583] [client 185.192.69.184] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.192.69.184, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aabYoD4tNYh5NtLaTXe7qAAAAAU"]
[Tue Mar 03 20:48:34.839673 2026] [:error] [pid 36783:tid 36802] [client 185.192.69.184:36583] [client 185.192.69.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/feed-rsss.php"] [unique_id "aabYoj4tNYh5NtLaTXe7sQAAAAg"]
[Tue Mar 03 20:48:35.849130 2026] [:error] [pid 36785:tid 36863] [client 185.192.69.198:36171] [client 185.192.69.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aabYo3hJejauENG9qTjlGgAAAI0"]
[Tue Mar 03 20:48:43.044462 2026] [:error] [pid 14042:tid 14047] [client 185.192.69.203:46777] [client 185.192.69.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aabYq2eHGCmSEiIBcK5zBwAAAYM"]
[Tue Mar 03 20:48:43.819288 2026] [:error] [pid 36784:tid 36843] [client 185.192.69.171:28487] [client 185.192.69.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aabYq3NeKOSGbW9kDgTPmAAAAFQ"]
[Tue Mar 03 20:48:44.492092 2026] [:error] [pid 36785:tid 36868] [client 185.192.69.194:43757] [client 185.192.69.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aabYrHhJejauENG9qTjlJQAAAJI"]
[Tue Mar 03 20:48:47.543910 2026] [:error] [pid 36897:tid 36909] [client 185.192.69.190:53915] [client 185.192.69.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aabYryZC69_8eM0UoutvAgAAAMc"]
[Tue Mar 03 20:48:48.232098 2026] [:error] [pid 14042:tid 14064] [client 185.192.69.196:56041] [client 185.192.69.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aabYsGeHGCmSEiIBcK5zCgAAAZQ"]
[Tue Mar 03 20:48:49.031790 2026] [:error] [pid 36897:tid 36920] [client 185.192.69.182:42215] [client 185.192.69.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aabYsSZC69_8eM0UoutvCgAAANI"]
[Tue Mar 03 20:48:51.548221 2026] [:error] [pid 14042:tid 14053] [client 185.192.69.196:35805] [client 185.192.69.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aabYs2eHGCmSEiIBcK5zDwAAAYk"]
[Tue Mar 03 20:48:52.785846 2026] [:error] [pid 36785:tid 36852] [client 185.192.69.172:61709] [client 185.192.69.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aabYtHhJejauENG9qTjlOQAAAII"]
[Tue Mar 03 20:48:54.357129 2026] [:error] [pid 36784:tid 36834] [client 185.192.69.191:58121] [client 185.192.69.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aabYtnNeKOSGbW9kDgTPogAAAEs"]
[Tue Mar 03 20:49:00.564840 2026] [:error] [pid 36897:tid 36917] [client 185.192.69.194:27159] [client 185.192.69.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aabYvCZC69_8eM0UoutvOAAAAM8"]
[Tue Mar 03 20:49:02.046134 2026] [:error] [pid 36897:tid 36905] [client 185.192.69.191:35779] [client 185.192.69.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/about.php"] [unique_id "aabYviZC69_8eM0UoutvQQAAAMM"]
[Tue Mar 03 20:49:05.852480 2026] [:error] [pid 36897:tid 36909] [client 185.192.69.196:49939] [client 185.192.69.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aabYwSZC69_8eM0UoutvVAAAAMc"]
[Tue Mar 03 20:49:10.210639 2026] [:error] [pid 14042:tid 14044] [client 185.192.69.181:53741] [client 185.192.69.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aabYxmeHGCmSEiIBcK5zFgAAAYA"]
[Tue Mar 03 20:49:12.989899 2026] [:error] [pid 36897:tid 36926] [client 45.89.242.50:45665] [client 45.89.242.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aabYyCZC69_8eM0UoutvcgAAANg"]
[Tue Mar 03 20:49:16.210929 2026] [:error] [pid 36897:tid 36924] [client 185.192.69.200:22639] [client 185.192.69.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aabYzCZC69_8eM0UoutvggAAANY"]
[Tue Mar 03 20:49:17.826805 2026] [:error] [pid 36784:tid 36823] [client 185.192.69.202:24771] [client 185.192.69.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aabYzXNeKOSGbW9kDgTPsAAAAEA"]
[Tue Mar 03 20:49:18.428778 2026] [:error] [pid 36784:tid 36842] [client 185.192.69.200:20257] [client 185.192.69.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aabYznNeKOSGbW9kDgTPsgAAAFM"]
[Tue Mar 03 20:49:21.336780 2026] [:error] [pid 36897:tid 36907] [client 185.192.69.192:58541] [client 185.192.69.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aabY0SZC69_8eM0UoutvjQAAAMU"]
[Tue Mar 03 20:49:25.459729 2026] [:error] [pid 26186:tid 26208] [client 185.192.69.193:59343] [client 185.192.69.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aabY1fbZCNtk8wDak9fMUwAAAVQ"]
[Tue Mar 03 20:49:28.262467 2026] [:error] [pid 36783:tid 36814] [client 45.89.242.44:61335] [client 45.89.242.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aabY2D4tNYh5NtLaTXe70gAAABQ"]
[Tue Mar 03 20:49:28.963061 2026] [:error] [pid 14042:tid 14048] [client 185.192.69.194:36989] [client 185.192.69.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aabY2GeHGCmSEiIBcK5zIAAAAYQ"]
[Tue Mar 03 20:49:30.655491 2026] [:error] [pid 36785:tid 36860] [client 185.192.69.186:48833] [client 185.192.69.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aabY2nhJejauENG9qTjlXQAAAIo"]
[Tue Mar 03 20:49:33.114306 2026] [:error] [pid 36784:tid 36836] [client 185.192.69.179:43969] [client 185.192.69.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "aabY3XNeKOSGbW9kDgTP1AAAAE0"]
[Tue Mar 03 20:49:33.741516 2026] [:error] [pid 20872:tid 20894] [client 185.192.69.191:32619] [client 185.192.69.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aabY3YlYbNk3E_3CgBg04gAAARQ"]
[Tue Mar 03 20:49:37.045926 2026] [:error] [pid 26186:tid 26205] [client 45.89.242.48:64091] [client 45.89.242.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "aabY4fbZCNtk8wDak9fMbwAAAVE"]
[Tue Mar 03 20:49:38.866142 2026] [:error] [pid 20872:tid 20881] [client 185.192.69.177:44825] [client 185.192.69.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "aabY4olYbNk3E_3CgBg06AAAAQc"]
[Tue Mar 03 20:49:39.852857 2026] [:error] [pid 36897:tid 36918] [client 185.192.69.194:65401] [client 185.192.69.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "aabY4yZC69_8eM0UoutvmAAAANA"]
[Tue Mar 03 20:49:41.286916 2026] [:error] [pid 36897:tid 36924] [client 185.192.69.200:24227] [client 185.192.69.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aabY5SZC69_8eM0UoutvowAAANY"]
[Tue Mar 03 20:49:42.784693 2026] [:error] [pid 36783:tid 36810] [client 185.192.69.173:56621] [client 185.192.69.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aabY5j4tNYh5NtLaTXe74wAAABA"]
[Tue Mar 03 20:49:45.388656 2026] [:error] [pid 14042:tid 14058] [client 185.192.69.184:25193] [client 185.192.69.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aabY6WeHGCmSEiIBcK5zOAAAAY4"]
[Tue Mar 03 20:49:46.974287 2026] [:error] [pid 36785:tid 36874] [client 185.192.69.179:40549] [client 185.192.69.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aabY6nhJejauENG9qTjlbQAAAJg"]
[Tue Mar 03 20:49:48.457059 2026] [:error] [pid 36785:tid 36850] [client 185.192.69.194:55173] [client 185.192.69.194] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aabY7HhJejauENG9qTjlcAAAAIA"]
[Tue Mar 03 20:49:49.459934 2026] [:error] [pid 36785:tid 36851] [client 185.192.69.182:53391] [client 185.192.69.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/as.php"] [unique_id "aabY7XhJejauENG9qTjldQAAAIE"]
[Tue Mar 03 20:49:51.664754 2026] [:error] [pid 62485:tid 62504] [client 185.192.69.170:42321] [client 185.192.69.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aabY7_9R7DZ1ENjPMXR1ZQAAAc8"]
[Tue Mar 03 20:49:52.473549 2026] [:error] [pid 36897:tid 36924] [client 185.192.69.176:41951] [client 185.192.69.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/install.php"] [unique_id "aabY8CZC69_8eM0UoutvrgAAANY"]
[Tue Mar 03 20:49:53.149160 2026] [:error] [pid 36784:tid 36827] [client 185.192.69.176:65367] [client 185.192.69.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "aabY8XNeKOSGbW9kDgTP3wAAAEQ"]
[Tue Mar 03 20:49:56.881637 2026] [:error] [pid 36897:tid 36908] [client 185.192.69.177:51433] [client 185.192.69.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aabY9CZC69_8eM0UoutvxAAAAMY"]
[Tue Mar 03 20:49:58.764156 2026] [:error] [pid 62485:tid 62499] [client 185.192.69.177:27759] [client 185.192.69.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aabY9v9R7DZ1ENjPMXR1agAAAco"]
[Tue Mar 03 20:50:00.730157 2026] [:error] [pid 62485:tid 62489] [client 185.192.69.210:38841] [client 185.192.69.210] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "aabY-P9R7DZ1ENjPMXR1bgAAAcA"]
[Tue Mar 03 20:50:05.100752 2026] [:error] [pid 36784:tid 36838] [client 45.89.242.44:20349] [client 45.89.242.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "aabY_XNeKOSGbW9kDgTP-gAAAE8"]
[Tue Mar 03 20:50:08.360032 2026] [:error] [pid 36785:tid 36860] [client 185.192.69.178:33291] [client 185.192.69.178] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aabZAHhJejauENG9qTjljAAAAIo"]
[Tue Mar 03 20:50:10.154013 2026] [:error] [pid 14042:tid 14058] [client 45.89.242.43:45951] [client 45.89.242.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aabZAmeHGCmSEiIBcK5zSAAAAY4"]
[Tue Mar 03 20:50:11.894210 2026] [:error] [pid 20872:tid 20892] [client 185.192.69.198:30035] [client 185.192.69.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aabZA4lYbNk3E_3CgBg08gAAARI"]
[Tue Mar 03 20:50:13.707658 2026] [:error] [pid 26186:tid 26212] [client 185.192.69.208:39289] [client 185.192.69.208] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aabZBfbZCNtk8wDak9fMgwAAAVg"]
[Tue Mar 03 20:50:18.513901 2026] [:error] [pid 36785:tid 36859] [client 45.89.242.44:63591] [client 45.89.242.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aabZCnhJejauENG9qTjlogAAAIk"]
[Tue Mar 03 20:50:19.616399 2026] [:error] [pid 36785:tid 36865] [client 185.192.69.184:43509] [client 185.192.69.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aabZC3hJejauENG9qTjlpAAAAI8"]
[Tue Mar 03 20:50:21.394903 2026] [:error] [pid 26186:tid 26198] [client 185.192.69.181:46035] [client 185.192.69.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aabZDfbZCNtk8wDak9fMjQAAAUo"]
[Tue Mar 03 20:50:22.047704 2026] [:error] [pid 36783:tid 36812] [client 185.192.69.193:41725] [client 185.192.69.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aabZDj4tNYh5NtLaTXe8LgAAABI"]
[Tue Mar 03 20:50:23.536654 2026] [:error] [pid 20872:tid 20890] [client 185.192.69.198:42815] [client 185.192.69.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aabZD4lYbNk3E_3CgBg0-gAAARA"]
[Tue Mar 03 20:50:24.339827 2026] [:error] [pid 14042:tid 14046] [client 185.192.69.175:34721] [client 185.192.69.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "aabZEGeHGCmSEiIBcK5zbwAAAYI"]
[Tue Mar 03 20:50:25.475160 2026] [:error] [pid 62485:tid 62512] [client 185.192.69.200:21893] [client 185.192.69.200] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.192.69.200, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aabZEf9R7DZ1ENjPMXR1ewAAAdc"]
[Tue Mar 03 20:50:25.485311 2026] [proxy_fcgi:error] [pid 62485:tid 62512] [client 185.192.69.200:21893] AH01071: Got error 'Primary script unknown'
[Tue Mar 03 20:50:25.810386 2026] [:error] [pid 62485:tid 62506] [client 185.192.69.200:21893] [client 185.192.69.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "aabZEf9R7DZ1ENjPMXR1fAAAAdE"]
[Tue Mar 03 20:50:27.812341 2026] [:error] [pid 36785:tid 36869] [client 45.89.242.43:44081] [client 45.89.242.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aabZE3hJejauENG9qTjltAAAAJM"]
[Tue Mar 03 20:50:28.435299 2026] [:error] [pid 36897:tid 36914] [client 185.192.69.185:61813] [client 185.192.69.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/network.php"] [unique_id "aabZFCZC69_8eM0Uoutv2QAAAMw"]
[Tue Mar 03 20:50:31.540767 2026] [:error] [pid 36784:tid 36824] [client 185.192.69.201:41177] [client 185.192.69.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aabZF3NeKOSGbW9kDgTQIQAAAEE"]
[Tue Mar 03 20:50:32.417667 2026] [:error] [pid 36897:tid 36923] [client 185.192.69.181:34975] [client 185.192.69.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "aabZGCZC69_8eM0Uoutv4AAAANU"]
[Tue Mar 03 20:50:33.531304 2026] [:error] [pid 36783:tid 36804] [client 185.192.69.185:61439] [client 185.192.69.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aabZGT4tNYh5NtLaTXe8NQAAAAo"]
[Tue Mar 03 20:50:34.104917 2026] [:error] [pid 36897:tid 36902] [client 185.192.69.173:31271] [client 185.192.69.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "aabZGiZC69_8eM0Uoutv4wAAAMA"]
[Tue Mar 03 20:50:35.139440 2026] [proxy_fcgi:error] [pid 36784:tid 36846] [client 185.192.69.199:47057] AH01071: Got error 'Primary script unknown'
[Tue Mar 03 20:50:35.471803 2026] [:error] [pid 36784:tid 36847] [client 185.192.69.199:47057] [client 185.192.69.199] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.192.69.199, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aabZG3NeKOSGbW9kDgTQJQAAAFg"]
[Tue Mar 03 20:50:36.339412 2026] [:error] [pid 36784:tid 36840] [client 185.192.69.199:47057] [client 185.192.69.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aabZHHNeKOSGbW9kDgTQKAAAAFE"]
[Tue Mar 03 20:50:40.728647 2026] [:error] [pid 36897:tid 36907] [client 185.192.69.199:55525] [client 185.192.69.199] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aabZICZC69_8eM0Uoutv_AAAAMU"]
[Tue Mar 03 20:50:42.136174 2026] [:error] [pid 20872:tid 20890] [client 185.192.69.202:62855] [client 185.192.69.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aabZIolYbNk3E_3CgBg1AwAAARA"]
[Tue Mar 03 20:50:42.739736 2026] [:error] [pid 36785:tid 36857] [client 185.192.69.209:53173] [client 185.192.69.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aabZInhJejauENG9qTjlxgAAAIc"]
[Tue Mar 03 20:50:45.644648 2026] [:error] [pid 36783:tid 36803] [client 185.192.69.185:40485] [client 185.192.69.185] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aabZJT4tNYh5NtLaTXe8PgAAAAk"]
[Tue Mar 03 20:50:47.873357 2026] [:error] [pid 36897:tid 36916] [client 185.192.69.174:22143] [client 185.192.69.174] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aabZJyZC69_8eM0UoutwAQAAAM4"]
[Tue Mar 03 20:50:50.786145 2026] [:error] [pid 36784:tid 36840] [client 185.192.69.200:55591] [client 185.192.69.200] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aabZKnNeKOSGbW9kDgTQPQAAAFE"]
[Tue Mar 03 20:50:52.162071 2026] [:error] [pid 20872:tid 20893] [client 45.89.242.45:45839] [client 45.89.242.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "aabZLIlYbNk3E_3CgBg1CQAAARM"]
[Tue Mar 03 20:50:53.877642 2026] [:error] [pid 36785:tid 36850] [client 185.192.69.211:43641] [client 185.192.69.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/count.php"] [unique_id "aabZLXhJejauENG9qTjl1QAAAIA"]
[Tue Mar 03 20:50:58.315625 2026] [:error] [pid 36783:tid 36798] [client 185.192.69.188:40429] [client 185.192.69.188] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aabZMj4tNYh5NtLaTXe8SAAAAAQ"]
[Tue Mar 03 20:51:01.920857 2026] [:error] [pid 62485:tid 62499] [client 185.192.69.204:40411] [client 185.192.69.204] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||measureyourcause.measureyourbrand.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/images/stories/themes.php"] [unique_id "aabZNf9R7DZ1ENjPMXR1kAAAAco"]
[Tue Mar 03 20:51:02.223729 2026] [:error] [pid 62485:tid 62504] [client 185.192.69.204:40411] [client 185.192.69.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aabZNv9R7DZ1ENjPMXR1kQAAAc8"]
[Tue Mar 03 20:51:04.538153 2026] [:error] [pid 36783:tid 36799] [client 185.192.69.211:47233] [client 185.192.69.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aabZOD4tNYh5NtLaTXe8UQAAAAU"]
[Tue Mar 03 20:51:06.221061 2026] [:error] [pid 62485:tid 62501] [client 45.89.242.47:57893] [client 45.89.242.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "aabZOv9R7DZ1ENjPMXR1lwAAAcw"]
[Tue Mar 03 20:51:10.031461 2026] [:error] [pid 36783:tid 36798] [client 185.192.69.196:47125] [client 185.192.69.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aabZPj4tNYh5NtLaTXe8ZQAAAAQ"]
[Tue Mar 03 20:51:12.106062 2026] [:error] [pid 36897:tid 36922] [client 185.192.69.205:59817] [client 185.192.69.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aabZQCZC69_8eM0UoutwEQAAANQ"]
[Tue Mar 03 20:51:13.908842 2026] [:error] [pid 36785:tid 36864] [client 185.192.69.187:49729] [client 185.192.69.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aabZQXhJejauENG9qTjl7gAAAI4"]
[Tue Mar 03 20:51:16.944405 2026] [:error] [pid 36785:tid 36861] [client 45.89.242.46:30287] [client 45.89.242.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aabZRHhJejauENG9qTjl9wAAAIs"]
[Tue Mar 03 20:51:18.761985 2026] [:error] [pid 36783:tid 36814] [client 185.192.69.196:51139] [client 185.192.69.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/colour.php"] [unique_id "aabZRj4tNYh5NtLaTXe8bAAAABQ"]
[Tue Mar 03 20:51:20.320809 2026] [:error] [pid 14042:tid 14063] [client 185.192.69.196:53215] [client 185.192.69.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aabZSGeHGCmSEiIBcK5zsQAAAZM"]
[Tue Mar 03 20:51:21.526529 2026] [:error] [pid 36897:tid 36915] [client 185.192.69.186:28613] [client 185.192.69.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aabZSSZC69_8eM0UoutwLgAAAM0"]
[Tue Mar 03 20:51:24.039787 2026] [:error] [pid 36783:tid 36805] [client 185.192.69.205:62635] [client 185.192.69.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aabZTD4tNYh5NtLaTXe8bwAAAAs"]
[Tue Mar 03 20:51:27.498241 2026] [:error] [pid 20872:tid 20884] [client 185.192.69.192:49341] [client 185.192.69.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aabZT4lYbNk3E_3CgBg1GwAAAQo"]
[Tue Mar 03 20:51:28.988914 2026] [:error] [pid 36785:tid 36861] [client 185.192.69.209:25423] [client 185.192.69.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/about5.php"] [unique_id "aabZUHhJejauENG9qTjmAQAAAIs"]
[Tue Mar 03 20:51:32.917505 2026] [:error] [pid 36785:tid 36871] [client 185.192.69.177:32057] [client 185.192.69.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/db.php"] [unique_id "aabZVHhJejauENG9qTjmCgAAAJU"]
[Tue Mar 03 20:51:35.167757 2026] [:error] [pid 36784:tid 36844] [client 185.192.69.201:63685] [client 185.192.69.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aabZV3NeKOSGbW9kDgTQWgAAAFU"]
[Tue Mar 03 20:51:37.944350 2026] [:error] [pid 36897:tid 36921] [client 185.192.69.206:62683] [client 185.192.69.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aabZWSZC69_8eM0UoutwVAAAANM"]
[Tue Mar 03 20:51:42.359027 2026] [:error] [pid 36783:tid 36811] [client 185.192.69.206:29811] [client 185.192.69.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aabZXj4tNYh5NtLaTXe8dAAAABE"]
[Tue Mar 03 20:51:48.087824 2026] [:error] [pid 36897:tid 36907] [client 185.192.69.189:40777] [client 185.192.69.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aabZZCZC69_8eM0UoutwcAAAAMU"]
[Tue Mar 03 20:51:50.181246 2026] [:error] [pid 14042:tid 14046] [client 45.89.242.50:54581] [client 45.89.242.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aabZZmeHGCmSEiIBcK5zwwAAAYI"]
[Tue Mar 03 20:51:52.056993 2026] [:error] [pid 36897:tid 36917] [client 185.192.69.172:54495] [client 185.192.69.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aabZaCZC69_8eM0UoutweQAAAM8"]
[Tue Mar 03 20:51:53.510154 2026] [:error] [pid 36897:tid 36913] [client 185.192.69.201:53023] [client 185.192.69.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aabZaSZC69_8eM0UoutwfQAAAMs"]
[Tue Mar 03 20:51:54.942799 2026] [:error] [pid 36785:tid 36854] [client 185.192.69.179:55377] [client 185.192.69.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aabZanhJejauENG9qTjmQwAAAIQ"]
[Tue Mar 03 20:51:57.302705 2026] [:error] [pid 36783:tid 36818] [client 185.192.69.172:60909] [client 185.192.69.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "aabZbT4tNYh5NtLaTXe8ewAAABg"]
[Tue Mar 03 20:51:58.770671 2026] [:error] [pid 36897:tid 36925] [client 185.192.69.179:51443] [client 185.192.69.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aabZbiZC69_8eM0UoutwggAAANc"]
[Tue Mar 03 20:52:00.852333 2026] [:error] [pid 36897:tid 36902] [client 185.192.69.211:63305] [client 185.192.69.211] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aabZcCZC69_8eM0UoutwhAAAAMA"]
[Tue Mar 03 20:52:01.866525 2026] [:error] [pid 62485:tid 62501] [client 185.192.69.180:60471] [client 185.192.69.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aabZcf9R7DZ1ENjPMXR1rgAAAcw"]
[Tue Mar 03 20:52:03.880167 2026] [:error] [pid 36784:tid 36840] [client 185.192.69.187:25651] [client 185.192.69.187] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aabZc3NeKOSGbW9kDgTQaQAAAFE"]
[Tue Mar 03 20:52:05.699880 2026] [:error] [pid 14042:tid 14050] [client 45.89.242.45:31311] [client 45.89.242.45] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aabZdWeHGCmSEiIBcK5z0AAAAYY"]
[Tue Mar 03 20:52:07.675081 2026] [:error] [pid 36785:tid 36870] [client 185.192.69.203:42765] [client 185.192.69.203] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aabZd3hJejauENG9qTjmYwAAAJQ"]
[Tue Mar 03 20:52:09.631191 2026] [:error] [pid 36785:tid 36873] [client 185.192.69.177:61639] [client 185.192.69.177] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aabZeXhJejauENG9qTjmawAAAJc"]
[Tue Mar 03 20:52:11.527490 2026] [:error] [pid 36897:tid 36921] [client 45.89.242.51:44677] [client 45.89.242.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aabZeyZC69_8eM0UoutwlwAAANM"]
[Tue Mar 03 20:52:15.447852 2026] [:error] [pid 36783:tid 36818] [client 185.192.69.201:49367] [client 185.192.69.201] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aabZfz4tNYh5NtLaTXe8lwAAABg"]
[Tue Mar 03 20:52:16.157843 2026] [:error] [pid 62485:tid 62491] [client 185.192.69.196:45243] [client 185.192.69.196] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aabZgP9R7DZ1ENjPMXR1swAAAcI"]
[Tue Mar 03 20:52:18.794364 2026] [:error] [pid 36897:tid 36924] [client 185.192.69.176:33719] [client 185.192.69.176] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aabZgiZC69_8eM0UoutwtQAAANY"]
[Tue Mar 03 20:52:21.887096 2026] [:error] [pid 14042:tid 14066] [client 185.192.69.190:38001] [client 185.192.69.190] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aabZhWeHGCmSEiIBcK5z3wAAAZY"]
[Tue Mar 03 20:52:24.675075 2026] [:error] [pid 36783:tid 36802] [client 185.192.69.204:52787] [client 185.192.69.204] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aabZiD4tNYh5NtLaTXe8oQAAAAg"]
[Tue Mar 03 20:52:26.993444 2026] [:error] [pid 14042:tid 14047] [client 185.192.69.202:20137] [client 185.192.69.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aabZimeHGCmSEiIBcK5z5gAAAYM"]
[Tue Mar 03 20:52:29.609745 2026] [:error] [pid 62485:tid 62505] [client 185.192.69.184:21649] [client 185.192.69.184] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aabZjf9R7DZ1ENjPMXR1uAAAAdA"]
[Tue Mar 03 20:52:31.525646 2026] [:error] [pid 36785:tid 36870] [client 185.192.69.202:28395] [client 185.192.69.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aabZj3hJejauENG9qTjmhgAAAJQ"]
[Tue Mar 03 20:52:34.628675 2026] [:error] [pid 36783:tid 36813] [client 45.89.242.46:35053] [client 45.89.242.46] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aabZkj4tNYh5NtLaTXe8sgAAABM"]
[Tue Mar 03 20:52:37.866664 2026] [:error] [pid 26186:tid 26192] [client 185.192.69.175:20273] [client 185.192.69.175] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aabZlfbZCNtk8wDak9fMzgAAAUQ"]
[Tue Mar 03 20:52:39.099297 2026] [proxy_fcgi:error] [pid 36785:tid 36854] [client 185.192.69.170:42611] AH01071: Got error 'Primary script unknown'
[Tue Mar 03 20:52:39.378521 2026] [:error] [pid 36785:tid 36853] [client 185.192.69.170:42611] [client 185.192.69.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aabZl3hJejauENG9qTjmjwAAAIM"]
[Tue Mar 03 20:52:40.797641 2026] [:error] [pid 36785:tid 36866] [client 185.192.69.192:58563] [client 185.192.69.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aabZmHhJejauENG9qTjmlAAAAJA"]
[Tue Mar 03 20:52:42.898725 2026] [:error] [pid 36785:tid 36871] [client 185.192.69.207:52679] [client 185.192.69.207] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aabZmnhJejauENG9qTjmoQAAAJU"]
[Tue Mar 03 20:52:44.597690 2026] [:error] [pid 20872:tid 20876] [client 45.89.242.48:57821] [client 45.89.242.48] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aabZnIlYbNk3E_3CgBg1KwAAAQI"]
[Tue Mar 03 20:52:47.880674 2026] [:error] [pid 14042:tid 14048] [client 185.192.69.198:58147] [client 185.192.69.198] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/wp-2019.php"] [unique_id "aabZn2eHGCmSEiIBcK5z-gAAAYQ"]
[Tue Mar 03 20:52:49.832911 2026] [:error] [pid 14042:tid 14046] [client 185.192.69.170:40441] [client 185.192.69.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aabZoWeHGCmSEiIBcK5z_QAAAYI"]
[Tue Mar 03 20:52:52.503276 2026] [:error] [pid 20872:tid 20889] [client 185.192.69.202:63625] [client 185.192.69.202] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/log.php"] [unique_id "aabZpIlYbNk3E_3CgBg1LgAAAQ8"]
[Tue Mar 03 20:52:54.112572 2026] [:error] [pid 36784:tid 36840] [client 185.192.69.192:43681] [client 185.192.69.192] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aabZpnNeKOSGbW9kDgTQrwAAAFE"]
[Tue Mar 03 20:52:55.618082 2026] [:error] [pid 20872:tid 20893] [client 185.192.69.181:30045] [client 185.192.69.181] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aabZp4lYbNk3E_3CgBg1LwAAARM"]
[Tue Mar 03 20:52:56.840159 2026] [:error] [pid 36897:tid 36909] [client 185.192.69.173:52591] [client 185.192.69.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/aw.php"] [unique_id "aabZqCZC69_8eM0Uoutw9AAAAMc"]
[Tue Mar 03 20:53:00.082219 2026] [:error] [pid 14042:tid 14048] [client 185.192.69.170:20589] [client 185.192.69.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/db.php"] [unique_id "aabZrGeHGCmSEiIBcK50BAAAAYQ"]
[Tue Mar 03 20:53:01.343451 2026] [:error] [pid 36897:tid 36902] [client 185.192.69.197:28067] [client 185.192.69.197] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/install.php"] [unique_id "aabZrSZC69_8eM0Uoutw_QAAAMA"]
[Tue Mar 03 20:53:03.575167 2026] [:error] [pid 36783:tid 36810] [client 185.192.69.209:28647] [client 185.192.69.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aabZrz4tNYh5NtLaTXe8ygAAABA"]
[Tue Mar 03 20:53:04.306928 2026] [:error] [pid 36785:tid 36861] [client 185.192.69.189:47995] [client 185.192.69.189] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aabZsHhJejauENG9qTjmyQAAAIs"]
[Tue Mar 03 20:53:05.512728 2026] [:error] [pid 36785:tid 36874] [client 185.192.69.173:24867] [client 185.192.69.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/template-less.php"] [unique_id "aabZsXhJejauENG9qTjmzwAAAJg"]
[Tue Mar 03 20:53:06.512895 2026] [:error] [pid 36785:tid 36856] [client 45.89.242.44:38797] [client 45.89.242.44] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aabZsnhJejauENG9qTjm0AAAAIY"]
[Tue Mar 03 20:53:10.422717 2026] [:error] [pid 36785:tid 36871] [client 185.192.69.193:36655] [client 185.192.69.193] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/min.php"] [unique_id "aabZtnhJejauENG9qTjm4gAAAJU"]
[Tue Mar 03 20:53:12.498210 2026] [:error] [pid 36785:tid 36866] [client 185.192.69.209:59851] [client 185.192.69.209] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aabZuHhJejauENG9qTjm6gAAAJA"]
[Tue Mar 03 20:53:14.921127 2026] [:error] [pid 62485:tid 62506] [client 185.192.69.179:28249] [client 185.192.69.179] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/file.php"] [unique_id "aabZuv9R7DZ1ENjPMXR1yAAAAdE"]
[Tue Mar 03 20:53:17.155453 2026] [:error] [pid 36785:tid 36869] [client 185.192.69.186:32493] [client 185.192.69.186] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aabZvXhJejauENG9qTjm-QAAAJM"]
[Tue Mar 03 20:53:18.694482 2026] [:error] [pid 20872:tid 20890] [client 185.192.69.205:33803] [client 185.192.69.205] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/load.php"] [unique_id "aabZvolYbNk3E_3CgBg1OAAAARA"]
[Tue Mar 03 20:53:20.028491 2026] [:error] [pid 26186:tid 26200] [client 45.89.242.50:38747] [client 45.89.242.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aabZwPbZCNtk8wDak9fM2gAAAUw"]
[Tue Mar 03 20:53:22.525506 2026] [:error] [pid 36897:tid 36910] [client 185.192.69.171:59577] [client 185.192.69.171] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aabZwiZC69_8eM0UoutxDQAAAMg"]
[Tue Mar 03 20:53:25.114080 2026] [:error] [pid 36897:tid 36906] [client 185.192.69.180:25689] [client 185.192.69.180] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aabZxSZC69_8eM0UoutxFwAAAMQ"]
[Tue Mar 03 20:53:26.813986 2026] [:error] [pid 36897:tid 36913] [client 185.192.69.172:50359] [client 185.192.69.172] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aabZxiZC69_8eM0UoutxHQAAAMs"]
[Tue Mar 03 20:53:29.495858 2026] [:error] [pid 36897:tid 36906] [client 45.89.242.50:64941] [client 45.89.242.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aabZySZC69_8eM0UoutxMQAAAMQ"]
[Tue Mar 03 20:53:30.657528 2026] [:error] [pid 36783:tid 36816] [client 45.89.242.51:63383] [client 45.89.242.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aabZyj4tNYh5NtLaTXe83AAAABY"]
[Tue Mar 03 20:53:32.239036 2026] [:error] [pid 36785:tid 36858] [client 45.89.242.47:21763] [client 45.89.242.47] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aabZzHhJejauENG9qTjnAwAAAIg"]
[Tue Mar 03 20:53:38.321020 2026] [:error] [pid 36785:tid 36850] [client 185.192.69.191:48191] [client 185.192.69.191] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/system.php"] [unique_id "aabZ0nhJejauENG9qTjnGQAAAIA"]
[Tue Mar 03 20:53:42.020191 2026] [:error] [pid 36897:tid 36918] [client 185.192.69.173:33949] [client 185.192.69.173] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aabZ1iZC69_8eM0UoutxXwAAANA"]
[Tue Mar 03 20:53:45.026990 2026] [:error] [pid 36785:tid 36871] [client 45.89.242.50:48277] [client 45.89.242.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aabZ2XhJejauENG9qTjnOwAAAJU"]
[Tue Mar 03 20:53:46.883072 2026] [:error] [pid 36784:tid 36837] [client 45.89.242.51:21325] [client 45.89.242.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aabZ2nNeKOSGbW9kDgTQygAAAE4"]
[Tue Mar 03 20:53:48.005045 2026] [:error] [pid 36897:tid 36917] [client 45.89.242.50:63827] [client 45.89.242.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aabZ3CZC69_8eM0UoutxbwAAAM8"]
[Tue Mar 03 22:05:31.530125 2026] [:error] [pid 36897:tid 36916] [client 20.151.200.236:35884] [client 20.151.200.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ot.php"] [unique_id "aabqqyZC69_8eM0UouubvAAAAM4"]
[Tue Mar 03 22:05:32.421105 2026] [:error] [pid 36784:tid 36829] [client 20.151.200.236:59525] [client 20.151.200.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ot.php"] [unique_id "aabqrHNeKOSGbW9kDgTqkAAAAEY"]
[Tue Mar 03 22:05:33.265622 2026] [:error] [pid 26186:tid 26201] [client 20.151.200.236:37299] [client 20.151.200.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ot.php"] [unique_id "aabqrfbZCNtk8wDak9fX3wAAAU0"]
[Tue Mar 03 22:05:34.110735 2026] [:error] [pid 36897:tid 36911] [client 20.151.200.236:60800] [client 20.151.200.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ot.php"] [unique_id "aabqriZC69_8eM0UouubwgAAAMk"]
[Tue Mar 03 23:40:57.401810 2026] [:error] [pid 20872:tid 20886] [client 20.151.116.226:49364] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wk/index.php"] [unique_id "aacBCYlYbNk3E_3CgBhFLAAAAQw"]
[Tue Mar 03 23:40:58.236139 2026] [:error] [pid 36785:tid 36855] [client 20.151.116.226:49362] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wk/index.php"] [unique_id "aacBCnhJejauENG9qTgtCwAAAIU"]
[Tue Mar 03 23:40:59.060133 2026] [:error] [pid 36785:tid 36869] [client 20.151.116.226:49378] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wk/index.php"] [unique_id "aacBC3hJejauENG9qTgtDgAAAJM"]
[Tue Mar 03 23:40:59.902407 2026] [:error] [pid 36784:tid 36835] [client 20.151.116.226:49367] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wk/index.php"] [unique_id "aacBC3NeKOSGbW9kDgQM0QAAAEw"]
[Wed Mar 04 00:00:14.766116 2026] [:error] [pid 36784:tid 36825] [client 20.127.131.187:4126] [client 20.127.131.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aacFjnNeKOSGbW9kDgQU_gAAAEI"]
[Wed Mar 04 00:00:16.109637 2026] [:error] [pid 36783:tid 36801] [client 20.127.131.187:4134] [client 20.127.131.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aacFkD4tNYh5NtLaTXfrbQAAAAc"]
[Wed Mar 04 00:00:18.177161 2026] [:error] [pid 36785:tid 36851] [client 20.127.131.187:4802] [client 20.127.131.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aacFknhJejauENG9qTg1zgAAAIE"]
[Wed Mar 04 00:00:20.603921 2026] [:error] [pid 36785:tid 36861] [client 20.127.131.187:4842] [client 20.127.131.187] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aacFlHhJejauENG9qTg12gAAAIs"]
[Wed Mar 04 00:16:35.380572 2026] [:error] [pid 36897:tid 36925] [client 20.151.116.226:61914] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aacJYyZC69_8eM0UouvnfwAAANc"]
[Wed Mar 04 00:16:36.233637 2026] [:error] [pid 36783:tid 36797] [client 20.151.116.226:61901] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aacJZD4tNYh5NtLaTXfvKQAAAAM"]
[Wed Mar 04 00:16:37.070001 2026] [:error] [pid 36785:tid 36862] [client 20.151.116.226:61913] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aacJZXhJejauENG9qThAFwAAAIw"]
[Wed Mar 04 00:16:37.918119 2026] [:error] [pid 36897:tid 36903] [client 20.151.116.226:61932] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aacJZSZC69_8eM0UouvnhgAAAME"]
[Wed Mar 04 00:55:05.547511 2026] [:error] [pid 48405:tid 48570] [client 20.151.200.236:7675] [client 20.151.200.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aacSaRBIGeGp5MBz7gJpoAAAAAE"]
[Wed Mar 04 00:55:06.406511 2026] [:error] [pid 48807:tid 48817] [client 20.151.200.236:7666] [client 20.151.200.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aacSag9v35BN-51vqYZlhAAAAQg"]
[Wed Mar 04 00:55:07.246843 2026] [:error] [pid 48407:tid 48697] [client 20.151.200.236:7642] [client 20.151.200.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aacSaz7Td6SiHn8fwfnBHgAAAIc"]
[Wed Mar 04 00:55:08.090140 2026] [:error] [pid 48406:tid 48674] [client 20.151.200.236:7658] [client 20.151.200.236] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aacSbDStn8zJHlZMxFgKAgAAAEw"]
[Wed Mar 04 01:43:46.353513 2026] [:error] [pid 48807:tid 48821] [client 20.220.211.162:45156] [client 20.220.211.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wk/index.php"] [unique_id "aacd0g9v35BN-51vqYaEoQAAAQw"]
[Wed Mar 04 01:43:47.227755 2026] [:error] [pid 48407:tid 48699] [client 20.220.211.162:14692] [client 20.220.211.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wk/index.php"] [unique_id "aacd0z7Td6SiHn8fwfnXOQAAAIk"]
[Wed Mar 04 01:43:48.082967 2026] [:error] [pid 48406:tid 48660] [client 20.220.211.162:37487] [client 20.220.211.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wk/index.php"] [unique_id "aacd1DStn8zJHlZMxFgYHAAAAEA"]
[Wed Mar 04 01:43:48.935897 2026] [:error] [pid 48406:tid 48686] [client 20.220.211.162:40506] [client 20.220.211.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wk/index.php"] [unique_id "aacd1DStn8zJHlZMxFgYHgAAAFg"]
[Wed Mar 04 03:24:47.854532 2026] [:error] [pid 48807:tid 48830] [client 20.151.116.226:49856] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aac1fw9v35BN-51vqYa7XQAAARU"]
[Wed Mar 04 03:24:48.689228 2026] [:error] [pid 48407:tid 48712] [client 20.151.116.226:49918] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aac1gD7Td6SiHn8fwfn9twAAAJU"]
[Wed Mar 04 03:24:49.538318 2026] [:error] [pid 48407:tid 48693] [client 20.151.116.226:49864] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aac1gT7Td6SiHn8fwfn9vgAAAIM"]
[Wed Mar 04 03:24:50.366885 2026] [:error] [pid 48407:tid 48690] [client 20.151.116.226:49886] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aac1gj7Td6SiHn8fwfn9xgAAAIE"]
[Wed Mar 04 03:44:13.362624 2026] [:error] [pid 14052:tid 14065] [client 20.220.211.162:54223] [client 20.220.211.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wk/index.php"] [unique_id "aac6DXvGZB0eU0P5_AtNbQAAAMk"]
[Wed Mar 04 03:44:14.221000 2026] [:error] [pid 14052:tid 14075] [client 20.220.211.162:13439] [client 20.220.211.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wk/index.php"] [unique_id "aac6DnvGZB0eU0P5_AtNbwAAANM"]
[Wed Mar 04 03:44:15.066534 2026] [:error] [pid 14052:tid 14059] [client 20.220.211.162:13416] [client 20.220.211.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wk/index.php"] [unique_id "aac6D3vGZB0eU0P5_AtNcwAAAMM"]
[Wed Mar 04 03:44:15.900490 2026] [:error] [pid 14052:tid 14074] [client 20.220.211.162:54232] [client 20.220.211.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wk/index.php"] [unique_id "aac6D3vGZB0eU0P5_AtNegAAANI"]
[Wed Mar 04 03:58:50.816019 2026] [:error] [pid 18681:tid 18695] [client 20.151.116.226:8040] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aac9eqE_TuZYUBveWkVqfAAAAMw"]
[Wed Mar 04 03:58:51.661493 2026] [:error] [pid 18681:tid 18707] [client 20.151.116.226:7305] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aac9e6E_TuZYUBveWkVqiAAAANg"]
[Wed Mar 04 03:58:52.502101 2026] [:error] [pid 18555:tid 18640] [client 20.151.116.226:7334] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aac9fDQeUDANiOsQ3GdPiAAAAJU"]
[Wed Mar 04 03:58:53.350313 2026] [:error] [pid 18681:tid 18703] [client 20.151.116.226:8019] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aac9faE_TuZYUBveWkVqjgAAANQ"]
[Wed Mar 04 04:43:19.668377 2026] [:error] [pid 18555:tid 18627] [client 142.248.80.175:62370] [client 142.248.80.175] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.248.80.175, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aadH5zQeUDANiOsQ3GdhawAAAIg"]
[Wed Mar 04 04:43:20.173070 2026] [:error] [pid 54487:tid 54505] [client 142.248.80.175:62445] [client 142.248.80.175] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.248.80.175, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aadH6PN8030QMpFXddvz-QAAARA"], referer: https://www.google.com/search?q=wordpress
[Wed Mar 04 04:43:20.375180 2026] [:error] [pid 18555:tid 18630] [client 142.248.80.175:62370] [client 142.248.80.175] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 142.248.80.175, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aadH6DQeUDANiOsQ3GdhbQAAAIs"], referer: https://www.google.com/search?q=wordpress
[Wed Mar 04 06:58:45.366229 2026] [:error] [pid 18554:tid 18595] [client 20.151.116.226:49346] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/function.php"] [unique_id "aadnpZ0fKmKeTIK7QS3GOQAAAEM"]
[Wed Mar 04 06:58:46.230549 2026] [:error] [pid 18554:tid 18616] [client 20.151.116.226:50023] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/function.php"] [unique_id "aadnpp0fKmKeTIK7QS3GPgAAAFg"]
[Wed Mar 04 06:58:47.067491 2026] [:error] [pid 18554:tid 18603] [client 20.151.116.226:49996] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/function.php"] [unique_id "aadnp50fKmKeTIK7QS3GQgAAAEs"]
[Wed Mar 04 06:58:47.932036 2026] [:error] [pid 18681:tid 18690] [client 20.151.116.226:50036] [client 20.151.116.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/function.php"] [unique_id "aadnp6E_TuZYUBveWkWu5QAAAMc"]
[Sat Mar 07 07:59:29.856673 2026] [:error] [pid 4609:tid 4644] [client 20.219.23.223:7602] [client 20.219.23.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/"] [unique_id "aatqYeP7JMxUbw4Fd1ZjKgAAANA"]
[Sat Mar 07 07:59:30.417317 2026] [:error] [pid 4315:tid 4464] [client 20.219.23.223:7589] [client 20.219.23.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/"] [unique_id "aatqYtDEK9AXzxu9OShSYgAAAJA"]
[Sat Mar 07 07:59:31.004716 2026] [:error] [pid 4315:tid 4462] [client 20.219.23.223:2477] [client 20.219.23.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/"] [unique_id "aatqY9DEK9AXzxu9OShSZAAAAI8"]
[Sat Mar 07 07:59:31.563825 2026] [:error] [pid 4609:tid 4633] [client 20.219.23.223:2468] [client 20.219.23.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/"] [unique_id "aatqY-P7JMxUbw4Fd1ZjLQAAAMU"]
[Sat Mar 07 17:57:09.201010 2026] [:error] [pid 52484:tid 52525] [client 89.163.146.197:55148] [client 89.163.146.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/txets.php"] [unique_id "aav2dfE9AnX6zUICFeSI5AAAARU"], referer: www.google.com
[Sun Mar 08 17:24:47.792712 2026] [:error] [pid 22786:tid 22825] [client 45.149.173.219:49444] [client 45.149.173.219] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 45.149.173.219, incrementing ddos counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aa1AX3PuJewMN2jPbdXPKwAAAxg"]
[Sun Mar 08 17:24:49.633974 2026] [:error] [pid 22786:tid 22810] [client 45.149.173.219:49444] [client 45.149.173.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "aa1AYXPuJewMN2jPbdXPOgAAAwk"]
[Sun Mar 08 17:24:50.230108 2026] [:error] [pid 22786:tid 22804] [client 45.149.173.219:49452] [client 45.149.173.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "aa1AYnPuJewMN2jPbdXPPwAAAwM"]
[Sun Mar 08 17:24:50.826710 2026] [:error] [pid 22786:tid 22805] [client 45.149.173.219:49454] [client 45.149.173.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "aa1AYnPuJewMN2jPbdXPQQAAAwQ"]
[Sun Mar 08 17:24:51.425585 2026] [:error] [pid 22786:tid 22801] [client 45.149.173.219:49468] [client 45.149.173.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "aa1AY3PuJewMN2jPbdXPQgAAAwA"]
[Sun Mar 08 17:24:52.022687 2026] [:error] [pid 22786:tid 22823] [client 45.149.173.219:49482] [client 45.149.173.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "aa1AZHPuJewMN2jPbdXPRwAAAxY"]
[Sun Mar 08 17:24:52.637612 2026] [:error] [pid 22788:tid 22870] [client 45.149.173.219:49492] [client 45.149.173.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "aa1AZEhwluk21OG9mSfwUQAAA48"]
[Sun Mar 08 17:24:53.244075 2026] [:error] [pid 22786:tid 22809] [client 45.149.173.219:49506] [client 45.149.173.219] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "aa1AZXPuJewMN2jPbdXPSQAAAwg"]
[Mon Mar 09 03:33:53.488587 2026] [:error] [pid 38777:tid 38806] [client 20.196.201.163:11606] [client 20.196.201.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/"] [unique_id "aa3PIfYEAfI859jIEjRRzQAAAMk"]
[Mon Mar 09 03:33:54.040481 2026] [:error] [pid 57274:tid 57303] [client 20.196.201.163:9759] [client 20.196.201.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/"] [unique_id "aa3PIuliII8yROA0oYRJjQAAAQw"]
[Mon Mar 09 03:33:54.601654 2026] [:error] [pid 57274:tid 57296] [client 20.196.201.163:9564] [client 20.196.201.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/"] [unique_id "aa3PIuliII8yROA0oYRJmAAAAQU"]
[Mon Mar 09 03:33:55.192882 2026] [:error] [pid 38498:tid 38611] [client 20.196.201.163:3225] [client 20.196.201.163] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/"] [unique_id "aa3PI5PA68xWaIg4ZV_GswAAABU"]
[Mon Mar 09 05:39:21.475698 2026] [:error] [pid 5787:tid 5931] [client 20.211.123.94:5264] [client 20.211.123.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/"] [unique_id "aa3sibGpMgQ18gGUaFNoxwAAAIk"]
[Mon Mar 09 05:39:21.538714 2026] [:error] [pid 6074:tid 6114] [client 20.211.123.94:5268] [client 20.211.123.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/"] [unique_id "aa3siRgvXHMVGYw_ElzKlwAAANc"]
[Mon Mar 09 05:39:21.626365 2026] [:error] [pid 6074:tid 6115] [client 20.211.123.94:3173] [client 20.211.123.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/"] [unique_id "aa3siRgvXHMVGYw_ElzKmAAAANg"]
[Mon Mar 09 05:39:21.690589 2026] [:error] [pid 17485:tid 17492] [client 20.211.123.94:5263] [client 20.211.123.94] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/"] [unique_id "aa3sidQOL_kxQEc1PTBuEQAAAQQ"]
[Mon Mar 09 11:31:19.420850 2026] [:error] [pid 5779:tid 5871] [client 3.20.237.190:63488] [client 3.20.237.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aa4_BwaHbHwtklaurgWWZQAAABA"]
[Mon Mar 09 11:31:20.590340 2026] [:error] [pid 2145:tid 2167] [client 3.20.237.190:50169] [client 3.20.237.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aa4_CHczzpD9XHtKwuCiNQAAAUE"]
[Mon Mar 09 11:31:21.643803 2026] [:error] [pid 6074:tid 6096] [client 3.20.237.190:50957] [client 3.20.237.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aa4_CRgvXHMVGYw_Elx6aQAAAMU"]
[Mon Mar 09 11:31:23.188047 2026] [:error] [pid 5779:tid 5864] [client 3.20.237.190:51817] [client 3.20.237.190] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "aa4_CwaHbHwtklaurgWWaQAAAAk"]
[Tue Mar 10 16:44:33.182549 2026] [autoindex:error] [pid 21318:tid 21383] [client 139.59.32.166:63645] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Tue Mar 10 19:49:26.906134 2026] [autoindex:error] [pid 14506:tid 14522] [client 139.59.32.166:46370] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Wed Mar 11 01:07:46.173682 2026] [:error] [pid 7307:tid 7324] [client 180.93.232.184:35822] [client 180.93.232.184] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env"] [unique_id "abBP4utE6Vj1tEJkynHBgAAAAM8"]
2026/03/11 03:52:26 [error] 3468#3468: *427045 access forbidden by rule, client: 68.183.151.56, server: measureyourcause.measureyourbrand.com.au, request: "GET /.git/config HTTP/1.1", host: "www.measureyourcause.measureyourbrand.com.au"
[Wed Mar 11 15:20:13.427613 2026] [:error] [pid 23482:tid 23492] [client 134.199.164.121:60810] [client 134.199.164.121] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env"] [unique_id "abEXrcrYaTAnN_mLXymi3wAAAQc"]
2026/03/11 15:20:13 [error] 53948#53948: *847441 access forbidden by rule, client: 134.199.164.121, server: measureyourcause.measureyourbrand.com.au, request: "GET /.git/config HTTP/1.1", host: "measureyourcause.measureyourbrand.com.au"
2026/03/11 15:20:13 [error] 53941#53941: *847439 upstream prematurely closed connection while reading response header from upstream, client: 134.199.164.121, server: measureyourcause.measureyourbrand.com.au, request: "POST /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php HTTP/1.1", upstream: "http://103.4.122.14:8181/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php", host: "measureyourcause.measureyourbrand.com.au"
[Wed Mar 11 15:20:13.531077 2026] [:error] [pid 23482:tid 23491] [client 134.199.164.121:60862] [client 134.199.164.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "abEXrcrYaTAnN_mLXymi8gAAAQY"]
2026/03/11 15:20:13 [error] 53947#53947: *847442 upstream prematurely closed connection while reading response header from upstream, client: 134.199.164.121, server: measureyourcause.measureyourbrand.com.au, request: "GET /vendor/laravel-filemanager/js/script.js HTTP/1.1", upstream: "http://103.4.122.14:8181/vendor/laravel-filemanager/js/script.js", host: "measureyourcause.measureyourbrand.com.au"
[Wed Mar 11 15:20:13.531333 2026] [:error] [pid 53954:tid 53985] [client 134.199.164.121:60866] [client 134.199.164.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vendor/laravel-filemanager/js/script.js"] [unique_id "abEXrbbD1J_Nhe6jce2IpgAAAEE"]
2026/03/11 15:20:13 [error] 53948#53948: *847441 upstream prematurely closed connection while reading response header from upstream, client: 134.199.164.121, server: measureyourcause.measureyourbrand.com.au, request: "POST / HTTP/1.1", upstream: "http://103.4.122.14:8181/", host: "measureyourcause.measureyourbrand.com.au"
[Wed Mar 11 15:20:13.531697 2026] [:error] [pid 54045:tid 54067] [client 134.199.164.121:60864] [client 134.199.164.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/"] [unique_id "abEXrSRcKzQ1f-N8TgRL5AAAANQ"]
[Wed Mar 11 15:20:13.547434 2026] [:error] [pid 23482:tid 23488] [client 134.199.164.121:60880] [client 134.199.164.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/vendor/laravel-filemanager/js/script.js"] [unique_id "abEXrcrYaTAnN_mLXymi9gAAAQM"]
2026/03/11 15:20:13 [error] 53941#53941: *847439 upstream prematurely closed connection while reading response header from upstream, client: 134.199.164.121, server: measureyourcause.measureyourbrand.com.au, request: "GET /public/vendor/laravel-filemanager/js/script.js HTTP/1.1", upstream: "http://103.4.122.14:8181/public/vendor/laravel-filemanager/js/script.js", host: "measureyourcause.measureyourbrand.com.au"
[Wed Mar 11 15:20:13.548849 2026] [:error] [pid 53955:tid 54026] [client 134.199.164.121:60882] [client 134.199.164.121] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/_ignition/execute-solution"] [unique_id "abEXrdP1Uf6qBkbxZg_IYAAAAIc"]
2026/03/11 15:20:13 [error] 53948#53948: *847441 upstream prematurely closed connection while reading response header from upstream, client: 134.199.164.121, server: measureyourcause.measureyourbrand.com.au, request: "GET /_ignition/execute-solution HTTP/1.1", upstream: "http://103.4.122.14:8181/_ignition/execute-solution", host: "measureyourcause.measureyourbrand.com.au"
[Thu Mar 12 19:38:39.597795 2026] [:error] [pid 11986:tid 12034] [client 20.151.7.111:31088] [client 20.151.7.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abKlvzKqY2w-DVCrxTD-oAAAAdA"]
[Thu Mar 12 19:38:40.732306 2026] [:error] [pid 51456:tid 51490] [client 20.151.7.111:31435] [client 20.151.7.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abKlwBXu8LzVixNGr0ticQAAAEM"]
[Thu Mar 12 19:38:43.962071 2026] [:error] [pid 20529:tid 20580] [client 20.151.7.111:31092] [client 20.151.7.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abKlw24BhuYHZriajQ9-ewAAA00"]
[Thu Mar 12 19:38:45.734534 2026] [:error] [pid 11953:tid 11976] [client 20.151.7.111:31045] [client 20.151.7.111] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abKlxZudzqsnq3bvtDYsUAAAAVU"]
[Fri Mar 13 00:38:38.491622 2026] [:error] [pid 47893:tid 47981] [client 20.151.108.217:17088] [client 20.151.108.217] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.151.108.217 on wp-login.php, counter = 26"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "abLsDgYSdu6aqxO_YucV8AAAAIY"]
[Fri Mar 13 00:38:39.380221 2026] [:error] [pid 47893:tid 47992] [client 20.151.108.217:16703] [client 20.151.108.217] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.151.108.217 on wp-login.php, counter = 26"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/2024/"] [unique_id "abLsDwYSdu6aqxO_YucV8wAAAJE"]
[Fri Mar 13 00:38:40.371083 2026] [:error] [pid 47892:tid 47966] [client 20.151.108.217:16657] [client 20.151.108.217] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.151.108.217, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "abLsEDNdN5Yd7YcKfyX6PwAAAFI"]
[Fri Mar 13 00:38:40.371179 2026] [:error] [pid 47892:tid 47966] [client 20.151.108.217:16657] [client 20.151.108.217] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.151.108.217 on wp-login.php, counter = 27"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "abLsEDNdN5Yd7YcKfyX6PwAAAFI"]
[Fri Mar 13 00:38:41.314278 2026] [:error] [pid 47894:tid 48018] [client 20.151.108.217:16691] [client 20.151.108.217] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.151.108.217 on wp-login.php, counter = 27"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-corn-sample.php"] [unique_id "abLsEZiuFpRtVNR6uOJwCAAAARA"]
[Fri Mar 13 00:38:42.273561 2026] [:error] [pid 47892:tid 47964] [client 20.151.108.217:16686] [client 20.151.108.217] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.151.108.217 on wp-login.php, counter = 27"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/"] [unique_id "abLsEjNdN5Yd7YcKfyX6QgAAAFA"]
[Fri Mar 13 00:38:43.184629 2026] [:error] [pid 47894:tid 48019] [client 20.151.108.217:16681] [client 20.151.108.217] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.151.108.217 on wp-login.php, counter = 27"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "abLsE5iuFpRtVNR6uOJwCgAAARE"]
[Fri Mar 13 00:38:44.123459 2026] [:error] [pid 56003:tid 56016] [client 20.151.108.217:16695] [client 20.151.108.217] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.151.108.217 on wp-login.php, counter = 27"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/index.php"] [unique_id "abLsFBQtM0oeMdFWe6VMSgAAAMs"]
[Fri Mar 13 00:38:45.018557 2026] [:error] [pid 47894:tid 48022] [client 20.151.108.217:17090] [client 20.151.108.217] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.151.108.217 on wp-login.php, counter = 27"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/server.php"] [unique_id "abLsFZiuFpRtVNR6uOJwDwAAARQ"]
[Fri Mar 13 00:38:45.984935 2026] [:error] [pid 56003:tid 56009] [client 20.151.108.217:16646] [client 20.151.108.217] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.151.108.217 on wp-login.php, counter = 27"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/library/"] [unique_id "abLsFRQtM0oeMdFWe6VMTQAAAMQ"]
[Fri Mar 13 00:38:46.899916 2026] [:error] [pid 56003:tid 56019] [client 20.151.108.217:16689] [client 20.151.108.217] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.151.108.217 on wp-login.php, counter = 27"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/"] [unique_id "abLsFhQtM0oeMdFWe6VMUgAAAM4"]
[Fri Mar 13 00:38:47.773520 2026] [:error] [pid 56003:tid 56005] [client 20.151.108.217:16690] [client 20.151.108.217] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.151.108.217 on wp-login.php, counter = 27"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wso.php"] [unique_id "abLsFxQtM0oeMdFWe6VMWwAAAMA"]
[Fri Mar 13 00:38:48.638650 2026] [:error] [pid 56003:tid 56017] [client 20.151.108.217:17108] [client 20.151.108.217] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.151.108.217 on wp-login.php, counter = 27"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abLsGBQtM0oeMdFWe6VMcAAAAMw"]
[Fri Mar 13 00:38:49.541891 2026] [:error] [pid 47892:tid 47949] [client 20.151.108.217:16654] [client 20.151.108.217] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.151.108.217 on wp-login.php, counter = 27"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-file.php"] [unique_id "abLsGTNdN5Yd7YcKfyX6TgAAAEE"]
[Fri Mar 13 00:38:50.522176 2026] [:error] [pid 48029:tid 48052] [client 20.151.108.217:16692] [client 20.151.108.217] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.151.108.217 on wp-login.php, counter = 27"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "abLsGm7cFKMmtdGhPH-v1QAAABU"]
[Fri Mar 13 00:38:51.451753 2026] [:error] [pid 47893:tid 47985] [client 20.151.108.217:16668] [client 20.151.108.217] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.151.108.217 on wp-login.php, counter = 27"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wk/index.php"] [unique_id "abLsGwYSdu6aqxO_YucWBQAAAIo"]
[Fri Mar 13 00:38:52.328685 2026] [:error] [pid 48029:tid 48049] [client 20.151.108.217:16664] [client 20.151.108.217] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.151.108.217 on wp-login.php, counter = 27"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin.php"] [unique_id "abLsHG7cFKMmtdGhPH-v2QAAABI"]
[Fri Mar 13 00:38:53.188645 2026] [:error] [pid 48029:tid 48042] [client 20.151.108.217:16650] [client 20.151.108.217] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.151.108.217 on wp-login.php, counter = 27"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/admin.php"] [unique_id "abLsHW7cFKMmtdGhPH-v2wAAAAs"]
[Fri Mar 13 00:38:54.168393 2026] [:error] [pid 48029:tid 48051] [client 20.151.108.217:17095] [client 20.151.108.217] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.151.108.217 on wp-login.php, counter = 27"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/"] [unique_id "abLsHm7cFKMmtdGhPH-v3wAAABQ"]
[Fri Mar 13 00:38:55.115161 2026] [:error] [pid 48029:tid 48053] [client 20.151.108.217:17127] [client 20.151.108.217] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.151.108.217 on wp-login.php, counter = 27"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmrlpc.php"] [unique_id "abLsH27cFKMmtdGhPH-v5AAAABY"]
[Fri Mar 13 00:38:56.057034 2026] [:error] [pid 48029:tid 48045] [client 20.151.108.217:17109] [client 20.151.108.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "abLsIG7cFKMmtdGhPH-v5wAAAA4"]
[Fri Mar 13 00:38:57.078082 2026] [:error] [pid 47892:tid 47964] [client 20.151.108.217:16684] [client 20.151.108.217] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.151.108.217 on wp-login.php, counter = 27"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/file.php"] [unique_id "abLsITNdN5Yd7YcKfyX6WQAAAFA"]
[Fri Mar 13 00:38:58.009838 2026] [:error] [pid 47892:tid 47965] [client 20.151.108.217:17030] [client 20.151.108.217] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.151.108.217 on wp-login.php, counter = 27"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/fields/"] [unique_id "abLsIjNdN5Yd7YcKfyX6XAAAAFE"]
[Fri Mar 13 00:38:58.946705 2026] [:error] [pid 47892:tid 47948] [client 20.151.108.217:16700] [client 20.151.108.217] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.151.108.217 on wp-login.php, counter = 27"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/atomlib.php"] [unique_id "abLsIjNdN5Yd7YcKfyX6XgAAAEA"]
[Fri Mar 13 00:38:59.911744 2026] [:error] [pid 47892:tid 47962] [client 20.151.108.217:16647] [client 20.151.108.217] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.151.108.217 on wp-login.php, counter = 27"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/css/index.php"] [unique_id "abLsIzNdN5Yd7YcKfyX6YQAAAE4"]
[Fri Mar 13 00:39:00.828013 2026] [:error] [pid 48029:tid 48046] [client 20.151.108.217:17104] [client 20.151.108.217] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.151.108.217 on wp-login.php, counter = 27"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/et-cache/"] [unique_id "abLsJG7cFKMmtdGhPH-v7wAAAA8"]
[Fri Mar 13 00:39:01.938657 2026] [:error] [pid 47893:tid 47996] [client 20.151.108.217:16645] [client 20.151.108.217] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.151.108.217 on wp-login.php, counter = 27"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "abLsJQYSdu6aqxO_YucWEwAAAJU"]
[Fri Mar 13 00:39:02.949242 2026] [:error] [pid 47893:tid 47983] [client 20.151.108.217:16697] [client 20.151.108.217] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.151.108.217 on wp-login.php, counter = 27"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/admin.php"] [unique_id "abLsJgYSdu6aqxO_YucWGgAAAIg"]
[Fri Mar 13 00:39:04.003382 2026] [:error] [pid 56003:tid 56010] [client 20.151.108.217:17098] [client 20.151.108.217] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.151.108.217 on wp-login.php, counter = 27"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/index.php"] [unique_id "abLsKBQtM0oeMdFWe6VMdgAAAMU"]
[Fri Mar 13 00:39:05.065977 2026] [:error] [pid 48029:tid 48041] [client 20.151.108.217:17139] [client 20.151.108.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "abLsKW7cFKMmtdGhPH-v8AAAAAo"]
[Fri Mar 13 00:39:05.993846 2026] [:error] [pid 56003:tid 56012] [client 20.151.108.217:16663] [client 20.151.108.217] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.151.108.217 on wp-login.php, counter = 27"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/"] [unique_id "abLsKRQtM0oeMdFWe6VMeAAAAMc"]
[Fri Mar 13 00:39:06.968248 2026] [:error] [pid 56003:tid 56028] [client 20.151.108.217:16674] [client 20.151.108.217] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.151.108.217 on wp-login.php, counter = 27"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "abLsKhQtM0oeMdFWe6VMfQAAANc"]
[Fri Mar 13 00:39:07.914887 2026] [:error] [pid 56003:tid 56006] [client 20.151.108.217:17105] [client 20.151.108.217] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.151.108.217 on wp-login.php, counter = 27"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/block/"] [unique_id "abLsKxQtM0oeMdFWe6VMgQAAAME"]
[Fri Mar 13 00:39:08.850102 2026] [:error] [pid 48029:tid 48053] [client 20.151.108.217:17093] [client 20.151.108.217] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.151.108.217 on wp-login.php, counter = 27"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/as.php"] [unique_id "abLsLG7cFKMmtdGhPH-v-wAAABY"]
[Fri Mar 13 00:39:09.880628 2026] [:error] [pid 47894:tid 48003] [client 20.151.108.217:17092] [client 20.151.108.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "abLsLZiuFpRtVNR6uOJwGwAAAQE"]
[Fri Mar 13 00:39:10.850560 2026] [:error] [pid 56003:tid 56028] [client 20.151.108.217:17133] [client 20.151.108.217] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.151.108.217 on wp-login.php, counter = 27"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/buy.php"] [unique_id "abLsLhQtM0oeMdFWe6VMhwAAANc"]
[Fri Mar 13 00:39:11.828660 2026] [:error] [pid 47892:tid 47962] [client 20.151.108.217:16696] [client 20.151.108.217] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.151.108.217 on wp-login.php, counter = 27"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "abLsLzNdN5Yd7YcKfyX6YwAAAE4"]
[Fri Mar 13 00:39:12.838739 2026] [:error] [pid 47894:tid 48019] [client 20.151.108.217:16673] [client 20.151.108.217] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.151.108.217 on wp-login.php, counter = 27"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/index.php"] [unique_id "abLsMJiuFpRtVNR6uOJwHwAAARE"]
[Fri Mar 13 00:39:13.887607 2026] [:error] [pid 47893:tid 47978] [client 20.151.108.217:16701] [client 20.151.108.217] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.151.108.217 on wp-login.php, counter = 27"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about.PHP"] [unique_id "abLsMQYSdu6aqxO_YucWKAAAAIM"]
[Fri Mar 13 00:39:14.955508 2026] [:error] [pid 48029:tid 48035] [client 20.151.108.217:16655] [client 20.151.108.217] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.151.108.217 on wp-login.php, counter = 27"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "abLsMm7cFKMmtdGhPH-v_wAAAAQ"]
[Fri Mar 13 00:39:15.933481 2026] [:error] [pid 56003:tid 56008] [client 20.151.108.217:17046] [client 20.151.108.217] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.151.108.217 on wp-login.php, counter = 27"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/index.php"] [unique_id "abLsMxQtM0oeMdFWe6VMkQAAAMM"]
[Fri Mar 13 00:39:16.905660 2026] [:error] [pid 56003:tid 56017] [client 20.151.108.217:16662] [client 20.151.108.217] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.151.108.217 on wp-login.php, counter = 27"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/edit.php"] [unique_id "abLsNBQtM0oeMdFWe6VMlAAAAMw"]
[Fri Mar 13 00:39:17.953911 2026] [:error] [pid 47894:tid 48003] [client 20.151.108.217:17103] [client 20.151.108.217] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.151.108.217 on wp-login.php, counter = 27"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sf.php"] [unique_id "abLsNZiuFpRtVNR6uOJwJgAAAQE"]
[Fri Mar 13 00:39:18.974426 2026] [:error] [pid 47893:tid 47993] [client 20.151.108.217:16678] [client 20.151.108.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/index.php"] [unique_id "abLsNgYSdu6aqxO_YucWKwAAAJI"]
[Fri Mar 13 00:39:19.932730 2026] [:error] [pid 56003:tid 56028] [client 20.151.108.217:16648] [client 20.151.108.217] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.151.108.217 on wp-login.php, counter = 27"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file.php"] [unique_id "abLsNxQtM0oeMdFWe6VMnQAAANc"]
[Fri Mar 13 00:39:20.891677 2026] [:error] [pid 56003:tid 56014] [client 20.151.108.217:16680] [client 20.151.108.217] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.151.108.217 on wp-login.php, counter = 27"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/modern/"] [unique_id "abLsOBQtM0oeMdFWe6VMoAAAAMk"]
[Fri Mar 13 00:39:21.994105 2026] [:error] [pid 47893:tid 47989] [client 20.151.108.217:16966] [client 20.151.108.217] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.151.108.217 on wp-login.php, counter = 27"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/"] [unique_id "abLsOQYSdu6aqxO_YucWLgAAAI4"]
[Fri Mar 13 00:39:23.076466 2026] [:error] [pid 47893:tid 47995] [client 20.151.108.217:17100] [client 20.151.108.217] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.151.108.217 on wp-login.php, counter = 27"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/test1.php"] [unique_id "abLsOwYSdu6aqxO_YucWLwAAAJQ"]
[Fri Mar 13 00:39:24.101457 2026] [:error] [pid 47894:tid 48022] [client 20.151.108.217:16661] [client 20.151.108.217] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.151.108.217 on wp-login.php, counter = 27"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-cron.php"] [unique_id "abLsPJiuFpRtVNR6uOJwLQAAARQ"]
[Fri Mar 13 00:39:25.026902 2026] [:error] [pid 56003:tid 56026] [client 20.151.108.217:16665] [client 20.151.108.217] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.151.108.217 on wp-login.php, counter = 27"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-supports/"] [unique_id "abLsPRQtM0oeMdFWe6VMpwAAANU"]
[Fri Mar 13 00:39:25.914638 2026] [:error] [pid 47892:tid 47953] [client 20.151.108.217:17113] [client 20.151.108.217] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.151.108.217 on wp-login.php, counter = 27"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/404.php"] [unique_id "abLsPTNdN5Yd7YcKfyX6ZwAAAEU"]
[Fri Mar 13 00:39:26.923875 2026] [:error] [pid 56003:tid 56015] [client 20.151.108.217:17107] [client 20.151.108.217] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.151.108.217 on wp-login.php, counter = 27"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/1.php"] [unique_id "abLsPhQtM0oeMdFWe6VMqgAAAMo"]
[Fri Mar 13 00:39:27.814232 2026] [:error] [pid 47893:tid 47984] [client 20.151.108.217:17118] [client 20.151.108.217] ModSecurity: Access denied with code 403 (phase 1). Operator GT matched 10 at IP:wpbrute. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "18"] [id "400004"] [msg "Brute force protection triggered for 20.151.108.217 on wp-login.php, counter = 27"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/images/index.php"] [unique_id "abLsPwYSdu6aqxO_YucWNAAAAIk"]
[Fri Mar 13 01:45:30.310577 2026] [:error] [pid 56003:tid 56011] [client 157.230.169.220:62182] [client 157.230.169.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.230.169.220, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "abL7uhQtM0oeMdFWe6Vv2QAAAMY"]
[Fri Mar 13 01:45:30.755187 2026] [:error] [pid 56003:tid 56028] [client 157.230.169.220:62338] [client 157.230.169.220] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.230.169.220, incrementing brute counter"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "abL7uhQtM0oeMdFWe6Vv4AAAANc"]
[Fri Mar 13 19:38:06.383604 2026] [:error] [pid 9241:tid 9276] [client 104.28.166.127:25584] [client 104.28.166.127] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/style.php"] [unique_id "abP3Hg48xagB6AsXkJ4PBgAAAdY"]
[Fri Mar 13 21:35:31.414330 2026] [:error] [pid 60398:tid 60414] [client 4.204.233.55:65095] [client 4.204.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/chati.php"] [unique_id "abQSo0CJdGSTt6QlH2BNMQAAAos"]
[Fri Mar 13 21:35:32.258660 2026] [:error] [pid 60436:tid 60486] [client 4.204.233.55:65099] [client 4.204.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/chati.php"] [unique_id "abQSpII3PEddCArY1AabPwAAAxE"]
[Fri Mar 13 21:35:33.092422 2026] [:error] [pid 60496:tid 60505] [client 4.204.233.55:65109] [client 4.204.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/chati.php"] [unique_id "abQSpQb67oGiJ3jaL8z7_wAAA0E"]
[Fri Mar 13 21:35:33.936884 2026] [:error] [pid 55077:tid 55092] [client 4.204.233.55:65097] [client 4.204.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/chati.php"] [unique_id "abQSpd9Ul5ym4M-PlQL9BgAAAU0"]
[Fri Mar 13 22:44:24.717789 2026] [:error] [pid 60497:tid 60542] [client 4.204.233.55:32401] [client 4.204.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/chati.php"] [unique_id "abQiyBjNYgapWlkb4ljGcAAAA4s"]
[Fri Mar 13 22:44:25.550425 2026] [:error] [pid 60398:tid 60416] [client 4.204.233.55:32400] [client 4.204.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/chati.php"] [unique_id "abQiyUCJdGSTt6QlH2BXjwAAAo0"]
[Fri Mar 13 22:44:26.393644 2026] [:error] [pid 60496:tid 60511] [client 4.204.233.55:32437] [client 4.204.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/chati.php"] [unique_id "abQiygb67oGiJ3jaL8wVvgAAA0c"]
[Fri Mar 13 22:44:27.230837 2026] [:error] [pid 60497:tid 60532] [client 4.204.233.55:32426] [client 4.204.233.55] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/chati.php"] [unique_id "abQiyxjNYgapWlkb4ljGcQAAA4E"]
[Sat Mar 14 00:55:44.378540 2026] [:error] [pid 47878:tid 47949] [client 20.151.4.179:15568] [client 20.151.4.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/chati.php"] [unique_id "abRBkH8jymmmpr1jcBejwQAAAEo"]
[Sat Mar 14 00:55:45.208080 2026] [:error] [pid 47878:tid 47945] [client 20.151.4.179:57145] [client 20.151.4.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/chati.php"] [unique_id "abRBkX8jymmmpr1jcBejwwAAAEY"]
[Sat Mar 14 00:55:46.041900 2026] [:error] [pid 47905:tid 47999] [client 20.151.4.179:57141] [client 20.151.4.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/chati.php"] [unique_id "abRBkhaYZayP4o4wpJcUbwAAAUY"]
[Sat Mar 14 00:55:46.868976 2026] [:error] [pid 48070:tid 48087] [client 20.151.4.179:57147] [client 20.151.4.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/chati.php"] [unique_id "abRBkkIvrhMS5BVHxNkHzQAAAA8"]
[Sat Mar 14 02:49:29.976003 2026] [:error] [pid 47891:tid 47974] [client 20.151.4.179:52581] [client 20.151.4.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/as.php"] [unique_id "abRcOfchNnuMqi7I_WEi9QAAAIg"]
[Sat Mar 14 02:49:30.809123 2026] [:error] [pid 47878:tid 47951] [client 20.151.4.179:52598] [client 20.151.4.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/as.php"] [unique_id "abRcOn8jymmmpr1jcBfCLAAAAEw"]
[Sat Mar 14 02:49:31.633279 2026] [:error] [pid 47891:tid 47973] [client 20.151.4.179:43736] [client 20.151.4.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/as.php"] [unique_id "abRcO_chNnuMqi7I_WEjCAAAAIc"]
[Sat Mar 14 02:49:32.458984 2026] [:error] [pid 47905:tid 47995] [client 20.151.4.179:43722] [client 20.151.4.179] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/as.php"] [unique_id "abRcPBaYZayP4o4wpJdDNAAAAUI"]
[Sat Mar 14 03:51:41.652911 2026] [:error] [pid 527:tid 589] [client 20.104.119.247:64989] [client 20.104.119.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "abRqzUWSN_ai5LahAiJz8QAAAEQ"]
[Sat Mar 14 03:51:42.742117 2026] [:error] [pid 640:tid 667] [client 20.104.119.247:64922] [client 20.104.119.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "abRqzrkRlc115lSJbrBZIgAAANc"]
[Sat Mar 14 03:51:43.672196 2026] [:error] [pid 527:tid 594] [client 20.104.119.247:64964] [client 20.104.119.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "abRqz0WSN_ai5LahAiJz9QAAAEk"]
[Sat Mar 14 03:51:44.623548 2026] [:error] [pid 640:tid 668] [client 20.104.119.247:64902] [client 20.104.119.247] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "abRq0LkRlc115lSJbrBZKgAAANg"]
[Sat Mar 14 10:40:49.987098 2026] [:error] [pid 53961:tid 53965] [client 185.137.164.20:25701] [client 185.137.164.20] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.git/HEAD"] [unique_id "abTKsdczYH1OqY7y2cOF6QAAAcE"]
[Sat Mar 14 23:39:15.709025 2026] [:error] [pid 49351:tid 49374] [client 194.180.48.253:44314] [client 194.180.48.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "abWBIxzAvuOUcwe0iz-MNgAAAxQ"]
[Mon Mar 16 08:03:52.241735 2026] [:error] [pid 12768:tid 12794] [client 20.199.100.0:7759] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yaiid.php"] [unique_id "abdI6Ivjhfol0SJym0_IJwAAAZU"]
[Mon Mar 16 08:03:53.162825 2026] [:error] [pid 1411:tid 1431] [client 20.199.100.0:9461] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yaiid.php"] [unique_id "abdI6drCV4sh-le3M-2UuAAAAVE"]
[Mon Mar 16 08:03:53.916025 2026] [:error] [pid 1411:tid 1429] [client 20.199.100.0:14996] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yaiid.php"] [unique_id "abdI6drCV4sh-le3M-2UuwAAAU8"]
[Mon Mar 16 08:03:54.692781 2026] [:error] [pid 62429:tid 62499] [client 20.199.100.0:14977] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yaiid.php"] [unique_id "abdI6lewIPukhLCowEHzNQAAAIM"]
[Mon Mar 16 08:03:55.326007 2026] [:error] [pid 1411:tid 1438] [client 20.199.100.0:8183] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ta0ol.php"] [unique_id "abdI69rCV4sh-le3M-2UwQAAAVg"]
[Mon Mar 16 08:03:56.339565 2026] [:error] [pid 1411:tid 1436] [client 20.199.100.0:2917] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ta0ol.php"] [unique_id "abdI7NrCV4sh-le3M-2UygAAAVY"]
[Mon Mar 16 08:03:56.998096 2026] [:error] [pid 62427:tid 62457] [client 20.199.100.0:13221] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ta0ol.php"] [unique_id "abdI7MUPP8fzo6XzJCUm9wAAABA"]
[Mon Mar 16 08:03:57.920913 2026] [:error] [pid 52152:tid 52160] [client 20.199.100.0:2774] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ta0ol.php"] [unique_id "abdI7cA6rS_GLRd0NKWN6wAAAQU"]
[Mon Mar 16 08:03:58.555091 2026] [:error] [pid 62427:tid 62444] [client 20.199.100.0:2809] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/v3.php"] [unique_id "abdI7sUPP8fzo6XzJCUm-gAAAAM"]
[Mon Mar 16 08:03:59.285534 2026] [:error] [pid 1411:tid 1435] [client 20.199.100.0:7335] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/v3.php"] [unique_id "abdI79rCV4sh-le3M-2U1AAAAVU"]
[Mon Mar 16 08:04:00.811945 2026] [:error] [pid 52152:tid 52158] [client 20.199.100.0:7335] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/v3.php"] [unique_id "abdI8MA6rS_GLRd0NKWN8QAAAQM"]
[Mon Mar 16 08:04:02.141606 2026] [:error] [pid 1411:tid 1436] [client 20.199.100.0:7299] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/v3.php"] [unique_id "abdI8trCV4sh-le3M-2U3QAAAVY"]
[Mon Mar 16 08:04:02.957168 2026] [:error] [pid 62529:tid 62550] [client 20.199.100.0:7745] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xvs.php"] [unique_id "abdI8j84-luOVYZKK0OeagAAAM0"]
[Mon Mar 16 08:04:03.584615 2026] [:error] [pid 62428:tid 62483] [client 20.199.100.0:5616] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xvs.php"] [unique_id "abdI86rHSRXFZx1-aIHtewAAAE4"]
[Mon Mar 16 08:04:04.350260 2026] [:error] [pid 62529:tid 62545] [client 20.199.100.0:5071] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xvs.php"] [unique_id "abdI9D84-luOVYZKK0OecQAAAMg"]
[Mon Mar 16 08:04:05.552611 2026] [:error] [pid 1411:tid 1414] [client 20.199.100.0:8623] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xvs.php"] [unique_id "abdI9drCV4sh-le3M-2U5QAAAUE"]
[Mon Mar 16 08:04:06.574336 2026] [:error] [pid 62429:tid 62514] [client 20.199.100.0:13648] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fss.php"] [unique_id "abdI9lewIPukhLCowEHzPwAAAJI"]
[Mon Mar 16 08:04:07.340017 2026] [:error] [pid 62429:tid 62497] [client 20.199.100.0:13668] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fss.php"] [unique_id "abdI91ewIPukhLCowEHzRAAAAIE"]
[Mon Mar 16 08:04:08.509309 2026] [:error] [pid 62429:tid 62505] [client 20.199.100.0:6166] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fss.php"] [unique_id "abdI-FewIPukhLCowEHzSgAAAIk"]
[Mon Mar 16 08:04:09.875679 2026] [:error] [pid 12768:tid 12777] [client 20.199.100.0:2842] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fss.php"] [unique_id "abdI-Yvjhfol0SJym0_IMwAAAYQ"]
[Mon Mar 16 08:04:10.519355 2026] [:error] [pid 12822:tid 12854] [client 20.199.100.0:9470] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "abdI-oG9Ft4WPo7r7sRlCwAAAdM"]
[Mon Mar 16 08:04:11.447922 2026] [:error] [pid 1411:tid 1436] [client 20.199.100.0:2894] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "abdI-9rCV4sh-le3M-2U7QAAAVY"]
[Mon Mar 16 08:04:11.974617 2026] [:error] [pid 12822:tid 12843] [client 20.199.100.0:9588] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "abdI-4G9Ft4WPo7r7sRlEAAAAcg"]
[Mon Mar 16 08:04:13.754773 2026] [:error] [pid 12768:tid 12792] [client 20.199.100.0:2820] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "abdI_Yvjhfol0SJym0_IPgAAAZM"]
[Mon Mar 16 08:04:14.729486 2026] [:error] [pid 12822:tid 12852] [client 20.199.100.0:3172] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/utky.php"] [unique_id "abdI_oG9Ft4WPo7r7sRlEgAAAdE"]
[Mon Mar 16 08:04:15.430907 2026] [:error] [pid 62529:tid 62551] [client 20.199.100.0:3392] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/utky.php"] [unique_id "abdI_z84-luOVYZKK0OeeQAAAM4"]
[Mon Mar 16 08:04:16.359914 2026] [:error] [pid 62429:tid 62514] [client 20.199.100.0:9115] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/utky.php"] [unique_id "abdJAFewIPukhLCowEHzUgAAAJI"]
[Mon Mar 16 08:04:17.209053 2026] [:error] [pid 12822:tid 12845] [client 20.199.100.0:2942] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/utky.php"] [unique_id "abdJAYG9Ft4WPo7r7sRlFgAAAco"]
[Mon Mar 16 08:04:18.517770 2026] [:error] [pid 62428:tid 62475] [client 20.199.100.0:9458] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "abdJAqrHSRXFZx1-aIHtsgAAAEY"]
[Mon Mar 16 08:04:19.492451 2026] [:error] [pid 1411:tid 1429] [client 20.199.100.0:9454] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "abdJA9rCV4sh-le3M-2VTQAAAU8"]
[Mon Mar 16 08:04:20.368758 2026] [:error] [pid 1411:tid 1420] [client 20.199.100.0:9151] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "abdJBNrCV4sh-le3M-2VVAAAAUc"]
[Mon Mar 16 08:04:21.147523 2026] [:error] [pid 12823:tid 12885] [client 20.199.100.0:5421] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "abdJBRlVKeelxvdJEr4_CgAAAhc"]
[Mon Mar 16 08:04:21.834585 2026] [:error] [pid 12823:tid 12879] [client 20.199.100.0:13644] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gkl.php"] [unique_id "abdJBRlVKeelxvdJEr4_CwAAAhE"]
[Mon Mar 16 08:04:23.440191 2026] [:error] [pid 62529:tid 62544] [client 20.199.100.0:9586] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gkl.php"] [unique_id "abdJBz84-luOVYZKK0OegAAAAMc"]
[Mon Mar 16 08:04:24.171218 2026] [:error] [pid 1411:tid 1430] [client 20.199.100.0:3152] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gkl.php"] [unique_id "abdJCNrCV4sh-le3M-2VWQAAAVA"]
[Mon Mar 16 08:04:25.388132 2026] [:error] [pid 1411:tid 1432] [client 20.199.100.0:12011] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gkl.php"] [unique_id "abdJCdrCV4sh-le3M-2VWwAAAVI"]
[Mon Mar 16 08:04:26.685529 2026] [:error] [pid 1411:tid 1426] [client 20.199.100.0:3404] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "abdJCtrCV4sh-le3M-2VYgAAAU0"]
[Mon Mar 16 08:04:27.885362 2026] [:error] [pid 1411:tid 1422] [client 20.199.100.0:8618] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "abdJC9rCV4sh-le3M-2VaAAAAUk"]
[Mon Mar 16 08:04:29.436940 2026] [:error] [pid 1411:tid 1425] [client 20.199.100.0:9455] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "abdJDdrCV4sh-le3M-2VbQAAAUw"]
[Mon Mar 16 08:04:31.422276 2026] [:error] [pid 1411:tid 1423] [client 20.199.100.0:3934] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "abdJD9rCV4sh-le3M-2VcwAAAUo"]
[Mon Mar 16 08:04:32.673586 2026] [:error] [pid 12822:tid 12858] [client 20.199.100.0:8594] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "abdJEIG9Ft4WPo7r7sRlHAAAAdc"]
[Mon Mar 16 08:04:34.255410 2026] [:error] [pid 62529:tid 62542] [client 20.199.100.0:14865] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "abdJEj84-luOVYZKK0OekAAAAMU"]
[Mon Mar 16 08:04:34.929301 2026] [:error] [pid 12822:tid 12845] [client 20.199.100.0:3184] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "abdJEoG9Ft4WPo7r7sRlHQAAAco"]
[Mon Mar 16 08:04:35.802380 2026] [:error] [pid 62428:tid 62489] [client 20.199.100.0:9570] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "abdJE6rHSRXFZx1-aIHtuQAAAFQ"]
[Mon Mar 16 08:04:36.498932 2026] [:error] [pid 12823:tid 12883] [client 20.199.100.0:7307] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yifsx.php"] [unique_id "abdJFBlVKeelxvdJEr4_FAAAAhU"]
[Mon Mar 16 08:04:37.283636 2026] [:error] [pid 62429:tid 62513] [client 20.199.100.0:15175] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yifsx.php"] [unique_id "abdJFVewIPukhLCowEHzYQAAAJE"]
[Mon Mar 16 08:04:38.048334 2026] [:error] [pid 62429:tid 62512] [client 20.199.100.0:13516] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yifsx.php"] [unique_id "abdJFlewIPukhLCowEHzZwAAAJA"]
[Mon Mar 16 08:04:38.690836 2026] [:error] [pid 52152:tid 52161] [client 20.199.100.0:9148] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yifsx.php"] [unique_id "abdJFsA6rS_GLRd0NKWN_AAAAQY"]
[Mon Mar 16 08:04:39.306383 2026] [:error] [pid 62529:tid 62539] [client 20.199.100.0:3921] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "abdJFz84-luOVYZKK0OekgAAAMI"]
[Mon Mar 16 08:04:40.149540 2026] [:error] [pid 12822:tid 12838] [client 20.199.100.0:15200] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "abdJGIG9Ft4WPo7r7sRlIgAAAcM"]
[Mon Mar 16 08:04:40.875116 2026] [:error] [pid 62529:tid 62543] [client 20.199.100.0:3950] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "abdJGD84-luOVYZKK0OelAAAAMY"]
[Mon Mar 16 08:04:41.543101 2026] [:error] [pid 1411:tid 1416] [client 20.199.100.0:9139] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "abdJGdrCV4sh-le3M-2VewAAAUM"]
[Mon Mar 16 08:04:42.352388 2026] [:error] [pid 12822:tid 12856] [client 20.199.100.0:9296] [client 20.199.100.0] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/app.php"] [unique_id "abdJGoG9Ft4WPo7r7sRlKgAAAdU"]
[Mon Mar 16 08:04:42.934491 2026] [:error] [pid 1411:tid 1424] [client 20.199.100.0:9089] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sw.php"] [unique_id "abdJGtrCV4sh-le3M-2VfAAAAUs"]
[Mon Mar 16 08:04:43.689944 2026] [:error] [pid 12822:tid 12846] [client 20.199.100.0:3442] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sw.php"] [unique_id "abdJG4G9Ft4WPo7r7sRlLwAAAcs"]
[Mon Mar 16 08:04:44.624550 2026] [:error] [pid 12822:tid 12836] [client 20.199.100.0:1566] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sw.php"] [unique_id "abdJHIG9Ft4WPo7r7sRlNAAAAcE"]
[Mon Mar 16 08:04:45.567171 2026] [:error] [pid 52152:tid 52171] [client 20.199.100.0:14355] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vfr.php"] [unique_id "abdJHcA6rS_GLRd0NKWOBAAAARA"]
[Mon Mar 16 08:04:46.277767 2026] [:error] [pid 1411:tid 1419] [client 20.199.100.0:1568] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vfr.php"] [unique_id "abdJHtrCV4sh-le3M-2VgQAAAUY"]
[Mon Mar 16 08:04:46.930040 2026] [:error] [pid 1411:tid 1415] [client 20.199.100.0:11537] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vfr.php"] [unique_id "abdJHtrCV4sh-le3M-2VhgAAAUI"]
[Mon Mar 16 08:04:47.491644 2026] [:error] [pid 1411:tid 1431] [client 20.199.100.0:15493] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vfr.php"] [unique_id "abdJH9rCV4sh-le3M-2ViQAAAVE"]
[Mon Mar 16 08:04:48.223046 2026] [:error] [pid 1411:tid 1420] [client 20.199.100.0:4447] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "abdJINrCV4sh-le3M-2VjgAAAUc"]
[Mon Mar 16 08:04:48.977782 2026] [:error] [pid 1411:tid 1426] [client 20.199.100.0:11567] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "abdJINrCV4sh-le3M-2VlAAAAU0"]
[Mon Mar 16 08:04:49.715905 2026] [:error] [pid 12822:tid 12858] [client 20.199.100.0:14851] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "abdJIYG9Ft4WPo7r7sRlOAAAAdc"]
[Mon Mar 16 08:04:50.348683 2026] [:error] [pid 62429:tid 62504] [client 20.199.100.0:14362] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "abdJIlewIPukhLCowEHzbwAAAIg"]
[Mon Mar 16 08:04:50.940010 2026] [:error] [pid 62429:tid 62501] [client 20.199.100.0:12349] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/torsa1.php"] [unique_id "abdJIlewIPukhLCowEHzcQAAAIU"]
[Mon Mar 16 08:04:59.507423 2026] [:error] [pid 52152:tid 52169] [client 20.199.100.0:5678] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bpltp.php"] [unique_id "abdJK8A6rS_GLRd0NKWOGgAAAQ4"]
[Mon Mar 16 08:05:00.239593 2026] [:error] [pid 12768:tid 12793] [client 20.199.100.0:9310] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bpltp.php"] [unique_id "abdJLIvjhfol0SJym0_IZgAAAZQ"]
[Mon Mar 16 08:05:01.186480 2026] [:error] [pid 62428:tid 62483] [client 20.199.100.0:1537] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bpltp.php"] [unique_id "abdJLarHSRXFZx1-aIHtxwAAAE4"]
[Mon Mar 16 08:05:01.745894 2026] [:error] [pid 62529:tid 62542] [client 20.199.100.0:2833] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bpltp.php"] [unique_id "abdJLT84-luOVYZKK0OeqwAAAMU"]
[Mon Mar 16 08:05:02.620462 2026] [:error] [pid 62529:tid 62556] [client 20.199.100.0:10681] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byp9.php"] [unique_id "abdJLj84-luOVYZKK0OerQAAANM"]
[Mon Mar 16 08:05:04.211766 2026] [:error] [pid 62428:tid 62476] [client 20.199.100.0:9123] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byp9.php"] [unique_id "abdJMKrHSRXFZx1-aIHtywAAAEc"]
[Mon Mar 16 08:05:04.965816 2026] [:error] [pid 52152:tid 52167] [client 20.199.100.0:3141] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byp9.php"] [unique_id "abdJMMA6rS_GLRd0NKWOHwAAAQw"]
[Mon Mar 16 08:05:06.526136 2026] [:error] [pid 12768:tid 12792] [client 20.199.100.0:1598] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byp9.php"] [unique_id "abdJMovjhfol0SJym0_IaQAAAZM"]
[Mon Mar 16 08:05:07.359374 2026] [:error] [pid 52152:tid 52161] [client 20.199.100.0:1566] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs9.php"] [unique_id "abdJM8A6rS_GLRd0NKWOJAAAAQY"]
[Mon Mar 16 08:05:08.209983 2026] [:error] [pid 62428:tid 62487] [client 20.199.100.0:8862] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs9.php"] [unique_id "abdJNKrHSRXFZx1-aIHtzgAAAFI"]
[Mon Mar 16 08:05:08.865905 2026] [:error] [pid 1411:tid 1428] [client 20.199.100.0:8459] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs9.php"] [unique_id "abdJNNrCV4sh-le3M-2VogAAAU4"]
[Mon Mar 16 08:05:09.746419 2026] [:error] [pid 62529:tid 62541] [client 20.199.100.0:2255] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs9.php"] [unique_id "abdJNT84-luOVYZKK0OetAAAAMQ"]
[Mon Mar 16 08:05:10.304403 2026] [:error] [pid 12822:tid 12843] [client 20.199.100.0:6849] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/genco.php"] [unique_id "abdJNoG9Ft4WPo7r7sRlTgAAAcg"]
[Mon Mar 16 08:05:11.192833 2026] [:error] [pid 62529:tid 62545] [client 20.199.100.0:7790] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/genco.php"] [unique_id "abdJNz84-luOVYZKK0OetgAAAMg"]
[Mon Mar 16 08:05:11.862916 2026] [:error] [pid 62529:tid 62537] [client 20.199.100.0:1547] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/genco.php"] [unique_id "abdJNz84-luOVYZKK0OeuQAAAMA"]
[Mon Mar 16 08:05:12.583979 2026] [:error] [pid 1411:tid 1423] [client 20.199.100.0:3589] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/genco.php"] [unique_id "abdJONrCV4sh-le3M-2VqwAAAUo"]
[Mon Mar 16 08:05:13.303914 2026] [:error] [pid 62427:tid 62451] [client 20.199.100.0:14520] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/p23duw.php"] [unique_id "abdJOcUPP8fzo6XzJCUnEwAAAAo"]
[Mon Mar 16 08:05:14.345461 2026] [:error] [pid 1411:tid 1413] [client 20.199.100.0:3274] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/p23duw.php"] [unique_id "abdJOtrCV4sh-le3M-2VtAAAAUA"]
[Mon Mar 16 08:05:15.292209 2026] [:error] [pid 52152:tid 52176] [client 20.199.100.0:8876] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/p23duw.php"] [unique_id "abdJO8A6rS_GLRd0NKWOKAAAARU"]
[Mon Mar 16 08:05:16.157198 2026] [:error] [pid 12823:tid 12882] [client 20.199.100.0:3303] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/p23duw.php"] [unique_id "abdJPBlVKeelxvdJEr4_MAAAAhQ"]
[Mon Mar 16 08:05:18.265179 2026] [:error] [pid 1411:tid 1418] [client 20.199.100.0:8448] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/pu9.php"] [unique_id "abdJPtrCV4sh-le3M-2VwwAAAUU"]
[Mon Mar 16 08:05:19.092735 2026] [:error] [pid 1411:tid 1437] [client 20.199.100.0:10148] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/pu9.php"] [unique_id "abdJP9rCV4sh-le3M-2VyQAAAVc"]
[Mon Mar 16 08:05:20.265926 2026] [:error] [pid 12823:tid 12880] [client 20.199.100.0:7537] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/pu9.php"] [unique_id "abdJQBlVKeelxvdJEr4_MwAAAhI"]
[Mon Mar 16 08:05:21.298892 2026] [:error] [pid 52152:tid 52163] [client 20.199.100.0:10127] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/pu9.php"] [unique_id "abdJQcA6rS_GLRd0NKWOKQAAAQg"]
[Mon Mar 16 08:05:21.839882 2026] [:error] [pid 1411:tid 1414] [client 20.199.100.0:15363] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/pu8.php"] [unique_id "abdJQdrCV4sh-le3M-2V0wAAAUE"]
[Mon Mar 16 08:05:22.998271 2026] [:error] [pid 1411:tid 1438] [client 20.199.100.0:3592] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/pu8.php"] [unique_id "abdJQtrCV4sh-le3M-2V1wAAAVg"]
[Mon Mar 16 08:05:24.105066 2026] [:error] [pid 1411:tid 1430] [client 20.199.100.0:4219] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/pu8.php"] [unique_id "abdJRNrCV4sh-le3M-2V2QAAAVA"]
[Mon Mar 16 08:05:25.063537 2026] [:error] [pid 62429:tid 62502] [client 20.199.100.0:2176] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/pu8.php"] [unique_id "abdJRVewIPukhLCowEHzjAAAAIY"]
[Mon Mar 16 08:05:25.855208 2026] [:error] [pid 62429:tid 62515] [client 20.199.100.0:6883] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aifa.php"] [unique_id "abdJRVewIPukhLCowEHzjQAAAJM"]
[Mon Mar 16 08:05:26.605631 2026] [:error] [pid 62429:tid 62518] [client 20.199.100.0:2177] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aifa.php"] [unique_id "abdJRlewIPukhLCowEHzjwAAAJY"]
[Mon Mar 16 08:05:27.320413 2026] [:error] [pid 12823:tid 12870] [client 20.199.100.0:13077] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aifa.php"] [unique_id "abdJRxlVKeelxvdJEr4_OgAAAgg"]
[Mon Mar 16 08:05:27.947813 2026] [:error] [pid 62428:tid 62483] [client 20.199.100.0:6874] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aifa.php"] [unique_id "abdJR6rHSRXFZx1-aIHt0gAAAE4"]
[Mon Mar 16 08:05:29.046728 2026] [:error] [pid 62429:tid 62505] [client 20.199.100.0:6886] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aee.php"] [unique_id "abdJSVewIPukhLCowEHzlAAAAIk"]
[Mon Mar 16 08:05:29.669059 2026] [:error] [pid 62529:tid 62561] [client 20.199.100.0:7489] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aee.php"] [unique_id "abdJST84-luOVYZKK0OeygAAANg"]
[Mon Mar 16 08:05:30.386689 2026] [:error] [pid 1411:tid 1437] [client 20.199.100.0:6881] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aee.php"] [unique_id "abdJStrCV4sh-le3M-2V5wAAAVc"]
[Mon Mar 16 08:05:31.098672 2026] [:error] [pid 1411:tid 1420] [client 20.199.100.0:4220] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aee.php"] [unique_id "abdJS9rCV4sh-le3M-2V6wAAAUc"]
[Mon Mar 16 08:05:31.903701 2026] [:error] [pid 12823:tid 12878] [client 20.199.100.0:3585] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nc4.php"] [unique_id "abdJSxlVKeelxvdJEr4_PQAAAhA"]
[Mon Mar 16 08:05:32.756207 2026] [:error] [pid 62428:tid 62473] [client 20.199.100.0:7396] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nc4.php"] [unique_id "abdJTKrHSRXFZx1-aIHt1AAAAEQ"]
[Mon Mar 16 08:05:33.498802 2026] [:error] [pid 12768:tid 12779] [client 20.199.100.0:7522] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nc4.php"] [unique_id "abdJTYvjhfol0SJym0_IdQAAAYY"]
[Mon Mar 16 08:05:34.228156 2026] [:error] [pid 12823:tid 12867] [client 20.199.100.0:9661] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nc4.php"] [unique_id "abdJThlVKeelxvdJEr4_QgAAAgU"]
[Mon Mar 16 08:05:34.891695 2026] [:error] [pid 62429:tid 62504] [client 20.199.100.0:3392] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vaza.php"] [unique_id "abdJTlewIPukhLCowEHzngAAAIg"]
[Mon Mar 16 08:05:35.769174 2026] [:error] [pid 1411:tid 1420] [client 20.199.100.0:2199] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vaza.php"] [unique_id "abdJT9rCV4sh-le3M-2V8wAAAUc"]
[Mon Mar 16 08:05:36.561316 2026] [:error] [pid 1411:tid 1417] [client 20.199.100.0:15412] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vaza.php"] [unique_id "abdJUNrCV4sh-le3M-2V9gAAAUQ"]
[Mon Mar 16 08:05:37.352829 2026] [:error] [pid 12823:tid 12862] [client 20.199.100.0:7458] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vaza.php"] [unique_id "abdJURlVKeelxvdJEr4_QwAAAgA"]
[Mon Mar 16 08:05:38.104154 2026] [:error] [pid 62529:tid 62554] [client 20.199.100.0:2181] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "abdJUj84-luOVYZKK0Oe0QAAANE"]
[Mon Mar 16 08:05:38.842846 2026] [:error] [pid 52152:tid 52165] [client 20.199.100.0:6119] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "abdJUsA6rS_GLRd0NKWOMgAAAQo"]
[Mon Mar 16 08:05:39.708361 2026] [:error] [pid 52152:tid 52163] [client 20.199.100.0:6119] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "abdJU8A6rS_GLRd0NKWOMwAAAQg"]
[Mon Mar 16 08:05:40.893880 2026] [:error] [pid 62429:tid 62498] [client 20.199.100.0:10498] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "abdJVFewIPukhLCowEHzpgAAAII"]
[Mon Mar 16 08:05:42.048048 2026] [:error] [pid 62529:tid 62547] [client 20.199.100.0:2554] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "abdJVj84-luOVYZKK0Oe2wAAAMo"]
[Mon Mar 16 08:05:43.159776 2026] [:error] [pid 52152:tid 52161] [client 20.199.100.0:7397] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "abdJV8A6rS_GLRd0NKWONQAAAQY"]
[Mon Mar 16 08:05:43.891552 2026] [:error] [pid 62429:tid 62519] [client 20.199.100.0:7008] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "abdJV1ewIPukhLCowEHzrAAAAJc"]
[Mon Mar 16 08:05:44.767996 2026] [:error] [pid 12768:tid 12783] [client 20.199.100.0:6666] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "abdJWIvjhfol0SJym0_IdwAAAYo"]
[Mon Mar 16 08:05:45.901765 2026] [:error] [pid 62429:tid 62497] [client 20.199.100.0:2510] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/4pocjn.php"] [unique_id "abdJWVewIPukhLCowEHzrQAAAIE"]
[Mon Mar 16 08:05:46.898844 2026] [:error] [pid 62529:tid 62537] [client 20.199.100.0:8470] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/4pocjn.php"] [unique_id "abdJWj84-luOVYZKK0Oe3gAAAMA"]
[Mon Mar 16 08:05:47.688864 2026] [:error] [pid 62427:tid 62465] [client 20.199.100.0:7375] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/4pocjn.php"] [unique_id "abdJW8UPP8fzo6XzJCUnHgAAABg"]
[Mon Mar 16 08:05:48.543752 2026] [:error] [pid 62429:tid 62516] [client 20.199.100.0:13084] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/4pocjn.php"] [unique_id "abdJXFewIPukhLCowEHzsAAAAJQ"]
[Mon Mar 16 08:05:49.518388 2026] [:error] [pid 62427:tid 62463] [client 20.199.100.0:6518] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vir-v2.php"] [unique_id "abdJXcUPP8fzo6XzJCUnIAAAABY"]
[Mon Mar 16 08:05:50.253516 2026] [:error] [pid 62429:tid 62514] [client 20.199.100.0:7550] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vir-v2.php"] [unique_id "abdJXlewIPukhLCowEHztQAAAJI"]
[Mon Mar 16 08:05:51.084628 2026] [:error] [pid 62427:tid 62452] [client 20.199.100.0:3092] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vir-v2.php"] [unique_id "abdJX8UPP8fzo6XzJCUnIgAAAAs"]
[Mon Mar 16 08:05:51.828466 2026] [:error] [pid 12823:tid 12867] [client 20.199.100.0:7548] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vir-v2.php"] [unique_id "abdJXxlVKeelxvdJEr4_VQAAAgU"]
[Mon Mar 16 08:05:52.380999 2026] [:error] [pid 62429:tid 62511] [client 20.199.100.0:2183] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gm.php"] [unique_id "abdJYFewIPukhLCowEHzuwAAAI8"]
[Mon Mar 16 08:05:53.061842 2026] [:error] [pid 62428:tid 62489] [client 20.199.100.0:7015] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gm.php"] [unique_id "abdJYarHSRXFZx1-aIHt2AAAAFQ"]
[Mon Mar 16 08:05:53.561205 2026] [:error] [pid 12822:tid 12844] [client 20.199.100.0:3104] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gm.php"] [unique_id "abdJYYG9Ft4WPo7r7sRlfAAAAck"]
[Mon Mar 16 08:05:54.232460 2026] [:error] [pid 62429:tid 62506] [client 20.199.100.0:6695] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gm.php"] [unique_id "abdJYlewIPukhLCowEHzvQAAAIo"]
[Mon Mar 16 08:05:54.905856 2026] [:error] [pid 62429:tid 62505] [client 20.199.100.0:2221] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/btx25.php"] [unique_id "abdJYlewIPukhLCowEHzvwAAAIk"]
[Mon Mar 16 08:05:55.662164 2026] [:error] [pid 62429:tid 62499] [client 20.199.100.0:14497] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/btx25.php"] [unique_id "abdJY1ewIPukhLCowEHzxAAAAIM"]
[Mon Mar 16 08:05:56.285632 2026] [:error] [pid 62529:tid 62552] [client 20.199.100.0:7390] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/btx25.php"] [unique_id "abdJZD84-luOVYZKK0Oe5wAAAM8"]
[Mon Mar 16 08:05:57.359829 2026] [:error] [pid 1411:tid 1417] [client 20.199.100.0:5873] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/btx25.php"] [unique_id "abdJZdrCV4sh-le3M-2WBQAAAUQ"]
[Mon Mar 16 08:05:58.060524 2026] [:error] [pid 62429:tid 62505] [client 20.199.100.0:1846] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/v4.php"] [unique_id "abdJZlewIPukhLCowEHzzAAAAIk"]
[Mon Mar 16 08:05:58.785329 2026] [:error] [pid 1411:tid 1436] [client 20.199.100.0:13087] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/v4.php"] [unique_id "abdJZtrCV4sh-le3M-2WCwAAAVY"]
[Mon Mar 16 08:06:06.762904 2026] [:error] [pid 62428:tid 62487] [client 20.199.100.0:15375] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/iindv.php"] [unique_id "abdJbqrHSRXFZx1-aIHt7AAAAFI"]
[Mon Mar 16 08:06:07.546352 2026] [:error] [pid 62529:tid 62558] [client 20.199.100.0:6714] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/iindv.php"] [unique_id "abdJbz84-luOVYZKK0Oe7gAAANU"]
[Mon Mar 16 08:06:08.322678 2026] [:error] [pid 62529:tid 62550] [client 20.199.100.0:13110] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/iindv.php"] [unique_id "abdJcD84-luOVYZKK0Oe9QAAAM0"]
[Mon Mar 16 08:06:08.981999 2026] [:error] [pid 1411:tid 1434] [client 20.199.100.0:4180] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/iindv.php"] [unique_id "abdJcNrCV4sh-le3M-2WLAAAAVQ"]
[Mon Mar 16 08:06:09.807549 2026] [:error] [pid 12768:tid 12775] [client 20.199.100.0:5853] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sqaoi.php"] [unique_id "abdJcYvjhfol0SJym0_IgQAAAYI"]
[Mon Mar 16 08:06:10.403964 2026] [:error] [pid 62529:tid 62543] [client 20.199.100.0:3623] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sqaoi.php"] [unique_id "abdJcj84-luOVYZKK0Oe-QAAAMY"]
[Mon Mar 16 08:06:11.229758 2026] [:error] [pid 62428:tid 62478] [client 20.199.100.0:6659] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sqaoi.php"] [unique_id "abdJc6rHSRXFZx1-aIHt7QAAAEk"]
[Mon Mar 16 08:06:11.945000 2026] [:error] [pid 1411:tid 1426] [client 20.199.100.0:14510] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sqaoi.php"] [unique_id "abdJc9rCV4sh-le3M-2WOAAAAU0"]
[Mon Mar 16 08:06:12.704232 2026] [:error] [pid 1411:tid 1425] [client 20.199.100.0:2227] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "abdJdNrCV4sh-le3M-2WPgAAAUw"]
[Mon Mar 16 08:06:13.748935 2026] [:error] [pid 1411:tid 1438] [client 20.199.100.0:5160] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "abdJddrCV4sh-le3M-2WRAAAAVg"]
[Mon Mar 16 08:06:14.439601 2026] [:error] [pid 62429:tid 62507] [client 20.199.100.0:7501] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "abdJdlewIPukhLCowEHz8gAAAIs"]
[Mon Mar 16 08:06:15.308087 2026] [:error] [pid 62429:tid 62510] [client 20.199.100.0:7403] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "abdJd1ewIPukhLCowEHz8wAAAI4"]
[Mon Mar 16 08:06:15.995968 2026] [:error] [pid 12822:tid 12841] [client 20.199.100.0:2182] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aapig.php"] [unique_id "abdJd4G9Ft4WPo7r7sRlggAAAcY"]
[Mon Mar 16 08:06:17.122615 2026] [:error] [pid 62429:tid 62516] [client 20.199.100.0:14542] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aapig.php"] [unique_id "abdJeVewIPukhLCowEHz9gAAAJQ"]
[Mon Mar 16 08:06:17.743401 2026] [:error] [pid 62429:tid 62515] [client 20.199.100.0:13091] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aapig.php"] [unique_id "abdJeVewIPukhLCowEHz-QAAAJM"]
[Mon Mar 16 08:06:18.825168 2026] [:error] [pid 62429:tid 62500] [client 20.199.100.0:13091] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aapig.php"] [unique_id "abdJelewIPukhLCowEHz_gAAAIQ"]
[Mon Mar 16 08:06:19.480111 2026] [:error] [pid 12822:tid 12857] [client 20.199.100.0:7542] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs8.php"] [unique_id "abdJe4G9Ft4WPo7r7sRlhgAAAdY"]
[Mon Mar 16 08:06:20.355550 2026] [:error] [pid 1411:tid 1434] [client 20.199.100.0:3640] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs8.php"] [unique_id "abdJfNrCV4sh-le3M-2WZgAAAVQ"]
[Mon Mar 16 08:06:21.106528 2026] [:error] [pid 52152:tid 52175] [client 20.199.100.0:1827] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs8.php"] [unique_id "abdJfcA6rS_GLRd0NKWORwAAARQ"]
[Mon Mar 16 08:06:22.246871 2026] [:error] [pid 12823:tid 12879] [client 20.199.100.0:1830] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs8.php"] [unique_id "abdJfhlVKeelxvdJEr4_ggAAAhE"]
[Mon Mar 16 08:06:22.923163 2026] [:error] [pid 1411:tid 1422] [client 20.199.100.0:5141] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "abdJftrCV4sh-le3M-2WbgAAAUk"]
[Mon Mar 16 08:06:23.585530 2026] [:error] [pid 1411:tid 1433] [client 20.199.100.0:10552] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "abdJf9rCV4sh-le3M-2WcgAAAVM"]
[Mon Mar 16 08:06:24.541201 2026] [:error] [pid 1411:tid 1413] [client 20.199.100.0:3072] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "abdJgNrCV4sh-le3M-2WdwAAAUA"]
[Mon Mar 16 08:06:25.344360 2026] [:error] [pid 1411:tid 1436] [client 20.199.100.0:6473] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "abdJgdrCV4sh-le3M-2WgAAAAVY"]
[Mon Mar 16 08:06:26.042421 2026] [:error] [pid 12768:tid 12780] [client 20.199.100.0:6468] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/24.php"] [unique_id "abdJgovjhfol0SJym0_IhwAAAYc"]
[Mon Mar 16 08:06:26.947090 2026] [:error] [pid 62427:tid 62454] [client 20.199.100.0:6468] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/24.php"] [unique_id "abdJgsUPP8fzo6XzJCUnKQAAAA0"]
[Mon Mar 16 08:06:27.744697 2026] [:error] [pid 1411:tid 1428] [client 20.199.100.0:8217] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/24.php"] [unique_id "abdJg9rCV4sh-le3M-2WjgAAAU4"]
[Mon Mar 16 08:06:28.408652 2026] [:error] [pid 1411:tid 1422] [client 20.199.100.0:15364] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/24.php"] [unique_id "abdJhNrCV4sh-le3M-2WkgAAAUk"]
[Mon Mar 16 08:06:29.200216 2026] [:error] [pid 62429:tid 62499] [client 20.199.100.0:14544] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class.php"] [unique_id "abdJhVewIPukhLCowEH0CAAAAIM"]
[Mon Mar 16 08:06:30.022329 2026] [:error] [pid 62429:tid 62505] [client 20.199.100.0:5144] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class.php"] [unique_id "abdJhlewIPukhLCowEH0DAAAAIk"]
[Mon Mar 16 08:06:30.870992 2026] [:error] [pid 1411:tid 1431] [client 20.199.100.0:7468] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class.php"] [unique_id "abdJhtrCV4sh-le3M-2WnAAAAVE"]
[Mon Mar 16 08:06:31.509910 2026] [:error] [pid 62427:tid 62459] [client 20.199.100.0:14532] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class.php"] [unique_id "abdJh8UPP8fzo6XzJCUnLQAAABI"]
[Mon Mar 16 08:06:32.133039 2026] [:error] [pid 62429:tid 62506] [client 20.199.100.0:5151] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zwq13.php"] [unique_id "abdJiFewIPukhLCowEH0EgAAAIo"]
[Mon Mar 16 08:06:32.873592 2026] [:error] [pid 62429:tid 62511] [client 20.199.100.0:3102] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zwq13.php"] [unique_id "abdJiFewIPukhLCowEH0EwAAAI8"]
[Mon Mar 16 08:06:33.518269 2026] [:error] [pid 12768:tid 12788] [client 20.199.100.0:3323] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zwq13.php"] [unique_id "abdJiYvjhfol0SJym0_IiQAAAY8"]
[Mon Mar 16 08:06:34.205797 2026] [:error] [pid 62429:tid 62508] [client 20.199.100.0:5876] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zwq13.php"] [unique_id "abdJilewIPukhLCowEH0GQAAAIw"]
[Mon Mar 16 08:06:34.794200 2026] [:error] [pid 12768:tid 12786] [client 20.199.100.0:5159] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wqqs.php"] [unique_id "abdJiovjhfol0SJym0_IigAAAY0"]
[Mon Mar 16 08:06:35.392588 2026] [:error] [pid 12823:tid 12869] [client 20.199.100.0:3123] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wqqs.php"] [unique_id "abdJixlVKeelxvdJEr4_iwAAAgc"]
[Mon Mar 16 08:06:36.017707 2026] [:error] [pid 62429:tid 62507] [client 20.199.100.0:13118] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wqqs.php"] [unique_id "abdJjFewIPukhLCowEH0HQAAAIs"]
[Mon Mar 16 08:06:36.991462 2026] [:error] [pid 12823:tid 12866] [client 20.199.100.0:8241] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wqqs.php"] [unique_id "abdJjBlVKeelxvdJEr4_kQAAAgQ"]
[Mon Mar 16 08:06:37.955178 2026] [:error] [pid 12823:tid 12872] [client 20.199.100.0:7456] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gk.php"] [unique_id "abdJjRlVKeelxvdJEr4_kwAAAgo"]
[Mon Mar 16 08:06:39.264787 2026] [:error] [pid 12768:tid 12776] [client 20.199.100.0:4553] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gk.php"] [unique_id "abdJj4vjhfol0SJym0_IjwAAAYM"]
[Mon Mar 16 08:06:40.197132 2026] [:error] [pid 12823:tid 12886] [client 20.199.100.0:1420] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gk.php"] [unique_id "abdJkBlVKeelxvdJEr4_lgAAAhg"]
[Mon Mar 16 08:06:41.145515 2026] [:error] [pid 1411:tid 1430] [client 20.199.100.0:8244] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gk.php"] [unique_id "abdJkdrCV4sh-le3M-2WtQAAAVA"]
[Mon Mar 16 08:06:42.107936 2026] [:error] [pid 62429:tid 62509] [client 20.199.100.0:13807] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/trx24.php"] [unique_id "abdJklewIPukhLCowEH0JgAAAI0"]
[Mon Mar 16 08:06:42.719099 2026] [:error] [pid 12822:tid 12859] [client 20.199.100.0:13778] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/trx24.php"] [unique_id "abdJkoG9Ft4WPo7r7sRlkAAAAdg"]
[Mon Mar 16 08:06:43.538955 2026] [:error] [pid 62529:tid 62552] [client 20.199.100.0:1447] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/trx24.php"] [unique_id "abdJkz84-luOVYZKK0OfGAAAAM8"]
[Mon Mar 16 08:06:44.208512 2026] [:error] [pid 12823:tid 12881] [client 20.199.100.0:4575] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/trx24.php"] [unique_id "abdJlBlVKeelxvdJEr4_pAAAAhM"]
[Mon Mar 16 08:06:45.380660 2026] [:error] [pid 62529:tid 62556] [client 20.199.100.0:1798] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ad2.php"] [unique_id "abdJlT84-luOVYZKK0OfHgAAANM"]
[Mon Mar 16 08:06:46.501384 2026] [:error] [pid 62429:tid 62518] [client 20.199.100.0:13061] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ad2.php"] [unique_id "abdJllewIPukhLCowEH0LQAAAJY"]
[Mon Mar 16 08:06:47.203173 2026] [:error] [pid 62529:tid 62546] [client 20.199.100.0:3135] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ad2.php"] [unique_id "abdJlz84-luOVYZKK0OfKAAAAMk"]
[Mon Mar 16 08:06:48.148320 2026] [:error] [pid 62428:tid 62477] [client 20.199.100.0:5156] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ad2.php"] [unique_id "abdJmKrHSRXFZx1-aIHt8wAAAEg"]
[Mon Mar 16 08:06:49.182353 2026] [:error] [pid 1411:tid 1433] [client 20.199.100.0:4590] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zz8.php"] [unique_id "abdJmdrCV4sh-le3M-2WvwAAAVM"]
[Mon Mar 16 08:06:50.087886 2026] [:error] [pid 62429:tid 62505] [client 20.199.100.0:6464] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zz8.php"] [unique_id "abdJmlewIPukhLCowEH0NQAAAIk"]
[Mon Mar 16 08:06:50.763903 2026] [:error] [pid 1411:tid 1415] [client 20.199.100.0:5166] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zz8.php"] [unique_id "abdJmtrCV4sh-le3M-2WwQAAAUI"]
[Mon Mar 16 08:06:51.733003 2026] [:error] [pid 1411:tid 1428] [client 20.199.100.0:1794] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zz8.php"] [unique_id "abdJm9rCV4sh-le3M-2WxQAAAU4"]
[Mon Mar 16 08:06:52.549164 2026] [:error] [pid 62429:tid 62501] [client 20.199.100.0:6696] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/t00l.php"] [unique_id "abdJnFewIPukhLCowEH0OwAAAIU"]
[Mon Mar 16 08:06:54.004325 2026] [:error] [pid 12823:tid 12873] [client 20.199.100.0:13762] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/t00l.php"] [unique_id "abdJnhlVKeelxvdJEr4_sAAAAgs"]
[Mon Mar 16 08:06:55.699634 2026] [:error] [pid 12768:tid 12784] [client 20.199.100.0:3113] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/t00l.php"] [unique_id "abdJn4vjhfol0SJym0_IlQAAAYs"]
[Mon Mar 16 08:06:57.501756 2026] [:error] [pid 62428:tid 62476] [client 20.199.100.0:15381] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/t00l.php"] [unique_id "abdJoarHSRXFZx1-aIHt_wAAAEc"]
[Mon Mar 16 08:06:59.855639 2026] [:error] [pid 12768:tid 12792] [client 20.199.100.0:5135] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kllib.php"] [unique_id "abdJo4vjhfol0SJym0_ImwAAAZM"]
[Mon Mar 16 08:07:00.725435 2026] [:error] [pid 12768:tid 12774] [client 20.199.100.0:5864] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kllib.php"] [unique_id "abdJpIvjhfol0SJym0_IngAAAYE"]
[Mon Mar 16 08:07:01.937083 2026] [:error] [pid 12822:tid 12846] [client 20.199.100.0:1448] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kllib.php"] [unique_id "abdJpYG9Ft4WPo7r7sRlnQAAAcs"]
[Mon Mar 16 08:07:03.271044 2026] [:error] [pid 62529:tid 62542] [client 20.199.100.0:4607] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kllib.php"] [unique_id "abdJpz84-luOVYZKK0OfOQAAAMU"]
[Mon Mar 16 08:07:05.467708 2026] [:error] [pid 12822:tid 12839] [client 20.199.100.0:4203] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aki.php"] [unique_id "abdJqYG9Ft4WPo7r7sRloAAAAcQ"]
[Mon Mar 16 08:07:15.980528 2026] [:error] [pid 12768:tid 12787] [client 20.199.100.0:14538] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws83.php"] [unique_id "abdJs4vjhfol0SJym0_ItwAAAY4"]
[Mon Mar 16 08:07:16.677960 2026] [:error] [pid 62529:tid 62559] [client 20.199.100.0:5839] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws83.php"] [unique_id "abdJtD84-luOVYZKK0OfRQAAANY"]
[Mon Mar 16 08:07:17.512059 2026] [:error] [pid 62429:tid 62497] [client 20.199.100.0:14585] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws83.php"] [unique_id "abdJtVewIPukhLCowEH0cQAAAIE"]
[Mon Mar 16 08:07:19.259471 2026] [:error] [pid 62529:tid 62554] [client 20.199.100.0:14552] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws83.php"] [unique_id "abdJtz84-luOVYZKK0OfSAAAANE"]
[Mon Mar 16 08:07:20.978747 2026] [:error] [pid 52152:tid 52155] [client 20.199.100.0:6506] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "abdJuMA6rS_GLRd0NKWOZQAAAQA"]
[Mon Mar 16 08:07:24.113973 2026] [:error] [pid 62427:tid 62444] [client 20.199.100.0:8212] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "abdJvMUPP8fzo6XzJCUnQwAAAAM"]
[Mon Mar 16 08:07:25.184186 2026] [:error] [pid 1411:tid 1422] [client 20.199.100.0:3075] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "abdJvdrCV4sh-le3M-2W9AAAAUk"]
[Mon Mar 16 08:07:25.980159 2026] [:error] [pid 1411:tid 1414] [client 20.199.100.0:7422] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "abdJvdrCV4sh-le3M-2W-gAAAUE"]
[Mon Mar 16 08:07:26.826662 2026] [:error] [pid 12768:tid 12795] [client 20.199.100.0:6479] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sc.php"] [unique_id "abdJvovjhfol0SJym0_IwQAAAZY"]
[Mon Mar 16 08:07:27.809921 2026] [:error] [pid 62428:tid 62489] [client 20.199.100.0:7360] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sc.php"] [unique_id "abdJv6rHSRXFZx1-aIHuFAAAAFQ"]
[Mon Mar 16 08:07:28.485132 2026] [:error] [pid 12823:tid 12869] [client 20.199.100.0:13803] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sc.php"] [unique_id "abdJwBlVKeelxvdJEr4_zAAAAgc"]
[Mon Mar 16 08:07:29.428611 2026] [:error] [pid 12823:tid 12867] [client 20.199.100.0:5145] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sc.php"] [unique_id "abdJwRlVKeelxvdJEr4_0AAAAgU"]
[Mon Mar 16 08:07:30.260204 2026] [:error] [pid 52152:tid 52170] [client 20.199.100.0:1851] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/karma_b001.php"] [unique_id "abdJwsA6rS_GLRd0NKWOcQAAAQ8"]
[Mon Mar 16 08:07:31.055301 2026] [:error] [pid 12822:tid 12836] [client 20.199.100.0:6516] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/karma_b001.php"] [unique_id "abdJw4G9Ft4WPo7r7sRlvQAAAcE"]
[Mon Mar 16 08:07:31.901438 2026] [:error] [pid 12768:tid 12783] [client 20.199.100.0:7446] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/karma_b001.php"] [unique_id "abdJw4vjhfol0SJym0_IxQAAAYo"]
[Mon Mar 16 08:07:32.767574 2026] [:error] [pid 62429:tid 62500] [client 20.199.100.0:14581] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/karma_b001.php"] [unique_id "abdJxFewIPukhLCowEH0fgAAAIQ"]
[Mon Mar 16 08:07:33.469739 2026] [:error] [pid 12822:tid 12842] [client 20.199.100.0:13071] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/karma_e76a.php"] [unique_id "abdJxYG9Ft4WPo7r7sRlwAAAAcc"]
[Mon Mar 16 08:07:34.156571 2026] [:error] [pid 62429:tid 62506] [client 20.199.100.0:7479] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/karma_e76a.php"] [unique_id "abdJxlewIPukhLCowEH0ggAAAIo"]
[Mon Mar 16 08:07:34.933740 2026] [:error] [pid 62429:tid 62499] [client 20.199.100.0:1800] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/karma_e76a.php"] [unique_id "abdJxlewIPukhLCowEH0iQAAAIM"]
[Mon Mar 16 08:07:35.722157 2026] [:error] [pid 12768:tid 12793] [client 20.199.100.0:13791] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/karma_e76a.php"] [unique_id "abdJx4vjhfol0SJym0_IyQAAAZQ"]
[Mon Mar 16 08:07:36.617891 2026] [:error] [pid 12823:tid 12877] [client 20.199.100.0:13799] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/karma_0cc5.php"] [unique_id "abdJyBlVKeelxvdJEr4_4wAAAg8"]
[Mon Mar 16 08:07:37.335015 2026] [:error] [pid 12822:tid 12846] [client 20.199.100.0:6102] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/karma_0cc5.php"] [unique_id "abdJyYG9Ft4WPo7r7sRlyQAAAcs"]
[Mon Mar 16 08:07:37.889120 2026] [:error] [pid 1411:tid 1419] [client 20.199.100.0:6123] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/karma_0cc5.php"] [unique_id "abdJydrCV4sh-le3M-2XAwAAAUY"]
[Mon Mar 16 08:07:38.514871 2026] [:error] [pid 1411:tid 1423] [client 20.199.100.0:5127] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/karma_0cc5.php"] [unique_id "abdJytrCV4sh-le3M-2XBwAAAUo"]
[Mon Mar 16 08:07:39.133010 2026] [:error] [pid 62429:tid 62499] [client 20.199.100.0:2193] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "abdJy1ewIPukhLCowEH0kgAAAIM"]
[Mon Mar 16 08:07:39.805064 2026] [:error] [pid 62429:tid 62513] [client 20.199.100.0:2496] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "abdJy1ewIPukhLCowEH0lwAAAJE"]
[Mon Mar 16 08:07:40.582723 2026] [:error] [pid 1411:tid 1436] [client 20.199.100.0:5841] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "abdJzNrCV4sh-le3M-2XDwAAAVY"]
[Mon Mar 16 08:07:41.275954 2026] [:error] [pid 62429:tid 62513] [client 20.199.100.0:4193] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "abdJzVewIPukhLCowEH0oQAAAJE"]
[Mon Mar 16 08:07:42.134561 2026] [:error] [pid 12768:tid 12778] [client 20.199.100.0:13777] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/image.php"] [unique_id "abdJzovjhfol0SJym0_IywAAAYU"]
[Mon Mar 16 08:07:42.809141 2026] [:error] [pid 12768:tid 12792] [client 20.199.100.0:4606] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/image.php"] [unique_id "abdJzovjhfol0SJym0_IzQAAAZM"]
[Mon Mar 16 08:07:43.568353 2026] [:error] [pid 62428:tid 62479] [client 20.199.100.0:4182] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/image.php"] [unique_id "abdJz6rHSRXFZx1-aIHuIgAAAEo"]
[Mon Mar 16 08:07:44.172923 2026] [:error] [pid 1411:tid 1435] [client 20.199.100.0:7484] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/image.php"] [unique_id "abdJ0NrCV4sh-le3M-2XFwAAAVU"]
[Mon Mar 16 08:07:45.139030 2026] [:error] [pid 12768:tid 12788] [client 20.199.100.0:6669] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/receiver.php"] [unique_id "abdJ0Yvjhfol0SJym0_I0AAAAY8"]
[Mon Mar 16 08:07:45.867452 2026] [:error] [pid 12822:tid 12849] [client 20.199.100.0:1792] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/receiver.php"] [unique_id "abdJ0YG9Ft4WPo7r7sRlzgAAAc4"]
[Mon Mar 16 08:07:46.985278 2026] [:error] [pid 52152:tid 52157] [client 20.199.100.0:13106] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/receiver.php"] [unique_id "abdJ0sA6rS_GLRd0NKWOfwAAAQI"]
[Mon Mar 16 08:07:47.762733 2026] [:error] [pid 12822:tid 12848] [client 20.199.100.0:5123] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/receiver.php"] [unique_id "abdJ04G9Ft4WPo7r7sRl0QAAAc0"]
[Mon Mar 16 08:07:48.468738 2026] [:error] [pid 1411:tid 1415] [client 20.199.100.0:7400] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mis.php"] [unique_id "abdJ1NrCV4sh-le3M-2XGgAAAUI"]
[Mon Mar 16 08:07:49.676657 2026] [:error] [pid 62529:tid 62537] [client 20.199.100.0:5836] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mis.php"] [unique_id "abdJ1T84-luOVYZKK0OfVAAAAMA"]
[Mon Mar 16 08:07:50.844371 2026] [:error] [pid 12823:tid 12873] [client 20.199.100.0:15386] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mis.php"] [unique_id "abdJ1hlVKeelxvdJEr4_-AAAAgs"]
[Mon Mar 16 08:07:51.841003 2026] [:error] [pid 62529:tid 62554] [client 20.199.100.0:15380] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mis.php"] [unique_id "abdJ1z84-luOVYZKK0OfXwAAANE"]
[Mon Mar 16 08:07:53.041858 2026] [:error] [pid 12823:tid 12862] [client 20.199.100.0:7476] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/az.php"] [unique_id "abdJ2RlVKeelxvdJEr4__AAAAgA"]
[Mon Mar 16 08:07:55.127665 2026] [:error] [pid 1411:tid 1423] [client 20.199.100.0:6715] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/az.php"] [unique_id "abdJ29rCV4sh-le3M-2XLgAAAUo"]
[Mon Mar 16 08:07:56.831353 2026] [:error] [pid 62429:tid 62508] [client 20.199.100.0:7511] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/az.php"] [unique_id "abdJ3FewIPukhLCowEH0vgAAAIw"]
[Mon Mar 16 08:07:58.283470 2026] [:error] [pid 1411:tid 1420] [client 20.199.100.0:9712] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/az.php"] [unique_id "abdJ3trCV4sh-le3M-2XPAAAAUc"]
[Mon Mar 16 08:07:59.182324 2026] [:error] [pid 62529:tid 62550] [client 20.199.100.0:15373] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/temp1.php"] [unique_id "abdJ3z84-luOVYZKK0OfZQAAAM0"]
[Mon Mar 16 08:08:00.088350 2026] [:error] [pid 62428:tid 62478] [client 20.199.100.0:5879] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/temp1.php"] [unique_id "abdJ4KrHSRXFZx1-aIHuKgAAAEk"]
[Mon Mar 16 08:08:01.118383 2026] [:error] [pid 52152:tid 52173] [client 20.199.100.0:1445] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/temp1.php"] [unique_id "abdJ4cA6rS_GLRd0NKWOhwAAARI"]
[Mon Mar 16 08:08:02.176371 2026] [:error] [pid 12822:tid 12857] [client 20.199.100.0:5863] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/temp1.php"] [unique_id "abdJ4oG9Ft4WPo7r7sRl2QAAAdY"]
[Mon Mar 16 08:08:02.739121 2026] [:error] [pid 1411:tid 1430] [client 20.199.100.0:7475] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/com.php"] [unique_id "abdJ4trCV4sh-le3M-2XSwAAAVA"]
[Mon Mar 16 08:08:03.881123 2026] [:error] [pid 1411:tid 1418] [client 20.199.100.0:1841] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/com.php"] [unique_id "abdJ49rCV4sh-le3M-2XTwAAAUU"]
[Mon Mar 16 08:08:05.022616 2026] [:error] [pid 12768:tid 12788] [client 20.199.100.0:1835] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/com.php"] [unique_id "abdJ5Yvjhfol0SJym0_I2gAAAY8"]
[Mon Mar 16 08:08:05.775517 2026] [:error] [pid 62428:tid 62480] [client 20.199.100.0:13783] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/com.php"] [unique_id "abdJ5arHSRXFZx1-aIHuLQAAAEs"]
[Mon Mar 16 08:08:06.432505 2026] [:error] [pid 62428:tid 62471] [client 20.199.100.0:1822] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ocdzo.php"] [unique_id "abdJ5qrHSRXFZx1-aIHuLwAAAEI"]
[Mon Mar 16 08:08:07.028316 2026] [:error] [pid 62529:tid 62558] [client 20.199.100.0:6705] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ocdzo.php"] [unique_id "abdJ5z84-luOVYZKK0OfbQAAANU"]
[Mon Mar 16 08:08:07.801709 2026] [:error] [pid 62429:tid 62517] [client 20.199.100.0:10508] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ocdzo.php"] [unique_id "abdJ51ewIPukhLCowEH0yQAAAJU"]
[Mon Mar 16 08:08:08.768680 2026] [:error] [pid 62429:tid 62504] [client 20.199.100.0:8219] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ocdzo.php"] [unique_id "abdJ6FewIPukhLCowEH0ygAAAIg"]
[Mon Mar 16 08:08:09.451569 2026] [:error] [pid 62529:tid 62537] [client 20.199.100.0:5125] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yitlu.php"] [unique_id "abdJ6T84-luOVYZKK0OfdQAAAMA"]
[Mon Mar 16 08:08:10.142417 2026] [:error] [pid 62529:tid 62544] [client 20.199.100.0:9713] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yitlu.php"] [unique_id "abdJ6j84-luOVYZKK0OfdgAAAMc"]
[Mon Mar 16 08:08:10.838922 2026] [:error] [pid 62529:tid 62540] [client 20.199.100.0:14546] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yitlu.php"] [unique_id "abdJ6j84-luOVYZKK0OffAAAAMM"]
[Mon Mar 16 08:08:11.583042 2026] [:error] [pid 52152:tid 52158] [client 20.199.100.0:8204] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yitlu.php"] [unique_id "abdJ68A6rS_GLRd0NKWOlwAAAQM"]
[Mon Mar 16 08:08:12.485453 2026] [:error] [pid 62529:tid 62558] [client 20.199.100.0:6708] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmzrp.php"] [unique_id "abdJ7D84-luOVYZKK0OfhQAAANU"]
[Mon Mar 16 08:08:13.581124 2026] [:error] [pid 1411:tid 1426] [client 20.199.100.0:5857] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmzrp.php"] [unique_id "abdJ7drCV4sh-le3M-2XVAAAAU0"]
[Mon Mar 16 08:08:14.341288 2026] [:error] [pid 1411:tid 1423] [client 20.199.100.0:8912] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmzrp.php"] [unique_id "abdJ7trCV4sh-le3M-2XWAAAAUo"]
[Mon Mar 16 08:08:22.773645 2026] [:error] [pid 62429:tid 62506] [client 20.199.100.0:8935] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fvlje.php"] [unique_id "abdJ9lewIPukhLCowEH06AAAAIo"]
[Mon Mar 16 08:08:23.594215 2026] [:error] [pid 62429:tid 62520] [client 20.199.100.0:13800] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fvlje.php"] [unique_id "abdJ91ewIPukhLCowEH06gAAAJg"]
[Mon Mar 16 08:08:24.603776 2026] [:error] [pid 62529:tid 62556] [client 20.199.100.0:1815] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fvlje.php"] [unique_id "abdJ-D84-luOVYZKK0OfmAAAANM"]
[Mon Mar 16 08:08:26.537187 2026] [:error] [pid 12823:tid 12876] [client 20.199.100.0:4545] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fvlje.php"] [unique_id "abdJ-hlVKeelxvdJEr5AFwAAAg4"]
[Mon Mar 16 08:08:29.162681 2026] [:error] [pid 1411:tid 1431] [client 20.199.100.0:1829] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cqrrg.php"] [unique_id "abdJ_drCV4sh-le3M-2XjAAAAVE"]
[Mon Mar 16 08:08:30.644402 2026] [:error] [pid 12823:tid 12883] [client 20.199.100.0:13931] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cqrrg.php"] [unique_id "abdJ_hlVKeelxvdJEr5AGQAAAhU"]
[Mon Mar 16 08:08:32.091515 2026] [:error] [pid 1411:tid 1418] [client 20.199.100.0:8197] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cqrrg.php"] [unique_id "abdKANrCV4sh-le3M-2XkwAAAUU"]
[Mon Mar 16 08:08:32.874539 2026] [:error] [pid 1411:tid 1429] [client 20.199.100.0:8927] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cqrrg.php"] [unique_id "abdKANrCV4sh-le3M-2XlgAAAU8"]
[Mon Mar 16 08:08:34.045162 2026] [:error] [pid 1411:tid 1431] [client 20.199.100.0:3099] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/euhpb.php"] [unique_id "abdKAtrCV4sh-le3M-2XnQAAAVE"]
[Mon Mar 16 08:08:34.850100 2026] [:error] [pid 1411:tid 1413] [client 20.199.100.0:14572] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/euhpb.php"] [unique_id "abdKAtrCV4sh-le3M-2XoAAAAUA"]
[Mon Mar 16 08:08:35.444343 2026] [:error] [pid 1411:tid 1433] [client 20.199.100.0:7001] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/euhpb.php"] [unique_id "abdKA9rCV4sh-le3M-2XpQAAAVM"]
[Mon Mar 16 08:08:36.092774 2026] [:error] [pid 1411:tid 1437] [client 20.199.100.0:9600] [client 20.199.100.0] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/euhpb.php"] [unique_id "abdKBNrCV4sh-le3M-2XqwAAAVc"]
[Tue Mar 17 01:59:24.529943 2026] [:error] [pid 9635:tid 9647] [client 20.120.91.203:14343] [client 20.120.91.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "abhE_HsAHChuwZxGaSjpfwAAAUo"]
[Tue Mar 17 01:59:28.954068 2026] [:error] [pid 3200:tid 3210] [client 20.120.91.203:14831] [client 20.120.91.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "abhFAFFOeKiNLMuAjec4hQAAAQg"]
[Tue Mar 17 01:59:34.680326 2026] [:error] [pid 9635:tid 9656] [client 20.120.91.203:14785] [client 20.120.91.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "abhFBnsAHChuwZxGaSjpngAAAVM"]
[Tue Mar 17 01:59:36.481341 2026] [:error] [pid 9635:tid 9646] [client 20.120.91.203:14819] [client 20.120.91.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "abhFCHsAHChuwZxGaSjpoQAAAUk"]
[Tue Mar 17 02:56:24.628507 2026] [:error] [pid 9635:tid 9654] [client 34.75.90.217:49297] [client 34.75.90.217] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.75.90.217, incrementing ddos counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "abhSWHsAHChuwZxGaSgNowAAAVE"]
[Tue Mar 17 02:56:25.158930 2026] [:error] [pid 9635:tid 9653] [client 34.75.90.217:49297] [client 34.75.90.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "abhSWXsAHChuwZxGaSgNqwAAAVA"]
[Tue Mar 17 02:56:26.164923 2026] [:error] [pid 9635:tid 9654] [client 34.75.90.217:57366] [client 34.75.90.217] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "abhSWnsAHChuwZxGaSgNtgAAAVE"]
[Wed Mar 18 03:16:43.683534 2026] [:error] [pid 40717:tid 41069] [client 20.39.61.185:41876] [client 20.39.61.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abmom8R22EbC70ICesgiSQAAAJE"]
[Wed Mar 18 03:16:46.848879 2026] [:error] [pid 63612:tid 63626] [client 20.39.61.185:41965] [client 20.39.61.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abmonu7vPBSR8vo387NjeAAAAYw"]
[Wed Mar 18 03:16:48.263057 2026] [:error] [pid 40717:tid 41064] [client 20.39.61.185:41926] [client 20.39.61.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abmooMR22EbC70ICesgiSwAAAIw"]
[Wed Mar 18 03:16:51.704586 2026] [:error] [pid 40716:tid 41025] [client 20.39.61.185:41863] [client 20.39.61.185] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abmooxR6i4ByUuhUBAShxQAAAEQ"]
[Wed Mar 18 03:31:20.742533 2026] [:error] [pid 42148:tid 42173] [client 20.78.145.167:8541] [client 20.78.145.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/"] [unique_id "abmsCB0fD20xJcItPIK4ZAAAANY"]
[Wed Mar 18 03:31:21.311619 2026] [:error] [pid 42048:tid 42103] [client 20.78.145.167:7489] [client 20.78.145.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/"] [unique_id "abmsCcBiPE1I1bcftkULnQAAAEo"]
[Wed Mar 18 03:31:21.911506 2026] [:error] [pid 42148:tid 42153] [client 20.78.145.167:8567] [client 20.78.145.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/"] [unique_id "abmsCR0fD20xJcItPIK4aAAAAMI"]
[Wed Mar 18 03:31:22.514943 2026] [:error] [pid 42051:tid 42137] [client 20.78.145.167:11278] [client 20.78.145.167] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/"] [unique_id "abmsClEUAoa7YOpL_SeExAAAAJE"]
[Wed Mar 18 04:18:53.781304 2026] [:error] [pid 44966:tid 45059] [client 20.116.1.191:39191] [client 20.116.1.191] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.116.1.191, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "abm3LbHml2_01Zq4-12f5wAAAJY"]
[Wed Mar 18 04:18:57.342855 2026] [:error] [pid 44966:tid 45046] [client 20.116.1.191:39191] [client 20.116.1.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abm3MbHml2_01Zq4-12f8gAAAIk"]
[Wed Mar 18 04:19:00.480729 2026] [:error] [pid 44966:tid 45044] [client 20.116.1.191:60953] [client 20.116.1.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abm3NLHml2_01Zq4-12f9gAAAIc"]
[Wed Mar 18 04:19:02.264227 2026] [:error] [pid 44966:tid 45037] [client 20.116.1.191:65187] [client 20.116.1.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abm3NrHml2_01Zq4-12f-AAAAIA"]
[Wed Mar 18 04:19:10.966896 2026] [:error] [pid 44965:tid 45014] [client 20.116.1.191:33928] [client 20.116.1.191] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abm3PqNZys-oG-hM22hoWQAAAEQ"]
[Wed Mar 18 19:03:47.766570 2026] [:error] [pid 53755:tid 53763] [client 20.120.18.145:38230] [client 20.120.18.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abqGk6qw5ZSRshmIhWkBFgAAAUY"]
[Wed Mar 18 19:03:50.598306 2026] [:error] [pid 53755:tid 53764] [client 20.120.18.145:38312] [client 20.120.18.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abqGlqqw5ZSRshmIhWkBHwAAAUc"]
[Wed Mar 18 19:03:53.059143 2026] [:error] [pid 53755:tid 53776] [client 20.120.18.145:38163] [client 20.120.18.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abqGmaqw5ZSRshmIhWkBLQAAAVM"]
[Wed Mar 18 19:03:54.267035 2026] [:error] [pid 31232:tid 31238] [client 20.120.18.145:38320] [client 20.120.18.145] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "abqGmmX6HV7dqh3BQD3KtgAAAEM"]
[Thu Mar 19 01:48:03.312548 2026] [:error] [pid 19431:tid 19508] [client 20.48.234.9:38966] [client 20.48.234.9] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.48.234.9, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "abrlUzioVgnJ_ZdBjcuAwAAAAFY"]
[Thu Mar 19 01:48:05.516937 2026] [:error] [pid 19431:tid 19511] [client 20.48.234.9:38966] [client 20.48.234.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abrlVTioVgnJ_ZdBjcuAywAAAFg"]
[Thu Mar 19 01:48:08.637829 2026] [:error] [pid 41180:tid 41194] [client 20.48.234.9:38915] [client 20.48.234.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abrlWLuSQ3z2YqXgnycZMgAAAMw"]
[Thu Mar 19 01:48:10.927433 2026] [:error] [pid 19224:tid 19379] [client 20.48.234.9:38928] [client 20.48.234.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abrlWjxUIaHQ6Y3ff51hhgAAAck"]
[Thu Mar 19 01:48:12.767856 2026] [:error] [pid 19208:tid 19344] [client 20.48.234.9:38929] [client 20.48.234.9] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/"] [unique_id "abrlXN4kPqt9Qws3poFdNwAAAIE"]
[Thu Mar 19 07:05:39.234122 2026] [:error] [pid 32226:tid 32235] [client 91.99.185.80:42730] [client 91.99.185.80] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/"] [unique_id "absvw7Bb58lgPwqxC6puDQAAAwc"]
[Thu Mar 19 07:05:39.727386 2026] [:error] [pid 31447:tid 31468] [client 91.99.185.80:42764] [client 91.99.185.80] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/"] [unique_id "absvwxmVNRDSLnGvghhBHAAAAg0"]
[Fri Mar 20 01:14:32.602998 2026] [:error] [pid 46264:tid 46291] [client 209.97.171.56:62838] [client 209.97.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/"] [unique_id "abwu-Ip3TruHFmWOt5HW3QAAAAg"]
[Fri Mar 20 01:14:32.603643 2026] [:error] [pid 46126:tid 46248] [client 209.97.171.56:62841] [client 209.97.171.56] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/"] [unique_id "abwu-KQ44YePbsZz3j7MeAAAARM"]
[Fri Mar 20 11:15:18.902516 2026] [:error] [pid 51714:tid 51719] [client 23.100.100.188:5669] [client 23.100.100.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/"] [unique_id "aby7xjWI82pxvQ0gkstWUAAAAIM"]
[Fri Mar 20 11:15:19.401933 2026] [:error] [pid 49170:tid 49197] [client 23.100.100.188:5646] [client 23.100.100.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/"] [unique_id "aby7x8-c8ctLVDCqUJXWvgAAABc"]
[Fri Mar 20 11:15:19.860405 2026] [:error] [pid 51714:tid 51718] [client 23.100.100.188:5613] [client 23.100.100.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/"] [unique_id "aby7xzWI82pxvQ0gkstWVAAAAII"]
[Fri Mar 20 11:15:20.318301 2026] [:error] [pid 51714:tid 51739] [client 23.100.100.188:5599] [client 23.100.100.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/"] [unique_id "aby7yDWI82pxvQ0gkstWVwAAAJc"]
[Fri Mar 20 11:54:55.305714 2026] [:error] [pid 49170:tid 49187] [client 20.63.209.197:9612] [client 20.63.209.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/root.php"] [unique_id "abzFD8-c8ctLVDCqUJXv6gAAAA0"]
[Fri Mar 20 11:54:55.804124 2026] [:error] [pid 49081:tid 49125] [client 20.63.209.197:27671] [client 20.63.209.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/root.php"] [unique_id "abzFDxo1LBAUhfhYPR1UPAAAAQo"]
[Fri Mar 20 11:54:56.289522 2026] [:error] [pid 49082:tid 49143] [client 20.63.209.197:27655] [client 20.63.209.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/root.php"] [unique_id "abzFEKpllYJI1LUIdL9izQAAAUE"]
[Fri Mar 20 11:54:56.788151 2026] [:error] [pid 49081:tid 49115] [client 20.63.209.197:27683] [client 20.63.209.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/root.php"] [unique_id "abzFEBo1LBAUhfhYPR1URgAAAQA"]
[Sat Mar 21 00:45:49.556834 2026] [autoindex:error] [pid 62754:tid 62820] [client 141.98.11.17:62772] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sat Mar 21 00:54:48.776973 2026] [autoindex:error] [pid 62479:tid 62533] [client 141.98.11.17:57804] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Mar 22 09:29:59.748373 2026] [:error] [pid 40039:tid 40044] [client 52.138.39.105:53332] [client 52.138.39.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ab9GFx3aDgUJfBYishmHOQAAAQM"]
[Sun Mar 22 09:30:00.575195 2026] [:error] [pid 51361:tid 51392] [client 52.138.39.105:2397] [client 52.138.39.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ab9GGBXYUsdvKC9YWpVZmwAAABQ"]
[Sun Mar 22 09:30:01.401188 2026] [:error] [pid 51363:tid 51436] [client 52.138.39.105:2368] [client 52.138.39.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ab9GGVwa9x6OCTRkhl2T3wAAAIc"]
[Sun Mar 22 09:30:02.225506 2026] [:error] [pid 51362:tid 51420] [client 52.138.39.105:53355] [client 52.138.39.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ab9GGsOwPm3DXzTDjUfmJQAAAFM"]
[Sun Mar 22 09:41:41.913184 2026] [:error] [pid 40039:tid 40041] [client 52.138.39.105:9960] [client 52.138.39.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ab9I1R3aDgUJfBYishmPuQAAAQA"]
[Sun Mar 22 09:41:42.740916 2026] [:error] [pid 40039:tid 40044] [client 52.138.39.105:9930] [client 52.138.39.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ab9I1h3aDgUJfBYishmPwQAAAQM"]
[Sun Mar 22 09:41:43.565037 2026] [:error] [pid 51361:tid 51373] [client 52.138.39.105:9779] [client 52.138.39.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ab9I1xXYUsdvKC9YWpVb3QAAAAI"]
[Sun Mar 22 09:41:44.393014 2026] [:error] [pid 51363:tid 51441] [client 52.138.39.105:9729] [client 52.138.39.105] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "ab9I2Fwa9x6OCTRkhl2XngAAAIw"]
[Sun Mar 22 19:36:18.432955 2026] [:error] [pid 51362:tid 51405] [client 52.139.34.203:55551] [client 52.139.34.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "ab_UMsOwPm3DXzTDjUesmgAAAEQ"]
[Sun Mar 22 19:36:19.263317 2026] [:error] [pid 30166:tid 30183] [client 52.139.34.203:63160] [client 52.139.34.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "ab_UM7m4_26jKMD0zy3aDAAAAUg"]
[Sun Mar 22 19:36:20.086529 2026] [:error] [pid 51362:tid 51412] [client 52.139.34.203:58762] [client 52.139.34.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "ab_UNMOwPm3DXzTDjUesnwAAAEs"]
[Sun Mar 22 19:36:20.922120 2026] [:error] [pid 51363:tid 51431] [client 52.139.34.203:52864] [client 52.139.34.203] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/wp-login.php"] [unique_id "ab_UNFwa9x6OCTRkhl2drQAAAIM"]
[Mon Mar 23 23:53:47.395086 2026] [:error] [pid 38306:tid 38319] [client 40.85.246.124:25583] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "acFiCzkL8qwu-hHc6BjedwAAAQs"]
[Mon Mar 23 23:53:47.806542 2026] [:error] [pid 52341:tid 52348] [client 40.85.246.124:25540] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "acFiC6PKTBDR2u47Gb0wwgAAAUU"]
[Mon Mar 23 23:53:48.217436 2026] [:error] [pid 38276:tid 38281] [client 40.85.246.124:25564] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "acFiDJoKGiI-a7oME3IfzwAAAMI"]
[Mon Mar 23 23:53:48.632471 2026] [:error] [pid 38306:tid 38315] [client 40.85.246.124:25565] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "acFiDDkL8qwu-hHc6BjeeQAAAQc"]
[Mon Mar 23 23:53:49.044750 2026] [:error] [pid 38178:tid 38259] [client 40.85.246.124:25561] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/path.php"] [unique_id "acFiDQ0axWfXsVvR9udgzwAAAJE"]
[Mon Mar 23 23:53:49.459791 2026] [:error] [pid 38177:tid 38236] [client 40.85.246.124:25563] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/path.php"] [unique_id "acFiDXsYW-_HCI66MukN0QAAAFU"]
[Mon Mar 23 23:53:49.870452 2026] [:error] [pid 38276:tid 38302] [client 40.85.246.124:25488] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/path.php"] [unique_id "acFiDZoKGiI-a7oME3If0QAAANc"]
[Mon Mar 23 23:53:50.293861 2026] [:error] [pid 38306:tid 38322] [client 40.85.246.124:25556] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/path.php"] [unique_id "acFiDjkL8qwu-hHc6BjehAAAAQ4"]
[Mon Mar 23 23:53:50.711981 2026] [:error] [pid 38306:tid 38315] [client 40.85.246.124:25479] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wdf.php"] [unique_id "acFiDjkL8qwu-hHc6BjehwAAAQc"]
[Mon Mar 23 23:53:51.121296 2026] [:error] [pid 38306:tid 38321] [client 40.85.246.124:25543] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wdf.php"] [unique_id "acFiDzkL8qwu-hHc6BjeiQAAAQ0"]
[Mon Mar 23 23:53:51.533141 2026] [:error] [pid 38276:tid 38293] [client 40.85.246.124:25485] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wdf.php"] [unique_id "acFiD5oKGiI-a7oME3If0gAAAM4"]
[Mon Mar 23 23:53:51.962027 2026] [:error] [pid 52341:tid 52366] [client 40.85.246.124:25570] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wdf.php"] [unique_id "acFiD6PKTBDR2u47Gb0w0AAAAVc"]
[Mon Mar 23 23:53:52.372154 2026] [:error] [pid 38176:tid 38190] [client 40.85.246.124:25553] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fleen.php"] [unique_id "acFiEEtG4qlh1gvNjuJslwAAAAM"]
[Mon Mar 23 23:53:52.783834 2026] [:error] [pid 38306:tid 38311] [client 40.85.246.124:25555] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fleen.php"] [unique_id "acFiEDkL8qwu-hHc6BjejgAAAQM"]
[Mon Mar 23 23:53:53.208405 2026] [:error] [pid 38178:tid 38266] [client 40.85.246.124:25592] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fleen.php"] [unique_id "acFiEQ0axWfXsVvR9udg1QAAAJg"]
[Mon Mar 23 23:53:53.619634 2026] [:error] [pid 38177:tid 38223] [client 40.85.246.124:25487] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fleen.php"] [unique_id "acFiEXsYW-_HCI66MukN1AAAAEg"]
[Mon Mar 23 23:53:54.029562 2026] [:error] [pid 38177:tid 38227] [client 40.85.246.124:25489] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-tem.php"] [unique_id "acFiEnsYW-_HCI66MukN1wAAAEw"]
[Mon Mar 23 23:53:54.442064 2026] [:error] [pid 52341:tid 52367] [client 40.85.246.124:25548] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-tem.php"] [unique_id "acFiEqPKTBDR2u47Gb0w1QAAAVg"]
[Mon Mar 23 23:53:54.851626 2026] [:error] [pid 52341:tid 52359] [client 40.85.246.124:25558] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-tem.php"] [unique_id "acFiEqPKTBDR2u47Gb0w2QAAAVA"]
[Mon Mar 23 23:53:55.277426 2026] [:error] [pid 52341:tid 52351] [client 40.85.246.124:25594] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-tem.php"] [unique_id "acFiE6PKTBDR2u47Gb0w3gAAAUg"]
[Mon Mar 23 23:53:55.691649 2026] [:error] [pid 38306:tid 38323] [client 40.85.246.124:25505] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/av6m.php"] [unique_id "acFiEzkL8qwu-hHc6BjekAAAAQ8"]
[Mon Mar 23 23:53:56.137852 2026] [:error] [pid 52341:tid 52363] [client 40.85.246.124:25545] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/av6m.php"] [unique_id "acFiFKPKTBDR2u47Gb0w5AAAAVQ"]
[Mon Mar 23 23:53:56.547368 2026] [:error] [pid 52341:tid 52359] [client 40.85.246.124:25585] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/av6m.php"] [unique_id "acFiFKPKTBDR2u47Gb0w5QAAAVA"]
[Mon Mar 23 23:53:56.969219 2026] [:error] [pid 52341:tid 52355] [client 40.85.246.124:25576] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/av6m.php"] [unique_id "acFiFKPKTBDR2u47Gb0w6QAAAUw"]
[Mon Mar 23 23:53:57.383040 2026] [:error] [pid 52341:tid 52360] [client 40.85.246.124:25572] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/autogooey.php"] [unique_id "acFiFaPKTBDR2u47Gb0w7AAAAVE"]
[Mon Mar 23 23:53:57.795415 2026] [:error] [pid 38306:tid 38317] [client 40.85.246.124:25546] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/autogooey.php"] [unique_id "acFiFTkL8qwu-hHc6BjelAAAAQk"]
[Mon Mar 23 23:53:58.236981 2026] [:error] [pid 52341:tid 52355] [client 40.85.246.124:25569] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/autogooey.php"] [unique_id "acFiFqPKTBDR2u47Gb0w8gAAAUw"]
[Mon Mar 23 23:53:58.645095 2026] [:error] [pid 38306:tid 38315] [client 40.85.246.124:25547] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/autogooey.php"] [unique_id "acFiFjkL8qwu-hHc6BjelQAAAQc"]
[Mon Mar 23 23:53:59.064947 2026] [:error] [pid 38306:tid 38328] [client 40.85.246.124:25595] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/btx25.php"] [unique_id "acFiFzkL8qwu-hHc6BjelwAAARQ"]
[Mon Mar 23 23:53:59.512847 2026] [:error] [pid 52341:tid 52356] [client 40.85.246.124:25529] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/btx25.php"] [unique_id "acFiF6PKTBDR2u47Gb0w_wAAAU0"]
[Mon Mar 23 23:53:59.924998 2026] [:error] [pid 52341:tid 52346] [client 40.85.246.124:25490] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/btx25.php"] [unique_id "acFiF6PKTBDR2u47Gb0xAwAAAUM"]
[Mon Mar 23 23:54:00.337304 2026] [:error] [pid 52341:tid 52354] [client 40.85.246.124:25509] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/btx25.php"] [unique_id "acFiGKPKTBDR2u47Gb0xBwAAAUs"]
[Mon Mar 23 23:54:00.747478 2026] [:error] [pid 52341:tid 52348] [client 40.85.246.124:25486] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mga.php"] [unique_id "acFiGKPKTBDR2u47Gb0xCQAAAUU"]
[Mon Mar 23 23:54:01.158523 2026] [:error] [pid 52341:tid 52357] [client 40.85.246.124:25472] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mga.php"] [unique_id "acFiGaPKTBDR2u47Gb0xDwAAAU4"]
[Mon Mar 23 23:54:01.601388 2026] [:error] [pid 52341:tid 52351] [client 40.85.246.124:25482] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mga.php"] [unique_id "acFiGaPKTBDR2u47Gb0xEQAAAUg"]
[Mon Mar 23 23:54:02.013070 2026] [:error] [pid 38176:tid 38205] [client 40.85.246.124:25542] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mga.php"] [unique_id "acFiGktG4qlh1gvNjuJsngAAABI"]
[Mon Mar 23 23:54:02.439012 2026] [:error] [pid 38306:tid 38325] [client 40.85.246.124:25473] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/maxro.php"] [unique_id "acFiGjkL8qwu-hHc6BjemgAAARE"]
[Mon Mar 23 23:54:02.853483 2026] [:error] [pid 38176:tid 38188] [client 40.85.246.124:25559] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/maxro.php"] [unique_id "acFiGktG4qlh1gvNjuJsoAAAAAE"]
[Mon Mar 23 23:54:03.263780 2026] [:error] [pid 38306:tid 38311] [client 40.85.246.124:25410] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/maxro.php"] [unique_id "acFiGzkL8qwu-hHc6BjenAAAAQM"]
[Mon Mar 23 23:54:03.676817 2026] [:error] [pid 38178:tid 38255] [client 40.85.246.124:25591] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/maxro.php"] [unique_id "acFiGw0axWfXsVvR9udg5AAAAI0"]
[Mon Mar 23 23:54:04.110369 2026] [:error] [pid 52341:tid 52345] [client 40.85.246.124:25408] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/agg.php"] [unique_id "acFiHKPKTBDR2u47Gb0xGgAAAUI"]
[Mon Mar 23 23:54:04.522190 2026] [:error] [pid 38176:tid 38201] [client 40.85.246.124:25551] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/agg.php"] [unique_id "acFiHEtG4qlh1gvNjuJsogAAAA4"]
[Mon Mar 23 23:54:04.934796 2026] [:error] [pid 38177:tid 38232] [client 40.85.246.124:25481] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/agg.php"] [unique_id "acFiHHsYW-_HCI66MukN3gAAAFE"]
[Mon Mar 23 23:54:05.345175 2026] [:error] [pid 52341:tid 52357] [client 40.85.246.124:25577] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/agg.php"] [unique_id "acFiHaPKTBDR2u47Gb0xHgAAAU4"]
[Mon Mar 23 23:54:05.757218 2026] [:error] [pid 52341:tid 52366] [client 40.85.246.124:25517] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/pass4.php"] [unique_id "acFiHaPKTBDR2u47Gb0xIgAAAVc"]
[Mon Mar 23 23:54:06.168474 2026] [:error] [pid 52341:tid 52365] [client 40.85.246.124:25597] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/pass4.php"] [unique_id "acFiHqPKTBDR2u47Gb0xJwAAAVY"]
[Mon Mar 23 23:54:06.585169 2026] [:error] [pid 38306:tid 38330] [client 40.85.246.124:25503] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/G-In.php"] [unique_id "acFiHjkL8qwu-hHc6BjepAAAARY"]
[Mon Mar 23 23:54:06.995256 2026] [:error] [pid 52341:tid 52351] [client 40.85.246.124:25544] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/G-In.php"] [unique_id "acFiHqPKTBDR2u47Gb0xLQAAAUg"]
[Mon Mar 23 23:54:07.414174 2026] [:error] [pid 52341:tid 52343] [client 40.85.246.124:25474] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/G-In.php"] [unique_id "acFiH6PKTBDR2u47Gb0xLwAAAUA"]
[Mon Mar 23 23:54:07.841399 2026] [:error] [pid 38176:tid 38210] [client 40.85.246.124:25494] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/G-In.php"] [unique_id "acFiH0tG4qlh1gvNjuJspgAAABc"]
[Mon Mar 23 23:54:08.275425 2026] [:error] [pid 52341:tid 52348] [client 40.85.246.124:25436] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "acFiIKPKTBDR2u47Gb0xMgAAAUU"]
[Mon Mar 23 23:54:08.696616 2026] [:error] [pid 38176:tid 38187] [client 40.85.246.124:25533] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "acFiIEtG4qlh1gvNjuJsqQAAAAA"]
[Mon Mar 23 23:54:09.108120 2026] [:error] [pid 38177:tid 38230] [client 40.85.246.124:25575] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "acFiIXsYW-_HCI66MukN3wAAAE8"]
[Mon Mar 23 23:54:09.521402 2026] [:error] [pid 38276:tid 38292] [client 40.85.246.124:25480] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "acFiIZoKGiI-a7oME3If2gAAAM0"]
[Mon Mar 23 23:54:09.954602 2026] [:error] [pid 38276:tid 38303] [client 40.85.246.124:25475] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "acFiIZoKGiI-a7oME3If2wAAANg"]
[Mon Mar 23 23:54:10.365142 2026] [:error] [pid 52341:tid 52354] [client 40.85.246.124:25510] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "acFiIqPKTBDR2u47Gb0xOwAAAUs"]
[Mon Mar 23 23:54:10.814833 2026] [:error] [pid 38176:tid 38192] [client 40.85.246.124:25498] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "acFiIktG4qlh1gvNjuJsrgAAAAU"]
[Mon Mar 23 23:54:11.230405 2026] [:error] [pid 38176:tid 38206] [client 40.85.246.124:25549] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "acFiI0tG4qlh1gvNjuJssgAAABM"]
[Mon Mar 23 23:54:11.641073 2026] [:error] [pid 52341:tid 52353] [client 40.85.246.124:25578] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "acFiI6PKTBDR2u47Gb0xQAAAAUo"]
[Mon Mar 23 23:54:12.080114 2026] [:error] [pid 52341:tid 52360] [client 40.85.246.124:25521] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "acFiJKPKTBDR2u47Gb0xQwAAAVE"]
[Mon Mar 23 23:54:12.489833 2026] [:error] [pid 38306:tid 38310] [client 40.85.246.124:25552] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "acFiJDkL8qwu-hHc6BjerAAAAQI"]
[Mon Mar 23 23:54:12.907093 2026] [:error] [pid 38178:tid 38255] [client 40.85.246.124:25530] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "acFiJA0axWfXsVvR9udg9QAAAI0"]
[Mon Mar 23 23:54:13.318219 2026] [:error] [pid 38306:tid 38312] [client 40.85.246.124:25593] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "acFiJTkL8qwu-hHc6BjergAAAQQ"]
[Mon Mar 23 23:54:13.730000 2026] [:error] [pid 38306:tid 38319] [client 40.85.246.124:25414] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "acFiJTkL8qwu-hHc6BjerwAAAQs"]
[Mon Mar 23 23:54:14.172484 2026] [:error] [pid 52341:tid 52358] [client 40.85.246.124:25560] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acFiJqPKTBDR2u47Gb0xSQAAAU8"]
[Mon Mar 23 23:54:14.586274 2026] [:error] [pid 38176:tid 38191] [client 40.85.246.124:25430] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acFiJktG4qlh1gvNjuJstwAAAAQ"]
[Mon Mar 23 23:54:15.000176 2026] [:error] [pid 38176:tid 38203] [client 40.85.246.124:25507] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acFiJktG4qlh1gvNjuJsuAAAABA"]
[Mon Mar 23 23:54:15.420626 2026] [:error] [pid 38176:tid 38187] [client 40.85.246.124:25095] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/themes/inlite/"] [unique_id "acFiJ0tG4qlh1gvNjuJsuwAAAAA"]
[Mon Mar 23 23:54:15.833496 2026] [:error] [pid 38176:tid 38202] [client 40.85.246.124:25586] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "acFiJ0tG4qlh1gvNjuJsvAAAAA8"]
[Mon Mar 23 23:54:16.250287 2026] [:error] [pid 52341:tid 52348] [client 40.85.246.124:25504] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "acFiKKPKTBDR2u47Gb0xUQAAAUU"]
[Mon Mar 23 23:54:16.661506 2026] [:error] [pid 38176:tid 38195] [client 40.85.246.124:25523] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "acFiKEtG4qlh1gvNjuJsvQAAAAg"]
[Mon Mar 23 23:54:17.074175 2026] [:error] [pid 38176:tid 38201] [client 40.85.246.124:25411] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "acFiKUtG4qlh1gvNjuJswAAAAA4"]
[Mon Mar 23 23:54:17.512621 2026] [:error] [pid 38276:tid 38300] [client 40.85.246.124:25497] [client 40.85.246.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "acFiKZoKGiI-a7oME3If5QAAANU"]
[Mon Mar 23 23:54:17.924083 2026] [:error] [pid 38176:tid 38204] [client 40.85.246.124:25584] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "acFiKUtG4qlh1gvNjuJsxwAAABE"]
[Mon Mar 23 23:54:18.350402 2026] [:error] [pid 38176:tid 38203] [client 40.85.246.124:25541] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "acFiKktG4qlh1gvNjuJsyAAAABA"]
[Mon Mar 23 23:54:18.764948 2026] [:error] [pid 38306:tid 38316] [client 40.85.246.124:25526] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "acFiKjkL8qwu-hHc6BjetgAAAQg"]
[Mon Mar 23 23:54:19.178218 2026] [:error] [pid 38306:tid 38313] [client 40.85.246.124:25442] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/wp-conflg.php"] [unique_id "acFiKzkL8qwu-hHc6BjeuAAAAQU"]
[Mon Mar 23 23:54:19.679963 2026] [:error] [pid 38306:tid 38324] [client 40.85.246.124:25477] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acFiKzkL8qwu-hHc6BjevQAAARA"]
[Mon Mar 23 23:54:20.090218 2026] [:error] [pid 38176:tid 38190] [client 40.85.246.124:25511] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acFiLEtG4qlh1gvNjuJsygAAAAM"]
[Mon Mar 23 23:54:20.538669 2026] [:error] [pid 52341:tid 52356] [client 40.85.246.124:25574] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acFiLKPKTBDR2u47Gb0xXAAAAU0"]
[Mon Mar 23 23:54:20.950653 2026] [:error] [pid 38306:tid 38322] [client 40.85.246.124:25598] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/index.php"] [unique_id "acFiLDkL8qwu-hHc6BjevwAAAQ4"]
[Mon Mar 23 23:54:21.362278 2026] [:error] [pid 38306:tid 38312] [client 40.85.246.124:25454] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/assets/css/index.php"] [unique_id "acFiLTkL8qwu-hHc6BjewQAAAQQ"]
[Mon Mar 23 23:54:21.792073 2026] [:error] [pid 38306:tid 38329] [client 40.85.246.124:25437] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/assets/css/index.php"] [unique_id "acFiLTkL8qwu-hHc6BjexAAAARU"]
[Mon Mar 23 23:54:22.215387 2026] [:error] [pid 38177:tid 38228] [client 40.85.246.124:25596] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/assets/css/index.php"] [unique_id "acFiLnsYW-_HCI66MukN7AAAAE0"]
[Mon Mar 23 23:54:22.644404 2026] [:error] [pid 38306:tid 38315] [client 40.85.246.124:25528] [client 40.85.246.124] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/assets/css/index.php"] [unique_id "acFiLjkL8qwu-hHc6BjeyAAAAQc"]
[Tue Mar 24 23:32:24.941934 2026] [:error] [pid 38767:tid 38775] [client 20.151.206.29:22811] [client 20.151.206.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "acKuiPwkUqN4GJAI5oV9SwAAAQU"]
[Tue Mar 24 23:32:25.779429 2026] [:error] [pid 3137:tid 3152] [client 20.151.206.29:22826] [client 20.151.206.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "acKuiZdZesutm6dfYM9tsgAAAM0"]
[Tue Mar 24 23:32:26.609960 2026] [:error] [pid 3137:tid 3142] [client 20.151.206.29:22846] [client 20.151.206.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "acKuipdZesutm6dfYM9tuQAAAMM"]
[Tue Mar 24 23:32:27.434382 2026] [:error] [pid 3137:tid 3144] [client 20.151.206.29:23369] [client 20.151.206.29] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "acKui5dZesutm6dfYM9tvQAAAMU"]
[Fri Mar 27 08:10:51.537516 2026] [:error] [pid 4341:tid 4345] [client 20.100.192.188:23392] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bootstrap.php"] [unique_id "acXLC-KJWrNB5dMlERFABQAAAYI"]
[Fri Mar 27 08:10:52.666363 2026] [:error] [pid 27743:tid 27787] [client 20.100.192.188:37625] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bootstrap.php"] [unique_id "acXLDCA46UYYLqzw99AR0wAAABc"]
[Fri Mar 27 08:10:53.541495 2026] [:error] [pid 27749:tid 27812] [client 20.100.192.188:13614] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bootstrap.php"] [unique_id "acXLDcEqyoMni2Q6_X52eQAAAFU"]
[Fri Mar 27 08:10:55.369191 2026] [:error] [pid 4293:tid 4303] [client 20.100.192.188:33866] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bootstrap.php"] [unique_id "acXLD5LjeJUC3OKtEx-xcAAAAUg"]
[Fri Mar 27 08:10:57.505659 2026] [:error] [pid 4293:tid 4304] [client 20.100.192.188:37606] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/asasx.php"] [unique_id "acXLEZLjeJUC3OKtEx-xegAAAUk"]
[Fri Mar 27 08:10:58.298710 2026] [:error] [pid 27750:tid 27832] [client 20.100.192.188:8563] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/asasx.php"] [unique_id "acXLEoaSil5rd17ieLxUXgAAAI4"]
[Fri Mar 27 08:10:59.448150 2026] [:error] [pid 63897:tid 63910] [client 20.100.192.188:37604] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/asasx.php"] [unique_id "acXLE2VSkmYmLu7ycYg10wAAAQs"]
[Fri Mar 27 08:11:00.148860 2026] [:error] [pid 4293:tid 4299] [client 20.100.192.188:15847] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/asasx.php"] [unique_id "acXLFJLjeJUC3OKtEx-xfgAAAUQ"]
[Fri Mar 27 08:11:01.258472 2026] [:error] [pid 4341:tid 4364] [client 20.100.192.188:2295] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/Sanskrit.php"] [unique_id "acXLFeKJWrNB5dMlERFACQAAAZU"]
[Fri Mar 27 08:11:02.691419 2026] [:error] [pid 4293:tid 4306] [client 20.100.192.188:18209] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/Sanskrit.php"] [unique_id "acXLFpLjeJUC3OKtEx-xigAAAUs"]
[Fri Mar 27 08:11:04.022910 2026] [:error] [pid 27851:tid 27882] [client 20.100.192.188:18193] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/Sanskrit.php"] [unique_id "acXLGHR2ccxe3RMCLbo15wAAANg"]
[Fri Mar 27 08:11:06.371008 2026] [:error] [pid 27750:tid 27825] [client 20.100.192.188:9369] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/Sanskrit.php"] [unique_id "acXLGoaSil5rd17ieLxUZQAAAIc"]
[Fri Mar 27 08:11:08.994792 2026] [:error] [pid 27743:tid 27775] [client 20.100.192.188:11883] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/green.php"] [unique_id "acXLHCA46UYYLqzw99AR2gAAAAs"]
[Fri Mar 27 08:11:10.379682 2026] [:error] [pid 27749:tid 27815] [client 20.100.192.188:24475] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/green.php"] [unique_id "acXLHsEqyoMni2Q6_X52gAAAAFg"]
[Fri Mar 27 08:11:11.326559 2026] [:error] [pid 63897:tid 63912] [client 20.100.192.188:15837] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/green.php"] [unique_id "acXLH2VSkmYmLu7ycYg14QAAAQ0"]
[Fri Mar 27 08:11:12.351570 2026] [:error] [pid 27750:tid 27835] [client 20.100.192.188:10658] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/green.php"] [unique_id "acXLIIaSil5rd17ieLxUagAAAJE"]
[Fri Mar 27 08:11:13.470727 2026] [:error] [pid 27750:tid 27837] [client 20.100.192.188:24466] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws87.php"] [unique_id "acXLIYaSil5rd17ieLxUbAAAAJM"]
[Fri Mar 27 08:11:14.916022 2026] [:error] [pid 27851:tid 27860] [client 20.100.192.188:16900] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws87.php"] [unique_id "acXLInR2ccxe3RMCLbo1-AAAAMI"]
[Fri Mar 27 08:11:16.271568 2026] [:error] [pid 4341:tid 4366] [client 20.100.192.188:9404] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws87.php"] [unique_id "acXLJOKJWrNB5dMlERFAFwAAAZc"]
[Fri Mar 27 08:11:17.182104 2026] [:error] [pid 63897:tid 63916] [client 20.100.192.188:19304] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws87.php"] [unique_id "acXLJWVSkmYmLu7ycYg17wAAARE"]
[Fri Mar 27 08:11:21.463817 2026] [:error] [pid 27750:tid 27838] [client 20.100.192.188:18192] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wxfyf.php"] [unique_id "acXLKYaSil5rd17ieLxUdQAAAJQ"]
[Fri Mar 27 08:11:25.044791 2026] [:error] [pid 4293:tid 4299] [client 20.100.192.188:16927] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wxfyf.php"] [unique_id "acXLLZLjeJUC3OKtEx-xxwAAAUQ"]
[Fri Mar 27 08:12:41.837249 2026] [:error] [pid 4293:tid 4304] [client 20.100.192.188:16944] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bjfl.php"] [unique_id "acXLeZLjeJUC3OKtEx-zlgAAAUk"]
[Fri Mar 27 08:12:42.887318 2026] [:error] [pid 63897:tid 63900] [client 20.100.192.188:24476] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bjfl.php"] [unique_id "acXLemVSkmYmLu7ycYg2mAAAAQE"]
[Fri Mar 27 08:12:43.898461 2026] [:error] [pid 27851:tid 27872] [client 20.100.192.188:17206] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bjfl.php"] [unique_id "acXLe3R2ccxe3RMCLbo2SwAAAM4"]
[Fri Mar 27 08:12:45.388467 2026] [:error] [pid 27851:tid 27860] [client 20.100.192.188:8839] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bjfl.php"] [unique_id "acXLfXR2ccxe3RMCLbo2UgAAAMI"]
[Fri Mar 27 08:12:46.342724 2026] [:error] [pid 4341:tid 4354] [client 20.100.192.188:2753] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/buc.php"] [unique_id "acXLfuKJWrNB5dMlERFAtwAAAYs"]
[Fri Mar 27 08:12:48.728121 2026] [:error] [pid 63897:tid 63908] [client 20.100.192.188:17713] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/buc.php"] [unique_id "acXLgGVSkmYmLu7ycYg2ogAAAQk"]
[Fri Mar 27 08:12:52.223225 2026] [:error] [pid 4293:tid 4304] [client 20.100.192.188:45256] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/buc.php"] [unique_id "acXLhJLjeJUC3OKtEx-zpgAAAUk"]
[Fri Mar 27 08:12:54.246507 2026] [:error] [pid 27749:tid 27802] [client 20.100.192.188:14482] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/buc.php"] [unique_id "acXLhsEqyoMni2Q6_X52vAAAAEs"]
[Fri Mar 27 08:12:56.135635 2026] [:error] [pid 27750:tid 27833] [client 20.100.192.188:9604] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ww.php"] [unique_id "acXLiIaSil5rd17ieLxU0AAAAI8"]
[Fri Mar 27 08:12:57.814368 2026] [:error] [pid 4293:tid 4310] [client 20.100.192.188:9209] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ww.php"] [unique_id "acXLiZLjeJUC3OKtEx-zqgAAAU8"]
[Fri Mar 27 08:12:58.944430 2026] [:error] [pid 4341:tid 4351] [client 20.100.192.188:17484] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ww.php"] [unique_id "acXLiuKJWrNB5dMlERFAxwAAAYg"]
[Fri Mar 27 08:12:59.522840 2026] [:error] [pid 4341:tid 4365] [client 20.100.192.188:2848] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ww.php"] [unique_id "acXLi-KJWrNB5dMlERFAyQAAAZY"]
[Fri Mar 27 08:13:00.459415 2026] [:error] [pid 63897:tid 63911] [client 20.100.192.188:7586] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "acXLjGVSkmYmLu7ycYg2ugAAAQw"]
[Fri Mar 27 08:13:01.624921 2026] [:error] [pid 63897:tid 63915] [client 20.100.192.188:32976] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "acXLjWVSkmYmLu7ycYg2vwAAARA"]
[Fri Mar 27 08:13:02.835574 2026] [:error] [pid 63897:tid 63921] [client 20.100.192.188:2415] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "acXLjmVSkmYmLu7ycYg2xAAAARY"]
[Fri Mar 27 08:13:03.485010 2026] [:error] [pid 4293:tid 4310] [client 20.100.192.188:15790] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "acXLj5LjeJUC3OKtEx-zswAAAU8"]
[Fri Mar 27 08:13:04.185043 2026] [:error] [pid 4341:tid 4351] [client 20.100.192.188:14549] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/as.php"] [unique_id "acXLkOKJWrNB5dMlERFA0wAAAYg"]
[Fri Mar 27 08:13:05.111911 2026] [:error] [pid 4293:tid 4319] [client 20.100.192.188:22076] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/as.php"] [unique_id "acXLkZLjeJUC3OKtEx-zvwAAAVg"]
[Fri Mar 27 08:13:06.175877 2026] [:error] [pid 27750:tid 27823] [client 20.100.192.188:7563] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/as.php"] [unique_id "acXLkoaSil5rd17ieLxU1gAAAIU"]
[Fri Mar 27 08:13:07.539196 2026] [:error] [pid 4293:tid 4296] [client 20.100.192.188:22074] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/as.php"] [unique_id "acXLk5LjeJUC3OKtEx-zygAAAUE"]
[Fri Mar 27 08:13:10.161556 2026] [:error] [pid 4293:tid 4299] [client 20.100.192.188:37516] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xfun.php"] [unique_id "acXLlpLjeJUC3OKtEx-z2AAAAUQ"]
[Fri Mar 27 08:13:11.328137 2026] [:error] [pid 4293:tid 4299] [client 20.100.192.188:33383] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xfun.php"] [unique_id "acXLl5LjeJUC3OKtEx-z4AAAAUQ"]
[Fri Mar 27 08:13:12.557801 2026] [:error] [pid 4293:tid 4307] [client 20.100.192.188:2109] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xfun.php"] [unique_id "acXLmJLjeJUC3OKtEx-z5AAAAUw"]
[Fri Mar 27 08:13:13.565676 2026] [:error] [pid 4293:tid 4319] [client 20.100.192.188:21339] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xfun.php"] [unique_id "acXLmZLjeJUC3OKtEx-z7QAAAVg"]
[Fri Mar 27 08:13:14.672630 2026] [:error] [pid 63897:tid 63920] [client 20.100.192.188:2930] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws88.php"] [unique_id "acXLmmVSkmYmLu7ycYg20wAAARU"]
[Fri Mar 27 08:13:16.348700 2026] [:error] [pid 63897:tid 63913] [client 20.100.192.188:13384] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws88.php"] [unique_id "acXLnGVSkmYmLu7ycYg21gAAAQ4"]
[Fri Mar 27 08:13:17.219988 2026] [:error] [pid 63897:tid 63908] [client 20.100.192.188:33361] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws88.php"] [unique_id "acXLnWVSkmYmLu7ycYg22QAAAQk"]
[Fri Mar 27 08:13:18.133188 2026] [:error] [pid 4293:tid 4316] [client 20.100.192.188:33401] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws88.php"] [unique_id "acXLnpLjeJUC3OKtEx-0AAAAAVU"]
[Fri Mar 27 08:13:19.477336 2026] [:error] [pid 27750:tid 27834] [client 20.100.192.188:33398] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "acXLn4aSil5rd17ieLxU2QAAAJA"]
[Fri Mar 27 08:13:20.384368 2026] [:error] [pid 63897:tid 63920] [client 20.100.192.188:37553] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "acXLoGVSkmYmLu7ycYg24wAAARU"]
[Fri Mar 27 08:13:21.751305 2026] [:error] [pid 27749:tid 27791] [client 20.100.192.188:7235] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "acXLocEqyoMni2Q6_X52ygAAAEA"]
[Fri Mar 27 08:13:22.620669 2026] [:error] [pid 63897:tid 63921] [client 20.100.192.188:18946] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "acXLomVSkmYmLu7ycYg26AAAARY"]
[Fri Mar 27 08:13:23.554715 2026] [:error] [pid 63897:tid 63905] [client 20.100.192.188:14781] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "acXLo2VSkmYmLu7ycYg27AAAAQY"]
[Fri Mar 27 08:13:24.428412 2026] [:error] [pid 63897:tid 63908] [client 20.100.192.188:18995] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "acXLpGVSkmYmLu7ycYg28QAAAQk"]
[Fri Mar 27 08:13:25.217901 2026] [:error] [pid 4293:tid 4313] [client 20.100.192.188:11635] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "acXLpZLjeJUC3OKtEx-0CAAAAVI"]
[Fri Mar 27 08:13:25.936741 2026] [:error] [pid 27851:tid 27865] [client 20.100.192.188:19203] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "acXLpXR2ccxe3RMCLbo2egAAAMc"]
[Fri Mar 27 08:13:26.762156 2026] [:error] [pid 27750:tid 27836] [client 20.100.192.188:13433] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/Cap.php"] [unique_id "acXLpoaSil5rd17ieLxU5AAAAJI"]
[Fri Mar 27 08:13:27.848895 2026] [:error] [pid 63897:tid 63912] [client 20.100.192.188:25906] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/Cap.php"] [unique_id "acXLp2VSkmYmLu7ycYg3AQAAAQ0"]
[Fri Mar 27 08:13:28.822993 2026] [:error] [pid 63897:tid 63918] [client 20.100.192.188:9918] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/Cap.php"] [unique_id "acXLqGVSkmYmLu7ycYg3CAAAARM"]
[Fri Mar 27 08:13:29.758887 2026] [:error] [pid 63897:tid 63906] [client 20.100.192.188:2362] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/Cap.php"] [unique_id "acXLqWVSkmYmLu7ycYg3EAAAAQc"]
[Fri Mar 27 08:13:30.484480 2026] [:error] [pid 27851:tid 27858] [client 20.100.192.188:13059] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/h2.php"] [unique_id "acXLqnR2ccxe3RMCLbo2gAAAAMA"]
[Fri Mar 27 08:13:31.228103 2026] [:error] [pid 4293:tid 4301] [client 20.100.192.188:13080] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/h2.php"] [unique_id "acXLq5LjeJUC3OKtEx-0EwAAAUY"]
[Fri Mar 27 08:13:32.361516 2026] [:error] [pid 63897:tid 63918] [client 20.100.192.188:33364] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/h2.php"] [unique_id "acXLrGVSkmYmLu7ycYg3GgAAARM"]
[Fri Mar 27 08:13:33.047030 2026] [:error] [pid 4293:tid 4306] [client 20.100.192.188:9216] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/h2.php"] [unique_id "acXLrZLjeJUC3OKtEx-0GQAAAUs"]
[Fri Mar 27 08:13:34.276807 2026] [:error] [pid 27750:tid 27822] [client 20.100.192.188:37537] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "acXLroaSil5rd17ieLxU5wAAAIQ"]
[Fri Mar 27 08:13:35.479429 2026] [:error] [pid 27851:tid 27864] [client 20.100.192.188:2361] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "acXLr3R2ccxe3RMCLbo2hgAAAMY"]
[Fri Mar 27 08:13:36.444521 2026] [:error] [pid 4341:tid 4352] [client 20.100.192.188:26494] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "acXLsOKJWrNB5dMlERFBFQAAAYk"]
[Fri Mar 27 08:13:37.565720 2026] [:error] [pid 4341:tid 4347] [client 20.100.192.188:11584] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "acXLseKJWrNB5dMlERFBHQAAAYQ"]
[Fri Mar 27 08:13:38.474770 2026] [:error] [pid 27750:tid 27835] [client 20.100.192.188:12145] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/s.php"] [unique_id "acXLsoaSil5rd17ieLxU7gAAAJE"]
[Fri Mar 27 08:13:39.248991 2026] [:error] [pid 4341:tid 4355] [client 20.100.192.188:12123] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/s.php"] [unique_id "acXLs-KJWrNB5dMlERFBKAAAAYw"]
[Fri Mar 27 08:13:39.921080 2026] [:error] [pid 4341:tid 4367] [client 20.100.192.188:13849] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/s.php"] [unique_id "acXLs-KJWrNB5dMlERFBKgAAAZg"]
[Fri Mar 27 08:13:40.830473 2026] [:error] [pid 4293:tid 4309] [client 20.100.192.188:33348] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/s.php"] [unique_id "acXLtJLjeJUC3OKtEx-0MQAAAU4"]
[Fri Mar 27 08:13:51.827190 2026] [:error] [pid 4341:tid 4366] [client 20.100.192.188:18966] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/t.php"] [unique_id "acXLv-KJWrNB5dMlERFBVgAAAZc"]
[Fri Mar 27 08:13:52.651398 2026] [:error] [pid 4293:tid 4295] [client 20.100.192.188:9261] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/t.php"] [unique_id "acXLwJLjeJUC3OKtEx-0dgAAAUA"]
[Fri Mar 27 08:13:54.470775 2026] [:error] [pid 27743:tid 27772] [client 20.100.192.188:13082] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/t.php"] [unique_id "acXLwiA46UYYLqzw99ASLgAAAAg"]
[Fri Mar 27 08:13:55.128828 2026] [:error] [pid 4293:tid 4319] [client 20.100.192.188:21113] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/t.php"] [unique_id "acXLw5LjeJUC3OKtEx-0egAAAVg"]
[Fri Mar 27 08:13:56.281712 2026] [:error] [pid 4293:tid 4297] [client 20.100.192.188:21373] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acXLxJLjeJUC3OKtEx-0hAAAAUI"]
[Fri Mar 27 08:13:57.539136 2026] [:error] [pid 4341:tid 4364] [client 20.100.192.188:9233] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acXLxeKJWrNB5dMlERFBXgAAAZU"]
[Fri Mar 27 08:13:59.148272 2026] [:error] [pid 4293:tid 4316] [client 20.100.192.188:21335] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acXLx5LjeJUC3OKtEx-0mQAAAVU"]
[Fri Mar 27 08:14:00.179769 2026] [:error] [pid 4293:tid 4303] [client 20.100.192.188:26433] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acXLyJLjeJUC3OKtEx-0nAAAAUg"]
[Fri Mar 27 08:14:01.398291 2026] [:error] [pid 4293:tid 4302] [client 20.100.192.188:2942] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/public/ws49.php"] [unique_id "acXLyZLjeJUC3OKtEx-0oQAAAUc"]
[Fri Mar 27 08:14:02.098437 2026] [:error] [pid 27750:tid 27828] [client 20.100.192.188:21119] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/public/ws49.php"] [unique_id "acXLyoaSil5rd17ieLxVEAAAAIo"]
[Fri Mar 27 08:14:02.983167 2026] [:error] [pid 4293:tid 4310] [client 20.100.192.188:2108] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/public/ws49.php"] [unique_id "acXLypLjeJUC3OKtEx-0pQAAAU8"]
[Fri Mar 27 08:14:04.254835 2026] [:error] [pid 27851:tid 27870] [client 20.100.192.188:7601] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/public/ws49.php"] [unique_id "acXLzHR2ccxe3RMCLbo2tAAAAMw"]
[Fri Mar 27 08:14:05.196352 2026] [:error] [pid 27851:tid 27863] [client 20.100.192.188:19993] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "acXLzXR2ccxe3RMCLbo2uAAAAMU"]
[Fri Mar 27 08:14:05.970066 2026] [:error] [pid 27851:tid 27859] [client 20.100.192.188:37508] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "acXLzXR2ccxe3RMCLbo2uQAAAME"]
[Fri Mar 27 08:14:07.169658 2026] [:error] [pid 27750:tid 27831] [client 20.100.192.188:7606] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "acXLz4aSil5rd17ieLxVFAAAAI0"]
[Fri Mar 27 08:14:08.181505 2026] [:error] [pid 27750:tid 27835] [client 20.100.192.188:19972] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "acXL0IaSil5rd17ieLxVFwAAAJE"]
[Fri Mar 27 08:14:09.088373 2026] [:error] [pid 27851:tid 27868] [client 20.100.192.188:14577] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/sa.php7"] [unique_id "acXL0XR2ccxe3RMCLbo2vwAAAMo"]
[Fri Mar 27 08:14:10.064364 2026] [:error] [pid 27851:tid 27867] [client 20.100.192.188:33358] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/sa.php7"] [unique_id "acXL0nR2ccxe3RMCLbo2xQAAAMk"]
[Fri Mar 27 08:14:11.124278 2026] [:error] [pid 63897:tid 63915] [client 20.100.192.188:21352] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/sa.php7"] [unique_id "acXL02VSkmYmLu7ycYg3PAAAARA"]
[Fri Mar 27 08:14:11.870482 2026] [:error] [pid 63897:tid 63909] [client 20.100.192.188:2101] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/sa.php7"] [unique_id "acXL02VSkmYmLu7ycYg3PwAAAQo"]
[Fri Mar 27 08:14:12.586862 2026] [:error] [pid 4293:tid 4317] [client 20.100.192.188:2076] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "acXL1JLjeJUC3OKtEx-0tgAAAVY"]
[Fri Mar 27 08:14:13.316806 2026] [:error] [pid 27750:tid 27841] [client 20.100.192.188:2898] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "acXL1YaSil5rd17ieLxVJAAAAJc"]
[Fri Mar 27 08:14:16.086563 2026] [:error] [pid 27743:tid 27768] [client 20.100.192.188:21362] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "acXL2CA46UYYLqzw99ASOwAAAAQ"]
[Fri Mar 27 08:14:17.617366 2026] [:error] [pid 4341:tid 4364] [client 20.100.192.188:20000] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "acXL2eKJWrNB5dMlERFBcAAAAZU"]
[Fri Mar 27 08:14:20.801775 2026] [:error] [pid 4293:tid 4309] [client 20.100.192.188:7291] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "acXL3JLjeJUC3OKtEx-00gAAAU4"]
[Fri Mar 27 08:14:22.656458 2026] [:error] [pid 4341:tid 4346] [client 20.100.192.188:37526] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "acXL3uKJWrNB5dMlERFBgAAAAYM"]
[Fri Mar 27 08:14:24.599496 2026] [:error] [pid 27851:tid 27879] [client 20.100.192.188:2396] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "acXL4HR2ccxe3RMCLbo2zAAAANU"]
[Fri Mar 27 08:14:26.298443 2026] [:error] [pid 4341:tid 4345] [client 20.100.192.188:21319] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "acXL4uKJWrNB5dMlERFBiAAAAYI"]
[Fri Mar 27 08:14:30.004186 2026] [:error] [pid 63897:tid 63902] [client 20.100.192.188:22051] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "acXL5mVSkmYmLu7ycYg3XwAAAQM"]
[Fri Mar 27 08:14:31.313612 2026] [:error] [pid 4293:tid 4311] [client 20.100.192.188:15763] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "acXL55LjeJUC3OKtEx-0_wAAAVA"]
[Fri Mar 27 08:14:34.907283 2026] [:error] [pid 4293:tid 4308] [client 20.100.192.188:2057] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "acXL6pLjeJUC3OKtEx-1BgAAAU0"]
[Fri Mar 27 08:14:35.953144 2026] [:error] [pid 63897:tid 63908] [client 20.100.192.188:11251] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "acXL62VSkmYmLu7ycYg3cgAAAQk"]
[Fri Mar 27 08:14:37.523647 2026] [:error] [pid 27749:tid 27815] [client 20.100.192.188:17501] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/amp.php"] [unique_id "acXL7cEqyoMni2Q6_X53JgAAAFg"]
[Fri Mar 27 08:14:38.388990 2026] [:error] [pid 4341:tid 4358] [client 20.100.192.188:22040] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/amp.php"] [unique_id "acXL7uKJWrNB5dMlERFBkQAAAY8"]
[Fri Mar 27 08:14:39.257343 2026] [:error] [pid 27750:tid 27824] [client 20.100.192.188:20011] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/amp.php"] [unique_id "acXL74aSil5rd17ieLxVjgAAAIY"]
[Fri Mar 27 08:14:40.020774 2026] [:error] [pid 4293:tid 4303] [client 20.100.192.188:21345] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/amp.php"] [unique_id "acXL8JLjeJUC3OKtEx-1DQAAAUg"]
[Fri Mar 27 08:14:40.697063 2026] [:error] [pid 4293:tid 4308] [client 20.100.192.188:20024] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/init.php"] [unique_id "acXL8JLjeJUC3OKtEx-1EgAAAU0"]
[Fri Mar 27 08:14:41.437653 2026] [:error] [pid 4293:tid 4317] [client 20.100.192.188:32962] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/init.php"] [unique_id "acXL8ZLjeJUC3OKtEx-1GAAAAVY"]
[Fri Mar 27 08:14:42.020663 2026] [:error] [pid 4293:tid 4310] [client 20.100.192.188:11256] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/init.php"] [unique_id "acXL8pLjeJUC3OKtEx-1GwAAAU8"]
[Fri Mar 27 08:14:42.784324 2026] [:error] [pid 27750:tid 27820] [client 20.100.192.188:2065] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/init.php"] [unique_id "acXL8oaSil5rd17ieLxVkgAAAII"]
[Fri Mar 27 08:14:43.405550 2026] [:error] [pid 27851:tid 27869] [client 20.100.192.188:18708] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "acXL83R2ccxe3RMCLbo23wAAAMs"]
[Fri Mar 27 08:14:44.265987 2026] [:error] [pid 4293:tid 4295] [client 20.100.192.188:22032] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "acXL9JLjeJUC3OKtEx-1JAAAAUA"]
[Fri Mar 27 08:14:44.993216 2026] [:error] [pid 4293:tid 4319] [client 20.100.192.188:15767] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "acXL9JLjeJUC3OKtEx-1KgAAAVg"]
[Fri Mar 27 08:14:45.566762 2026] [:error] [pid 4293:tid 4307] [client 20.100.192.188:33005] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "acXL9ZLjeJUC3OKtEx-1LQAAAUw"]
[Fri Mar 27 08:14:46.237118 2026] [:error] [pid 4293:tid 4300] [client 20.100.192.188:9165] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/myfile.php"] [unique_id "acXL9pLjeJUC3OKtEx-1MwAAAUU"]
[Fri Mar 27 08:14:47.400406 2026] [:error] [pid 4293:tid 4315] [client 20.100.192.188:17506] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/myfile.php"] [unique_id "acXL95LjeJUC3OKtEx-1OAAAAVQ"]
[Fri Mar 27 08:14:48.282271 2026] [:error] [pid 63897:tid 63916] [client 20.100.192.188:17523] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/myfile.php"] [unique_id "acXL-GVSkmYmLu7ycYg3mgAAARE"]
[Fri Mar 27 08:14:49.147283 2026] [:error] [pid 4293:tid 4306] [client 20.100.192.188:8718] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/myfile.php"] [unique_id "acXL-ZLjeJUC3OKtEx-1PAAAAUs"]
[Fri Mar 27 08:14:49.895893 2026] [:error] [pid 27851:tid 27880] [client 20.100.192.188:2387] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "acXL-XR2ccxe3RMCLbo26AAAANY"]
[Fri Mar 27 08:14:50.465523 2026] [:error] [pid 4293:tid 4304] [client 20.100.192.188:20006] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "acXL-pLjeJUC3OKtEx-1QwAAAUk"]
[Fri Mar 27 08:14:59.355152 2026] [:error] [pid 4293:tid 4315] [client 20.100.192.188:20861] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/install.php"] [unique_id "acXMA5LjeJUC3OKtEx-1cQAAAVQ"]
[Fri Mar 27 08:15:00.111494 2026] [:error] [pid 63897:tid 63916] [client 20.100.192.188:11208] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/install.php"] [unique_id "acXMBGVSkmYmLu7ycYg3yQAAARE"]
[Fri Mar 27 08:15:00.652613 2026] [:error] [pid 63897:tid 63920] [client 20.100.192.188:17479] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/install.php"] [unique_id "acXMBGVSkmYmLu7ycYg3zAAAARU"]
[Fri Mar 27 08:15:01.306279 2026] [:error] [pid 63897:tid 63905] [client 20.100.192.188:7608] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/install.php"] [unique_id "acXMBWVSkmYmLu7ycYg30AAAAQY"]
[Fri Mar 27 08:15:02.087542 2026] [:error] [pid 63897:tid 63902] [client 20.100.192.188:21092] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/public/wp-blog.php"] [unique_id "acXMBmVSkmYmLu7ycYg30wAAAQM"]
[Fri Mar 27 08:15:02.725453 2026] [:error] [pid 27743:tid 27780] [client 20.100.192.188:21068] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/public/wp-blog.php"] [unique_id "acXMBiA46UYYLqzw99ASdgAAABA"]
[Fri Mar 27 08:15:03.264787 2026] [:error] [pid 4293:tid 4317] [client 20.100.192.188:2421] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/public/wp-blog.php"] [unique_id "acXMB5LjeJUC3OKtEx-1dAAAAVY"]
[Fri Mar 27 08:15:03.852875 2026] [:error] [pid 63897:tid 63905] [client 20.100.192.188:22100] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/public/wp-blog.php"] [unique_id "acXMB2VSkmYmLu7ycYg33AAAAQY"]
[Fri Mar 27 08:15:04.494656 2026] [:error] [pid 63897:tid 63909] [client 20.100.192.188:22090] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "acXMCGVSkmYmLu7ycYg33wAAAQo"]
[Fri Mar 27 08:15:05.088453 2026] [:error] [pid 63897:tid 63919] [client 20.100.192.188:21334] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "acXMCWVSkmYmLu7ycYg34AAAARQ"]
[Fri Mar 27 08:15:05.975532 2026] [:error] [pid 63897:tid 63904] [client 20.100.192.188:11250] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "acXMCWVSkmYmLu7ycYg35gAAAQU"]
[Fri Mar 27 08:15:06.789249 2026] [:error] [pid 27851:tid 27880] [client 20.100.192.188:20842] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "acXMCnR2ccxe3RMCLbo27gAAANY"]
[Fri Mar 27 08:15:07.425003 2026] [:error] [pid 4293:tid 4295] [client 20.100.192.188:22019] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "acXMC5LjeJUC3OKtEx-1fwAAAUA"]
[Fri Mar 27 08:15:08.099302 2026] [:error] [pid 4341:tid 4357] [client 20.100.192.188:22057] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "acXMDOKJWrNB5dMlERFBpgAAAY4"]
[Fri Mar 27 08:15:08.708777 2026] [:error] [pid 4341:tid 4351] [client 20.100.192.188:21323] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "acXMDOKJWrNB5dMlERFBqgAAAYg"]
[Fri Mar 27 08:15:09.751310 2026] [:error] [pid 63897:tid 63920] [client 20.100.192.188:15803] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "acXMDWVSkmYmLu7ycYg36wAAARU"]
[Fri Mar 27 08:15:10.440119 2026] [:error] [pid 4293:tid 4302] [client 20.100.192.188:15751] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/drhunthq.php"] [unique_id "acXMDpLjeJUC3OKtEx-1gwAAAUc"]
[Fri Mar 27 08:15:11.092726 2026] [:error] [pid 27851:tid 27879] [client 20.100.192.188:32984] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/drhunthq.php"] [unique_id "acXMD3R2ccxe3RMCLbo28gAAANU"]
[Fri Mar 27 08:15:11.972188 2026] [:error] [pid 4341:tid 4359] [client 20.100.192.188:2368] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/drhunthq.php"] [unique_id "acXMD-KJWrNB5dMlERFBsQAAAZA"]
[Fri Mar 27 08:15:12.710745 2026] [:error] [pid 27851:tid 27877] [client 20.100.192.188:11219] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/drhunthq.php"] [unique_id "acXMEHR2ccxe3RMCLbo29QAAANM"]
[Fri Mar 27 08:15:13.609462 2026] [:error] [pid 4293:tid 4301] [client 20.100.192.188:17487] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tfm.php"] [unique_id "acXMEZLjeJUC3OKtEx-1kAAAAUY"]
[Fri Mar 27 08:15:14.456641 2026] [:error] [pid 4293:tid 4316] [client 20.100.192.188:21312] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tfm.php"] [unique_id "acXMEpLjeJUC3OKtEx-1lQAAAVU"]
[Fri Mar 27 08:15:15.429508 2026] [:error] [pid 4293:tid 4318] [client 20.100.192.188:21358] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tfm.php"] [unique_id "acXME5LjeJUC3OKtEx-1ngAAAVc"]
[Fri Mar 27 08:15:16.710151 2026] [:error] [pid 4341:tid 4364] [client 20.100.192.188:2067] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tfm.php"] [unique_id "acXMFOKJWrNB5dMlERFBtwAAAZU"]
[Fri Mar 27 08:15:17.557378 2026] [:error] [pid 4341:tid 4352] [client 20.100.192.188:2050] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "acXMFeKJWrNB5dMlERFBugAAAYk"]
[Fri Mar 27 08:15:18.511996 2026] [:error] [pid 4293:tid 4315] [client 20.100.192.188:11232] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "acXMFpLjeJUC3OKtEx-1qQAAAVQ"]
[Fri Mar 27 08:15:19.315644 2026] [:error] [pid 4293:tid 4306] [client 20.100.192.188:12113] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "acXMF5LjeJUC3OKtEx-1rQAAAUs"]
[Fri Mar 27 08:15:20.115719 2026] [:error] [pid 27743:tid 27780] [client 20.100.192.188:8828] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "acXMGCA46UYYLqzw99ASfQAAABA"]
[Fri Mar 27 08:15:20.721315 2026] [:error] [pid 27743:tid 27770] [client 20.100.192.188:12106] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "acXMGCA46UYYLqzw99ASgQAAAAY"]
[Fri Mar 27 08:15:21.411768 2026] [:error] [pid 27750:tid 27820] [client 20.100.192.188:9172] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "acXMGYaSil5rd17ieLxVpgAAAII"]
[Fri Mar 27 08:15:22.047310 2026] [:error] [pid 4293:tid 4303] [client 20.100.192.188:22126] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "acXMGpLjeJUC3OKtEx-1sQAAAUg"]
[Fri Mar 27 08:15:22.854712 2026] [:error] [pid 4293:tid 4319] [client 20.100.192.188:2073] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "acXMGpLjeJUC3OKtEx-1tgAAAVg"]
[Fri Mar 27 08:15:23.388776 2026] [:error] [pid 4293:tid 4313] [client 20.100.192.188:2405] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "acXMG5LjeJUC3OKtEx-1vQAAAVI"]
[Fri Mar 27 08:15:24.072944 2026] [:error] [pid 4341:tid 4361] [client 20.100.192.188:12158] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "acXMHOKJWrNB5dMlERFBwAAAAZI"]
[Fri Mar 27 08:15:24.711432 2026] [:error] [pid 27749:tid 27793] [client 20.100.192.188:21355] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "acXMHMEqyoMni2Q6_X53RgAAAEI"]
[Fri Mar 27 08:15:25.434727 2026] [:error] [pid 27750:tid 27825] [client 20.100.192.188:19976] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "acXMHYaSil5rd17ieLxVpwAAAIc"]
[Fri Mar 27 08:15:26.091441 2026] [:error] [pid 27749:tid 27813] [client 20.100.192.188:21361] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "acXMHsEqyoMni2Q6_X53SgAAAFY"]
[Fri Mar 27 08:15:26.704103 2026] [:error] [pid 27851:tid 27876] [client 20.100.192.188:12129] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "acXMHnR2ccxe3RMCLbo3AQAAANI"]
[Fri Mar 27 08:15:27.395301 2026] [:error] [pid 4341:tid 4355] [client 20.100.192.188:7600] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "acXMH-KJWrNB5dMlERFBxQAAAYw"]
[Fri Mar 27 08:15:27.946046 2026] [:error] [pid 27749:tid 27794] [client 20.100.192.188:17505] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "acXMH8EqyoMni2Q6_X53TAAAAEM"]
[Fri Mar 27 08:15:28.574888 2026] [:error] [pid 63897:tid 63910] [client 20.100.192.188:20004] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tfm.php"] [unique_id "acXMIGVSkmYmLu7ycYg39wAAAQs"]
[Fri Mar 27 08:15:29.134539 2026] [:error] [pid 63897:tid 63916] [client 20.100.192.188:20808] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tfm.php"] [unique_id "acXMIWVSkmYmLu7ycYg3-QAAARE"]
[Fri Mar 27 08:15:29.980302 2026] [:error] [pid 4341:tid 4351] [client 20.100.192.188:2389] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tfm.php"] [unique_id "acXMIeKJWrNB5dMlERFBxwAAAYg"]
[Fri Mar 27 08:15:30.660607 2026] [:error] [pid 4293:tid 4296] [client 20.100.192.188:12108] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tfm.php"] [unique_id "acXMIpLjeJUC3OKtEx-11AAAAUE"]
[Fri Mar 27 08:15:31.233341 2026] [:error] [pid 4293:tid 4299] [client 20.100.192.188:2418] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "acXMI5LjeJUC3OKtEx-11QAAAUQ"]
[Fri Mar 27 08:15:31.843782 2026] [:error] [pid 4341:tid 4354] [client 20.100.192.188:14545] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "acXMI-KJWrNB5dMlERFBygAAAYs"]
[Fri Mar 27 08:15:32.398116 2026] [:error] [pid 63897:tid 63901] [client 20.100.192.188:22141] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "acXMJGVSkmYmLu7ycYg4AwAAAQI"]
[Fri Mar 27 08:15:33.007176 2026] [:error] [pid 4341:tid 4356] [client 20.100.192.188:20025] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "acXMJeKJWrNB5dMlERFBzwAAAY0"]
[Fri Mar 27 08:15:33.602475 2026] [:error] [pid 63897:tid 63915] [client 20.100.192.188:12153] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/term.php"] [unique_id "acXMJWVSkmYmLu7ycYg4BwAAARA"]
[Fri Mar 27 08:15:34.230725 2026] [:error] [pid 63897:tid 63904] [client 20.100.192.188:14573] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/term.php"] [unique_id "acXMJmVSkmYmLu7ycYg4CgAAAQU"]
[Fri Mar 27 08:15:34.802709 2026] [:error] [pid 27749:tid 27801] [client 20.100.192.188:2411] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/term.php"] [unique_id "acXMJsEqyoMni2Q6_X53UQAAAEo"]
[Fri Mar 27 08:15:35.397027 2026] [:error] [pid 63897:tid 63905] [client 20.100.192.188:22128] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/term.php"] [unique_id "acXMJ2VSkmYmLu7ycYg4DwAAAQY"]
[Fri Mar 27 08:15:36.050077 2026] [:error] [pid 4341:tid 4345] [client 20.100.192.188:22055] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "acXMKOKJWrNB5dMlERFB2gAAAYI"]
[Fri Mar 27 08:15:36.610889 2026] [:error] [pid 27743:tid 27776] [client 20.100.192.188:8848] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "acXMKCA46UYYLqzw99ASkQAAAAw"]
[Fri Mar 27 08:15:37.223661 2026] [:error] [pid 27749:tid 27807] [client 20.100.192.188:17178] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "acXMKcEqyoMni2Q6_X53VQAAAFA"]
[Fri Mar 27 08:15:37.870678 2026] [:error] [pid 27749:tid 27811] [client 20.100.192.188:2384] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "acXMKcEqyoMni2Q6_X53WAAAAFQ"]
[Fri Mar 27 08:15:38.445876 2026] [:error] [pid 27743:tid 27778] [client 20.100.192.188:2398] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/155.php"] [unique_id "acXMKiA46UYYLqzw99ASlgAAAA4"]
[Fri Mar 27 08:15:39.106296 2026] [:error] [pid 27851:tid 27872] [client 20.100.192.188:8838] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/155.php"] [unique_id "acXMK3R2ccxe3RMCLbo3DgAAAM4"]
[Fri Mar 27 08:15:40.046427 2026] [:error] [pid 4293:tid 4297] [client 20.100.192.188:2828] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/155.php"] [unique_id "acXMLJLjeJUC3OKtEx-15QAAAUI"]
[Fri Mar 27 08:15:40.888901 2026] [:error] [pid 27743:tid 27771] [client 20.100.192.188:9164] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/155.php"] [unique_id "acXMLCA46UYYLqzw99ASmgAAAAc"]
[Fri Mar 27 08:15:41.760589 2026] [:error] [pid 4293:tid 4312] [client 20.100.192.188:21313] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "acXMLZLjeJUC3OKtEx-17gAAAVE"]
[Fri Mar 27 08:15:42.655155 2026] [:error] [pid 4293:tid 4296] [client 20.100.192.188:22124] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "acXMLpLjeJUC3OKtEx-18gAAAUE"]
[Fri Mar 27 08:15:43.332489 2026] [:error] [pid 63897:tid 63901] [client 20.100.192.188:7587] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "acXML2VSkmYmLu7ycYg4SgAAAQI"]
[Fri Mar 27 08:15:44.050622 2026] [:error] [pid 27750:tid 27839] [client 20.100.192.188:11244] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "acXMMIaSil5rd17ieLxV2AAAAJU"]
[Fri Mar 27 08:15:45.010590 2026] [:error] [pid 4341:tid 4366] [client 20.100.192.188:2106] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "acXMMeKJWrNB5dMlERFCIQAAAZc"]
[Fri Mar 27 08:15:45.578842 2026] [:error] [pid 4293:tid 4314] [client 20.100.192.188:11252] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "acXMMZLjeJUC3OKtEx-19gAAAVM"]
[Fri Mar 27 08:15:46.469938 2026] [:error] [pid 4293:tid 4296] [client 20.100.192.188:20858] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "acXMMpLjeJUC3OKtEx-1_AAAAUE"]
[Fri Mar 27 08:15:47.028740 2026] [:error] [pid 4341:tid 4344] [client 20.100.192.188:12157] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "acXMM-KJWrNB5dMlERFCIwAAAYE"]
[Fri Mar 27 08:15:47.773479 2026] [:error] [pid 27743:tid 27771] [client 20.100.192.188:12116] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "acXMMyA46UYYLqzw99ASpwAAAAc"]
[Fri Mar 27 08:15:48.961524 2026] [:error] [pid 63897:tid 63900] [client 20.100.192.188:22033] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "acXMNGVSkmYmLu7ycYg4UAAAAQE"]
[Fri Mar 27 08:15:49.598605 2026] [:error] [pid 63897:tid 63907] [client 20.100.192.188:21364] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "acXMNWVSkmYmLu7ycYg4UQAAAQg"]
[Fri Mar 27 08:15:50.337132 2026] [:error] [pid 27750:tid 27828] [client 20.100.192.188:15770] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "acXMNoaSil5rd17ieLxV5AAAAIo"]
[Fri Mar 27 08:15:52.623211 2026] [:error] [pid 4293:tid 4311] [client 20.100.192.188:15799] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/hots.php"] [unique_id "acXMOJLjeJUC3OKtEx-2CwAAAVA"]
[Fri Mar 27 08:15:53.922953 2026] [:error] [pid 4293:tid 4297] [client 20.100.192.188:22140] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/hots.php"] [unique_id "acXMOZLjeJUC3OKtEx-2EgAAAUI"]
[Fri Mar 27 08:15:54.640234 2026] [:error] [pid 4293:tid 4300] [client 20.100.192.188:2407] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/hots.php"] [unique_id "acXMOpLjeJUC3OKtEx-2GwAAAUU"]
[Fri Mar 27 08:15:55.249002 2026] [:error] [pid 4293:tid 4303] [client 20.100.192.188:11254] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/hots.php"] [unique_id "acXMO5LjeJUC3OKtEx-2HgAAAUg"]
[Fri Mar 27 08:15:55.944999 2026] [:error] [pid 27750:tid 27838] [client 20.100.192.188:2087] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin-footer.php"] [unique_id "acXMO4aSil5rd17ieLxV5wAAAJQ"]
[Fri Mar 27 08:15:56.568121 2026] [:error] [pid 27743:tid 27784] [client 20.100.192.188:21079] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin-footer.php"] [unique_id "acXMPCA46UYYLqzw99ASsQAAABQ"]
[Fri Mar 27 08:15:57.239517 2026] [:error] [pid 27749:tid 27807] [client 20.100.192.188:19985] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin-footer.php"] [unique_id "acXMPcEqyoMni2Q6_X53iwAAAFA"]
[Fri Mar 27 08:15:57.882656 2026] [:error] [pid 27851:tid 27870] [client 20.100.192.188:7561] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin-footer.php"] [unique_id "acXMPXR2ccxe3RMCLbo3HQAAAMw"]
[Fri Mar 27 08:15:58.580785 2026] [:error] [pid 63897:tid 63917] [client 20.100.192.188:33014] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "acXMPmVSkmYmLu7ycYg4ZAAAARI"]
[Fri Mar 27 08:16:06.552897 2026] [:error] [pid 63897:tid 63923] [client 20.100.192.188:20856] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws60.php"] [unique_id "acXMRmVSkmYmLu7ycYg4hQAAARg"]
[Fri Mar 27 08:16:07.092126 2026] [:error] [pid 27851:tid 27865] [client 20.100.192.188:20012] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws60.php"] [unique_id "acXMR3R2ccxe3RMCLbo3JgAAAMc"]
[Fri Mar 27 08:16:08.028657 2026] [:error] [pid 4293:tid 4315] [client 20.100.192.188:17476] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws60.php"] [unique_id "acXMSJLjeJUC3OKtEx-2SQAAAVQ"]
[Fri Mar 27 08:16:08.837323 2026] [:error] [pid 27750:tid 27841] [client 20.100.192.188:2383] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws60.php"] [unique_id "acXMSIaSil5rd17ieLxWFgAAAJc"]
[Fri Mar 27 08:16:09.759337 2026] [:error] [pid 63897:tid 63911] [client 20.100.192.188:15784] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/vanda.php"] [unique_id "acXMSWVSkmYmLu7ycYg4jQAAAQw"]
[Fri Mar 27 08:16:10.802158 2026] [:error] [pid 4293:tid 4311] [client 20.100.192.188:11230] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/vanda.php"] [unique_id "acXMSpLjeJUC3OKtEx-2VgAAAVA"]
[Fri Mar 27 08:16:11.603987 2026] [:error] [pid 4293:tid 4310] [client 20.100.192.188:22109] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/vanda.php"] [unique_id "acXMS5LjeJUC3OKtEx-2WQAAAU8"]
[Fri Mar 27 08:16:12.154058 2026] [:error] [pid 63897:tid 63902] [client 20.100.192.188:12154] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/vanda.php"] [unique_id "acXMTGVSkmYmLu7ycYg4mAAAAQM"]
[Fri Mar 27 08:16:12.952555 2026] [:error] [pid 4341:tid 4359] [client 20.100.192.188:20811] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/domains.php"] [unique_id "acXMTOKJWrNB5dMlERFCUwAAAZA"]
[Fri Mar 27 08:16:13.574782 2026] [:error] [pid 27750:tid 27828] [client 20.100.192.188:12118] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/domains.php"] [unique_id "acXMTYaSil5rd17ieLxWJQAAAIo"]
[Fri Mar 27 08:16:14.186759 2026] [:error] [pid 4341:tid 4358] [client 20.100.192.188:21329] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/domains.php"] [unique_id "acXMTuKJWrNB5dMlERFCVwAAAY8"]
[Fri Mar 27 08:16:14.882978 2026] [:error] [pid 4341:tid 4362] [client 20.100.192.188:19973] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/domains.php"] [unique_id "acXMTuKJWrNB5dMlERFCWQAAAZM"]
[Fri Mar 27 08:16:15.436272 2026] [:error] [pid 4341:tid 4354] [client 20.100.192.188:17521] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/144.php"] [unique_id "acXMT-KJWrNB5dMlERFCWwAAAYs"]
[Fri Mar 27 08:16:16.109479 2026] [:error] [pid 4341:tid 4357] [client 20.100.192.188:11241] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/144.php"] [unique_id "acXMUOKJWrNB5dMlERFCYAAAAY4"]
[Fri Mar 27 08:16:16.716985 2026] [:error] [pid 63897:tid 63917] [client 20.100.192.188:19994] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/144.php"] [unique_id "acXMUGVSkmYmLu7ycYg4rAAAARI"]
[Fri Mar 27 08:16:17.327443 2026] [:error] [pid 4293:tid 4304] [client 20.100.192.188:18716] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/144.php"] [unique_id "acXMUZLjeJUC3OKtEx-2YAAAAUk"]
[Fri Mar 27 08:16:18.033364 2026] [:error] [pid 63897:tid 63916] [client 20.100.192.188:22042] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/asd.php"] [unique_id "acXMUmVSkmYmLu7ycYg4sgAAARE"]
[Fri Mar 27 08:16:18.612648 2026] [:error] [pid 27750:tid 27826] [client 20.100.192.188:2816] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/asd.php"] [unique_id "acXMUoaSil5rd17ieLxWLQAAAIg"]
[Fri Mar 27 08:16:19.175829 2026] [:error] [pid 27750:tid 27842] [client 20.100.192.188:17530] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/asd.php"] [unique_id "acXMU4aSil5rd17ieLxWLwAAAJg"]
[Fri Mar 27 08:16:19.942661 2026] [:error] [pid 27750:tid 27825] [client 20.100.192.188:20816] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/asd.php"] [unique_id "acXMU4aSil5rd17ieLxWMQAAAIc"]
[Fri Mar 27 08:16:20.750936 2026] [:error] [pid 27851:tid 27877] [client 20.100.192.188:21327] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/zc-104.php"] [unique_id "acXMVHR2ccxe3RMCLbo3RwAAANM"]
[Fri Mar 27 08:16:21.305036 2026] [:error] [pid 63897:tid 63905] [client 20.100.192.188:20859] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/zc-104.php"] [unique_id "acXMVWVSkmYmLu7ycYg4vQAAAQY"]
[Fri Mar 27 08:16:21.856854 2026] [:error] [pid 63897:tid 63916] [client 20.100.192.188:11226] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/zc-104.php"] [unique_id "acXMVWVSkmYmLu7ycYg4vgAAARE"]
[Fri Mar 27 08:16:22.460225 2026] [:error] [pid 4293:tid 4304] [client 20.100.192.188:21314] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/zc-104.php"] [unique_id "acXMVpLjeJUC3OKtEx-2bQAAAUk"]
[Fri Mar 27 08:16:23.051191 2026] [:error] [pid 4293:tid 4311] [client 20.100.192.188:11211] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/rzki.php"] [unique_id "acXMV5LjeJUC3OKtEx-2bwAAAVA"]
[Fri Mar 27 08:16:23.775814 2026] [:error] [pid 27743:tid 27780] [client 20.100.192.188:12117] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/rzki.php"] [unique_id "acXMVyA46UYYLqzw99ATAgAAABA"]
[Fri Mar 27 08:16:24.305052 2026] [:error] [pid 63897:tid 63904] [client 20.100.192.188:21331] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/rzki.php"] [unique_id "acXMWGVSkmYmLu7ycYg4xQAAAQU"]
[Fri Mar 27 08:16:24.885000 2026] [:error] [pid 27743:tid 27781] [client 20.100.192.188:2079] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/rzki.php"] [unique_id "acXMWCA46UYYLqzw99ATBAAAABE"]
[Fri Mar 27 08:16:25.692585 2026] [:error] [pid 4293:tid 4309] [client 20.100.192.188:20840] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xsas.php"] [unique_id "acXMWZLjeJUC3OKtEx-2cwAAAU4"]
[Fri Mar 27 08:16:26.324291 2026] [:error] [pid 4293:tid 4312] [client 20.100.192.188:20854] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xsas.php"] [unique_id "acXMWpLjeJUC3OKtEx-2dQAAAVE"]
[Fri Mar 27 08:16:26.977011 2026] [:error] [pid 4293:tid 4315] [client 20.100.192.188:7566] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xsas.php"] [unique_id "acXMWpLjeJUC3OKtEx-2eAAAAVQ"]
[Fri Mar 27 08:16:27.553652 2026] [:error] [pid 27749:tid 27796] [client 20.100.192.188:22125] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xsas.php"] [unique_id "acXMW8EqyoMni2Q6_X53-QAAAEU"]
[Fri Mar 27 08:16:28.292831 2026] [:error] [pid 4341:tid 4349] [client 20.100.192.188:2066] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/d12.php"] [unique_id "acXMXOKJWrNB5dMlERFCawAAAYY"]
[Fri Mar 27 08:16:28.852846 2026] [:error] [pid 4341:tid 4362] [client 20.100.192.188:22081] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/d12.php"] [unique_id "acXMXOKJWrNB5dMlERFCbwAAAZM"]
[Fri Mar 27 08:16:29.638362 2026] [:error] [pid 63897:tid 63904] [client 20.100.192.188:8793] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/d12.php"] [unique_id "acXMXWVSkmYmLu7ycYg4zwAAAQU"]
[Fri Mar 27 08:16:30.351336 2026] [:error] [pid 27749:tid 27803] [client 20.100.192.188:22039] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/d12.php"] [unique_id "acXMXsEqyoMni2Q6_X53_gAAAEw"]
[Fri Mar 27 08:16:31.200083 2026] [:error] [pid 4341:tid 4346] [client 20.100.192.188:32975] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/okxh.php"] [unique_id "acXMX-KJWrNB5dMlERFCegAAAYM"]
[Fri Mar 27 08:16:31.867479 2026] [:error] [pid 4341:tid 4352] [client 20.100.192.188:22072] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/okxh.php"] [unique_id "acXMX-KJWrNB5dMlERFCfgAAAYk"]
[Fri Mar 27 08:16:32.809426 2026] [:error] [pid 4293:tid 4300] [client 20.100.192.188:7577] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/okxh.php"] [unique_id "acXMYJLjeJUC3OKtEx-2fAAAAUU"]
[Fri Mar 27 08:16:33.747216 2026] [:error] [pid 27851:tid 27869] [client 20.100.192.188:2377] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/okxh.php"] [unique_id "acXMYXR2ccxe3RMCLbo3TAAAAMs"]
[Fri Mar 27 08:16:34.828056 2026] [:error] [pid 4341:tid 4350] [client 20.100.192.188:2877] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/55b76.php"] [unique_id "acXMYuKJWrNB5dMlERFCiQAAAYc"]
[Fri Mar 27 08:16:38.408902 2026] [:error] [pid 63897:tid 63918] [client 20.100.192.188:2416] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/55b76.php"] [unique_id "acXMZmVSkmYmLu7ycYg43wAAARM"]
[Fri Mar 27 08:16:43.257275 2026] [:error] [pid 4341:tid 4363] [client 20.100.192.188:14541] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/55b76.php"] [unique_id "acXMa-KJWrNB5dMlERFCkwAAAZQ"]
[Fri Mar 27 08:16:44.545791 2026] [:error] [pid 27851:tid 27864] [client 20.100.192.188:11224] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/55b76.php"] [unique_id "acXMbHR2ccxe3RMCLbo3ZQAAAMY"]
[Fri Mar 27 08:16:45.198294 2026] [:error] [pid 27750:tid 27819] [client 20.100.192.188:2424] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "acXMbYaSil5rd17ieLxWOQAAAIE"]
[Fri Mar 27 08:16:45.883004 2026] [:error] [pid 4293:tid 4313] [client 20.100.192.188:22059] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "acXMbZLjeJUC3OKtEx-2rQAAAVI"]
[Fri Mar 27 08:16:46.779698 2026] [:error] [pid 4293:tid 4308] [client 20.100.192.188:20828] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "acXMbpLjeJUC3OKtEx-2sQAAAU0"]
[Fri Mar 27 08:16:47.428309 2026] [:error] [pid 63897:tid 63913] [client 20.100.192.188:32986] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "acXMb2VSkmYmLu7ycYg46wAAAQ4"]
[Fri Mar 27 08:16:48.215657 2026] [:error] [pid 4293:tid 4299] [client 20.100.192.188:20815] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/maul.php"] [unique_id "acXMcJLjeJUC3OKtEx-2tgAAAUQ"]
[Fri Mar 27 08:16:48.860050 2026] [:error] [pid 4293:tid 4302] [client 20.100.192.188:2102] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/maul.php"] [unique_id "acXMcJLjeJUC3OKtEx-2ugAAAUc"]
[Fri Mar 27 08:16:49.551340 2026] [:error] [pid 63897:tid 63921] [client 20.100.192.188:7555] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/maul.php"] [unique_id "acXMcWVSkmYmLu7ycYg47wAAARY"]
[Fri Mar 27 08:16:50.161977 2026] [:error] [pid 4293:tid 4308] [client 20.100.192.188:15761] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/maul.php"] [unique_id "acXMcpLjeJUC3OKtEx-2wgAAAU0"]
[Fri Mar 27 08:16:50.866440 2026] [:error] [pid 4293:tid 4313] [client 20.100.192.188:15759] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/5b9ac.php"] [unique_id "acXMcpLjeJUC3OKtEx-2xAAAAVI"]
[Fri Mar 27 08:16:51.590925 2026] [:error] [pid 4341:tid 4344] [client 20.100.192.188:21326] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/5b9ac.php"] [unique_id "acXMc-KJWrNB5dMlERFCoAAAAYE"]
[Fri Mar 27 08:16:52.279363 2026] [:error] [pid 27750:tid 27840] [client 20.100.192.188:20845] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/5b9ac.php"] [unique_id "acXMdIaSil5rd17ieLxWPgAAAJY"]
[Fri Mar 27 08:16:52.979343 2026] [:error] [pid 27750:tid 27824] [client 20.100.192.188:32972] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/5b9ac.php"] [unique_id "acXMdIaSil5rd17ieLxWPwAAAIY"]
[Fri Mar 27 08:16:53.635041 2026] [:error] [pid 27749:tid 27815] [client 20.100.192.188:12100] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/hehe.php"] [unique_id "acXMdcEqyoMni2Q6_X54BwAAAFg"]
[Fri Mar 27 08:16:54.449421 2026] [:error] [pid 4341:tid 4367] [client 20.100.192.188:33000] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/hehe.php"] [unique_id "acXMduKJWrNB5dMlERFCowAAAZg"]
[Fri Mar 27 08:16:55.075552 2026] [:error] [pid 63897:tid 63904] [client 20.100.192.188:7554] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/hehe.php"] [unique_id "acXMd2VSkmYmLu7ycYg4_gAAAQU"]
[Fri Mar 27 08:16:55.857055 2026] [:error] [pid 4293:tid 4308] [client 20.100.192.188:12133] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/hehe.php"] [unique_id "acXMd5LjeJUC3OKtEx-20wAAAU0"]
[Fri Mar 27 08:16:56.827036 2026] [:error] [pid 27749:tid 27800] [client 20.100.192.188:16532] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acXMeMEqyoMni2Q6_X54DAAAAEk"]
[Fri Mar 27 08:16:57.940090 2026] [:error] [pid 63897:tid 63922] [client 20.100.192.188:17497] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acXMeWVSkmYmLu7ycYg5DQAAARc"]
[Fri Mar 27 08:16:58.573989 2026] [:error] [pid 4293:tid 4303] [client 20.100.192.188:17533] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acXMepLjeJUC3OKtEx-22gAAAUg"]
[Fri Mar 27 08:16:59.525696 2026] [:error] [pid 27749:tid 27792] [client 20.100.192.188:21087] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acXMe8EqyoMni2Q6_X54DwAAAEE"]
[Fri Mar 27 08:17:00.672521 2026] [:error] [pid 4341:tid 4350] [client 20.100.192.188:22110] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/varb.php"] [unique_id "acXMfOKJWrNB5dMlERFCqAAAAYc"]
[Fri Mar 27 08:17:01.419114 2026] [:error] [pid 4341:tid 4361] [client 20.100.192.188:22099] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/varb.php"] [unique_id "acXMfeKJWrNB5dMlERFCqwAAAZI"]
[Fri Mar 27 08:17:02.415787 2026] [:error] [pid 27749:tid 27814] [client 20.100.192.188:22050] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/varb.php"] [unique_id "acXMfsEqyoMni2Q6_X54EAAAAFc"]
[Fri Mar 27 08:17:03.823350 2026] [:error] [pid 27851:tid 27882] [client 20.100.192.188:32985] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/varb.php"] [unique_id "acXMf3R2ccxe3RMCLbo3awAAANg"]
[Fri Mar 27 08:17:04.664311 2026] [:error] [pid 63897:tid 63921] [client 20.100.192.188:8829] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lm15.php"] [unique_id "acXMgGVSkmYmLu7ycYg5EgAAARY"]
[Fri Mar 27 08:17:05.644991 2026] [:error] [pid 4293:tid 4306] [client 20.100.192.188:22071] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lm15.php"] [unique_id "acXMgZLjeJUC3OKtEx-29gAAAUs"]
[Fri Mar 27 08:17:14.334336 2026] [:error] [pid 4341:tid 4354] [client 20.100.192.188:21073] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/b.php"] [unique_id "acXMiuKJWrNB5dMlERFCzwAAAYs"]
[Fri Mar 27 08:17:15.421506 2026] [:error] [pid 4293:tid 4300] [client 20.100.192.188:11263] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/b.php"] [unique_id "acXMi5LjeJUC3OKtEx-3IQAAAUU"]
[Fri Mar 27 08:17:17.134532 2026] [:error] [pid 4341:tid 4350] [client 20.100.192.188:2834] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/b.php"] [unique_id "acXMjeKJWrNB5dMlERFC0QAAAYc"]
[Fri Mar 27 08:17:18.127876 2026] [:error] [pid 4293:tid 4304] [client 20.100.192.188:9170] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/b.php"] [unique_id "acXMjpLjeJUC3OKtEx-3JwAAAUk"]
[Fri Mar 27 08:17:19.017254 2026] [:error] [pid 63897:tid 63907] [client 20.100.192.188:17535] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws49.php"] [unique_id "acXMj2VSkmYmLu7ycYg5LAAAAQg"]
[Fri Mar 27 08:17:19.961983 2026] [:error] [pid 27750:tid 27819] [client 20.100.192.188:9155] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws49.php"] [unique_id "acXMj4aSil5rd17ieLxWTwAAAIE"]
[Fri Mar 27 08:17:20.880298 2026] [:error] [pid 27851:tid 27876] [client 20.100.192.188:9200] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws49.php"] [unique_id "acXMkHR2ccxe3RMCLbo3egAAANI"]
[Fri Mar 27 08:17:21.754494 2026] [:error] [pid 27851:tid 27870] [client 20.100.192.188:11243] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws49.php"] [unique_id "acXMkXR2ccxe3RMCLbo3fQAAAMw"]
[Fri Mar 27 08:17:22.452430 2026] [:error] [pid 4341:tid 4345] [client 20.100.192.188:11203] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog-header.php"] [unique_id "acXMkuKJWrNB5dMlERFC1QAAAYI"]
[Fri Mar 27 08:17:23.125785 2026] [:error] [pid 4341:tid 4349] [client 20.100.192.188:15777] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog-header.php"] [unique_id "acXMk-KJWrNB5dMlERFC2AAAAYY"]
[Fri Mar 27 08:17:24.436357 2026] [:error] [pid 4341:tid 4359] [client 20.100.192.188:7575] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog-header.php"] [unique_id "acXMlOKJWrNB5dMlERFC2QAAAZA"]
[Fri Mar 27 08:17:26.278937 2026] [:error] [pid 27750:tid 27824] [client 20.100.192.188:20841] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog-header.php"] [unique_id "acXMloaSil5rd17ieLxWVAAAAIY"]
[Fri Mar 27 08:17:27.167591 2026] [:error] [pid 27749:tid 27813] [client 20.100.192.188:14524] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "acXMl8EqyoMni2Q6_X54IAAAAFY"]
[Fri Mar 27 08:17:28.342451 2026] [:error] [pid 27851:tid 27876] [client 20.100.192.188:8722] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "acXMmHR2ccxe3RMCLbo3hwAAANI"]
[Fri Mar 27 08:17:29.246145 2026] [:error] [pid 27851:tid 27858] [client 20.100.192.188:24845] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "acXMmXR2ccxe3RMCLbo3iQAAAMA"]
[Fri Mar 27 08:17:30.688374 2026] [:error] [pid 4293:tid 4318] [client 20.100.192.188:2777] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "acXMmpLjeJUC3OKtEx-3LwAAAVc"]
[Fri Mar 27 08:17:32.743152 2026] [:error] [pid 27743:tid 27774] [client 20.100.192.188:2796] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gfd.php"] [unique_id "acXMnCA46UYYLqzw99ATIQAAAAo"]
[Fri Mar 27 08:17:34.171876 2026] [:error] [pid 4293:tid 4317] [client 20.100.192.188:30277] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gfd.php"] [unique_id "acXMnpLjeJUC3OKtEx-3PAAAAVY"]
[Fri Mar 27 08:17:34.961648 2026] [:error] [pid 4293:tid 4309] [client 20.100.192.188:12074] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gfd.php"] [unique_id "acXMnpLjeJUC3OKtEx-3PQAAAU4"]
[Fri Mar 27 08:17:35.641290 2026] [:error] [pid 4293:tid 4316] [client 20.100.192.188:7894] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gfd.php"] [unique_id "acXMn5LjeJUC3OKtEx-3PgAAAVU"]
[Fri Mar 27 08:17:36.448122 2026] [:error] [pid 4293:tid 4296] [client 20.100.192.188:10148] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/callback.php"] [unique_id "acXMoJLjeJUC3OKtEx-3QQAAAUE"]
[Fri Mar 27 08:17:37.576963 2026] [:error] [pid 4293:tid 4316] [client 20.100.192.188:20765] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/callback.php"] [unique_id "acXMoZLjeJUC3OKtEx-3RwAAAVU"]
[Fri Mar 27 08:17:38.317672 2026] [:error] [pid 4293:tid 4297] [client 20.100.192.188:9127] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/callback.php"] [unique_id "acXMopLjeJUC3OKtEx-3TAAAAUI"]
[Fri Mar 27 08:17:39.200594 2026] [:error] [pid 4293:tid 4309] [client 20.100.192.188:28120] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/callback.php"] [unique_id "acXMo5LjeJUC3OKtEx-3UQAAAU4"]
[Fri Mar 27 08:17:39.922650 2026] [:error] [pid 27743:tid 27779] [client 20.100.192.188:18781] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/file.php"] [unique_id "acXMoyA46UYYLqzw99ATJAAAAA8"]
[Fri Mar 27 08:17:40.801552 2026] [:error] [pid 4293:tid 4317] [client 20.100.192.188:27015] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/file.php"] [unique_id "acXMpJLjeJUC3OKtEx-3VQAAAVY"]
[Fri Mar 27 08:17:41.822045 2026] [:error] [pid 4293:tid 4318] [client 20.100.192.188:2194] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/file.php"] [unique_id "acXMpZLjeJUC3OKtEx-3WgAAAVc"]
[Fri Mar 27 08:17:42.715085 2026] [:error] [pid 27743:tid 27781] [client 20.100.192.188:28111] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/file.php"] [unique_id "acXMpiA46UYYLqzw99ATJwAAABE"]
[Fri Mar 27 08:17:43.335981 2026] [:error] [pid 27743:tid 27786] [client 20.100.192.188:33803] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "acXMpyA46UYYLqzw99ATKQAAABY"]
[Fri Mar 27 08:17:44.149702 2026] [:error] [pid 4293:tid 4297] [client 20.100.192.188:7376] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "acXMqJLjeJUC3OKtEx-3YgAAAUI"]
[Fri Mar 27 08:17:45.121091 2026] [:error] [pid 27743:tid 27767] [client 20.100.192.188:24146] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "acXMqSA46UYYLqzw99ATKgAAAAM"]
[Fri Mar 27 08:17:45.818932 2026] [:error] [pid 63897:tid 63901] [client 20.100.192.188:24116] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "acXMqWVSkmYmLu7ycYg5QwAAAQI"]
[Fri Mar 27 08:17:46.893580 2026] [:error] [pid 27749:tid 27815] [client 20.100.192.188:12876] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-blogs.php"] [unique_id "acXMqsEqyoMni2Q6_X54NAAAAFg"]
[Fri Mar 27 08:17:47.745940 2026] [:error] [pid 4293:tid 4298] [client 20.100.192.188:22544] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-blogs.php"] [unique_id "acXMq5LjeJUC3OKtEx-3ZgAAAUM"]
[Fri Mar 27 08:17:48.645605 2026] [:error] [pid 4293:tid 4315] [client 20.100.192.188:24103] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-blogs.php"] [unique_id "acXMrJLjeJUC3OKtEx-3ZwAAAVQ"]
[Fri Mar 27 08:17:49.334241 2026] [:error] [pid 27750:tid 27830] [client 20.100.192.188:11800] [client 20.100.192.188] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-blogs.php"] [unique_id "acXMrYaSil5rd17ieLxWZwAAAIw"]
[Fri Mar 27 20:34:52.819444 2026] [:error] [pid 4341:tid 4343] [client 51.103.48.143:8873] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "acZ5bOKJWrNB5dMlERGsXwAAAYA"]
[Fri Mar 27 20:34:53.450597 2026] [:error] [pid 4341:tid 4345] [client 51.103.48.143:63376] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "acZ5beKJWrNB5dMlERGsYgAAAYI"]
[Fri Mar 27 20:34:54.072104 2026] [:error] [pid 63897:tid 63907] [client 51.103.48.143:32962] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "acZ5bmVSkmYmLu7ycYhVxQAAAQg"]
[Fri Mar 27 20:34:54.686529 2026] [:error] [pid 4293:tid 4309] [client 51.103.48.143:12755] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "acZ5bpLjeJUC3OKtEx-WLwAAAU4"]
[Fri Mar 27 20:34:55.510451 2026] [:error] [pid 4293:tid 4311] [client 51.103.48.143:33023] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-cxs.php"] [unique_id "acZ5b5LjeJUC3OKtEx-WNQAAAVA"]
[Fri Mar 27 20:34:56.160420 2026] [:error] [pid 27750:tid 27823] [client 51.103.48.143:45952] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-cxs.php"] [unique_id "acZ5cIaSil5rd17ieLz1owAAAIU"]
[Fri Mar 27 20:34:56.654111 2026] [:error] [pid 4293:tid 4314] [client 51.103.48.143:60128] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-cxs.php"] [unique_id "acZ5cJLjeJUC3OKtEx-WPQAAAVM"]
[Fri Mar 27 20:34:57.199796 2026] [:error] [pid 27749:tid 27811] [client 51.103.48.143:60097] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-cxs.php"] [unique_id "acZ5ccEqyoMni2Q6_X70tAAAAFQ"]
[Fri Mar 27 20:34:57.678896 2026] [:error] [pid 27749:tid 27810] [client 51.103.48.143:31090] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-scanner.php"] [unique_id "acZ5ccEqyoMni2Q6_X70tgAAAFM"]
[Fri Mar 27 20:34:58.438074 2026] [:error] [pid 27743:tid 27787] [client 51.103.48.143:31636] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-scanner.php"] [unique_id "acZ5ciA46UYYLqzw99DtmgAAABc"]
[Fri Mar 27 20:34:58.955777 2026] [:error] [pid 27743:tid 27778] [client 51.103.48.143:19282] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-scanner.php"] [unique_id "acZ5ciA46UYYLqzw99DtngAAAA4"]
[Fri Mar 27 20:34:59.482079 2026] [:error] [pid 4293:tid 4307] [client 51.103.48.143:13248] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-scanner.php"] [unique_id "acZ5c5LjeJUC3OKtEx-WQwAAAUw"]
[Fri Mar 27 20:35:00.319312 2026] [:error] [pid 27743:tid 27777] [client 51.103.48.143:31737] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/awh.php"] [unique_id "acZ5dCA46UYYLqzw99DtpQAAAA0"]
[Fri Mar 27 20:35:00.960108 2026] [:error] [pid 4293:tid 4300] [client 51.103.48.143:59042] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/awh.php"] [unique_id "acZ5dJLjeJUC3OKtEx-WRgAAAUU"]
[Fri Mar 27 20:35:01.483938 2026] [:error] [pid 4293:tid 4309] [client 51.103.48.143:1994] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/awh.php"] [unique_id "acZ5dZLjeJUC3OKtEx-WRwAAAU4"]
[Fri Mar 27 20:35:02.052341 2026] [:error] [pid 27743:tid 27788] [client 51.103.48.143:30341] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/awh.php"] [unique_id "acZ5diA46UYYLqzw99DtqwAAABg"]
[Fri Mar 27 20:35:02.621188 2026] [:error] [pid 4293:tid 4307] [client 51.103.48.143:8848] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/24.php"] [unique_id "acZ5dpLjeJUC3OKtEx-WSgAAAUw"]
[Fri Mar 27 20:35:03.273865 2026] [:error] [pid 4293:tid 4313] [client 51.103.48.143:19268] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/24.php"] [unique_id "acZ5d5LjeJUC3OKtEx-WTAAAAVI"]
[Fri Mar 27 20:35:03.930445 2026] [:error] [pid 4293:tid 4314] [client 51.103.48.143:1419] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/24.php"] [unique_id "acZ5d5LjeJUC3OKtEx-WUAAAAVM"]
[Fri Mar 27 20:35:04.573423 2026] [:error] [pid 4293:tid 4316] [client 51.103.48.143:63402] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/24.php"] [unique_id "acZ5eJLjeJUC3OKtEx-WVQAAAVU"]
[Fri Mar 27 20:35:05.338646 2026] [:error] [pid 27851:tid 27869] [client 51.103.48.143:20134] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zz8.php"] [unique_id "acZ5eXR2ccxe3RMCLbr0oAAAAMs"]
[Fri Mar 27 20:35:06.186611 2026] [:error] [pid 63897:tid 63921] [client 51.103.48.143:13289] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zz8.php"] [unique_id "acZ5emVSkmYmLu7ycYhVyQAAARY"]
[Fri Mar 27 20:35:06.719759 2026] [:error] [pid 27749:tid 27799] [client 51.103.48.143:31723] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zz8.php"] [unique_id "acZ5esEqyoMni2Q6_X70uQAAAEg"]
[Fri Mar 27 20:35:07.460041 2026] [:error] [pid 63897:tid 63900] [client 51.103.48.143:2031] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zz8.php"] [unique_id "acZ5e2VSkmYmLu7ycYhVzAAAAQE"]
[Fri Mar 27 20:35:08.096972 2026] [:error] [pid 27743:tid 27781] [client 51.103.48.143:2025] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/feokc.php"] [unique_id "acZ5fCA46UYYLqzw99DtrwAAABE"]
[Fri Mar 27 20:35:08.627359 2026] [:error] [pid 27750:tid 27824] [client 51.103.48.143:19280] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/feokc.php"] [unique_id "acZ5fIaSil5rd17ieLz1rAAAAIY"]
[Fri Mar 27 20:35:09.121225 2026] [:error] [pid 4293:tid 4305] [client 51.103.48.143:1438] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/feokc.php"] [unique_id "acZ5fZLjeJUC3OKtEx-WXAAAAUo"]
[Fri Mar 27 20:35:09.641401 2026] [:error] [pid 27851:tid 27871] [client 51.103.48.143:30338] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/feokc.php"] [unique_id "acZ5fXR2ccxe3RMCLbr0pQAAAM0"]
[Fri Mar 27 20:35:10.209308 2026] [:error] [pid 27749:tid 27794] [client 51.103.48.143:59010] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fetch.php"] [unique_id "acZ5fsEqyoMni2Q6_X70uwAAAEM"]
[Fri Mar 27 20:35:10.989042 2026] [:error] [pid 63897:tid 63923] [client 51.103.48.143:65022] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fetch.php"] [unique_id "acZ5fmVSkmYmLu7ycYhV1AAAARg"]
[Fri Mar 27 20:35:11.604377 2026] [:error] [pid 27749:tid 27808] [client 51.103.48.143:31742] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fetch.php"] [unique_id "acZ5f8EqyoMni2Q6_X70vQAAAFE"]
[Fri Mar 27 20:35:12.272750 2026] [:error] [pid 27749:tid 27815] [client 51.103.48.143:12756] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fetch.php"] [unique_id "acZ5gMEqyoMni2Q6_X70vgAAAFg"]
[Fri Mar 27 20:35:12.810349 2026] [:error] [pid 27749:tid 27798] [client 51.103.48.143:12787] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/phpmini.php"] [unique_id "acZ5gMEqyoMni2Q6_X70vwAAAEc"]
[Fri Mar 27 20:35:13.319463 2026] [:error] [pid 27749:tid 27810] [client 51.103.48.143:21564] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/phpmini.php"] [unique_id "acZ5gcEqyoMni2Q6_X70wgAAAFM"]
[Fri Mar 27 20:35:13.814797 2026] [:error] [pid 4293:tid 4310] [client 51.103.48.143:21550] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/phpmini.php"] [unique_id "acZ5gZLjeJUC3OKtEx-WaAAAAU8"]
[Fri Mar 27 20:35:14.375965 2026] [:error] [pid 4293:tid 4315] [client 51.103.48.143:21507] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/phpmini.php"] [unique_id "acZ5gpLjeJUC3OKtEx-WaQAAAVQ"]
[Fri Mar 27 20:35:15.006618 2026] [:error] [pid 63897:tid 63899] [client 51.103.48.143:1415] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/an7.php"] [unique_id "acZ5g2VSkmYmLu7ycYhV2QAAAQA"]
[Fri Mar 27 20:35:15.788396 2026] [:error] [pid 4341:tid 4349] [client 51.103.48.143:13259] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/an7.php"] [unique_id "acZ5g-KJWrNB5dMlERGsbgAAAYY"]
[Fri Mar 27 20:35:16.385738 2026] [:error] [pid 4293:tid 4304] [client 51.103.48.143:63381] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/an7.php"] [unique_id "acZ5hJLjeJUC3OKtEx-WdQAAAUk"]
[Fri Mar 27 20:35:17.147794 2026] [:error] [pid 4341:tid 4352] [client 51.103.48.143:2035] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/an7.php"] [unique_id "acZ5heKJWrNB5dMlERGscwAAAYk"]
[Fri Mar 27 20:35:17.922398 2026] [:error] [pid 27750:tid 27829] [client 51.103.48.143:41918] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tbute.php"] [unique_id "acZ5hYaSil5rd17ieLz1sgAAAIs"]
[Fri Mar 27 20:35:18.490411 2026] [:error] [pid 4293:tid 4301] [client 51.103.48.143:59064] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tbute.php"] [unique_id "acZ5hpLjeJUC3OKtEx-WewAAAUY"]
[Fri Mar 27 20:35:19.243426 2026] [:error] [pid 4293:tid 4295] [client 51.103.48.143:31059] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tbute.php"] [unique_id "acZ5h5LjeJUC3OKtEx-WfwAAAUA"]
[Fri Mar 27 20:35:19.736229 2026] [:error] [pid 4293:tid 4297] [client 51.103.48.143:45994] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tbute.php"] [unique_id "acZ5h5LjeJUC3OKtEx-WhAAAAUI"]
[Fri Mar 27 20:35:20.338462 2026] [:error] [pid 4293:tid 4314] [client 51.103.48.143:1427] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rovoj.php"] [unique_id "acZ5iJLjeJUC3OKtEx-WhgAAAVM"]
[Fri Mar 27 20:35:21.047211 2026] [:error] [pid 4293:tid 4311] [client 51.103.48.143:12753] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rovoj.php"] [unique_id "acZ5iZLjeJUC3OKtEx-WjQAAAVA"]
[Fri Mar 27 20:35:22.167319 2026] [:error] [pid 4293:tid 4306] [client 51.103.48.143:41912] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rovoj.php"] [unique_id "acZ5ipLjeJUC3OKtEx-WmQAAAUs"]
[Fri Mar 27 20:35:22.972386 2026] [:error] [pid 63897:tid 63921] [client 51.103.48.143:31044] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rovoj.php"] [unique_id "acZ5imVSkmYmLu7ycYhV3wAAARY"]
[Fri Mar 27 20:35:24.171564 2026] [:error] [pid 27750:tid 27831] [client 51.103.48.143:2016] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/r3grt7.php"] [unique_id "acZ5jIaSil5rd17ieLz1swAAAI0"]
[Fri Mar 27 20:35:24.742991 2026] [:error] [pid 27743:tid 27765] [client 51.103.48.143:31045] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/r3grt7.php"] [unique_id "acZ5jCA46UYYLqzw99DtugAAAAE"]
[Fri Mar 27 20:35:25.345161 2026] [:error] [pid 27743:tid 27777] [client 51.103.48.143:31086] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/r3grt7.php"] [unique_id "acZ5jSA46UYYLqzw99DtvQAAAA0"]
[Fri Mar 27 20:35:25.952206 2026] [:error] [pid 27750:tid 27827] [client 51.103.48.143:30393] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/r3grt7.php"] [unique_id "acZ5jYaSil5rd17ieLz1tgAAAIk"]
[Fri Mar 27 20:35:26.589688 2026] [:error] [pid 4341:tid 4350] [client 51.103.48.143:20139] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/phina.php"] [unique_id "acZ5juKJWrNB5dMlERGshQAAAYc"]
[Fri Mar 27 20:35:27.586795 2026] [:error] [pid 27851:tid 27866] [client 51.103.48.143:60127] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/phina.php"] [unique_id "acZ5j3R2ccxe3RMCLbr0swAAAMg"]
[Fri Mar 27 20:35:28.149333 2026] [:error] [pid 4293:tid 4310] [client 51.103.48.143:2010] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/phina.php"] [unique_id "acZ5kJLjeJUC3OKtEx-WoQAAAU8"]
[Fri Mar 27 20:35:28.644054 2026] [:error] [pid 63897:tid 63909] [client 51.103.48.143:31724] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/phina.php"] [unique_id "acZ5kGVSkmYmLu7ycYhV4QAAAQo"]
[Fri Mar 27 20:35:29.137423 2026] [:error] [pid 27851:tid 27872] [client 51.103.48.143:31046] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "acZ5kXR2ccxe3RMCLbr0ugAAAM4"]
[Fri Mar 27 20:35:29.903210 2026] [:error] [pid 27750:tid 27839] [client 51.103.48.143:37704] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "acZ5kYaSil5rd17ieLz1uAAAAJU"]
[Fri Mar 27 20:35:30.501682 2026] [:error] [pid 4293:tid 4298] [client 51.103.48.143:59061] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "acZ5kpLjeJUC3OKtEx-WogAAAUM"]
[Fri Mar 27 20:35:31.020543 2026] [:error] [pid 4341:tid 4349] [client 51.103.48.143:2022] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "acZ5k-KJWrNB5dMlERGsjwAAAYY"]
[Fri Mar 27 20:35:31.600592 2026] [:error] [pid 27743:tid 27780] [client 51.103.48.143:12778] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs6.php"] [unique_id "acZ5kyA46UYYLqzw99DtyAAAABA"]
[Fri Mar 27 20:35:32.138074 2026] [:error] [pid 27743:tid 27769] [client 51.103.48.143:1436] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs6.php"] [unique_id "acZ5lCA46UYYLqzw99DtywAAAAU"]
[Fri Mar 27 20:35:32.645720 2026] [:error] [pid 63897:tid 63907] [client 51.103.48.143:31698] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs6.php"] [unique_id "acZ5lGVSkmYmLu7ycYhV5QAAAQg"]
[Fri Mar 27 20:35:33.225680 2026] [:error] [pid 4341:tid 4351] [client 51.103.48.143:31652] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs6.php"] [unique_id "acZ5leKJWrNB5dMlERGskgAAAYg"]
[Fri Mar 27 20:35:33.734793 2026] [:error] [pid 27743:tid 27774] [client 51.103.48.143:2039] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs7.php"] [unique_id "acZ5lSA46UYYLqzw99DtzgAAAAo"]
[Fri Mar 27 20:35:34.378781 2026] [:error] [pid 27743:tid 27766] [client 51.103.48.143:13311] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs7.php"] [unique_id "acZ5liA46UYYLqzw99DtzwAAAAI"]
[Fri Mar 27 20:35:34.942941 2026] [:error] [pid 27851:tid 27875] [client 51.103.48.143:45982] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs7.php"] [unique_id "acZ5lnR2ccxe3RMCLbr0vgAAANE"]
[Fri Mar 27 20:35:35.469982 2026] [:error] [pid 27749:tid 27791] [client 51.103.48.143:21558] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs7.php"] [unique_id "acZ5l8EqyoMni2Q6_X70zwAAAEA"]
[Fri Mar 27 20:35:36.009406 2026] [:error] [pid 4341:tid 4364] [client 51.103.48.143:13287] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kbfr.php"] [unique_id "acZ5mOKJWrNB5dMlERGsmAAAAZU"]
[Fri Mar 27 20:35:36.491289 2026] [:error] [pid 63897:tid 63921] [client 51.103.48.143:31726] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kbfr.php"] [unique_id "acZ5mGVSkmYmLu7ycYhV6wAAARY"]
[Fri Mar 27 20:35:37.060536 2026] [:error] [pid 27750:tid 27831] [client 51.103.48.143:45992] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kbfr.php"] [unique_id "acZ5mYaSil5rd17ieLz1wQAAAI0"]
[Fri Mar 27 20:35:38.653076 2026] [:error] [pid 63897:tid 63899] [client 51.103.48.143:2045] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kbfr.php"] [unique_id "acZ5mmVSkmYmLu7ycYhV8AAAAQA"]
[Fri Mar 27 20:35:39.274094 2026] [:error] [pid 4293:tid 4302] [client 51.103.48.143:12796] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/595.php"] [unique_id "acZ5m5LjeJUC3OKtEx-WtAAAAUc"]
[Fri Mar 27 20:35:39.970410 2026] [:error] [pid 27743:tid 27786] [client 51.103.48.143:30354] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/595.php"] [unique_id "acZ5myA46UYYLqzw99Dt2wAAABY"]
[Fri Mar 27 20:35:40.553867 2026] [:error] [pid 4341:tid 4349] [client 51.103.48.143:63408] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/595.php"] [unique_id "acZ5nOKJWrNB5dMlERGsowAAAYY"]
[Fri Mar 27 20:35:41.132502 2026] [:error] [pid 4341:tid 4353] [client 51.103.48.143:59028] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/595.php"] [unique_id "acZ5neKJWrNB5dMlERGspgAAAYo"]
[Fri Mar 27 20:35:41.726913 2026] [:error] [pid 4293:tid 4295] [client 51.103.48.143:17076] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x1.php"] [unique_id "acZ5nZLjeJUC3OKtEx-WtgAAAUA"]
[Fri Mar 27 20:35:42.389013 2026] [:error] [pid 63897:tid 63899] [client 51.103.48.143:10987] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x1.php"] [unique_id "acZ5nmVSkmYmLu7ycYhV-gAAAQA"]
[Fri Mar 27 20:35:42.996378 2026] [:error] [pid 27743:tid 27778] [client 51.103.48.143:20158] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x1.php"] [unique_id "acZ5niA46UYYLqzw99Dt3wAAAA4"]
[Fri Mar 27 20:35:43.632612 2026] [:error] [pid 63897:tid 63922] [client 51.103.48.143:17072] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x1.php"] [unique_id "acZ5n2VSkmYmLu7ycYhV_wAAARc"]
[Fri Mar 27 20:35:44.122167 2026] [:error] [pid 63897:tid 63907] [client 51.103.48.143:31710] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gk.php"] [unique_id "acZ5oGVSkmYmLu7ycYhWAQAAAQg"]
[Fri Mar 27 20:35:44.650594 2026] [:error] [pid 63897:tid 63921] [client 51.103.48.143:1468] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gk.php"] [unique_id "acZ5oGVSkmYmLu7ycYhWBAAAARY"]
[Fri Mar 27 20:35:45.315031 2026] [:error] [pid 63897:tid 63917] [client 51.103.48.143:60121] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gk.php"] [unique_id "acZ5oWVSkmYmLu7ycYhWCAAAARI"]
[Fri Mar 27 20:35:45.856185 2026] [:error] [pid 27743:tid 27783] [client 51.103.48.143:21565] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gk.php"] [unique_id "acZ5oSA46UYYLqzw99Dt4wAAABM"]
[Fri Mar 27 20:35:46.363428 2026] [:error] [pid 27743:tid 27764] [client 51.103.48.143:21529] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "acZ5oiA46UYYLqzw99Dt5AAAAAA"]
[Fri Mar 27 20:35:46.915171 2026] [:error] [pid 4341:tid 4351] [client 51.103.48.143:59016] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "acZ5ouKJWrNB5dMlERGsrQAAAYg"]
[Fri Mar 27 20:35:47.441802 2026] [:error] [pid 4341:tid 4361] [client 51.103.48.143:65005] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "acZ5o-KJWrNB5dMlERGssQAAAZI"]
[Fri Mar 27 20:35:47.975366 2026] [:error] [pid 27851:tid 27872] [client 51.103.48.143:30370] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "acZ5o3R2ccxe3RMCLbr0ygAAAM4"]
[Fri Mar 27 20:35:48.558724 2026] [:error] [pid 27750:tid 27824] [client 51.103.48.143:59050] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "acZ5pIaSil5rd17ieLz1zgAAAIY"]
[Fri Mar 27 20:35:49.059649 2026] [:error] [pid 27750:tid 27840] [client 51.103.48.143:31084] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "acZ5pYaSil5rd17ieLz10gAAAJY"]
[Fri Mar 27 20:35:49.605885 2026] [:error] [pid 4341:tid 4350] [client 51.103.48.143:46010] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "acZ5peKJWrNB5dMlERGstgAAAYc"]
[Fri Mar 27 20:35:50.221716 2026] [:error] [pid 4341:tid 4360] [client 51.103.48.143:31674] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "acZ5puKJWrNB5dMlERGsuQAAAZE"]
[Fri Mar 27 20:35:50.787902 2026] [:error] [pid 63897:tid 63922] [client 51.103.48.143:31632] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws81.php"] [unique_id "acZ5pmVSkmYmLu7ycYhWCQAAARc"]
[Fri Mar 27 20:35:51.334834 2026] [:error] [pid 4341:tid 4343] [client 51.103.48.143:17039] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws81.php"] [unique_id "acZ5p-KJWrNB5dMlERGsvQAAAYA"]
[Fri Mar 27 20:35:51.965549 2026] [:error] [pid 4341:tid 4352] [client 51.103.48.143:64986] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws81.php"] [unique_id "acZ5p-KJWrNB5dMlERGswgAAAYk"]
[Fri Mar 27 20:36:00.149476 2026] [:error] [pid 4293:tid 4311] [client 51.103.48.143:31707] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vaza.php"] [unique_id "acZ5sJLjeJUC3OKtEx-W5gAAAVA"]
[Fri Mar 27 20:36:00.720740 2026] [:error] [pid 27743:tid 27776] [client 51.103.48.143:60163] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vaza.php"] [unique_id "acZ5sCA46UYYLqzw99Dt-wAAAAw"]
[Fri Mar 27 20:36:01.411456 2026] [:error] [pid 4293:tid 4296] [client 51.103.48.143:28937] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vaza.php"] [unique_id "acZ5sZLjeJUC3OKtEx-W6QAAAUE"]
[Fri Mar 27 20:36:02.143534 2026] [:error] [pid 27743:tid 27783] [client 51.103.48.143:20159] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vaza.php"] [unique_id "acZ5siA46UYYLqzw99Dt_wAAABM"]
[Fri Mar 27 20:36:03.278741 2026] [:error] [pid 4293:tid 4299] [client 51.103.48.143:19311] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cvz.php"] [unique_id "acZ5s5LjeJUC3OKtEx-W7AAAAUQ"]
[Fri Mar 27 20:36:04.024838 2026] [:error] [pid 4293:tid 4318] [client 51.103.48.143:13251] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cvz.php"] [unique_id "acZ5tJLjeJUC3OKtEx-W7wAAAVc"]
[Fri Mar 27 20:36:04.902458 2026] [:error] [pid 4293:tid 4310] [client 51.103.48.143:26034] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cvz.php"] [unique_id "acZ5tJLjeJUC3OKtEx-W9AAAAU8"]
[Fri Mar 27 20:36:05.971795 2026] [:error] [pid 4293:tid 4312] [client 51.103.48.143:25575] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cvz.php"] [unique_id "acZ5tZLjeJUC3OKtEx-W-QAAAVE"]
[Fri Mar 27 20:36:06.645341 2026] [:error] [pid 4293:tid 4309] [client 51.103.48.143:12531] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wtiiy.php"] [unique_id "acZ5tpLjeJUC3OKtEx-W-wAAAU4"]
[Fri Mar 27 20:36:07.456315 2026] [:error] [pid 27743:tid 27780] [client 51.103.48.143:25579] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wtiiy.php"] [unique_id "acZ5tyA46UYYLqzw99DuCgAAABA"]
[Fri Mar 27 20:36:08.063270 2026] [:error] [pid 27743:tid 27770] [client 51.103.48.143:19947] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wtiiy.php"] [unique_id "acZ5uCA46UYYLqzw99DuCwAAAAY"]
[Fri Mar 27 20:36:08.878207 2026] [:error] [pid 4293:tid 4313] [client 51.103.48.143:17061] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wtiiy.php"] [unique_id "acZ5uJLjeJUC3OKtEx-W_AAAAVI"]
[Fri Mar 27 20:36:09.449359 2026] [:error] [pid 4293:tid 4301] [client 51.103.48.143:60171] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aee.php"] [unique_id "acZ5uZLjeJUC3OKtEx-W_gAAAUY"]
[Fri Mar 27 20:36:10.016376 2026] [:error] [pid 63897:tid 63905] [client 51.103.48.143:40325] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aee.php"] [unique_id "acZ5umVSkmYmLu7ycYhWIQAAAQY"]
[Fri Mar 27 20:36:10.702570 2026] [:error] [pid 27743:tid 27787] [client 51.103.48.143:25581] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aee.php"] [unique_id "acZ5uiA46UYYLqzw99DuEAAAABc"]
[Fri Mar 27 20:36:11.295738 2026] [:error] [pid 4293:tid 4302] [client 51.103.48.143:26004] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aee.php"] [unique_id "acZ5u5LjeJUC3OKtEx-XBQAAAUc"]
[Fri Mar 27 20:36:12.035224 2026] [:error] [pid 4293:tid 4301] [client 51.103.48.143:26032] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sweg.php"] [unique_id "acZ5vJLjeJUC3OKtEx-XCgAAAUY"]
[Fri Mar 27 20:36:12.566925 2026] [:error] [pid 27851:tid 27868] [client 51.103.48.143:25594] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sweg.php"] [unique_id "acZ5vHR2ccxe3RMCLbr00AAAAMo"]
[Fri Mar 27 20:36:13.125063 2026] [:error] [pid 27743:tid 27778] [client 51.103.48.143:31694] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sweg.php"] [unique_id "acZ5vSA46UYYLqzw99DuFgAAAA4"]
[Fri Mar 27 20:36:13.681106 2026] [:error] [pid 4293:tid 4305] [client 51.103.48.143:39613] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sweg.php"] [unique_id "acZ5vZLjeJUC3OKtEx-XDgAAAUo"]
[Fri Mar 27 20:36:14.300507 2026] [:error] [pid 27750:tid 27828] [client 51.103.48.143:45064] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sql.php"] [unique_id "acZ5voaSil5rd17ieLz13QAAAIo"]
[Fri Mar 27 20:36:14.959968 2026] [:error] [pid 63897:tid 63915] [client 51.103.48.143:17052] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sql.php"] [unique_id "acZ5vmVSkmYmLu7ycYhWKQAAARA"]
[Fri Mar 27 20:36:15.453804 2026] [:error] [pid 63897:tid 63923] [client 51.103.48.143:28943] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sql.php"] [unique_id "acZ5v2VSkmYmLu7ycYhWKwAAARg"]
[Fri Mar 27 20:36:15.976901 2026] [:error] [pid 4341:tid 4358] [client 51.103.48.143:18519] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sql.php"] [unique_id "acZ5v-KJWrNB5dMlERGs7QAAAY8"]
[Fri Mar 27 20:36:16.622932 2026] [:error] [pid 27743:tid 27784] [client 51.103.48.143:60216] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sc.php"] [unique_id "acZ5wCA46UYYLqzw99DuHQAAABQ"]
[Fri Mar 27 20:36:17.158550 2026] [:error] [pid 27743:tid 27770] [client 51.103.48.143:31002] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sc.php"] [unique_id "acZ5wSA46UYYLqzw99DuHwAAAAY"]
[Fri Mar 27 20:36:17.769291 2026] [:error] [pid 4293:tid 4318] [client 51.103.48.143:27226] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sc.php"] [unique_id "acZ5wZLjeJUC3OKtEx-XFgAAAVc"]
[Fri Mar 27 20:36:18.288630 2026] [:error] [pid 27749:tid 27808] [client 51.103.48.143:26089] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sc.php"] [unique_id "acZ5wsEqyoMni2Q6_X708AAAAFE"]
[Fri Mar 27 20:36:18.780155 2026] [:error] [pid 27743:tid 27787] [client 51.103.48.143:16845] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/eee.php"] [unique_id "acZ5wiA46UYYLqzw99DuJQAAABc"]
[Fri Mar 27 20:36:19.322844 2026] [:error] [pid 4293:tid 4316] [client 51.103.48.143:41334] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/eee.php"] [unique_id "acZ5w5LjeJUC3OKtEx-XGwAAAVU"]
[Fri Mar 27 20:36:19.842631 2026] [:error] [pid 4341:tid 4352] [client 51.103.48.143:39561] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/eee.php"] [unique_id "acZ5w-KJWrNB5dMlERGs-AAAAYk"]
[Fri Mar 27 20:36:20.477364 2026] [:error] [pid 4293:tid 4299] [client 51.103.48.143:47294] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/eee.php"] [unique_id "acZ5xJLjeJUC3OKtEx-XIAAAAUQ"]
[Fri Mar 27 20:36:20.968757 2026] [:error] [pid 27743:tid 27765] [client 51.103.48.143:27218] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "acZ5xCA46UYYLqzw99DuKAAAAAE"]
[Fri Mar 27 20:36:21.681341 2026] [:error] [pid 27743:tid 27779] [client 51.103.48.143:39004] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "acZ5xSA46UYYLqzw99DuKwAAAA8"]
[Fri Mar 27 20:36:22.560131 2026] [:error] [pid 27749:tid 27813] [client 51.103.48.143:41343] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "acZ5xsEqyoMni2Q6_X708QAAAFY"]
[Fri Mar 27 20:36:23.193320 2026] [:error] [pid 27743:tid 27774] [client 51.103.48.143:41281] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "acZ5xyA46UYYLqzw99DuMwAAAAo"]
[Fri Mar 27 20:36:24.528063 2026] [:error] [pid 27743:tid 27772] [client 51.103.48.143:1700] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "acZ5yCA46UYYLqzw99DuNgAAAAg"]
[Fri Mar 27 20:36:26.405091 2026] [:error] [pid 4341:tid 4361] [client 51.103.48.143:27242] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "acZ5yuKJWrNB5dMlERGtAQAAAZI"]
[Fri Mar 27 20:36:27.728059 2026] [:error] [pid 4293:tid 4301] [client 51.103.48.143:15506] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "acZ5y5LjeJUC3OKtEx-XPwAAAUY"]
[Fri Mar 27 20:36:30.103181 2026] [:error] [pid 4341:tid 4350] [client 51.103.48.143:21623] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "acZ5zuKJWrNB5dMlERGtDQAAAYc"]
[Fri Mar 27 20:36:32.061463 2026] [:error] [pid 27851:tid 27869] [client 51.103.48.143:61416] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/roter.php"] [unique_id "acZ50HR2ccxe3RMCLbr02QAAAMs"]
[Fri Mar 27 20:36:33.002352 2026] [:error] [pid 4293:tid 4313] [client 51.103.48.143:35155] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/roter.php"] [unique_id "acZ50ZLjeJUC3OKtEx-XSwAAAVI"]
[Fri Mar 27 20:36:34.269422 2026] [:error] [pid 4341:tid 4358] [client 51.103.48.143:10423] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/roter.php"] [unique_id "acZ50uKJWrNB5dMlERGtEQAAAY8"]
[Fri Mar 27 20:36:34.928436 2026] [:error] [pid 63897:tid 63921] [client 51.103.48.143:35152] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/roter.php"] [unique_id "acZ50mVSkmYmLu7ycYhWOQAAARY"]
[Fri Mar 27 20:36:35.707677 2026] [:error] [pid 27743:tid 27786] [client 51.103.48.143:15810] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/size.php"] [unique_id "acZ50yA46UYYLqzw99DuPAAAABY"]
[Fri Mar 27 20:36:36.232685 2026] [:error] [pid 27743:tid 27787] [client 51.103.48.143:62819] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/size.php"] [unique_id "acZ51CA46UYYLqzw99DuQAAAABc"]
[Fri Mar 27 20:36:37.075946 2026] [:error] [pid 4293:tid 4319] [client 51.103.48.143:10402] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/size.php"] [unique_id "acZ51ZLjeJUC3OKtEx-XXAAAAVg"]
[Fri Mar 27 20:36:37.780429 2026] [:error] [pid 27749:tid 27794] [client 51.103.48.143:11145] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/size.php"] [unique_id "acZ51cEqyoMni2Q6_X70-gAAAEM"]
[Fri Mar 27 20:36:38.491157 2026] [:error] [pid 4293:tid 4317] [client 51.103.48.143:9869] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/save.php"] [unique_id "acZ51pLjeJUC3OKtEx-XYgAAAVY"]
[Fri Mar 27 20:36:39.347158 2026] [:error] [pid 27851:tid 27863] [client 51.103.48.143:8139] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/save.php"] [unique_id "acZ513R2ccxe3RMCLbr03AAAAMU"]
[Fri Mar 27 20:36:40.268235 2026] [:error] [pid 4293:tid 4314] [client 51.103.48.143:32271] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/save.php"] [unique_id "acZ52JLjeJUC3OKtEx-XagAAAVM"]
[Fri Mar 27 20:36:40.849934 2026] [:error] [pid 4293:tid 4310] [client 51.103.48.143:16035] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/save.php"] [unique_id "acZ52JLjeJUC3OKtEx-XbQAAAU8"]
[Fri Mar 27 20:36:41.516447 2026] [:error] [pid 27749:tid 27813] [client 51.103.48.143:30441] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "acZ52cEqyoMni2Q6_X70_QAAAFY"]
[Fri Mar 27 20:36:42.236442 2026] [:error] [pid 4341:tid 4356] [client 51.103.48.143:9908] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "acZ52uKJWrNB5dMlERGtGwAAAY0"]
[Fri Mar 27 20:36:42.782324 2026] [:error] [pid 27749:tid 27815] [client 51.103.48.143:61397] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "acZ52sEqyoMni2Q6_X70_wAAAFg"]
[Fri Mar 27 20:36:43.441124 2026] [:error] [pid 4341:tid 4355] [client 51.103.48.143:30425] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "acZ52-KJWrNB5dMlERGtHwAAAYw"]
[Fri Mar 27 20:36:44.037636 2026] [:error] [pid 27750:tid 27834] [client 51.103.48.143:11772] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/n1GiO.php"] [unique_id "acZ53IaSil5rd17ieLz18AAAAJA"]
[Fri Mar 27 20:36:44.602913 2026] [:error] [pid 27750:tid 27829] [client 51.103.48.143:32287] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/n1GiO.php"] [unique_id "acZ53IaSil5rd17ieLz18wAAAIs"]
[Fri Mar 27 20:36:45.674284 2026] [:error] [pid 4293:tid 4309] [client 51.103.48.143:10667] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/n1GiO.php"] [unique_id "acZ53ZLjeJUC3OKtEx-XeQAAAU4"]
[Fri Mar 27 20:37:18.976340 2026] [:error] [pid 4293:tid 4312] [client 51.103.48.143:15820] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gelio1.php"] [unique_id "acZ5_pLjeJUC3OKtEx-X_AAAAVE"]
[Fri Mar 27 20:37:19.897619 2026] [:error] [pid 4341:tid 4360] [client 51.103.48.143:10174] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gelio1.php"] [unique_id "acZ5_-KJWrNB5dMlERGtUAAAAZE"]
[Fri Mar 27 20:37:20.563853 2026] [:error] [pid 63897:tid 63903] [client 51.103.48.143:26041] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gelio1.php"] [unique_id "acZ6AGVSkmYmLu7ycYhWlwAAAQQ"]
[Fri Mar 27 20:37:21.260618 2026] [:error] [pid 27851:tid 27877] [client 51.103.48.143:40352] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gelio1.php"] [unique_id "acZ6AXR2ccxe3RMCLbr09wAAANM"]
[Fri Mar 27 20:37:22.002296 2026] [:error] [pid 4293:tid 4316] [client 51.103.48.143:45114] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/v2.php"] [unique_id "acZ6ApLjeJUC3OKtEx-YBwAAAVU"]
[Fri Mar 27 20:37:22.646933 2026] [:error] [pid 4341:tid 4362] [client 51.103.48.143:12484] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/v2.php"] [unique_id "acZ6AuKJWrNB5dMlERGtWQAAAZM"]
[Fri Mar 27 20:37:23.207478 2026] [:error] [pid 4293:tid 4309] [client 51.103.48.143:14257] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/v2.php"] [unique_id "acZ6A5LjeJUC3OKtEx-YDAAAAU4"]
[Fri Mar 27 20:37:23.821470 2026] [:error] [pid 27851:tid 27869] [client 51.103.48.143:26057] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/v2.php"] [unique_id "acZ6A3R2ccxe3RMCLbr0-QAAAMs"]
[Fri Mar 27 20:37:24.828962 2026] [:error] [pid 27851:tid 27873] [client 51.103.48.143:41878] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/v3.php"] [unique_id "acZ6BHR2ccxe3RMCLbr0_AAAAM8"]
[Fri Mar 27 20:37:25.642308 2026] [:error] [pid 4341:tid 4367] [client 51.103.48.143:44546] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/v3.php"] [unique_id "acZ6BeKJWrNB5dMlERGtYgAAAZg"]
[Fri Mar 27 20:37:26.363023 2026] [:error] [pid 27749:tid 27794] [client 51.103.48.143:41882] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/v3.php"] [unique_id "acZ6BsEqyoMni2Q6_X71QAAAAEM"]
[Fri Mar 27 20:37:27.167434 2026] [:error] [pid 4293:tid 4315] [client 51.103.48.143:31629] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/v3.php"] [unique_id "acZ6B5LjeJUC3OKtEx-YGAAAAVQ"]
[Fri Mar 27 20:37:27.732255 2026] [:error] [pid 4293:tid 4299] [client 51.103.48.143:13297] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/v4.php"] [unique_id "acZ6B5LjeJUC3OKtEx-YHgAAAUQ"]
[Fri Mar 27 20:37:28.320916 2026] [:error] [pid 4293:tid 4297] [client 51.103.48.143:30379] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/v4.php"] [unique_id "acZ6CJLjeJUC3OKtEx-YJAAAAUI"]
[Fri Mar 27 20:37:28.965747 2026] [:error] [pid 4293:tid 4298] [client 51.103.48.143:2021] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/v4.php"] [unique_id "acZ6CJLjeJUC3OKtEx-YJwAAAUM"]
[Fri Mar 27 20:37:29.523983 2026] [:error] [pid 27743:tid 27784] [client 51.103.48.143:64968] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/v4.php"] [unique_id "acZ6CSA46UYYLqzw99DunAAAABQ"]
[Fri Mar 27 20:37:30.181040 2026] [:error] [pid 4341:tid 4347] [client 51.103.48.143:31622] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ant.php"] [unique_id "acZ6CuKJWrNB5dMlERGtZwAAAYQ"]
[Fri Mar 27 20:37:30.872016 2026] [:error] [pid 4293:tid 4309] [client 51.103.48.143:60106] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ant.php"] [unique_id "acZ6CpLjeJUC3OKtEx-YLAAAAU4"]
[Fri Mar 27 20:37:31.511689 2026] [:error] [pid 4293:tid 4310] [client 51.103.48.143:37751] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ant.php"] [unique_id "acZ6C5LjeJUC3OKtEx-YMQAAAU8"]
[Fri Mar 27 20:37:32.251362 2026] [:error] [pid 27743:tid 27782] [client 51.103.48.143:7531] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ant.php"] [unique_id "acZ6DCA46UYYLqzw99DunwAAABI"]
[Fri Mar 27 20:37:33.038836 2026] [:error] [pid 27851:tid 27871] [client 51.103.48.143:17549] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/as.php"] [unique_id "acZ6DXR2ccxe3RMCLbr1AQAAAM0"]
[Fri Mar 27 20:37:33.662768 2026] [:error] [pid 27749:tid 27804] [client 51.103.48.143:7535] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/as.php"] [unique_id "acZ6DcEqyoMni2Q6_X71RAAAAE0"]
[Fri Mar 27 20:37:34.265392 2026] [:error] [pid 4341:tid 4365] [client 51.103.48.143:12240] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/as.php"] [unique_id "acZ6DuKJWrNB5dMlERGtbgAAAZY"]
[Fri Mar 27 20:37:34.944008 2026] [:error] [pid 4341:tid 4364] [client 51.103.48.143:58959] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/as.php"] [unique_id "acZ6DuKJWrNB5dMlERGtcAAAAZU"]
[Fri Mar 27 20:37:35.611293 2026] [:error] [pid 4293:tid 4295] [client 51.103.48.143:58998] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cc13.php"] [unique_id "acZ6D5LjeJUC3OKtEx-YNwAAAUA"]
[Fri Mar 27 20:37:36.215442 2026] [:error] [pid 4293:tid 4316] [client 51.103.48.143:2035] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cc13.php"] [unique_id "acZ6EJLjeJUC3OKtEx-YOwAAAVU"]
[Fri Mar 27 20:37:36.839647 2026] [:error] [pid 4293:tid 4303] [client 51.103.48.143:10973] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cc13.php"] [unique_id "acZ6EJLjeJUC3OKtEx-YQAAAAUg"]
[Fri Mar 27 20:37:37.481886 2026] [:error] [pid 27851:tid 27864] [client 51.103.48.143:29052] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cc13.php"] [unique_id "acZ6EXR2ccxe3RMCLbr1BQAAAMY"]
[Fri Mar 27 20:37:38.125370 2026] [:error] [pid 27743:tid 27770] [client 51.103.48.143:9679] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "acZ6EiA46UYYLqzw99DurAAAAAY"]
[Fri Mar 27 20:37:38.728788 2026] [:error] [pid 27743:tid 27764] [client 51.103.48.143:16300] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "acZ6EiA46UYYLqzw99DurwAAAAA"]
[Fri Mar 27 20:37:40.778181 2026] [:error] [pid 4341:tid 4365] [client 51.103.48.143:16090] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "acZ6FOKJWrNB5dMlERGteQAAAZY"]
[Fri Mar 27 20:37:41.890731 2026] [:error] [pid 4341:tid 4350] [client 51.103.48.143:17609] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "acZ6FeKJWrNB5dMlERGtfQAAAYc"]
[Fri Mar 27 20:37:42.798893 2026] [:error] [pid 27851:tid 27859] [client 51.103.48.143:17353] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ccs.php"] [unique_id "acZ6FnR2ccxe3RMCLbr1CgAAAME"]
[Fri Mar 27 20:37:43.586105 2026] [:error] [pid 27750:tid 27823] [client 51.103.48.143:17601] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ccs.php"] [unique_id "acZ6F4aSil5rd17ieLz2LQAAAIU"]
[Fri Mar 27 20:37:44.495597 2026] [:error] [pid 27743:tid 27784] [client 51.103.48.143:20614] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ccs.php"] [unique_id "acZ6GCA46UYYLqzw99DuswAAABQ"]
[Fri Mar 27 20:37:45.338810 2026] [:error] [pid 63897:tid 63906] [client 51.103.48.143:36420] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ccs.php"] [unique_id "acZ6GWVSkmYmLu7ycYhWrQAAAQc"]
[Fri Mar 27 20:37:47.106556 2026] [:error] [pid 27749:tid 27805] [client 51.103.48.143:11246] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ccu.php"] [unique_id "acZ6G8EqyoMni2Q6_X71SgAAAE4"]
[Fri Mar 27 20:37:49.394427 2026] [:error] [pid 27749:tid 27793] [client 51.103.48.143:9196] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ccu.php"] [unique_id "acZ6HcEqyoMni2Q6_X71VgAAAEI"]
[Fri Mar 27 20:37:50.855315 2026] [:error] [pid 4293:tid 4315] [client 51.103.48.143:20728] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ccu.php"] [unique_id "acZ6HpLjeJUC3OKtEx-YTAAAAVQ"]
[Fri Mar 27 20:37:51.583845 2026] [:error] [pid 4293:tid 4300] [client 51.103.48.143:60758] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ccu.php"] [unique_id "acZ6H5LjeJUC3OKtEx-YTwAAAUU"]
[Fri Mar 27 20:37:52.622438 2026] [:error] [pid 4341:tid 4357] [client 51.103.48.143:14484] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/albin.php"] [unique_id "acZ6IOKJWrNB5dMlERGtgQAAAY4"]
[Fri Mar 27 20:37:53.812411 2026] [:error] [pid 4293:tid 4295] [client 51.103.48.143:1049] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/albin.php"] [unique_id "acZ6IZLjeJUC3OKtEx-YWQAAAUA"]
[Fri Mar 27 20:37:57.603378 2026] [:error] [pid 27743:tid 27777] [client 51.103.48.143:41225] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/albin.php"] [unique_id "acZ6JSA46UYYLqzw99Du5AAAAA0"]
[Fri Mar 27 20:37:58.489466 2026] [:error] [pid 27743:tid 27770] [client 51.103.48.143:9366] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/albin.php"] [unique_id "acZ6JiA46UYYLqzw99Du6gAAAAY"]
[Fri Mar 27 20:38:00.928630 2026] [:error] [pid 4293:tid 4311] [client 51.103.48.143:38362] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/north1.php"] [unique_id "acZ6KJLjeJUC3OKtEx-YbQAAAVA"]
[Fri Mar 27 20:38:02.598874 2026] [:error] [pid 4341:tid 4343] [client 51.103.48.143:13219] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/north1.php"] [unique_id "acZ6KuKJWrNB5dMlERGtigAAAYA"]
[Fri Mar 27 20:38:03.930715 2026] [:error] [pid 27743:tid 27777] [client 51.103.48.143:37657] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/north1.php"] [unique_id "acZ6KyA46UYYLqzw99DvCgAAAA0"]
[Fri Mar 27 20:38:04.801792 2026] [:error] [pid 4341:tid 4348] [client 51.103.48.143:24008] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/north1.php"] [unique_id "acZ6LOKJWrNB5dMlERGtjgAAAYU"]
[Fri Mar 27 20:38:05.741204 2026] [:error] [pid 4293:tid 4308] [client 51.103.48.143:27804] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dragonshell.php"] [unique_id "acZ6LZLjeJUC3OKtEx-YcQAAAU0"]
[Fri Mar 27 20:38:06.689571 2026] [:error] [pid 27743:tid 27780] [client 51.103.48.143:27796] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dragonshell.php"] [unique_id "acZ6LiA46UYYLqzw99DvGgAAABA"]
[Fri Mar 27 20:38:07.639106 2026] [:error] [pid 4293:tid 4318] [client 51.103.48.143:24053] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dragonshell.php"] [unique_id "acZ6L5LjeJUC3OKtEx-YdQAAAVc"]
[Fri Mar 27 20:38:08.237935 2026] [:error] [pid 4341:tid 4355] [client 51.103.48.143:16775] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dragonshell.php"] [unique_id "acZ6MOKJWrNB5dMlERGtkwAAAYw"]
[Fri Mar 27 20:38:08.958331 2026] [:error] [pid 63897:tid 63905] [client 51.103.48.143:27827] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "acZ6MGVSkmYmLu7ycYhWugAAAQY"]
[Fri Mar 27 20:38:09.624625 2026] [:error] [pid 4341:tid 4352] [client 51.103.48.143:9365] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "acZ6MeKJWrNB5dMlERGtlQAAAYk"]
[Fri Mar 27 20:38:10.325353 2026] [:error] [pid 27743:tid 27764] [client 51.103.48.143:9357] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "acZ6MiA46UYYLqzw99DvOQAAAAA"]
[Fri Mar 27 20:38:11.343048 2026] [:error] [pid 63897:tid 63917] [client 51.103.48.143:37681] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "acZ6M2VSkmYmLu7ycYhWvQAAARI"]
[Fri Mar 27 20:38:11.873143 2026] [:error] [pid 4293:tid 4308] [client 51.103.48.143:1522] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/caiij.php"] [unique_id "acZ6M5LjeJUC3OKtEx-YewAAAU0"]
[Fri Mar 27 20:38:12.669203 2026] [:error] [pid 4341:tid 4356] [client 51.103.48.143:1474] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/caiij.php"] [unique_id "acZ6NOKJWrNB5dMlERGtmwAAAY0"]
[Fri Mar 27 20:38:13.572631 2026] [:error] [pid 27743:tid 27784] [client 51.103.48.143:15252] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/caiij.php"] [unique_id "acZ6NSA46UYYLqzw99DvQQAAABQ"]
[Fri Mar 27 20:38:14.601165 2026] [:error] [pid 4341:tid 4367] [client 51.103.48.143:57170] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/caiij.php"] [unique_id "acZ6NuKJWrNB5dMlERGtogAAAZg"]
[Fri Mar 27 20:38:15.245936 2026] [:error] [pid 27749:tid 27797] [client 51.103.48.143:9399] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gel4y.php"] [unique_id "acZ6N8EqyoMni2Q6_X71cgAAAEY"]
[Fri Mar 27 20:38:15.981927 2026] [:error] [pid 27743:tid 27766] [client 51.103.48.143:15286] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gel4y.php"] [unique_id "acZ6NyA46UYYLqzw99DvSAAAAAI"]
[Fri Mar 27 20:38:16.731279 2026] [:error] [pid 27750:tid 27841] [client 51.103.48.143:37633] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gel4y.php"] [unique_id "acZ6OIaSil5rd17ieLz2RwAAAJc"]
[Fri Mar 27 20:38:17.577449 2026] [:error] [pid 27743:tid 27768] [client 51.103.48.143:24014] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gel4y.php"] [unique_id "acZ6OSA46UYYLqzw99DvSgAAAAQ"]
[Fri Mar 27 20:38:25.168749 2026] [:error] [pid 27851:tid 27862] [client 51.103.48.143:1479] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wta.php"] [unique_id "acZ6QXR2ccxe3RMCLbr1SAAAAMQ"]
[Fri Mar 27 20:38:25.938866 2026] [:error] [pid 4341:tid 4354] [client 51.103.48.143:32950] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wta.php"] [unique_id "acZ6QeKJWrNB5dMlERGtsQAAAYs"]
[Fri Mar 27 20:38:26.723639 2026] [:error] [pid 27851:tid 27875] [client 51.103.48.143:14059] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wta.php"] [unique_id "acZ6QnR2ccxe3RMCLbr1SQAAANE"]
[Fri Mar 27 20:38:27.369324 2026] [:error] [pid 27851:tid 27869] [client 51.103.48.143:15042] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wta.php"] [unique_id "acZ6Q3R2ccxe3RMCLbr1SwAAAMs"]
[Fri Mar 27 20:38:28.042990 2026] [:error] [pid 27851:tid 27876] [client 51.103.48.143:57206] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws77.php"] [unique_id "acZ6RHR2ccxe3RMCLbr1TAAAANI"]
[Fri Mar 27 20:38:28.753076 2026] [:error] [pid 27750:tid 27834] [client 51.103.48.143:57199] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws77.php"] [unique_id "acZ6RIaSil5rd17ieLz2WgAAAJA"]
[Fri Mar 27 20:38:29.315613 2026] [:error] [pid 27851:tid 27879] [client 51.103.48.143:19850] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws77.php"] [unique_id "acZ6RXR2ccxe3RMCLbr1UAAAANU"]
[Fri Mar 27 20:38:30.094065 2026] [:error] [pid 4293:tid 4301] [client 51.103.48.143:25045] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws77.php"] [unique_id "acZ6RpLjeJUC3OKtEx-YqgAAAUY"]
[Fri Mar 27 20:38:30.659556 2026] [:error] [pid 4293:tid 4310] [client 51.103.48.143:10916] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "acZ6RpLjeJUC3OKtEx-YrgAAAU8"]
[Fri Mar 27 20:38:31.185915 2026] [:error] [pid 4293:tid 4308] [client 51.103.48.143:19866] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "acZ6R5LjeJUC3OKtEx-YrwAAAU0"]
[Fri Mar 27 20:38:31.862667 2026] [:error] [pid 4341:tid 4365] [client 51.103.48.143:57203] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "acZ6R-KJWrNB5dMlERGtwgAAAZY"]
[Fri Mar 27 20:38:32.599979 2026] [:error] [pid 4341:tid 4364] [client 51.103.48.143:19841] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "acZ6SOKJWrNB5dMlERGtyAAAAZU"]
[Fri Mar 27 20:38:33.148438 2026] [:error] [pid 4293:tid 4307] [client 51.103.48.143:1810] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "acZ6SZLjeJUC3OKtEx-YuAAAAUw"]
[Fri Mar 27 20:38:33.731682 2026] [:error] [pid 63897:tid 63919] [client 51.103.48.143:16379] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "acZ6SWVSkmYmLu7ycYhW0gAAARQ"]
[Fri Mar 27 20:38:34.472989 2026] [:error] [pid 27749:tid 27806] [client 51.103.48.143:8342] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "acZ6SsEqyoMni2Q6_X71gAAAAE8"]
[Fri Mar 27 20:38:35.162244 2026] [:error] [pid 4341:tid 4363] [client 51.103.48.143:34647] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "acZ6S-KJWrNB5dMlERGt2gAAAZQ"]
[Fri Mar 27 20:38:36.185005 2026] [:error] [pid 27750:tid 27819] [client 51.103.48.143:17328] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-class.php"] [unique_id "acZ6TIaSil5rd17ieLz2YwAAAIE"]
[Fri Mar 27 20:38:36.843960 2026] [:error] [pid 27749:tid 27792] [client 51.103.48.143:33539] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-class.php"] [unique_id "acZ6TMEqyoMni2Q6_X71gQAAAEE"]
[Fri Mar 27 20:38:37.667356 2026] [:error] [pid 27750:tid 27834] [client 51.103.48.143:15561] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-class.php"] [unique_id "acZ6TYaSil5rd17ieLz2ZgAAAJA"]
[Fri Mar 27 20:38:38.488560 2026] [:error] [pid 27851:tid 27872] [client 51.103.48.143:58281] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-class.php"] [unique_id "acZ6TnR2ccxe3RMCLbr1UwAAAM4"]
[Fri Mar 27 20:38:40.983531 2026] [:error] [pid 63897:tid 63920] [client 51.103.48.143:1609] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "acZ6UGVSkmYmLu7ycYhW3AAAARU"]
[Fri Mar 27 20:38:44.974343 2026] [:error] [pid 63897:tid 63921] [client 51.103.48.143:8370] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "acZ6VGVSkmYmLu7ycYhW7gAAARY"]
[Fri Mar 27 20:38:45.948879 2026] [:error] [pid 4341:tid 4366] [client 51.103.48.143:57217] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "acZ6VeKJWrNB5dMlERGt_AAAAZc"]
[Fri Mar 27 20:38:46.586259 2026] [:error] [pid 4341:tid 4356] [client 51.103.48.143:58286] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "acZ6VuKJWrNB5dMlERGt_gAAAY0"]
[Fri Mar 27 20:38:47.161179 2026] [:error] [pid 4293:tid 4314] [client 51.103.48.143:7843] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-load.php"] [unique_id "acZ6V5LjeJUC3OKtEx-ZKwAAAVM"]
[Fri Mar 27 20:38:48.124668 2026] [:error] [pid 4293:tid 4317] [client 51.103.48.143:27179] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-load.php"] [unique_id "acZ6WJLjeJUC3OKtEx-ZMgAAAVY"]
[Fri Mar 27 20:38:48.763755 2026] [:error] [pid 4293:tid 4297] [client 51.103.48.143:22229] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-load.php"] [unique_id "acZ6WJLjeJUC3OKtEx-ZNQAAAUI"]
[Fri Mar 27 20:38:49.615147 2026] [:error] [pid 27743:tid 27783] [client 51.103.48.143:27140] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-load.php"] [unique_id "acZ6WSA46UYYLqzw99DvhwAAABM"]
[Fri Mar 27 20:38:50.212856 2026] [:error] [pid 27743:tid 27780] [client 51.103.48.143:64379] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gpt-sh.php"] [unique_id "acZ6WiA46UYYLqzw99DviwAAABA"]
[Fri Mar 27 20:38:50.908425 2026] [:error] [pid 4341:tid 4345] [client 51.103.48.143:34655] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gpt-sh.php"] [unique_id "acZ6WuKJWrNB5dMlERGuCwAAAYI"]
[Fri Mar 27 20:38:51.659644 2026] [:error] [pid 63897:tid 63916] [client 51.103.48.143:16342] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gpt-sh.php"] [unique_id "acZ6W2VSkmYmLu7ycYhW9wAAARE"]
[Fri Mar 27 20:38:52.247447 2026] [:error] [pid 27743:tid 27788] [client 51.103.48.143:16364] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gpt-sh.php"] [unique_id "acZ6XCA46UYYLqzw99DvjgAAABg"]
[Fri Mar 27 20:38:52.966687 2026] [:error] [pid 4341:tid 4363] [client 51.103.48.143:34680] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bywaf.php"] [unique_id "acZ6XOKJWrNB5dMlERGuEQAAAZQ"]
[Fri Mar 27 20:38:53.568714 2026] [:error] [pid 27851:tid 27861] [client 51.103.48.143:13039] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bywaf.php"] [unique_id "acZ6XXR2ccxe3RMCLbr1XwAAAMM"]
[Fri Mar 27 20:38:54.256564 2026] [:error] [pid 27743:tid 27787] [client 51.103.48.143:33541] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bywaf.php"] [unique_id "acZ6XiA46UYYLqzw99DvlAAAABc"]
[Fri Mar 27 20:38:54.972577 2026] [:error] [pid 27743:tid 27786] [client 51.103.48.143:58276] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bywaf.php"] [unique_id "acZ6XiA46UYYLqzw99DvlwAAABY"]
[Fri Mar 27 20:38:55.574546 2026] [:error] [pid 63897:tid 63903] [client 51.103.48.143:7845] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-true.php"] [unique_id "acZ6X2VSkmYmLu7ycYhW-QAAAQQ"]
[Fri Mar 27 20:38:56.246212 2026] [:error] [pid 63897:tid 63901] [client 51.103.48.143:34669] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-true.php"] [unique_id "acZ6YGVSkmYmLu7ycYhW_AAAAQI"]
[Fri Mar 27 20:38:57.002362 2026] [:error] [pid 27743:tid 27765] [client 51.103.48.143:13038] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-true.php"] [unique_id "acZ6YSA46UYYLqzw99DvoQAAAAE"]
[Fri Mar 27 20:38:58.113061 2026] [:error] [pid 4293:tid 4315] [client 51.103.48.143:19069] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-true.php"] [unique_id "acZ6YpLjeJUC3OKtEx-ZXwAAAVQ"]
[Fri Mar 27 20:38:58.801559 2026] [:error] [pid 4293:tid 4297] [client 51.103.48.143:17851] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byp8.php"] [unique_id "acZ6YpLjeJUC3OKtEx-ZZAAAAUI"]
[Fri Mar 27 20:38:59.499854 2026] [:error] [pid 63897:tid 63922] [client 51.103.48.143:8924] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byp8.php"] [unique_id "acZ6Y2VSkmYmLu7ycYhW_gAAARc"]
[Fri Mar 27 20:39:00.185837 2026] [:error] [pid 27851:tid 27875] [client 51.103.48.143:22228] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byp8.php"] [unique_id "acZ6ZHR2ccxe3RMCLbr1ZQAAANE"]
[Fri Mar 27 20:39:01.614187 2026] [:error] [pid 4341:tid 4357] [client 51.103.48.143:27138] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byp8.php"] [unique_id "acZ6ZeKJWrNB5dMlERGuHAAAAY4"]
[Fri Mar 27 20:39:02.680415 2026] [:error] [pid 63897:tid 63903] [client 51.103.48.143:22266] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx88.php"] [unique_id "acZ6ZmVSkmYmLu7ycYhXCAAAAQQ"]
[Fri Mar 27 20:39:03.439097 2026] [:error] [pid 27743:tid 27769] [client 51.103.48.143:7809] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx88.php"] [unique_id "acZ6ZyA46UYYLqzw99DvsgAAAAU"]
[Fri Mar 27 20:39:04.463604 2026] [:error] [pid 27749:tid 27797] [client 51.103.48.143:18787] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx88.php"] [unique_id "acZ6aMEqyoMni2Q6_X71lwAAAEY"]
[Fri Mar 27 20:39:05.729131 2026] [:error] [pid 4341:tid 4364] [client 51.103.48.143:8597] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx88.php"] [unique_id "acZ6aeKJWrNB5dMlERGuHwAAAZU"]
[Fri Mar 27 20:39:07.019868 2026] [:error] [pid 27750:tid 27841] [client 51.103.48.143:61478] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "acZ6a4aSil5rd17ieLz2cQAAAJc"]
[Fri Mar 27 20:39:07.726999 2026] [:error] [pid 63897:tid 63919] [client 51.103.48.143:1166] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "acZ6a2VSkmYmLu7ycYhXEgAAARQ"]
[Fri Mar 27 20:39:08.563462 2026] [:error] [pid 27749:tid 27792] [client 51.103.48.143:18288] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "acZ6bMEqyoMni2Q6_X71nQAAAEE"]
[Fri Mar 27 20:39:10.519685 2026] [:error] [pid 27743:tid 27764] [client 51.103.48.143:18775] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "acZ6biA46UYYLqzw99DvuAAAAAA"]
[Fri Mar 27 20:39:11.145419 2026] [:error] [pid 27851:tid 27861] [client 51.103.48.143:41954] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/max.php"] [unique_id "acZ6b3R2ccxe3RMCLbr1ewAAAMM"]
[Fri Mar 27 20:39:11.801491 2026] [:error] [pid 27851:tid 27870] [client 51.103.48.143:34108] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/max.php"] [unique_id "acZ6b3R2ccxe3RMCLbr1fwAAAMw"]
[Fri Mar 27 20:39:12.617829 2026] [:error] [pid 27750:tid 27840] [client 51.103.48.143:41927] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/max.php"] [unique_id "acZ6cIaSil5rd17ieLz2dwAAAJY"]
[Fri Mar 27 20:39:13.168265 2026] [:error] [pid 27851:tid 27864] [client 51.103.48.143:27198] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/max.php"] [unique_id "acZ6cXR2ccxe3RMCLbr1gQAAAMY"]
[Fri Mar 27 20:39:14.003595 2026] [:error] [pid 27743:tid 27777] [client 51.103.48.143:13019] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/z60.php"] [unique_id "acZ6ciA46UYYLqzw99DvuwAAAA0"]
[Fri Mar 27 20:39:14.655914 2026] [:error] [pid 63897:tid 63903] [client 51.103.48.143:27143] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/z60.php"] [unique_id "acZ6cmVSkmYmLu7ycYhXIwAAAQQ"]
[Fri Mar 27 20:39:15.187626 2026] [:error] [pid 27851:tid 27861] [client 51.103.48.143:45176] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/z60.php"] [unique_id "acZ6c3R2ccxe3RMCLbr1hQAAAMM"]
[Fri Mar 27 20:39:15.793980 2026] [:error] [pid 63897:tid 63923] [client 51.103.48.143:41936] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/z60.php"] [unique_id "acZ6c2VSkmYmLu7ycYhXJQAAARg"]
[Fri Mar 27 20:39:16.307134 2026] [:error] [pid 4341:tid 4352] [client 51.103.48.143:61457] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/utky.php"] [unique_id "acZ6dOKJWrNB5dMlERGuJgAAAYk"]
[Fri Mar 27 20:39:17.053811 2026] [:error] [pid 4341:tid 4349] [client 51.103.48.143:8093] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/utky.php"] [unique_id "acZ6deKJWrNB5dMlERGuKwAAAYY"]
[Fri Mar 27 20:39:17.688655 2026] [:error] [pid 27743:tid 27784] [client 51.103.48.143:58194] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/utky.php"] [unique_id "acZ6dSA46UYYLqzw99DvxwAAABQ"]
[Fri Mar 27 20:39:18.444525 2026] [:error] [pid 4341:tid 4363] [client 51.103.48.143:62859] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/utky.php"] [unique_id "acZ6duKJWrNB5dMlERGuMAAAAZQ"]
[Fri Mar 27 20:39:19.284469 2026] [:error] [pid 27750:tid 27820] [client 51.103.48.143:18788] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uang.php"] [unique_id "acZ6d4aSil5rd17ieLz2gAAAAII"]
[Fri Mar 27 20:39:20.342636 2026] [:error] [pid 27750:tid 27834] [client 51.103.48.143:62872] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uang.php"] [unique_id "acZ6eIaSil5rd17ieLz2gQAAAJA"]
[Fri Mar 27 20:39:20.902581 2026] [:error] [pid 4341:tid 4358] [client 51.103.48.143:64407] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uang.php"] [unique_id "acZ6eOKJWrNB5dMlERGuNgAAAY8"]
[Fri Mar 27 20:39:21.618514 2026] [:error] [pid 27851:tid 27873] [client 51.103.48.143:45167] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uang.php"] [unique_id "acZ6eXR2ccxe3RMCLbr1hwAAAM8"]
[Fri Mar 27 20:39:22.270428 2026] [:error] [pid 27743:tid 27775] [client 51.103.48.143:13055] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp3.php"] [unique_id "acZ6eiA46UYYLqzw99Dv1QAAAAs"]
[Fri Mar 27 20:39:22.858936 2026] [:error] [pid 4293:tid 4316] [client 51.103.48.143:41943] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp3.php"] [unique_id "acZ6epLjeJUC3OKtEx-ZdgAAAVU"]
[Fri Mar 27 20:39:23.439385 2026] [:error] [pid 63897:tid 63922] [client 51.103.48.143:61492] [client 51.103.48.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp3.php"] [unique_id "acZ6e2VSkmYmLu7ycYhXNAAAARc"]
[Sat Mar 28 08:52:06.158922 2026] [:error] [pid 43579:tid 43617] [client 52.231.64.83:5148] [client 52.231.64.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/asasx.php"] [unique_id "accmNiRqN4JVI8gB7Amf2QAAAok"]
[Sat Mar 28 08:52:06.779073 2026] [:error] [pid 34597:tid 34618] [client 52.231.64.83:7529] [client 52.231.64.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/asasx.php"] [unique_id "accmNoluI7-e5s1cafczQwAAAVE"]
[Sat Mar 28 08:52:07.447551 2026] [:error] [pid 34631:tid 34677] [client 52.231.64.83:7546] [client 52.231.64.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/asasx.php"] [unique_id "accmNztzjMMS6kojpeRJSwAAAdE"]
[Sat Mar 28 08:52:08.145035 2026] [:error] [pid 34631:tid 34664] [client 52.231.64.83:9039] [client 52.231.64.83] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/asasx.php"] [unique_id "accmODtzjMMS6kojpeRJTAAAAcQ"]
[Sun Mar 29 03:31:25.308411 2026] [:error] [pid 39514:tid 39534] [client 130.131.193.97:64088] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "acgsjSkUyvlQod6qQu2-7QAAAMk"]
[Sun Mar 29 03:31:25.774306 2026] [:error] [pid 20319:tid 20334] [client 130.131.193.97:65044] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "acgsjYdRN14nyF4YRGSoPwAAAc0"]
[Sun Mar 29 03:31:26.279184 2026] [:error] [pid 39514:tid 39528] [client 130.131.193.97:64086] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "acgsjikUyvlQod6qQu2-7gAAAMM"]
[Sun Mar 29 03:31:26.814689 2026] [:error] [pid 60346:tid 60371] [client 130.131.193.97:65122] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "acgsjnVrXSgLxlxLi9BnQAAAARQ"]
[Sun Mar 29 03:31:27.233901 2026] [:error] [pid 11588:tid 11590] [client 130.131.193.97:64559] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "acgsjwhH5525WHuzKfqBcAAAAUA"]
[Sun Mar 29 03:31:27.735429 2026] [:error] [pid 39429:tid 39493] [client 130.131.193.97:64527] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "acgsj08pSj6sqgZaItn8dAAAAIc"]
[Sun Mar 29 03:31:28.186376 2026] [:error] [pid 39428:tid 39471] [client 130.131.193.97:64008] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "acgskKXMrozFMIaP8nIT0AAAAEw"]
[Sun Mar 29 03:31:28.658898 2026] [:error] [pid 39429:tid 39496] [client 130.131.193.97:64105] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "acgskE8pSj6sqgZaItn8dgAAAIo"]
[Sun Mar 29 03:31:29.100032 2026] [:error] [pid 39429:tid 39498] [client 130.131.193.97:65136] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "acgskU8pSj6sqgZaItn8eAAAAIw"]
[Sun Mar 29 03:31:29.543382 2026] [:error] [pid 20319:tid 20327] [client 130.131.193.97:64116] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "acgskYdRN14nyF4YRGSoQwAAAcY"]
[Sun Mar 29 03:31:29.949366 2026] [:error] [pid 39428:tid 39465] [client 130.131.193.97:64548] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "acgskaXMrozFMIaP8nIT0gAAAEY"]
[Sun Mar 29 03:31:30.336893 2026] [:error] [pid 11588:tid 11604] [client 130.131.193.97:65106] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "acgskghH5525WHuzKfqBcwAAAU4"]
[Sun Mar 29 03:31:30.728852 2026] [:error] [pid 20284:tid 20294] [client 130.131.193.97:64014] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/term.php"] [unique_id "acgskjJgMkVHwdyddkBzCgAAAYc"]
[Sun Mar 29 03:31:31.103541 2026] [:error] [pid 39514:tid 39541] [client 130.131.193.97:64115] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/term.php"] [unique_id "acgskykUyvlQod6qQu2-8gAAANA"]
[Sun Mar 29 03:31:31.496109 2026] [:error] [pid 39427:tid 39436] [client 130.131.193.97:64110] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/term.php"] [unique_id "acgsk1vLf0RDUqcYq-ZpawAAAAQ"]
[Sun Mar 29 03:31:31.957396 2026] [:error] [pid 11588:tid 11591] [client 130.131.193.97:64069] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/term.php"] [unique_id "acgskwhH5525WHuzKfqBdwAAAUE"]
[Sun Mar 29 03:31:32.349016 2026] [:error] [pid 20284:tid 20298] [client 130.131.193.97:64110] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bootstrap.php"] [unique_id "acgslDJgMkVHwdyddkBzDQAAAYs"]
[Sun Mar 29 03:31:32.801202 2026] [:error] [pid 11588:tid 11599] [client 130.131.193.97:65144] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bootstrap.php"] [unique_id "acgslAhH5525WHuzKfqBeQAAAUk"]
[Sun Mar 29 03:31:33.191604 2026] [:error] [pid 11588:tid 11609] [client 130.131.193.97:65137] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bootstrap.php"] [unique_id "acgslQhH5525WHuzKfqBewAAAVM"]
[Sun Mar 29 03:31:33.580890 2026] [:error] [pid 39428:tid 39462] [client 130.131.193.97:65062] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bootstrap.php"] [unique_id "acgslaXMrozFMIaP8nIT2AAAAEM"]
[Sun Mar 29 03:31:33.970048 2026] [:error] [pid 11588:tid 11608] [client 130.131.193.97:64638] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "acgslQhH5525WHuzKfqBfgAAAVI"]
[Sun Mar 29 03:31:34.366532 2026] [:error] [pid 39427:tid 39443] [client 130.131.193.97:64633] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "acgsllvLf0RDUqcYq-ZpcAAAAAs"]
[Sun Mar 29 03:31:34.784859 2026] [:error] [pid 11588:tid 11606] [client 130.131.193.97:64020] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "acgslghH5525WHuzKfqBgQAAAVA"]
[Sun Mar 29 03:31:35.193505 2026] [:error] [pid 39514:tid 39544] [client 130.131.193.97:64084] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "acgslykUyvlQod6qQu2-_QAAANM"]
[Sun Mar 29 03:31:35.584930 2026] [:error] [pid 11588:tid 11593] [client 130.131.193.97:64087] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/install.php"] [unique_id "acgslwhH5525WHuzKfqBhQAAAUM"]
[Sun Mar 29 03:31:36.016062 2026] [:error] [pid 39428:tid 39467] [client 130.131.193.97:64624] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/install.php"] [unique_id "acgsmKXMrozFMIaP8nIT3AAAAEg"]
[Sun Mar 29 03:31:36.395157 2026] [:error] [pid 11588:tid 11598] [client 130.131.193.97:64531] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/install.php"] [unique_id "acgsmAhH5525WHuzKfqBiQAAAUg"]
[Sun Mar 29 03:31:36.856395 2026] [:error] [pid 11588:tid 11611] [client 130.131.193.97:64009] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/install.php"] [unique_id "acgsmAhH5525WHuzKfqBjgAAAVU"]
[Sun Mar 29 03:31:37.264000 2026] [:error] [pid 39429:tid 39497] [client 130.131.193.97:65138] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/buc.php"] [unique_id "acgsmU8pSj6sqgZaItn8fQAAAIs"]
[Sun Mar 29 03:31:37.672197 2026] [:error] [pid 39429:tid 39490] [client 130.131.193.97:65116] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/buc.php"] [unique_id "acgsmU8pSj6sqgZaItn8fgAAAIQ"]
[Sun Mar 29 03:31:38.113537 2026] [:error] [pid 11588:tid 11593] [client 130.131.193.97:64620] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/buc.php"] [unique_id "acgsmghH5525WHuzKfqBlQAAAUM"]
[Sun Mar 29 03:31:38.504518 2026] [:error] [pid 20284:tid 20308] [client 130.131.193.97:64117] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/buc.php"] [unique_id "acgsmjJgMkVHwdyddkBzDwAAAZU"]
[Sun Mar 29 03:31:39.021348 2026] [:error] [pid 39427:tid 39455] [client 130.131.193.97:64012] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "acgsm1vLf0RDUqcYq-ZpdQAAABc"]
[Sun Mar 29 03:31:39.405311 2026] [:error] [pid 60346:tid 60353] [client 130.131.193.97:65141] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "acgsm3VrXSgLxlxLi9BnSQAAAQI"]
[Sun Mar 29 03:31:39.790852 2026] [:error] [pid 39427:tid 39456] [client 130.131.193.97:65128] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "acgsm1vLf0RDUqcYq-ZpdgAAABg"]
[Sun Mar 29 03:31:40.189757 2026] [:error] [pid 39429:tid 39506] [client 130.131.193.97:65063] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "acgsnE8pSj6sqgZaItn8ggAAAJQ"]
[Sun Mar 29 03:31:40.619074 2026] [:error] [pid 39429:tid 39510] [client 130.131.193.97:64582] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blogs.php"] [unique_id "acgsnE8pSj6sqgZaItn8hAAAAJg"]
[Sun Mar 29 03:31:41.011095 2026] [:error] [pid 20284:tid 20310] [client 130.131.193.97:65077] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blogs.php"] [unique_id "acgsnTJgMkVHwdyddkBzEAAAAZc"]
[Sun Mar 29 03:31:41.398060 2026] [:error] [pid 39427:tid 39436] [client 130.131.193.97:65097] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blogs.php"] [unique_id "acgsnVvLf0RDUqcYq-ZpdwAAAAQ"]
[Sun Mar 29 03:31:41.788657 2026] [:error] [pid 11588:tid 11601] [client 130.131.193.97:64634] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blogs.php"] [unique_id "acgsnQhH5525WHuzKfqBnQAAAUs"]
[Sun Mar 29 03:31:42.185049 2026] [:error] [pid 39429:tid 39503] [client 130.131.193.97:64011] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acgsnk8pSj6sqgZaItn8jQAAAJE"]
[Sun Mar 29 03:31:42.593966 2026] [:error] [pid 39429:tid 39497] [client 130.131.193.97:64525] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acgsnk8pSj6sqgZaItn8kAAAAIs"]
[Sun Mar 29 03:31:43.025700 2026] [:error] [pid 39429:tid 39489] [client 130.131.193.97:65026] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acgsn08pSj6sqgZaItn8kgAAAIM"]
[Sun Mar 29 03:31:43.478363 2026] [:error] [pid 39429:tid 39486] [client 130.131.193.97:65125] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acgsn08pSj6sqgZaItn8lwAAAIA"]
[Sun Mar 29 03:31:43.869155 2026] [:error] [pid 60346:tid 60363] [client 130.131.193.97:64593] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "acgsn3VrXSgLxlxLi9BnUAAAAQw"]
[Sun Mar 29 03:31:44.290983 2026] [:error] [pid 60346:tid 60374] [client 130.131.193.97:65127] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "acgsoHVrXSgLxlxLi9BnUQAAARc"]
[Sun Mar 29 03:31:44.674621 2026] [:error] [pid 39429:tid 39493] [client 130.131.193.97:65119] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "acgsoE8pSj6sqgZaItn8mwAAAIc"]
[Sun Mar 29 03:31:45.119896 2026] [:error] [pid 39514:tid 39538] [client 130.131.193.97:65135] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "acgsoSkUyvlQod6qQu2_BAAAAM0"]
[Sun Mar 29 03:31:45.548329 2026] [:error] [pid 20284:tid 20300] [client 130.131.193.97:65076] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/okxh.php"] [unique_id "acgsoTJgMkVHwdyddkBzFQAAAY0"]
[Sun Mar 29 03:31:45.963485 2026] [:error] [pid 39429:tid 39486] [client 130.131.193.97:64574] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/okxh.php"] [unique_id "acgsoU8pSj6sqgZaItn8oQAAAIA"]
[Sun Mar 29 03:31:46.355139 2026] [:error] [pid 20284:tid 20307] [client 130.131.193.97:65092] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/okxh.php"] [unique_id "acgsojJgMkVHwdyddkBzFgAAAZQ"]
[Sun Mar 29 03:31:46.744934 2026] [:error] [pid 39429:tid 39505] [client 130.131.193.97:64119] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/okxh.php"] [unique_id "acgsok8pSj6sqgZaItn8pgAAAJM"]
[Sun Mar 29 03:31:47.151807 2026] [:error] [pid 39429:tid 39507] [client 130.131.193.97:65055] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/csv.php"] [unique_id "acgso08pSj6sqgZaItn8qgAAAJU"]
[Sun Mar 29 03:31:47.622022 2026] [:error] [pid 39429:tid 39491] [client 130.131.193.97:64558] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/csv.php"] [unique_id "acgso08pSj6sqgZaItn8rQAAAIU"]
[Sun Mar 29 03:31:48.026467 2026] [:error] [pid 39514:tid 39550] [client 130.131.193.97:64092] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/csv.php"] [unique_id "acgspCkUyvlQod6qQu2_BgAAANg"]
[Sun Mar 29 03:31:48.414375 2026] [:error] [pid 11588:tid 11592] [client 130.131.193.97:64555] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/csv.php"] [unique_id "acgspAhH5525WHuzKfqBnwAAAUI"]
[Sun Mar 29 03:31:48.998628 2026] [:error] [pid 39429:tid 39496] [client 130.131.193.97:65073] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "acgspE8pSj6sqgZaItn8sgAAAIo"]
[Sun Mar 29 03:32:01.151693 2026] [:error] [pid 39429:tid 39504] [client 130.131.193.97:64074] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lm15.php"] [unique_id "acgssU8pSj6sqgZaItn8yQAAAJI"]
[Sun Mar 29 03:32:01.531924 2026] [:error] [pid 11588:tid 11604] [client 130.131.193.97:64576] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lm15.php"] [unique_id "acgssQhH5525WHuzKfqBrwAAAU4"]
[Sun Mar 29 03:32:01.992016 2026] [:error] [pid 39427:tid 39444] [client 130.131.193.97:63557] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lm15.php"] [unique_id "acgssVvLf0RDUqcYq-ZpegAAAAw"]
[Sun Mar 29 03:32:02.414099 2026] [:error] [pid 39427:tid 39450] [client 130.131.193.97:65117] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lm15.php"] [unique_id "acgsslvLf0RDUqcYq-ZpewAAABI"]
[Sun Mar 29 03:32:02.916287 2026] [:error] [pid 39514:tid 39530] [client 130.131.193.97:65032] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/clss.php"] [unique_id "acgssikUyvlQod6qQu2_GwAAAMU"]
[Sun Mar 29 03:32:03.340330 2026] [:error] [pid 39428:tid 39464] [client 130.131.193.97:65107] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/clss.php"] [unique_id "acgss6XMrozFMIaP8nIT5wAAAEU"]
[Sun Mar 29 03:32:03.763765 2026] [:error] [pid 39514:tid 39543] [client 130.131.193.97:63569] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/clss.php"] [unique_id "acgssykUyvlQod6qQu2_HwAAANI"]
[Sun Mar 29 03:32:04.190532 2026] [:error] [pid 39428:tid 39470] [client 130.131.193.97:64552] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/clss.php"] [unique_id "acgstKXMrozFMIaP8nIT6AAAAEs"]
[Sun Mar 29 03:32:04.770123 2026] [:error] [pid 39428:tid 39476] [client 130.131.193.97:64513] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "acgstKXMrozFMIaP8nIT6QAAAFE"]
[Sun Mar 29 03:32:05.179277 2026] [:error] [pid 20284:tid 20303] [client 130.131.193.97:64550] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "acgstTJgMkVHwdyddkBzKgAAAZA"]
[Sun Mar 29 03:32:05.598720 2026] [:error] [pid 39514:tid 39529] [client 130.131.193.97:64526] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "acgstSkUyvlQod6qQu2_IQAAAMQ"]
[Sun Mar 29 03:32:06.087226 2026] [:error] [pid 11588:tid 11597] [client 130.131.193.97:64520] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "acgstghH5525WHuzKfqBuQAAAUc"]
[Sun Mar 29 03:32:06.592502 2026] [:error] [pid 11588:tid 11605] [client 130.131.193.97:64600] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/5b9ac.php"] [unique_id "acgstghH5525WHuzKfqBugAAAU8"]
[Sun Mar 29 03:32:07.003312 2026] [:error] [pid 11588:tid 11607] [client 130.131.193.97:64526] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/5b9ac.php"] [unique_id "acgstwhH5525WHuzKfqBvgAAAVE"]
[Sun Mar 29 03:32:07.466597 2026] [:error] [pid 11588:tid 11601] [client 130.131.193.97:65066] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/5b9ac.php"] [unique_id "acgstwhH5525WHuzKfqBwAAAAUs"]
[Sun Mar 29 03:32:07.961605 2026] [:error] [pid 11588:tid 11595] [client 130.131.193.97:65130] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/5b9ac.php"] [unique_id "acgstwhH5525WHuzKfqBwgAAAUU"]
[Sun Mar 29 03:32:08.446504 2026] [:error] [pid 11588:tid 11608] [client 130.131.193.97:65036] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/domains.php"] [unique_id "acgsuAhH5525WHuzKfqBxwAAAVI"]
[Sun Mar 29 03:32:08.911320 2026] [:error] [pid 20319:tid 20325] [client 130.131.193.97:65123] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/domains.php"] [unique_id "acgsuIdRN14nyF4YRGSoXgAAAcQ"]
[Sun Mar 29 03:32:09.342448 2026] [:error] [pid 39427:tid 39455] [client 130.131.193.97:64104] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/domains.php"] [unique_id "acgsuVvLf0RDUqcYq-ZpgAAAABc"]
[Sun Mar 29 03:32:09.789032 2026] [:error] [pid 39514:tid 39538] [client 130.131.193.97:63517] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/domains.php"] [unique_id "acgsuSkUyvlQod6qQu2_KAAAAM0"]
[Sun Mar 29 03:32:10.207828 2026] [:error] [pid 39428:tid 39480] [client 130.131.193.97:65096] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Cap.php"] [unique_id "acgsuqXMrozFMIaP8nIT6wAAAFU"]
[Sun Mar 29 03:32:10.591556 2026] [:error] [pid 39514:tid 39544] [client 130.131.193.97:65124] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Cap.php"] [unique_id "acgsuikUyvlQod6qQu2_KwAAANM"]
[Sun Mar 29 03:32:11.016795 2026] [:error] [pid 39429:tid 39502] [client 130.131.193.97:64081] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Cap.php"] [unique_id "acgsu08pSj6sqgZaItn8zgAAAJA"]
[Sun Mar 29 03:32:11.416799 2026] [:error] [pid 39429:tid 39497] [client 130.131.193.97:64113] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Cap.php"] [unique_id "acgsu08pSj6sqgZaItn80AAAAIs"]
[Sun Mar 29 03:32:11.850128 2026] [:error] [pid 39429:tid 39492] [client 130.131.193.97:64591] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws88.php"] [unique_id "acgsu08pSj6sqgZaItn80gAAAIY"]
[Sun Mar 29 03:32:12.287098 2026] [:error] [pid 39429:tid 39504] [client 130.131.193.97:64017] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws88.php"] [unique_id "acgsvE8pSj6sqgZaItn81QAAAJI"]
[Sun Mar 29 03:32:12.732245 2026] [:error] [pid 60346:tid 60370] [client 130.131.193.97:65101] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws88.php"] [unique_id "acgsvHVrXSgLxlxLi9BnXwAAARM"]
[Sun Mar 29 03:32:13.260676 2026] [:error] [pid 39427:tid 39436] [client 130.131.193.97:65104] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws88.php"] [unique_id "acgsvVvLf0RDUqcYq-ZpggAAAAQ"]
[Sun Mar 29 03:32:13.818347 2026] [:error] [pid 20319:tid 20327] [client 130.131.193.97:64031] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "acgsvYdRN14nyF4YRGSoZAAAAcY"]
[Sun Mar 29 03:32:14.316250 2026] [:error] [pid 60346:tid 60357] [client 130.131.193.97:64108] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "acgsvnVrXSgLxlxLi9BnYQAAAQY"]
[Sun Mar 29 03:32:14.701039 2026] [:error] [pid 20319:tid 20324] [client 130.131.193.97:64019] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "acgsvodRN14nyF4YRGSoaAAAAcM"]
[Sun Mar 29 03:32:15.185363 2026] [:error] [pid 39427:tid 39437] [client 130.131.193.97:65038] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "acgsv1vLf0RDUqcYq-ZphwAAAAU"]
[Sun Mar 29 03:32:15.684275 2026] [:error] [pid 20319:tid 20326] [client 130.131.193.97:63524] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5e0a.php"] [unique_id "acgsv4dRN14nyF4YRGSoawAAAcU"]
[Sun Mar 29 03:32:16.093545 2026] [:error] [pid 39427:tid 39444] [client 130.131.193.97:64078] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5e0a.php"] [unique_id "acgswFvLf0RDUqcYq-ZpiQAAAAw"]
[Sun Mar 29 03:32:16.520435 2026] [:error] [pid 39427:tid 39450] [client 130.131.193.97:64561] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5e0a.php"] [unique_id "acgswFvLf0RDUqcYq-ZpigAAABI"]
[Sun Mar 29 03:32:17.261082 2026] [:error] [pid 39514:tid 39531] [client 130.131.193.97:64570] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5e0a.php"] [unique_id "acgswSkUyvlQod6qQu2_LAAAAMY"]
[Sun Mar 29 03:32:17.693417 2026] [:error] [pid 39514:tid 39524] [client 130.131.193.97:64028] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/t.php"] [unique_id "acgswSkUyvlQod6qQu2_LQAAAMA"]
[Sun Mar 29 03:32:18.074561 2026] [:error] [pid 39429:tid 39504] [client 130.131.193.97:64625] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/t.php"] [unique_id "acgswk8pSj6sqgZaItn83gAAAJI"]
[Sun Mar 29 03:32:18.495362 2026] [:error] [pid 20319:tid 20335] [client 130.131.193.97:64537] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/t.php"] [unique_id "acgswodRN14nyF4YRGSocAAAAc4"]
[Sun Mar 29 03:32:18.946421 2026] [:error] [pid 20319:tid 20331] [client 130.131.193.97:64556] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/t.php"] [unique_id "acgswodRN14nyF4YRGSocgAAAco"]
[Sun Mar 29 03:32:19.438017 2026] [:error] [pid 39514:tid 39547] [client 130.131.193.97:65037] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tfm.php"] [unique_id "acgswykUyvlQod6qQu2_MgAAANY"]
[Sun Mar 29 03:32:19.875714 2026] [:error] [pid 39514:tid 39542] [client 130.131.193.97:64542] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tfm.php"] [unique_id "acgswykUyvlQod6qQu2_MwAAANE"]
[Sun Mar 29 03:32:20.296908 2026] [:error] [pid 39514:tid 39543] [client 130.131.193.97:63497] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tfm.php"] [unique_id "acgsxCkUyvlQod6qQu2_NAAAANI"]
[Sun Mar 29 03:32:20.689642 2026] [:error] [pid 20284:tid 20308] [client 130.131.193.97:64578] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tfm.php"] [unique_id "acgsxDJgMkVHwdyddkBzNwAAAZU"]
[Sun Mar 29 03:32:21.137797 2026] [:error] [pid 39427:tid 39452] [client 130.131.193.97:64591] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "acgsxVvLf0RDUqcYq-ZpjgAAABQ"]
[Sun Mar 29 03:32:21.550200 2026] [:error] [pid 20284:tid 20287] [client 130.131.193.97:64070] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "acgsxTJgMkVHwdyddkBzPgAAAYA"]
[Sun Mar 29 03:32:21.942034 2026] [:error] [pid 39429:tid 39498] [client 130.131.193.97:64004] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "acgsxU8pSj6sqgZaItn85AAAAIw"]
[Sun Mar 29 03:32:22.315719 2026] [:error] [pid 39514:tid 39538] [client 130.131.193.97:64018] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "acgsxikUyvlQod6qQu2_NgAAAM0"]
[Sun Mar 29 03:32:22.711390 2026] [:error] [pid 39514:tid 39536] [client 130.131.193.97:65058] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8573.php"] [unique_id "acgsxikUyvlQod6qQu2_OQAAAMs"]
[Sun Mar 29 03:32:23.096894 2026] [:error] [pid 39427:tid 39440] [client 130.131.193.97:63546] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8573.php"] [unique_id "acgsx1vLf0RDUqcYq-ZpkAAAAAg"]
[Sun Mar 29 03:32:23.588199 2026] [:error] [pid 39429:tid 39487] [client 130.131.193.97:65115] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8573.php"] [unique_id "acgsx08pSj6sqgZaItn85gAAAIE"]
[Sun Mar 29 03:32:24.004940 2026] [:error] [pid 39429:tid 39502] [client 130.131.193.97:65131] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8573.php"] [unique_id "acgsyE8pSj6sqgZaItn86gAAAJA"]
[Sun Mar 29 03:32:24.449106 2026] [:error] [pid 39429:tid 39491] [client 130.131.193.97:64524] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ne2026.php"] [unique_id "acgsyE8pSj6sqgZaItn87QAAAIU"]
[Sun Mar 29 03:32:24.885190 2026] [:error] [pid 39429:tid 39508] [client 130.131.193.97:65100] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ne2026.php"] [unique_id "acgsyE8pSj6sqgZaItn88AAAAJY"]
[Sun Mar 29 03:32:30.599509 2026] [:error] [pid 39429:tid 39509] [client 130.131.193.97:64602] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "acgszk8pSj6sqgZaItn9BQAAAJc"]
[Sun Mar 29 03:32:31.090740 2026] [:error] [pid 39429:tid 39498] [client 130.131.193.97:64118] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "acgsz08pSj6sqgZaItn9BwAAAIw"]
[Sun Mar 29 03:32:31.485560 2026] [:error] [pid 39429:tid 39492] [client 130.131.193.97:64572] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "acgsz08pSj6sqgZaItn9CgAAAIY"]
[Sun Mar 29 03:32:31.953117 2026] [:error] [pid 39429:tid 39507] [client 130.131.193.97:64109] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "acgsz08pSj6sqgZaItn9EgAAAJU"]
[Sun Mar 29 03:32:32.331736 2026] [:error] [pid 39429:tid 39509] [client 130.131.193.97:64096] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zc-104.php"] [unique_id "acgs0E8pSj6sqgZaItn9FQAAAJc"]
[Sun Mar 29 03:32:32.730715 2026] [:error] [pid 39429:tid 39498] [client 130.131.193.97:63590] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zc-104.php"] [unique_id "acgs0E8pSj6sqgZaItn9GgAAAIw"]
[Sun Mar 29 03:32:33.127880 2026] [:error] [pid 39429:tid 39508] [client 130.131.193.97:64522] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zc-104.php"] [unique_id "acgs0U8pSj6sqgZaItn9HwAAAJY"]
[Sun Mar 29 03:32:33.535900 2026] [:error] [pid 60346:tid 60373] [client 130.131.193.97:64569] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zc-104.php"] [unique_id "acgs0XVrXSgLxlxLi9BnaAAAARY"]
[Sun Mar 29 03:32:33.990985 2026] [:error] [pid 20284:tid 20288] [client 130.131.193.97:65146] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aa21.php"] [unique_id "acgs0TJgMkVHwdyddkBzRwAAAYE"]
[Sun Mar 29 03:32:34.406502 2026] [:error] [pid 39429:tid 39498] [client 130.131.193.97:64568] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aa21.php"] [unique_id "acgs0k8pSj6sqgZaItn9JgAAAIw"]
[Sun Mar 29 03:32:34.841721 2026] [:error] [pid 39514:tid 39529] [client 130.131.193.97:65090] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aa21.php"] [unique_id "acgs0ikUyvlQod6qQu2_UwAAAMQ"]
[Sun Mar 29 03:32:35.234896 2026] [:error] [pid 39514:tid 39538] [client 130.131.193.97:65054] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aa21.php"] [unique_id "acgs0ykUyvlQod6qQu2_VwAAAM0"]
[Sun Mar 29 03:32:35.659658 2026] [:error] [pid 39429:tid 39497] [client 130.131.193.97:64539] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws81.php"] [unique_id "acgs008pSj6sqgZaItn9KQAAAIs"]
[Sun Mar 29 03:32:36.090017 2026] [:error] [pid 39429:tid 39508] [client 130.131.193.97:64586] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws81.php"] [unique_id "acgs1E8pSj6sqgZaItn9KgAAAJY"]
[Sun Mar 29 03:32:36.521411 2026] [:error] [pid 39429:tid 39503] [client 130.131.193.97:63543] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws81.php"] [unique_id "acgs1E8pSj6sqgZaItn9LQAAAJE"]
[Sun Mar 29 03:32:36.906788 2026] [:error] [pid 39429:tid 39504] [client 130.131.193.97:64112] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws81.php"] [unique_id "acgs1E8pSj6sqgZaItn9MQAAAJI"]
[Sun Mar 29 03:32:37.285657 2026] [:error] [pid 20284:tid 20290] [client 130.131.193.97:64595] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "acgs1TJgMkVHwdyddkBzSwAAAYM"]
[Sun Mar 29 03:32:37.702916 2026] [:error] [pid 60346:tid 60365] [client 130.131.193.97:64589] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "acgs1XVrXSgLxlxLi9BnbAAAAQ4"]
[Sun Mar 29 03:32:38.099838 2026] [:error] [pid 39429:tid 39498] [client 130.131.193.97:65149] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "acgs1k8pSj6sqgZaItn9NwAAAIw"]
[Sun Mar 29 03:32:38.535077 2026] [:error] [pid 39429:tid 39490] [client 130.131.193.97:64575] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "acgs1k8pSj6sqgZaItn9OQAAAIQ"]
[Sun Mar 29 03:32:38.917037 2026] [:error] [pid 20319:tid 20323] [client 130.131.193.97:64584] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ajax.php"] [unique_id "acgs1odRN14nyF4YRGSofQAAAcI"]
[Sun Mar 29 03:32:39.301129 2026] [:error] [pid 39514:tid 39543] [client 130.131.193.97:64021] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ajax.php"] [unique_id "acgs1ykUyvlQod6qQu2_XwAAANI"]
[Sun Mar 29 03:32:39.695091 2026] [:error] [pid 20284:tid 20299] [client 130.131.193.97:65139] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ajax.php"] [unique_id "acgs1zJgMkVHwdyddkBzTQAAAYw"]
[Sun Mar 29 03:32:40.114807 2026] [:error] [pid 60346:tid 60367] [client 130.131.193.97:63075] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ajax.php"] [unique_id "acgs2HVrXSgLxlxLi9BnbQAAARA"]
[Sun Mar 29 03:32:40.488488 2026] [:error] [pid 39514:tid 39541] [client 130.131.193.97:64103] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tfm.php"] [unique_id "acgs2CkUyvlQod6qQu2_YwAAANA"]
[Sun Mar 29 03:32:40.927841 2026] [:error] [pid 11588:tid 11603] [client 130.131.193.97:64097] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tfm.php"] [unique_id "acgs2AhH5525WHuzKfqB5gAAAU0"]
[Sun Mar 29 03:32:41.345394 2026] [:error] [pid 20284:tid 20297] [client 130.131.193.97:65085] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tfm.php"] [unique_id "acgs2TJgMkVHwdyddkBzTwAAAYo"]
[Sun Mar 29 03:32:41.789437 2026] [:error] [pid 20319:tid 20324] [client 130.131.193.97:64030] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tfm.php"] [unique_id "acgs2YdRN14nyF4YRGSohAAAAcM"]
[Sun Mar 29 03:32:42.316913 2026] [:error] [pid 39429:tid 39494] [client 130.131.193.97:62992] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asasx.php"] [unique_id "acgs2k8pSj6sqgZaItn9PQAAAIg"]
[Sun Mar 29 03:32:42.885656 2026] [:error] [pid 39514:tid 39550] [client 130.131.193.97:65098] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asasx.php"] [unique_id "acgs2ikUyvlQod6qQu2_ZgAAANg"]
[Sun Mar 29 03:32:43.343013 2026] [:error] [pid 39429:tid 39509] [client 130.131.193.97:65105] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asasx.php"] [unique_id "acgs208pSj6sqgZaItn9QQAAAJc"]
[Sun Mar 29 03:32:43.959582 2026] [:error] [pid 39429:tid 39487] [client 130.131.193.97:65121] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asasx.php"] [unique_id "acgs208pSj6sqgZaItn9RAAAAIE"]
[Sun Mar 29 03:32:44.385298 2026] [:error] [pid 39429:tid 39494] [client 130.131.193.97:64079] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vanda.php"] [unique_id "acgs3E8pSj6sqgZaItn9RwAAAIg"]
[Sun Mar 29 03:32:44.769181 2026] [:error] [pid 39514:tid 39536] [client 130.131.193.97:64573] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vanda.php"] [unique_id "acgs3CkUyvlQod6qQu2_cQAAAMs"]
[Sun Mar 29 03:32:45.237602 2026] [:error] [pid 39514:tid 39549] [client 130.131.193.97:63056] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vanda.php"] [unique_id "acgs3SkUyvlQod6qQu2_eAAAANc"]
[Sun Mar 29 03:32:45.689389 2026] [:error] [pid 60346:tid 60375] [client 130.131.193.97:64058] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vanda.php"] [unique_id "acgs3XVrXSgLxlxLi9BncQAAARg"]
[Sun Mar 29 03:32:46.357552 2026] [:error] [pid 11588:tid 11611] [client 130.131.193.97:62981] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acgs3ghH5525WHuzKfqB5wAAAVU"]
[Sun Mar 29 03:32:46.786035 2026] [:error] [pid 39514:tid 39538] [client 130.131.193.97:64592] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acgs3ikUyvlQod6qQu2_fAAAAM0"]
[Sun Mar 29 03:32:47.286707 2026] [:error] [pid 60346:tid 60374] [client 130.131.193.97:64035] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acgs33VrXSgLxlxLi9BndgAAARc"]
[Sun Mar 29 03:32:47.744959 2026] [:error] [pid 20284:tid 20301] [client 130.131.193.97:64006] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "acgs3zJgMkVHwdyddkBzUgAAAY4"]
[Sun Mar 29 03:32:48.241136 2026] [:error] [pid 20284:tid 20304] [client 130.131.193.97:64523] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/55b76.php"] [unique_id "acgs4DJgMkVHwdyddkBzVwAAAZE"]
[Sun Mar 29 03:32:48.688470 2026] [:error] [pid 39427:tid 39432] [client 130.131.193.97:64530] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/55b76.php"] [unique_id "acgs4FvLf0RDUqcYq-ZplgAAAAA"]
[Sun Mar 29 03:32:49.563684 2026] [:error] [pid 39429:tid 39487] [client 130.131.193.97:64535] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/55b76.php"] [unique_id "acgs4U8pSj6sqgZaItn9TgAAAIE"]
[Sun Mar 29 03:32:50.312878 2026] [:error] [pid 20284:tid 20294] [client 130.131.193.97:64623] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/55b76.php"] [unique_id "acgs4jJgMkVHwdyddkBzWgAAAYc"]
[Sun Mar 29 03:32:51.058691 2026] [:error] [pid 11588:tid 11610] [client 130.131.193.97:64601] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/44.php"] [unique_id "acgs4whH5525WHuzKfqB7wAAAVQ"]
[Sun Mar 29 03:32:51.872157 2026] [:error] [pid 60346:tid 60351] [client 130.131.193.97:63520] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/44.php"] [unique_id "acgs43VrXSgLxlxLi9BnegAAAQA"]
[Sun Mar 29 03:32:53.381540 2026] [:error] [pid 39429:tid 39497] [client 130.131.193.97:64519] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/44.php"] [unique_id "acgs5U8pSj6sqgZaItn9VQAAAIs"]
[Sun Mar 29 03:32:53.891374 2026] [:error] [pid 39429:tid 39505] [client 130.131.193.97:64000] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/44.php"] [unique_id "acgs5U8pSj6sqgZaItn9VgAAAJM"]
[Sun Mar 29 03:32:54.315176 2026] [:error] [pid 39514:tid 39534] [client 130.131.193.97:65112] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "acgs5ikUyvlQod6qQu2_hQAAAMk"]
[Sun Mar 29 03:32:54.990356 2026] [:error] [pid 39514:tid 39543] [client 130.131.193.97:63525] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "acgs5ikUyvlQod6qQu2_iQAAANI"]
[Sun Mar 29 03:32:55.677724 2026] [:error] [pid 11588:tid 11606] [client 130.131.193.97:65083] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "acgs5whH5525WHuzKfqB9AAAAVA"]
[Sun Mar 29 03:32:56.385008 2026] [:error] [pid 39514:tid 39545] [client 130.131.193.97:65047] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "acgs6CkUyvlQod6qQu2_jwAAANQ"]
[Sun Mar 29 03:32:57.099070 2026] [:error] [pid 39514:tid 39530] [client 130.131.193.97:64062] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "acgs6SkUyvlQod6qQu2_kwAAAMU"]
[Sun Mar 29 03:32:57.613733 2026] [:error] [pid 11588:tid 11592] [client 130.131.193.97:65045] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "acgs6QhH5525WHuzKfqB9gAAAUI"]
[Sun Mar 29 03:32:58.030886 2026] [:error] [pid 39429:tid 39494] [client 130.131.193.97:63593] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "acgs6k8pSj6sqgZaItn9YwAAAIg"]
[Sun Mar 29 03:32:58.581284 2026] [:error] [pid 39429:tid 39501] [client 130.131.193.97:63576] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "acgs6k8pSj6sqgZaItn9aAAAAI8"]
[Sun Mar 29 03:32:59.253765 2026] [:error] [pid 39429:tid 39491] [client 130.131.193.97:64039] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "acgs608pSj6sqgZaItn9bAAAAIU"]
[Sun Mar 29 03:32:59.912575 2026] [:error] [pid 39429:tid 39502] [client 130.131.193.97:64611] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "acgs608pSj6sqgZaItn9dQAAAJA"]
[Sun Mar 29 03:33:00.293950 2026] [:error] [pid 39429:tid 39504] [client 130.131.193.97:64121] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "acgs7E8pSj6sqgZaItn9eQAAAJI"]
[Sun Mar 29 03:33:00.718442 2026] [:error] [pid 39427:tid 39445] [client 130.131.193.97:64622] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "acgs7FvLf0RDUqcYq-ZpmwAAAA0"]
[Sun Mar 29 03:33:01.196054 2026] [:error] [pid 39514:tid 39537] [client 130.131.193.97:64635] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx78.php"] [unique_id "acgs7SkUyvlQod6qQu2_mwAAAMw"]
[Sun Mar 29 03:33:01.598546 2026] [:error] [pid 39514:tid 39525] [client 130.131.193.97:64562] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx78.php"] [unique_id "acgs7SkUyvlQod6qQu2_nAAAAME"]
[Sun Mar 29 03:33:02.047236 2026] [:error] [pid 39514:tid 39540] [client 130.131.193.97:64013] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx78.php"] [unique_id "acgs7ikUyvlQod6qQu2_nQAAAM8"]
[Sun Mar 29 03:33:02.637045 2026] [:error] [pid 39427:tid 39439] [client 130.131.193.97:63045] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx78.php"] [unique_id "acgs7lvLf0RDUqcYq-ZpngAAAAc"]
[Sun Mar 29 03:33:03.066908 2026] [:error] [pid 20284:tid 20299] [client 130.131.193.97:63096] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xfun.php"] [unique_id "acgs7zJgMkVHwdyddkBzYQAAAYw"]
[Sun Mar 29 03:33:03.669296 2026] [:error] [pid 11588:tid 11595] [client 130.131.193.97:62994] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xfun.php"] [unique_id "acgs7whH5525WHuzKfqB-QAAAUU"]
[Sun Mar 29 03:33:04.444738 2026] [:error] [pid 20319:tid 20337] [client 130.131.193.97:65084] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xfun.php"] [unique_id "acgs8IdRN14nyF4YRGSolgAAAdA"]
[Sun Mar 29 03:33:04.982891 2026] [:error] [pid 20319:tid 20325] [client 130.131.193.97:64124] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xfun.php"] [unique_id "acgs8IdRN14nyF4YRGSomgAAAcQ"]
[Sun Mar 29 03:33:05.450351 2026] [:error] [pid 20319:tid 20328] [client 130.131.193.97:64099] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/h2.php"] [unique_id "acgs8YdRN14nyF4YRGSonQAAAcc"]
[Sun Mar 29 03:33:05.955264 2026] [:error] [pid 20319:tid 20330] [client 130.131.193.97:64002] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/h2.php"] [unique_id "acgs8YdRN14nyF4YRGSooAAAAck"]
[Sun Mar 29 03:33:06.560718 2026] [:error] [pid 39429:tid 39499] [client 130.131.193.97:64615] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/h2.php"] [unique_id "acgs8k8pSj6sqgZaItn9hAAAAI0"]
[Sun Mar 29 03:33:06.959681 2026] [:error] [pid 39429:tid 39503] [client 130.131.193.97:64026] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/h2.php"] [unique_id "acgs8k8pSj6sqgZaItn9hgAAAJE"]
[Sun Mar 29 03:33:07.516344 2026] [:error] [pid 39429:tid 39497] [client 130.131.193.97:63496] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wxfyf.php"] [unique_id "acgs808pSj6sqgZaItn9iwAAAIs"]
[Sun Mar 29 03:33:07.972254 2026] [:error] [pid 39429:tid 39492] [client 130.131.193.97:63598] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wxfyf.php"] [unique_id "acgs808pSj6sqgZaItn9kQAAAIY"]
[Sun Mar 29 03:33:08.445134 2026] [:error] [pid 39514:tid 39538] [client 130.131.193.97:63585] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wxfyf.php"] [unique_id "acgs9CkUyvlQod6qQu2_ogAAAM0"]
[Sun Mar 29 03:33:08.991096 2026] [:error] [pid 39429:tid 39505] [client 130.131.193.97:63574] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wxfyf.php"] [unique_id "acgs9E8pSj6sqgZaItn9lgAAAJM"]
[Sun Mar 29 03:33:09.401456 2026] [:error] [pid 11588:tid 11592] [client 130.131.193.97:63528] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/drhunthq.php"] [unique_id "acgs9QhH5525WHuzKfqB_wAAAUI"]
[Sun Mar 29 03:33:09.816755 2026] [:error] [pid 39428:tid 39466] [client 130.131.193.97:65050] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/drhunthq.php"] [unique_id "acgs9aXMrozFMIaP8nIT9wAAAEc"]
[Sun Mar 29 03:33:10.360037 2026] [:error] [pid 39427:tid 39433] [client 130.131.193.97:64098] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/drhunthq.php"] [unique_id "acgs9lvLf0RDUqcYq-ZpoQAAAAE"]
[Sun Mar 29 03:33:10.748533 2026] [:error] [pid 39514:tid 39529] [client 130.131.193.97:64029] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/drhunthq.php"] [unique_id "acgs9ikUyvlQod6qQu2_pAAAAMQ"]
[Sun Mar 29 03:33:11.130630 2026] [:error] [pid 39429:tid 39502] [client 130.131.193.97:65132] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "acgs908pSj6sqgZaItn9oAAAAJA"]
[Sun Mar 29 03:33:11.507970 2026] [:error] [pid 39514:tid 39534] [client 130.131.193.97:65070] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "acgs9ykUyvlQod6qQu2_qQAAAMk"]
[Sun Mar 29 03:33:11.900822 2026] [:error] [pid 39429:tid 39492] [client 130.131.193.97:64068] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "acgs908pSj6sqgZaItn9owAAAIY"]
[Sun Mar 29 03:33:12.273862 2026] [:error] [pid 39429:tid 39508] [client 130.131.193.97:65120] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "acgs-E8pSj6sqgZaItn9pQAAAJY"]
[Sun Mar 29 03:33:12.648914 2026] [:error] [pid 39514:tid 39541] [client 130.131.193.97:63516] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sale.php"] [unique_id "acgs-CkUyvlQod6qQu2_qwAAANA"]
[Sun Mar 29 03:33:13.023977 2026] [:error] [pid 39427:tid 39447] [client 130.131.193.97:64036] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sale.php"] [unique_id "acgs-VvLf0RDUqcYq-ZppAAAAA8"]
[Sun Mar 29 03:33:13.407601 2026] [:error] [pid 39514:tid 39535] [client 130.131.193.97:64626] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sale.php"] [unique_id "acgs-SkUyvlQod6qQu2_rgAAAMo"]
[Sun Mar 29 03:33:13.790859 2026] [:error] [pid 20319:tid 20339] [client 130.131.193.97:65129] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sale.php"] [unique_id "acgs-YdRN14nyF4YRGSopAAAAdI"]
[Sun Mar 29 03:33:14.186817 2026] [:error] [pid 39429:tid 39496] [client 130.131.193.97:63007] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "acgs-k8pSj6sqgZaItn9rwAAAIo"]
[Sun Mar 29 03:33:14.561172 2026] [:error] [pid 39429:tid 39497] [client 130.131.193.97:65064] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "acgs-k8pSj6sqgZaItn9sgAAAIs"]
[Sun Mar 29 03:33:14.947493 2026] [:error] [pid 60346:tid 60363] [client 130.131.193.97:65060] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "acgs-nVrXSgLxlxLi9BnhAAAAQw"]
[Sun Mar 29 03:33:15.322597 2026] [:error] [pid 60346:tid 60369] [client 130.131.193.97:64076] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "acgs-3VrXSgLxlxLi9BnhgAAARI"]
[Sun Mar 29 03:33:15.739041 2026] [:error] [pid 60346:tid 60360] [client 130.131.193.97:64560] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asd.php"] [unique_id "acgs-3VrXSgLxlxLi9BniAAAAQk"]
[Sun Mar 29 03:33:16.116722 2026] [:error] [pid 39514:tid 39529] [client 130.131.193.97:64126] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asd.php"] [unique_id "acgs_CkUyvlQod6qQu2_swAAAMQ"]
[Sun Mar 29 03:33:16.518589 2026] [:error] [pid 39514:tid 39542] [client 130.131.193.97:65136] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asd.php"] [unique_id "acgs_CkUyvlQod6qQu2_tAAAANE"]
[Sun Mar 29 03:33:16.990953 2026] [:error] [pid 20284:tid 20308] [client 130.131.193.97:64072] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asd.php"] [unique_id "acgs_DJgMkVHwdyddkBzZQAAAZU"]
[Sun Mar 29 03:33:17.367768 2026] [:error] [pid 20284:tid 20289] [client 130.131.193.97:64010] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "acgs_TJgMkVHwdyddkBzZwAAAYI"]
[Sun Mar 29 03:33:17.757704 2026] [:error] [pid 39514:tid 39549] [client 130.131.193.97:64536] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "acgs_SkUyvlQod6qQu2_uwAAANc"]
[Sun Mar 29 03:33:18.147086 2026] [:error] [pid 39514:tid 39540] [client 130.131.193.97:65079] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "acgs_ikUyvlQod6qQu2_vAAAAM8"]
[Sun Mar 29 03:33:18.531070 2026] [:error] [pid 39429:tid 39498] [client 130.131.193.97:63611] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "acgs_k8pSj6sqgZaItn9ugAAAIw"]
[Sun Mar 29 03:33:18.911835 2026] [:error] [pid 20284:tid 20292] [client 130.131.193.97:64614] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bjfl.php"] [unique_id "acgs_jJgMkVHwdyddkBzaQAAAYU"]
[Sun Mar 29 03:33:19.310935 2026] [:error] [pid 20319:tid 20333] [client 130.131.193.97:64102] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bjfl.php"] [unique_id "acgs_4dRN14nyF4YRGSoqwAAAcw"]
[Sun Mar 29 03:33:19.926556 2026] [:error] [pid 20319:tid 20343] [client 130.131.193.97:63568] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bjfl.php"] [unique_id "acgs_4dRN14nyF4YRGSorQAAAdY"]
[Sun Mar 29 03:33:20.360616 2026] [:error] [pid 39429:tid 39509] [client 130.131.193.97:63539] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bjfl.php"] [unique_id "acgtAE8pSj6sqgZaItn9zAAAAJc"]
[Sun Mar 29 03:33:20.738987 2026] [:error] [pid 11588:tid 11609] [client 130.131.193.97:63503] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/d12.php"] [unique_id "acgtAAhH5525WHuzKfqCAQAAAVM"]
[Sun Mar 29 03:33:21.260387 2026] [:error] [pid 39428:tid 39459] [client 130.131.193.97:64618] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/d12.php"] [unique_id "acgtAaXMrozFMIaP8nIT_wAAAEA"]
[Sun Mar 29 03:33:21.680154 2026] [:error] [pid 11588:tid 11603] [client 130.131.193.97:63507] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/d12.php"] [unique_id "acgtAQhH5525WHuzKfqCBAAAAU0"]
[Sun Mar 29 03:33:22.148700 2026] [:error] [pid 11588:tid 11612] [client 130.131.193.97:63514] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/d12.php"] [unique_id "acgtAghH5525WHuzKfqCBgAAAVY"]
[Sun Mar 29 03:33:22.597684 2026] [:error] [pid 39429:tid 39496] [client 130.131.193.97:63011] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "acgtAk8pSj6sqgZaItn94AAAAIo"]
[Sun Mar 29 03:33:23.040066 2026] [:error] [pid 39428:tid 39469] [client 130.131.193.97:65081] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "acgtA6XMrozFMIaP8nIUAAAAAEo"]
[Sun Mar 29 03:33:23.535468 2026] [:error] [pid 11588:tid 11599] [client 130.131.193.97:64541] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "acgtAwhH5525WHuzKfqCCgAAAUk"]
[Sun Mar 29 03:33:23.941123 2026] [:error] [pid 39429:tid 39503] [client 130.131.193.97:65118] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "acgtA08pSj6sqgZaItn96QAAAJE"]
[Sun Mar 29 03:33:24.342760 2026] [:error] [pid 39429:tid 39508] [client 130.131.193.97:64567] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2ksm17n.php"] [unique_id "acgtBE8pSj6sqgZaItn97wAAAJY"]
[Sun Mar 29 03:33:24.757045 2026] [:error] [pid 39514:tid 39550] [client 130.131.193.97:64553] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2ksm17n.php"] [unique_id "acgtBCkUyvlQod6qQu2_wwAAANg"]
[Sun Mar 29 03:33:25.181463 2026] [:error] [pid 39428:tid 39479] [client 130.131.193.97:65142] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2ksm17n.php"] [unique_id "acgtBaXMrozFMIaP8nIUAQAAAFQ"]
[Sun Mar 29 03:33:25.756736 2026] [:error] [pid 39428:tid 39466] [client 130.131.193.97:64001] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2ksm17n.php"] [unique_id "acgtBaXMrozFMIaP8nIUAgAAAEc"]
[Sun Mar 29 03:33:26.176403 2026] [:error] [pid 39429:tid 39509] [client 130.131.193.97:64547] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "acgtBk8pSj6sqgZaItn-AAAAAJc"]
[Sun Mar 29 03:33:26.579592 2026] [:error] [pid 20319:tid 20340] [client 130.131.193.97:63071] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "acgtBodRN14nyF4YRGSosgAAAdM"]
[Sun Mar 29 03:33:27.046325 2026] [:error] [pid 39429:tid 39497] [client 130.131.193.97:63530] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "acgtB08pSj6sqgZaItn-CAAAAIs"]
[Sun Mar 29 03:33:27.484073 2026] [:error] [pid 39429:tid 39510] [client 130.131.193.97:64579] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "acgtB08pSj6sqgZaItn-DAAAAJg"]
[Sun Mar 29 03:33:27.875783 2026] [:error] [pid 39428:tid 39475] [client 130.131.193.97:63100] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/s.php"] [unique_id "acgtB6XMrozFMIaP8nIUBAAAAFA"]
[Sun Mar 29 03:33:28.455795 2026] [:error] [pid 60346:tid 60361] [client 130.131.193.97:64037] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/s.php"] [unique_id "acgtCHVrXSgLxlxLi9BnkAAAAQo"]
[Sun Mar 29 03:33:28.860741 2026] [:error] [pid 60346:tid 60353] [client 130.131.193.97:64606] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/s.php"] [unique_id "acgtCHVrXSgLxlxLi9BnkgAAAQI"]
[Sun Mar 29 03:33:29.330117 2026] [:error] [pid 20284:tid 20295] [client 130.131.193.97:65030] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/s.php"] [unique_id "acgtCTJgMkVHwdyddkBzcAAAAYg"]
[Sun Mar 29 03:33:29.846562 2026] [:error] [pid 39428:tid 39464] [client 130.131.193.97:64604] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws77.php"] [unique_id "acgtCaXMrozFMIaP8nIUBgAAAEU"]
[Sun Mar 29 03:33:35.760380 2026] [:error] [pid 11588:tid 11593] [client 130.131.193.97:63501] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "acgtDwhH5525WHuzKfqCJAAAAUM"]
[Sun Mar 29 03:33:37.870942 2026] [:error] [pid 39429:tid 39509] [client 130.131.193.97:63592] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "acgtEU8pSj6sqgZaItn-bgAAAJc"]
[Sun Mar 29 03:33:38.577455 2026] [:error] [pid 39514:tid 39532] [client 130.131.193.97:63502] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "acgtEikUyvlQod6qQu2_1gAAAMc"]
[Sun Mar 29 03:33:38.964402 2026] [:error] [pid 39429:tid 39503] [client 130.131.193.97:63053] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "acgtEk8pSj6sqgZaItn-cwAAAJE"]
[Sun Mar 29 03:33:39.454390 2026] [:error] [pid 39429:tid 39500] [client 130.131.193.97:64071] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws60.php"] [unique_id "acgtE08pSj6sqgZaItn-eAAAAI4"]
[Sun Mar 29 03:33:39.845046 2026] [:error] [pid 20319:tid 20339] [client 130.131.193.97:64631] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws60.php"] [unique_id "acgtE4dRN14nyF4YRGSouQAAAdI"]
[Sun Mar 29 03:33:40.322732 2026] [:error] [pid 11588:tid 11611] [client 130.131.193.97:64127] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws60.php"] [unique_id "acgtFAhH5525WHuzKfqCJwAAAVU"]
[Sun Mar 29 03:33:40.954627 2026] [:error] [pid 39514:tid 39540] [client 130.131.193.97:65068] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws60.php"] [unique_id "acgtFCkUyvlQod6qQu2_4QAAAM8"]
[Sun Mar 29 03:33:41.370554 2026] [:error] [pid 39514:tid 39539] [client 130.131.193.97:63044] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "acgtFSkUyvlQod6qQu2_5gAAAM4"]
[Sun Mar 29 03:33:41.821971 2026] [:error] [pid 20284:tid 20311] [client 130.131.193.97:63074] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "acgtFTJgMkVHwdyddkBzfAAAAZg"]
[Sun Mar 29 03:33:42.337956 2026] [:error] [pid 11588:tid 11594] [client 130.131.193.97:63536] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "acgtFghH5525WHuzKfqCKQAAAUQ"]
[Sun Mar 29 03:33:42.843465 2026] [:error] [pid 20284:tid 20300] [client 130.131.193.97:64080] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "acgtFjJgMkVHwdyddkBzfwAAAY0"]
[Sun Mar 29 03:33:43.394458 2026] [:error] [pid 60346:tid 60351] [client 130.131.193.97:64066] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "acgtF3VrXSgLxlxLi9BnlQAAAQA"]
[Sun Mar 29 03:33:44.217023 2026] [:error] [pid 60346:tid 60356] [client 130.131.193.97:63523] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "acgtGHVrXSgLxlxLi9BnlwAAAQU"]
[Sun Mar 29 03:33:44.906180 2026] [:error] [pid 11588:tid 11595] [client 130.131.193.97:63526] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "acgtGAhH5525WHuzKfqCLwAAAUU"]
[Sun Mar 29 03:33:45.818615 2026] [:error] [pid 39514:tid 39532] [client 130.131.193.97:64551] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "acgtGSkUyvlQod6qQu2_7AAAAMc"]
[Sun Mar 29 03:33:47.138136 2026] [:error] [pid 60346:tid 60360] [client 130.131.193.97:63602] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "acgtG3VrXSgLxlxLi9BnnAAAAQk"]
[Sun Mar 29 03:33:47.988926 2026] [:error] [pid 20284:tid 20306] [client 130.131.193.97:64565] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "acgtGzJgMkVHwdyddkBziAAAAZM"]
[Sun Mar 29 03:33:48.613537 2026] [:error] [pid 39427:tid 39446] [client 130.131.193.97:63022] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "acgtHFvLf0RDUqcYq-ZpswAAAA4"]
[Sun Mar 29 03:33:49.227557 2026] [:error] [pid 39429:tid 39496] [client 130.131.193.97:63026] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "acgtHU8pSj6sqgZaItn-iwAAAIo"]
[Sun Mar 29 03:33:49.667078 2026] [:error] [pid 20319:tid 20335] [client 130.131.193.97:65133] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "acgtHYdRN14nyF4YRGSo6gAAAc4"]
[Sun Mar 29 03:33:50.076116 2026] [:error] [pid 20319:tid 20321] [client 130.131.193.97:64630] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "acgtHodRN14nyF4YRGSo7AAAAcA"]
[Sun Mar 29 03:33:50.536879 2026] [:error] [pid 39429:tid 39510] [client 130.131.193.97:62431] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "acgtHk8pSj6sqgZaItn-kAAAAJg"]
[Sun Mar 29 03:33:51.023171 2026] [:error] [pid 11588:tid 11592] [client 130.131.193.97:63063] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "acgtHwhH5525WHuzKfqCMgAAAUI"]
[Sun Mar 29 03:33:51.532549 2026] [:error] [pid 39429:tid 39492] [client 130.131.193.97:65080] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/maul.php"] [unique_id "acgtH08pSj6sqgZaItn-lQAAAIY"]
[Sun Mar 29 03:33:52.206713 2026] [:error] [pid 20319:tid 20339] [client 130.131.193.97:64073] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/maul.php"] [unique_id "acgtIIdRN14nyF4YRGSo9AAAAdI"]
[Sun Mar 29 03:33:52.633969 2026] [:error] [pid 60346:tid 60355] [client 130.131.193.97:64015] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/maul.php"] [unique_id "acgtIHVrXSgLxlxLi9BnpQAAAQQ"]
[Sun Mar 29 03:33:53.221647 2026] [:error] [pid 39514:tid 39527] [client 130.131.193.97:64585] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/maul.php"] [unique_id "acgtISkUyvlQod6qQu2_9QAAAMI"]
[Sun Mar 29 03:33:53.752202 2026] [:error] [pid 20319:tid 20326] [client 130.131.193.97:64016] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xxw.php"] [unique_id "acgtIYdRN14nyF4YRGSo-wAAAcU"]
[Sun Mar 29 03:33:54.235488 2026] [:error] [pid 39427:tid 39435] [client 130.131.193.97:64605] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xxw.php"] [unique_id "acgtIlvLf0RDUqcYq-ZpvAAAAAM"]
[Sun Mar 29 03:33:54.854359 2026] [:error] [pid 11588:tid 11608] [client 130.131.193.97:63077] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xxw.php"] [unique_id "acgtIghH5525WHuzKfqCNQAAAVI"]
[Sun Mar 29 03:33:55.275977 2026] [:error] [pid 39427:tid 39452] [client 130.131.193.97:65086] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xxw.php"] [unique_id "acgtI1vLf0RDUqcYq-ZpvwAAABQ"]
[Sun Mar 29 03:33:55.752793 2026] [:error] [pid 20284:tid 20298] [client 130.131.193.97:65151] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "acgtIzJgMkVHwdyddkBzjQAAAYs"]
[Sun Mar 29 03:33:56.253887 2026] [:error] [pid 11588:tid 11596] [client 130.131.193.97:64557] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "acgtJAhH5525WHuzKfqCOQAAAUY"]
[Sun Mar 29 03:33:56.805770 2026] [:error] [pid 11588:tid 11612] [client 130.131.193.97:63521] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "acgtJAhH5525WHuzKfqCPAAAAVY"]
[Sun Mar 29 03:33:57.263119 2026] [:error] [pid 39428:tid 39480] [client 130.131.193.97:64047] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "acgtJaXMrozFMIaP8nIUFAAAAFU"]
[Sun Mar 29 03:33:57.642987 2026] [:error] [pid 11588:tid 11599] [client 130.131.193.97:63498] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/155.php"] [unique_id "acgtJQhH5525WHuzKfqCQAAAAUk"]
[Sun Mar 29 03:33:58.064437 2026] [:error] [pid 39427:tid 39444] [client 130.131.193.97:64590] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/155.php"] [unique_id "acgtJlvLf0RDUqcYq-ZpwQAAAAw"]
[Sun Mar 29 03:33:58.442608 2026] [:error] [pid 39429:tid 39505] [client 130.131.193.97:63071] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/155.php"] [unique_id "acgtJk8pSj6sqgZaItn-pAAAAJM"]
[Sun Mar 29 03:33:58.872223 2026] [:error] [pid 60346:tid 60374] [client 130.131.193.97:62987] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/155.php"] [unique_id "acgtJnVrXSgLxlxLi9BnqAAAARc"]
[Sun Mar 29 03:33:59.250379 2026] [:error] [pid 39427:tid 39453] [client 130.131.193.97:62458] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hots.php"] [unique_id "acgtJ1vLf0RDUqcYq-ZpxAAAABU"]
[Sun Mar 29 03:33:59.654359 2026] [:error] [pid 60346:tid 60367] [client 130.131.193.97:64005] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hots.php"] [unique_id "acgtJ3VrXSgLxlxLi9BnqgAAARA"]
[Sun Mar 29 03:34:00.033824 2026] [:error] [pid 39514:tid 39533] [client 130.131.193.97:63005] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hots.php"] [unique_id "acgtKCkUyvlQod6qQu2_-AAAAMg"]
[Sun Mar 29 03:34:00.457456 2026] [:error] [pid 39427:tid 39456] [client 130.131.193.97:63098] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hots.php"] [unique_id "acgtKFvLf0RDUqcYq-ZpxwAAABg"]
[Sun Mar 29 03:34:00.909485 2026] [:error] [pid 20284:tid 20292] [client 130.131.193.97:63563] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "acgtKDJgMkVHwdyddkBzkwAAAYU"]
[Sun Mar 29 03:34:01.318391 2026] [:error] [pid 20284:tid 20310] [client 130.131.193.97:65075] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "acgtKTJgMkVHwdyddkBzlQAAAZc"]
[Sun Mar 29 03:34:01.709491 2026] [:error] [pid 11588:tid 11612] [client 130.131.193.97:63570] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "acgtKQhH5525WHuzKfqCSQAAAVY"]
[Sun Mar 29 03:34:02.103395 2026] [:error] [pid 11588:tid 11603] [client 130.131.193.97:64543] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "acgtKghH5525WHuzKfqCSgAAAU0"]
[Sun Mar 29 03:34:02.485645 2026] [:error] [pid 11588:tid 11593] [client 130.131.193.97:65114] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "acgtKghH5525WHuzKfqCTQAAAUM"]
[Sun Mar 29 03:34:02.864674 2026] [:error] [pid 39427:tid 39447] [client 130.131.193.97:63565] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "acgtKlvLf0RDUqcYq-ZpyAAAAA8"]
[Sun Mar 29 03:34:03.275282 2026] [:error] [pid 20319:tid 20338] [client 130.131.193.97:64095] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "acgtK4dRN14nyF4YRGSo_QAAAdE"]
[Sun Mar 29 03:34:03.649355 2026] [:error] [pid 20319:tid 20335] [client 130.131.193.97:63099] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "acgtK4dRN14nyF4YRGSpAAAAAc4"]
[Sun Mar 29 03:34:04.072788 2026] [:error] [pid 20319:tid 20321] [client 130.131.193.97:63095] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/wp-blog.php"] [unique_id "acgtLIdRN14nyF4YRGSpAwAAAcA"]
[Sun Mar 29 03:34:04.454362 2026] [:error] [pid 20319:tid 20336] [client 130.131.193.97:65061] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/wp-blog.php"] [unique_id "acgtLIdRN14nyF4YRGSpCAAAAc8"]
[Sun Mar 29 03:34:04.844553 2026] [:error] [pid 11588:tid 11597] [client 130.131.193.97:65031] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/wp-blog.php"] [unique_id "acgtLAhH5525WHuzKfqCVQAAAUc"]
[Sun Mar 29 03:34:05.262416 2026] [:error] [pid 20284:tid 20288] [client 130.131.193.97:65110] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/wp-blog.php"] [unique_id "acgtLTJgMkVHwdyddkBznQAAAYE"]
[Sun Mar 29 03:34:05.644079 2026] [:error] [pid 20319:tid 20338] [client 130.131.193.97:64617] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "acgtLYdRN14nyF4YRGSpDQAAAdE"]
[Sun Mar 29 03:34:06.052185 2026] [:error] [pid 20319:tid 20327] [client 130.131.193.97:64554] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "acgtLodRN14nyF4YRGSpEAAAAcY"]
[Sun Mar 29 03:34:06.431205 2026] [:error] [pid 20319:tid 20322] [client 130.131.193.97:63103] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "acgtLodRN14nyF4YRGSpEwAAAcE"]
[Sun Mar 29 03:34:06.806644 2026] [:error] [pid 39429:tid 39489] [client 130.131.193.97:65067] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "acgtLk8pSj6sqgZaItn-pwAAAIM"]
[Sun Mar 29 03:34:07.197326 2026] [:error] [pid 39429:tid 39503] [client 130.131.193.97:62403] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "acgtL08pSj6sqgZaItn-qAAAAJE"]
[Sun Mar 29 03:34:07.605215 2026] [:error] [pid 60346:tid 60356] [client 130.131.193.97:64608] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "acgtL3VrXSgLxlxLi9BnugAAAQU"]
[Sun Mar 29 03:34:08.046833 2026] [:error] [pid 39429:tid 39487] [client 130.131.193.97:65035] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "acgtME8pSj6sqgZaItn-qgAAAIE"]
[Sun Mar 29 03:34:08.620280 2026] [:error] [pid 39429:tid 39498] [client 130.131.193.97:63561] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "acgtME8pSj6sqgZaItn-rQAAAIw"]
[Sun Mar 29 03:34:09.117878 2026] [:error] [pid 39514:tid 39529] [client 130.131.193.97:64038] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "acgtMSkUyvlQod6qQu2__wAAAMQ"]
[Sun Mar 29 03:34:09.701966 2026] [:error] [pid 39429:tid 39504] [client 130.131.193.97:63558] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "acgtMU8pSj6sqgZaItn-sgAAAJI"]
[Sun Mar 29 03:34:10.492624 2026] [:error] [pid 11588:tid 11607] [client 130.131.193.97:63074] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "acgtMghH5525WHuzKfqCWwAAAVE"]
[Sun Mar 29 03:34:10.881904 2026] [:error] [pid 60346:tid 60362] [client 130.131.193.97:64054] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "acgtMnVrXSgLxlxLi9BnvQAAAQs"]
[Sun Mar 29 03:34:11.268834 2026] [:error] [pid 11588:tid 11599] [client 130.131.193.97:64621] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "acgtMwhH5525WHuzKfqCXQAAAUk"]
[Sun Mar 29 03:34:11.691297 2026] [:error] [pid 11588:tid 11592] [client 130.131.193.97:64639] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "acgtMwhH5525WHuzKfqCXwAAAUI"]
[Sun Mar 29 03:34:12.087509 2026] [:error] [pid 11588:tid 11591] [client 130.131.193.97:64064] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "acgtNAhH5525WHuzKfqCYQAAAUE"]
[Sun Mar 29 03:34:12.476916 2026] [:error] [pid 39429:tid 39496] [client 130.131.193.97:63534] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "acgtNE8pSj6sqgZaItn-tgAAAIo"]
[Sun Mar 29 03:34:12.959247 2026] [:error] [pid 39429:tid 39502] [client 130.131.193.97:63560] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "acgtNE8pSj6sqgZaItn-ugAAAJA"]
[Sun Mar 29 03:34:13.523077 2026] [:error] [pid 39429:tid 39504] [client 130.131.193.97:63058] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "acgtNU8pSj6sqgZaItn-vQAAAJI"]
[Sun Mar 29 03:34:14.193722 2026] [:error] [pid 39427:tid 39434] [client 130.131.193.97:63613] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "acgtNlvLf0RDUqcYq-ZpywAAAAI"]
[Sun Mar 29 03:34:14.682313 2026] [:error] [pid 39514:tid 39549] [client 130.131.193.97:62420] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "acgtNikUyvlQod6qQu3ADgAAANc"]
[Sun Mar 29 03:34:15.160441 2026] [:error] [pid 39514:tid 39531] [client 130.131.193.97:65040] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/as.php"] [unique_id "acgtNykUyvlQod6qQu3AEAAAAMY"]
[Sun Mar 29 03:34:15.605111 2026] [:error] [pid 39514:tid 39545] [client 130.131.193.97:64027] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/as.php"] [unique_id "acgtNykUyvlQod6qQu3AEwAAANQ"]
[Sun Mar 29 03:34:16.047933 2026] [:error] [pid 39514:tid 39544] [client 130.131.193.97:65053] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/as.php"] [unique_id "acgtOCkUyvlQod6qQu3AFwAAANM"]
[Sun Mar 29 03:34:16.428937 2026] [:error] [pid 39514:tid 39547] [client 130.131.193.97:64106] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/as.php"] [unique_id "acgtOCkUyvlQod6qQu3AGgAAANY"]
[Sun Mar 29 03:34:16.820865 2026] [:error] [pid 39514:tid 39533] [client 130.131.193.97:63553] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws73.php"] [unique_id "acgtOCkUyvlQod6qQu3AHgAAAMg"]
[Sun Mar 29 03:34:17.208004 2026] [:error] [pid 39514:tid 39540] [client 130.131.193.97:62406] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws73.php"] [unique_id "acgtOSkUyvlQod6qQu3AIwAAAM8"]
[Sun Mar 29 03:34:17.683000 2026] [:error] [pid 39514:tid 39542] [client 130.131.193.97:61882] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws73.php"] [unique_id "acgtOSkUyvlQod6qQu3AJwAAANE"]
[Sun Mar 29 03:34:18.177536 2026] [:error] [pid 39427:tid 39451] [client 130.131.193.97:64566] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws73.php"] [unique_id "acgtOlvLf0RDUqcYq-ZpzgAAABM"]
[Sun Mar 29 03:34:18.693361 2026] [:error] [pid 39429:tid 39508] [client 130.131.193.97:64125] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog-header.php"] [unique_id "acgtOk8pSj6sqgZaItn-xwAAAJY"]
[Sun Mar 29 03:34:19.105155 2026] [:error] [pid 60346:tid 60359] [client 130.131.193.97:62416] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog-header.php"] [unique_id "acgtO3VrXSgLxlxLi9BnwAAAAQg"]
[Sun Mar 29 03:34:19.499169 2026] [:error] [pid 39514:tid 39544] [client 130.131.193.97:64023] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog-header.php"] [unique_id "acgtOykUyvlQod6qQu3AKwAAANM"]
[Sun Mar 29 03:34:19.908352 2026] [:error] [pid 39514:tid 39539] [client 130.131.193.97:63556] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog-header.php"] [unique_id "acgtOykUyvlQod6qQu3ALAAAAM4"]
[Sun Mar 29 03:34:20.348897 2026] [:error] [pid 39429:tid 39489] [client 130.131.193.97:64544] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lowpr.php"] [unique_id "acgtPE8pSj6sqgZaItn-zAAAAIM"]
[Sun Mar 29 03:34:20.777762 2026] [:error] [pid 20319:tid 20343] [client 130.131.193.97:65056] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lowpr.php"] [unique_id "acgtPIdRN14nyF4YRGSpGgAAAdY"]
[Sun Mar 29 03:34:21.196453 2026] [:error] [pid 20319:tid 20331] [client 130.131.193.97:65078] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lowpr.php"] [unique_id "acgtPYdRN14nyF4YRGSpGwAAAco"]
[Sun Mar 29 03:34:21.682987 2026] [:error] [pid 20284:tid 20301] [client 130.131.193.97:63538] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lowpr.php"] [unique_id "acgtPTJgMkVHwdyddkBzpQAAAY4"]
[Sun Mar 29 03:34:22.161348 2026] [:error] [pid 20284:tid 20305] [client 130.131.193.97:63584] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gfd.php"] [unique_id "acgtPjJgMkVHwdyddkBzpgAAAZI"]
[Sun Mar 29 03:34:22.586101 2026] [:error] [pid 39428:tid 39459] [client 130.131.193.97:63081] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gfd.php"] [unique_id "acgtPqXMrozFMIaP8nIULgAAAEA"]
[Sun Mar 29 03:34:23.043752 2026] [:error] [pid 60346:tid 60363] [client 130.131.193.97:64538] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gfd.php"] [unique_id "acgtP3VrXSgLxlxLi9BnxwAAAQw"]
[Sun Mar 29 03:34:23.666982 2026] [:error] [pid 20284:tid 20300] [client 130.131.193.97:64514] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gfd.php"] [unique_id "acgtPzJgMkVHwdyddkBzpwAAAY0"]
[Sun Mar 29 03:34:24.077799 2026] [:error] [pid 11588:tid 11595] [client 130.131.193.97:64632] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/144.php"] [unique_id "acgtQAhH5525WHuzKfqCbgAAAUU"]
[Sun Mar 29 03:34:24.521150 2026] [:error] [pid 39427:tid 39447] [client 130.131.193.97:61913] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/144.php"] [unique_id "acgtQFvLf0RDUqcYq-Zp0QAAAA8"]
[Sun Mar 29 03:34:25.028799 2026] [:error] [pid 11588:tid 11599] [client 130.131.193.97:64045] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/144.php"] [unique_id "acgtQQhH5525WHuzKfqCcQAAAUk"]
[Sun Mar 29 03:34:25.483048 2026] [:error] [pid 39427:tid 39435] [client 130.131.193.97:61885] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/144.php"] [unique_id "acgtQVvLf0RDUqcYq-Zp0gAAAAM"]
[Sun Mar 29 03:34:25.979043 2026] [:error] [pid 11588:tid 11591] [client 130.131.193.97:64120] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "acgtQQhH5525WHuzKfqCdgAAAUE"]
[Sun Mar 29 03:34:26.401657 2026] [:error] [pid 39429:tid 39486] [client 130.131.193.97:63067] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "acgtQk8pSj6sqgZaItn-0gAAAIA"]
[Sun Mar 29 03:34:27.008487 2026] [:error] [pid 39429:tid 39493] [client 130.131.193.97:64613] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "acgtQ08pSj6sqgZaItn-1gAAAIc"]
[Sun Mar 29 03:34:27.434181 2026] [:error] [pid 20284:tid 20287] [client 130.131.193.97:64123] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "acgtQzJgMkVHwdyddkBzrAAAAYA"]
[Sun Mar 29 03:34:27.877637 2026] [:error] [pid 39429:tid 39501] [client 130.131.193.97:63567] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "acgtQ08pSj6sqgZaItn-2AAAAI8"]
[Sun Mar 29 03:34:28.470371 2026] [:error] [pid 39514:tid 39525] [client 130.131.193.97:63083] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "acgtRCkUyvlQod6qQu3AMgAAAME"]
[Sun Mar 29 03:34:28.967922 2026] [:error] [pid 11588:tid 11613] [client 130.131.193.97:65049] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "acgtRAhH5525WHuzKfqCfQAAAVc"]
[Sun Mar 29 03:34:29.446249 2026] [:error] [pid 39514:tid 39541] [client 130.131.193.97:64114] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "acgtRSkUyvlQod6qQu3ANgAAANA"]
[Sun Mar 29 03:34:29.856570 2026] [:error] [pid 39514:tid 39534] [client 130.131.193.97:63003] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "acgtRSkUyvlQod6qQu3AOQAAAMk"]
[Sun Mar 29 03:34:30.251999 2026] [:error] [pid 39427:tid 39449] [client 130.131.193.97:64603] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "acgtRlvLf0RDUqcYq-Zp2gAAABE"]
[Sun Mar 29 03:34:30.697169 2026] [:error] [pid 39514:tid 39531] [client 130.131.193.97:65147] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "acgtRikUyvlQod6qQu3AOgAAAMY"]
[Sun Mar 29 03:34:31.321246 2026] [:error] [pid 39514:tid 39524] [client 130.131.193.97:63533] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "acgtRykUyvlQod6qQu3AQQAAAMA"]
[Sun Mar 29 03:34:31.853287 2026] [:error] [pid 39429:tid 39496] [client 130.131.193.97:64083] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/baixy.php"] [unique_id "acgtR08pSj6sqgZaItn-3AAAAIo"]
[Sun Mar 29 03:34:32.337310 2026] [:error] [pid 39514:tid 39525] [client 130.131.193.97:63547] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/baixy.php"] [unique_id "acgtSCkUyvlQod6qQu3AQwAAAME"]
[Sun Mar 29 03:34:33.060122 2026] [:error] [pid 39429:tid 39505] [client 130.131.193.97:64516] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/baixy.php"] [unique_id "acgtSU8pSj6sqgZaItn-4gAAAJM"]
[Sun Mar 29 03:34:33.671436 2026] [:error] [pid 39429:tid 39506] [client 130.131.193.97:63545] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/baixy.php"] [unique_id "acgtSU8pSj6sqgZaItn-5AAAAJQ"]
[Sun Mar 29 03:34:34.324995 2026] [:error] [pid 20319:tid 20345] [client 130.131.193.97:61841] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "acgtSodRN14nyF4YRGSpKAAAAdg"]
[Sun Mar 29 03:34:34.824988 2026] [:error] [pid 60346:tid 60363] [client 130.131.193.97:61826] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "acgtSnVrXSgLxlxLi9BnzwAAAQw"]
[Sun Mar 29 03:34:40.345064 2026] [:error] [pid 20319:tid 20330] [client 130.131.193.97:64024] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "acgtUIdRN14nyF4YRGSpRgAAAck"]
[Sun Mar 29 03:34:40.989808 2026] [:error] [pid 20319:tid 20332] [client 130.131.193.97:63512] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "acgtUIdRN14nyF4YRGSpRwAAAcs"]
[Sun Mar 29 03:34:41.405900 2026] [:error] [pid 39427:tid 39444] [client 130.131.193.97:61848] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "acgtUVvLf0RDUqcYq-Zp4QAAAAw"]
[Sun Mar 29 03:34:41.881300 2026] [:error] [pid 39514:tid 39537] [client 130.131.193.97:64075] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "acgtUSkUyvlQod6qQu3AUwAAAMw"]
[Sun Mar 29 03:34:42.356971 2026] [:error] [pid 11588:tid 11605] [client 130.131.193.97:65126] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/albin.php"] [unique_id "acgtUghH5525WHuzKfqClAAAAU8"]
[Sun Mar 29 03:34:42.928913 2026] [:error] [pid 11588:tid 11602] [client 130.131.193.97:65091] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/albin.php"] [unique_id "acgtUghH5525WHuzKfqClgAAAUw"]
[Sun Mar 29 03:34:43.310784 2026] [:error] [pid 11588:tid 11612] [client 130.131.193.97:62365] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/albin.php"] [unique_id "acgtUwhH5525WHuzKfqCmgAAAVY"]
[Sun Mar 29 03:34:43.873571 2026] [:error] [pid 20319:tid 20340] [client 130.131.193.97:61857] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/albin.php"] [unique_id "acgtU4dRN14nyF4YRGSpTgAAAdM"]
[Sun Mar 29 03:34:44.306365 2026] [:error] [pid 11588:tid 11596] [client 130.131.193.97:63051] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/myfile.php"] [unique_id "acgtVAhH5525WHuzKfqCngAAAUY"]
[Sun Mar 29 03:34:44.851980 2026] [:error] [pid 11588:tid 11593] [client 130.131.193.97:63511] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/myfile.php"] [unique_id "acgtVAhH5525WHuzKfqCnwAAAUM"]
[Sun Mar 29 03:34:45.326753 2026] [:error] [pid 39429:tid 39487] [client 130.131.193.97:63607] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/myfile.php"] [unique_id "acgtVU8pSj6sqgZaItn--AAAAIE"]
[Sun Mar 29 03:34:45.713593 2026] [:error] [pid 39429:tid 39500] [client 130.131.193.97:65060] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/myfile.php"] [unique_id "acgtVU8pSj6sqgZaItn-_AAAAI4"]
[Sun Mar 29 03:34:46.096698 2026] [:error] [pid 39429:tid 39506] [client 130.131.193.97:63038] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "acgtVk8pSj6sqgZaItn-_gAAAJQ"]
[Sun Mar 29 03:34:46.485680 2026] [:error] [pid 39514:tid 39529] [client 130.131.193.97:63599] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "acgtVikUyvlQod6qQu3AWQAAAMQ"]
[Sun Mar 29 03:34:46.929475 2026] [:error] [pid 39514:tid 39533] [client 130.131.193.97:63093] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "acgtVikUyvlQod6qQu3AWwAAAMg"]
[Sun Mar 29 03:34:47.458390 2026] [:error] [pid 11588:tid 11608] [client 130.131.193.97:62413] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "acgtVwhH5525WHuzKfqCpAAAAVI"]
[Sun Mar 29 03:34:47.869388 2026] [:error] [pid 20319:tid 20337] [client 130.131.193.97:62409] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "acgtV4dRN14nyF4YRGSpUQAAAdA"]
[Sun Mar 29 03:34:48.323773 2026] [:error] [pid 11588:tid 11614] [client 130.131.193.97:63544] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "acgtWAhH5525WHuzKfqCpQAAAVg"]
[Sun Mar 29 03:34:48.774011 2026] [:error] [pid 39514:tid 39536] [client 130.131.193.97:64568] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "acgtWCkUyvlQod6qQu3AZgAAAMs"]
[Sun Mar 29 03:34:49.266409 2026] [:error] [pid 11588:tid 11613] [client 130.131.193.97:61839] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "acgtWQhH5525WHuzKfqCqgAAAVc"]
[Sun Mar 29 03:34:49.773990 2026] [:error] [pid 11588:tid 11608] [client 130.131.193.97:63510] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws75.php"] [unique_id "acgtWQhH5525WHuzKfqCqwAAAVI"]
[Sun Mar 29 03:34:50.268440 2026] [:error] [pid 20319:tid 20321] [client 130.131.193.97:63559] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws75.php"] [unique_id "acgtWodRN14nyF4YRGSpVAAAAcA"]
[Sun Mar 29 03:34:50.895913 2026] [:error] [pid 39429:tid 39499] [client 130.131.193.97:65046] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws75.php"] [unique_id "acgtWk8pSj6sqgZaItn_AQAAAI0"]
[Sun Mar 29 03:34:51.336740 2026] [:error] [pid 39514:tid 39550] [client 130.131.193.97:63571] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws75.php"] [unique_id "acgtWykUyvlQod6qQu3AcwAAANg"]
[Sun Mar 29 03:34:51.974104 2026] [:error] [pid 39429:tid 39500] [client 130.131.193.97:64556] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "acgtW08pSj6sqgZaItn_BAAAAI4"]
[Sun Mar 29 03:34:52.771058 2026] [:error] [pid 39429:tid 39504] [client 130.131.193.97:65069] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "acgtXE8pSj6sqgZaItn_BwAAAJI"]
[Sun Mar 29 03:34:53.367637 2026] [:error] [pid 39429:tid 39491] [client 130.131.193.97:63595] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "acgtXU8pSj6sqgZaItn_DQAAAIU"]
[Sun Mar 29 03:34:53.919200 2026] [:error] [pid 39429:tid 39509] [client 130.131.193.97:64025] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "acgtXU8pSj6sqgZaItn_EwAAAJc"]
[Sun Mar 29 03:34:54.746609 2026] [:error] [pid 39427:tid 39437] [client 130.131.193.97:63612] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "acgtXlvLf0RDUqcYq-Zp6QAAAAU"]
[Sun Mar 29 03:34:55.318660 2026] [:error] [pid 39429:tid 39501] [client 130.131.193.97:63596] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "acgtX08pSj6sqgZaItn_GAAAAI8"]
[Sun Mar 29 03:34:55.768647 2026] [:error] [pid 39514:tid 39536] [client 130.131.193.97:61401] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "acgtXykUyvlQod6qQu3AewAAAMs"]
[Sun Mar 29 03:34:56.346187 2026] [:error] [pid 39429:tid 39495] [client 130.131.193.97:63548] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "acgtYE8pSj6sqgZaItn_HgAAAIk"]
[Sun Mar 29 03:34:56.750276 2026] [:error] [pid 39429:tid 39494] [client 130.131.193.97:64094] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wtiiy.php"] [unique_id "acgtYE8pSj6sqgZaItn_IgAAAIg"]
[Sun Mar 29 03:34:57.294400 2026] [:error] [pid 39429:tid 39492] [client 130.131.193.97:63027] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wtiiy.php"] [unique_id "acgtYU8pSj6sqgZaItn_KAAAAIY"]
[Sun Mar 29 03:34:57.835493 2026] [:error] [pid 39428:tid 39467] [client 130.131.193.97:63535] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wtiiy.php"] [unique_id "acgtYaXMrozFMIaP8nIUNQAAAEg"]
[Sun Mar 29 03:34:58.349820 2026] [:error] [pid 39427:tid 39449] [client 130.131.193.97:62445] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wtiiy.php"] [unique_id "acgtYlvLf0RDUqcYq-Zp7QAAABE"]
[Sun Mar 29 03:34:58.846757 2026] [:error] [pid 39427:tid 39432] [client 130.131.193.97:62979] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "acgtYlvLf0RDUqcYq-Zp7wAAAAA"]
[Sun Mar 29 03:34:59.696706 2026] [:error] [pid 11588:tid 11613] [client 130.131.193.97:63072] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "acgtYwhH5525WHuzKfqCsQAAAVc"]
[Sun Mar 29 03:35:00.661569 2026] [:error] [pid 60346:tid 60358] [client 130.131.193.97:64091] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "acgtZHVrXSgLxlxLi9Bn1QAAAQc"]
[Sun Mar 29 03:35:01.137114 2026] [:error] [pid 39514:tid 39528] [client 130.131.193.97:61931] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "acgtZSkUyvlQod6qQu3AfgAAAMM"]
[Sun Mar 29 03:35:01.551977 2026] [:error] [pid 39427:tid 39442] [client 130.131.193.97:64051] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "acgtZVvLf0RDUqcYq-Zp8gAAAAo"]
[Sun Mar 29 03:35:02.019428 2026] [:error] [pid 39514:tid 39536] [client 130.131.193.97:63043] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "acgtZikUyvlQod6qQu3AgQAAAMs"]
[Sun Mar 29 03:35:02.485818 2026] [:error] [pid 39514:tid 39539] [client 130.131.193.97:62442] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "acgtZikUyvlQod6qQu3AhQAAAM4"]
[Sun Mar 29 03:35:02.931943 2026] [:error] [pid 60346:tid 60373] [client 130.131.193.97:63492] [client 130.131.193.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "acgtZnVrXSgLxlxLi9Bn1gAAARY"]
[Sun Mar 29 22:40:48.001745 2026] [:error] [pid 8818:tid 8826] [client 20.114.151.189:4930] [client 20.114.151.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "ack58CCDvotZNSF0FBrq4gAAAUQ"]
[Sun Mar 29 22:40:48.815121 2026] [:error] [pid 8818:tid 8835] [client 20.114.151.189:31271] [client 20.114.151.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "ack58CCDvotZNSF0FBrq5QAAAU0"]
[Sun Mar 29 22:40:49.697820 2026] [:error] [pid 32257:tid 32324] [client 20.114.151.189:12187] [client 20.114.151.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "ack58SE3TArOFrUtgWpQUQAAAIY"]
[Sun Mar 29 22:40:50.519382 2026] [:error] [pid 23250:tid 23259] [client 20.114.151.189:10400] [client 20.114.151.189] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "ack58pxrpj-dQjy1cvoNjgAAAkc"]
[Mon Mar 30 01:54:19.941281 2026] [:error] [pid 23284:tid 23310] [client 20.110.78.62:7126] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aclnS4zBujdPHsq7wyROPwAAApg"]
[Mon Mar 30 01:54:25.350064 2026] [:error] [pid 32255:tid 32299] [client 20.110.78.62:42950] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aclnUWnfn-AtRoMbquxh1AAAAEg"]
[Mon Mar 30 01:54:27.438151 2026] [:error] [pid 23284:tid 23290] [client 20.110.78.62:42085] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aclnU4zBujdPHsq7wyROcQAAAoQ"]
[Mon Mar 30 01:54:30.499933 2026] [:error] [pid 23284:tid 23289] [client 20.110.78.62:21785] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aclnVozBujdPHsq7wyROggAAAoM"]
[Mon Mar 30 01:54:31.366821 2026] [:error] [pid 23284:tid 23286] [client 20.110.78.62:21778] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-cxs.php"] [unique_id "aclnV4zBujdPHsq7wyROiAAAAoA"]
[Mon Mar 30 01:54:32.577525 2026] [:error] [pid 32255:tid 32293] [client 20.110.78.62:17476] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-cxs.php"] [unique_id "aclnWGnfn-AtRoMbquxh4AAAAEI"]
[Mon Mar 30 01:54:33.417708 2026] [:error] [pid 23250:tid 23253] [client 20.110.78.62:29206] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-cxs.php"] [unique_id "aclnWZxrpj-dQjy1cvo1YQAAAkE"]
[Mon Mar 30 01:54:34.822685 2026] [:error] [pid 23250:tid 23273] [client 20.110.78.62:22826] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-cxs.php"] [unique_id "aclnWpxrpj-dQjy1cvo1ZgAAAlU"]
[Mon Mar 30 01:54:36.004847 2026] [:error] [pid 23167:tid 23192] [client 20.110.78.62:22823] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-scanner.php"] [unique_id "aclnXBIAHJCFaHff3_cEgwAAAdY"]
[Mon Mar 30 01:54:37.397432 2026] [:error] [pid 32255:tid 32304] [client 20.110.78.62:21816] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-scanner.php"] [unique_id "aclnXWnfn-AtRoMbquxh5QAAAE0"]
[Mon Mar 30 01:54:38.651059 2026] [:error] [pid 32257:tid 32327] [client 20.110.78.62:44936] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-scanner.php"] [unique_id "aclnXiE3TArOFrUtgWrYswAAAIk"]
[Mon Mar 30 01:54:39.543285 2026] [:error] [pid 32257:tid 32340] [client 20.110.78.62:21384] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-scanner.php"] [unique_id "aclnXyE3TArOFrUtgWrYuQAAAJY"]
[Mon Mar 30 01:54:40.551502 2026] [:error] [pid 23137:tid 23152] [client 20.110.78.62:28445] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/awh.php"] [unique_id "aclnYBaWQa7LdZ_qGFYlygAAAY0"]
[Mon Mar 30 01:54:41.594622 2026] [:error] [pid 32255:tid 32293] [client 20.110.78.62:31128] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/awh.php"] [unique_id "aclnYWnfn-AtRoMbquxh7gAAAEI"]
[Mon Mar 30 01:54:42.257377 2026] [:error] [pid 32257:tid 32331] [client 20.110.78.62:15428] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/awh.php"] [unique_id "aclnYiE3TArOFrUtgWrYvwAAAI0"]
[Mon Mar 30 01:54:43.396254 2026] [:error] [pid 32255:tid 32315] [client 20.110.78.62:6503] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/awh.php"] [unique_id "aclnY2nfn-AtRoMbquxh8wAAAFg"]
[Mon Mar 30 01:54:44.128916 2026] [:error] [pid 32255:tid 32302] [client 20.110.78.62:6487] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/24.php"] [unique_id "aclnZGnfn-AtRoMbquxh-gAAAEs"]
[Mon Mar 30 01:54:45.066944 2026] [:error] [pid 8818:tid 8824] [client 20.110.78.62:20588] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/24.php"] [unique_id "aclnZSCDvotZNSF0FBoaHAAAAUI"]
[Mon Mar 30 01:54:45.665808 2026] [:error] [pid 32255:tid 32291] [client 20.110.78.62:21410] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/24.php"] [unique_id "aclnZWnfn-AtRoMbquxh_wAAAEA"]
[Mon Mar 30 01:54:46.229053 2026] [:error] [pid 32255:tid 32294] [client 20.110.78.62:52537] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/24.php"] [unique_id "aclnZmnfn-AtRoMbquxiAAAAAEM"]
[Mon Mar 30 01:54:46.969561 2026] [:error] [pid 23284:tid 23292] [client 20.110.78.62:20599] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zz8.php"] [unique_id "aclnZozBujdPHsq7wyROkQAAAoY"]
[Mon Mar 30 01:54:47.713279 2026] [:error] [pid 23168:tid 23220] [client 20.110.78.62:15471] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zz8.php"] [unique_id "aclnZ2P8p0yRL8ot_2_1UAAAAhc"]
[Mon Mar 30 01:54:48.386763 2026] [:error] [pid 23137:tid 23160] [client 20.110.78.62:42094] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zz8.php"] [unique_id "aclnaBaWQa7LdZ_qGFYlzwAAAZU"]
[Mon Mar 30 01:54:49.873763 2026] [:error] [pid 32257:tid 32320] [client 20.110.78.62:6482] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zz8.php"] [unique_id "aclnaSE3TArOFrUtgWrYywAAAII"]
[Mon Mar 30 01:54:50.648521 2026] [:error] [pid 32255:tid 32299] [client 20.110.78.62:28479] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/feokc.php"] [unique_id "aclnamnfn-AtRoMbquxiBgAAAEg"]
[Mon Mar 30 01:54:51.538879 2026] [:error] [pid 23168:tid 23203] [client 20.110.78.62:52497] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/feokc.php"] [unique_id "aclna2P8p0yRL8ot_2_1ZQAAAgY"]
[Mon Mar 30 01:54:52.564485 2026] [:error] [pid 32257:tid 32341] [client 20.110.78.62:52335] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/feokc.php"] [unique_id "aclnbCE3TArOFrUtgWrY1wAAAJc"]
[Mon Mar 30 01:54:53.322574 2026] [:error] [pid 23167:tid 23193] [client 20.110.78.62:19127] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/feokc.php"] [unique_id "aclnbRIAHJCFaHff3_cEkwAAAdc"]
[Mon Mar 30 01:54:53.928638 2026] [:error] [pid 8818:tid 8830] [client 20.110.78.62:47067] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fetch.php"] [unique_id "aclnbSCDvotZNSF0FBoaJQAAAUg"]
[Mon Mar 30 01:54:54.594744 2026] [:error] [pid 23250:tid 23265] [client 20.110.78.62:22881] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fetch.php"] [unique_id "aclnbpxrpj-dQjy1cvo1dAAAAk0"]
[Mon Mar 30 01:54:55.715267 2026] [:error] [pid 23250:tid 23261] [client 20.110.78.62:52522] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fetch.php"] [unique_id "aclnb5xrpj-dQjy1cvo1dwAAAkk"]
[Mon Mar 30 01:54:56.795291 2026] [:error] [pid 23284:tid 23286] [client 20.110.78.62:22906] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fetch.php"] [unique_id "aclncIzBujdPHsq7wyROuQAAAoA"]
[Mon Mar 30 01:54:57.718138 2026] [:error] [pid 32257:tid 32326] [client 20.110.78.62:19123] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/phpmini.php"] [unique_id "aclncSE3TArOFrUtgWrY8AAAAIg"]
[Mon Mar 30 01:54:58.420289 2026] [:error] [pid 32257:tid 32338] [client 20.110.78.62:42097] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/phpmini.php"] [unique_id "aclnciE3TArOFrUtgWrY9QAAAJQ"]
[Mon Mar 30 01:54:59.025944 2026] [:error] [pid 23167:tid 23182] [client 20.110.78.62:52293] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/phpmini.php"] [unique_id "aclncxIAHJCFaHff3_cEogAAAcw"]
[Mon Mar 30 01:55:00.299549 2026] [:error] [pid 32257:tid 32320] [client 20.110.78.62:30219] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/phpmini.php"] [unique_id "aclndCE3TArOFrUtgWrY9wAAAII"]
[Mon Mar 30 01:55:01.433333 2026] [:error] [pid 23167:tid 23192] [client 20.110.78.62:21797] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/an7.php"] [unique_id "aclndRIAHJCFaHff3_cEqwAAAdY"]
[Mon Mar 30 01:55:02.124983 2026] [:error] [pid 23250:tid 23261] [client 20.110.78.62:22890] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/an7.php"] [unique_id "aclndpxrpj-dQjy1cvo1hgAAAkk"]
[Mon Mar 30 01:55:03.556170 2026] [:error] [pid 23284:tid 23288] [client 20.110.78.62:25039] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/an7.php"] [unique_id "aclnd4zBujdPHsq7wyRO2AAAAoI"]
[Mon Mar 30 01:55:04.993532 2026] [:error] [pid 23250:tid 23269] [client 20.110.78.62:25087] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/an7.php"] [unique_id "aclneJxrpj-dQjy1cvo1iQAAAlE"]
[Mon Mar 30 01:55:06.091330 2026] [:error] [pid 32255:tid 32291] [client 20.110.78.62:25080] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tbute.php"] [unique_id "aclnemnfn-AtRoMbquxiEwAAAEA"]
[Mon Mar 30 01:55:08.597030 2026] [:error] [pid 32254:tid 32268] [client 20.110.78.62:17720] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tbute.php"] [unique_id "aclnfKug2IHuyGgCTn94jwAAAAQ"]
[Mon Mar 30 01:55:12.904961 2026] [:error] [pid 32257:tid 32342] [client 20.110.78.62:30221] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tbute.php"] [unique_id "aclngCE3TArOFrUtgWrZCAAAAJg"]
[Mon Mar 30 01:55:14.219119 2026] [:error] [pid 32257:tid 32336] [client 20.110.78.62:22900] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tbute.php"] [unique_id "aclngiE3TArOFrUtgWrZDgAAAJI"]
[Mon Mar 30 01:55:15.283301 2026] [:error] [pid 23167:tid 23187] [client 20.110.78.62:17715] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rovoj.php"] [unique_id "aclngxIAHJCFaHff3_cEugAAAdE"]
[Mon Mar 30 01:55:18.782226 2026] [:error] [pid 32257:tid 32325] [client 20.110.78.62:19466] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rovoj.php"] [unique_id "aclnhiE3TArOFrUtgWrZFgAAAIc"]
[Mon Mar 30 01:55:26.697202 2026] [:error] [pid 23284:tid 23298] [client 20.110.78.62:27070] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "aclnjozBujdPHsq7wyRPBgAAAow"]
[Mon Mar 30 01:55:28.162003 2026] [:error] [pid 23137:tid 23161] [client 20.110.78.62:15451] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "aclnkBaWQa7LdZ_qGFYmCAAAAZY"]
[Mon Mar 30 01:55:29.499024 2026] [:error] [pid 32255:tid 32311] [client 20.110.78.62:19102] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "aclnkWnfn-AtRoMbquxiSwAAAFQ"]
[Mon Mar 30 01:55:34.446694 2026] [:error] [pid 32257:tid 32324] [client 20.110.78.62:21419] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "aclnliE3TArOFrUtgWrZOwAAAIY"]
[Mon Mar 30 01:55:48.863561 2026] [:error] [pid 23250:tid 23271] [client 20.110.78.62:42111] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws81.php"] [unique_id "aclnpJxrpj-dQjy1cvo1pQAAAlM"]
[Mon Mar 30 01:55:49.489674 2026] [:error] [pid 23284:tid 23300] [client 20.119.40.59:21318] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/anz.php"] [unique_id "aclnpYzBujdPHsq7wyRPIwAAAo4"]
[Mon Mar 30 01:55:49.913535 2026] [:error] [pid 32359:tid 32374] [client 20.110.78.62:17702] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws81.php"] [unique_id "aclnpQMb8G3UzfQP3WhRogAAAM0"]
[Mon Mar 30 01:55:50.193252 2026] [:error] [pid 32359:tid 32378] [client 20.119.40.59:20803] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/anz.php"] [unique_id "aclnpgMb8G3UzfQP3WhRowAAANE"]
[Mon Mar 30 01:55:51.162901 2026] [:error] [pid 23168:tid 23219] [client 20.119.40.59:21337] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/anz.php"] [unique_id "aclnp2P8p0yRL8ot_2_1wQAAAhY"]
[Mon Mar 30 01:55:52.340478 2026] [:error] [pid 32254:tid 32285] [client 20.119.40.59:20819] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/anz.php"] [unique_id "aclnqKug2IHuyGgCTn94ngAAABU"]
[Mon Mar 30 01:55:54.047438 2026] [:error] [pid 23284:tid 23304] [client 20.119.40.59:20836] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file66.php"] [unique_id "aclnqozBujdPHsq7wyRPKQAAApI"]
[Mon Mar 30 01:55:54.472248 2026] [:error] [pid 23284:tid 23286] [client 20.110.78.62:6481] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws79.php"] [unique_id "aclnqozBujdPHsq7wyRPKgAAAoA"]
[Mon Mar 30 01:55:55.682963 2026] [:error] [pid 32359:tid 32377] [client 20.119.40.59:20823] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kure.php"] [unique_id "aclnqwMb8G3UzfQP3WhRqgAAANA"]
[Mon Mar 30 01:55:55.798565 2026] [:error] [pid 8818:tid 8844] [client 20.110.78.62:27976] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws79.php"] [unique_id "aclnqyCDvotZNSF0FBoahgAAAVY"]
[Mon Mar 30 01:55:56.790452 2026] [:error] [pid 32359:tid 32361] [client 20.119.40.59:20838] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kure.php"] [unique_id "aclnrAMb8G3UzfQP3WhRrAAAAMA"]
[Mon Mar 30 01:55:57.446081 2026] [:error] [pid 23137:tid 23150] [client 20.119.40.59:20840] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/blnux.php"] [unique_id "aclnrRaWQa7LdZ_qGFYmJAAAAYs"]
[Mon Mar 30 01:55:57.868988 2026] [:error] [pid 8818:tid 8846] [client 20.110.78.62:25057] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws79.php"] [unique_id "aclnrSCDvotZNSF0FBoaigAAAVg"]
[Mon Mar 30 01:55:58.456114 2026] [:error] [pid 32257:tid 32323] [client 20.110.78.62:42492] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws79.php"] [unique_id "aclnriE3TArOFrUtgWrZdgAAAIU"]
[Mon Mar 30 01:55:58.501383 2026] [:error] [pid 32359:tid 32376] [client 20.119.40.59:21323] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gaje.php"] [unique_id "aclnrgMb8G3UzfQP3WhRsQAAAM8"]
[Mon Mar 30 01:55:59.455687 2026] [:error] [pid 23284:tid 23286] [client 20.119.40.59:21317] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gaje.php"] [unique_id "aclnr4zBujdPHsq7wyRPNwAAAoA"]
[Mon Mar 30 01:55:59.752285 2026] [:error] [pid 32254:tid 32271] [client 20.110.78.62:42470] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws78.php"] [unique_id "aclnr6ug2IHuyGgCTn94oAAAAAc"]
[Mon Mar 30 01:56:00.776510 2026] [:error] [pid 32255:tid 32306] [client 20.119.40.59:21324] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gaje.php"] [unique_id "aclnsGnfn-AtRoMbquxikQAAAE8"]
[Mon Mar 30 01:56:01.638193 2026] [:error] [pid 23168:tid 23216] [client 20.119.40.59:20839] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gaje.php"] [unique_id "aclnsWP8p0yRL8ot_2_1wgAAAhM"]
[Mon Mar 30 01:56:02.644523 2026] [:error] [pid 32257:tid 32339] [client 20.119.40.59:20800] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/msy.php"] [unique_id "aclnsiE3TArOFrUtgWrZdwAAAJU"]
[Mon Mar 30 01:56:03.487697 2026] [:error] [pid 23284:tid 23310] [client 20.110.78.62:28439] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws78.php"] [unique_id "aclns4zBujdPHsq7wyRPQgAAApg"]
[Mon Mar 30 01:56:03.540479 2026] [:error] [pid 23168:tid 23204] [client 20.119.40.59:20807] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/msy.php"] [unique_id "aclns2P8p0yRL8ot_2_1yAAAAgc"]
[Mon Mar 30 01:56:04.412577 2026] [:error] [pid 23284:tid 23294] [client 20.119.40.59:20813] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/msy.php"] [unique_id "aclntIzBujdPHsq7wyRPRAAAAog"]
[Mon Mar 30 01:56:05.309666 2026] [:error] [pid 23284:tid 23289] [client 20.119.40.59:20804] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/msy.php"] [unique_id "aclntYzBujdPHsq7wyRPSAAAAoM"]
[Mon Mar 30 01:56:05.965336 2026] [:error] [pid 23167:tid 23177] [client 20.119.40.59:20858] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fgd.php"] [unique_id "aclntRIAHJCFaHff3_cFTgAAAcc"]
[Mon Mar 30 01:56:06.496340 2026] [:error] [pid 23167:tid 23180] [client 20.119.40.59:21329] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fgd.php"] [unique_id "aclnthIAHJCFaHff3_cFUAAAAco"]
[Mon Mar 30 01:56:07.157486 2026] [:error] [pid 23167:tid 23175] [client 20.119.40.59:20815] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fgd.php"] [unique_id "aclntxIAHJCFaHff3_cFUgAAAcU"]
[Mon Mar 30 01:56:07.996363 2026] [:error] [pid 23167:tid 23171] [client 20.110.78.62:24067] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws78.php"] [unique_id "aclntxIAHJCFaHff3_cFUwAAAcE"]
[Mon Mar 30 01:56:09.570756 2026] [:error] [pid 23284:tid 23291] [client 20.119.40.59:21340] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/X7T6.php"] [unique_id "aclnuYzBujdPHsq7wyRPTwAAAoU"]
[Mon Mar 30 01:56:09.934847 2026] [:error] [pid 8818:tid 8843] [client 20.110.78.62:25030] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws78.php"] [unique_id "aclnuSCDvotZNSF0FBoajwAAAVU"]
[Mon Mar 30 01:56:12.309630 2026] [:error] [pid 23284:tid 23291] [client 20.119.40.59:20822] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/X7T6.php"] [unique_id "aclnvIzBujdPHsq7wyRPWQAAAoU"]
[Mon Mar 30 01:56:12.423797 2026] [:error] [pid 32257:tid 32320] [client 20.110.78.62:28430] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws50.php"] [unique_id "aclnvCE3TArOFrUtgWrZfQAAAII"]
[Mon Mar 30 01:56:13.739692 2026] [:error] [pid 32257:tid 32331] [client 20.110.78.62:42484] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws50.php"] [unique_id "aclnvSE3TArOFrUtgWrZfgAAAI0"]
[Mon Mar 30 01:56:14.751932 2026] [:error] [pid 23137:tid 23139] [client 20.110.78.62:24114] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws50.php"] [unique_id "aclnvhaWQa7LdZ_qGFYmKAAAAYA"]
[Mon Mar 30 01:56:15.709481 2026] [:error] [pid 32257:tid 32337] [client 20.110.78.62:42449] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws50.php"] [unique_id "aclnvyE3TArOFrUtgWrZhwAAAJM"]
[Mon Mar 30 01:56:15.872200 2026] [:error] [pid 32257:tid 32336] [client 20.119.40.59:20806] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/X7T6.php"] [unique_id "aclnvyE3TArOFrUtgWrZiAAAAJI"]
[Mon Mar 30 01:56:18.677087 2026] [:error] [pid 23167:tid 23188] [client 20.110.78.62:52520] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws44.php"] [unique_id "aclnwhIAHJCFaHff3_cFZAAAAdI"]
[Mon Mar 30 01:56:19.403321 2026] [:error] [pid 32255:tid 32297] [client 20.110.78.62:52302] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws44.php"] [unique_id "aclnw2nfn-AtRoMbquxirwAAAEY"]
[Mon Mar 30 01:56:20.754251 2026] [:error] [pid 23168:tid 23205] [client 20.110.78.62:34436] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws44.php"] [unique_id "aclnxGP8p0yRL8ot_2_13AAAAgg"]
[Mon Mar 30 01:56:21.359144 2026] [:error] [pid 32257:tid 32336] [client 20.119.40.59:20832] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alog.php"] [unique_id "aclnxSE3TArOFrUtgWrZjgAAAJI"]
[Mon Mar 30 01:56:21.990917 2026] [:error] [pid 23284:tid 23306] [client 20.110.78.62:27117] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws44.php"] [unique_id "aclnxYzBujdPHsq7wyRPdwAAApQ"]
[Mon Mar 30 01:56:23.303065 2026] [:error] [pid 23167:tid 23190] [client 20.119.40.59:20850] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alog.php"] [unique_id "aclnxxIAHJCFaHff3_cFawAAAdQ"]
[Mon Mar 30 01:56:24.032028 2026] [:error] [pid 23167:tid 23173] [client 20.110.78.62:6614] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws43.php"] [unique_id "aclnyBIAHJCFaHff3_cFbgAAAcM"]
[Mon Mar 30 01:56:25.190889 2026] [:error] [pid 23284:tid 23307] [client 20.119.40.59:21322] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/p.php"] [unique_id "aclnyYzBujdPHsq7wyRPgQAAApU"]
[Mon Mar 30 01:56:25.785349 2026] [:error] [pid 32255:tid 32297] [client 20.119.40.59:20841] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/p.php"] [unique_id "aclnyWnfn-AtRoMbquxitwAAAEY"]
[Mon Mar 30 01:56:27.063440 2026] [:error] [pid 32255:tid 32291] [client 20.119.40.59:20857] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/p.php"] [unique_id "aclny2nfn-AtRoMbquxiuwAAAEA"]
[Mon Mar 30 01:56:28.441248 2026] [:error] [pid 23284:tid 23310] [client 20.119.40.59:20855] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/p.php"] [unique_id "aclnzIzBujdPHsq7wyRPjQAAApg"]
[Mon Mar 30 01:56:30.656575 2026] [:error] [pid 32255:tid 32305] [client 20.119.40.59:21321] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ztv.php"] [unique_id "aclnzmnfn-AtRoMbquxixgAAAE4"]
[Mon Mar 30 01:56:33.082964 2026] [:error] [pid 23168:tid 23213] [client 20.119.40.59:20824] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Rk41.php"] [unique_id "acln0WP8p0yRL8ot_2_2CwAAAhA"]
[Mon Mar 30 01:56:34.513498 2026] [:error] [pid 23167:tid 23186] [client 20.110.78.62:27087] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sql.php"] [unique_id "acln0hIAHJCFaHff3_cFhwAAAdA"]
[Mon Mar 30 01:56:34.831546 2026] [:error] [pid 32257:tid 32337] [client 20.119.40.59:21374] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Rk41.php"] [unique_id "acln0iE3TArOFrUtgWrZpgAAAJM"]
[Mon Mar 30 01:56:35.316661 2026] [:error] [pid 32257:tid 32322] [client 20.119.40.59:20854] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Rk41.php"] [unique_id "acln0yE3TArOFrUtgWrZqQAAAIQ"]
[Mon Mar 30 01:56:36.132661 2026] [:error] [pid 8818:tid 8822] [client 20.119.40.59:21313] [client 20.119.40.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/network.php"] [unique_id "acln1CCDvotZNSF0FBoapQAAAUA"]
[Mon Mar 30 01:56:36.859052 2026] [:error] [pid 23284:tid 23292] [client 20.110.78.62:17686] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sql.php"] [unique_id "acln1IzBujdPHsq7wyRPlwAAAoY"]
[Mon Mar 30 01:56:38.458567 2026] [:error] [pid 32255:tid 32294] [client 20.110.78.62:14836] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sql.php"] [unique_id "acln1mnfn-AtRoMbquxizgAAAEM"]
[Mon Mar 30 01:56:38.603405 2026] [:error] [pid 32257:tid 32328] [client 20.119.40.59:21352] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/js/fm.php"] [unique_id "acln1iE3TArOFrUtgWrZtAAAAIo"]
[Mon Mar 30 01:56:40.177773 2026] [:error] [pid 32257:tid 32322] [client 20.119.40.59:21331] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/js/fm.php"] [unique_id "acln2CE3TArOFrUtgWrZtwAAAIQ"]
[Mon Mar 30 01:56:40.294651 2026] [:error] [pid 32257:tid 32331] [client 20.110.78.62:24064] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sql.php"] [unique_id "acln2CE3TArOFrUtgWrZuQAAAI0"]
[Mon Mar 30 01:56:41.525286 2026] [:error] [pid 23250:tid 23269] [client 20.110.78.62:24637] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sc.php"] [unique_id "acln2Zxrpj-dQjy1cvo1xgAAAlE"]
[Mon Mar 30 01:56:42.267930 2026] [:error] [pid 32359:tid 32373] [client 20.119.40.59:21342] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/js/fm.php"] [unique_id "acln2gMb8G3UzfQP3WhRwgAAAMw"]
[Mon Mar 30 01:56:42.576665 2026] [:error] [pid 23137:tid 23146] [client 20.110.78.62:20895] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sc.php"] [unique_id "acln2haWQa7LdZ_qGFYmMgAAAYc"]
[Mon Mar 30 01:56:43.866762 2026] [:error] [pid 32257:tid 32329] [client 20.110.78.62:26583] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sc.php"] [unique_id "acln2yE3TArOFrUtgWrZxwAAAIs"]
[Mon Mar 30 01:56:45.249332 2026] [:error] [pid 23250:tid 23256] [client 20.110.78.62:15060] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sc.php"] [unique_id "acln3Zxrpj-dQjy1cvo1ywAAAkQ"]
[Mon Mar 30 01:56:46.312298 2026] [:error] [pid 32254:tid 32270] [client 20.119.40.59:20814] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/js/fm.php"] [unique_id "acln3qug2IHuyGgCTn94vQAAAAY"]
[Mon Mar 30 01:56:46.571640 2026] [:error] [pid 32257:tid 32334] [client 20.110.78.62:6618] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/eee.php"] [unique_id "acln3iE3TArOFrUtgWrZ0wAAAJA"]
[Mon Mar 30 01:56:47.491858 2026] [:error] [pid 23284:tid 23300] [client 20.110.78.62:46288] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/eee.php"] [unique_id "acln34zBujdPHsq7wyRPqAAAAo4"]
[Mon Mar 30 01:56:48.888083 2026] [:error] [pid 32255:tid 32297] [client 20.110.78.62:12711] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/eee.php"] [unique_id "acln4Gnfn-AtRoMbquxi4QAAAEY"]
[Mon Mar 30 01:56:50.701492 2026] [:error] [pid 23284:tid 23301] [client 20.110.78.62:20888] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/eee.php"] [unique_id "acln4ozBujdPHsq7wyRPtQAAAo8"]
[Mon Mar 30 01:56:52.030938 2026] [:error] [pid 23284:tid 23297] [client 20.110.78.62:41714] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "acln5IzBujdPHsq7wyRPwQAAAos"]
[Mon Mar 30 01:56:52.975814 2026] [:error] [pid 23284:tid 23301] [client 20.110.78.62:41991] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "acln5IzBujdPHsq7wyRPxQAAAo8"]
[Mon Mar 30 01:56:53.751387 2026] [:error] [pid 23167:tid 23183] [client 20.110.78.62:15067] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "acln5RIAHJCFaHff3_cFkgAAAc0"]
[Mon Mar 30 01:56:55.067938 2026] [:error] [pid 32255:tid 32293] [client 20.110.78.62:17454] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "acln52nfn-AtRoMbquxi6AAAAEI"]
[Mon Mar 30 01:56:55.504421 2026] [:error] [pid 32257:tid 32339] [client 20.119.40.59:21332] [client 20.119.40.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "acln5yE3TArOFrUtgWrZ9wAAAJU"]
[Mon Mar 30 01:56:56.675160 2026] [:error] [pid 32254:tid 32284] [client 20.110.78.62:41670] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "acln6Kug2IHuyGgCTn94xwAAABQ"]
[Mon Mar 30 01:56:57.448814 2026] [:error] [pid 32257:tid 32342] [client 20.110.78.62:26602] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "acln6SE3TArOFrUtgWrZ-QAAAJg"]
[Mon Mar 30 01:56:59.228553 2026] [:error] [pid 8818:tid 8833] [client 20.110.78.62:15065] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "acln6yCDvotZNSF0FBoauQAAAUs"]
[Mon Mar 30 01:57:00.077922 2026] [:error] [pid 23284:tid 23296] [client 20.110.78.62:15053] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "acln7IzBujdPHsq7wyRP5QAAAoo"]
[Mon Mar 30 01:57:00.259095 2026] [:error] [pid 32257:tid 32322] [client 20.119.40.59:21360] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/assets/images/28c5400b0b.php"] [unique_id "acln7CE3TArOFrUtgWraAgAAAIQ"]
[Mon Mar 30 01:57:00.934157 2026] [:error] [pid 23168:tid 23217] [client 20.110.78.62:49362] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/roter.php"] [unique_id "acln7GP8p0yRL8ot_2_2WgAAAhQ"]
[Mon Mar 30 01:57:01.641620 2026] [:error] [pid 23284:tid 23301] [client 20.110.78.62:49395] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/roter.php"] [unique_id "acln7YzBujdPHsq7wyRP6wAAAo8"]
[Mon Mar 30 01:57:01.915452 2026] [:error] [pid 32254:tid 32270] [client 20.119.40.59:21255] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/assets/images/28c5400b0b.php"] [unique_id "acln7aug2IHuyGgCTn94zgAAAAY"]
[Mon Mar 30 01:57:02.980971 2026] [:error] [pid 23168:tid 23212] [client 20.110.78.62:41701] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/roter.php"] [unique_id "acln7mP8p0yRL8ot_2_2XwAAAg8"]
[Mon Mar 30 01:57:03.002915 2026] [:error] [pid 32257:tid 32333] [client 20.119.40.59:20833] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/assets/images/28c5400b0b.php"] [unique_id "acln7yE3TArOFrUtgWraBwAAAI8"]
[Mon Mar 30 01:57:03.661890 2026] [:error] [pid 23250:tid 23273] [client 20.119.40.59:20853] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/assets/images/28c5400b0b.php"] [unique_id "acln75xrpj-dQjy1cvo2AAAAAlU"]
[Mon Mar 30 01:57:03.678756 2026] [:error] [pid 23137:tid 23140] [client 20.110.78.62:36374] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/roter.php"] [unique_id "acln7xaWQa7LdZ_qGFYmOgAAAYE"]
[Mon Mar 30 01:57:04.450884 2026] [:error] [pid 32255:tid 32310] [client 20.110.78.62:15035] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/size.php"] [unique_id "acln8Gnfn-AtRoMbquxi9AAAAFM"]
[Mon Mar 30 01:57:04.546963 2026] [:error] [pid 23168:tid 23217] [client 20.119.40.59:21314] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-mail.php/wp-includes/ID3/.info.php"] [unique_id "acln8GP8p0yRL8ot_2_2ZAAAAhQ"]
[Mon Mar 30 01:57:05.787082 2026] [:error] [pid 23250:tid 23271] [client 20.110.78.62:37755] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/size.php"] [unique_id "acln8Zxrpj-dQjy1cvo2AgAAAlM"]
[Mon Mar 30 01:57:06.515048 2026] [:error] [pid 23250:tid 23257] [client 20.110.78.62:14976] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/size.php"] [unique_id "acln8pxrpj-dQjy1cvo2BgAAAkU"]
[Mon Mar 30 01:57:07.634995 2026] [:error] [pid 32255:tid 32302] [client 20.110.78.62:37409] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/size.php"] [unique_id "acln82nfn-AtRoMbquxi-AAAAEs"]
[Mon Mar 30 01:57:07.795173 2026] [:error] [pid 32255:tid 32303] [client 20.119.40.59:21261] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/classwithtostring.php"] [unique_id "acln82nfn-AtRoMbquxi-QAAAEw"]
[Mon Mar 30 01:57:08.333296 2026] [:error] [pid 32359:tid 32369] [client 20.110.78.62:45022] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/save.php"] [unique_id "acln9AMb8G3UzfQP3WhR2AAAAMg"]
[Mon Mar 30 01:57:09.150010 2026] [:error] [pid 23250:tid 23259] [client 20.110.78.62:49419] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/save.php"] [unique_id "acln9Zxrpj-dQjy1cvo2DwAAAkc"]
[Mon Mar 30 01:57:09.301342 2026] [:error] [pid 8818:tid 8824] [client 20.119.40.59:20828] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/classwithtostring.php"] [unique_id "acln9SCDvotZNSF0FBoaygAAAUI"]
[Mon Mar 30 01:57:10.104033 2026] [:error] [pid 23284:tid 23286] [client 20.110.78.62:7068] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/save.php"] [unique_id "acln9ozBujdPHsq7wyRQBgAAAoA"]
[Mon Mar 30 01:57:10.839377 2026] [:error] [pid 8818:tid 8837] [client 20.110.78.62:14995] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/save.php"] [unique_id "acln9iCDvotZNSF0FBoa0AAAAU8"]
[Mon Mar 30 01:57:11.493425 2026] [:error] [pid 32255:tid 32296] [client 20.119.40.59:21330] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/classwithtostring.php"] [unique_id "acln92nfn-AtRoMbquxi-wAAAEU"]
[Mon Mar 30 01:57:11.754486 2026] [:error] [pid 32359:tid 32377] [client 20.110.78.62:36462] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "acln9wMb8G3UzfQP3WhR3QAAANA"]
[Mon Mar 30 01:57:12.569470 2026] [:error] [pid 32257:tid 32339] [client 20.110.78.62:37749] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "acln-CE3TArOFrUtgWraHAAAAJU"]
[Mon Mar 30 01:57:13.290598 2026] [:error] [pid 23284:tid 23302] [client 20.110.78.62:40624] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "acln-YzBujdPHsq7wyRQEAAAApA"]
[Mon Mar 30 01:57:14.785679 2026] [:error] [pid 8818:tid 8822] [client 20.110.78.62:20093] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "acln-iCDvotZNSF0FBoa1QAAAUA"]
[Mon Mar 30 01:57:15.065355 2026] [:error] [pid 23168:tid 23214] [client 20.119.40.59:21256] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/install.php"] [unique_id "acln-2P8p0yRL8ot_2_2cAAAAhE"]
[Mon Mar 30 01:57:15.605931 2026] [:error] [pid 23137:tid 23144] [client 20.110.78.62:26539] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/n1GiO.php"] [unique_id "acln-xaWQa7LdZ_qGFYmPgAAAYU"]
[Mon Mar 30 01:57:16.510292 2026] [:error] [pid 23168:tid 23206] [client 20.110.78.62:14740] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/n1GiO.php"] [unique_id "acln_GP8p0yRL8ot_2_2cgAAAgk"]
[Mon Mar 30 01:57:17.204285 2026] [:error] [pid 32255:tid 32301] [client 20.110.78.62:12168] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/n1GiO.php"] [unique_id "acln_Wnfn-AtRoMbquxjCwAAAEo"]
[Mon Mar 30 01:57:17.959558 2026] [:error] [pid 23168:tid 23220] [client 20.119.40.59:20817] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/install.php"] [unique_id "acln_WP8p0yRL8ot_2_2dQAAAhc"]
[Mon Mar 30 01:57:19.334051 2026] [:error] [pid 23168:tid 23202] [client 20.110.78.62:42395] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/n1GiO.php"] [unique_id "acln_2P8p0yRL8ot_2_2fwAAAgU"]
[Mon Mar 30 01:57:20.437157 2026] [:error] [pid 23284:tid 23292] [client 20.110.78.62:15053] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/pLdK1.php"] [unique_id "acloAIzBujdPHsq7wyRQHwAAAoY"]
[Mon Mar 30 01:57:21.422476 2026] [:error] [pid 23284:tid 23291] [client 20.110.78.62:27943] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/pLdK1.php"] [unique_id "acloAYzBujdPHsq7wyRQJgAAAoU"]
[Mon Mar 30 01:57:21.637655 2026] [:error] [pid 23284:tid 23287] [client 20.119.40.59:20830] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/chosen.php"] [unique_id "acloAYzBujdPHsq7wyRQJwAAAoE"]
[Mon Mar 30 01:57:22.096308 2026] [:error] [pid 23284:tid 23306] [client 20.110.78.62:34166] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/pLdK1.php"] [unique_id "acloAozBujdPHsq7wyRQKwAAApQ"]
[Mon Mar 30 01:57:23.689592 2026] [:error] [pid 23168:tid 23204] [client 20.110.78.62:29046] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/pLdK1.php"] [unique_id "acloA2P8p0yRL8ot_2_2igAAAgc"]
[Mon Mar 30 01:57:25.404129 2026] [:error] [pid 32255:tid 32303] [client 20.110.78.62:21855] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/llb1J.php"] [unique_id "acloBWnfn-AtRoMbquxjFwAAAEw"]
[Mon Mar 30 01:57:26.215348 2026] [:error] [pid 32255:tid 32304] [client 20.110.78.62:31657] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/llb1J.php"] [unique_id "acloBmnfn-AtRoMbquxjGQAAAE0"]
[Mon Mar 30 01:57:27.081472 2026] [:error] [pid 23168:tid 23220] [client 20.110.78.62:6375] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/llb1J.php"] [unique_id "acloB2P8p0yRL8ot_2_2jwAAAhc"]
[Mon Mar 30 01:57:28.124455 2026] [:error] [pid 23167:tid 23176] [client 20.110.78.62:29005] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/llb1J.php"] [unique_id "acloCBIAHJCFaHff3_cFvwAAAcY"]
[Mon Mar 30 01:57:28.501021 2026] [:error] [pid 23284:tid 23298] [client 20.119.40.59:21356] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/chosen.php"] [unique_id "acloCIzBujdPHsq7wyRQNQAAAow"]
[Mon Mar 30 01:57:30.076678 2026] [:error] [pid 32257:tid 32328] [client 20.110.78.62:27497] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jeZDu.php"] [unique_id "acloCiE3TArOFrUtgWraUgAAAIo"]
[Mon Mar 30 01:57:30.888892 2026] [:error] [pid 23284:tid 23292] [client 20.110.78.62:34121] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jeZDu.php"] [unique_id "acloCozBujdPHsq7wyRQPwAAAoY"]
[Mon Mar 30 01:57:32.083824 2026] [:error] [pid 32255:tid 32314] [client 20.119.40.59:20831] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/languages/index.php"] [unique_id "acloDGnfn-AtRoMbquxjHwAAAFc"]
[Mon Mar 30 01:57:32.225019 2026] [:error] [pid 32257:tid 32328] [client 20.110.78.62:31197] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jeZDu.php"] [unique_id "acloDCE3TArOFrUtgWraZgAAAIo"]
[Mon Mar 30 01:57:33.298350 2026] [:error] [pid 23284:tid 23292] [client 20.110.78.62:6941] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jeZDu.php"] [unique_id "acloDYzBujdPHsq7wyRQTAAAAoY"]
[Mon Mar 30 01:57:35.945480 2026] [:error] [pid 32257:tid 32320] [client 20.119.40.59:20856] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/network.php"] [unique_id "acloDyE3TArOFrUtgWraegAAAII"]
[Mon Mar 30 01:57:37.283045 2026] [:error] [pid 8818:tid 8838] [client 20.119.40.59:21326] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/network.php"] [unique_id "acloESCDvotZNSF0FBoa6AAAAVA"]
[Mon Mar 30 01:57:38.734573 2026] [:error] [pid 32257:tid 32336] [client 20.119.40.59:21344] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/network.php"] [unique_id "acloEiE3TArOFrUtgWrahQAAAJI"]
[Mon Mar 30 01:57:41.297718 2026] [:error] [pid 32257:tid 32328] [client 20.119.40.59:20852] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "acloFSE3TArOFrUtgWrakAAAAIo"]
[Mon Mar 30 01:57:42.141691 2026] [:error] [pid 23284:tid 23304] [client 20.119.40.59:21316] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "acloFozBujdPHsq7wyRQagAAApI"]
[Mon Mar 30 01:57:43.021018 2026] [:error] [pid 32257:tid 32338] [client 20.110.78.62:23246] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/v4.php"] [unique_id "acloFyE3TArOFrUtgWranQAAAJQ"]
[Mon Mar 30 01:57:43.083326 2026] [:error] [pid 23284:tid 23289] [client 20.119.40.59:21339] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "acloF4zBujdPHsq7wyRQdAAAAoM"]
[Mon Mar 30 01:57:43.731880 2026] [:error] [pid 32257:tid 32339] [client 20.119.40.59:20835] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/wp-login.php"] [unique_id "acloFyE3TArOFrUtgWrangAAAJU"]
[Mon Mar 30 01:57:43.853398 2026] [:error] [pid 32257:tid 32329] [client 20.110.78.62:45341] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/v4.php"] [unique_id "acloFyE3TArOFrUtgWranwAAAIs"]
[Mon Mar 30 01:57:44.498843 2026] [:error] [pid 23167:tid 23183] [client 20.119.40.59:20860] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin/fckeditor/editor/filemanager/updates.php"] [unique_id "acloGBIAHJCFaHff3_cF1AAAAc0"]
[Mon Mar 30 01:57:44.836379 2026] [:error] [pid 23168:tid 23217] [client 20.110.78.62:16821] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/v4.php"] [unique_id "acloGGP8p0yRL8ot_2_2ogAAAhQ"]
[Mon Mar 30 01:57:45.076563 2026] [:error] [pid 32257:tid 32323] [client 20.119.40.59:20842] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/file.php"] [unique_id "acloGSE3TArOFrUtgWraogAAAIU"]
[Mon Mar 30 01:57:46.566499 2026] [:error] [pid 23250:tid 23269] [client 20.110.78.62:13687] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/v4.php"] [unique_id "acloGpxrpj-dQjy1cvo2NQAAAlE"]
[Mon Mar 30 01:57:47.148529 2026] [:error] [pid 32255:tid 32294] [client 20.119.40.59:20820] [client 20.119.40.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Cache/about.php"] [unique_id "acloG2nfn-AtRoMbquxjOgAAAEM"]
[Mon Mar 30 01:57:47.815731 2026] [:error] [pid 32257:tid 32338] [client 20.110.78.62:45332] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ant.php"] [unique_id "acloGyE3TArOFrUtgWrarQAAAJQ"]
[Mon Mar 30 01:57:48.745604 2026] [:error] [pid 32257:tid 32323] [client 20.110.78.62:26006] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ant.php"] [unique_id "acloHCE3TArOFrUtgWrasgAAAIU"]
[Mon Mar 30 01:57:50.086686 2026] [:error] [pid 23284:tid 23298] [client 20.110.78.62:37708] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ant.php"] [unique_id "acloHozBujdPHsq7wyRQgQAAAow"]
[Mon Mar 30 01:57:50.264313 2026] [:error] [pid 23167:tid 23175] [client 20.119.40.59:20811] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "acloHhIAHJCFaHff3_cF3wAAAcU"]
[Mon Mar 30 01:57:50.840406 2026] [:error] [pid 23168:tid 23214] [client 20.110.78.62:45313] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ant.php"] [unique_id "acloHmP8p0yRL8ot_2_2rQAAAhE"]
[Mon Mar 30 01:57:51.802546 2026] [:error] [pid 32257:tid 32324] [client 20.110.78.62:37383] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/as.php"] [unique_id "acloHyE3TArOFrUtgWrauAAAAIY"]
[Mon Mar 30 01:57:52.767475 2026] [:error] [pid 32255:tid 32298] [client 20.110.78.62:49404] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/as.php"] [unique_id "acloIGnfn-AtRoMbquxjTQAAAEc"]
[Mon Mar 30 01:57:53.100094 2026] [:error] [pid 23168:tid 23208] [client 20.119.40.59:20837] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "acloIWP8p0yRL8ot_2_2swAAAgs"]
[Mon Mar 30 01:57:53.776587 2026] [:error] [pid 23167:tid 23190] [client 20.110.78.62:17455] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/as.php"] [unique_id "acloIRIAHJCFaHff3_cF8wAAAdQ"]
[Mon Mar 30 01:57:54.664219 2026] [:error] [pid 8818:tid 8846] [client 20.110.78.62:31109] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/as.php"] [unique_id "acloIiCDvotZNSF0FBoa-AAAAVg"]
[Mon Mar 30 01:57:56.706322 2026] [:error] [pid 32257:tid 32333] [client 20.110.78.62:42466] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cc13.php"] [unique_id "acloJCE3TArOFrUtgWrazgAAAI8"]
[Mon Mar 30 01:57:57.885573 2026] [:error] [pid 23250:tid 23261] [client 20.110.78.62:6652] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cc13.php"] [unique_id "acloJZxrpj-dQjy1cvo2OgAAAkk"]
[Mon Mar 30 01:57:59.267954 2026] [:error] [pid 32257:tid 32335] [client 20.119.40.59:21250] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/includes/xmrlpc.php"] [unique_id "acloJyE3TArOFrUtgWra3wAAAJE"]
[Mon Mar 30 01:57:59.551492 2026] [:error] [pid 32257:tid 32319] [client 20.110.78.62:37482] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cc13.php"] [unique_id "acloJyE3TArOFrUtgWra4QAAAIE"]
[Mon Mar 30 01:58:00.966389 2026] [:error] [pid 32255:tid 32307] [client 20.110.78.62:50490] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cc13.php"] [unique_id "acloKGnfn-AtRoMbquxjYQAAAFA"]
[Mon Mar 30 01:58:02.210454 2026] [:error] [pid 8818:tid 8845] [client 20.110.78.62:20546] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "acloKiCDvotZNSF0FBoa_wAAAVc"]
[Mon Mar 30 01:58:03.117398 2026] [:error] [pid 23284:tid 23308] [client 20.110.78.62:15487] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "acloK4zBujdPHsq7wyRQnAAAApY"]
[Mon Mar 30 01:58:05.258519 2026] [:error] [pid 8818:tid 8823] [client 20.119.40.59:20863] [client 20.119.40.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.119.40.59, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/assets/images/wp-login.php"] [unique_id "acloLSCDvotZNSF0FBobAgAAAUE"]
[Mon Mar 30 01:58:05.485943 2026] [:error] [pid 23284:tid 23305] [client 20.119.40.59:20804] [client 20.119.40.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.119.40.59, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/assets/images/wp-login.php"] [unique_id "acloLYzBujdPHsq7wyRQqAAAApM"]
[Mon Mar 30 01:58:06.159593 2026] [:error] [pid 8818:tid 8837] [client 20.119.40.59:20863] [client 20.119.40.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/themes.php"] [unique_id "acloLiCDvotZNSF0FBobBgAAAU8"]
[Mon Mar 30 01:58:07.195396 2026] [:error] [pid 32257:tid 32328] [client 20.110.78.62:15477] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "acloLyE3TArOFrUtgWra8gAAAIo"]
[Mon Mar 30 01:58:11.625441 2026] [:error] [pid 23168:tid 23209] [client 20.119.40.59:20802] [client 20.119.40.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "acloM2P8p0yRL8ot_2_20wAAAgw"]
[Mon Mar 30 01:58:13.482852 2026] [:error] [pid 23137:tid 23155] [client 20.110.78.62:22879] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "acloNRaWQa7LdZ_qGFYmWAAAAZA"]
[Mon Mar 30 01:58:14.590441 2026] [:error] [pid 23137:tid 23149] [client 20.110.78.62:13602] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ccs.php"] [unique_id "acloNhaWQa7LdZ_qGFYmXwAAAYo"]
[Mon Mar 30 01:58:15.005779 2026] [:error] [pid 32257:tid 32331] [client 20.119.40.59:21336] [client 20.119.40.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 20.119.40.59, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/languages/wp-login.php"] [unique_id "acloNyE3TArOFrUtgWrbBwAAAI0"]
[Mon Mar 30 01:58:16.666302 2026] [:error] [pid 8818:tid 8829] [client 20.110.78.62:37684] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ccs.php"] [unique_id "acloOCCDvotZNSF0FBobEgAAAUc"]
[Mon Mar 30 01:58:17.447004 2026] [:error] [pid 32257:tid 32325] [client 20.110.78.62:49915] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ccs.php"] [unique_id "acloOSE3TArOFrUtgWrbGgAAAIc"]
[Mon Mar 30 01:58:18.768073 2026] [:error] [pid 32257:tid 32321] [client 20.110.78.62:49908] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ccs.php"] [unique_id "acloOiE3TArOFrUtgWrbIQAAAIM"]
[Mon Mar 30 01:58:19.801531 2026] [:error] [pid 8818:tid 8844] [client 20.110.78.62:13622] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ccu.php"] [unique_id "acloOyCDvotZNSF0FBobGQAAAVY"]
[Mon Mar 30 01:58:19.827272 2026] [:error] [pid 32255:tid 32306] [client 20.119.40.59:21331] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lock.php"] [unique_id "acloO2nfn-AtRoMbquxjkgAAAE8"]
[Mon Mar 30 01:58:21.438702 2026] [:error] [pid 32257:tid 32318] [client 20.110.78.62:47188] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ccu.php"] [unique_id "acloPSE3TArOFrUtgWrbLAAAAIA"]
[Mon Mar 30 01:58:22.257190 2026] [:error] [pid 32257:tid 32326] [client 20.119.40.59:21328] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lock.php"] [unique_id "acloPiE3TArOFrUtgWrbLwAAAIg"]
[Mon Mar 30 01:58:22.857787 2026] [:error] [pid 23137:tid 23157] [client 20.110.78.62:47192] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ccu.php"] [unique_id "acloPhaWQa7LdZ_qGFYmbAAAAZI"]
[Mon Mar 30 01:58:23.843035 2026] [:error] [pid 23250:tid 23256] [client 20.110.78.62:50437] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ccu.php"] [unique_id "acloP5xrpj-dQjy1cvo2SgAAAkQ"]
[Mon Mar 30 01:58:24.400359 2026] [:error] [pid 23250:tid 23254] [client 20.119.40.59:20826] [client 20.119.40.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/about.php"] [unique_id "acloQJxrpj-dQjy1cvo2TAAAAkI"]
[Mon Mar 30 01:58:25.305930 2026] [:error] [pid 32255:tid 32297] [client 20.110.78.62:44558] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/albin.php"] [unique_id "acloQWnfn-AtRoMbquxjnQAAAEY"]
[Mon Mar 30 01:58:26.980008 2026] [:error] [pid 8818:tid 8841] [client 20.110.78.62:49861] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/albin.php"] [unique_id "acloQiCDvotZNSF0FBobJgAAAVM"]
[Mon Mar 30 01:58:27.447426 2026] [:error] [pid 8818:tid 8845] [client 20.119.40.59:21362] [client 20.119.40.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Content/Type/index.php"] [unique_id "acloQyCDvotZNSF0FBobKAAAAVc"]
[Mon Mar 30 01:58:29.564531 2026] [:error] [pid 23284:tid 23300] [client 20.119.40.59:21260] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/dropdown.php"] [unique_id "acloRYzBujdPHsq7wyRQugAAAo4"]
[Mon Mar 30 01:58:29.663842 2026] [:error] [pid 23168:tid 23204] [client 20.110.78.62:15480] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/albin.php"] [unique_id "acloRWP8p0yRL8ot_2_22gAAAgc"]
[Mon Mar 30 01:58:30.303517 2026] [:error] [pid 8818:tid 8838] [client 20.110.78.62:49916] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/albin.php"] [unique_id "acloRiCDvotZNSF0FBobMQAAAVA"]
[Mon Mar 30 01:58:30.918299 2026] [:error] [pid 32257:tid 32322] [client 20.110.78.62:13589] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/north1.php"] [unique_id "acloRiE3TArOFrUtgWrbQgAAAIQ"]
[Mon Mar 30 01:58:31.153115 2026] [:error] [pid 23167:tid 23191] [client 20.119.40.59:20829] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/dropdown.php"] [unique_id "acloRxIAHJCFaHff3_cGGgAAAdU"]
[Mon Mar 30 01:58:32.222186 2026] [:error] [pid 32254:tid 32275] [client 20.110.78.62:50494] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/north1.php"] [unique_id "acloSKug2IHuyGgCTn95MQAAAAs"]
[Mon Mar 30 01:58:33.272860 2026] [:error] [pid 32255:tid 32299] [client 20.110.78.62:49894] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/north1.php"] [unique_id "acloSWnfn-AtRoMbquxjrAAAAEg"]
[Mon Mar 30 01:58:33.967404 2026] [:error] [pid 23137:tid 23142] [client 20.119.40.59:21254] [client 20.119.40.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "acloSRaWQa7LdZ_qGFYmdwAAAYM"]
[Mon Mar 30 01:58:34.374151 2026] [:error] [pid 8818:tid 8828] [client 20.110.78.62:22872] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/north1.php"] [unique_id "acloSiCDvotZNSF0FBobOQAAAUY"]
[Mon Mar 30 01:58:35.089375 2026] [:error] [pid 32255:tid 32300] [client 20.110.78.62:15473] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dragonshell.php"] [unique_id "acloS2nfn-AtRoMbquxjuAAAAEk"]
[Mon Mar 30 01:58:35.678868 2026] [:error] [pid 32257:tid 32325] [client 20.119.40.59:20821] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/readme.php"] [unique_id "acloSyE3TArOFrUtgWrbRQAAAIc"]
[Mon Mar 30 01:58:36.035615 2026] [:error] [pid 23284:tid 23289] [client 20.110.78.62:13410] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dragonshell.php"] [unique_id "acloTIzBujdPHsq7wyRQvgAAAoM"]
[Mon Mar 30 01:58:36.986094 2026] [:error] [pid 23284:tid 23303] [client 20.119.40.59:20849] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/readme.php"] [unique_id "acloTIzBujdPHsq7wyRQwQAAApE"]
[Mon Mar 30 01:58:37.213293 2026] [:error] [pid 23284:tid 23307] [client 20.110.78.62:43349] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dragonshell.php"] [unique_id "acloTYzBujdPHsq7wyRQwgAAApU"]
[Mon Mar 30 01:58:38.650593 2026] [:error] [pid 32254:tid 32278] [client 20.110.78.62:16835] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dragonshell.php"] [unique_id "acloTqug2IHuyGgCTn95NwAAAA4"]
[Mon Mar 30 01:58:39.234149 2026] [:error] [pid 23284:tid 23304] [client 20.119.40.59:20843] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/readme.php"] [unique_id "acloT4zBujdPHsq7wyRQxQAAApI"]
[Mon Mar 30 01:58:39.452420 2026] [:error] [pid 32255:tid 32306] [client 20.110.78.62:13591] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "acloT2nfn-AtRoMbquxjywAAAE8"]
[Mon Mar 30 01:58:40.551505 2026] [:error] [pid 23284:tid 23292] [client 20.110.78.62:20569] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "acloUIzBujdPHsq7wyRQzAAAAoY"]
[Mon Mar 30 01:58:41.136919 2026] [:error] [pid 32254:tid 32283] [client 20.119.40.59:21264] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/travelscape/json.php"] [unique_id "acloUaug2IHuyGgCTn95OgAAABM"]
[Mon Mar 30 01:58:45.011668 2026] [:error] [pid 32255:tid 32312] [client 20.119.40.59:21357] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/travelscape/json.php"] [unique_id "acloVWnfn-AtRoMbquxj1gAAAFU"]
[Mon Mar 30 01:58:53.961583 2026] [:error] [pid 8818:tid 8826] [client 20.119.40.59:20847] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plugins/DaoZM.php"] [unique_id "acloXSCDvotZNSF0FBobRwAAAUQ"]
[Mon Mar 30 01:59:02.867484 2026] [:error] [pid 32257:tid 32319] [client 20.110.78.62:16884] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acloZiE3TArOFrUtgWrbfAAAAIE"]
[Mon Mar 30 01:59:04.753609 2026] [:error] [pid 32257:tid 32338] [client 20.110.78.62:18147] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acloaCE3TArOFrUtgWrbggAAAJQ"]
[Mon Mar 30 01:59:04.785048 2026] [:error] [pid 32257:tid 32321] [client 20.119.40.59:21276] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/link.php"] [unique_id "acloaCE3TArOFrUtgWrbgwAAAIM"]
[Mon Mar 30 01:59:09.592319 2026] [:error] [pid 32255:tid 32314] [client 20.110.78.62:22291] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "aclobWnfn-AtRoMbquxj7gAAAFc"]
[Mon Mar 30 01:59:10.844858 2026] [:error] [pid 32254:tid 32273] [client 20.119.40.59:21275] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/link.php"] [unique_id "aclobqug2IHuyGgCTn95PgAAAAk"]
[Mon Mar 30 01:59:14.380649 2026] [:error] [pid 8818:tid 8842] [client 20.110.78.62:17771] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "aclociCDvotZNSF0FBobVAAAAVQ"]
[Mon Mar 30 01:59:15.890058 2026] [:error] [pid 23168:tid 23205] [client 20.119.40.59:21353] [client 20.119.40.59] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/link.php"] [unique_id "acloc2P8p0yRL8ot_2_3FAAAAgg"]
[Mon Mar 30 01:59:16.666448 2026] [:error] [pid 23137:tid 23150] [client 20.110.78.62:7662] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/dtyh.php"] [unique_id "aclodBaWQa7LdZ_qGFYmiQAAAYs"]
[Mon Mar 30 01:59:18.404472 2026] [:error] [pid 23137:tid 23143] [client 20.110.78.62:7662] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/dtyh.php"] [unique_id "aclodhaWQa7LdZ_qGFYmjAAAAYQ"]
[Mon Mar 30 01:59:19.807394 2026] [:error] [pid 23168:tid 23198] [client 20.110.78.62:44041] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/dtyh.php"] [unique_id "aclod2P8p0yRL8ot_2_3IgAAAgE"]
[Mon Mar 30 01:59:20.657788 2026] [:error] [pid 32359:tid 32379] [client 20.110.78.62:32213] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/dtyh.php"] [unique_id "acloeAMb8G3UzfQP3WhSIwAAANI"]
[Mon Mar 30 01:59:22.919031 2026] [:error] [pid 8818:tid 8825] [client 20.119.40.59:20851] [client 20.119.40.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/alfa-rex.php"] [unique_id "acloeiCDvotZNSF0FBobXgAAAUM"]
[Mon Mar 30 01:59:23.441587 2026] [:error] [pid 32254:tid 32282] [client 20.110.78.62:12477] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dtyh.php"] [unique_id "acloe6ug2IHuyGgCTn95RAAAABI"]
[Mon Mar 30 01:59:26.432649 2026] [:error] [pid 32254:tid 32272] [client 20.110.78.62:23787] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dtyh.php"] [unique_id "aclofqug2IHuyGgCTn95SwAAAAg"]
[Mon Mar 30 01:59:27.758936 2026] [:error] [pid 8818:tid 8822] [client 20.110.78.62:44037] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dtyh.php"] [unique_id "aclofyCDvotZNSF0FBobYgAAAUA"]
[Mon Mar 30 01:59:32.638576 2026] [:error] [pid 23284:tid 23288] [client 20.110.78.62:32192] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dtyh.php"] [unique_id "aclohIzBujdPHsq7wyRRBwAAAoI"]
[Mon Mar 30 01:59:33.969467 2026] [:error] [pid 32257:tid 32327] [client 20.110.78.62:32192] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wta.php"] [unique_id "aclohSE3TArOFrUtgWrbnQAAAIk"]
[Mon Mar 30 01:59:36.501510 2026] [:error] [pid 23168:tid 23204] [client 20.110.78.62:36050] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wta.php"] [unique_id "acloiGP8p0yRL8ot_2_3MgAAAgc"]
[Mon Mar 30 01:59:44.394858 2026] [:error] [pid 23250:tid 23273] [client 20.110.78.62:47361] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wta.php"] [unique_id "aclokJxrpj-dQjy1cvo2cgAAAlU"]
[Mon Mar 30 01:59:45.879857 2026] [:error] [pid 32257:tid 32329] [client 20.110.78.62:28532] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wta.php"] [unique_id "aclokSE3TArOFrUtgWrbqAAAAIs"]
[Mon Mar 30 01:59:48.226942 2026] [:error] [pid 23168:tid 23210] [client 20.119.40.59:21363] [client 20.119.40.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/about.php"] [unique_id "aclolGP8p0yRL8ot_2_3RAAAAg0"]
[Mon Mar 30 01:59:53.059847 2026] [:error] [pid 32255:tid 32292] [client 20.119.40.59:21333] [client 20.119.40.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aclomWnfn-AtRoMbquxkKAAAAEE"]
[Mon Mar 30 02:00:00.890463 2026] [:error] [pid 32359:tid 32372] [client 20.110.78.62:22383] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws77.php"] [unique_id "aclooAMb8G3UzfQP3WhSPQAAAMs"]
[Mon Mar 30 02:00:11.463761 2026] [:error] [pid 32255:tid 32296] [client 20.110.78.62:41188] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/max.php"] [unique_id "acloq2nfn-AtRoMbquxkVgAAAEU"]
[Mon Mar 30 02:00:13.248744 2026] [:error] [pid 32255:tid 32309] [client 20.110.78.62:7567] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/max.php"] [unique_id "aclorWnfn-AtRoMbquxkWgAAAFI"]
[Mon Mar 30 02:00:14.238771 2026] [:error] [pid 32255:tid 32298] [client 20.119.40.59:21349] [client 20.119.40.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "aclormnfn-AtRoMbquxkWwAAAEc"]
[Mon Mar 30 02:00:15.346336 2026] [:error] [pid 23167:tid 23185] [client 20.110.78.62:30635] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/max.php"] [unique_id "aclorxIAHJCFaHff3_cGWQAAAc8"]
[Mon Mar 30 02:00:16.032318 2026] [:error] [pid 8818:tid 8837] [client 20.110.78.62:29227] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/max.php"] [unique_id "aclosCCDvotZNSF0FBobhgAAAU8"]
[Mon Mar 30 02:00:17.565029 2026] [:error] [pid 32255:tid 32302] [client 20.110.78.62:18094] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/z60.php"] [unique_id "aclosWnfn-AtRoMbquxkXwAAAEs"]
[Mon Mar 30 02:00:18.677381 2026] [:error] [pid 23167:tid 23189] [client 20.110.78.62:18076] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/z60.php"] [unique_id "acloshIAHJCFaHff3_cGXgAAAdM"]
[Mon Mar 30 02:00:19.619213 2026] [:error] [pid 32254:tid 32281] [client 20.110.78.62:6887] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/z60.php"] [unique_id "aclos6ug2IHuyGgCTn95aAAAABE"]
[Mon Mar 30 02:00:21.891291 2026] [:error] [pid 23168:tid 23218] [client 20.110.78.62:45436] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/z60.php"] [unique_id "aclotWP8p0yRL8ot_2_3aAAAAhU"]
[Mon Mar 30 02:00:23.679401 2026] [:error] [pid 32255:tid 32293] [client 20.110.78.62:17530] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/utky.php"] [unique_id "aclot2nfn-AtRoMbquxkawAAAEI"]
[Mon Mar 30 02:00:24.654803 2026] [:error] [pid 23167:tid 23183] [client 20.110.78.62:12868] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/utky.php"] [unique_id "aclouBIAHJCFaHff3_cGaQAAAc0"]
[Mon Mar 30 02:00:25.438734 2026] [:error] [pid 32255:tid 32294] [client 20.110.78.62:41165] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/utky.php"] [unique_id "aclouWnfn-AtRoMbquxkbgAAAEM"]
[Mon Mar 30 02:00:26.064915 2026] [:error] [pid 32255:tid 32306] [client 20.110.78.62:51919] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/utky.php"] [unique_id "acloumnfn-AtRoMbquxkcAAAAE8"]
[Mon Mar 30 02:00:27.218711 2026] [:error] [pid 32255:tid 32292] [client 20.110.78.62:41141] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uang.php"] [unique_id "aclou2nfn-AtRoMbquxkcwAAAEE"]
[Mon Mar 30 02:00:29.413067 2026] [:error] [pid 32255:tid 32299] [client 20.110.78.62:44966] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uang.php"] [unique_id "aclovWnfn-AtRoMbquxkeQAAAEg"]
[Mon Mar 30 02:00:30.268670 2026] [:error] [pid 8818:tid 8836] [client 20.110.78.62:29292] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uang.php"] [unique_id "acloviCDvotZNSF0FBobnQAAAU4"]
[Mon Mar 30 02:00:32.432644 2026] [:error] [pid 32255:tid 32304] [client 20.110.78.62:51961] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uang.php"] [unique_id "aclowGnfn-AtRoMbquxkgwAAAE0"]
[Mon Mar 30 02:00:33.767128 2026] [:error] [pid 32255:tid 32298] [client 20.110.78.62:13699] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp3.php"] [unique_id "aclowWnfn-AtRoMbquxkiAAAAEc"]
[Mon Mar 30 02:00:35.667143 2026] [:error] [pid 32255:tid 32291] [client 20.110.78.62:51936] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp3.php"] [unique_id "aclow2nfn-AtRoMbquxkkQAAAEA"]
[Mon Mar 30 02:00:36.977662 2026] [:error] [pid 32257:tid 32330] [client 20.110.78.62:17505] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp3.php"] [unique_id "acloxCE3TArOFrUtgWrcRAAAAIw"]
[Mon Mar 30 02:00:38.791751 2026] [:error] [pid 32257:tid 32338] [client 20.110.78.62:17535] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp3.php"] [unique_id "acloxiE3TArOFrUtgWrcUAAAAJQ"]
[Mon Mar 30 02:00:40.060249 2026] [:error] [pid 32255:tid 32299] [client 20.110.78.62:36924] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "acloyGnfn-AtRoMbquxklQAAAEg"]
[Mon Mar 30 02:00:41.422264 2026] [:error] [pid 23284:tid 23292] [client 20.110.78.62:28958] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "acloyYzBujdPHsq7wyRR3gAAAoY"]
[Mon Mar 30 02:00:42.768650 2026] [:error] [pid 23168:tid 23200] [client 20.110.78.62:49653] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "acloymP8p0yRL8ot_2_3fAAAAgM"]
[Mon Mar 30 02:00:43.985465 2026] [:error] [pid 8818:tid 8826] [client 20.110.78.62:29251] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "acloyyCDvotZNSF0FBobpgAAAUQ"]
[Mon Mar 30 02:00:44.649412 2026] [:error] [pid 23250:tid 23259] [client 20.110.78.62:41607] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/absorption.php"] [unique_id "aclozJxrpj-dQjy1cvo2vQAAAkc"]
[Mon Mar 30 02:00:46.057156 2026] [:error] [pid 8818:tid 8830] [client 20.110.78.62:28928] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/absorption.php"] [unique_id "acloziCDvotZNSF0FBobqgAAAUg"]
[Mon Mar 30 02:00:47.387557 2026] [:error] [pid 23137:tid 23144] [client 20.110.78.62:49102] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/absorption.php"] [unique_id "aclozxaWQa7LdZ_qGFYm1wAAAYU"]
[Mon Mar 30 02:00:48.556431 2026] [:error] [pid 23284:tid 23296] [client 20.110.78.62:45700] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/absorption.php"] [unique_id "aclo0IzBujdPHsq7wyRR5AAAAoo"]
[Mon Mar 30 02:00:49.397858 2026] [:error] [pid 32255:tid 32296] [client 20.110.78.62:41630] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ticket.php"] [unique_id "aclo0Wnfn-AtRoMbquxkrAAAAEU"]
[Mon Mar 30 02:00:50.742818 2026] [:error] [pid 32255:tid 32304] [client 20.110.78.62:13752] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ticket.php"] [unique_id "aclo0mnfn-AtRoMbquxkuAAAAE0"]
[Mon Mar 30 02:00:52.344135 2026] [:error] [pid 32255:tid 32292] [client 20.110.78.62:52384] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ticket.php"] [unique_id "aclo1Gnfn-AtRoMbquxkwgAAAEE"]
[Mon Mar 30 02:00:53.452196 2026] [:error] [pid 23284:tid 23296] [client 20.110.78.62:29294] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ticket.php"] [unique_id "aclo1YzBujdPHsq7wyRR9gAAAoo"]
[Mon Mar 30 02:00:54.281531 2026] [:error] [pid 23284:tid 23302] [client 20.110.78.62:29772] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wglum1.php"] [unique_id "aclo1ozBujdPHsq7wyRR-AAAApA"]
[Mon Mar 30 02:00:56.248917 2026] [:error] [pid 8818:tid 8846] [client 20.110.78.62:21770] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wglum1.php"] [unique_id "aclo2CCDvotZNSF0FBobswAAAVg"]
[Mon Mar 30 02:00:57.619311 2026] [:error] [pid 23137:tid 23158] [client 20.110.78.62:40240] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wglum1.php"] [unique_id "aclo2RaWQa7LdZ_qGFYm2gAAAZM"]
[Mon Mar 30 02:00:58.836368 2026] [:error] [pid 23137:tid 23163] [client 20.110.78.62:51408] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wglum1.php"] [unique_id "aclo2haWQa7LdZ_qGFYm3AAAAZg"]
[Mon Mar 30 02:01:01.579072 2026] [:error] [pid 32255:tid 32314] [client 20.110.78.62:28941] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xpwer1.php"] [unique_id "aclo3Wnfn-AtRoMbquxkxgAAAFc"]
[Mon Mar 30 02:01:06.635407 2026] [:error] [pid 32257:tid 32340] [client 20.110.78.62:28931] [client 20.110.78.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xpwer1.php"] [unique_id "aclo4iE3TArOFrUtgWrcgAAAAJY"]
[Mon Mar 30 03:33:51.667870 2026] [:error] [pid 38506:tid 38557] [client 168.63.69.157:6230] [client 168.63.69.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/AAAA.php"] [unique_id "acl-n_UyZmgjmPCzwDgNNgAAAFI"]
[Mon Mar 30 03:33:52.188740 2026] [:error] [pid 38598:tid 38619] [client 168.63.69.157:6825] [client 168.63.69.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/AAAA.php"] [unique_id "acl-oMPYN0q2H25mtpEU4wAAANI"]
[Mon Mar 30 03:33:52.689424 2026] [:error] [pid 38507:tid 38582] [client 168.63.69.157:5925] [client 168.63.69.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/AAAA.php"] [unique_id "acl-oP3AOdffhyrBXq3zXQAAAJA"]
[Mon Mar 30 03:33:53.189116 2026] [:error] [pid 38507:tid 38580] [client 168.63.69.157:3336] [client 168.63.69.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/AAAA.php"] [unique_id "acl-of3AOdffhyrBXq3zYAAAAI4"]
[Mon Mar 30 03:33:53.688565 2026] [:error] [pid 38598:tid 38617] [client 168.63.69.157:3340] [client 168.63.69.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fde.php"] [unique_id "acl-ocPYN0q2H25mtpEU6QAAANA"]
[Mon Mar 30 03:33:54.187994 2026] [:error] [pid 38598:tid 38612] [client 168.63.69.157:3374] [client 168.63.69.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fde.php"] [unique_id "acl-osPYN0q2H25mtpEU7gAAAMs"]
[Mon Mar 30 03:33:54.689049 2026] [:error] [pid 38598:tid 38601] [client 168.63.69.157:5893] [client 168.63.69.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fde.php"] [unique_id "acl-osPYN0q2H25mtpEU9QAAAMA"]
[Mon Mar 30 03:33:55.190554 2026] [:error] [pid 38507:tid 38576] [client 168.63.69.157:9092] [client 168.63.69.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fde.php"] [unique_id "acl-o_3AOdffhyrBXq3zZAAAAIo"]
[Mon Mar 30 03:33:55.691061 2026] [:error] [pid 38507:tid 38566] [client 168.63.69.157:1087] [client 168.63.69.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/mjde.php"] [unique_id "acl-o_3AOdffhyrBXq3zZwAAAIA"]
[Mon Mar 30 03:33:56.193048 2026] [:error] [pid 38598:tid 38609] [client 168.63.69.157:5913] [client 168.63.69.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/mjde.php"] [unique_id "acl-pMPYN0q2H25mtpEU_gAAAMg"]
[Mon Mar 30 03:33:56.693864 2026] [:error] [pid 38507:tid 38578] [client 168.63.69.157:5940] [client 168.63.69.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/mjde.php"] [unique_id "acl-pP3AOdffhyrBXq3zcQAAAIw"]
[Mon Mar 30 03:33:57.194861 2026] [:error] [pid 38507:tid 38574] [client 168.63.69.157:6211] [client 168.63.69.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/mjde.php"] [unique_id "acl-pf3AOdffhyrBXq3zdAAAAIg"]
[Mon Mar 30 03:33:57.695340 2026] [:error] [pid 38598:tid 38623] [client 168.63.69.157:8446] [client 168.63.69.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gin.php"] [unique_id "acl-pcPYN0q2H25mtpEVBgAAANY"]
[Mon Mar 30 03:33:58.195067 2026] [:error] [pid 38507:tid 38578] [client 168.63.69.157:9108] [client 168.63.69.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gin.php"] [unique_id "acl-pv3AOdffhyrBXq3zewAAAIw"]
[Mon Mar 30 03:33:58.694251 2026] [:error] [pid 38598:tid 38624] [client 168.63.69.157:3340] [client 168.63.69.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gin.php"] [unique_id "acl-psPYN0q2H25mtpEVCwAAANc"]
[Mon Mar 30 03:33:59.194365 2026] [:error] [pid 38598:tid 38614] [client 168.63.69.157:9137] [client 168.63.69.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gin.php"] [unique_id "acl-p8PYN0q2H25mtpEVDwAAAM0"]
[Mon Mar 30 03:33:59.696530 2026] [:error] [pid 38598:tid 38623] [client 168.63.69.157:9099] [client 168.63.69.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ta.php"] [unique_id "acl-p8PYN0q2H25mtpEVEQAAANY"]
[Mon Mar 30 03:34:00.198702 2026] [:error] [pid 38598:tid 38625] [client 168.63.69.157:3292] [client 168.63.69.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ta.php"] [unique_id "acl-qMPYN0q2H25mtpEVFgAAANg"]
[Mon Mar 30 03:34:00.702320 2026] [:error] [pid 38506:tid 38542] [client 168.63.69.157:5922] [client 168.63.69.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ta.php"] [unique_id "acl-qPUyZmgjmPCzwDgNPwAAAEM"]
[Mon Mar 30 03:34:01.203843 2026] [:error] [pid 38506:tid 38550] [client 168.63.69.157:6831] [client 168.63.69.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ta.php"] [unique_id "acl-qfUyZmgjmPCzwDgNQAAAAEs"]
[Mon Mar 30 03:34:01.704144 2026] [:error] [pid 38506:tid 38563] [client 168.63.69.157:8160] [client 168.63.69.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/yawa.php"] [unique_id "acl-qfUyZmgjmPCzwDgNQgAAAFg"]
[Mon Mar 30 03:34:02.203324 2026] [:error] [pid 38505:tid 38517] [client 168.63.69.157:8389] [client 168.63.69.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/yawa.php"] [unique_id "acl-qmPDtwF5que7vfCz7QAAAAc"]
[Mon Mar 30 03:34:02.705470 2026] [:error] [pid 38506:tid 38548] [client 168.63.69.157:6228] [client 168.63.69.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/yawa.php"] [unique_id "acl-qvUyZmgjmPCzwDgNRQAAAEk"]
[Mon Mar 30 03:34:03.206383 2026] [:error] [pid 38598:tid 38617] [client 168.63.69.157:6710] [client 168.63.69.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/yawa.php"] [unique_id "acl-q8PYN0q2H25mtpEVKgAAANA"]
[Mon Mar 30 03:34:03.707752 2026] [:error] [pid 38506:tid 38546] [client 168.63.69.157:3962] [client 168.63.69.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bays.php"] [unique_id "acl-q_UyZmgjmPCzwDgNRwAAAEc"]
[Mon Mar 30 03:34:04.207686 2026] [:error] [pid 38507:tid 38584] [client 168.63.69.157:1035] [client 168.63.69.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bays.php"] [unique_id "acl-rP3AOdffhyrBXq3zmQAAAJI"]
[Mon Mar 30 03:34:04.707420 2026] [:error] [pid 38598:tid 38613] [client 168.63.69.157:8393] [client 168.63.69.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bays.php"] [unique_id "acl-rMPYN0q2H25mtpEVMQAAAMw"]
[Mon Mar 30 03:34:05.208061 2026] [:error] [pid 38598:tid 38614] [client 168.63.69.157:9100] [client 168.63.69.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bays.php"] [unique_id "acl-rcPYN0q2H25mtpEVNAAAAM0"]
[Mon Mar 30 03:34:05.707437 2026] [:error] [pid 38598:tid 38616] [client 168.63.69.157:5696] [client 168.63.69.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/x0rg.php"] [unique_id "acl-rcPYN0q2H25mtpEVNwAAAM8"]
[Mon Mar 30 03:34:06.206878 2026] [:error] [pid 38598:tid 38602] [client 168.63.69.157:8390] [client 168.63.69.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/x0rg.php"] [unique_id "acl-rsPYN0q2H25mtpEVOgAAAME"]
[Mon Mar 30 03:34:06.705860 2026] [:error] [pid 38598:tid 38605] [client 168.63.69.157:5699] [client 168.63.69.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/x0rg.php"] [unique_id "acl-rsPYN0q2H25mtpEVPQAAAMQ"]
[Mon Mar 30 03:34:07.203177 2026] [:error] [pid 38507:tid 38574] [client 168.63.69.157:8173] [client 168.63.69.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/x0rg.php"] [unique_id "acl-r_3AOdffhyrBXq3zogAAAIg"]
[Mon Mar 30 03:34:07.702464 2026] [:error] [pid 38598:tid 38619] [client 168.63.69.157:6802] [client 168.63.69.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/dk.php"] [unique_id "acl-r8PYN0q2H25mtpEVQAAAANI"]
[Mon Mar 30 03:34:08.203052 2026] [:error] [pid 38598:tid 38617] [client 168.63.69.157:8139] [client 168.63.69.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/dk.php"] [unique_id "acl-sMPYN0q2H25mtpEVQwAAANA"]
[Mon Mar 30 03:34:08.701911 2026] [:error] [pid 38598:tid 38607] [client 168.63.69.157:3279] [client 168.63.69.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/dk.php"] [unique_id "acl-sMPYN0q2H25mtpEVSQAAAMY"]
[Mon Mar 30 03:34:15.902327 2026] [:error] [pid 4033:tid 4056] [client 168.63.69.157:3351] [client 168.63.69.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/az.php"] [unique_id "acl-t6nf-DXI9VblHi0L4gAAAAM"]
[Mon Mar 30 03:34:16.396836 2026] [:error] [pid 4033:tid 4077] [client 168.63.69.157:8133] [client 168.63.69.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/az.php"] [unique_id "acl-uKnf-DXI9VblHi0L8AAAABg"]
[Mon Mar 30 03:34:16.896075 2026] [:error] [pid 4034:tid 4083] [client 168.63.69.157:9125] [client 168.63.69.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/az.php"] [unique_id "acl-uLfAq8eF_uU4gu17oQAAAEI"]
[Mon Mar 30 03:34:17.397731 2026] [:error] [pid 4139:tid 4152] [client 168.63.69.157:6208] [client 168.63.69.157] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/az.php"] [unique_id "acl-uYYyhg47TZoaP9LizgAAAMU"]
[Mon Mar 30 03:45:00.229692 2026] [:error] [pid 4040:tid 4126] [client 172.70.251.104:10813] [client 172.70.251.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.git/logs/HEAD"] [unique_id "acmBPAxlbJV8kpOpFvY5ZQAAAJI"]
[Mon Mar 30 03:45:00.229942 2026] [:error] [pid 4040:tid 4115] [client 172.70.251.103:12839] [client 172.70.251.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.git/refs/heads/main"] [unique_id "acmBPAxlbJV8kpOpFvY5ZgAAAIc"]
[Mon Mar 30 03:45:00.230702 2026] [:error] [pid 4040:tid 4124] [client 172.70.251.104:10815] [client 172.70.251.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.git/index"] [unique_id "acmBPAxlbJV8kpOpFvY5ZwAAAJA"]
[Mon Mar 30 03:45:00.238176 2026] [:error] [pid 4033:tid 4068] [client 172.70.251.103:12849] [client 172.70.251.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.git/HEAD"] [unique_id "acmBPKnf-DXI9VblHi0UQAAAAA8"]
[Mon Mar 30 03:45:00.238176 2026] [:error] [pid 4040:tid 4113] [client 172.70.251.104:10805] [client 172.70.251.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.git/refs/heads/master"] [unique_id "acmBPAxlbJV8kpOpFvY5aAAAAIU"]
[Mon Mar 30 03:45:00.256647 2026] [:error] [pid 4033:tid 4055] [client 172.70.251.103:12846] [client 172.70.251.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "acmBPKnf-DXI9VblHi0UQQAAAAI"]
[Mon Mar 30 03:45:01.263690 2026] [:error] [pid 4034:tid 4098] [client 172.70.251.103:12850] [client 172.70.251.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env"] [unique_id "acmBPbfAq8eF_uU4gu2BJAAAAFE"]
[Mon Mar 30 03:45:01.265209 2026] [:error] [pid 4034:tid 4087] [client 172.70.251.104:10818] [client 172.70.251.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.production"] [unique_id "acmBPbfAq8eF_uU4gu2BJQAAAEY"]
[Mon Mar 30 03:45:01.283752 2026] [:error] [pid 4034:tid 4105] [client 172.70.251.103:12855] [client 172.70.251.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "acmBPbfAq8eF_uU4gu2BJgAAAFg"]
[Mon Mar 30 03:45:01.299505 2026] [:error] [pid 4040:tid 4132] [client 172.70.251.103:12865] [client 172.70.251.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.test"] [unique_id "acmBPQxlbJV8kpOpFvY5bAAAAJg"]
[Mon Mar 30 03:45:01.301559 2026] [:error] [pid 4040:tid 4122] [client 172.70.251.103:12857] [client 172.70.251.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.dev"] [unique_id "acmBPQxlbJV8kpOpFvY5bQAAAI4"]
[Mon Mar 30 03:45:02.305516 2026] [:error] [pid 4040:tid 4114] [client 172.70.251.104:10823] [client 172.70.251.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.staging"] [unique_id "acmBPgxlbJV8kpOpFvY5bwAAAIY"]
[Mon Mar 30 03:45:02.314118 2026] [:error] [pid 4033:tid 4072] [client 172.70.251.104:10829] [client 172.70.251.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.backup"] [unique_id "acmBPqnf-DXI9VblHi0URgAAABM"]
[Mon Mar 30 03:45:02.333698 2026] [:error] [pid 4034:tid 4089] [client 172.70.251.103:12866] [client 172.70.251.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.bak"] [unique_id "acmBPrfAq8eF_uU4gu2BKwAAAEg"]
[Mon Mar 30 03:45:02.342019 2026] [:error] [pid 4033:tid 4056] [client 172.70.251.103:12868] [client 172.70.251.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.old"] [unique_id "acmBPqnf-DXI9VblHi0URwAAAAM"]
[Mon Mar 30 03:45:02.369993 2026] [:error] [pid 55884:tid 55961] [client 172.70.251.104:10831] [client 172.70.251.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.save"] [unique_id "acmBPjjuYLVkve3VbhxbdwAAAQg"]
[Mon Mar 30 03:45:03.012612 2026] [:error] [pid 55884:tid 55968] [client 172.70.251.103:12871] [client 172.70.251.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.development"] [unique_id "acmBPzjuYLVkve3VbhxbeQAAAQ8"]
[Mon Mar 30 03:45:03.349706 2026] [:error] [pid 4033:tid 4076] [client 172.70.251.104:14035] [client 172.70.251.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.example"] [unique_id "acmBP6nf-DXI9VblHi0UTwAAABc"]
[Mon Mar 30 03:45:03.350482 2026] [:error] [pid 4033:tid 4058] [client 172.70.251.103:13250] [client 172.70.251.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.tmp"] [unique_id "acmBP6nf-DXI9VblHi0UUAAAAAU"]
[Mon Mar 30 03:45:03.382767 2026] [:error] [pid 55884:tid 55973] [client 172.70.251.104:14038] [client 172.70.251.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.development.local"] [unique_id "acmBPzjuYLVkve3VbhxbegAAARQ"]
[Mon Mar 30 03:45:03.382906 2026] [:error] [pid 55884:tid 55956] [client 172.70.251.103:13254] [client 172.70.251.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.production.local"] [unique_id "acmBPzjuYLVkve3VbhxbewAAAQM"]
[Mon Mar 30 03:45:03.423023 2026] [:error] [pid 4033:tid 4062] [client 172.70.251.103:13258] [client 172.70.251.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/config/.env"] [unique_id "acmBP6nf-DXI9VblHi0UUwAAAAk"]
[Mon Mar 30 03:45:04.062392 2026] [:error] [pid 55884:tid 55974] [client 172.70.251.104:14044] [client 172.70.251.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/app/.env"] [unique_id "acmBQDjuYLVkve3VbhxbfgAAARU"]
[Mon Mar 30 03:45:04.390978 2026] [:error] [pid 4033:tid 4053] [client 172.70.251.103:13262] [client 172.70.251.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/api/.env"] [unique_id "acmBQKnf-DXI9VblHi0UWQAAAAA"]
[Mon Mar 30 03:45:04.417018 2026] [:error] [pid 55884:tid 55975] [client 172.70.251.103:13260] [client 172.70.251.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/backend/.env"] [unique_id "acmBQDjuYLVkve3VbhxbgAAAARY"]
[Mon Mar 30 03:45:04.417502 2026] [:error] [pid 55884:tid 55977] [client 172.70.251.103:13266] [client 172.70.251.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin/.env"] [unique_id "acmBQDjuYLVkve3VbhxbgQAAARg"]
[Mon Mar 30 03:45:04.428948 2026] [:error] [pid 4034:tid 4082] [client 172.70.251.104:14046] [client 172.70.251.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/core/.env"] [unique_id "acmBQLfAq8eF_uU4gu2BLAAAAEE"]
[Mon Mar 30 03:45:04.458440 2026] [:error] [pid 4139:tid 4158] [client 172.70.251.103:13274] [client 172.70.251.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/public/.env"] [unique_id "acmBQIYyhg47TZoaP9LtYQAAAMs"]
[Mon Mar 30 03:45:05.098480 2026] [:error] [pid 55884:tid 55976] [client 172.70.251.103:13276] [client 172.70.251.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/private/.env"] [unique_id "acmBQTjuYLVkve3VbhxbhgAAARc"]
[Mon Mar 30 03:45:05.474118 2026] [:error] [pid 4139:tid 4168] [client 172.70.251.103:13286] [client 172.70.251.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/config/.env.local"] [unique_id "acmBQYYyhg47TZoaP9LtaAAAANU"]
[Mon Mar 30 03:45:05.474893 2026] [:error] [pid 4033:tid 4058] [client 172.70.251.104:14053] [client 172.70.251.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.json"] [unique_id "acmBQanf-DXI9VblHi0UXAAAAAU"]
[Mon Mar 30 03:45:05.475966 2026] [:error] [pid 4139:tid 4151] [client 172.70.251.103:13287] [client 172.70.251.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.php"] [unique_id "acmBQYYyhg47TZoaP9LtaQAAAMQ"]
[Mon Mar 30 03:45:05.505451 2026] [:error] [pid 4139:tid 4153] [client 172.70.251.103:13294] [client 172.70.251.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env_backup"] [unique_id "acmBQYYyhg47TZoaP9LtagAAAMY"]
[Mon Mar 30 03:45:05.728880 2026] [:error] [pid 4139:tid 4152] [client 172.70.251.103:13279] [client 172.70.251.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env1"] [unique_id "acmBQYYyhg47TZoaP9LtbgAAAMU"]
[Mon Mar 30 03:45:06.154975 2026] [:error] [pid 4139:tid 4155] [client 172.70.251.104:14057] [client 172.70.251.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env~"] [unique_id "acmBQoYyhg47TZoaP9LtcAAAAMg"]
[Mon Mar 30 03:45:06.506128 2026] [:error] [pid 4040:tid 4124] [client 172.70.251.103:13300] [client 172.70.251.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env2"] [unique_id "acmBQgxlbJV8kpOpFvY5dQAAAJA"]
[Mon Mar 30 03:45:06.512648 2026] [:error] [pid 4040:tid 4113] [client 172.70.251.103:13308] [client 172.70.251.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.envrc"] [unique_id "acmBQgxlbJV8kpOpFvY5dgAAAIU"]
[Mon Mar 30 03:45:06.535018 2026] [:error] [pid 4040:tid 4125] [client 172.70.251.103:13304] [client 172.70.251.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.dist"] [unique_id "acmBQgxlbJV8kpOpFvY5dwAAAJE"]
[Mon Mar 30 03:45:06.758396 2026] [:error] [pid 4139:tid 4164] [client 172.70.251.103:13310] [client 172.70.251.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.production.bak"] [unique_id "acmBQoYyhg47TZoaP9LtdAAAANE"]
[Mon Mar 30 03:45:07.204443 2026] [:error] [pid 55884:tid 55970] [client 172.70.251.104:14059] [client 172.70.251.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.prod"] [unique_id "acmBQzjuYLVkve3VbhxbiAAAARE"]
[Mon Mar 30 03:45:07.545040 2026] [:error] [pid 55884:tid 55966] [client 172.70.251.103:13315] [client 172.70.251.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.docker"] [unique_id "acmBQzjuYLVkve3VbhxbiQAAAQ0"]
[Mon Mar 30 03:45:07.551594 2026] [:error] [pid 4139:tid 4158] [client 172.70.251.104:14061] [client 172.70.251.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.dev.local"] [unique_id "acmBQ4Yyhg47TZoaP9LtegAAAMs"]
[Mon Mar 30 03:45:07.589273 2026] [:error] [pid 4033:tid 4053] [client 172.70.251.104:14064] [client 172.70.251.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.container"] [unique_id "acmBQ6nf-DXI9VblHi0UagAAAAA"]
[Mon Mar 30 03:45:07.805943 2026] [:error] [pid 4033:tid 4077] [client 172.70.251.104:14068] [client 172.70.251.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/docker/.env"] [unique_id "acmBQ6nf-DXI9VblHi0UawAAABg"]
[Mon Mar 30 03:45:08.077327 2026] [:error] [pid 4139:tid 4157] [client 172.70.251.103:13322] [client 172.70.251.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.orig"] [unique_id "acmBRIYyhg47TZoaP9LtfAAAAMo"]
[Mon Mar 30 03:45:08.532770 2026] [:error] [pid 55884:tid 55960] [client 172.70.251.104:14070] [client 172.70.251.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/www/.env"] [unique_id "acmBRDjuYLVkve3VbhxbjwAAAQc"]
[Mon Mar 30 03:45:08.590939 2026] [:error] [pid 4033:tid 4059] [client 172.70.251.104:14072] [client 172.70.251.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/docker/.env.local"] [unique_id "acmBRKnf-DXI9VblHi0UdAAAAAY"]
[Mon Mar 30 03:45:08.603595 2026] [:error] [pid 4139:tid 4151] [client 172.70.251.103:13323] [client 172.70.251.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/server/.env"] [unique_id "acmBRIYyhg47TZoaP9LtfQAAAMQ"]
[Mon Mar 30 03:45:08.635125 2026] [:error] [pid 4040:tid 4125] [client 172.70.251.103:13329] [client 172.70.251.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/srv/.env"] [unique_id "acmBRAxlbJV8kpOpFvY5hAAAAJE"]
[Mon Mar 30 03:45:08.848881 2026] [:error] [pid 4033:tid 4057] [client 172.70.251.104:14078] [client 172.70.251.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/web/.env"] [unique_id "acmBRKnf-DXI9VblHi0UdQAAAAQ"]
[Mon Mar 30 03:45:09.125675 2026] [:error] [pid 4139:tid 4149] [client 172.70.251.103:13331] [client 172.70.251.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/site/.env"] [unique_id "acmBRYYyhg47TZoaP9LtgAAAAMI"]
[Mon Mar 30 03:45:09.568084 2026] [:error] [pid 55884:tid 55955] [client 172.70.251.103:13336] [client 172.70.251.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/var/www/.env"] [unique_id "acmBRTjuYLVkve3VbhxbkQAAAQI"]
[Mon Mar 30 03:45:09.636927 2026] [:error] [pid 4139:tid 4156] [client 172.70.251.104:14082] [client 172.70.251.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/var/www/html/.env"] [unique_id "acmBRYYyhg47TZoaP9LthgAAAMk"]
[Mon Mar 30 03:45:09.647724 2026] [:error] [pid 4139:tid 4153] [client 172.70.251.103:13338] [client 172.70.251.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/home/.env"] [unique_id "acmBRYYyhg47TZoaP9LthwAAAMY"]
[Mon Mar 30 03:45:09.670136 2026] [:error] [pid 4139:tid 4154] [client 172.70.251.103:13340] [client 172.70.251.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/root/.env"] [unique_id "acmBRYYyhg47TZoaP9LtiAAAAMc"]
[Mon Mar 30 03:45:09.903154 2026] [:error] [pid 4139:tid 4159] [client 172.70.251.104:14089] [client 172.70.251.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env_config"] [unique_id "acmBRYYyhg47TZoaP9LtiQAAAMw"]
[Mon Mar 30 03:45:10.169792 2026] [:error] [pid 4033:tid 4069] [client 172.70.251.103:14019] [client 172.70.251.103] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.git/HEAD"] [unique_id "acmBRqnf-DXI9VblHi0UeAAAABA"]
[Mon Mar 30 03:45:10.190001 2026] [:error] [pid 55884:tid 55975] [client 172.70.251.104:13313] [client 172.70.251.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "acmBRjjuYLVkve3VbhxbkgAAARY"]
[Mon Mar 30 03:45:10.428535 2026] [:error] [pid 4040:tid 4108] [client 172.70.251.104:13317] [client 172.70.251.104] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.git/index"] [unique_id "acmBRgxlbJV8kpOpFvY5iQAAAIA"]
[Mon Mar 30 03:45:30.630088 2026] [:error] [pid 55884:tid 55974] [client 172.69.34.155:10995] [client 172.69.34.155] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env"] [unique_id "acmBWjjuYLVkve3VbhxbyQAAARU"]
[Mon Mar 30 03:45:31.105398 2026] [:error] [pid 4033:tid 4060] [client 172.69.33.22:12353] [client 172.69.33.22] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "acmBW6nf-DXI9VblHi0U1AAAAAc"]
[Mon Mar 30 03:45:31.623927 2026] [:error] [pid 4033:tid 4058] [client 172.69.33.24:11375] [client 172.69.33.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.production"] [unique_id "acmBW6nf-DXI9VblHi0U2wAAAAU"]
[Mon Mar 30 03:45:32.102557 2026] [:error] [pid 4033:tid 4070] [client 172.69.33.45:9734] [client 172.69.33.45] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.development"] [unique_id "acmBXKnf-DXI9VblHi0U4gAAABE"]
[Mon Mar 30 03:45:52.087192 2026] [:error] [pid 4040:tid 4125] [client 172.69.33.39:13124] [client 172.69.33.39] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.dev"] [unique_id "acmBcAxlbJV8kpOpFvY50AAAAJE"]
[Mon Mar 30 03:45:52.089200 2026] [:error] [pid 4033:tid 4066] [client 172.69.34.145:14139] [client 172.69.34.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.staging"] [unique_id "acmBcKnf-DXI9VblHi0VLQAAAA0"]
[Mon Mar 30 03:45:52.089641 2026] [:error] [pid 4139:tid 4152] [client 172.69.33.31:9367] [client 172.69.33.31] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.bak"] [unique_id "acmBcIYyhg47TZoaP9Lt9QAAAMU"]
[Mon Mar 30 03:45:52.341141 2026] [:error] [pid 4033:tid 4073] [client 172.70.250.216:9567] [client 172.70.250.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.backup"] [unique_id "acmBcKnf-DXI9VblHi0VMAAAABQ"]
[Mon Mar 30 03:45:52.341901 2026] [:error] [pid 4034:tid 4098] [client 172.70.250.217:12851] [client 172.70.250.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.test"] [unique_id "acmBcLfAq8eF_uU4gu2BYAAAAFE"]
[Mon Mar 30 03:45:52.633635 2026] [:error] [pid 4139:tid 4147] [client 172.70.250.217:12852] [client 172.70.250.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.old"] [unique_id "acmBcIYyhg47TZoaP9Lt-AAAAMA"]
[Mon Mar 30 03:45:52.641437 2026] [:error] [pid 4034:tid 4091] [client 172.70.250.217:12856] [client 172.70.250.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.save"] [unique_id "acmBcLfAq8eF_uU4gu2BYQAAAEo"]
[Mon Mar 30 03:45:52.642000 2026] [:error] [pid 4139:tid 4156] [client 172.70.250.217:12861] [client 172.70.250.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.tmp"] [unique_id "acmBcIYyhg47TZoaP9Lt-QAAAMk"]
[Mon Mar 30 03:45:52.838980 2026] [:error] [pid 4040:tid 4108] [client 172.69.33.50:10415] [client 172.69.33.50] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.example"] [unique_id "acmBcAxlbJV8kpOpFvY50wAAAIA"]
[Mon Mar 30 03:45:52.863573 2026] [:error] [pid 4139:tid 4151] [client 172.70.250.217:12865] [client 172.70.250.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.production.local"] [unique_id "acmBcIYyhg47TZoaP9Lt-gAAAMQ"]
[Mon Mar 30 03:45:53.086060 2026] [:error] [pid 4033:tid 4064] [client 172.69.33.24:12974] [client 172.69.33.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.development.local"] [unique_id "acmBcanf-DXI9VblHi0VMwAAAAs"]
[Mon Mar 30 03:45:53.133859 2026] [:error] [pid 55884:tid 55972] [client 172.69.34.146:11429] [client 172.69.34.146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/config/.env"] [unique_id "acmBcTjuYLVkve3Vbhxb-AAAARM"]
[Mon Mar 30 03:45:53.259371 2026] [:error] [pid 4139:tid 4162] [client 172.69.33.19:13815] [client 172.69.33.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/app/.env"] [unique_id "acmBcYYyhg47TZoaP9Lt_AAAAM8"]
[Mon Mar 30 03:45:53.316167 2026] [:error] [pid 4033:tid 4063] [client 172.69.33.24:12981] [client 172.69.33.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/backend/.env"] [unique_id "acmBcanf-DXI9VblHi0VNAAAAAo"]
[Mon Mar 30 03:45:53.646776 2026] [:error] [pid 4034:tid 4092] [client 172.70.250.217:12866] [client 172.70.250.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin/.env"] [unique_id "acmBcbfAq8eF_uU4gu2BagAAAEs"]
[Mon Mar 30 03:45:53.656470 2026] [:error] [pid 4034:tid 4090] [client 172.69.33.20:13738] [client 172.69.33.20] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/core/.env"] [unique_id "acmBcbfAq8eF_uU4gu2BawAAAEk"]
[Mon Mar 30 03:45:53.816021 2026] [:error] [pid 4033:tid 4059] [client 172.70.250.216:9572] [client 172.70.250.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/public/.env"] [unique_id "acmBcanf-DXI9VblHi0VOQAAAAY"]
[Mon Mar 30 03:45:53.842079 2026] [:error] [pid 4034:tid 4095] [client 172.69.33.19:13823] [client 172.69.33.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/private/.env"] [unique_id "acmBcbfAq8eF_uU4gu2BbQAAAE4"]
[Mon Mar 30 03:45:54.137917 2026] [:error] [pid 4040:tid 4126] [client 172.69.33.16:13276] [client 172.69.33.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/config/.env.local"] [unique_id "acmBcgxlbJV8kpOpFvY51gAAAJI"]
[Mon Mar 30 03:45:54.344473 2026] [:error] [pid 55884:tid 55973] [client 172.70.250.216:9578] [client 172.70.250.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.php"] [unique_id "acmBcjjuYLVkve3Vbhxb-gAAARQ"]
[Mon Mar 30 03:45:54.389800 2026] [:error] [pid 4033:tid 4075] [client 172.70.250.216:9583] [client 172.70.250.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.json"] [unique_id "acmBcqnf-DXI9VblHi0VPwAAABY"]
[Mon Mar 30 03:45:54.429202 2026] [:error] [pid 4033:tid 4054] [client 172.69.33.24:12982] [client 172.69.33.24] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env_backup"] [unique_id "acmBcqnf-DXI9VblHi0VQAAAAAE"]
[Mon Mar 30 03:45:54.619160 2026] [:error] [pid 4139:tid 4152] [client 172.69.33.18:11527] [client 172.69.33.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env~"] [unique_id "acmBcoYyhg47TZoaP9LuAwAAAMU"]
[Mon Mar 30 03:45:54.869258 2026] [:error] [pid 4033:tid 4065] [client 172.70.250.216:11379] [client 172.70.250.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env1"] [unique_id "acmBcqnf-DXI9VblHi0VRgAAAAw"]
[Mon Mar 30 03:45:54.908960 2026] [:error] [pid 4033:tid 4058] [client 172.69.33.21:10359] [client 172.69.33.21] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.dist"] [unique_id "acmBcqnf-DXI9VblHi0VRwAAAAU"]
[Mon Mar 30 03:45:54.910668 2026] [:error] [pid 4033:tid 4077] [client 172.70.250.217:12502] [client 172.70.250.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env2"] [unique_id "acmBcqnf-DXI9VblHi0VSAAAABg"]
[Mon Mar 30 03:45:55.057754 2026] [:error] [pid 4033:tid 4073] [client 172.70.250.216:11387] [client 172.70.250.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/api/.env"] [unique_id "acmBc6nf-DXI9VblHi0VSgAAABQ"]
[Mon Mar 30 03:45:55.173011 2026] [:error] [pid 55884:tid 55967] [client 172.70.250.216:11392] [client 172.70.250.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.envrc"] [unique_id "acmBczjuYLVkve3Vbhxb_QAAAQ4"]
[Mon Mar 30 03:45:55.392196 2026] [:error] [pid 55884:tid 55958] [client 172.70.250.217:12508] [client 172.70.250.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.orig"] [unique_id "acmBczjuYLVkve3Vbhxb_gAAAQU"]
[Mon Mar 30 03:45:55.437790 2026] [:error] [pid 4033:tid 4068] [client 172.70.250.216:11396] [client 172.70.250.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.production.bak"] [unique_id "acmBc6nf-DXI9VblHi0VTgAAAA8"]
[Mon Mar 30 03:45:55.465771 2026] [:error] [pid 55884:tid 55968] [client 172.70.250.217:12512] [client 172.70.250.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.prod"] [unique_id "acmBczjuYLVkve3Vbhxb_wAAAQ8"]
[Mon Mar 30 03:45:55.578483 2026] [:error] [pid 55884:tid 55969] [client 172.70.250.217:12519] [client 172.70.250.217] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.dev.local"] [unique_id "acmBczjuYLVkve3VbhxcAQAAARA"]
[Mon Mar 30 03:45:55.701055 2026] [:error] [pid 4139:tid 4169] [client 172.70.250.216:11402] [client 172.70.250.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.docker"] [unique_id "acmBc4Yyhg47TZoaP9LuBQAAANY"]
[Mon Mar 30 03:45:55.886058 2026] [:error] [pid 4033:tid 4066] [client 172.69.34.228:10132] [client 172.69.34.228] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/docker/.env"] [unique_id "acmBc6nf-DXI9VblHi0VUQAAAA0"]
[Mon Mar 30 03:45:55.909442 2026] [:error] [pid 4033:tid 4073] [client 172.70.250.216:11404] [client 172.70.250.216] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.container"] [unique_id "acmBc6nf-DXI9VblHi0VUgAAABQ"]
[Mon Mar 30 03:45:56.152144 2026] [:error] [pid 4033:tid 4060] [client 172.69.33.23:11568] [client 172.69.33.23] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/docker/.env.local"] [unique_id "acmBdKnf-DXI9VblHi0VVQAAAAc"]
[Mon Mar 30 03:45:56.368409 2026] [:error] [pid 4033:tid 4067] [client 172.69.33.51:9241] [client 172.69.33.51] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/srv/.env"] [unique_id "acmBdKnf-DXI9VblHi0VVwAAAA4"]
[Mon Mar 30 03:45:56.404848 2026] [:error] [pid 4033:tid 4062] [client 172.69.33.20:13742] [client 172.69.33.20] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/server/.env"] [unique_id "acmBdKnf-DXI9VblHi0VWAAAAAk"]
[Mon Mar 30 03:45:56.434291 2026] [:error] [pid 4033:tid 4068] [client 172.69.34.156:14098] [client 172.69.34.156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/web/.env"] [unique_id "acmBdKnf-DXI9VblHi0VWgAAAA8"]
[Mon Mar 30 03:45:56.628764 2026] [:error] [pid 4139:tid 4171] [client 172.69.34.146:11437] [client 172.69.34.146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/site/.env"] [unique_id "acmBdIYyhg47TZoaP9LuBgAAANg"]
[Mon Mar 30 03:45:56.893589 2026] [:error] [pid 55884:tid 55966] [client 172.69.33.50:13870] [client 172.69.33.50] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/www/.env"] [unique_id "acmBdDjuYLVkve3VbhxcCwAAAQ0"]
[Mon Mar 30 03:45:56.911021 2026] [:error] [pid 55884:tid 55967] [client 172.69.33.16:13283] [client 172.69.33.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/var/www/html/.env"] [unique_id "acmBdDjuYLVkve3VbhxcDAAAAQ4"]
[Mon Mar 30 03:45:56.930041 2026] [:error] [pid 4033:tid 4073] [client 172.69.33.18:11532] [client 172.69.33.18] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/var/www/.env"] [unique_id "acmBdKnf-DXI9VblHi0VXgAAABQ"]
[Mon Mar 30 03:45:57.096440 2026] [:error] [pid 4033:tid 4076] [client 172.69.33.23:11573] [client 172.69.33.23] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/home/.env"] [unique_id "acmBdanf-DXI9VblHi0VYAAAABc"]
[Mon Mar 30 03:45:57.371267 2026] [:error] [pid 4033:tid 4061] [client 172.69.34.156:13154] [client 172.69.34.156] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env_config"] [unique_id "acmBdanf-DXI9VblHi0VZAAAAAg"]
[Mon Mar 30 03:45:57.395050 2026] [:error] [pid 55884:tid 55970] [client 172.69.33.51:9243] [client 172.69.33.51] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env_secret"] [unique_id "acmBdTjuYLVkve3VbhxcDwAAARE"]
[Mon Mar 30 03:45:57.412027 2026] [:error] [pid 55884:tid 55971] [client 172.69.33.19:13828] [client 172.69.33.19] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env_settings"] [unique_id "acmBdTjuYLVkve3VbhxcEAAAARI"]
[Mon Mar 30 03:45:57.620526 2026] [:error] [pid 4033:tid 4058] [client 172.69.33.25:12416] [client 172.69.33.25] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.local.backup"] [unique_id "acmBdanf-DXI9VblHi0VZwAAAAU"]
[Mon Mar 30 03:46:16.712430 2026] [:error] [pid 4034:tid 4097] [client 172.69.33.51:9491] [client 172.69.33.51] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/root/.env"] [unique_id "acmBiLfAq8eF_uU4gu2BiwAAAFA"]
[Mon Mar 30 09:25:08.646313 2026] [:error] [pid 35250:tid 35332] [client 20.222.18.47:6910] [client 20.222.18.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "acnQ9IaKM1MR6zcp2YNcvQAAANU"]
[Mon Mar 30 09:25:09.128694 2026] [:error] [pid 41941:tid 41951] [client 20.222.18.47:13918] [client 20.222.18.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "acnQ9SB2g7BNCXGBOJNLKAAAAQg"]
[Mon Mar 30 09:25:09.585574 2026] [:error] [pid 35250:tid 35323] [client 20.222.18.47:14229] [client 20.222.18.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "acnQ9YaKM1MR6zcp2YNcvwAAAMw"]
[Mon Mar 30 09:25:10.042762 2026] [:error] [pid 41941:tid 41964] [client 20.222.18.47:8158] [client 20.222.18.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "acnQ9iB2g7BNCXGBOJNLLgAAARU"]
[Mon Mar 30 12:12:17.279961 2026] [:error] [pid 35343:tid 35359] [client 20.196.210.30:4139] [client 20.196.210.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/haha.php"] [unique_id "acn4IaP5HurqmbvwN-J-2gAAAA4"]
[Mon Mar 30 12:12:17.818163 2026] [:error] [pid 64743:tid 64764] [client 20.196.210.30:3575] [client 20.196.210.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/haha.php"] [unique_id "acn4ISzmpVL6Ubzil4hj9QAAAVM"]
[Mon Mar 30 12:12:18.377861 2026] [:error] [pid 35343:tid 35350] [client 20.196.210.30:4126] [client 20.196.210.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/haha.php"] [unique_id "acn4IqP5HurqmbvwN-J-3QAAAAU"]
[Mon Mar 30 12:12:18.948501 2026] [:error] [pid 35343:tid 35353] [client 20.196.210.30:4109] [client 20.196.210.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/haha.php"] [unique_id "acn4IqP5HurqmbvwN-J-4AAAAAg"]
[Mon Mar 30 12:41:27.294380 2026] [:error] [pid 51065:tid 51073] [client 20.222.18.47:4433] [client 20.222.18.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asasx.php"] [unique_id "acn-93Mr8wtZeHSSB7LcXwAAAcY"]
[Mon Mar 30 12:41:27.950489 2026] [:error] [pid 35343:tid 35353] [client 20.222.18.47:2637] [client 20.222.18.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asasx.php"] [unique_id "acn-96P5HurqmbvwN-KPIAAAAAg"]
[Mon Mar 30 12:41:28.579054 2026] [:error] [pid 35249:tid 35291] [client 20.222.18.47:2675] [client 20.222.18.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asasx.php"] [unique_id "acn--CqCKiTq85d6rgApmAAAAIc"]
[Mon Mar 30 12:41:29.145949 2026] [:error] [pid 35250:tid 35329] [client 20.222.18.47:6365] [client 20.222.18.47] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asasx.php"] [unique_id "acn--YaKM1MR6zcp2YPFdAAAANI"]
[Mon Mar 30 23:39:45.877631 2026] [:error] [pid 60746:tid 60782] [client 20.104.195.176:33861] [client 20.104.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wk/index.php"] [unique_id "acqZQZ4kQrgjDdAbQCozAQAAAIY"]
[Mon Mar 30 23:39:46.701369 2026] [:error] [pid 63557:tid 63575] [client 20.104.195.176:33898] [client 20.104.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wk/index.php"] [unique_id "acqZQq4QNVlzYgEvIjnMTQAAARA"]
[Mon Mar 30 23:39:47.520843 2026] [:error] [pid 60747:tid 60817] [client 20.104.195.176:33907] [client 20.104.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wk/index.php"] [unique_id "acqZQwU3IY-cCpy_-zFQyAAAAM4"]
[Mon Mar 30 23:39:48.349309 2026] [:error] [pid 63557:tid 63567] [client 20.104.195.176:33896] [client 20.104.195.176] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wk/index.php"] [unique_id "acqZRK4QNVlzYgEvIjnMVgAAAQg"]
[Tue Mar 31 02:22:27.882188 2026] [:error] [pid 36706:tid 36883] [client 74.248.144.184:3695] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xsas.php"] [unique_id "acq_Y7a-eBLL1E34-UUMgQAAANU"]
[Tue Mar 31 02:22:28.393894 2026] [:error] [pid 36939:tid 36950] [client 74.248.144.184:3685] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xsas.php"] [unique_id "acq_ZMRDKH225Jeq1jdjYgAAAAk"]
[Tue Mar 31 02:22:28.920449 2026] [:error] [pid 36939:tid 36951] [client 74.248.144.184:3690] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xsas.php"] [unique_id "acq_ZMRDKH225Jeq1jdjZAAAAAo"]
[Tue Mar 31 02:22:29.435884 2026] [:error] [pid 36939:tid 36958] [client 74.248.144.184:3649] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xsas.php"] [unique_id "acq_ZcRDKH225Jeq1jdjZgAAABE"]
[Tue Mar 31 02:22:29.955386 2026] [:error] [pid 39123:tid 39125] [client 74.248.144.184:3659] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "acq_ZSobgVY20PMQKVuODAAAAQA"]
[Tue Mar 31 02:22:30.473425 2026] [:error] [pid 36939:tid 36949] [client 74.248.144.184:3673] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "acq_ZsRDKH225Jeq1jdjbgAAAAg"]
[Tue Mar 31 02:22:31.008849 2026] [:error] [pid 36672:tid 36822] [client 74.248.144.184:3668] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "acq_Z7KHDzEfeL3XiLpTIQAAAE8"]
[Tue Mar 31 02:22:31.529345 2026] [:error] [pid 36672:tid 36812] [client 74.248.144.184:3704] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "acq_Z7KHDzEfeL3XiLpTJwAAAEU"]
[Tue Mar 31 02:22:32.048077 2026] [:error] [pid 36672:tid 36831] [client 74.248.144.184:65239] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog-header.php"] [unique_id "acq_aLKHDzEfeL3XiLpTLAAAAFg"]
[Tue Mar 31 02:22:32.569123 2026] [:error] [pid 39123:tid 39141] [client 74.248.144.184:65246] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog-header.php"] [unique_id "acq_aCobgVY20PMQKVuOIAAAARA"]
[Tue Mar 31 02:22:33.079754 2026] [:error] [pid 36939:tid 36960] [client 74.248.144.184:65228] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog-header.php"] [unique_id "acq_acRDKH225Jeq1jdjcwAAABM"]
[Tue Mar 31 02:22:33.590751 2026] [:error] [pid 39123:tid 39128] [client 74.248.144.184:65235] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog-header.php"] [unique_id "acq_aSobgVY20PMQKVuOKgAAAQM"]
[Tue Mar 31 02:22:34.114801 2026] [:error] [pid 39123:tid 39126] [client 74.248.144.184:65225] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asasx.php"] [unique_id "acq_aiobgVY20PMQKVuOMAAAAQE"]
[Tue Mar 31 02:22:34.647117 2026] [:error] [pid 39123:tid 39147] [client 74.248.144.184:3689] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asasx.php"] [unique_id "acq_aiobgVY20PMQKVuONQAAARY"]
[Tue Mar 31 02:22:35.157772 2026] [:error] [pid 36939:tid 36942] [client 74.248.144.184:65223] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asasx.php"] [unique_id "acq_a8RDKH225Jeq1jdjeAAAAAE"]
[Tue Mar 31 02:22:35.678679 2026] [:error] [pid 36939:tid 36946] [client 74.248.144.184:65243] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asasx.php"] [unique_id "acq_a8RDKH225Jeq1jdjeQAAAAU"]
[Tue Mar 31 02:22:36.195790 2026] [:error] [pid 36939:tid 36951] [client 74.248.144.184:3678] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file.php"] [unique_id "acq_bMRDKH225Jeq1jdjewAAAAo"]
[Tue Mar 31 02:22:36.704616 2026] [:error] [pid 36939:tid 36960] [client 74.248.144.184:3657] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file.php"] [unique_id "acq_bMRDKH225Jeq1jdjfwAAABM"]
[Tue Mar 31 02:22:37.214642 2026] [:error] [pid 39123:tid 39128] [client 74.248.144.184:3692] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file.php"] [unique_id "acq_bSobgVY20PMQKVuORQAAAQM"]
[Tue Mar 31 02:22:37.723047 2026] [:error] [pid 39123:tid 39148] [client 74.248.144.184:3711] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file.php"] [unique_id "acq_bSobgVY20PMQKVuOSQAAARc"]
[Tue Mar 31 02:22:38.239575 2026] [:error] [pid 36672:tid 36826] [client 74.248.144.184:65216] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/vx.php"] [unique_id "acq_brKHDzEfeL3XiLpTNgAAAFM"]
[Tue Mar 31 02:22:38.752617 2026] [:error] [pid 36688:tid 36839] [client 74.248.144.184:65230] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/vx.php"] [unique_id "acq_bpIe8NBGKiiCIcIkxgAAAIQ"]
[Tue Mar 31 02:22:39.262463 2026] [:error] [pid 36939:tid 36943] [client 74.248.144.184:65238] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/vx.php"] [unique_id "acq_b8RDKH225Jeq1jdjggAAAAI"]
[Tue Mar 31 02:22:39.776743 2026] [:error] [pid 36939:tid 36946] [client 74.248.144.184:65231] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/vx.php"] [unique_id "acq_b8RDKH225Jeq1jdjhAAAAAU"]
[Tue Mar 31 02:22:40.293481 2026] [:error] [pid 36939:tid 36963] [client 74.248.144.184:3676] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sale.php"] [unique_id "acq_cMRDKH225Jeq1jdjhwAAABY"]
[Tue Mar 31 02:22:40.811920 2026] [:error] [pid 36706:tid 36865] [client 74.248.144.184:3675] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sale.php"] [unique_id "acq_cLa-eBLL1E34-UUMkAAAAMM"]
[Tue Mar 31 02:22:41.323515 2026] [:error] [pid 36688:tid 36840] [client 74.248.144.184:65226] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sale.php"] [unique_id "acq_cZIe8NBGKiiCIcIkzwAAAIU"]
[Tue Mar 31 02:22:41.844696 2026] [:error] [pid 36688:tid 36847] [client 74.248.144.184:3663] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sale.php"] [unique_id "acq_cZIe8NBGKiiCIcIk0gAAAIw"]
[Tue Mar 31 02:22:42.358566 2026] [:error] [pid 36688:tid 36848] [client 74.248.144.184:65270] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "acq_cpIe8NBGKiiCIcIk2AAAAI0"]
[Tue Mar 31 02:22:42.887174 2026] [:error] [pid 36688:tid 36851] [client 74.248.144.184:3648] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "acq_cpIe8NBGKiiCIcIk3QAAAJA"]
[Tue Mar 31 02:22:43.403708 2026] [:error] [pid 36939:tid 36946] [client 74.248.144.184:65229] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "acq_c8RDKH225Jeq1jdjkQAAAAU"]
[Tue Mar 31 02:22:43.921186 2026] [:error] [pid 36706:tid 36874] [client 74.248.144.184:65224] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "acq_c7a-eBLL1E34-UUMmAAAAMw"]
[Tue Mar 31 02:22:44.430706 2026] [:error] [pid 36939:tid 36958] [client 74.248.144.184:65227] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2ksm17n.php"] [unique_id "acq_dMRDKH225Jeq1jdjlAAAABE"]
[Tue Mar 31 02:22:44.941027 2026] [:error] [pid 36706:tid 36865] [client 74.248.144.184:3697] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2ksm17n.php"] [unique_id "acq_dLa-eBLL1E34-UUMngAAAMM"]
[Tue Mar 31 02:22:45.454169 2026] [:error] [pid 36706:tid 36870] [client 74.248.144.184:3667] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2ksm17n.php"] [unique_id "acq_dba-eBLL1E34-UUMoAAAAMg"]
[Tue Mar 31 02:22:45.966171 2026] [:error] [pid 36688:tid 36841] [client 74.248.144.184:3687] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2ksm17n.php"] [unique_id "acq_dZIe8NBGKiiCIcIk4wAAAIY"]
[Tue Mar 31 02:22:46.480905 2026] [:error] [pid 36672:tid 36823] [client 74.248.144.184:65261] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "acq_drKHDzEfeL3XiLpTSAAAAFA"]
[Tue Mar 31 02:22:46.994287 2026] [:error] [pid 36688:tid 36854] [client 74.248.144.184:65278] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "acq_dpIe8NBGKiiCIcIk6QAAAJM"]
[Tue Mar 31 02:22:47.515136 2026] [:error] [pid 36688:tid 36851] [client 74.248.144.184:3653] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "acq_d5Ie8NBGKiiCIcIk6wAAAJA"]
[Tue Mar 31 02:22:48.032639 2026] [:error] [pid 36939:tid 36947] [client 74.248.144.184:65178] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "acq_eMRDKH225Jeq1jdjnwAAAAY"]
[Tue Mar 31 02:22:48.543193 2026] [:error] [pid 36706:tid 36869] [client 74.248.144.184:3680] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hots.php"] [unique_id "acq_eLa-eBLL1E34-UUMqAAAAMc"]
[Tue Mar 31 02:22:49.061576 2026] [:error] [pid 36672:tid 36823] [client 74.248.144.184:3707] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hots.php"] [unique_id "acq_ebKHDzEfeL3XiLpTWwAAAFA"]
[Tue Mar 31 02:22:49.576030 2026] [:error] [pid 36939:tid 36956] [client 74.248.144.184:65220] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hots.php"] [unique_id "acq_ecRDKH225Jeq1jdjpQAAAA8"]
[Tue Mar 31 02:22:50.102069 2026] [:error] [pid 39123:tid 39140] [client 74.248.144.184:3651] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hots.php"] [unique_id "acq_eiobgVY20PMQKVuOZQAAAQ8"]
[Tue Mar 31 02:22:50.615385 2026] [:error] [pid 36688:tid 36848] [client 74.248.144.184:65258] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "acq_epIe8NBGKiiCIcIk8QAAAI0"]
[Tue Mar 31 02:22:51.134179 2026] [:error] [pid 39123:tid 39126] [client 74.248.144.184:65263] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "acq_eyobgVY20PMQKVuOZwAAAQE"]
[Tue Mar 31 02:22:51.646310 2026] [:error] [pid 39123:tid 39138] [client 74.248.144.184:65248] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "acq_eyobgVY20PMQKVuOaQAAAQ0"]
[Tue Mar 31 02:22:52.158005 2026] [:error] [pid 36688:tid 36836] [client 74.248.144.184:3652] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "acq_fJIe8NBGKiiCIcIk_gAAAIE"]
[Tue Mar 31 02:22:52.676835 2026] [:error] [pid 39123:tid 39144] [client 74.248.144.184:3701] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "acq_fCobgVY20PMQKVuOcQAAARM"]
[Tue Mar 31 02:22:53.186951 2026] [:error] [pid 39123:tid 39142] [client 74.248.144.184:3700] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "acq_fSobgVY20PMQKVuOeAAAARE"]
[Tue Mar 31 02:22:53.702752 2026] [:error] [pid 39123:tid 39134] [client 74.248.144.184:65219] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "acq_fSobgVY20PMQKVuOfAAAAQk"]
[Tue Mar 31 02:22:54.221087 2026] [:error] [pid 39123:tid 39148] [client 74.248.144.184:65247] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "acq_fiobgVY20PMQKVuOgQAAARc"]
[Tue Mar 31 02:22:54.740462 2026] [:error] [pid 39123:tid 39134] [client 74.248.144.184:3683] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "acq_fiobgVY20PMQKVuOhwAAAQk"]
[Tue Mar 31 02:22:55.256559 2026] [:error] [pid 36939:tid 36944] [client 74.248.144.184:65222] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "acq_f8RDKH225Jeq1jdjsAAAAAM"]
[Tue Mar 31 02:22:55.765367 2026] [:error] [pid 36688:tid 36855] [client 74.248.144.184:65174] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "acq_f5Ie8NBGKiiCIcIlAQAAAJQ"]
[Tue Mar 31 02:22:56.279316 2026] [:error] [pid 39123:tid 39149] [client 74.248.144.184:3665] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "acq_gCobgVY20PMQKVuOjwAAARg"]
[Tue Mar 31 02:22:56.790732 2026] [:error] [pid 39123:tid 39139] [client 74.248.144.184:65154] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acq_gCobgVY20PMQKVuOkgAAAQ4"]
[Tue Mar 31 02:22:57.312687 2026] [:error] [pid 36939:tid 36947] [client 74.248.144.184:3666] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acq_gcRDKH225Jeq1jdjugAAAAY"]
[Tue Mar 31 02:22:57.827059 2026] [:error] [pid 39123:tid 39144] [client 74.248.144.184:65264] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acq_gSobgVY20PMQKVuOlwAAARM"]
[Tue Mar 31 02:22:58.337799 2026] [:error] [pid 39123:tid 39146] [client 74.248.144.184:3674] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "acq_giobgVY20PMQKVuOmQAAARU"]
[Tue Mar 31 02:22:58.860881 2026] [:error] [pid 39123:tid 39148] [client 74.248.144.184:3709] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "acq_giobgVY20PMQKVuOmwAAARc"]
[Tue Mar 31 02:22:59.383403 2026] [:error] [pid 39123:tid 39142] [client 74.248.144.184:65242] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "acq_gyobgVY20PMQKVuOnwAAARE"]
[Tue Mar 31 02:22:59.916929 2026] [:error] [pid 36706:tid 36877] [client 74.248.144.184:65232] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "acq_g7a-eBLL1E34-UUMvgAAAM8"]
[Tue Mar 31 02:23:00.459966 2026] [:error] [pid 36706:tid 36882] [client 74.248.144.184:3702] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "acq_hLa-eBLL1E34-UUMwQAAANQ"]
[Tue Mar 31 02:23:00.977750 2026] [:error] [pid 36939:tid 36952] [client 74.248.144.184:3658] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "acq_hMRDKH225Jeq1jdjxAAAAAs"]
[Tue Mar 31 02:23:01.496178 2026] [:error] [pid 36706:tid 36884] [client 74.248.144.184:65218] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "acq_hba-eBLL1E34-UUMxAAAANY"]
[Tue Mar 31 02:23:02.010926 2026] [:error] [pid 36939:tid 36957] [client 74.248.144.184:3664] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "acq_hsRDKH225Jeq1jdjyAAAABA"]
[Tue Mar 31 02:23:02.523297 2026] [:error] [pid 36939:tid 36965] [client 74.248.144.184:65249] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "acq_hsRDKH225Jeq1jdjzAAAABg"]
[Tue Mar 31 02:23:03.034413 2026] [:error] [pid 36672:tid 36815] [client 74.248.144.184:3684] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "acq_h7KHDzEfeL3XiLpThgAAAEg"]
[Tue Mar 31 02:23:03.557624 2026] [:error] [pid 36939:tid 36959] [client 74.248.144.184:65251] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "acq_h8RDKH225Jeq1jdj0AAAABI"]
[Tue Mar 31 02:23:04.079651 2026] [:error] [pid 36672:tid 36822] [client 74.248.144.184:65240] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "acq_iLKHDzEfeL3XiLpTjQAAAE8"]
[Tue Mar 31 02:23:04.599091 2026] [:error] [pid 36706:tid 36868] [client 74.248.144.184:3671] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "acq_iLa-eBLL1E34-UUMygAAAMY"]
[Tue Mar 31 02:23:05.127809 2026] [:error] [pid 36706:tid 36885] [client 74.248.144.184:3670] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws83.php"] [unique_id "acq_iba-eBLL1E34-UUMzwAAANc"]
[Tue Mar 31 02:23:05.640269 2026] [:error] [pid 36706:tid 36870] [client 74.248.144.184:65259] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws83.php"] [unique_id "acq_iba-eBLL1E34-UUM1AAAAMg"]
[Tue Mar 31 02:23:06.163946 2026] [:error] [pid 36706:tid 36886] [client 74.248.144.184:3703] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws83.php"] [unique_id "acq_ira-eBLL1E34-UUM2AAAANg"]
[Tue Mar 31 02:23:06.700538 2026] [:error] [pid 39123:tid 39131] [client 74.248.144.184:3661] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws83.php"] [unique_id "acq_iiobgVY20PMQKVuOrQAAAQY"]
[Tue Mar 31 02:23:07.211713 2026] [:error] [pid 39123:tid 39148] [client 74.248.144.184:3706] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/56c53.php"] [unique_id "acq_iyobgVY20PMQKVuOsAAAARc"]
[Tue Mar 31 02:23:07.722536 2026] [:error] [pid 39123:tid 39142] [client 74.248.144.184:65157] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/56c53.php"] [unique_id "acq_iyobgVY20PMQKVuOsgAAARE"]
[Tue Mar 31 02:23:08.244553 2026] [:error] [pid 36672:tid 36812] [client 74.248.144.184:3696] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/56c53.php"] [unique_id "acq_jLKHDzEfeL3XiLpTqAAAAEU"]
[Tue Mar 31 02:23:08.776649 2026] [:error] [pid 36706:tid 36883] [client 74.248.144.184:3686] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/56c53.php"] [unique_id "acq_jLa-eBLL1E34-UUM5gAAANU"]
[Tue Mar 31 02:23:09.347716 2026] [:error] [pid 36672:tid 36812] [client 74.248.144.184:65241] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "acq_jbKHDzEfeL3XiLpTrwAAAEU"]
[Tue Mar 31 02:23:09.865409 2026] [:error] [pid 39123:tid 39143] [client 74.248.144.184:65201] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "acq_jSobgVY20PMQKVuOwwAAARI"]
[Tue Mar 31 02:23:10.405195 2026] [:error] [pid 39123:tid 39140] [client 74.248.144.184:65274] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "acq_jiobgVY20PMQKVuOxAAAAQ8"]
[Tue Mar 31 02:23:10.916987 2026] [:error] [pid 36939:tid 36941] [client 74.248.144.184:65245] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "acq_jsRDKH225Jeq1jdj4AAAAAA"]
[Tue Mar 31 02:23:11.434020 2026] [:error] [pid 36672:tid 36816] [client 74.248.144.184:65186] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "acq_j7KHDzEfeL3XiLpTvwAAAEk"]
[Tue Mar 31 02:23:11.945133 2026] [:error] [pid 36672:tid 36830] [client 74.248.144.184:65260] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "acq_j7KHDzEfeL3XiLpTwQAAAFc"]
[Tue Mar 31 02:23:12.474375 2026] [:error] [pid 36688:tid 36855] [client 74.248.144.184:65221] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "acq_kJIe8NBGKiiCIcIlCAAAAJQ"]
[Tue Mar 31 02:23:12.984813 2026] [:error] [pid 36939:tid 36961] [client 74.248.144.184:65265] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "acq_kMRDKH225Jeq1jdj6wAAABQ"]
[Tue Mar 31 02:23:13.514060 2026] [:error] [pid 39123:tid 39137] [client 74.248.144.184:65153] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mh.php"] [unique_id "acq_kSobgVY20PMQKVuOzwAAAQw"]
[Tue Mar 31 02:23:14.040640 2026] [:error] [pid 36939:tid 36947] [client 74.248.144.184:3681] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mh.php"] [unique_id "acq_ksRDKH225Jeq1jdj8AAAAAY"]
[Tue Mar 31 02:23:14.632290 2026] [:error] [pid 39123:tid 39149] [client 74.248.144.184:4045] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mh.php"] [unique_id "acq_kiobgVY20PMQKVuO2gAAARg"]
[Tue Mar 31 02:23:15.163796 2026] [:error] [pid 39123:tid 39126] [client 74.248.144.184:65275] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mh.php"] [unique_id "acq_kyobgVY20PMQKVuO3wAAAQE"]
[Tue Mar 31 02:23:15.688302 2026] [:error] [pid 36688:tid 36856] [client 74.248.144.184:65172] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bo.php"] [unique_id "acq_k5Ie8NBGKiiCIcIlCQAAAJU"]
[Tue Mar 31 02:23:16.274807 2026] [:error] [pid 36672:tid 36825] [client 74.248.144.184:65191] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bo.php"] [unique_id "acq_lLKHDzEfeL3XiLpTxgAAAFI"]
[Tue Mar 31 02:23:16.803400 2026] [:error] [pid 39123:tid 39134] [client 74.248.144.184:4036] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bo.php"] [unique_id "acq_lCobgVY20PMQKVuO7gAAAQk"]
[Tue Mar 31 02:23:17.334898 2026] [:error] [pid 39123:tid 39141] [client 74.248.144.184:65244] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bo.php"] [unique_id "acq_lSobgVY20PMQKVuO9gAAARA"]
[Tue Mar 31 02:23:17.843535 2026] [:error] [pid 39123:tid 39149] [client 74.248.144.184:65194] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/5b9ac.php"] [unique_id "acq_lSobgVY20PMQKVuO-QAAARg"]
[Tue Mar 31 02:23:18.354485 2026] [:error] [pid 39123:tid 39134] [client 74.248.144.184:65277] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/5b9ac.php"] [unique_id "acq_liobgVY20PMQKVuO_QAAAQk"]
[Tue Mar 31 02:23:18.865378 2026] [:error] [pid 39123:tid 39148] [client 74.248.144.184:4076] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/5b9ac.php"] [unique_id "acq_liobgVY20PMQKVuPAAAAARc"]
[Tue Mar 31 02:23:19.376674 2026] [:error] [pid 39123:tid 39127] [client 74.248.144.184:65234] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/5b9ac.php"] [unique_id "acq_lyobgVY20PMQKVuPBgAAAQI"]
[Tue Mar 31 02:23:19.908974 2026] [:error] [pid 36672:tid 36814] [client 74.248.144.184:3698] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "acq_l7KHDzEfeL3XiLpTzgAAAEc"]
[Tue Mar 31 02:23:20.431016 2026] [:error] [pid 36706:tid 36877] [client 74.248.144.184:3691] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "acq_mLa-eBLL1E34-UUNAQAAAM8"]
[Tue Mar 31 02:23:20.951029 2026] [:error] [pid 36688:tid 36858] [client 74.248.144.184:65250] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "acq_mJIe8NBGKiiCIcIlDwAAAJc"]
[Tue Mar 31 02:23:21.473337 2026] [:error] [pid 36706:tid 36872] [client 74.248.144.184:65233] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "acq_mba-eBLL1E34-UUNBwAAAMo"]
[Tue Mar 31 02:23:22.014719 2026] [:error] [pid 36706:tid 36865] [client 74.248.144.184:4033] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "acq_mra-eBLL1E34-UUNCgAAAMM"]
[Tue Mar 31 02:23:22.554631 2026] [:error] [pid 36706:tid 36879] [client 74.248.144.184:65252] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "acq_mra-eBLL1E34-UUNDgAAANE"]
[Tue Mar 31 02:23:23.068431 2026] [:error] [pid 36706:tid 36883] [client 74.248.144.184:65256] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "acq_m7a-eBLL1E34-UUNFgAAANU"]
[Tue Mar 31 02:23:23.602547 2026] [:error] [pid 36688:tid 36846] [client 74.248.144.184:3677] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "acq_m5Ie8NBGKiiCIcIlEgAAAIs"]
[Tue Mar 31 02:23:24.131952 2026] [:error] [pid 36688:tid 36843] [client 74.248.144.184:3662] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "acq_nJIe8NBGKiiCIcIlFAAAAIg"]
[Tue Mar 31 02:23:24.662425 2026] [:error] [pid 39123:tid 39128] [client 74.248.144.184:65163] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "acq_nCobgVY20PMQKVuPDgAAAQM"]
[Tue Mar 31 02:23:25.181617 2026] [:error] [pid 36672:tid 36810] [client 74.248.144.184:65181] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "acq_nbKHDzEfeL3XiLpT3gAAAEM"]
[Tue Mar 31 02:23:25.717539 2026] [:error] [pid 36672:tid 36809] [client 74.248.144.184:3688] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "acq_nbKHDzEfeL3XiLpT4gAAAEI"]
[Tue Mar 31 02:23:26.236490 2026] [:error] [pid 36672:tid 36827] [client 74.248.144.184:4071] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx78.php"] [unique_id "acq_nrKHDzEfeL3XiLpT5QAAAFQ"]
[Tue Mar 31 02:23:26.797581 2026] [:error] [pid 39123:tid 39147] [client 74.248.144.184:65276] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx78.php"] [unique_id "acq_niobgVY20PMQKVuPEwAAARY"]
[Tue Mar 31 02:23:34.067728 2026] [:error] [pid 36706:tid 36871] [client 74.248.144.184:3669] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abrand.php"] [unique_id "acq_pra-eBLL1E34-UUNPAAAAMk"]
[Tue Mar 31 02:23:34.672445 2026] [:error] [pid 39123:tid 39130] [client 74.248.144.184:4041] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abrand.php"] [unique_id "acq_piobgVY20PMQKVuPKQAAAQU"]
[Tue Mar 31 02:23:35.206807 2026] [:error] [pid 36706:tid 36862] [client 74.248.144.184:65269] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abrand.php"] [unique_id "acq_p7a-eBLL1E34-UUNPQAAAMA"]
[Tue Mar 31 02:23:35.765809 2026] [:error] [pid 36672:tid 36808] [client 74.248.144.184:3705] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abrand.php"] [unique_id "acq_p7KHDzEfeL3XiLpUEAAAAEE"]
[Tue Mar 31 02:23:36.341698 2026] [:error] [pid 36706:tid 36883] [client 74.248.144.184:65169] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amp.php"] [unique_id "acq_qLa-eBLL1E34-UUNQAAAANU"]
[Tue Mar 31 02:23:36.869984 2026] [:error] [pid 36939:tid 36947] [client 74.248.144.184:3655] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amp.php"] [unique_id "acq_qMRDKH225Jeq1jdkNAAAAAY"]
[Tue Mar 31 02:23:37.406994 2026] [:error] [pid 36706:tid 36886] [client 74.248.144.184:65262] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amp.php"] [unique_id "acq_qba-eBLL1E34-UUNRgAAANg"]
[Tue Mar 31 02:23:37.925017 2026] [:error] [pid 36688:tid 36845] [client 74.248.144.184:65266] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amp.php"] [unique_id "acq_qZIe8NBGKiiCIcIlSgAAAIo"]
[Tue Mar 31 02:23:38.438755 2026] [:error] [pid 36706:tid 36879] [client 74.248.144.184:65237] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws75.php"] [unique_id "acq_qra-eBLL1E34-UUNSAAAANE"]
[Tue Mar 31 02:23:38.956171 2026] [:error] [pid 36939:tid 36945] [client 74.248.144.184:65273] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws75.php"] [unique_id "acq_qsRDKH225Jeq1jdkOAAAAAQ"]
[Tue Mar 31 02:23:39.469896 2026] [:error] [pid 36939:tid 36955] [client 74.248.144.184:65158] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws75.php"] [unique_id "acq_q8RDKH225Jeq1jdkOwAAAA4"]
[Tue Mar 31 02:23:39.984052 2026] [:error] [pid 36672:tid 36823] [client 74.248.144.184:65268] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws75.php"] [unique_id "acq_q7KHDzEfeL3XiLpUNwAAAFA"]
[Tue Mar 31 02:23:40.494691 2026] [:error] [pid 36688:tid 36839] [client 74.248.144.184:65193] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/install.php"] [unique_id "acq_rJIe8NBGKiiCIcIlWAAAAIQ"]
[Tue Mar 31 02:23:41.006068 2026] [:error] [pid 36706:tid 36868] [client 74.248.144.184:4063] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/install.php"] [unique_id "acq_rba-eBLL1E34-UUNTQAAAMY"]
[Tue Mar 31 02:23:41.522004 2026] [:error] [pid 36939:tid 36951] [client 74.248.144.184:4043] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/install.php"] [unique_id "acq_rcRDKH225Jeq1jdkPwAAAAo"]
[Tue Mar 31 02:23:42.044145 2026] [:error] [pid 36672:tid 36810] [client 74.248.144.184:3682] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/install.php"] [unique_id "acq_rrKHDzEfeL3XiLpUTgAAAEM"]
[Tue Mar 31 02:23:42.554446 2026] [:error] [pid 36688:tid 36857] [client 74.248.144.184:65204] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/maul.php"] [unique_id "acq_rpIe8NBGKiiCIcIlZAAAAJY"]
[Tue Mar 31 02:23:43.068581 2026] [:error] [pid 39123:tid 39136] [client 74.248.144.184:65183] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/maul.php"] [unique_id "acq_ryobgVY20PMQKVuPOwAAAQs"]
[Tue Mar 31 02:23:43.582392 2026] [:error] [pid 39123:tid 39137] [client 74.248.144.184:65207] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/maul.php"] [unique_id "acq_ryobgVY20PMQKVuPQgAAAQw"]
[Tue Mar 31 02:23:44.094401 2026] [:error] [pid 39123:tid 39130] [client 74.248.144.184:65165] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/maul.php"] [unique_id "acq_sCobgVY20PMQKVuPRwAAAQU"]
[Tue Mar 31 02:23:44.629940 2026] [:error] [pid 39123:tid 39136] [client 74.248.144.184:65272] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lowpr.php"] [unique_id "acq_sCobgVY20PMQKVuPSQAAAQs"]
[Tue Mar 31 02:23:45.142456 2026] [:error] [pid 39123:tid 39141] [client 74.248.144.184:65173] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lowpr.php"] [unique_id "acq_sSobgVY20PMQKVuPTQAAARA"]
[Tue Mar 31 02:23:45.657837 2026] [:error] [pid 36688:tid 36843] [client 74.248.144.184:3679] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lowpr.php"] [unique_id "acq_sZIe8NBGKiiCIcIlZwAAAIg"]
[Tue Mar 31 02:23:46.168773 2026] [:error] [pid 36939:tid 36950] [client 74.248.144.184:3699] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lowpr.php"] [unique_id "acq_ssRDKH225Jeq1jdkTQAAAAk"]
[Tue Mar 31 02:23:46.681531 2026] [:error] [pid 39123:tid 39145] [client 74.248.144.184:65155] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/b.php"] [unique_id "acq_siobgVY20PMQKVuPWgAAARQ"]
[Tue Mar 31 02:23:47.194370 2026] [:error] [pid 39123:tid 39146] [client 74.248.144.184:65202] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/b.php"] [unique_id "acq_syobgVY20PMQKVuPXAAAARU"]
[Tue Mar 31 02:23:47.707417 2026] [:error] [pid 36939:tid 36959] [client 74.248.144.184:3660] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/b.php"] [unique_id "acq_s8RDKH225Jeq1jdkTwAAABI"]
[Tue Mar 31 02:23:48.236889 2026] [:error] [pid 39123:tid 39125] [client 74.248.144.184:65167] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/b.php"] [unique_id "acq_tCobgVY20PMQKVuPYAAAAQA"]
[Tue Mar 31 02:23:48.756335 2026] [:error] [pid 39123:tid 39147] [client 74.248.144.184:4067] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "acq_tCobgVY20PMQKVuPYgAAARY"]
[Tue Mar 31 02:23:49.270063 2026] [:error] [pid 36688:tid 36845] [client 74.248.144.184:4037] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "acq_tZIe8NBGKiiCIcIldQAAAIo"]
[Tue Mar 31 02:23:49.783534 2026] [:error] [pid 36688:tid 36840] [client 74.248.144.184:4038] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "acq_tZIe8NBGKiiCIcIleAAAAIU"]
[Tue Mar 31 02:23:50.334803 2026] [:error] [pid 36939:tid 36942] [client 74.248.144.184:65211] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "acq_tsRDKH225Jeq1jdkUgAAAAE"]
[Tue Mar 31 02:23:50.891651 2026] [:error] [pid 36939:tid 36952] [client 74.248.144.184:4047] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/domains.php"] [unique_id "acq_tsRDKH225Jeq1jdkVAAAAAs"]
[Tue Mar 31 02:23:51.429205 2026] [:error] [pid 39123:tid 39140] [client 74.248.144.184:3974] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/domains.php"] [unique_id "acq_tyobgVY20PMQKVuPdwAAAQ8"]
[Tue Mar 31 02:23:51.948484 2026] [:error] [pid 36706:tid 36880] [client 74.248.144.184:3975] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/domains.php"] [unique_id "acq_t7a-eBLL1E34-UUNawAAANI"]
[Tue Mar 31 02:23:52.479108 2026] [:error] [pid 36688:tid 36841] [client 74.248.144.184:4093] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/domains.php"] [unique_id "acq_uJIe8NBGKiiCIcIlfAAAAIY"]
[Tue Mar 31 02:23:52.993617 2026] [:error] [pid 36688:tid 36837] [client 74.248.144.184:65209] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "acq_uJIe8NBGKiiCIcIlgAAAAII"]
[Tue Mar 31 02:23:53.526757 2026] [:error] [pid 36688:tid 36843] [client 74.248.144.184:4050] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "acq_uZIe8NBGKiiCIcIlgwAAAIg"]
[Tue Mar 31 02:23:54.045647 2026] [:error] [pid 36939:tid 36944] [client 74.248.144.184:65170] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "acq_usRDKH225Jeq1jdkWQAAAAM"]
[Tue Mar 31 02:23:54.562085 2026] [:error] [pid 36688:tid 36841] [client 74.248.144.184:3656] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "acq_upIe8NBGKiiCIcIliAAAAIY"]
[Tue Mar 31 02:23:55.075811 2026] [:error] [pid 36939:tid 36964] [client 74.248.144.184:65200] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "acq_u8RDKH225Jeq1jdkWgAAABc"]
[Tue Mar 31 02:23:55.586405 2026] [:error] [pid 36706:tid 36863] [client 74.248.144.184:4006] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "acq_u7a-eBLL1E34-UUNcgAAAME"]
[Tue Mar 31 02:23:56.099386 2026] [:error] [pid 39123:tid 39135] [client 74.248.144.184:65176] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "acq_vCobgVY20PMQKVuPjQAAAQo"]
[Tue Mar 31 02:23:56.628429 2026] [:error] [pid 39123:tid 39127] [client 74.248.144.184:3998] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "acq_vCobgVY20PMQKVuPkgAAAQI"]
[Tue Mar 31 02:23:57.142535 2026] [:error] [pid 36939:tid 36952] [client 74.248.144.184:65187] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hehe.php"] [unique_id "acq_vcRDKH225Jeq1jdkYQAAAAs"]
[Tue Mar 31 02:23:57.661502 2026] [:error] [pid 36939:tid 36961] [client 74.248.144.184:4062] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hehe.php"] [unique_id "acq_vcRDKH225Jeq1jdkYgAAABQ"]
[Tue Mar 31 02:23:58.170584 2026] [:error] [pid 36672:tid 36821] [client 74.248.144.184:65190] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hehe.php"] [unique_id "acq_vrKHDzEfeL3XiLpUigAAAE4"]
[Tue Mar 31 02:23:58.706854 2026] [:error] [pid 36688:tid 36852] [client 74.248.144.184:4059] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hehe.php"] [unique_id "acq_vpIe8NBGKiiCIcIlkwAAAJE"]
[Tue Mar 31 02:23:59.219597 2026] [:error] [pid 36688:tid 36841] [client 74.248.144.184:3694] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tfm.php"] [unique_id "acq_v5Ie8NBGKiiCIcIllwAAAIY"]
[Tue Mar 31 02:23:59.746162 2026] [:error] [pid 36939:tid 36944] [client 74.248.144.184:65236] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tfm.php"] [unique_id "acq_v8RDKH225Jeq1jdkZgAAAAM"]
[Tue Mar 31 02:24:00.258822 2026] [:error] [pid 36939:tid 36964] [client 74.248.144.184:65161] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tfm.php"] [unique_id "acq_wMRDKH225Jeq1jdkZwAAABc"]
[Tue Mar 31 02:24:00.815090 2026] [:error] [pid 36706:tid 36875] [client 74.248.144.184:4094] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tfm.php"] [unique_id "acq_wLa-eBLL1E34-UUNewAAAM0"]
[Tue Mar 31 02:24:01.373298 2026] [:error] [pid 39123:tid 39138] [client 74.248.144.184:65271] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ne2026.php"] [unique_id "acq_wSobgVY20PMQKVuPsQAAAQ0"]
[Tue Mar 31 02:24:01.892945 2026] [:error] [pid 36939:tid 36965] [client 74.248.144.184:65195] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ne2026.php"] [unique_id "acq_wcRDKH225Jeq1jdkbAAAABg"]
[Tue Mar 31 02:24:02.424570 2026] [:error] [pid 36939:tid 36961] [client 74.248.144.184:65156] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ne2026.php"] [unique_id "acq_wsRDKH225Jeq1jdkcAAAABQ"]
[Tue Mar 31 02:24:02.936882 2026] [:error] [pid 36672:tid 36807] [client 74.248.144.184:65213] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ne2026.php"] [unique_id "acq_wrKHDzEfeL3XiLpUjwAAAEA"]
[Tue Mar 31 02:24:03.470481 2026] [:error] [pid 36706:tid 36862] [client 74.248.144.184:4055] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws73.php"] [unique_id "acq_w7a-eBLL1E34-UUNfgAAAMA"]
[Tue Mar 31 02:24:03.989075 2026] [:error] [pid 36706:tid 36864] [client 74.248.144.184:3985] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws73.php"] [unique_id "acq_w7a-eBLL1E34-UUNfwAAAMI"]
[Tue Mar 31 02:24:04.520592 2026] [:error] [pid 36939:tid 36945] [client 74.248.144.184:4088] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws73.php"] [unique_id "acq_xMRDKH225Jeq1jdkegAAAAQ"]
[Tue Mar 31 02:24:05.032337 2026] [:error] [pid 36672:tid 36822] [client 74.248.144.184:65197] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws73.php"] [unique_id "acq_xbKHDzEfeL3XiLpUlAAAAE8"]
[Tue Mar 31 02:24:05.563602 2026] [:error] [pid 36672:tid 36830] [client 74.248.144.184:3710] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "acq_xbKHDzEfeL3XiLpUlgAAAFc"]
[Tue Mar 31 02:24:06.078149 2026] [:error] [pid 36672:tid 36823] [client 74.248.144.184:3708] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "acq_xrKHDzEfeL3XiLpUmAAAAFA"]
[Tue Mar 31 02:24:06.589110 2026] [:error] [pid 39123:tid 39127] [client 74.248.144.184:3693] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "acq_xiobgVY20PMQKVuPvgAAAQI"]
[Tue Mar 31 02:24:07.109798 2026] [:error] [pid 36939:tid 36947] [client 74.248.144.184:3991] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "acq_x8RDKH225Jeq1jdkfgAAAAY"]
[Tue Mar 31 02:24:07.622704 2026] [:error] [pid 36672:tid 36828] [client 74.248.144.184:4089] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/baixy.php"] [unique_id "acq_x7KHDzEfeL3XiLpUnAAAAFU"]
[Tue Mar 31 02:24:08.139746 2026] [:error] [pid 39123:tid 39130] [client 74.248.144.184:4058] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/baixy.php"] [unique_id "acq_yCobgVY20PMQKVuPwAAAAQU"]
[Tue Mar 31 02:24:08.654953 2026] [:error] [pid 36688:tid 36847] [client 74.248.144.184:4039] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/baixy.php"] [unique_id "acq_yJIe8NBGKiiCIcIltwAAAIw"]
[Tue Mar 31 02:24:09.173343 2026] [:error] [pid 36688:tid 36842] [client 74.248.144.184:65182] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/baixy.php"] [unique_id "acq_yZIe8NBGKiiCIcIlvQAAAIc"]
[Tue Mar 31 02:24:09.696379 2026] [:error] [pid 39123:tid 39138] [client 74.248.144.184:65255] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "acq_ySobgVY20PMQKVuPxAAAAQ0"]
[Tue Mar 31 02:24:10.219940 2026] [:error] [pid 39123:tid 39143] [client 74.248.144.184:65254] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "acq_yiobgVY20PMQKVuPyQAAARI"]
[Tue Mar 31 02:24:10.735948 2026] [:error] [pid 36688:tid 36842] [client 74.248.144.184:65253] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "acq_ypIe8NBGKiiCIcIlwwAAAIc"]
[Tue Mar 31 02:24:11.264122 2026] [:error] [pid 36706:tid 36886] [client 74.248.144.184:65168] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "acq_y7a-eBLL1E34-UUNiAAAANg"]
[Tue Mar 31 02:24:11.776690 2026] [:error] [pid 39123:tid 39134] [client 74.248.144.184:3672] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "acq_yyobgVY20PMQKVuP0QAAAQk"]
[Tue Mar 31 02:24:12.307471 2026] [:error] [pid 36706:tid 36863] [client 74.248.144.184:4051] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "acq_zLa-eBLL1E34-UUNjwAAAME"]
[Tue Mar 31 02:24:12.827501 2026] [:error] [pid 36939:tid 36946] [client 74.248.144.184:65164] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "acq_zMRDKH225Jeq1jdkggAAAAU"]
[Tue Mar 31 02:24:13.342739 2026] [:error] [pid 36939:tid 36945] [client 74.248.144.184:65279] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "acq_zcRDKH225Jeq1jdkgwAAAAQ"]
[Tue Mar 31 02:24:13.858420 2026] [:error] [pid 36672:tid 36811] [client 74.248.144.184:65152] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws77.php"] [unique_id "acq_zbKHDzEfeL3XiLpUqQAAAEQ"]
[Tue Mar 31 02:24:14.371133 2026] [:error] [pid 36706:tid 36883] [client 74.248.144.184:3969] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws77.php"] [unique_id "acq_zra-eBLL1E34-UUNlQAAANU"]
[Tue Mar 31 02:24:14.886640 2026] [:error] [pid 36672:tid 36816] [client 74.248.144.184:65196] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws77.php"] [unique_id "acq_zrKHDzEfeL3XiLpUrAAAAEk"]
[Tue Mar 31 02:24:15.399105 2026] [:error] [pid 36672:tid 36817] [client 74.248.144.184:65215] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws77.php"] [unique_id "acq_z7KHDzEfeL3XiLpUrgAAAEo"]
[Tue Mar 31 02:24:15.921297 2026] [:error] [pid 39123:tid 39133] [client 74.248.144.184:65159] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "acq_zyobgVY20PMQKVuP3QAAAQg"]
[Tue Mar 31 02:24:16.433896 2026] [:error] [pid 36706:tid 36870] [client 74.248.144.184:4053] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "acq_0La-eBLL1E34-UUNmwAAAMg"]
[Tue Mar 31 02:24:16.969403 2026] [:error] [pid 39123:tid 39144] [client 74.248.144.184:65198] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "acq_0CobgVY20PMQKVuP4QAAARM"]
[Tue Mar 31 02:24:17.483431 2026] [:error] [pid 39123:tid 39143] [client 74.248.144.184:4057] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "acq_0SobgVY20PMQKVuP5gAAARI"]
[Tue Mar 31 02:24:18.002435 2026] [:error] [pid 39123:tid 39126] [client 74.248.144.184:65185] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5e0a.php"] [unique_id "acq_0iobgVY20PMQKVuP7AAAAQE"]
[Tue Mar 31 02:24:18.514357 2026] [:error] [pid 39123:tid 39128] [client 74.248.144.184:4060] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5e0a.php"] [unique_id "acq_0iobgVY20PMQKVuP8wAAAQM"]
[Tue Mar 31 02:24:19.026405 2026] [:error] [pid 39123:tid 39132] [client 74.248.144.184:3913] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5e0a.php"] [unique_id "acq_0yobgVY20PMQKVuP-AAAAQc"]
[Tue Mar 31 02:24:19.545775 2026] [:error] [pid 39123:tid 39147] [client 74.248.144.184:4008] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5e0a.php"] [unique_id "acq_0yobgVY20PMQKVuQAAAAARY"]
[Tue Mar 31 02:24:20.057882 2026] [:error] [pid 39123:tid 39141] [client 74.248.144.184:65180] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/term.php"] [unique_id "acq_1CobgVY20PMQKVuQBwAAARA"]
[Tue Mar 31 02:24:20.575760 2026] [:error] [pid 39123:tid 39128] [client 74.248.144.184:4068] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/term.php"] [unique_id "acq_1CobgVY20PMQKVuQDAAAAQM"]
[Tue Mar 31 02:24:21.096503 2026] [:error] [pid 39123:tid 39146] [client 74.248.144.184:4092] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/term.php"] [unique_id "acq_1SobgVY20PMQKVuQEQAAARU"]
[Tue Mar 31 02:24:21.607657 2026] [:error] [pid 36939:tid 36952] [client 74.248.144.184:4064] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/term.php"] [unique_id "acq_1cRDKH225Jeq1jdkoAAAAAs"]
[Tue Mar 31 02:24:22.143352 2026] [:error] [pid 39123:tid 39139] [client 74.248.144.184:65175] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "acq_1iobgVY20PMQKVuQHAAAAQ4"]
[Tue Mar 31 02:24:22.658719 2026] [:error] [pid 36688:tid 36846] [client 74.248.144.184:4040] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "acq_1pIe8NBGKiiCIcIl0gAAAIs"]
[Tue Mar 31 02:24:23.172507 2026] [:error] [pid 36706:tid 36878] [client 74.248.144.184:65267] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "acq_17a-eBLL1E34-UUNowAAANA"]
[Tue Mar 31 02:24:23.684311 2026] [:error] [pid 39123:tid 39135] [client 74.248.144.184:65179] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "acq_1yobgVY20PMQKVuQKwAAAQo"]
[Tue Mar 31 02:24:24.194897 2026] [:error] [pid 39123:tid 39134] [client 74.248.144.184:4075] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/55b76.php"] [unique_id "acq_2CobgVY20PMQKVuQMAAAAQk"]
[Tue Mar 31 02:24:24.708593 2026] [:error] [pid 36688:tid 36837] [client 74.248.144.184:65277] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/55b76.php"] [unique_id "acq_2JIe8NBGKiiCIcIl1QAAAII"]
[Tue Mar 31 02:24:25.282888 2026] [:error] [pid 36706:tid 36868] [client 74.248.144.184:3979] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/55b76.php"] [unique_id "acq_2ba-eBLL1E34-UUNpwAAAMY"]
[Tue Mar 31 02:24:25.798412 2026] [:error] [pid 36688:tid 36851] [client 74.248.144.184:65203] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/55b76.php"] [unique_id "acq_2ZIe8NBGKiiCIcIl2QAAAJA"]
[Tue Mar 31 02:24:26.332353 2026] [:error] [pid 36706:tid 36873] [client 74.248.144.184:4014] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asd.php"] [unique_id "acq_2ra-eBLL1E34-UUNrQAAAMs"]
[Tue Mar 31 02:24:26.845731 2026] [:error] [pid 36939:tid 36960] [client 74.248.144.184:4018] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asd.php"] [unique_id "acq_2sRDKH225Jeq1jdkvwAAABM"]
[Tue Mar 31 02:24:27.379332 2026] [:error] [pid 36939:tid 36957] [client 74.248.144.184:65205] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asd.php"] [unique_id "acq_28RDKH225Jeq1jdkwwAAABA"]
[Tue Mar 31 02:24:27.890355 2026] [:error] [pid 36688:tid 36848] [client 74.248.144.184:4032] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asd.php"] [unique_id "acq_25Ie8NBGKiiCIcIl4AAAAI0"]
[Tue Mar 31 02:24:28.416860 2026] [:error] [pid 39123:tid 39142] [client 74.248.144.184:65199] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "acq_3CobgVY20PMQKVuQRgAAARE"]
[Tue Mar 31 02:24:28.934968 2026] [:error] [pid 36706:tid 36883] [client 74.248.144.184:65177] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "acq_3La-eBLL1E34-UUNuQAAANU"]
[Tue Mar 31 02:24:29.484680 2026] [:error] [pid 36706:tid 36881] [client 74.248.144.184:3657] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "acq_3ba-eBLL1E34-UUNugAAANM"]
[Tue Mar 31 02:24:29.995748 2026] [:error] [pid 36706:tid 36880] [client 74.248.144.184:4052] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "acq_3ba-eBLL1E34-UUNvAAAANI"]
[Tue Mar 31 02:24:30.529813 2026] [:error] [pid 39123:tid 39143] [client 74.248.144.184:3999] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "acq_3iobgVY20PMQKVuQTQAAARI"]
[Tue Mar 31 02:24:31.044948 2026] [:error] [pid 39123:tid 39136] [client 74.248.144.184:4035] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "acq_3yobgVY20PMQKVuQUgAAAQs"]
[Tue Mar 31 02:24:31.574890 2026] [:error] [pid 36939:tid 36950] [client 74.248.144.184:4087] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "acq_38RDKH225Jeq1jdk6gAAAAk"]
[Tue Mar 31 02:24:32.120816 2026] [:error] [pid 36706:tid 36876] [client 74.248.144.184:3968] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "acq_4La-eBLL1E34-UUNwgAAAM4"]
[Tue Mar 31 02:24:32.656477 2026] [:error] [pid 36706:tid 36882] [client 74.248.144.184:65210] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "acq_4La-eBLL1E34-UUNwwAAANQ"]
[Tue Mar 31 02:24:39.963848 2026] [:error] [pid 36706:tid 36866] [client 74.248.144.184:4005] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "acq_57a-eBLL1E34-UUN4wAAAMQ"]
[Tue Mar 31 02:24:40.487602 2026] [:error] [pid 36939:tid 36961] [client 74.248.144.184:4000] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "acq_6MRDKH225Jeq1jdlFgAAABQ"]
[Tue Mar 31 02:24:41.005308 2026] [:error] [pid 36688:tid 36840] [client 74.248.144.184:4042] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "acq_6ZIe8NBGKiiCIcImBAAAAIU"]
[Tue Mar 31 02:24:41.523394 2026] [:error] [pid 36688:tid 36852] [client 74.248.144.184:4061] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "acq_6ZIe8NBGKiiCIcImBgAAAJE"]
[Tue Mar 31 02:24:42.036016 2026] [:error] [pid 36688:tid 36836] [client 74.248.144.184:4044] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ccs.php"] [unique_id "acq_6pIe8NBGKiiCIcImCAAAAIE"]
[Tue Mar 31 02:24:42.551943 2026] [:error] [pid 36706:tid 36885] [client 74.248.144.184:3928] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ccs.php"] [unique_id "acq_6ra-eBLL1E34-UUN6AAAANc"]
[Tue Mar 31 02:24:43.063513 2026] [:error] [pid 36706:tid 36862] [client 74.248.144.184:3971] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ccs.php"] [unique_id "acq_67a-eBLL1E34-UUN7gAAAMA"]
[Tue Mar 31 02:24:43.580387 2026] [:error] [pid 36706:tid 36866] [client 74.248.144.184:4002] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ccs.php"] [unique_id "acq_67a-eBLL1E34-UUN9AAAAMQ"]
[Tue Mar 31 02:24:44.096716 2026] [:error] [pid 36706:tid 36885] [client 74.248.144.184:4070] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/clss.php"] [unique_id "acq_7La-eBLL1E34-UUN9gAAANc"]
[Tue Mar 31 02:24:44.640974 2026] [:error] [pid 36939:tid 36964] [client 74.248.144.184:3995] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/clss.php"] [unique_id "acq_7MRDKH225Jeq1jdlLwAAABc"]
[Tue Mar 31 02:24:45.154690 2026] [:error] [pid 36939:tid 36944] [client 74.248.144.184:4079] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/clss.php"] [unique_id "acq_7cRDKH225Jeq1jdlMwAAAAM"]
[Tue Mar 31 02:24:45.710054 2026] [:error] [pid 36706:tid 36886] [client 74.248.144.184:4054] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/clss.php"] [unique_id "acq_7ba-eBLL1E34-UUN_AAAANg"]
[Tue Mar 31 02:24:46.223334 2026] [:error] [pid 36688:tid 36852] [client 74.248.144.184:3992] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "acq_7pIe8NBGKiiCIcImGAAAAJE"]
[Tue Mar 31 02:24:46.774182 2026] [:error] [pid 39123:tid 39135] [client 74.248.144.184:4074] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "acq_7iobgVY20PMQKVuQhgAAAQo"]
[Tue Mar 31 02:24:47.286511 2026] [:error] [pid 39123:tid 39132] [client 74.248.144.184:3984] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "acq_7yobgVY20PMQKVuQiQAAAQc"]
[Tue Mar 31 02:24:47.831850 2026] [:error] [pid 36688:tid 36841] [client 74.248.144.184:3988] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "acq_75Ie8NBGKiiCIcImGwAAAIY"]
[Tue Mar 31 02:24:48.342786 2026] [:error] [pid 36688:tid 36859] [client 74.248.144.184:65212] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "acq_8JIe8NBGKiiCIcImHAAAAJg"]
[Tue Mar 31 02:24:48.857431 2026] [:error] [pid 36688:tid 36835] [client 74.248.144.184:4090] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "acq_8JIe8NBGKiiCIcImHQAAAIA"]
[Tue Mar 31 02:24:49.368629 2026] [:error] [pid 36939:tid 36943] [client 74.248.144.184:3931] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "acq_8cRDKH225Jeq1jdlRwAAAAI"]
[Tue Mar 31 02:24:49.885671 2026] [:error] [pid 39123:tid 39134] [client 74.248.144.184:3982] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "acq_8SobgVY20PMQKVuQowAAAQk"]
[Tue Mar 31 02:24:50.397950 2026] [:error] [pid 36939:tid 36963] [client 74.248.144.184:3690] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/init.php"] [unique_id "acq_8sRDKH225Jeq1jdlUAAAABY"]
[Tue Mar 31 02:24:50.915831 2026] [:error] [pid 36939:tid 36945] [client 74.248.144.184:65206] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/init.php"] [unique_id "acq_8sRDKH225Jeq1jdlVgAAAAQ"]
[Tue Mar 31 02:24:51.433087 2026] [:error] [pid 36688:tid 36850] [client 74.248.144.184:3650] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/init.php"] [unique_id "acq_85Ie8NBGKiiCIcImHgAAAI8"]
[Tue Mar 31 02:24:51.961651 2026] [:error] [pid 36672:tid 36827] [client 74.248.144.184:4069] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/init.php"] [unique_id "acq_87KHDzEfeL3XiLpU7wAAAFQ"]
[Tue Mar 31 02:24:52.478793 2026] [:error] [pid 36939:tid 36949] [client 74.248.144.184:4095] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wtiiy.php"] [unique_id "acq_9MRDKH225Jeq1jdlaQAAAAg"]
[Tue Mar 31 02:24:52.992694 2026] [:error] [pid 39123:tid 39137] [client 74.248.144.184:4012] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wtiiy.php"] [unique_id "acq_9CobgVY20PMQKVuQrgAAAQw"]
[Tue Mar 31 02:24:53.504778 2026] [:error] [pid 36672:tid 36810] [client 74.248.144.184:4083] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wtiiy.php"] [unique_id "acq_9bKHDzEfeL3XiLpU8gAAAEM"]
[Tue Mar 31 02:24:54.018083 2026] [:error] [pid 36939:tid 36951] [client 74.248.144.184:3904] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wtiiy.php"] [unique_id "acq_9sRDKH225Jeq1jdldwAAAAo"]
[Tue Mar 31 02:24:54.532188 2026] [:error] [pid 36939:tid 36953] [client 74.248.144.184:65257] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ajax.php"] [unique_id "acq_9sRDKH225Jeq1jdlfgAAAAw"]
[Tue Mar 31 02:24:55.045951 2026] [:error] [pid 36939:tid 36943] [client 74.248.144.184:4031] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ajax.php"] [unique_id "acq_98RDKH225Jeq1jdlhQAAAAI"]
[Tue Mar 31 02:24:55.556269 2026] [:error] [pid 39123:tid 39129] [client 74.248.144.184:4066] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ajax.php"] [unique_id "acq_9yobgVY20PMQKVuQsQAAAQQ"]
[Tue Mar 31 02:24:56.069950 2026] [:error] [pid 36939:tid 36947] [client 74.248.144.184:3697] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ajax.php"] [unique_id "acq_-MRDKH225Jeq1jdlkgAAAAY"]
[Tue Mar 31 02:24:56.584407 2026] [:error] [pid 36939:tid 36954] [client 74.248.144.184:4086] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "acq_-MRDKH225Jeq1jdllwAAAA0"]
[Tue Mar 31 02:24:57.095956 2026] [:error] [pid 36939:tid 36946] [client 74.248.144.184:3867] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "acq_-cRDKH225Jeq1jdlnAAAAAU"]
[Tue Mar 31 02:24:57.618758 2026] [:error] [pid 36939:tid 36963] [client 74.248.144.184:65184] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "acq_-cRDKH225Jeq1jdloAAAABY"]
[Tue Mar 31 02:24:58.132044 2026] [:error] [pid 36706:tid 36864] [client 74.248.144.184:4003] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "acq_-ra-eBLL1E34-UUODgAAAMI"]
[Tue Mar 31 02:24:58.675498 2026] [:error] [pid 36939:tid 36965] [client 74.248.144.184:65208] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acq_-sRDKH225Jeq1jdlqAAAABg"]
[Tue Mar 31 02:24:59.186146 2026] [:error] [pid 36939:tid 36959] [client 74.248.144.184:4065] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acq_-8RDKH225Jeq1jdlrAAAABI"]
[Tue Mar 31 02:24:59.717517 2026] [:error] [pid 39123:tid 39133] [client 74.248.144.184:4019] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acq_-yobgVY20PMQKVuQugAAAQg"]
[Tue Mar 31 02:25:00.232042 2026] [:error] [pid 36939:tid 36949] [client 74.248.144.184:4082] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "acq__MRDKH225Jeq1jdlrgAAAAg"]
[Tue Mar 31 02:25:00.742811 2026] [:error] [pid 36706:tid 36885] [client 74.248.144.184:3989] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "acq__La-eBLL1E34-UUOFQAAANc"]
[Tue Mar 31 02:25:01.258563 2026] [:error] [pid 36706:tid 36869] [client 74.248.144.184:4049] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "acq__ba-eBLL1E34-UUOGgAAAMc"]
[Tue Mar 31 02:25:01.775193 2026] [:error] [pid 36706:tid 36880] [client 74.248.144.184:4009] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "acq__ba-eBLL1E34-UUOHQAAANI"]
[Tue Mar 31 02:25:02.286905 2026] [:error] [pid 36706:tid 36867] [client 74.248.144.184:3918] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "acq__ra-eBLL1E34-UUOIgAAAMU"]
[Tue Mar 31 02:25:02.797570 2026] [:error] [pid 36688:tid 36841] [client 74.248.144.184:3847] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "acq__pIe8NBGKiiCIcImMQAAAIY"]
[Tue Mar 31 02:25:03.316180 2026] [:error] [pid 36939:tid 36961] [client 74.248.144.184:3928] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "acq__8RDKH225Jeq1jdlxQAAABQ"]
[Tue Mar 31 02:25:03.832208 2026] [:error] [pid 36672:tid 36808] [client 74.248.144.184:3909] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "acq__7KHDzEfeL3XiLpVBwAAAEE"]
[Tue Mar 31 02:25:04.348603 2026] [:error] [pid 36939:tid 36960] [client 74.248.144.184:65214] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "acrAAMRDKH225Jeq1jdlzQAAABM"]
[Tue Mar 31 02:25:04.881967 2026] [:error] [pid 36939:tid 36955] [client 74.248.144.184:4013] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws60.php"] [unique_id "acrAAMRDKH225Jeq1jdl0AAAAA4"]
[Tue Mar 31 02:25:05.395355 2026] [:error] [pid 36939:tid 36957] [client 74.248.144.184:3953] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws60.php"] [unique_id "acrAAcRDKH225Jeq1jdl1AAAABA"]
[Tue Mar 31 02:25:05.918699 2026] [:error] [pid 36939:tid 36954] [client 74.248.144.184:3920] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws60.php"] [unique_id "acrAAcRDKH225Jeq1jdl3AAAAA0"]
[Tue Mar 31 02:25:06.439893 2026] [:error] [pid 39123:tid 39135] [client 74.248.144.184:3990] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws60.php"] [unique_id "acrAAiobgVY20PMQKVuQxQAAAQo"]
[Tue Mar 31 02:25:06.956932 2026] [:error] [pid 39123:tid 39136] [client 74.248.144.184:3937] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "acrAAiobgVY20PMQKVuQyQAAAQs"]
[Tue Mar 31 02:25:07.489887 2026] [:error] [pid 39123:tid 39148] [client 74.248.144.184:65255] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "acrAAyobgVY20PMQKVuQ0AAAARc"]
[Tue Mar 31 02:25:08.011432 2026] [:error] [pid 39123:tid 39133] [client 74.248.144.184:4010] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "acrABCobgVY20PMQKVuQ1gAAAQg"]
[Tue Mar 31 02:25:08.521800 2026] [:error] [pid 36706:tid 36886] [client 74.248.144.184:3986] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "acrABLa-eBLL1E34-UUOOQAAANg"]
[Tue Mar 31 02:25:09.043906 2026] [:error] [pid 36706:tid 36869] [client 74.248.144.184:4042] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/buc.php"] [unique_id "acrABba-eBLL1E34-UUOPwAAAMc"]
[Tue Mar 31 02:25:09.578860 2026] [:error] [pid 36672:tid 36808] [client 74.248.144.184:3938] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/buc.php"] [unique_id "acrABbKHDzEfeL3XiLpVEAAAAEE"]
[Tue Mar 31 02:25:10.100946 2026] [:error] [pid 39123:tid 39147] [client 74.248.144.184:4074] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/buc.php"] [unique_id "acrABiobgVY20PMQKVuQ7gAAARY"]
[Tue Mar 31 02:25:10.639045 2026] [:error] [pid 39123:tid 39134] [client 74.248.144.184:3934] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/buc.php"] [unique_id "acrABiobgVY20PMQKVuQ9wAAAQk"]
[Tue Mar 31 02:25:11.180829 2026] [:error] [pid 39123:tid 39135] [client 74.248.144.184:3910] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/myfile.php"] [unique_id "acrAByobgVY20PMQKVuRAAAAAQo"]
[Tue Mar 31 02:25:11.694896 2026] [:error] [pid 39123:tid 39138] [client 74.248.144.184:3981] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/myfile.php"] [unique_id "acrAByobgVY20PMQKVuRCAAAAQ0"]
[Tue Mar 31 02:25:12.206140 2026] [:error] [pid 39123:tid 39135] [client 74.248.144.184:4081] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/myfile.php"] [unique_id "acrACCobgVY20PMQKVuREwAAAQo"]
[Tue Mar 31 02:25:12.721698 2026] [:error] [pid 36939:tid 36962] [client 74.248.144.184:4011] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/myfile.php"] [unique_id "acrACMRDKH225Jeq1jdl_gAAABU"]
[Tue Mar 31 02:25:13.253839 2026] [:error] [pid 36688:tid 36840] [client 74.248.144.184:3970] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "acrACZIe8NBGKiiCIcImOAAAAIU"]
[Tue Mar 31 02:25:13.767572 2026] [:error] [pid 36939:tid 36964] [client 74.248.144.184:4004] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "acrACcRDKH225Jeq1jdmCwAAABc"]
[Tue Mar 31 02:25:14.297118 2026] [:error] [pid 39123:tid 39138] [client 74.248.144.184:4021] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "acrACiobgVY20PMQKVuRKAAAAQ0"]
[Tue Mar 31 02:25:14.816311 2026] [:error] [pid 36688:tid 36839] [client 74.248.144.184:3973] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "acrACpIe8NBGKiiCIcImPwAAAIQ"]
[Tue Mar 31 02:25:15.337854 2026] [:error] [pid 36688:tid 36857] [client 74.248.144.184:3850] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/okxh.php"] [unique_id "acrAC5Ie8NBGKiiCIcImRAAAAJY"]
[Tue Mar 31 02:25:15.855749 2026] [:error] [pid 36688:tid 36855] [client 74.248.144.184:3654] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/okxh.php"] [unique_id "acrAC5Ie8NBGKiiCIcImRQAAAJQ"]
[Tue Mar 31 02:25:16.371174 2026] [:error] [pid 36672:tid 36816] [client 74.248.144.184:4030] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/okxh.php"] [unique_id "acrADLKHDzEfeL3XiLpVFQAAAEk"]
[Tue Mar 31 02:25:16.897957 2026] [:error] [pid 39123:tid 39133] [client 74.248.144.184:3941] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/okxh.php"] [unique_id "acrADCobgVY20PMQKVuRPQAAAQg"]
[Tue Mar 31 02:25:17.445460 2026] [:error] [pid 36706:tid 36878] [client 74.248.144.184:65160] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "acrADba-eBLL1E34-UUOXQAAANA"]
[Tue Mar 31 02:25:17.955622 2026] [:error] [pid 36688:tid 36845] [client 74.248.144.184:3980] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "acrADZIe8NBGKiiCIcImSwAAAIo"]
[Tue Mar 31 02:25:18.470182 2026] [:error] [pid 36706:tid 36866] [client 74.248.144.184:65171] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "acrADra-eBLL1E34-UUOYwAAAMQ"]
[Tue Mar 31 02:25:18.980319 2026] [:error] [pid 36706:tid 36880] [client 74.248.144.184:3925] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "acrADra-eBLL1E34-UUOawAAANI"]
[Tue Mar 31 02:25:19.513168 2026] [:error] [pid 36672:tid 36823] [client 74.248.144.184:3944] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zc-104.php"] [unique_id "acrAD7KHDzEfeL3XiLpVHwAAAFA"]
[Tue Mar 31 02:25:20.024473 2026] [:error] [pid 36672:tid 36818] [client 74.248.144.184:4017] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zc-104.php"] [unique_id "acrAELKHDzEfeL3XiLpVIgAAAEs"]
[Tue Mar 31 02:25:20.562129 2026] [:error] [pid 39123:tid 39141] [client 74.248.144.184:4015] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zc-104.php"] [unique_id "acrAECobgVY20PMQKVuRWgAAARA"]
[Tue Mar 31 02:25:21.077671 2026] [:error] [pid 36939:tid 36941] [client 74.248.144.184:4077] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zc-104.php"] [unique_id "acrAEcRDKH225Jeq1jdmSQAAAAA"]
[Tue Mar 31 02:25:21.602006 2026] [:error] [pid 39123:tid 39126] [client 74.248.144.184:3922] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "acrAESobgVY20PMQKVuRZgAAAQE"]
[Tue Mar 31 02:25:22.111801 2026] [:error] [pid 36706:tid 36877] [client 74.248.144.184:3911] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "acrAEra-eBLL1E34-UUOfgAAAM8"]
[Tue Mar 31 02:25:22.633690 2026] [:error] [pid 36939:tid 36960] [client 74.248.144.184:4027] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "acrAEsRDKH225Jeq1jdmWAAAABM"]
[Tue Mar 31 02:25:23.144412 2026] [:error] [pid 39123:tid 39147] [client 74.248.144.184:4029] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "acrAEyobgVY20PMQKVuReAAAARY"]
[Tue Mar 31 02:25:23.655274 2026] [:error] [pid 36939:tid 36953] [client 74.248.144.184:3929] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blogs.php"] [unique_id "acrAE8RDKH225Jeq1jdmYQAAAAw"]
[Tue Mar 31 02:25:24.166243 2026] [:error] [pid 36672:tid 36813] [client 74.248.144.184:3994] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blogs.php"] [unique_id "acrAFLKHDzEfeL3XiLpVKAAAAEY"]
[Tue Mar 31 02:25:24.686587 2026] [:error] [pid 39123:tid 39130] [client 74.248.144.184:3961] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blogs.php"] [unique_id "acrAFCobgVY20PMQKVuRiwAAAQU"]
[Tue Mar 31 02:25:25.201068 2026] [:error] [pid 36688:tid 36841] [client 74.248.144.184:4023] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blogs.php"] [unique_id "acrAFZIe8NBGKiiCIcImTQAAAIY"]
[Tue Mar 31 02:25:25.712348 2026] [:error] [pid 36939:tid 36943] [client 74.248.144.184:3936] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/as.php"] [unique_id "acrAFcRDKH225Jeq1jdmcwAAAAI"]
[Tue Mar 31 02:25:26.226098 2026] [:error] [pid 36688:tid 36849] [client 74.248.144.184:65192] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/as.php"] [unique_id "acrAFpIe8NBGKiiCIcImVAAAAI4"]
[Tue Mar 31 02:25:26.741269 2026] [:error] [pid 36688:tid 36850] [client 74.248.144.184:3926] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/as.php"] [unique_id "acrAFpIe8NBGKiiCIcImWgAAAI8"]
[Tue Mar 31 02:25:27.254322 2026] [:error] [pid 36672:tid 36817] [client 74.248.144.184:4078] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/as.php"] [unique_id "acrAF7KHDzEfeL3XiLpVNQAAAEo"]
[Tue Mar 31 02:25:27.772400 2026] [:error] [pid 39123:tid 39127] [client 74.248.144.184:65188] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Cap.php"] [unique_id "acrAFyobgVY20PMQKVuRqgAAAQI"]
[Tue Mar 31 02:25:28.287395 2026] [:error] [pid 36706:tid 36874] [client 74.248.144.184:3906] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Cap.php"] [unique_id "acrAGLa-eBLL1E34-UUOkgAAAMw"]
[Tue Mar 31 02:25:28.811269 2026] [:error] [pid 36688:tid 36849] [client 74.248.144.184:65189] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Cap.php"] [unique_id "acrAGJIe8NBGKiiCIcImZgAAAI4"]
[Tue Mar 31 02:25:29.322146 2026] [:error] [pid 36672:tid 36807] [client 74.248.144.184:3927] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Cap.php"] [unique_id "acrAGbKHDzEfeL3XiLpVOwAAAEA"]
[Tue Mar 31 02:25:29.835793 2026] [:error] [pid 36706:tid 36863] [client 74.248.144.184:4085] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xfun.php"] [unique_id "acrAGba-eBLL1E34-UUOnAAAAME"]
[Tue Mar 31 02:25:30.347577 2026] [:error] [pid 36706:tid 36872] [client 74.248.144.184:3874] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xfun.php"] [unique_id "acrAGra-eBLL1E34-UUOoAAAAMo"]
[Tue Mar 31 02:25:30.858588 2026] [:error] [pid 36939:tid 36951] [client 74.248.144.184:3917] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xfun.php"] [unique_id "acrAGsRDKH225Jeq1jdmlQAAAAo"]
[Tue Mar 31 02:25:31.376960 2026] [:error] [pid 36939:tid 36952] [client 74.248.144.184:3915] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xfun.php"] [unique_id "acrAG8RDKH225Jeq1jdmmgAAAAs"]
[Tue Mar 31 02:25:31.893212 2026] [:error] [pid 36939:tid 36944] [client 74.248.144.184:3949] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bjfl.php"] [unique_id "acrAG8RDKH225Jeq1jdmnwAAAAM"]
[Tue Mar 31 02:25:32.408518 2026] [:error] [pid 36939:tid 36949] [client 74.248.144.184:3987] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bjfl.php"] [unique_id "acrAHMRDKH225Jeq1jdmpQAAAAg"]
[Tue Mar 31 02:25:32.922754 2026] [:error] [pid 39123:tid 39129] [client 74.248.144.184:3960] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bjfl.php"] [unique_id "acrAHCobgVY20PMQKVuRvAAAAQQ"]
[Tue Mar 31 02:25:33.465747 2026] [:error] [pid 36706:tid 36874] [client 74.248.144.184:3921] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bjfl.php"] [unique_id "acrAHba-eBLL1E34-UUOtwAAAMw"]
[Tue Mar 31 02:25:33.976566 2026] [:error] [pid 39123:tid 39126] [client 74.248.144.184:3993] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/155.php"] [unique_id "acrAHSobgVY20PMQKVuRxAAAAQE"]
[Tue Mar 31 02:25:34.507703 2026] [:error] [pid 39123:tid 39143] [client 74.248.144.184:4042] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/155.php"] [unique_id "acrAHiobgVY20PMQKVuRywAAARI"]
[Tue Mar 31 02:25:35.018641 2026] [:error] [pid 36939:tid 36942] [client 74.248.144.184:3919] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/155.php"] [unique_id "acrAH8RDKH225Jeq1jdmtgAAAAE"]
[Tue Mar 31 02:25:35.533804 2026] [:error] [pid 36939:tid 36955] [client 74.248.144.184:3901] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/155.php"] [unique_id "acrAH8RDKH225Jeq1jdmvAAAAA4"]
[Tue Mar 31 02:25:36.044268 2026] [:error] [pid 36939:tid 36956] [client 74.248.144.184:3868] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rzki.php"] [unique_id "acrAIMRDKH225Jeq1jdmwAAAAA8"]
[Tue Mar 31 02:25:36.569298 2026] [:error] [pid 39123:tid 39125] [client 74.248.144.184:3940] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rzki.php"] [unique_id "acrAICobgVY20PMQKVuR1gAAAQA"]
[Tue Mar 31 02:25:37.087095 2026] [:error] [pid 39123:tid 39139] [client 74.248.144.184:4022] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rzki.php"] [unique_id "acrAISobgVY20PMQKVuR2QAAAQ4"]
[Tue Mar 31 02:25:37.601206 2026] [:error] [pid 39123:tid 39149] [client 74.248.144.184:4026] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rzki.php"] [unique_id "acrAISobgVY20PMQKVuR3wAAARg"]
[Tue Mar 31 02:25:38.112161 2026] [:error] [pid 36706:tid 36862] [client 74.248.144.184:4072] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "acrAIra-eBLL1E34-UUOvgAAAMA"]
[Tue Mar 31 02:25:38.645724 2026] [:error] [pid 36939:tid 36951] [client 74.248.144.184:3887] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "acrAIsRDKH225Jeq1jdmywAAAAo"]
[Tue Mar 31 02:25:46.563542 2026] [:error] [pid 36706:tid 36871] [client 74.248.144.184:3983] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "acrAKra-eBLL1E34-UUO1gAAAMk"]
[Tue Mar 31 02:25:47.104950 2026] [:error] [pid 36688:tid 36849] [client 74.248.144.184:3777] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "acrAK5Ie8NBGKiiCIcImlAAAAI4"]
[Tue Mar 31 02:25:47.622073 2026] [:error] [pid 36688:tid 36835] [client 74.248.144.184:3907] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "acrAK5Ie8NBGKiiCIcImlwAAAIA"]
[Tue Mar 31 02:25:48.135753 2026] [:error] [pid 36706:tid 36884] [client 74.248.144.184:3900] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "acrALLa-eBLL1E34-UUO2QAAANY"]
[Tue Mar 31 02:25:48.664759 2026] [:error] [pid 39123:tid 39128] [client 74.248.144.184:4007] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "acrALCobgVY20PMQKVuSBAAAAQM"]
[Tue Mar 31 02:25:49.181811 2026] [:error] [pid 36706:tid 36886] [client 74.248.144.184:3956] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "acrALba-eBLL1E34-UUO3gAAANg"]
[Tue Mar 31 02:25:49.696732 2026] [:error] [pid 36706:tid 36864] [client 74.248.144.184:3840] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "acrALba-eBLL1E34-UUO4gAAAMI"]
[Tue Mar 31 02:25:50.214086 2026] [:error] [pid 39123:tid 39127] [client 74.248.144.184:3845] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "acrALiobgVY20PMQKVuSCQAAAQI"]
[Tue Mar 31 02:25:50.726006 2026] [:error] [pid 39123:tid 39135] [client 74.248.144.184:3932] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bootstrap.php"] [unique_id "acrALiobgVY20PMQKVuSDgAAAQo"]
[Tue Mar 31 02:25:51.264977 2026] [:error] [pid 36939:tid 36957] [client 74.248.144.184:4080] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bootstrap.php"] [unique_id "acrAL8RDKH225Jeq1jdnCQAAABA"]
[Tue Mar 31 02:25:51.778986 2026] [:error] [pid 36706:tid 36883] [client 74.248.144.184:3951] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bootstrap.php"] [unique_id "acrAL7a-eBLL1E34-UUO6wAAANU"]
[Tue Mar 31 02:25:52.336294 2026] [:error] [pid 36672:tid 36815] [client 74.248.144.184:3923] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bootstrap.php"] [unique_id "acrAMLKHDzEfeL3XiLpVYQAAAEg"]
[Tue Mar 31 02:25:52.870998 2026] [:error] [pid 39123:tid 39136] [client 74.248.144.184:3942] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/wp-blog.php"] [unique_id "acrAMCobgVY20PMQKVuSHgAAAQs"]
[Tue Mar 31 02:25:53.381366 2026] [:error] [pid 36688:tid 36842] [client 74.248.144.184:3978] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/wp-blog.php"] [unique_id "acrAMZIe8NBGKiiCIcImpgAAAIc"]
[Tue Mar 31 02:25:53.896848 2026] [:error] [pid 36706:tid 36868] [client 74.248.144.184:3997] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/wp-blog.php"] [unique_id "acrAMba-eBLL1E34-UUO8AAAAMY"]
[Tue Mar 31 02:25:54.411539 2026] [:error] [pid 39123:tid 39138] [client 74.248.144.184:3902] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/wp-blog.php"] [unique_id "acrAMiobgVY20PMQKVuSIgAAAQ0"]
[Tue Mar 31 02:25:54.936387 2026] [:error] [pid 36939:tid 36952] [client 74.248.144.184:3789] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws88.php"] [unique_id "acrAMsRDKH225Jeq1jdnGQAAAAs"]
[Tue Mar 31 02:25:55.538065 2026] [:error] [pid 36706:tid 36878] [client 74.248.144.184:3872] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws88.php"] [unique_id "acrAM7a-eBLL1E34-UUO-gAAANA"]
[Tue Mar 31 02:25:56.050491 2026] [:error] [pid 36672:tid 36823] [client 74.248.144.184:3939] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws88.php"] [unique_id "acrANLKHDzEfeL3XiLpVZwAAAFA"]
[Tue Mar 31 02:25:56.564644 2026] [:error] [pid 36706:tid 36881] [client 74.248.144.184:3965] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws88.php"] [unique_id "acrANLa-eBLL1E34-UUPBAAAANM"]
[Tue Mar 31 02:25:57.076051 2026] [:error] [pid 36688:tid 36835] [client 74.248.144.184:3862] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/csv.php"] [unique_id "acrANZIe8NBGKiiCIcImsgAAAIA"]
[Tue Mar 31 02:25:57.586966 2026] [:error] [pid 36672:tid 36827] [client 74.248.144.184:4001] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/csv.php"] [unique_id "acrANbKHDzEfeL3XiLpVawAAAFQ"]
[Tue Mar 31 02:25:58.103193 2026] [:error] [pid 36706:tid 36865] [client 74.248.144.184:3976] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/csv.php"] [unique_id "acrANra-eBLL1E34-UUPDQAAAMM"]
[Tue Mar 31 02:25:58.613453 2026] [:error] [pid 36939:tid 36958] [client 74.248.144.184:3977] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/csv.php"] [unique_id "acrANsRDKH225Jeq1jdnJgAAABE"]
[Tue Mar 31 02:25:59.132612 2026] [:error] [pid 36706:tid 36885] [client 74.248.144.184:3924] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/varb.php"] [unique_id "acrAN7a-eBLL1E34-UUPEgAAANc"]
[Tue Mar 31 02:25:59.643884 2026] [:error] [pid 36688:tid 36854] [client 74.248.144.184:3855] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/varb.php"] [unique_id "acrAN5Ie8NBGKiiCIcImuAAAAJM"]
[Tue Mar 31 02:26:00.161604 2026] [:error] [pid 36688:tid 36844] [client 74.248.144.184:3916] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/varb.php"] [unique_id "acrAOJIe8NBGKiiCIcImugAAAIk"]
[Tue Mar 31 02:26:00.675783 2026] [:error] [pid 39123:tid 39130] [client 74.248.144.184:3842] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/varb.php"] [unique_id "acrAOCobgVY20PMQKVuSKQAAAQU"]
[Tue Mar 31 02:26:01.196934 2026] [:error] [pid 36672:tid 36826] [client 74.248.144.184:3954] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8573.php"] [unique_id "acrAObKHDzEfeL3XiLpVcwAAAFM"]
[Tue Mar 31 02:26:01.714782 2026] [:error] [pid 36672:tid 36811] [client 74.248.144.184:3905] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8573.php"] [unique_id "acrAObKHDzEfeL3XiLpVdwAAAEQ"]
[Tue Mar 31 02:26:02.230115 2026] [:error] [pid 36939:tid 36941] [client 74.248.144.184:3945] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8573.php"] [unique_id "acrAOsRDKH225Jeq1jdnMgAAAAA"]
[Tue Mar 31 02:26:02.770737 2026] [:error] [pid 36688:tid 36842] [client 74.248.144.184:3895] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8573.php"] [unique_id "acrAOpIe8NBGKiiCIcImxAAAAIc"]
[Tue Mar 31 02:26:03.290804 2026] [:error] [pid 39123:tid 39143] [client 74.248.144.184:3893] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "acrAOyobgVY20PMQKVuSLAAAARI"]
[Tue Mar 31 02:26:03.803526 2026] [:error] [pid 36939:tid 36954] [client 74.248.144.184:3866] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "acrAO8RDKH225Jeq1jdnOgAAAA0"]
[Tue Mar 31 02:26:04.321986 2026] [:error] [pid 36706:tid 36877] [client 74.248.144.184:3962] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "acrAPLa-eBLL1E34-UUPHwAAAM8"]
[Tue Mar 31 02:26:04.841070 2026] [:error] [pid 36939:tid 36944] [client 74.248.144.184:4091] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "acrAPMRDKH225Jeq1jdnRgAAAAM"]
[Tue Mar 31 02:26:05.359026 2026] [:error] [pid 36688:tid 36859] [client 74.248.144.184:3849] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "acrAPZIe8NBGKiiCIcImxwAAAJg"]
[Tue Mar 31 02:26:05.886002 2026] [:error] [pid 36939:tid 36944] [client 74.248.144.184:3996] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "acrAPcRDKH225Jeq1jdnTAAAAAM"]
[Tue Mar 31 02:26:06.400550 2026] [:error] [pid 36939:tid 36946] [client 74.248.144.184:3997] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "acrAPsRDKH225Jeq1jdnUQAAAAU"]
[Tue Mar 31 02:26:06.919047 2026] [:error] [pid 39123:tid 39145] [client 74.248.144.184:3864] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "acrAPiobgVY20PMQKVuSQQAAARQ"]
[Tue Mar 31 02:26:07.453691 2026] [:error] [pid 39123:tid 39132] [client 74.248.144.184:3943] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "acrAPyobgVY20PMQKVuSRQAAAQc"]
[Tue Mar 31 02:26:07.969989 2026] [:error] [pid 36672:tid 36818] [client 74.248.144.184:3959] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "acrAP7KHDzEfeL3XiLpVhgAAAEs"]
[Tue Mar 31 02:26:08.484425 2026] [:error] [pid 39123:tid 39130] [client 74.248.144.184:3791] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "acrAQCobgVY20PMQKVuSSQAAAQU"]
[Tue Mar 31 02:26:08.997245 2026] [:error] [pid 39123:tid 39149] [client 74.248.144.184:3802] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "acrAQCobgVY20PMQKVuSTQAAARg"]
[Tue Mar 31 02:26:09.528707 2026] [:error] [pid 36688:tid 36837] [client 74.248.144.184:4016] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tfm.php"] [unique_id "acrAQZIe8NBGKiiCIcImzAAAAII"]
[Tue Mar 31 02:26:10.070939 2026] [:error] [pid 36688:tid 36839] [client 74.248.144.184:3790] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tfm.php"] [unique_id "acrAQpIe8NBGKiiCIcIm0AAAAIQ"]
[Tue Mar 31 02:26:10.645062 2026] [:error] [pid 36688:tid 36852] [client 74.248.144.184:4034] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tfm.php"] [unique_id "acrAQpIe8NBGKiiCIcIm1gAAAJE"]
[Tue Mar 31 02:26:11.157941 2026] [:error] [pid 36939:tid 36947] [client 74.248.144.184:3739] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tfm.php"] [unique_id "acrAQ8RDKH225Jeq1jdnXgAAAAY"]
[Tue Mar 31 02:26:11.698190 2026] [:error] [pid 36688:tid 36846] [client 74.248.144.184:3824] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin-footer.php"] [unique_id "acrAQ5Ie8NBGKiiCIcIm2QAAAIs"]
[Tue Mar 31 02:26:12.211388 2026] [:error] [pid 39123:tid 39129] [client 74.248.144.184:3972] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin-footer.php"] [unique_id "acrARCobgVY20PMQKVuSUwAAAQQ"]
[Tue Mar 31 02:26:12.772176 2026] [:error] [pid 39123:tid 39127] [client 74.248.144.184:4024] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin-footer.php"] [unique_id "acrARCobgVY20PMQKVuSVwAAAQI"]
[Tue Mar 31 02:26:13.287981 2026] [:error] [pid 39123:tid 39132] [client 74.248.144.184:3908] [client 74.248.144.184] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin-footer.php"] [unique_id "acrARSobgVY20PMQKVuSXAAAAQc"]
[Tue Mar 31 08:24:56.405377 2026] [:error] [pid 41421:tid 41437] [client 162.158.87.190:13850] [client 162.158.87.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "acsUWBSaDjY9kKFtUQBWBwAAAQ0"]
[Tue Mar 31 08:24:56.415442 2026] [:error] [pid 41421:tid 41429] [client 162.158.87.189:11933] [client 162.158.87.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.git/HEAD"] [unique_id "acsUWBSaDjY9kKFtUQBWCAAAAQU"]
[Tue Mar 31 08:24:56.441012 2026] [:error] [pid 41421:tid 41446] [client 162.158.87.190:13842] [client 162.158.87.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.git/index"] [unique_id "acsUWBSaDjY9kKFtUQBWCQAAARY"]
[Tue Mar 31 08:24:57.399602 2026] [:error] [pid 36892:tid 36965] [client 162.158.87.189:11939] [client 162.158.87.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env"] [unique_id "acsUWUyj9S4G0ek3O4LEYQAAAI4"]
[Tue Mar 31 08:24:57.429494 2026] [:error] [pid 36892:tid 36966] [client 162.158.87.190:13851] [client 162.158.87.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "acsUWUyj9S4G0ek3O4LEYgAAAI8"]
[Tue Mar 31 08:24:58.387869 2026] [:error] [pid 36982:tid 36999] [client 162.158.87.190:13852] [client 162.158.87.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.development"] [unique_id "acsUWvlMmeoQKN0r_GNxrQAAAM4"]
[Tue Mar 31 08:25:15.432291 2026] [:error] [pid 41421:tid 41436] [client 162.158.3.142:9572] [client 162.158.3.142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.backup"] [unique_id "acsUaxSaDjY9kKFtUQBWjgAAAQw"]
[Tue Mar 31 08:25:15.437825 2026] [:error] [pid 41421:tid 41424] [client 162.158.2.8:9847] [client 162.158.2.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.bak"] [unique_id "acsUaxSaDjY9kKFtUQBWjwAAAQA"]
[Tue Mar 31 08:25:15.714778 2026] [:error] [pid 41421:tid 41447] [client 162.158.3.141:10000] [client 162.158.3.141] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.old"] [unique_id "acsUaxSaDjY9kKFtUQBWlQAAARc"]
[Tue Mar 31 08:25:16.124115 2026] [:error] [pid 36982:tid 37002] [client 162.158.87.189:10269] [client 162.158.87.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.staging"] [unique_id "acsUbPlMmeoQKN0r_GNx7wAAANE"]
[Tue Mar 31 08:25:16.458166 2026] [:error] [pid 41421:tid 41426] [client 162.158.87.190:10138] [client 162.158.87.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.save"] [unique_id "acsUbBSaDjY9kKFtUQBWqAAAAQI"]
[Tue Mar 31 08:25:16.708583 2026] [:error] [pid 41421:tid 41434] [client 162.158.87.189:10273] [client 162.158.87.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.tmp"] [unique_id "acsUbBSaDjY9kKFtUQBWqwAAAQo"]
[Tue Mar 31 08:25:16.757735 2026] [:error] [pid 41421:tid 41429] [client 162.158.3.131:14141] [client 162.158.3.131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.development.local"] [unique_id "acsUbBSaDjY9kKFtUQBWrgAAAQU"]
[Tue Mar 31 08:25:17.040560 2026] [:error] [pid 41421:tid 41447] [client 162.158.2.9:12670] [client 162.158.2.9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/app/.env"] [unique_id "acsUbRSaDjY9kKFtUQBWtwAAARc"]
[Tue Mar 31 08:25:17.137015 2026] [:error] [pid 36892:tid 36955] [client 162.158.87.189:10275] [client 162.158.87.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.example"] [unique_id "acsUbUyj9S4G0ek3O4LEdAAAAIQ"]
[Tue Mar 31 08:25:17.155732 2026] [:error] [pid 36891:tid 36943] [client 162.158.87.189:10278] [client 162.158.87.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.production.local"] [unique_id "acsUbZJhiMaJUqoqfl4tBgAAAFM"]
[Tue Mar 31 08:25:17.434695 2026] [:error] [pid 36892:tid 36963] [client 162.158.3.141:10007] [client 162.158.3.141] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/api/.env"] [unique_id "acsUbUyj9S4G0ek3O4LEdQAAAIw"]
[Tue Mar 31 08:25:17.992595 2026] [:error] [pid 41421:tid 41431] [client 162.158.2.146:10622] [client 162.158.2.146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/private/.env"] [unique_id "acsUbRSaDjY9kKFtUQBWyAAAAQc"]
[Tue Mar 31 08:25:18.027322 2026] [:error] [pid 36982:tid 36985] [client 162.158.87.189:10282] [client 162.158.87.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/backend/.env"] [unique_id "acsUbvlMmeoQKN0r_GNyBgAAAMA"]
[Tue Mar 31 08:25:18.185104 2026] [:error] [pid 36892:tid 36961] [client 162.158.87.189:10283] [client 162.158.87.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin/.env"] [unique_id "acsUbkyj9S4G0ek3O4LEewAAAIo"]
[Tue Mar 31 08:25:18.215500 2026] [:error] [pid 41421:tid 41440] [client 162.158.87.189:10288] [client 162.158.87.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/core/.env"] [unique_id "acsUbhSaDjY9kKFtUQBWywAAARA"]
[Tue Mar 31 08:25:18.445275 2026] [:error] [pid 41421:tid 41447] [client 162.158.87.190:10146] [client 162.158.87.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/.env"] [unique_id "acsUbhSaDjY9kKFtUQBWzAAAARc"]
[Tue Mar 31 08:25:18.492308 2026] [:error] [pid 36982:tid 37009] [client 162.158.2.9:12674] [client 162.158.2.9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.php"] [unique_id "acsUbvlMmeoQKN0r_GNyBwAAANg"]
[Tue Mar 31 08:25:18.521506 2026] [:error] [pid 36890:tid 36898] [client 162.158.3.132:12688] [client 162.158.3.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.json"] [unique_id "acsUbp8FASPd_uH8z7c-cgAAAAM"]
[Tue Mar 31 08:25:18.752948 2026] [:error] [pid 36890:tid 36906] [client 162.158.2.91:10112] [client 162.158.2.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env~"] [unique_id "acsUbp8FASPd_uH8z7c-dQAAAAs"]
[Tue Mar 31 08:25:18.770001 2026] [:error] [pid 36890:tid 36903] [client 162.158.2.147:9899] [client 162.158.2.147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env1"] [unique_id "acsUbp8FASPd_uH8z7c-dgAAAAg"]
[Tue Mar 31 08:25:18.980188 2026] [:error] [pid 36890:tid 36917] [client 162.158.3.141:10011] [client 162.158.3.141] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/config/.env.local"] [unique_id "acsUbp8FASPd_uH8z7c-ewAAABY"]
[Tue Mar 31 08:25:19.036146 2026] [:error] [pid 36890:tid 36896] [client 162.158.3.145:9749] [client 162.158.3.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.dist"] [unique_id "acsUb58FASPd_uH8z7c-fAAAAAE"]
[Tue Mar 31 08:25:19.050638 2026] [:error] [pid 36982:tid 37006] [client 162.158.3.102:11098] [client 162.158.3.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.envrc"] [unique_id "acsUb_lMmeoQKN0r_GNyCAAAANU"]
[Tue Mar 31 08:25:19.259810 2026] [:error] [pid 36890:tid 36914] [client 162.158.3.119:11532] [client 162.158.3.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.orig"] [unique_id "acsUb58FASPd_uH8z7c-fwAAABM"]
[Tue Mar 31 08:25:19.300512 2026] [:error] [pid 36890:tid 36900] [client 162.158.87.189:9658] [client 162.158.87.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env_backup"] [unique_id "acsUb58FASPd_uH8z7c-gAAAAAU"]
[Tue Mar 31 08:25:19.316476 2026] [:error] [pid 36982:tid 36999] [client 162.158.3.145:9757] [client 162.158.3.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.production.bak"] [unique_id "acsUb_lMmeoQKN0r_GNyDAAAAM4"]
[Tue Mar 31 08:25:19.335513 2026] [:error] [pid 41421:tid 41430] [client 162.158.2.147:11866] [client 162.158.2.147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.prod"] [unique_id "acsUbxSaDjY9kKFtUQBW0AAAAQY"]
[Tue Mar 31 08:25:19.522797 2026] [:error] [pid 36890:tid 36912] [client 162.158.87.189:9664] [client 162.158.87.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env2"] [unique_id "acsUb58FASPd_uH8z7c-gQAAABE"]
[Tue Mar 31 08:25:19.547701 2026] [:error] [pid 41421:tid 41447] [client 162.158.2.90:9666] [client 162.158.2.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.dev.local"] [unique_id "acsUbxSaDjY9kKFtUQBW1AAAARc"]
[Tue Mar 31 08:25:19.598398 2026] [:error] [pid 41421:tid 41443] [client 162.158.3.131:14148] [client 162.158.3.131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.container"] [unique_id "acsUbxSaDjY9kKFtUQBW1QAAARM"]
[Tue Mar 31 08:25:19.881306 2026] [:error] [pid 36890:tid 36903] [client 162.158.2.9:12679] [client 162.158.2.9] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/server/.env"] [unique_id "acsUb58FASPd_uH8z7c-hgAAAAg"]
[Tue Mar 31 08:25:20.126719 2026] [:error] [pid 36890:tid 36901] [client 162.158.2.91:10120] [client 162.158.2.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/srv/.env"] [unique_id "acsUcJ8FASPd_uH8z7c-igAAAAY"]
[Tue Mar 31 08:25:20.165697 2026] [:error] [pid 36890:tid 36895] [client 162.158.3.146:11023] [client 162.158.3.146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/web/.env"] [unique_id "acsUcJ8FASPd_uH8z7c-iwAAAAA"]
[Tue Mar 31 08:25:20.317247 2026] [:error] [pid 41421:tid 41432] [client 162.158.87.189:9667] [client 162.158.87.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.docker"] [unique_id "acsUcBSaDjY9kKFtUQBW3wAAAQg"]
[Tue Mar 31 08:25:20.356850 2026] [:error] [pid 36892:tid 36966] [client 162.158.87.190:10448] [client 162.158.87.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/docker/.env"] [unique_id "acsUcEyj9S4G0ek3O4LEfQAAAI8"]
[Tue Mar 31 08:25:20.582650 2026] [:error] [pid 41421:tid 41429] [client 162.158.87.190:10450] [client 162.158.87.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/docker/.env.local"] [unique_id "acsUcBSaDjY9kKFtUQBW4QAAAQU"]
[Tue Mar 31 08:25:20.889179 2026] [:error] [pid 36982:tid 37002] [client 162.158.2.91:10121] [client 162.158.2.91] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/home/.env"] [unique_id "acsUcPlMmeoQKN0r_GNyGQAAANE"]
[Tue Mar 31 08:25:21.151125 2026] [:error] [pid 36890:tid 36897] [client 162.158.87.190:10452] [client 162.158.87.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/site/.env"] [unique_id "acsUcZ8FASPd_uH8z7c-jQAAAAI"]
[Tue Mar 31 08:25:21.174726 2026] [:error] [pid 36982:tid 36985] [client 162.158.3.146:11030] [client 162.158.3.146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/root/.env"] [unique_id "acsUcflMmeoQKN0r_GNyHAAAAMA"]
[Tue Mar 31 08:25:21.176623 2026] [:error] [pid 36892:tid 36974] [client 162.158.87.189:9670] [client 162.158.87.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/www/.env"] [unique_id "acsUcUyj9S4G0ek3O4LEfgAAAJc"]
[Tue Mar 31 08:25:21.320611 2026] [:error] [pid 36892:tid 36971] [client 162.158.87.189:9677] [client 162.158.87.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/var/www/.env"] [unique_id "acsUcUyj9S4G0ek3O4LEfwAAAJQ"]
[Tue Mar 31 08:25:21.400821 2026] [:error] [pid 36982:tid 36987] [client 162.158.87.190:10458] [client 162.158.87.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/var/www/html/.env"] [unique_id "acsUcflMmeoQKN0r_GNyHwAAAMI"]
[Tue Mar 31 08:25:21.456640 2026] [:error] [pid 36892:tid 36958] [client 162.158.2.90:9672] [client 162.158.2.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env_secret"] [unique_id "acsUcUyj9S4G0ek3O4LEgAAAAIc"]
[Tue Mar 31 08:25:21.459018 2026] [:error] [pid 36982:tid 37008] [client 162.158.3.132:12691] [client 162.158.3.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env_config"] [unique_id "acsUcflMmeoQKN0r_GNyIAAAANc"]
[Tue Mar 31 08:25:21.914162 2026] [:error] [pid 41421:tid 41437] [client 162.158.87.189:9402] [client 162.158.87.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.git/HEAD"] [unique_id "acsUcRSaDjY9kKFtUQBW6gAAAQ0"]
[Tue Mar 31 08:25:21.953960 2026] [:error] [pid 41421:tid 41447] [client 162.158.87.190:13607] [client 162.158.87.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.git/index"] [unique_id "acsUcRSaDjY9kKFtUQBW6wAAARc"]
[Tue Mar 31 08:25:21.959773 2026] [:error] [pid 36982:tid 36989] [client 162.158.87.189:9406] [client 162.158.87.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "acsUcflMmeoQKN0r_GNyIgAAAMQ"]
[Tue Mar 31 08:25:22.179888 2026] [:error] [pid 36982:tid 37002] [client 162.158.87.190:10459] [client 162.158.87.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env_settings"] [unique_id "acsUcvlMmeoQKN0r_GNyJQAAANE"]
[Tue Mar 31 08:25:22.409370 2026] [:error] [pid 36890:tid 36899] [client 162.158.87.189:9408] [client 162.158.87.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.git/logs/HEAD"] [unique_id "acsUcp8FASPd_uH8z7c-kAAAAAQ"]
[Tue Mar 31 08:25:22.473790 2026] [:error] [pid 41421:tid 41433] [client 162.158.87.189:9415] [client 162.158.87.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.git/refs/heads/main"] [unique_id "acsUchSaDjY9kKFtUQBW7wAAAQk"]
[Tue Mar 31 08:25:22.689371 2026] [:error] [pid 36890:tid 36911] [client 162.158.87.189:9416] [client 162.158.87.189] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env"] [unique_id "acsUcp8FASPd_uH8z7c-kwAAABA"]
[Tue Mar 31 08:25:22.978005 2026] [:error] [pid 36890:tid 36900] [client 162.158.87.190:13611] [client 162.158.87.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.production"] [unique_id "acsUcp8FASPd_uH8z7c-lgAAAAU"]
[Tue Mar 31 08:25:23.205727 2026] [:error] [pid 36890:tid 36909] [client 162.158.87.190:13617] [client 162.158.87.190] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.development"] [unique_id "acsUc58FASPd_uH8z7c-mAAAAA4"]
[Tue Mar 31 08:25:36.421470 2026] [:error] [pid 36890:tid 36917] [client 162.158.3.142:13514] [client 162.158.3.142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/config/.env"] [unique_id "acsUgJ8FASPd_uH8z7c-xwAAABY"]
[Tue Mar 31 08:25:41.030186 2026] [:error] [pid 36982:tid 36988] [client 162.158.3.141:13801] [client 162.158.3.141] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.local.backup"] [unique_id "acsUhflMmeoQKN0r_GNyQQAAAMM"]
[Tue Mar 31 08:26:00.634231 2026] [:error] [pid 41421:tid 41448] [client 162.158.3.119:10241] [client 162.158.3.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.production.local"] [unique_id "acsUmBSaDjY9kKFtUQBXWAAAARg"]
[Tue Mar 31 08:26:00.913973 2026] [:error] [pid 41421:tid 41426] [client 162.158.2.193:9458] [client 162.158.2.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.development.local"] [unique_id "acsUmBSaDjY9kKFtUQBXWQAAAQI"]
[Tue Mar 31 08:26:01.145421 2026] [:error] [pid 41421:tid 41429] [client 162.158.2.146:10691] [client 162.158.2.146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/config/.env"] [unique_id "acsUmRSaDjY9kKFtUQBXXQAAAQU"]
[Tue Mar 31 08:26:01.191479 2026] [:error] [pid 41421:tid 41442] [client 162.158.2.193:9465] [client 162.158.2.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/app/.env"] [unique_id "acsUmRSaDjY9kKFtUQBXXgAAARI"]
[Tue Mar 31 08:26:01.423513 2026] [:error] [pid 36982:tid 36998] [client 162.158.3.125:9489] [client 162.158.3.125] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/backend/.env"] [unique_id "acsUmflMmeoQKN0r_GNycQAAAM0"]
[Tue Mar 31 08:26:01.470401 2026] [:error] [pid 36892:tid 36970] [client 162.158.3.145:11208] [client 162.158.3.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/api/.env"] [unique_id "acsUmUyj9S4G0ek3O4LE5gAAAJM"]
[Tue Mar 31 08:26:01.706662 2026] [:error] [pid 36982:tid 36990] [client 162.158.3.131:11952] [client 162.158.3.131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/core/.env"] [unique_id "acsUmflMmeoQKN0r_GNycwAAAMU"]
[Tue Mar 31 08:26:01.746742 2026] [:error] [pid 36890:tid 36896] [client 162.158.3.119:10248] [client 162.158.3.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/.env"] [unique_id "acsUmZ8FASPd_uH8z7c_AQAAAAE"]
[Tue Mar 31 08:26:01.991116 2026] [:error] [pid 36982:tid 36999] [client 162.158.3.142:10985] [client 162.158.3.142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/private/.env"] [unique_id "acsUmflMmeoQKN0r_GNydAAAAM4"]
[Tue Mar 31 08:26:02.169106 2026] [:error] [pid 36982:tid 37002] [client 162.158.3.120:9623] [client 162.158.3.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/config/.env.local"] [unique_id "acsUmvlMmeoQKN0r_GNydQAAANE"]
[Tue Mar 31 08:26:02.319459 2026] [:error] [pid 36892:tid 36952] [client 162.158.3.131:11957] [client 162.158.3.131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.json"] [unique_id "acsUmkyj9S4G0ek3O4LE5wAAAIE"]
[Tue Mar 31 08:26:02.448576 2026] [:error] [pid 36982:tid 36985] [client 162.158.3.145:11210] [client 162.158.3.145] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env_backup"] [unique_id "acsUmvlMmeoQKN0r_GNydgAAAMA"]
[Tue Mar 31 08:26:02.603483 2026] [:error] [pid 36892:tid 36962] [client 162.158.3.112:9356] [client 162.158.3.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env~"] [unique_id "acsUmkyj9S4G0ek3O4LE6QAAAIs"]
[Tue Mar 31 08:26:02.682415 2026] [:error] [pid 36892:tid 36975] [client 162.158.2.146:10694] [client 162.158.2.146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env1"] [unique_id "acsUmkyj9S4G0ek3O4LE6gAAAJg"]
[Tue Mar 31 08:26:02.724778 2026] [:error] [pid 36890:tid 36901] [client 162.158.3.119:10251] [client 162.158.3.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env2"] [unique_id "acsUmp8FASPd_uH8z7c_BAAAAAY"]
[Tue Mar 31 08:26:02.886411 2026] [:error] [pid 36890:tid 36907] [client 162.158.2.192:13526] [client 162.158.2.192] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.dist"] [unique_id "acsUmp8FASPd_uH8z7c_BQAAAAw"]
[Tue Mar 31 08:26:02.959289 2026] [:error] [pid 36892:tid 36959] [client 162.158.3.112:9357] [client 162.158.3.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.envrc"] [unique_id "acsUmkyj9S4G0ek3O4LE6wAAAIg"]
[Tue Mar 31 08:26:03.008416 2026] [:error] [pid 36891:tid 36941] [client 162.158.2.146:10696] [client 162.158.2.146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.orig"] [unique_id "acsUm5JhiMaJUqoqfl4tTAAAAFE"]
[Tue Mar 31 08:26:03.164606 2026] [:error] [pid 36891:tid 36940] [client 162.158.3.142:10991] [client 162.158.3.142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.production.bak"] [unique_id "acsUm5JhiMaJUqoqfl4tTwAAAFA"]
[Tue Mar 31 08:26:03.239555 2026] [:error] [pid 36890:tid 36914] [client 162.158.3.132:13895] [client 162.158.3.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.prod"] [unique_id "acsUm58FASPd_uH8z7c_BgAAABM"]
[Tue Mar 31 08:26:03.285866 2026] [:error] [pid 36892:tid 36971] [client 162.158.3.132:13897] [client 162.158.3.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.dev.local"] [unique_id "acsUm0yj9S4G0ek3O4LE7gAAAJQ"]
[Tue Mar 31 08:26:03.441030 2026] [:error] [pid 36892:tid 36972] [client 162.158.2.193:9469] [client 162.158.2.193] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.docker"] [unique_id "acsUm0yj9S4G0ek3O4LE7wAAAJU"]
[Tue Mar 31 08:26:03.523171 2026] [:error] [pid 36892:tid 36965] [client 162.158.3.119:10942] [client 162.158.3.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.container"] [unique_id "acsUm0yj9S4G0ek3O4LE8AAAAI4"]
[Tue Mar 31 08:26:03.563092 2026] [:error] [pid 36892:tid 36974] [client 162.158.3.101:11972] [client 162.158.3.101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/docker/.env"] [unique_id "acsUm0yj9S4G0ek3O4LE8QAAAJc"]
[Tue Mar 31 08:26:03.841982 2026] [:error] [pid 36892:tid 36956] [client 162.158.3.102:11219] [client 162.158.3.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/docker/.env.local"] [unique_id "acsUm0yj9S4G0ek3O4LE9QAAAIU"]
[Tue Mar 31 08:26:04.024020 2026] [:error] [pid 36892:tid 36969] [client 162.158.3.119:10949] [client 162.158.3.119] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/server/.env"] [unique_id "acsUnEyj9S4G0ek3O4LE9gAAAJI"]
[Tue Mar 31 08:26:04.094510 2026] [:error] [pid 36891:tid 36931] [client 162.158.3.131:11959] [client 162.158.3.131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/srv/.env"] [unique_id "acsUnJJhiMaJUqoqfl4tVAAAAEc"]
[Tue Mar 31 08:26:04.121464 2026] [:error] [pid 36891:tid 36926] [client 162.158.2.90:9229] [client 162.158.2.90] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/web/.env"] [unique_id "acsUnJJhiMaJUqoqfl4tVQAAAEI"]
[Tue Mar 31 08:26:04.307985 2026] [:error] [pid 36892:tid 36959] [client 162.158.3.102:11226] [client 162.158.3.102] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/site/.env"] [unique_id "acsUnEyj9S4G0ek3O4LE-QAAAIg"]
[Tue Mar 31 08:26:04.378665 2026] [:error] [pid 36892:tid 36968] [client 162.158.3.112:9365] [client 162.158.3.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/www/.env"] [unique_id "acsUnEyj9S4G0ek3O4LE-gAAAJE"]
[Tue Mar 31 08:26:04.401254 2026] [:error] [pid 36982:tid 36992] [client 162.158.3.132:13900] [client 162.158.3.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/var/www/.env"] [unique_id "acsUnPlMmeoQKN0r_GNyeQAAAMc"]
[Tue Mar 31 08:26:04.588710 2026] [:error] [pid 36890:tid 36906] [client 162.158.2.147:12154] [client 162.158.2.147] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/var/www/html/.env"] [unique_id "acsUnJ8FASPd_uH8z7c_CQAAAAs"]
[Tue Mar 31 08:26:04.658030 2026] [:error] [pid 36890:tid 36897] [client 162.158.3.128:10990] [client 162.158.3.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/home/.env"] [unique_id "acsUnJ8FASPd_uH8z7c_CgAAAAI"]
[Tue Mar 31 08:26:04.686645 2026] [:error] [pid 36982:tid 37008] [client 162.158.3.141:10823] [client 162.158.3.141] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/root/.env"] [unique_id "acsUnPlMmeoQKN0r_GNyegAAANc"]
[Tue Mar 31 08:26:04.866391 2026] [:error] [pid 36982:tid 37009] [client 162.158.2.146:10700] [client 162.158.2.146] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env_config"] [unique_id "acsUnPlMmeoQKN0r_GNyfAAAANg"]
[Tue Mar 31 08:26:04.941694 2026] [:error] [pid 41421:tid 41438] [client 162.158.3.132:13906] [client 162.158.3.132] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env_secret"] [unique_id "acsUnBSaDjY9kKFtUQBXZQAAAQ4"]
[Tue Mar 31 08:26:04.963069 2026] [:error] [pid 36982:tid 37004] [client 162.158.3.128:10614] [client 162.158.3.128] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env_settings"] [unique_id "acsUnPlMmeoQKN0r_GNyfQAAANM"]
[Tue Mar 31 08:26:05.143556 2026] [:error] [pid 41421:tid 41433] [client 162.158.3.120:10494] [client 162.158.3.120] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.local.backup"] [unique_id "acsUnRSaDjY9kKFtUQBXZgAAAQk"]
[Tue Mar 31 08:26:21.112490 2026] [:error] [pid 36982:tid 36987] [client 162.158.3.112:11601] [client 162.158.3.112] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin/.env"] [unique_id "acsUrflMmeoQKN0r_GNypgAAAMI"]
[Tue Mar 31 08:26:21.985453 2026] [:error] [pid 41421:tid 41439] [client 162.158.3.141:13297] [client 162.158.3.141] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.php"] [unique_id "acsUrRSaDjY9kKFtUQBXdwAAAQ8"]
[Tue Mar 31 08:55:10.378087 2026] [:error] [pid 36890:tid 36919] [client 74.248.131.192:23152] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acsbbp8FASPd_uH8z7dNngAAABg"]
[Tue Mar 31 08:55:10.885411 2026] [:error] [pid 36890:tid 36900] [client 74.248.131.192:23211] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acsbbp8FASPd_uH8z7dNoAAAAAU"]
[Tue Mar 31 08:55:11.403198 2026] [:error] [pid 41421:tid 41434] [client 74.248.131.192:37169] [client 74.248.131.192] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "acsbbxSaDjY9kKFtUQBwrAAAAQo"]
[Wed Apr 01 04:28:03.180206 2026] [:error] [pid 58050:tid 58077] [client 68.221.68.130:23119] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wglum1.php"] [unique_id "acwuU-pNVNOd8B2ubudRAQAAABY"]
[Wed Apr 01 04:28:03.659660 2026] [:error] [pid 58050:tid 58066] [client 68.221.68.130:23047] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wglum1.php"] [unique_id "acwuU-pNVNOd8B2ubudRBAAAAAs"]
[Wed Apr 01 04:28:04.158203 2026] [:error] [pid 58052:tid 58116] [client 68.221.68.130:23147] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wglum1.php"] [unique_id "acwuVKLW-jJhWvhl_rq94gAAAIM"]
[Wed Apr 01 04:28:04.689898 2026] [:error] [pid 58051:tid 58097] [client 68.221.68.130:23129] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wglum1.php"] [unique_id "acwuVA8LzKxveydDkYC1-QAAAEs"]
[Wed Apr 01 04:28:05.171637 2026] [:error] [pid 58050:tid 58076] [client 68.221.68.130:23131] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "acwuVepNVNOd8B2ubudRBwAAABU"]
[Wed Apr 01 04:28:05.652703 2026] [:error] [pid 58052:tid 58119] [client 68.221.68.130:23137] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "acwuVaLW-jJhWvhl_rq95gAAAIY"]
[Wed Apr 01 04:28:06.132747 2026] [:error] [pid 58052:tid 58121] [client 68.221.68.130:23148] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "acwuVqLW-jJhWvhl_rq95wAAAIg"]
[Wed Apr 01 04:28:06.649296 2026] [:error] [pid 58139:tid 58146] [client 68.221.68.130:23104] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "acwuVjmNuaW910kV7O7t9wAAAMM"]
[Wed Apr 01 04:28:07.133828 2026] [:error] [pid 58051:tid 58105] [client 68.221.68.130:23162] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-true.php"] [unique_id "acwuVw8LzKxveydDkYC1_wAAAFM"]
[Wed Apr 01 04:28:07.651506 2026] [:error] [pid 58051:tid 58107] [client 68.221.68.130:23041] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-true.php"] [unique_id "acwuVw8LzKxveydDkYC2AAAAAFU"]
[Wed Apr 01 04:28:08.212947 2026] [:error] [pid 58139:tid 58148] [client 68.221.68.130:23062] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-true.php"] [unique_id "acwuWDmNuaW910kV7O7t-QAAAMU"]
[Wed Apr 01 04:28:08.693921 2026] [:error] [pid 58139:tid 58152] [client 68.221.68.130:23123] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-true.php"] [unique_id "acwuWDmNuaW910kV7O7t-wAAAMk"]
[Wed Apr 01 04:28:09.176272 2026] [:error] [pid 58051:tid 58097] [client 68.221.68.130:23160] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws42.php"] [unique_id "acwuWQ8LzKxveydDkYC2BAAAAEs"]
[Wed Apr 01 04:28:09.658897 2026] [:error] [pid 58139:tid 58156] [client 68.221.68.130:23042] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws42.php"] [unique_id "acwuWTmNuaW910kV7O7t_QAAAM0"]
[Wed Apr 01 04:28:10.218646 2026] [:error] [pid 58139:tid 58160] [client 68.221.68.130:23073] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws42.php"] [unique_id "acwuWjmNuaW910kV7O7uAAAAANE"]
[Wed Apr 01 04:28:10.699896 2026] [:error] [pid 58051:tid 58104] [client 68.221.68.130:23153] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws42.php"] [unique_id "acwuWg8LzKxveydDkYC2CAAAAFI"]
[Wed Apr 01 04:28:11.179830 2026] [:error] [pid 58051:tid 58105] [client 68.221.68.130:22996] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "acwuWw8LzKxveydDkYC2CgAAAFM"]
[Wed Apr 01 04:28:11.659482 2026] [:error] [pid 58139:tid 58165] [client 68.221.68.130:23126] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "acwuWzmNuaW910kV7O7uBQAAANY"]
[Wed Apr 01 04:28:12.140462 2026] [:error] [pid 58139:tid 58143] [client 68.221.68.130:23120] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "acwuXDmNuaW910kV7O7uBwAAAMA"]
[Wed Apr 01 04:28:12.666763 2026] [:error] [pid 58051:tid 58088] [client 68.221.68.130:23107] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "acwuXA8LzKxveydDkYC2DwAAAEI"]
[Wed Apr 01 04:28:13.245349 2026] [:error] [pid 58139:tid 58150] [client 68.221.68.130:23110] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "acwuXTmNuaW910kV7O7uDgAAAMc"]
[Wed Apr 01 04:28:13.747792 2026] [:error] [pid 58139:tid 58154] [client 68.221.68.130:23112] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "acwuXTmNuaW910kV7O7uEQAAAMs"]
[Wed Apr 01 04:28:14.374998 2026] [:error] [pid 58052:tid 58115] [client 68.221.68.130:23121] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "acwuXqLW-jJhWvhl_rq97wAAAII"]
[Wed Apr 01 04:28:14.985230 2026] [:error] [pid 58139:tid 58157] [client 68.221.68.130:23052] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "acwuXjmNuaW910kV7O7uEwAAAM4"]
[Wed Apr 01 04:28:15.660182 2026] [:error] [pid 58139:tid 58164] [client 68.221.68.130:23053] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "acwuXzmNuaW910kV7O7uFQAAANU"]
[Wed Apr 01 04:28:16.271814 2026] [:error] [pid 58052:tid 58119] [client 68.221.68.130:22977] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "acwuYKLW-jJhWvhl_rq98wAAAIY"]
[Wed Apr 01 04:28:17.007937 2026] [:error] [pid 58139:tid 58147] [client 68.221.68.130:23074] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "acwuYTmNuaW910kV7O7uGQAAAMQ"]
[Wed Apr 01 04:28:17.568028 2026] [:error] [pid 58139:tid 58150] [client 68.221.68.130:23124] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "acwuYTmNuaW910kV7O7uHAAAAMc"]
[Wed Apr 01 04:28:18.225177 2026] [:error] [pid 58139:tid 58148] [client 68.221.68.130:23155] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/north1.php"] [unique_id "acwuYjmNuaW910kV7O7uHQAAAMU"]
[Wed Apr 01 04:28:18.947730 2026] [:error] [pid 58139:tid 58157] [client 68.221.68.130:23151] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/north1.php"] [unique_id "acwuYjmNuaW910kV7O7uHgAAAM4"]
[Wed Apr 01 04:28:19.951834 2026] [:error] [pid 58052:tid 58122] [client 68.221.68.130:23149] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/north1.php"] [unique_id "acwuY6LW-jJhWvhl_rq99gAAAIk"]
[Wed Apr 01 04:28:20.991454 2026] [:error] [pid 58052:tid 58128] [client 68.221.68.130:23099] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/north1.php"] [unique_id "acwuZKLW-jJhWvhl_rq9-AAAAI8"]
[Wed Apr 01 04:28:21.978442 2026] [:error] [pid 58050:tid 58075] [client 68.221.68.130:22992] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/eee.php"] [unique_id "acwuZepNVNOd8B2ubudRFQAAABQ"]
[Wed Apr 01 04:28:22.515894 2026] [:error] [pid 58050:tid 58077] [client 68.221.68.130:23091] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/eee.php"] [unique_id "acwuZupNVNOd8B2ubudRGQAAABY"]
[Wed Apr 01 04:28:23.064727 2026] [:error] [pid 58050:tid 58058] [client 68.221.68.130:23051] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/eee.php"] [unique_id "acwuZ-pNVNOd8B2ubudRGwAAAAM"]
[Wed Apr 01 04:28:23.572150 2026] [:error] [pid 58050:tid 58071] [client 68.221.68.130:23113] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/eee.php"] [unique_id "acwuZ-pNVNOd8B2ubudRHQAAABA"]
[Wed Apr 01 04:28:24.108566 2026] [:error] [pid 58050:tid 58062] [client 68.221.68.130:23109] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "acwuaOpNVNOd8B2ubudRIwAAAAc"]
[Wed Apr 01 04:28:24.655673 2026] [:error] [pid 58050:tid 58075] [client 68.221.68.130:23096] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "acwuaOpNVNOd8B2ubudRJwAAABQ"]
[Wed Apr 01 04:28:25.214639 2026] [:error] [pid 58051:tid 58094] [client 68.221.68.130:23111] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "acwuaQ8LzKxveydDkYC2HAAAAEg"]
[Wed Apr 01 04:28:25.826663 2026] [:error] [pid 58052:tid 58115] [client 68.221.68.130:23056] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "acwuaaLW-jJhWvhl_rq-AQAAAII"]
[Wed Apr 01 04:28:26.329655 2026] [:error] [pid 58051:tid 58103] [client 68.221.68.130:23044] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acwuag8LzKxveydDkYC2HgAAAFE"]
[Wed Apr 01 04:28:26.816418 2026] [:error] [pid 58052:tid 58117] [client 68.221.68.130:23143] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acwuaqLW-jJhWvhl_rq-AgAAAIQ"]
[Wed Apr 01 04:28:27.301413 2026] [:error] [pid 58052:tid 58122] [client 68.221.68.130:22978] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acwua6LW-jJhWvhl_rq-AwAAAIk"]
[Wed Apr 01 04:28:27.788589 2026] [:error] [pid 58052:tid 58127] [client 68.221.68.130:23068] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acwua6LW-jJhWvhl_rq-BQAAAI4"]
[Wed Apr 01 04:28:28.315425 2026] [:error] [pid 58050:tid 58068] [client 68.221.68.130:23046] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws77.php"] [unique_id "acwubOpNVNOd8B2ubudRLQAAAA0"]
[Wed Apr 01 04:28:28.871575 2026] [:error] [pid 58052:tid 58132] [client 68.221.68.130:23134] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws77.php"] [unique_id "acwubKLW-jJhWvhl_rq-CAAAAJM"]
[Wed Apr 01 04:28:29.350342 2026] [:error] [pid 58139:tid 58143] [client 68.221.68.130:23060] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws77.php"] [unique_id "acwubTmNuaW910kV7O7uLwAAAMA"]
[Wed Apr 01 04:28:29.849294 2026] [:error] [pid 58052:tid 58114] [client 68.221.68.130:23078] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws77.php"] [unique_id "acwubaLW-jJhWvhl_rq-DAAAAIE"]
[Wed Apr 01 04:28:30.422010 2026] [:error] [pid 58052:tid 58119] [client 68.221.68.130:23154] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gpt-sh.php"] [unique_id "acwubqLW-jJhWvhl_rq-DgAAAIY"]
[Wed Apr 01 04:28:30.931401 2026] [:error] [pid 58139:tid 58147] [client 68.221.68.130:23080] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gpt-sh.php"] [unique_id "acwubjmNuaW910kV7O7uMgAAAMQ"]
[Wed Apr 01 04:28:31.414457 2026] [:error] [pid 58139:tid 58150] [client 68.221.68.130:23093] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gpt-sh.php"] [unique_id "acwubzmNuaW910kV7O7uNAAAAMc"]
[Wed Apr 01 04:28:31.958195 2026] [:error] [pid 58139:tid 58157] [client 68.221.68.130:23138] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gpt-sh.php"] [unique_id "acwubzmNuaW910kV7O7uNwAAAM4"]
[Wed Apr 01 04:28:32.469939 2026] [:error] [pid 58139:tid 58159] [client 68.221.68.130:23040] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "acwucDmNuaW910kV7O7uOQAAANA"]
[Wed Apr 01 04:28:32.965655 2026] [:error] [pid 58050:tid 58066] [client 68.221.68.130:23130] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "acwucOpNVNOd8B2ubudRLgAAAAs"]
[Wed Apr 01 04:28:33.474475 2026] [:error] [pid 58050:tid 58056] [client 68.221.68.130:23132] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "acwucepNVNOd8B2ubudRMQAAAAE"]
[Wed Apr 01 04:28:33.952055 2026] [:error] [pid 58052:tid 58137] [client 68.221.68.130:23115] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "acwucaLW-jJhWvhl_rq-FAAAAJg"]
[Wed Apr 01 04:28:34.434288 2026] [:error] [pid 58052:tid 58136] [client 68.221.68.130:23059] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "acwucqLW-jJhWvhl_rq-FgAAAJc"]
[Wed Apr 01 04:28:34.937884 2026] [:error] [pid 58139:tid 58163] [client 68.221.68.130:23045] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "acwucjmNuaW910kV7O7uPQAAANQ"]
[Wed Apr 01 04:28:35.420385 2026] [:error] [pid 58052:tid 58118] [client 68.221.68.130:23095] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "acwuc6LW-jJhWvhl_rq-GQAAAIU"]
[Wed Apr 01 04:28:35.901721 2026] [:error] [pid 58051:tid 58107] [client 68.221.68.130:23144] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "acwucw8LzKxveydDkYC2IgAAAFU"]
[Wed Apr 01 04:28:36.415011 2026] [:error] [pid 58139:tid 58146] [client 68.221.68.130:22983] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wander.php"] [unique_id "acwudDmNuaW910kV7O7uQQAAAMM"]
[Wed Apr 01 04:28:36.897369 2026] [:error] [pid 58139:tid 58148] [client 68.221.68.130:23139] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wander.php"] [unique_id "acwudDmNuaW910kV7O7uQgAAAMU"]
[Wed Apr 01 04:28:37.380573 2026] [:error] [pid 58051:tid 58088] [client 68.221.68.130:23064] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wander.php"] [unique_id "acwudQ8LzKxveydDkYC2IwAAAEI"]
[Wed Apr 01 04:28:37.889002 2026] [:error] [pid 58051:tid 58110] [client 68.221.68.130:23027] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wander.php"] [unique_id "acwudQ8LzKxveydDkYC2JgAAAFg"]
[Wed Apr 01 04:28:38.371307 2026] [:error] [pid 58139:tid 58154] [client 68.221.68.130:23116] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/h02ugyh.php"] [unique_id "acwudjmNuaW910kV7O7uQwAAAMs"]
[Wed Apr 01 04:28:38.851523 2026] [:error] [pid 58051:tid 58103] [client 68.221.68.130:23053] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/h02ugyh.php"] [unique_id "acwudg8LzKxveydDkYC2KgAAAFE"]
[Wed Apr 01 04:28:39.360308 2026] [:error] [pid 58139:tid 58165] [client 68.221.68.130:23127] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/h02ugyh.php"] [unique_id "acwudzmNuaW910kV7O7uRgAAANY"]
[Wed Apr 01 04:28:39.873604 2026] [:error] [pid 58052:tid 58120] [client 68.221.68.130:23141] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/h02ugyh.php"] [unique_id "acwud6LW-jJhWvhl_rq-JAAAAIc"]
[Wed Apr 01 04:28:40.419859 2026] [:error] [pid 58051:tid 58091] [client 68.221.68.130:23069] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ad.php"] [unique_id "acwueA8LzKxveydDkYC2KwAAAEU"]
[Wed Apr 01 04:28:40.907011 2026] [:error] [pid 58051:tid 58102] [client 68.221.68.130:23050] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ad.php"] [unique_id "acwueA8LzKxveydDkYC2LAAAAFA"]
[Wed Apr 01 04:28:41.424512 2026] [:error] [pid 58051:tid 58106] [client 68.221.68.130:23125] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ad.php"] [unique_id "acwueQ8LzKxveydDkYC2LwAAAFQ"]
[Wed Apr 01 04:28:41.902461 2026] [:error] [pid 58051:tid 58096] [client 68.221.68.130:23090] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ad.php"] [unique_id "acwueQ8LzKxveydDkYC2MgAAAEo"]
[Wed Apr 01 04:28:42.380620 2026] [:error] [pid 58052:tid 58129] [client 68.221.68.130:23133] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/z60.php"] [unique_id "acwueqLW-jJhWvhl_rq-JwAAAJA"]
[Wed Apr 01 04:28:42.863952 2026] [:error] [pid 58052:tid 58131] [client 68.221.68.130:22987] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/z60.php"] [unique_id "acwueqLW-jJhWvhl_rq-KQAAAJI"]
[Wed Apr 01 04:28:43.342185 2026] [:error] [pid 58139:tid 58166] [client 68.221.68.130:22984] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/z60.php"] [unique_id "acwuezmNuaW910kV7O7uSwAAANc"]
[Wed Apr 01 04:28:43.863718 2026] [:error] [pid 58139:tid 58153] [client 68.221.68.130:23082] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/z60.php"] [unique_id "acwuezmNuaW910kV7O7uTQAAAMo"]
[Wed Apr 01 04:28:44.343648 2026] [:error] [pid 58139:tid 58146] [client 68.221.68.130:23054] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "acwufDmNuaW910kV7O7uTgAAAMM"]
[Wed Apr 01 04:28:44.826391 2026] [:error] [pid 58052:tid 58115] [client 68.221.68.130:23063] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "acwufKLW-jJhWvhl_rq-LQAAAII"]
[Wed Apr 01 04:28:45.366766 2026] [:error] [pid 58139:tid 58151] [client 68.221.68.130:23065] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "acwufTmNuaW910kV7O7uUgAAAMg"]
[Wed Apr 01 04:28:45.845430 2026] [:error] [pid 58139:tid 58147] [client 68.221.68.130:23146] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "acwufTmNuaW910kV7O7uVQAAAMQ"]
[Wed Apr 01 04:28:46.328031 2026] [:error] [pid 58052:tid 58120] [client 68.221.68.130:23048] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acwufqLW-jJhWvhl_rq-LwAAAIc"]
[Wed Apr 01 04:28:46.954064 2026] [:error] [pid 58139:tid 58160] [client 68.221.68.130:23161] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acwufjmNuaW910kV7O7uWAAAANE"]
[Wed Apr 01 04:28:47.436552 2026] [:error] [pid 58052:tid 58122] [client 68.221.68.130:23088] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acwuf6LW-jJhWvhl_rq-MQAAAIk"]
[Wed Apr 01 04:28:47.917123 2026] [:error] [pid 58051:tid 58103] [client 68.221.68.130:23136] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acwufw8LzKxveydDkYC2NgAAAFE"]
[Wed Apr 01 04:28:48.419989 2026] [:error] [pid 58052:tid 58119] [client 68.221.68.130:23108] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sql.php"] [unique_id "acwugKLW-jJhWvhl_rq-NAAAAIY"]
[Wed Apr 01 04:28:48.910541 2026] [:error] [pid 58139:tid 58167] [client 68.221.68.130:22994] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sql.php"] [unique_id "acwugDmNuaW910kV7O7uXQAAANg"]
[Wed Apr 01 04:28:49.414420 2026] [:error] [pid 58051:tid 58099] [client 68.221.68.130:22999] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sql.php"] [unique_id "acwugQ8LzKxveydDkYC2OAAAAE0"]
[Wed Apr 01 04:28:49.892681 2026] [:error] [pid 58139:tid 58149] [client 68.221.68.130:23066] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sql.php"] [unique_id "acwugTmNuaW910kV7O7uYQAAAMY"]
[Wed Apr 01 04:28:50.397824 2026] [:error] [pid 58139:tid 58153] [client 68.221.68.130:23142] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "acwugjmNuaW910kV7O7uYgAAAMo"]
[Wed Apr 01 04:28:50.884394 2026] [:error] [pid 58051:tid 58086] [client 68.221.68.130:23039] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "acwugg8LzKxveydDkYC2OwAAAEA"]
[Wed Apr 01 04:28:51.367668 2026] [:error] [pid 58052:tid 58120] [client 68.221.68.130:23163] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "acwug6LW-jJhWvhl_rq-OQAAAIc"]
[Wed Apr 01 04:28:51.859492 2026] [:error] [pid 58051:tid 58110] [client 68.221.68.130:22989] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "acwugw8LzKxveydDkYC2PAAAAFg"]
[Wed Apr 01 04:28:52.339566 2026] [:error] [pid 58139:tid 58150] [client 68.221.68.130:23014] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-class.php"] [unique_id "acwuhDmNuaW910kV7O7uagAAAMc"]
[Wed Apr 01 04:28:52.861769 2026] [:error] [pid 58139:tid 58163] [client 68.221.68.130:23026] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-class.php"] [unique_id "acwuhDmNuaW910kV7O7ubAAAANQ"]
[Wed Apr 01 04:28:53.354422 2026] [:error] [pid 58051:tid 58097] [client 68.221.68.130:23070] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-class.php"] [unique_id "acwuhQ8LzKxveydDkYC2PgAAAEs"]
[Wed Apr 01 04:28:53.836593 2026] [:error] [pid 58052:tid 58128] [client 68.221.68.130:23135] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-class.php"] [unique_id "acwuhaLW-jJhWvhl_rq-OwAAAI8"]
[Wed Apr 01 04:28:54.327665 2026] [:error] [pid 58139:tid 58154] [client 68.221.68.130:23058] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xper1.php"] [unique_id "acwuhjmNuaW910kV7O7ucQAAAMs"]
[Wed Apr 01 04:28:54.829789 2026] [:error] [pid 58052:tid 58123] [client 68.221.68.130:22940] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xper1.php"] [unique_id "acwuhqLW-jJhWvhl_rq-PQAAAIo"]
[Wed Apr 01 04:28:55.324417 2026] [:error] [pid 58050:tid 58078] [client 68.221.68.130:23156] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xper1.php"] [unique_id "acwuh-pNVNOd8B2ubudRQwAAABc"]
[Wed Apr 01 04:28:55.826274 2026] [:error] [pid 58050:tid 58079] [client 68.221.68.130:23071] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xper1.php"] [unique_id "acwuh-pNVNOd8B2ubudRRQAAABg"]
[Wed Apr 01 04:28:56.335569 2026] [:error] [pid 58050:tid 58075] [client 68.221.68.130:23166] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws78.php"] [unique_id "acwuiOpNVNOd8B2ubudRRwAAABQ"]
[Wed Apr 01 04:28:56.871737 2026] [:error] [pid 58050:tid 58061] [client 68.221.68.130:23057] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws78.php"] [unique_id "acwuiOpNVNOd8B2ubudRSAAAAAY"]
[Wed Apr 01 04:28:57.373835 2026] [:error] [pid 58052:tid 58113] [client 68.221.68.130:23009] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws78.php"] [unique_id "acwuiaLW-jJhWvhl_rq-QwAAAIA"]
[Wed Apr 01 04:28:57.872819 2026] [:error] [pid 58052:tid 58114] [client 68.221.68.130:23106] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws78.php"] [unique_id "acwuiaLW-jJhWvhl_rq-RAAAAIE"]
[Wed Apr 01 04:28:58.382353 2026] [:error] [pid 58052:tid 58124] [client 68.221.68.130:23032] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uang.php"] [unique_id "acwuiqLW-jJhWvhl_rq-RQAAAIs"]
[Wed Apr 01 04:28:58.870587 2026] [:error] [pid 58139:tid 58162] [client 68.221.68.130:23067] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uang.php"] [unique_id "acwuijmNuaW910kV7O7udwAAANM"]
[Wed Apr 01 04:28:59.490191 2026] [:error] [pid 58139:tid 58167] [client 68.221.68.130:23152] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uang.php"] [unique_id "acwuizmNuaW910kV7O7uegAAANg"]
[Wed Apr 01 04:28:59.983363 2026] [:error] [pid 58052:tid 58129] [client 68.221.68.130:23159] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uang.php"] [unique_id "acwui6LW-jJhWvhl_rq-SAAAAJA"]
[Wed Apr 01 04:29:00.529523 2026] [:error] [pid 58139:tid 58143] [client 68.221.68.130:23024] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/save.php"] [unique_id "acwujDmNuaW910kV7O7ufAAAAMA"]
[Wed Apr 01 04:29:01.041508 2026] [:error] [pid 58139:tid 58160] [client 68.221.68.130:23094] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/save.php"] [unique_id "acwujTmNuaW910kV7O7ufgAAANE"]
[Wed Apr 01 04:29:01.549954 2026] [:error] [pid 58051:tid 58105] [client 68.221.68.130:23092] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/save.php"] [unique_id "acwujQ8LzKxveydDkYC2RQAAAFM"]
[Wed Apr 01 04:29:08.828330 2026] [:error] [pid 58139:tid 58149] [client 68.221.68.130:23061] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/albin.php"] [unique_id "acwulDmNuaW910kV7O7upQAAAMY"]
[Wed Apr 01 04:29:09.358404 2026] [:error] [pid 58052:tid 58116] [client 68.221.68.130:23122] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/albin.php"] [unique_id "acwulaLW-jJhWvhl_rq-VQAAAIM"]
[Wed Apr 01 04:29:09.852752 2026] [:error] [pid 58051:tid 58095] [client 68.221.68.130:23077] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/albin.php"] [unique_id "acwulQ8LzKxveydDkYC2SwAAAEk"]
[Wed Apr 01 04:29:10.366318 2026] [:error] [pid 58052:tid 58127] [client 68.221.68.130:23157] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/albin.php"] [unique_id "acwulqLW-jJhWvhl_rq-VgAAAI4"]
[Wed Apr 01 04:29:10.859851 2026] [:error] [pid 58052:tid 58118] [client 68.221.68.130:22979] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/awh.php"] [unique_id "acwulqLW-jJhWvhl_rq-WAAAAIU"]
[Wed Apr 01 04:29:11.426262 2026] [:error] [pid 58052:tid 58132] [client 68.221.68.130:23089] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/awh.php"] [unique_id "acwul6LW-jJhWvhl_rq-WQAAAJM"]
[Wed Apr 01 04:29:11.947922 2026] [:error] [pid 58052:tid 58136] [client 68.221.68.130:23075] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/awh.php"] [unique_id "acwul6LW-jJhWvhl_rq-WgAAAJc"]
[Wed Apr 01 04:29:12.479175 2026] [:error] [pid 58052:tid 58125] [client 68.221.68.130:23055] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/awh.php"] [unique_id "acwumKLW-jJhWvhl_rq-WwAAAIw"]
[Wed Apr 01 04:29:12.990029 2026] [:error] [pid 58052:tid 58115] [client 68.221.68.130:22988] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shellerr.php"] [unique_id "acwumKLW-jJhWvhl_rq-XwAAAII"]
[Wed Apr 01 04:29:13.470601 2026] [:error] [pid 58052:tid 58124] [client 68.221.68.130:22857] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shellerr.php"] [unique_id "acwumaLW-jJhWvhl_rq-YgAAAIs"]
[Wed Apr 01 04:29:13.952319 2026] [:error] [pid 58052:tid 58133] [client 68.221.68.130:23007] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shellerr.php"] [unique_id "acwumaLW-jJhWvhl_rq-ZAAAAJQ"]
[Wed Apr 01 04:29:14.528414 2026] [:error] [pid 58052:tid 58118] [client 68.221.68.130:23085] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shellerr.php"] [unique_id "acwumqLW-jJhWvhl_rq-ZwAAAIU"]
[Wed Apr 01 04:29:15.008701 2026] [:error] [pid 58050:tid 58071] [client 68.221.68.130:23167] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-scanner.php"] [unique_id "acwum-pNVNOd8B2ubudRWQAAABA"]
[Wed Apr 01 04:29:15.500759 2026] [:error] [pid 58052:tid 58121] [client 68.221.68.130:23000] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-scanner.php"] [unique_id "acwum6LW-jJhWvhl_rq-fwAAAIg"]
[Wed Apr 01 04:29:15.982835 2026] [:error] [pid 58051:tid 58101] [client 68.221.68.130:23102] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-scanner.php"] [unique_id "acwumw8LzKxveydDkYC2TgAAAE8"]
[Wed Apr 01 04:29:16.594567 2026] [:error] [pid 58052:tid 58124] [client 68.221.68.130:23158] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-scanner.php"] [unique_id "acwunKLW-jJhWvhl_rq-ogAAAIs"]
[Wed Apr 01 04:29:17.105282 2026] [:error] [pid 58139:tid 58167] [client 68.221.68.130:23165] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "acwunTmNuaW910kV7O7utQAAANg"]
[Wed Apr 01 04:29:17.648200 2026] [:error] [pid 58052:tid 58133] [client 68.221.68.130:23005] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "acwunaLW-jJhWvhl_rq-pAAAAJQ"]
[Wed Apr 01 04:29:18.130529 2026] [:error] [pid 58052:tid 58118] [client 68.221.68.130:23097] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "acwunqLW-jJhWvhl_rq-pQAAAIU"]
[Wed Apr 01 04:29:18.611316 2026] [:error] [pid 58052:tid 58121] [client 68.221.68.130:23128] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "acwunqLW-jJhWvhl_rq-pgAAAIg"]
[Wed Apr 01 04:29:19.124608 2026] [:error] [pid 58139:tid 58149] [client 68.221.68.130:23034] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/to.php"] [unique_id "acwunzmNuaW910kV7O7uuAAAAMY"]
[Wed Apr 01 04:29:19.603759 2026] [:error] [pid 58139:tid 58158] [client 68.221.68.130:22995] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/to.php"] [unique_id "acwunzmNuaW910kV7O7uvAAAAM8"]
[Wed Apr 01 04:29:20.110895 2026] [:error] [pid 58139:tid 58145] [client 68.221.68.130:22923] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/to.php"] [unique_id "acwuoDmNuaW910kV7O7uwQAAAMI"]
[Wed Apr 01 04:29:20.605555 2026] [:error] [pid 58050:tid 58069] [client 68.221.68.130:23114] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/to.php"] [unique_id "acwuoOpNVNOd8B2ubudRXQAAAA4"]
[Wed Apr 01 04:29:21.085476 2026] [:error] [pid 58051:tid 58100] [client 68.221.68.130:23164] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "acwuoQ8LzKxveydDkYC2VwAAAE4"]
[Wed Apr 01 04:29:21.623956 2026] [:error] [pid 58139:tid 58153] [client 68.221.68.130:23098] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "acwuoTmNuaW910kV7O7uyAAAAMo"]
[Wed Apr 01 04:29:22.215529 2026] [:error] [pid 58139:tid 58158] [client 68.221.68.130:22986] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "acwuojmNuaW910kV7O7uygAAAM8"]
[Wed Apr 01 04:29:22.740225 2026] [:error] [pid 58139:tid 58144] [client 68.221.68.130:22980] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "acwuojmNuaW910kV7O7uzQAAAME"]
[Wed Apr 01 04:29:23.418304 2026] [:error] [pid 58139:tid 58151] [client 68.221.68.130:23100] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ant.php"] [unique_id "acwuozmNuaW910kV7O7u0AAAAMg"]
[Wed Apr 01 04:29:24.536173 2026] [:error] [pid 58139:tid 58166] [client 68.221.68.130:22936] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ant.php"] [unique_id "acwupDmNuaW910kV7O7u2AAAANc"]
[Wed Apr 01 04:29:25.096285 2026] [:error] [pid 58051:tid 58088] [client 68.221.68.130:22934] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ant.php"] [unique_id "acwupQ8LzKxveydDkYC2WAAAAEI"]
[Wed Apr 01 04:29:25.585632 2026] [:error] [pid 58051:tid 58098] [client 68.221.68.130:23101] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ant.php"] [unique_id "acwupQ8LzKxveydDkYC2WQAAAEw"]
[Wed Apr 01 04:29:26.112903 2026] [:error] [pid 58052:tid 58113] [client 68.221.68.130:23140] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "acwupqLW-jJhWvhl_rq-tgAAAIA"]
[Wed Apr 01 04:29:26.729405 2026] [:error] [pid 58050:tid 58064] [client 68.221.68.130:23043] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "acwupupNVNOd8B2ubudRZQAAAAk"]
[Wed Apr 01 04:29:27.446958 2026] [:error] [pid 58139:tid 58152] [client 68.221.68.130:22922] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "acwupzmNuaW910kV7O7u3gAAAMk"]
[Wed Apr 01 04:29:27.964337 2026] [:error] [pid 58139:tid 58149] [client 68.221.68.130:23030] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "acwupzmNuaW910kV7O7u3wAAAMY"]
[Wed Apr 01 04:29:28.488786 2026] [:error] [pid 58139:tid 58143] [client 68.221.68.130:22966] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "acwuqDmNuaW910kV7O7u4QAAAMA"]
[Wed Apr 01 04:29:29.217502 2026] [:error] [pid 58050:tid 58056] [client 68.221.68.130:23087] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "acwuqepNVNOd8B2ubudRawAAAAE"]
[Wed Apr 01 04:29:29.981029 2026] [:error] [pid 58139:tid 58147] [client 68.221.68.130:23145] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "acwuqTmNuaW910kV7O7u5gAAAMQ"]
[Wed Apr 01 04:29:30.464992 2026] [:error] [pid 58139:tid 58144] [client 68.221.68.130:23081] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "acwuqjmNuaW910kV7O7u5wAAAME"]
[Wed Apr 01 04:29:31.079408 2026] [:error] [pid 58051:tid 58090] [client 68.221.68.130:23037] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "acwuqw8LzKxveydDkYC2XQAAAEQ"]
[Wed Apr 01 04:29:31.585279 2026] [:error] [pid 58139:tid 58148] [client 68.221.68.130:22933] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "acwuqzmNuaW910kV7O7u6wAAAMU"]
[Wed Apr 01 04:29:32.067572 2026] [:error] [pid 58052:tid 58117] [client 68.221.68.130:23049] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "acwurKLW-jJhWvhl_rq-vAAAAIQ"]
[Wed Apr 01 04:29:32.571953 2026] [:error] [pid 58139:tid 58163] [client 68.221.68.130:23072] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "acwurDmNuaW910kV7O7u7AAAANQ"]
[Wed Apr 01 04:29:33.076900 2026] [:error] [pid 58052:tid 58127] [client 68.221.68.130:22919] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/classgoto24.php"] [unique_id "acwuraLW-jJhWvhl_rq-vQAAAI4"]
[Wed Apr 01 04:29:33.565944 2026] [:error] [pid 58051:tid 58108] [client 68.221.68.130:22991] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/classgoto24.php"] [unique_id "acwurQ8LzKxveydDkYC2YgAAAFY"]
[Wed Apr 01 04:29:34.058139 2026] [:error] [pid 58051:tid 58103] [client 68.221.68.130:23004] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/classgoto24.php"] [unique_id "acwurg8LzKxveydDkYC2ZAAAAFE"]
[Wed Apr 01 04:29:34.593173 2026] [:error] [pid 58050:tid 58055] [client 68.221.68.130:23117] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/classgoto24.php"] [unique_id "acwurupNVNOd8B2ubudRbwAAAAA"]
[Wed Apr 01 04:29:35.081413 2026] [:error] [pid 58050:tid 58056] [client 68.221.68.130:22947] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "acwur-pNVNOd8B2ubudRcQAAAAE"]
[Wed Apr 01 04:29:35.587457 2026] [:error] [pid 58052:tid 58113] [client 68.221.68.130:22964] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "acwur6LW-jJhWvhl_rq-wQAAAIA"]
[Wed Apr 01 04:29:36.096877 2026] [:error] [pid 58052:tid 58134] [client 68.221.68.130:22985] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "acwusKLW-jJhWvhl_rq-wwAAAJU"]
[Wed Apr 01 04:29:36.600815 2026] [:error] [pid 58052:tid 58123] [client 68.221.68.130:22941] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "acwusKLW-jJhWvhl_rq-xgAAAIo"]
[Wed Apr 01 04:29:37.086835 2026] [:error] [pid 58052:tid 58126] [client 68.221.68.130:23016] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws43.php"] [unique_id "acwusaLW-jJhWvhl_rq-ygAAAI0"]
[Wed Apr 01 04:29:37.580476 2026] [:error] [pid 58052:tid 58120] [client 68.221.68.130:22990] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws43.php"] [unique_id "acwusaLW-jJhWvhl_rq-zAAAAIc"]
[Wed Apr 01 04:29:38.063607 2026] [:error] [pid 58050:tid 58064] [client 68.221.68.130:22935] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws43.php"] [unique_id "acwusupNVNOd8B2ubudRdwAAAAk"]
[Wed Apr 01 04:29:38.564518 2026] [:error] [pid 58052:tid 58131] [client 68.221.68.130:23008] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws43.php"] [unique_id "acwusqLW-jJhWvhl_rq-0gAAAJI"]
[Wed Apr 01 04:29:39.115369 2026] [:error] [pid 58050:tid 58055] [client 68.221.68.130:22854] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gec.php"] [unique_id "acwus-pNVNOd8B2ubudRegAAAAA"]
[Wed Apr 01 04:29:39.616907 2026] [:error] [pid 58050:tid 58056] [client 68.221.68.130:23017] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gec.php"] [unique_id "acwus-pNVNOd8B2ubudRfAAAAAE"]
[Wed Apr 01 04:29:40.112702 2026] [:error] [pid 58050:tid 58078] [client 68.221.68.130:22955] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gec.php"] [unique_id "acwutOpNVNOd8B2ubudRfgAAABc"]
[Wed Apr 01 04:29:40.609300 2026] [:error] [pid 58051:tid 58088] [client 68.221.68.130:23012] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gec.php"] [unique_id "acwutA8LzKxveydDkYC2bAAAAEI"]
[Wed Apr 01 04:29:41.101507 2026] [:error] [pid 58052:tid 58132] [client 68.221.68.130:23083] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "acwutaLW-jJhWvhl_rq-3AAAAJM"]
[Wed Apr 01 04:29:41.588983 2026] [:error] [pid 58139:tid 58143] [client 68.221.68.130:23002] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "acwutTmNuaW910kV7O7u9gAAAMA"]
[Wed Apr 01 04:29:42.148608 2026] [:error] [pid 58139:tid 58167] [client 68.221.68.130:22928] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "acwutjmNuaW910kV7O7u-QAAANg"]
[Wed Apr 01 04:29:42.736978 2026] [:error] [pid 58139:tid 58150] [client 68.221.68.130:23105] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "acwutjmNuaW910kV7O7u-wAAAMc"]
[Wed Apr 01 04:29:43.218382 2026] [:error] [pid 58139:tid 58157] [client 68.221.68.130:23018] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "acwutzmNuaW910kV7O7u_gAAAM4"]
[Wed Apr 01 04:29:43.715320 2026] [:error] [pid 58051:tid 58096] [client 68.221.68.130:22939] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "acwutw8LzKxveydDkYC2dAAAAEo"]
[Wed Apr 01 04:29:44.208858 2026] [:error] [pid 58051:tid 58086] [client 68.221.68.130:22993] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "acwuuA8LzKxveydDkYC2dwAAAEA"]
[Wed Apr 01 04:29:44.687299 2026] [:error] [pid 58139:tid 58163] [client 68.221.68.130:23010] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "acwuuDmNuaW910kV7O7vAgAAANQ"]
[Wed Apr 01 04:29:45.217797 2026] [:error] [pid 58051:tid 58087] [client 68.221.68.130:23021] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/size.php"] [unique_id "acwuuQ8LzKxveydDkYC2egAAAEE"]
[Wed Apr 01 04:29:45.744782 2026] [:error] [pid 58139:tid 58165] [client 68.221.68.130:22981] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/size.php"] [unique_id "acwuuTmNuaW910kV7O7vBwAAANY"]
[Wed Apr 01 04:29:46.255113 2026] [:error] [pid 58052:tid 58125] [client 68.221.68.130:23029] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/size.php"] [unique_id "acwuuqLW-jJhWvhl_rq-5gAAAIw"]
[Wed Apr 01 04:29:46.306143 2026] [:error] [pid 58052:tid 58116] [client 20.91.217.91:19842] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "acwuuqLW-jJhWvhl_rq-5wAAAIM"]
[Wed Apr 01 04:29:46.739714 2026] [:error] [pid 58051:tid 58102] [client 68.221.68.130:22937] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/size.php"] [unique_id "acwuug8LzKxveydDkYC2fgAAAFA"]
[Wed Apr 01 04:29:46.834355 2026] [:error] [pid 58139:tid 58158] [client 20.91.217.91:19848] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "acwuujmNuaW910kV7O7vCQAAAM8"]
[Wed Apr 01 04:29:47.297218 2026] [:error] [pid 58139:tid 58148] [client 68.221.68.130:22976] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "acwuuzmNuaW910kV7O7vCgAAAMU"]
[Wed Apr 01 04:29:47.454410 2026] [:error] [pid 58050:tid 58070] [client 20.91.217.91:19907] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "acwuu-pNVNOd8B2ubudRhgAAAA8"]
[Wed Apr 01 04:29:47.797106 2026] [:error] [pid 58051:tid 58097] [client 68.221.68.130:22867] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "acwuuw8LzKxveydDkYC2fwAAAEs"]
[Wed Apr 01 04:29:48.105298 2026] [:error] [pid 58051:tid 58099] [client 20.91.217.91:19913] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "acwuvA8LzKxveydDkYC2gAAAAE0"]
[Wed Apr 01 04:29:48.288425 2026] [:error] [pid 58051:tid 58086] [client 68.221.68.130:23011] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "acwuvA8LzKxveydDkYC2ggAAAEA"]
[Wed Apr 01 04:29:48.673114 2026] [:error] [pid 58052:tid 58130] [client 20.91.217.91:19960] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-true.php"] [unique_id "acwuvKLW-jJhWvhl_rq-6QAAAJE"]
[Wed Apr 01 04:29:48.770619 2026] [:error] [pid 58139:tid 58153] [client 68.221.68.130:22912] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "acwuvDmNuaW910kV7O7vEAAAAMo"]
[Wed Apr 01 04:29:49.210098 2026] [:error] [pid 58139:tid 58167] [client 20.91.217.91:19907] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-true.php"] [unique_id "acwuvTmNuaW910kV7O7vEgAAANg"]
[Wed Apr 01 04:29:49.270090 2026] [:error] [pid 58139:tid 58144] [client 68.221.68.130:22921] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-load.php"] [unique_id "acwuvTmNuaW910kV7O7vEwAAAME"]
[Wed Apr 01 04:29:49.749765 2026] [:error] [pid 58139:tid 58161] [client 68.221.68.130:23003] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-load.php"] [unique_id "acwuvTmNuaW910kV7O7vFQAAANI"]
[Wed Apr 01 04:29:49.750367 2026] [:error] [pid 58139:tid 58152] [client 20.91.217.91:19931] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-true.php"] [unique_id "acwuvTmNuaW910kV7O7vFgAAAMk"]
[Wed Apr 01 04:29:50.232682 2026] [:error] [pid 58050:tid 58079] [client 68.221.68.130:23079] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-load.php"] [unique_id "acwuvupNVNOd8B2ubudRiQAAABg"]
[Wed Apr 01 04:29:50.299610 2026] [:error] [pid 58050:tid 58062] [client 20.91.217.91:19846] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-true.php"] [unique_id "acwuvupNVNOd8B2ubudRigAAAAc"]
[Wed Apr 01 04:29:50.788371 2026] [:error] [pid 58051:tid 58093] [client 68.221.68.130:22924] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-load.php"] [unique_id "acwuvg8LzKxveydDkYC2hQAAAEc"]
[Wed Apr 01 04:29:50.858346 2026] [:error] [pid 58051:tid 58108] [client 20.91.217.91:19904] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws42.php"] [unique_id "acwuvg8LzKxveydDkYC2hgAAAFY"]
[Wed Apr 01 04:29:51.267433 2026] [:error] [pid 58050:tid 58075] [client 68.221.68.130:23036] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/torsa1.php"] [unique_id "acwuv-pNVNOd8B2ubudRjQAAABQ"]
[Wed Apr 01 04:29:51.399379 2026] [:error] [pid 58050:tid 58068] [client 20.91.217.91:19921] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws42.php"] [unique_id "acwuv-pNVNOd8B2ubudRjgAAAA0"]
[Wed Apr 01 04:29:51.798089 2026] [:error] [pid 58050:tid 58060] [client 68.221.68.130:23013] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/torsa1.php"] [unique_id "acwuv-pNVNOd8B2ubudRkAAAAAU"]
[Wed Apr 01 04:29:51.925514 2026] [:error] [pid 58050:tid 58066] [client 20.91.217.91:19967] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws42.php"] [unique_id "acwuv-pNVNOd8B2ubudRkwAAAAs"]
[Wed Apr 01 04:29:52.451595 2026] [:error] [pid 58050:tid 58070] [client 20.91.217.91:19926] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws42.php"] [unique_id "acwuwOpNVNOd8B2ubudRlwAAAA8"]
[Wed Apr 01 04:29:52.534923 2026] [:error] [pid 58050:tid 58074] [client 68.221.68.130:23001] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/torsa1.php"] [unique_id "acwuwOpNVNOd8B2ubudRmAAAABM"]
[Wed Apr 01 04:29:52.990847 2026] [:error] [pid 58139:tid 58147] [client 20.91.217.91:19962] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "acwuwDmNuaW910kV7O7vGwAAAMQ"]
[Wed Apr 01 04:29:53.123256 2026] [:error] [pid 58051:tid 58088] [client 68.221.68.130:22878] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/torsa1.php"] [unique_id "acwuwQ8LzKxveydDkYC2hwAAAEI"]
[Wed Apr 01 04:29:53.525088 2026] [:error] [pid 58139:tid 58166] [client 20.91.217.91:19905] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "acwuwTmNuaW910kV7O7vHgAAANc"]
[Wed Apr 01 04:29:53.657409 2026] [:error] [pid 58139:tid 58157] [client 68.221.68.130:22875] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/b.php"] [unique_id "acwuwTmNuaW910kV7O7vIAAAAM4"]
[Wed Apr 01 04:29:54.060290 2026] [:error] [pid 58139:tid 58164] [client 20.91.217.91:19939] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "acwuwjmNuaW910kV7O7vIgAAANU"]
[Wed Apr 01 04:29:54.141892 2026] [:error] [pid 58139:tid 58165] [client 68.221.68.130:22958] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/b.php"] [unique_id "acwuwjmNuaW910kV7O7vIwAAANY"]
[Wed Apr 01 04:29:54.584889 2026] [:error] [pid 58050:tid 58068] [client 20.91.217.91:19915] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "acwuwupNVNOd8B2ubudRnAAAAA0"]
[Wed Apr 01 04:29:54.623856 2026] [:error] [pid 58139:tid 58146] [client 68.221.68.130:22968] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/b.php"] [unique_id "acwuwjmNuaW910kV7O7vJgAAAMM"]
[Wed Apr 01 04:29:55.101208 2026] [:error] [pid 58052:tid 58136] [client 68.221.68.130:22952] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/b.php"] [unique_id "acwuw6LW-jJhWvhl_rq-7wAAAJc"]
[Wed Apr 01 04:29:55.109522 2026] [:error] [pid 58052:tid 58115] [client 20.91.217.91:19840] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "acwuw6LW-jJhWvhl_rq-8AAAAII"]
[Wed Apr 01 04:29:55.639422 2026] [:error] [pid 58051:tid 58095] [client 20.91.217.91:19906] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "acwuww8LzKxveydDkYC2iAAAAEk"]
[Wed Apr 01 04:29:55.639652 2026] [:error] [pid 58051:tid 58102] [client 68.221.68.130:22938] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vaza.php"] [unique_id "acwuww8LzKxveydDkYC2iQAAAFA"]
[Wed Apr 01 04:29:56.174913 2026] [:error] [pid 58139:tid 58161] [client 20.91.217.91:19920] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "acwuxDmNuaW910kV7O7vKQAAANI"]
[Wed Apr 01 04:29:56.206500 2026] [:error] [pid 58050:tid 58074] [client 68.221.68.130:22943] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vaza.php"] [unique_id "acwuxOpNVNOd8B2ubudRogAAABM"]
[Wed Apr 01 04:29:56.701095 2026] [:error] [pid 58139:tid 58147] [client 20.91.217.91:19910] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "acwuxDmNuaW910kV7O7vKgAAAMQ"]
[Wed Apr 01 04:29:56.744149 2026] [:error] [pid 58139:tid 58156] [client 68.221.68.130:22931] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vaza.php"] [unique_id "acwuxDmNuaW910kV7O7vKwAAAM0"]
[Wed Apr 01 04:29:57.230364 2026] [:error] [pid 58051:tid 58109] [client 20.91.217.91:19843] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "acwuxQ8LzKxveydDkYC2iwAAAFc"]
[Wed Apr 01 04:29:57.266396 2026] [:error] [pid 58139:tid 58151] [client 68.221.68.130:22859] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vaza.php"] [unique_id "acwuxTmNuaW910kV7O7vLgAAAMg"]
[Wed Apr 01 04:29:57.749298 2026] [:error] [pid 58139:tid 58162] [client 68.221.68.130:22920] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "acwuxTmNuaW910kV7O7vMQAAANM"]
[Wed Apr 01 04:29:57.786411 2026] [:error] [pid 58139:tid 58164] [client 20.91.217.91:19909] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "acwuxTmNuaW910kV7O7vMgAAANU"]
[Wed Apr 01 04:29:58.316529 2026] [:error] [pid 58139:tid 58148] [client 20.91.217.91:19929] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "acwuxjmNuaW910kV7O7vNwAAAMU"]
[Wed Apr 01 04:29:58.317011 2026] [:error] [pid 58052:tid 58125] [client 68.221.68.130:22945] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "acwuxqLW-jJhWvhl_rq-8wAAAIw"]
[Wed Apr 01 04:29:58.797386 2026] [:error] [pid 58051:tid 58097] [client 68.221.68.130:23039] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "acwuxg8LzKxveydDkYC2jAAAAEs"]
[Wed Apr 01 04:29:58.852127 2026] [:error] [pid 58050:tid 58075] [client 20.91.217.91:19947] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "acwuxupNVNOd8B2ubudRpQAAABQ"]
[Wed Apr 01 04:29:59.379470 2026] [:error] [pid 58050:tid 58071] [client 20.91.217.91:19911] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/north1.php"] [unique_id "acwux-pNVNOd8B2ubudRpwAAABA"]
[Wed Apr 01 04:29:59.405162 2026] [:error] [pid 58051:tid 58104] [client 68.221.68.130:23076] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "acwuxw8LzKxveydDkYC2jQAAAFI"]
[Wed Apr 01 04:29:59.903984 2026] [:error] [pid 58051:tid 58099] [client 68.221.68.130:23019] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acwuxw8LzKxveydDkYC2jgAAAE0"]
[Wed Apr 01 04:29:59.904966 2026] [:error] [pid 58052:tid 58123] [client 20.91.217.91:19923] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/north1.php"] [unique_id "acwux6LW-jJhWvhl_rq--QAAAIo"]
[Wed Apr 01 04:30:00.389694 2026] [:error] [pid 58050:tid 58067] [client 68.221.68.130:22929] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acwuyOpNVNOd8B2ubudRqAAAAAw"]
[Wed Apr 01 04:30:00.434824 2026] [:error] [pid 58050:tid 58069] [client 20.91.217.91:19936] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/north1.php"] [unique_id "acwuyOpNVNOd8B2ubudRqgAAAA4"]
[Wed Apr 01 04:30:00.958002 2026] [:error] [pid 58051:tid 58094] [client 68.221.68.130:22927] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acwuyA8LzKxveydDkYC2kQAAAEg"]
[Wed Apr 01 04:30:00.969169 2026] [:error] [pid 58052:tid 58120] [client 20.91.217.91:19912] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/north1.php"] [unique_id "acwuyKLW-jJhWvhl_rq--gAAAIc"]
[Wed Apr 01 04:30:01.437189 2026] [:error] [pid 58139:tid 58153] [client 68.221.68.130:23137] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acwuyTmNuaW910kV7O7vPwAAAMo"]
[Wed Apr 01 04:30:01.513420 2026] [:error] [pid 58139:tid 58150] [client 20.91.217.91:19924] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/eee.php"] [unique_id "acwuyTmNuaW910kV7O7vQAAAAMc"]
[Wed Apr 01 04:30:01.915967 2026] [:error] [pid 58139:tid 58147] [client 68.221.68.130:22932] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xc0252.php"] [unique_id "acwuyTmNuaW910kV7O7vQQAAAMQ"]
[Wed Apr 01 04:30:02.043544 2026] [:error] [pid 58139:tid 58156] [client 20.91.217.91:19852] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/eee.php"] [unique_id "acwuyjmNuaW910kV7O7vQgAAAM0"]
[Wed Apr 01 04:30:02.406881 2026] [:error] [pid 58139:tid 58167] [client 68.221.68.130:22852] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xc0252.php"] [unique_id "acwuyjmNuaW910kV7O7vRAAAANg"]
[Wed Apr 01 04:30:02.571310 2026] [:error] [pid 58139:tid 58159] [client 20.91.217.91:19855] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/eee.php"] [unique_id "acwuyjmNuaW910kV7O7vRgAAANA"]
[Wed Apr 01 04:30:02.887191 2026] [:error] [pid 58052:tid 58122] [client 68.221.68.130:22982] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xc0252.php"] [unique_id "acwuyqLW-jJhWvhl_rq_AgAAAIk"]
[Wed Apr 01 04:30:03.116544 2026] [:error] [pid 58051:tid 58093] [client 20.91.217.91:19851] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/eee.php"] [unique_id "acwuyw8LzKxveydDkYC2lAAAAEc"]
[Wed Apr 01 04:30:03.464803 2026] [:error] [pid 58139:tid 58147] [client 68.221.68.130:22856] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xc0252.php"] [unique_id "acwuyzmNuaW910kV7O7vTAAAAMQ"]
[Wed Apr 01 04:30:03.661149 2026] [:error] [pid 58139:tid 58149] [client 20.91.217.91:19918] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "acwuyzmNuaW910kV7O7vTQAAAMY"]
[Wed Apr 01 04:30:03.992559 2026] [:error] [pid 58050:tid 58060] [client 68.221.68.130:23020] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "acwuy-pNVNOd8B2ubudRrgAAAAU"]
[Wed Apr 01 04:30:04.255294 2026] [:error] [pid 58139:tid 58158] [client 20.91.217.91:19888] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "acwuzDmNuaW910kV7O7vUgAAAM8"]
[Wed Apr 01 04:30:04.474555 2026] [:error] [pid 58139:tid 58160] [client 68.221.68.130:22884] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "acwuzDmNuaW910kV7O7vVgAAANE"]
[Wed Apr 01 04:30:04.783739 2026] [:error] [pid 58139:tid 58153] [client 20.91.217.91:19882] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "acwuzDmNuaW910kV7O7vVwAAAMo"]
[Wed Apr 01 04:30:05.053019 2026] [:error] [pid 58139:tid 58149] [client 68.221.68.130:22967] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "acwuzTmNuaW910kV7O7vWQAAAMY"]
[Wed Apr 01 04:30:05.340879 2026] [:error] [pid 58052:tid 58120] [client 20.91.217.91:19895] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "acwuzaLW-jJhWvhl_rq_BQAAAIc"]
[Wed Apr 01 04:30:05.579823 2026] [:error] [pid 58052:tid 58119] [client 68.221.68.130:22972] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "acwuzaLW-jJhWvhl_rq_BwAAAIY"]
[Wed Apr 01 04:30:05.872438 2026] [:error] [pid 58052:tid 58131] [client 20.91.217.91:19916] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acwuzaLW-jJhWvhl_rq_CAAAAJI"]
[Wed Apr 01 04:30:06.078322 2026] [:error] [pid 58050:tid 58059] [client 68.221.68.130:22914] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "acwuzupNVNOd8B2ubudRrwAAAAQ"]
[Wed Apr 01 04:30:06.403932 2026] [:error] [pid 58052:tid 58118] [client 20.91.217.91:19849] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acwuzqLW-jJhWvhl_rq_CwAAAIU"]
[Wed Apr 01 04:30:06.557726 2026] [:error] [pid 58052:tid 58134] [client 68.221.68.130:22926] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "acwuzqLW-jJhWvhl_rq_DAAAAJU"]
[Wed Apr 01 04:30:06.949953 2026] [:error] [pid 58052:tid 58125] [client 20.91.217.91:19930] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acwuzqLW-jJhWvhl_rq_DwAAAIw"]
[Wed Apr 01 04:30:07.052818 2026] [:error] [pid 58052:tid 58130] [client 68.221.68.130:22971] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "acwuz6LW-jJhWvhl_rq_EAAAAJE"]
[Wed Apr 01 04:30:07.520507 2026] [:error] [pid 58052:tid 58126] [client 20.91.217.91:19887] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/admin.php"] [unique_id "acwuz6LW-jJhWvhl_rq_EQAAAI0"]
[Wed Apr 01 04:30:07.674111 2026] [:error] [pid 58139:tid 58144] [client 68.221.68.130:23033] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "acwuzzmNuaW910kV7O7vXQAAAME"]
[Wed Apr 01 04:30:08.049584 2026] [:error] [pid 58139:tid 58160] [client 20.91.217.91:19964] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws77.php"] [unique_id "acwu0DmNuaW910kV7O7vXwAAANE"]
[Wed Apr 01 04:30:08.579038 2026] [:error] [pid 58052:tid 58119] [client 20.91.217.91:19859] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws77.php"] [unique_id "acwu0KLW-jJhWvhl_rq_FAAAAIY"]
[Wed Apr 01 04:30:09.126757 2026] [:error] [pid 58052:tid 58131] [client 20.91.217.91:19844] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws77.php"] [unique_id "acwu0aLW-jJhWvhl_rq_FQAAAJI"]
[Wed Apr 01 04:30:09.665081 2026] [:error] [pid 58139:tid 58146] [client 20.91.217.91:19938] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws77.php"] [unique_id "acwu0TmNuaW910kV7O7vZgAAAMM"]
[Wed Apr 01 04:30:10.204949 2026] [:error] [pid 58052:tid 58127] [client 20.91.217.91:19870] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gpt-sh.php"] [unique_id "acwu0qLW-jJhWvhl_rq_GwAAAI4"]
[Wed Apr 01 04:30:10.733410 2026] [:error] [pid 58139:tid 58154] [client 20.91.217.91:19940] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gpt-sh.php"] [unique_id "acwu0jmNuaW910kV7O7vbAAAAMs"]
[Wed Apr 01 04:30:11.264949 2026] [:error] [pid 58139:tid 58150] [client 20.91.217.91:19798] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gpt-sh.php"] [unique_id "acwu0zmNuaW910kV7O7vcQAAAMc"]
[Wed Apr 01 04:30:11.802731 2026] [:error] [pid 58052:tid 58137] [client 20.91.217.91:19883] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gpt-sh.php"] [unique_id "acwu06LW-jJhWvhl_rq_IQAAAJg"]
[Wed Apr 01 04:30:12.339398 2026] [:error] [pid 58051:tid 58094] [client 20.91.217.91:19778] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "acwu1A8LzKxveydDkYC2qwAAAEg"]
[Wed Apr 01 04:30:12.869890 2026] [:error] [pid 58052:tid 58118] [client 20.91.217.91:19966] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "acwu1KLW-jJhWvhl_rq_JwAAAIU"]
[Wed Apr 01 04:30:13.433204 2026] [:error] [pid 58051:tid 58095] [client 20.91.217.91:19954] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "acwu1Q8LzKxveydDkYC2rwAAAEk"]
[Wed Apr 01 04:30:13.961480 2026] [:error] [pid 58052:tid 58130] [client 20.91.217.91:19958] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "acwu1aLW-jJhWvhl_rq_KwAAAJE"]
[Wed Apr 01 04:30:14.494448 2026] [:error] [pid 58139:tid 58143] [client 20.91.217.91:19917] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "acwu1jmNuaW910kV7O7vgAAAAMA"]
[Wed Apr 01 04:30:14.584963 2026] [:error] [pid 58139:tid 58161] [client 68.221.68.130:22930] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/c.php"] [unique_id "acwu1jmNuaW910kV7O7vgQAAANI"]
[Wed Apr 01 04:30:15.021337 2026] [:error] [pid 58052:tid 58124] [client 20.91.217.91:19908] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "acwu16LW-jJhWvhl_rq_MgAAAIs"]
[Wed Apr 01 04:30:15.067604 2026] [:error] [pid 58052:tid 58131] [client 68.221.68.130:23118] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/c.php"] [unique_id "acwu16LW-jJhWvhl_rq_NAAAAJI"]
[Wed Apr 01 04:30:15.554133 2026] [:error] [pid 58052:tid 58121] [client 68.221.68.130:22944] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/c.php"] [unique_id "acwu16LW-jJhWvhl_rq_NQAAAIg"]
[Wed Apr 01 04:30:15.556738 2026] [:error] [pid 58139:tid 58144] [client 20.91.217.91:19925] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "acwu1zmNuaW910kV7O7vhAAAAME"]
[Wed Apr 01 04:30:16.039641 2026] [:error] [pid 58139:tid 58152] [client 68.221.68.130:22973] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/c.php"] [unique_id "acwu2DmNuaW910kV7O7vhQAAAMk"]
[Wed Apr 01 04:30:16.096863 2026] [:error] [pid 58052:tid 58122] [client 20.91.217.91:19891] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "acwu2KLW-jJhWvhl_rq_NgAAAIk"]
[Wed Apr 01 04:30:16.576362 2026] [:error] [pid 58051:tid 58096] [client 68.221.68.130:22879] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/we2.php"] [unique_id "acwu2A8LzKxveydDkYC2tAAAAEo"]
[Wed Apr 01 04:30:16.627351 2026] [:error] [pid 58051:tid 58086] [client 20.91.217.91:19928] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wander.php"] [unique_id "acwu2A8LzKxveydDkYC2tQAAAEA"]
[Wed Apr 01 04:30:17.085905 2026] [:error] [pid 58051:tid 58091] [client 68.221.68.130:22961] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/we2.php"] [unique_id "acwu2Q8LzKxveydDkYC2uAAAAEU"]
[Wed Apr 01 04:30:17.157314 2026] [:error] [pid 58052:tid 58126] [client 20.91.217.91:19963] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wander.php"] [unique_id "acwu2aLW-jJhWvhl_rq_OAAAAI0"]
[Wed Apr 01 04:30:17.611970 2026] [:error] [pid 58139:tid 58165] [client 68.221.68.130:22906] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/we2.php"] [unique_id "acwu2TmNuaW910kV7O7viAAAANY"]
[Wed Apr 01 04:30:17.693454 2026] [:error] [pid 58139:tid 58154] [client 20.91.217.91:19933] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wander.php"] [unique_id "acwu2TmNuaW910kV7O7viQAAAMs"]
[Wed Apr 01 04:30:18.150851 2026] [:error] [pid 58052:tid 58124] [client 68.221.68.130:22969] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/we2.php"] [unique_id "acwu2qLW-jJhWvhl_rq_OgAAAIs"]
[Wed Apr 01 04:30:18.229458 2026] [:error] [pid 58050:tid 58076] [client 20.91.217.91:19956] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wander.php"] [unique_id "acwu2upNVNOd8B2ubudRuwAAABU"]
[Wed Apr 01 04:30:18.630118 2026] [:error] [pid 58139:tid 58164] [client 68.221.68.130:22974] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/04.php"] [unique_id "acwu2jmNuaW910kV7O7viwAAANU"]
[Wed Apr 01 04:30:18.790332 2026] [:error] [pid 58052:tid 58128] [client 20.91.217.91:19935] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/h02ugyh.php"] [unique_id "acwu2qLW-jJhWvhl_rq_PQAAAI8"]
[Wed Apr 01 04:30:19.110491 2026] [:error] [pid 58139:tid 58158] [client 68.221.68.130:22894] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/04.php"] [unique_id "acwu2zmNuaW910kV7O7vjQAAAM8"]
[Wed Apr 01 04:30:19.344830 2026] [:error] [pid 58139:tid 58151] [client 20.91.217.91:19898] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/h02ugyh.php"] [unique_id "acwu2zmNuaW910kV7O7vkAAAAMg"]
[Wed Apr 01 04:30:19.619790 2026] [:error] [pid 58139:tid 58148] [client 68.221.68.130:23006] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/04.php"] [unique_id "acwu2zmNuaW910kV7O7vkQAAAMU"]
[Wed Apr 01 04:30:19.894490 2026] [:error] [pid 58052:tid 58130] [client 20.91.217.91:19948] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/h02ugyh.php"] [unique_id "acwu26LW-jJhWvhl_rq_QQAAAJE"]
[Wed Apr 01 04:30:20.098951 2026] [:error] [pid 58052:tid 58137] [client 68.221.68.130:22949] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/04.php"] [unique_id "acwu3KLW-jJhWvhl_rq_QgAAAJg"]
[Wed Apr 01 04:30:20.459455 2026] [:error] [pid 58139:tid 58167] [client 20.91.217.91:19854] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/h02ugyh.php"] [unique_id "acwu3DmNuaW910kV7O7vlAAAANg"]
[Wed Apr 01 04:30:20.579467 2026] [:error] [pid 58139:tid 58161] [client 68.221.68.130:23031] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/333.php"] [unique_id "acwu3DmNuaW910kV7O7vlgAAANI"]
[Wed Apr 01 04:30:20.991024 2026] [:error] [pid 58139:tid 58144] [client 20.91.217.91:19868] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ad.php"] [unique_id "acwu3DmNuaW910kV7O7vmQAAAME"]
[Wed Apr 01 04:30:21.070667 2026] [:error] [pid 58051:tid 58106] [client 68.221.68.130:22925] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/333.php"] [unique_id "acwu3Q8LzKxveydDkYC2vQAAAFQ"]
[Wed Apr 01 04:30:21.557474 2026] [:error] [pid 58139:tid 58149] [client 20.91.217.91:19806] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ad.php"] [unique_id "acwu3TmNuaW910kV7O7vmgAAAMY"]
[Wed Apr 01 04:30:21.588669 2026] [:error] [pid 58051:tid 58086] [client 68.221.68.130:23022] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/333.php"] [unique_id "acwu3Q8LzKxveydDkYC2wAAAAEA"]
[Wed Apr 01 04:30:22.116387 2026] [:error] [pid 58050:tid 58057] [client 20.91.217.91:19776] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ad.php"] [unique_id "acwu3upNVNOd8B2ubudRvQAAAAI"]
[Wed Apr 01 04:30:22.137439 2026] [:error] [pid 58050:tid 58064] [client 68.221.68.130:22948] [client 68.221.68.130] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/333.php"] [unique_id "acwu3upNVNOd8B2ubudRvgAAAAk"]
[Wed Apr 01 04:30:22.668481 2026] [:error] [pid 58139:tid 58147] [client 20.91.217.91:19847] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ad.php"] [unique_id "acwu3jmNuaW910kV7O7vngAAAMQ"]
[Wed Apr 01 04:30:23.229586 2026] [:error] [pid 58051:tid 58088] [client 20.91.217.91:19867] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/z60.php"] [unique_id "acwu3w8LzKxveydDkYC2wgAAAEI"]
[Wed Apr 01 04:30:23.762613 2026] [:error] [pid 58139:tid 58156] [client 20.91.217.91:19861] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/z60.php"] [unique_id "acwu3zmNuaW910kV7O7vogAAAM0"]
[Wed Apr 01 04:30:24.299996 2026] [:error] [pid 58139:tid 58166] [client 20.91.217.91:19951] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/z60.php"] [unique_id "acwu4DmNuaW910kV7O7vpQAAANc"]
[Wed Apr 01 04:30:24.835860 2026] [:error] [pid 58139:tid 58144] [client 20.91.217.91:19937] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/z60.php"] [unique_id "acwu4DmNuaW910kV7O7vqQAAAME"]
[Wed Apr 01 04:30:25.389660 2026] [:error] [pid 58139:tid 58167] [client 20.91.217.91:19860] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "acwu4TmNuaW910kV7O7vrQAAANg"]
[Wed Apr 01 04:30:25.919719 2026] [:error] [pid 58139:tid 58163] [client 20.91.217.91:19872] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "acwu4TmNuaW910kV7O7vsQAAANQ"]
[Wed Apr 01 04:30:26.450892 2026] [:error] [pid 58139:tid 58150] [client 20.91.217.91:19942] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "acwu4jmNuaW910kV7O7vtwAAAMc"]
[Wed Apr 01 04:30:26.985962 2026] [:error] [pid 58051:tid 58086] [client 20.91.217.91:19965] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "acwu4g8LzKxveydDkYC2yQAAAEA"]
[Wed Apr 01 04:30:27.516786 2026] [:error] [pid 58052:tid 58132] [client 20.91.217.91:19742] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acwu46LW-jJhWvhl_rq_RgAAAJM"]
[Wed Apr 01 04:30:28.059212 2026] [:error] [pid 58052:tid 58118] [client 20.91.217.91:19856] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acwu5KLW-jJhWvhl_rq_RwAAAIU"]
[Wed Apr 01 04:30:28.650002 2026] [:error] [pid 58052:tid 58116] [client 20.91.217.91:19927] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acwu5KLW-jJhWvhl_rq_SQAAAIM"]
[Wed Apr 01 04:30:29.179035 2026] [:error] [pid 58139:tid 58143] [client 20.91.217.91:19955] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/wta.php"] [unique_id "acwu5TmNuaW910kV7O7vyAAAAMA"]
[Wed Apr 01 04:30:29.710780 2026] [:error] [pid 58052:tid 58115] [client 20.91.217.91:19957] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sql.php"] [unique_id "acwu5aLW-jJhWvhl_rq_TwAAAII"]
[Wed Apr 01 04:30:30.238660 2026] [:error] [pid 58052:tid 58128] [client 20.91.217.91:19934] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sql.php"] [unique_id "acwu5qLW-jJhWvhl_rq_UgAAAI8"]
[Wed Apr 01 04:30:30.780163 2026] [:error] [pid 58052:tid 58121] [client 20.91.217.91:19869] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sql.php"] [unique_id "acwu5qLW-jJhWvhl_rq_UwAAAIg"]
[Wed Apr 01 04:30:31.325944 2026] [:error] [pid 58052:tid 58134] [client 20.91.217.91:19880] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sql.php"] [unique_id "acwu56LW-jJhWvhl_rq_VQAAAJU"]
[Wed Apr 01 04:30:31.918441 2026] [:error] [pid 58052:tid 58117] [client 20.91.217.91:19800] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "acwu56LW-jJhWvhl_rq_WwAAAIQ"]
[Wed Apr 01 04:30:32.471897 2026] [:error] [pid 58052:tid 58128] [client 20.91.217.91:19949] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "acwu6KLW-jJhWvhl_rq_XgAAAI8"]
[Wed Apr 01 04:30:33.004696 2026] [:error] [pid 58051:tid 58090] [client 20.91.217.91:19876] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "acwu6Q8LzKxveydDkYC21QAAAEQ"]
[Wed Apr 01 04:30:33.538647 2026] [:error] [pid 58139:tid 58166] [client 20.91.217.91:19901] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "acwu6TmNuaW910kV7O7v5AAAANc"]
[Wed Apr 01 04:30:34.085946 2026] [:error] [pid 58139:tid 58143] [client 20.91.217.91:19932] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-class.php"] [unique_id "acwu6jmNuaW910kV7O7v6gAAAMA"]
[Wed Apr 01 04:30:34.622260 2026] [:error] [pid 58139:tid 58162] [client 20.91.217.91:19871] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-class.php"] [unique_id "acwu6jmNuaW910kV7O7v8gAAANM"]
[Wed Apr 01 04:30:35.173775 2026] [:error] [pid 58051:tid 58098] [client 20.91.217.91:19822] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-class.php"] [unique_id "acwu6w8LzKxveydDkYC24gAAAEw"]
[Wed Apr 01 04:30:35.714541 2026] [:error] [pid 58139:tid 58152] [client 20.91.217.91:19780] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-class.php"] [unique_id "acwu6zmNuaW910kV7O7v_wAAAMk"]
[Wed Apr 01 04:30:36.262729 2026] [:error] [pid 58051:tid 58107] [client 20.91.217.91:19845] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xper1.php"] [unique_id "acwu7A8LzKxveydDkYC26wAAAFU"]
[Wed Apr 01 04:30:36.824347 2026] [:error] [pid 58139:tid 58151] [client 20.91.217.91:19885] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xper1.php"] [unique_id "acwu7DmNuaW910kV7O7wBgAAAMg"]
[Wed Apr 01 04:30:37.357631 2026] [:error] [pid 58051:tid 58092] [client 20.91.217.91:19893] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xper1.php"] [unique_id "acwu7Q8LzKxveydDkYC29gAAAEY"]
[Wed Apr 01 04:30:37.919723 2026] [:error] [pid 58139:tid 58166] [client 20.91.217.91:19819] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xper1.php"] [unique_id "acwu7TmNuaW910kV7O7wCwAAANc"]
[Wed Apr 01 04:30:38.447330 2026] [:error] [pid 58051:tid 58110] [client 20.91.217.91:19943] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws78.php"] [unique_id "acwu7g8LzKxveydDkYC2_wAAAFg"]
[Wed Apr 01 04:30:38.977567 2026] [:error] [pid 58139:tid 58144] [client 20.91.217.91:19799] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws78.php"] [unique_id "acwu7jmNuaW910kV7O7wEwAAAME"]
[Wed Apr 01 04:30:39.505729 2026] [:error] [pid 58052:tid 58124] [client 20.91.217.91:19808] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws78.php"] [unique_id "acwu76LW-jJhWvhl_rq_cQAAAIs"]
[Wed Apr 01 04:30:40.035077 2026] [:error] [pid 58052:tid 58113] [client 20.91.217.91:19884] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws78.php"] [unique_id "acwu8KLW-jJhWvhl_rq_dQAAAIA"]
[Wed Apr 01 04:30:40.564214 2026] [:error] [pid 58052:tid 58114] [client 20.91.217.91:19850] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uang.php"] [unique_id "acwu8KLW-jJhWvhl_rq_dwAAAIE"]
[Wed Apr 01 04:30:41.101098 2026] [:error] [pid 58051:tid 58098] [client 20.91.217.91:19795] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uang.php"] [unique_id "acwu8Q8LzKxveydDkYC3EAAAAEw"]
[Wed Apr 01 04:30:41.640677 2026] [:error] [pid 58051:tid 58110] [client 20.91.217.91:19784] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uang.php"] [unique_id "acwu8Q8LzKxveydDkYC3EwAAAFg"]
[Wed Apr 01 04:30:42.176072 2026] [:error] [pid 58051:tid 58101] [client 20.91.217.91:19857] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uang.php"] [unique_id "acwu8g8LzKxveydDkYC3FgAAAE8"]
[Wed Apr 01 04:30:42.705514 2026] [:error] [pid 58052:tid 58132] [client 20.91.217.91:19878] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/save.php"] [unique_id "acwu8qLW-jJhWvhl_rq_fAAAAJM"]
[Wed Apr 01 04:30:43.255251 2026] [:error] [pid 58050:tid 58073] [client 20.91.217.91:19902] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/save.php"] [unique_id "acwu8-pNVNOd8B2ubudR4gAAABI"]
[Wed Apr 01 04:30:43.806927 2026] [:error] [pid 58139:tid 58157] [client 20.91.217.91:19803] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/save.php"] [unique_id "acwu8zmNuaW910kV7O7wLgAAAM4"]
[Wed Apr 01 04:30:44.343890 2026] [:error] [pid 58050:tid 58064] [client 20.91.217.91:19781] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/save.php"] [unique_id "acwu9OpNVNOd8B2ubudR5wAAAAk"]
[Wed Apr 01 04:30:44.879280 2026] [:error] [pid 58052:tid 58130] [client 20.91.217.91:19864] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wtiiy.php"] [unique_id "acwu9KLW-jJhWvhl_rq_gAAAAJE"]
[Wed Apr 01 04:30:45.412430 2026] [:error] [pid 58051:tid 58098] [client 20.91.217.91:19810] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wtiiy.php"] [unique_id "acwu9Q8LzKxveydDkYC3HwAAAEw"]
[Wed Apr 01 04:30:45.944427 2026] [:error] [pid 58139:tid 58150] [client 20.91.217.91:19790] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wtiiy.php"] [unique_id "acwu9TmNuaW910kV7O7wNgAAAMc"]
[Wed Apr 01 04:30:53.377347 2026] [:error] [pid 58051:tid 58088] [client 20.91.217.91:19897] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/awh.php"] [unique_id "acwu_Q8LzKxveydDkYC3RQAAAEI"]
[Wed Apr 01 04:30:53.932356 2026] [:error] [pid 58139:tid 58160] [client 20.91.217.91:19952] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/awh.php"] [unique_id "acwu_TmNuaW910kV7O7wXQAAANE"]
[Wed Apr 01 04:30:54.475588 2026] [:error] [pid 58051:tid 58090] [client 20.91.217.91:19873] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/awh.php"] [unique_id "acwu_g8LzKxveydDkYC3TAAAAEQ"]
[Wed Apr 01 04:30:55.008244 2026] [:error] [pid 58051:tid 58101] [client 20.91.217.91:19813] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/awh.php"] [unique_id "acwu_w8LzKxveydDkYC3TwAAAE8"]
[Wed Apr 01 04:30:55.540847 2026] [:error] [pid 58051:tid 58086] [client 20.91.217.91:19946] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shellerr.php"] [unique_id "acwu_w8LzKxveydDkYC3UgAAAEA"]
[Wed Apr 01 04:30:56.093788 2026] [:error] [pid 58051:tid 58097] [client 20.91.217.91:19825] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shellerr.php"] [unique_id "acwvAA8LzKxveydDkYC3VQAAAEs"]
[Wed Apr 01 04:30:56.623787 2026] [:error] [pid 58139:tid 58164] [client 20.91.217.91:19811] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shellerr.php"] [unique_id "acwvADmNuaW910kV7O7wYQAAANU"]
[Wed Apr 01 04:30:57.150370 2026] [:error] [pid 58139:tid 58161] [client 20.91.217.91:19865] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shellerr.php"] [unique_id "acwvATmNuaW910kV7O7wYwAAANI"]
[Wed Apr 01 04:30:57.677440 2026] [:error] [pid 58051:tid 58091] [client 20.91.217.91:19889] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-scanner.php"] [unique_id "acwvAQ8LzKxveydDkYC3XgAAAEU"]
[Wed Apr 01 04:30:58.210468 2026] [:error] [pid 58139:tid 58155] [client 20.91.217.91:19831] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-scanner.php"] [unique_id "acwvAjmNuaW910kV7O7wZwAAAMw"]
[Wed Apr 01 04:30:58.755729 2026] [:error] [pid 58139:tid 58149] [client 20.91.217.91:19841] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-scanner.php"] [unique_id "acwvAjmNuaW910kV7O7wagAAAMY"]
[Wed Apr 01 04:30:59.290102 2026] [:error] [pid 58139:tid 58143] [client 20.91.217.91:19950] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-scanner.php"] [unique_id "acwvAzmNuaW910kV7O7wbgAAAMA"]
[Wed Apr 01 04:31:00.035309 2026] [:error] [pid 58139:tid 58166] [client 20.91.217.91:19869] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "acwvBDmNuaW910kV7O7wcAAAANc"]
[Wed Apr 01 04:31:00.560596 2026] [:error] [pid 58139:tid 58162] [client 20.91.217.91:19777] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "acwvBDmNuaW910kV7O7wcgAAANM"]
[Wed Apr 01 04:31:01.089199 2026] [:error] [pid 58139:tid 58160] [client 20.91.217.91:19853] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "acwvBTmNuaW910kV7O7wdQAAANE"]
[Wed Apr 01 04:31:01.626610 2026] [:error] [pid 58139:tid 58153] [client 20.91.217.91:19874] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "acwvBTmNuaW910kV7O7weAAAAMo"]
[Wed Apr 01 04:31:02.159516 2026] [:error] [pid 58139:tid 58152] [client 20.91.217.91:19817] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/to.php"] [unique_id "acwvBjmNuaW910kV7O7weQAAAMk"]
[Wed Apr 01 04:31:02.693496 2026] [:error] [pid 58050:tid 58059] [client 20.91.217.91:19827] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/to.php"] [unique_id "acwvBupNVNOd8B2ubudR_AAAAAQ"]
[Wed Apr 01 04:31:03.221012 2026] [:error] [pid 58139:tid 58155] [client 20.91.217.91:19833] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/to.php"] [unique_id "acwvBzmNuaW910kV7O7wewAAAMw"]
[Wed Apr 01 04:31:03.753858 2026] [:error] [pid 58139:tid 58164] [client 20.91.217.91:19828] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/to.php"] [unique_id "acwvBzmNuaW910kV7O7wfgAAANU"]
[Wed Apr 01 04:31:04.283844 2026] [:error] [pid 58050:tid 58077] [client 20.91.217.91:19788] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "acwvCOpNVNOd8B2ubudR_QAAABY"]
[Wed Apr 01 04:31:04.810605 2026] [:error] [pid 58052:tid 58133] [client 20.91.217.91:19823] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "acwvCKLW-jJhWvhl_rq_kQAAAJQ"]
[Wed Apr 01 04:31:05.354460 2026] [:error] [pid 58051:tid 58090] [client 20.91.217.91:19814] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "acwvCQ8LzKxveydDkYC3ggAAAEQ"]
[Wed Apr 01 04:31:05.882758 2026] [:error] [pid 58139:tid 58162] [client 20.91.217.91:19804] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "acwvCTmNuaW910kV7O7whgAAANM"]
[Wed Apr 01 04:31:06.423912 2026] [:error] [pid 58052:tid 58131] [client 20.91.217.91:19753] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ant.php"] [unique_id "acwvCqLW-jJhWvhl_rq_lAAAAJI"]
[Wed Apr 01 04:31:06.949612 2026] [:error] [pid 58052:tid 58118] [client 20.91.217.91:19719] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ant.php"] [unique_id "acwvCqLW-jJhWvhl_rq_mAAAAIU"]
[Wed Apr 01 04:31:07.475537 2026] [:error] [pid 58139:tid 58155] [client 20.91.217.91:19894] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ant.php"] [unique_id "acwvCzmNuaW910kV7O7wiwAAAMw"]
[Wed Apr 01 04:31:08.024319 2026] [:error] [pid 58139:tid 58147] [client 20.91.217.91:19801] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ant.php"] [unique_id "acwvDDmNuaW910kV7O7wjAAAAMQ"]
[Wed Apr 01 04:31:08.556802 2026] [:error] [pid 58052:tid 58115] [client 20.91.217.91:19736] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "acwvDKLW-jJhWvhl_rq_nAAAAII"]
[Wed Apr 01 04:31:09.093020 2026] [:error] [pid 58139:tid 58152] [client 20.91.217.91:19922] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "acwvDTmNuaW910kV7O7wkQAAAMk"]
[Wed Apr 01 04:31:09.623824 2026] [:error] [pid 58050:tid 58078] [client 20.91.217.91:19725] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "acwvDepNVNOd8B2ubudSAQAAABc"]
[Wed Apr 01 04:31:10.151023 2026] [:error] [pid 58050:tid 58062] [client 20.91.217.91:19903] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "acwvDupNVNOd8B2ubudSAgAAAAc"]
[Wed Apr 01 04:31:10.683345 2026] [:error] [pid 58139:tid 58164] [client 20.91.217.91:19838] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "acwvDjmNuaW910kV7O7wmgAAANU"]
[Wed Apr 01 04:31:11.215974 2026] [:error] [pid 58139:tid 58156] [client 20.91.217.91:19820] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "acwvDzmNuaW910kV7O7wnAAAAM0"]
[Wed Apr 01 04:31:11.776965 2026] [:error] [pid 58139:tid 58150] [client 20.91.217.91:19890] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "acwvDzmNuaW910kV7O7wnwAAAMc"]
[Wed Apr 01 04:31:12.315200 2026] [:error] [pid 58139:tid 58158] [client 20.91.217.91:19837] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "acwvEDmNuaW910kV7O7woQAAAM8"]
[Wed Apr 01 04:31:12.844768 2026] [:error] [pid 58139:tid 58144] [client 20.91.217.91:19734] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "acwvEDmNuaW910kV7O7wpQAAAME"]
[Wed Apr 01 04:31:13.373614 2026] [:error] [pid 58139:tid 58149] [client 20.91.217.91:19892] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "acwvETmNuaW910kV7O7wpwAAAMY"]
[Wed Apr 01 04:31:13.910704 2026] [:error] [pid 58051:tid 58099] [client 20.91.217.91:19763] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "acwvEQ8LzKxveydDkYC3owAAAE0"]
[Wed Apr 01 04:31:14.437820 2026] [:error] [pid 58051:tid 58090] [client 20.91.217.91:19715] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "acwvEg8LzKxveydDkYC3pQAAAEQ"]
[Wed Apr 01 04:31:14.991870 2026] [:error] [pid 58051:tid 58109] [client 20.91.217.91:19866] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/classgoto24.php"] [unique_id "acwvEg8LzKxveydDkYC3pwAAAFc"]
[Wed Apr 01 04:31:15.560814 2026] [:error] [pid 58050:tid 58065] [client 20.91.217.91:19718] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/classgoto24.php"] [unique_id "acwvE-pNVNOd8B2ubudSCgAAAAo"]
[Wed Apr 01 04:31:16.092658 2026] [:error] [pid 58139:tid 58155] [client 20.91.217.91:19839] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/classgoto24.php"] [unique_id "acwvFDmNuaW910kV7O7wrwAAAMw"]
[Wed Apr 01 04:31:16.648338 2026] [:error] [pid 58051:tid 58104] [client 20.91.217.91:19739] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/classgoto24.php"] [unique_id "acwvFA8LzKxveydDkYC3rAAAAFI"]
[Wed Apr 01 04:31:17.183392 2026] [:error] [pid 58051:tid 58103] [client 20.91.217.91:19783] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "acwvFQ8LzKxveydDkYC3rwAAAFE"]
[Wed Apr 01 04:31:17.750651 2026] [:error] [pid 58139:tid 58161] [client 20.91.217.91:19793] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "acwvFTmNuaW910kV7O7wtgAAANI"]
[Wed Apr 01 04:31:18.296333 2026] [:error] [pid 58051:tid 58089] [client 20.91.217.91:19941] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "acwvFg8LzKxveydDkYC3sAAAAEM"]
[Wed Apr 01 04:31:18.834133 2026] [:error] [pid 58051:tid 58110] [client 20.91.217.91:19899] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "acwvFg8LzKxveydDkYC3sgAAAFg"]
[Wed Apr 01 04:31:19.382994 2026] [:error] [pid 58139:tid 58161] [client 20.91.217.91:19746] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws43.php"] [unique_id "acwvFzmNuaW910kV7O7wwQAAANI"]
[Wed Apr 01 04:31:19.930467 2026] [:error] [pid 58139:tid 58145] [client 20.91.217.91:19743] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws43.php"] [unique_id "acwvFzmNuaW910kV7O7wyAAAAMI"]
[Wed Apr 01 04:31:20.475844 2026] [:error] [pid 58139:tid 58162] [client 20.91.217.91:19750] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws43.php"] [unique_id "acwvGDmNuaW910kV7O7wzgAAANM"]
[Wed Apr 01 04:31:21.028701 2026] [:error] [pid 58050:tid 58069] [client 20.91.217.91:19961] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws43.php"] [unique_id "acwvGepNVNOd8B2ubudSEgAAAA4"]
[Wed Apr 01 04:31:21.561785 2026] [:error] [pid 58050:tid 58063] [client 20.91.217.91:19735] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gec.php"] [unique_id "acwvGepNVNOd8B2ubudSFQAAAAg"]
[Wed Apr 01 04:31:22.116260 2026] [:error] [pid 58052:tid 58127] [client 20.91.217.91:19656] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gec.php"] [unique_id "acwvGqLW-jJhWvhl_rq_owAAAI4"]
[Wed Apr 01 04:31:22.658433 2026] [:error] [pid 58052:tid 58126] [client 20.91.217.91:19673] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gec.php"] [unique_id "acwvGqLW-jJhWvhl_rq_pQAAAI0"]
[Wed Apr 01 04:31:23.196617 2026] [:error] [pid 58050:tid 58062] [client 20.91.217.91:19796] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gec.php"] [unique_id "acwvG-pNVNOd8B2ubudSFwAAAAc"]
[Wed Apr 01 04:31:23.768012 2026] [:error] [pid 58139:tid 58143] [client 20.91.217.91:19807] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "acwvGzmNuaW910kV7O7w4QAAAMA"]
[Wed Apr 01 04:31:24.296921 2026] [:error] [pid 58050:tid 58066] [client 20.91.217.91:19919] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "acwvHOpNVNOd8B2ubudSGQAAAAs"]
[Wed Apr 01 04:31:24.833459 2026] [:error] [pid 58139:tid 58148] [client 20.91.217.91:19896] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "acwvHDmNuaW910kV7O7w5wAAAMU"]
[Wed Apr 01 04:31:25.376678 2026] [:error] [pid 58139:tid 58151] [client 20.91.217.91:19836] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "acwvHTmNuaW910kV7O7w6gAAAMg"]
[Wed Apr 01 04:31:25.932740 2026] [:error] [pid 58139:tid 58143] [client 20.91.217.91:19794] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "acwvHTmNuaW910kV7O7w7gAAAMA"]
[Wed Apr 01 04:31:26.513608 2026] [:error] [pid 58051:tid 58098] [client 20.91.217.91:19724] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "acwvHg8LzKxveydDkYC3wwAAAEw"]
[Wed Apr 01 04:31:27.049372 2026] [:error] [pid 58139:tid 58152] [client 20.91.217.91:19914] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "acwvHzmNuaW910kV7O7w-QAAAMk"]
[Wed Apr 01 04:31:27.576858 2026] [:error] [pid 58050:tid 58068] [client 20.91.217.91:19834] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "acwvH-pNVNOd8B2ubudSIAAAAA0"]
[Wed Apr 01 04:31:28.143298 2026] [:error] [pid 58050:tid 58062] [client 20.91.217.91:19812] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/size.php"] [unique_id "acwvIOpNVNOd8B2ubudSIwAAAAc"]
[Wed Apr 01 04:31:28.684498 2026] [:error] [pid 58052:tid 58113] [client 20.91.217.91:19782] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/size.php"] [unique_id "acwvIKLW-jJhWvhl_rq_qwAAAIA"]
[Wed Apr 01 04:31:29.231405 2026] [:error] [pid 58052:tid 58114] [client 20.91.217.91:19747] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/size.php"] [unique_id "acwvIaLW-jJhWvhl_rq_rgAAAIE"]
[Wed Apr 01 04:31:29.846430 2026] [:error] [pid 58139:tid 58143] [client 20.91.217.91:19802] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/size.php"] [unique_id "acwvITmNuaW910kV7O7xCAAAAMA"]
[Wed Apr 01 04:31:30.384107 2026] [:error] [pid 58052:tid 58137] [client 20.91.217.91:19835] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "acwvIqLW-jJhWvhl_rq_sQAAAJg"]
[Wed Apr 01 04:31:31.027670 2026] [:error] [pid 58139:tid 58148] [client 20.91.217.91:19858] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "acwvIzmNuaW910kV7O7xEAAAAMU"]
[Wed Apr 01 04:31:31.555927 2026] [:error] [pid 58050:tid 58066] [client 20.91.217.91:19826] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "acwvI-pNVNOd8B2ubudSLwAAAAs"]
[Wed Apr 01 04:31:32.089567 2026] [:error] [pid 58139:tid 58153] [client 20.91.217.91:19655] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "acwvJDmNuaW910kV7O7xGAAAAMo"]
[Wed Apr 01 04:31:32.628663 2026] [:error] [pid 58050:tid 58079] [client 20.91.217.91:19695] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-load.php"] [unique_id "acwvJOpNVNOd8B2ubudSNAAAABg"]
[Wed Apr 01 04:31:33.173481 2026] [:error] [pid 58052:tid 58120] [client 20.91.217.91:19668] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-load.php"] [unique_id "acwvJaLW-jJhWvhl_rq_tQAAAIc"]
[Wed Apr 01 04:31:33.767644 2026] [:error] [pid 58050:tid 58062] [client 20.91.217.91:19756] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-load.php"] [unique_id "acwvJepNVNOd8B2ubudSOQAAAAc"]
[Wed Apr 01 04:31:34.307640 2026] [:error] [pid 58050:tid 58065] [client 20.91.217.91:19717] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-load.php"] [unique_id "acwvJupNVNOd8B2ubudSOwAAAAo"]
[Wed Apr 01 04:31:34.868839 2026] [:error] [pid 58052:tid 58127] [client 20.91.217.91:19863] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/torsa1.php"] [unique_id "acwvJqLW-jJhWvhl_rq_uAAAAI4"]
[Wed Apr 01 04:31:35.411759 2026] [:error] [pid 58050:tid 58067] [client 20.91.217.91:19758] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/torsa1.php"] [unique_id "acwvJ-pNVNOd8B2ubudSPwAAAAw"]
[Wed Apr 01 04:31:35.985665 2026] [:error] [pid 58051:tid 58091] [client 20.91.217.91:19805] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/torsa1.php"] [unique_id "acwvJw8LzKxveydDkYC3zAAAAEU"]
[Wed Apr 01 04:31:36.517265 2026] [:error] [pid 58050:tid 58062] [client 20.91.217.91:19766] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/torsa1.php"] [unique_id "acwvKOpNVNOd8B2ubudSRAAAAAc"]
[Wed Apr 01 04:31:37.094871 2026] [:error] [pid 58139:tid 58153] [client 20.91.217.91:19881] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/b.php"] [unique_id "acwvKTmNuaW910kV7O7xNQAAAMo"]
[Wed Apr 01 04:31:37.645744 2026] [:error] [pid 58139:tid 58147] [client 20.91.217.91:19748] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/b.php"] [unique_id "acwvKTmNuaW910kV7O7xPAAAAMQ"]
[Wed Apr 01 04:31:38.194733 2026] [:error] [pid 58052:tid 58122] [client 20.91.217.91:19786] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/b.php"] [unique_id "acwvKqLW-jJhWvhl_rq_vgAAAIk"]
[Wed Apr 01 04:31:38.723421 2026] [:error] [pid 58052:tid 58132] [client 20.91.217.91:19713] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/b.php"] [unique_id "acwvKqLW-jJhWvhl_rq_wgAAAJM"]
[Wed Apr 01 04:31:39.283600 2026] [:error] [pid 58052:tid 58136] [client 20.91.217.91:19679] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vaza.php"] [unique_id "acwvK6LW-jJhWvhl_rq_xAAAAJc"]
[Wed Apr 01 04:31:39.828089 2026] [:error] [pid 58051:tid 58097] [client 20.91.217.91:19829] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vaza.php"] [unique_id "acwvKw8LzKxveydDkYC30QAAAEs"]
[Wed Apr 01 04:31:40.359049 2026] [:error] [pid 58051:tid 58086] [client 20.91.217.91:19862] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vaza.php"] [unique_id "acwvLA8LzKxveydDkYC30gAAAEA"]
[Wed Apr 01 04:31:40.887968 2026] [:error] [pid 58139:tid 58165] [client 20.91.217.91:19959] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vaza.php"] [unique_id "acwvLDmNuaW910kV7O7xTwAAANY"]
[Wed Apr 01 04:31:41.416524 2026] [:error] [pid 58052:tid 58117] [client 20.91.217.91:19809] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "acwvLaLW-jJhWvhl_rq_xwAAAIQ"]
[Wed Apr 01 04:31:41.961511 2026] [:error] [pid 58139:tid 58167] [client 20.91.217.91:19879] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "acwvLTmNuaW910kV7O7xUwAAANg"]
[Wed Apr 01 04:31:42.495284 2026] [:error] [pid 58139:tid 58160] [client 20.91.217.91:19900] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "acwvLjmNuaW910kV7O7xVgAAANE"]
[Wed Apr 01 04:31:43.026208 2026] [:error] [pid 58051:tid 58110] [client 20.91.217.91:19821] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "acwvLw8LzKxveydDkYC31QAAAFg"]
[Wed Apr 01 04:31:43.566656 2026] [:error] [pid 58139:tid 58166] [client 20.91.217.91:19654] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acwvLzmNuaW910kV7O7xWAAAANc"]
[Wed Apr 01 04:31:44.166336 2026] [:error] [pid 58139:tid 58158] [client 20.91.217.91:19875] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acwvMDmNuaW910kV7O7xWgAAAM8"]
[Wed Apr 01 04:31:44.700090 2026] [:error] [pid 58139:tid 58147] [client 20.91.217.91:19767] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acwvMDmNuaW910kV7O7xXQAAAMQ"]
[Wed Apr 01 04:31:45.229744 2026] [:error] [pid 58052:tid 58127] [client 20.91.217.91:19791] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "acwvMaLW-jJhWvhl_rq_zgAAAI4"]
[Wed Apr 01 04:31:45.766460 2026] [:error] [pid 58051:tid 58104] [client 20.91.217.91:19765] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xc0252.php"] [unique_id "acwvMQ8LzKxveydDkYC32gAAAFI"]
[Wed Apr 01 04:31:46.302469 2026] [:error] [pid 58050:tid 58066] [client 20.91.217.91:19945] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xc0252.php"] [unique_id "acwvMupNVNOd8B2ubudSTQAAAAs"]
[Wed Apr 01 04:31:46.835573 2026] [:error] [pid 58139:tid 58164] [client 20.91.217.91:19676] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xc0252.php"] [unique_id "acwvMjmNuaW910kV7O7xYQAAANU"]
[Wed Apr 01 04:31:47.404888 2026] [:error] [pid 58139:tid 58158] [client 20.91.217.91:19789] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xc0252.php"] [unique_id "acwvMzmNuaW910kV7O7xZAAAAM8"]
[Wed Apr 01 04:31:47.978506 2026] [:error] [pid 58139:tid 58148] [client 20.91.217.91:19815] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "acwvMzmNuaW910kV7O7xZgAAAMU"]
[Wed Apr 01 04:31:48.547364 2026] [:error] [pid 58052:tid 58119] [client 20.91.217.91:19720] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "acwvNKLW-jJhWvhl_rq_zwAAAIY"]
[Wed Apr 01 04:31:49.106467 2026] [:error] [pid 58051:tid 58089] [client 20.91.217.91:19877] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "acwvNQ8LzKxveydDkYC33QAAAEM"]
[Wed Apr 01 04:31:49.635700 2026] [:error] [pid 58052:tid 58113] [client 20.91.217.91:19716] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "acwvNaLW-jJhWvhl_rq_0wAAAIA"]
[Wed Apr 01 04:31:50.206086 2026] [:error] [pid 58052:tid 58116] [client 20.91.217.91:19824] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "acwvNqLW-jJhWvhl_rq_1wAAAIM"]
[Wed Apr 01 04:31:50.740249 2026] [:error] [pid 58051:tid 58090] [client 20.91.217.91:19667] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "acwvNg8LzKxveydDkYC33wAAAEQ"]
[Wed Apr 01 04:31:51.277656 2026] [:error] [pid 58051:tid 58098] [client 20.91.217.91:19730] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "acwvNw8LzKxveydDkYC34QAAAEw"]
[Wed Apr 01 04:31:51.808806 2026] [:error] [pid 58139:tid 58151] [client 20.91.217.91:19816] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "acwvNzmNuaW910kV7O7xaQAAAMg"]
[Wed Apr 01 04:31:52.359366 2026] [:error] [pid 58139:tid 58153] [client 20.91.217.91:19818] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acwvODmNuaW910kV7O7xagAAAMo"]
[Wed Apr 01 04:31:52.893681 2026] [:error] [pid 58051:tid 58086] [client 20.91.217.91:19886] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "acwvOA8LzKxveydDkYC36AAAAEA"]
[Wed Apr 01 04:32:00.325092 2026] [:error] [pid 58139:tid 58144] [client 20.91.217.91:19787] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/c.php"] [unique_id "acwvQDmNuaW910kV7O7xmAAAAME"]
[Wed Apr 01 04:32:00.874280 2026] [:error] [pid 58050:tid 58063] [client 20.91.217.91:19751] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/c.php"] [unique_id "acwvQOpNVNOd8B2ubudSXQAAAAg"]
[Wed Apr 01 04:32:01.587472 2026] [:error] [pid 58139:tid 58158] [client 20.91.217.91:19731] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/c.php"] [unique_id "acwvQTmNuaW910kV7O7xngAAAM8"]
[Wed Apr 01 04:32:02.146325 2026] [:error] [pid 58052:tid 58118] [client 20.91.217.91:19661] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/c.php"] [unique_id "acwvQqLW-jJhWvhl_rq_6gAAAIU"]
[Wed Apr 01 04:32:02.694774 2026] [:error] [pid 58050:tid 58064] [client 20.91.217.91:19792] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/we2.php"] [unique_id "acwvQupNVNOd8B2ubudSXwAAAAk"]
[Wed Apr 01 04:32:03.270736 2026] [:error] [pid 58139:tid 58150] [client 20.91.217.91:19727] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/we2.php"] [unique_id "acwvQzmNuaW910kV7O7xqgAAAMc"]
[Wed Apr 01 04:32:03.827222 2026] [:error] [pid 58139:tid 58153] [client 20.91.217.91:19731] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/we2.php"] [unique_id "acwvQzmNuaW910kV7O7xsQAAAMo"]
[Wed Apr 01 04:32:04.367949 2026] [:error] [pid 58052:tid 58127] [client 20.91.217.91:19699] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/we2.php"] [unique_id "acwvRKLW-jJhWvhl_rq_7gAAAI4"]
[Wed Apr 01 04:32:04.914110 2026] [:error] [pid 58052:tid 58137] [client 20.91.217.91:19651] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/04.php"] [unique_id "acwvRKLW-jJhWvhl_rq_8gAAAJg"]
[Wed Apr 01 04:32:05.458603 2026] [:error] [pid 58052:tid 58130] [client 20.91.217.91:19729] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/04.php"] [unique_id "acwvRaLW-jJhWvhl_rq_9QAAAJE"]
[Wed Apr 01 04:32:05.999794 2026] [:error] [pid 58051:tid 58095] [client 20.91.217.91:19744] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/04.php"] [unique_id "acwvRQ8LzKxveydDkYC38wAAAEk"]
[Wed Apr 01 04:32:06.540268 2026] [:error] [pid 58139:tid 58149] [client 20.91.217.91:19671] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/04.php"] [unique_id "acwvRjmNuaW910kV7O7xvwAAAMY"]
[Wed Apr 01 04:32:07.076607 2026] [:error] [pid 58139:tid 58148] [client 20.91.217.91:19688] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/333.php"] [unique_id "acwvRzmNuaW910kV7O7xxAAAAMU"]
[Wed Apr 01 04:32:07.613165 2026] [:error] [pid 58139:tid 58157] [client 20.91.217.91:19683] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/333.php"] [unique_id "acwvRzmNuaW910kV7O7xygAAAM4"]
[Wed Apr 01 04:32:08.146757 2026] [:error] [pid 58051:tid 58099] [client 20.91.217.91:19797] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/333.php"] [unique_id "acwvSA8LzKxveydDkYC3-QAAAE0"]
[Wed Apr 01 04:32:08.685375 2026] [:error] [pid 58139:tid 58163] [client 20.91.217.91:19706] [client 20.91.217.91] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/333.php"] [unique_id "acwvSDmNuaW910kV7O7x0QAAANQ"]
[Wed Apr 01 09:56:12.816752 2026] [:error] [pid 23716:tid 23799] [client 20.203.130.156:48496] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-asudo.php"] [unique_id "acx7PHVtFUg_mx-RYb6qpAAAAIs"]
[Wed Apr 01 09:56:13.310199 2026] [:error] [pid 24348:tid 24395] [client 20.203.130.156:57637] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-asudo.php"] [unique_id "acx7PW0Vs69Y5nF1HA8hawAAAZA"]
[Wed Apr 01 09:56:13.786586 2026] [:error] [pid 23714:tid 23742] [client 20.203.130.156:48427] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-asudo.php"] [unique_id "acx7PUHxDDU2ETcG9DRdPwAAAAg"]
[Wed Apr 01 09:56:14.261550 2026] [:error] [pid 23715:tid 23781] [client 20.203.130.156:48445] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-asudo.php"] [unique_id "acx7Pq-REzOruNbiT9yZbQAAAFQ"]
[Wed Apr 01 09:56:14.751867 2026] [:error] [pid 24348:tid 24397] [client 20.203.130.156:48452] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Geforce.php"] [unique_id "acx7Pm0Vs69Y5nF1HA8hbwAAAZI"]
[Wed Apr 01 09:56:15.223362 2026] [:error] [pid 24348:tid 24388] [client 20.203.130.156:48492] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Geforce.php"] [unique_id "acx7P20Vs69Y5nF1HA8hcwAAAYk"]
[Wed Apr 01 09:56:15.701664 2026] [:error] [pid 23716:tid 23789] [client 20.203.130.156:57600] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Geforce.php"] [unique_id "acx7P3VtFUg_mx-RYb6qpwAAAIE"]
[Wed Apr 01 09:56:16.187205 2026] [:error] [pid 23819:tid 23826] [client 20.203.130.156:48502] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Geforce.php"] [unique_id "acx7QNdfUS_37wFAM74UoAAAAMQ"]
[Wed Apr 01 09:56:16.659051 2026] [:error] [pid 23714:tid 23735] [client 20.203.130.156:48455] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jlex.php"] [unique_id "acx7QEHxDDU2ETcG9DRdRQAAAAE"]
[Wed Apr 01 09:56:17.131955 2026] [:error] [pid 23716:tid 23806] [client 20.203.130.156:14027] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jlex.php"] [unique_id "acx7QXVtFUg_mx-RYb6qqQAAAJI"]
[Wed Apr 01 09:56:17.611313 2026] [:error] [pid 23716:tid 23808] [client 20.203.130.156:48410] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vvedr.php"] [unique_id "acx7QXVtFUg_mx-RYb6qrAAAAJQ"]
[Wed Apr 01 09:56:18.084053 2026] [:error] [pid 23716:tid 23811] [client 20.203.130.156:57616] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vvedr.php"] [unique_id "acx7QnVtFUg_mx-RYb6qsAAAAJc"]
[Wed Apr 01 09:56:18.562017 2026] [:error] [pid 23716:tid 23799] [client 20.203.130.156:48402] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vvedr.php"] [unique_id "acx7QnVtFUg_mx-RYb6qswAAAIs"]
[Wed Apr 01 09:56:19.040677 2026] [:error] [pid 23714:tid 23739] [client 20.203.130.156:57642] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vvedr.php"] [unique_id "acx7Q0HxDDU2ETcG9DRdSAAAAAU"]
[Wed Apr 01 09:56:19.519026 2026] [:error] [pid 23819:tid 23829] [client 20.203.130.156:14050] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "acx7Q9dfUS_37wFAM74UpQAAAMc"]
[Wed Apr 01 09:56:19.999711 2026] [:error] [pid 23819:tid 23832] [client 20.203.130.156:57615] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "acx7Q9dfUS_37wFAM74UqAAAAMo"]
[Wed Apr 01 09:56:20.470426 2026] [:error] [pid 24314:tid 24342] [client 20.203.130.156:64839] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "acx7RJRF3FCzjmMUX5YNcAAAARg"]
[Wed Apr 01 09:56:20.947306 2026] [:error] [pid 23716:tid 23809] [client 20.203.130.156:48482] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "acx7RHVtFUg_mx-RYb6qtgAAAJU"]
[Wed Apr 01 09:56:21.419594 2026] [:error] [pid 24346:tid 24353] [client 20.203.130.156:48391] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "acx7Rbc1l8kg9MhGHIK7GAAAAUE"]
[Wed Apr 01 09:56:21.891791 2026] [:error] [pid 24348:tid 24380] [client 20.203.130.156:49967] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "acx7RW0Vs69Y5nF1HA8hhQAAAYE"]
[Wed Apr 01 09:56:22.376566 2026] [:error] [pid 24348:tid 24394] [client 20.203.130.156:48411] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "acx7Rm0Vs69Y5nF1HA8hiAAAAY8"]
[Wed Apr 01 09:56:22.846721 2026] [:error] [pid 23715:tid 23764] [client 20.203.130.156:48451] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/albin.php"] [unique_id "acx7Rq-REzOruNbiT9yZdwAAAEM"]
[Wed Apr 01 09:56:23.322032 2026] [:error] [pid 23715:tid 23767] [client 20.203.130.156:60671] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/albin.php"] [unique_id "acx7R6-REzOruNbiT9yZegAAAEY"]
[Wed Apr 01 09:56:23.795971 2026] [:error] [pid 24348:tid 24396] [client 20.203.130.156:64874] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8pewqMTX.php"] [unique_id "acx7R20Vs69Y5nF1HA8hiwAAAZE"]
[Wed Apr 01 09:56:24.266958 2026] [:error] [pid 23715:tid 23776] [client 20.203.130.156:48442] [client 20.203.130.156] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8pewqMTX.php"] [unique_id "acx7SK-REzOruNbiT9yZewAAAE8"]
[Thu Apr 02 18:25:08.459004 2026] [:error] [pid 29467:tid 29477] [client 158.158.110.103:63027] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/24.php"] [unique_id "ac5EBL4VUBFCJAq-WOkxKAAAAQc"]
[Thu Apr 02 18:25:11.925221 2026] [:error] [pid 23927:tid 23949] [client 158.158.110.103:64856] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/24.php"] [unique_id "ac5EB0sZwqCndhl9uKCDQAAAAZQ"]
[Thu Apr 02 18:25:13.657494 2026] [:error] [pid 29467:tid 29490] [client 158.158.110.103:63561] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/24.php"] [unique_id "ac5ECb4VUBFCJAq-WOkxNgAAARQ"]
[Thu Apr 02 18:25:15.007581 2026] [:error] [pid 23927:tid 23939] [client 158.158.110.103:63575] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/24.php"] [unique_id "ac5EC0sZwqCndhl9uKCDRgAAAYo"]
[Thu Apr 02 18:25:15.709434 2026] [:error] [pid 59305:tid 59321] [client 158.158.110.103:63645] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "ac5EC6r2tV4rDwKFxKdQMwAAAMw"]
[Thu Apr 02 18:25:16.293916 2026] [:error] [pid 59305:tid 59325] [client 158.158.110.103:64242] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "ac5EDKr2tV4rDwKFxKdQNQAAANA"]
[Thu Apr 02 18:25:16.791251 2026] [:error] [pid 54384:tid 54399] [client 158.158.110.103:64279] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "ac5EDNWWpaby3TVN7MfrbgAAAc0"]
[Thu Apr 02 18:25:17.273050 2026] [:error] [pid 37543:tid 37545] [client 158.158.110.103:64917] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "ac5EDXhdk2bEYJCvILa-lQAAAUA"]
[Thu Apr 02 18:25:17.751281 2026] [:error] [pid 37543:tid 37562] [client 158.158.110.103:64318] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/as.php"] [unique_id "ac5EDXhdk2bEYJCvILa-lwAAAVE"]
[Thu Apr 02 18:25:18.229399 2026] [:error] [pid 29467:tid 29476] [client 158.158.110.103:63665] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/as.php"] [unique_id "ac5EDr4VUBFCJAq-WOkxQgAAAQY"]
[Thu Apr 02 18:25:18.710412 2026] [:error] [pid 23927:tid 23947] [client 158.158.110.103:64936] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/as.php"] [unique_id "ac5EDksZwqCndhl9uKCDSgAAAZI"]
[Thu Apr 02 18:25:19.189967 2026] [:error] [pid 29467:tid 29479] [client 158.158.110.103:64300] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/as.php"] [unique_id "ac5ED74VUBFCJAq-WOkxTAAAAQk"]
[Thu Apr 02 18:25:19.674532 2026] [:error] [pid 54384:tid 54396] [client 158.158.110.103:63563] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fyiiz.php"] [unique_id "ac5ED9WWpaby3TVN7MfrdQAAAco"]
[Thu Apr 02 18:25:20.161288 2026] [:error] [pid 37543:tid 37556] [client 158.158.110.103:63639] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fyiiz.php"] [unique_id "ac5EEHhdk2bEYJCvILa-ngAAAUs"]
[Thu Apr 02 18:25:20.708317 2026] [:error] [pid 37543:tid 37551] [client 158.158.110.103:64297] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fyiiz.php"] [unique_id "ac5EEHhdk2bEYJCvILa-nwAAAUY"]
[Thu Apr 02 18:25:21.215902 2026] [:error] [pid 37543:tid 37560] [client 158.158.110.103:65506] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fyiiz.php"] [unique_id "ac5EEXhdk2bEYJCvILa-oQAAAU8"]
[Thu Apr 02 18:25:21.731941 2026] [:error] [pid 59194:tid 59228] [client 158.158.110.103:63003] [client 158.158.110.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/app.php"] [unique_id "ac5EERMpAeV11hcQehwy_gAAAA8"]
[Thu Apr 02 18:25:22.212824 2026] [:error] [pid 59201:tid 59286] [client 158.158.110.103:64280] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/max.php"] [unique_id "ac5EEsAC0Tw8eL6gzZ4CsgAAAJM"]
[Thu Apr 02 18:25:22.692411 2026] [:error] [pid 23927:tid 23947] [client 158.158.110.103:63022] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/max.php"] [unique_id "ac5EEksZwqCndhl9uKCDWgAAAZI"]
[Thu Apr 02 18:25:23.171008 2026] [:error] [pid 59305:tid 59319] [client 158.158.110.103:64292] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/max.php"] [unique_id "ac5EE6r2tV4rDwKFxKdQPQAAAMo"]
[Thu Apr 02 18:25:23.651744 2026] [:error] [pid 59194:tid 59215] [client 158.158.110.103:64930] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/max.php"] [unique_id "ac5EExMpAeV11hcQehwzAAAAAAI"]
[Thu Apr 02 18:25:24.163962 2026] [:error] [pid 59194:tid 59226] [client 158.158.110.103:64899] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "ac5EFBMpAeV11hcQehwzAQAAAA0"]
[Thu Apr 02 18:25:24.722483 2026] [:error] [pid 23927:tid 23933] [client 158.158.110.103:64269] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "ac5EFEsZwqCndhl9uKCDYAAAAYQ"]
[Thu Apr 02 18:25:25.233479 2026] [:error] [pid 29467:tid 29470] [client 158.158.110.103:63640] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "ac5EFb4VUBFCJAq-WOkxWgAAAQA"]
[Thu Apr 02 18:25:25.820992 2026] [:error] [pid 37543:tid 37562] [client 158.158.110.103:63641] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "ac5EFXhdk2bEYJCvILa-pgAAAVE"]
[Thu Apr 02 18:25:26.370199 2026] [:error] [pid 23927:tid 23934] [client 158.158.110.103:65481] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ac5EFksZwqCndhl9uKCDYwAAAYU"]
[Thu Apr 02 18:25:26.849266 2026] [:error] [pid 29467:tid 29471] [client 158.158.110.103:64935] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ac5EFr4VUBFCJAq-WOkxYgAAAQE"]
[Thu Apr 02 18:25:27.336119 2026] [:error] [pid 59201:tid 59281] [client 158.158.110.103:64867] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ac5EF8AC0Tw8eL6gzZ4CuQAAAI4"]
[Thu Apr 02 18:25:27.814842 2026] [:error] [pid 59201:tid 59275] [client 158.158.110.103:64200] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ac5EF8AC0Tw8eL6gzZ4CwAAAAIg"]
[Thu Apr 02 18:25:28.430708 2026] [:error] [pid 59305:tid 59328] [client 158.158.110.103:65514] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "ac5EGKr2tV4rDwKFxKdQRgAAANM"]
[Thu Apr 02 18:25:28.911425 2026] [:error] [pid 54384:tid 54407] [client 158.158.110.103:63672] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "ac5EGNWWpaby3TVN7MfrfgAAAdU"]
[Thu Apr 02 18:25:29.433739 2026] [:error] [pid 59201:tid 59289] [client 158.158.110.103:64845] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "ac5EGcAC0Tw8eL6gzZ4C9AAAAJY"]
[Thu Apr 02 18:25:29.983716 2026] [:error] [pid 59305:tid 59309] [client 158.158.110.103:64871] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "ac5EGar2tV4rDwKFxKdQSwAAAMA"]
[Thu Apr 02 18:25:30.467373 2026] [:error] [pid 59201:tid 59278] [client 158.158.110.103:63654] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/index.php"] [unique_id "ac5EGsAC0Tw8eL6gzZ4C9gAAAIs"]
[Thu Apr 02 18:25:30.952055 2026] [:error] [pid 29467:tid 29478] [client 158.158.110.103:64844] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/index.php"] [unique_id "ac5EGr4VUBFCJAq-WOkxdgAAAQg"]
[Thu Apr 02 18:25:31.438684 2026] [:error] [pid 23927:tid 23943] [client 158.158.110.103:63577] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/index.php"] [unique_id "ac5EG0sZwqCndhl9uKCDeAAAAY4"]
[Thu Apr 02 18:25:31.916627 2026] [:error] [pid 59194:tid 59214] [client 158.158.110.103:64855] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/index.php"] [unique_id "ac5EGxMpAeV11hcQehwzCwAAAAE"]
[Thu Apr 02 18:25:32.408875 2026] [:error] [pid 59200:tid 59243] [client 158.158.110.103:63037] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "ac5EHLfP26txrdLs3Epf4AAAAEM"]
[Thu Apr 02 18:25:32.908807 2026] [:error] [pid 23927:tid 23932] [client 158.158.110.103:64857] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "ac5EHEsZwqCndhl9uKCDfAAAAYM"]
[Thu Apr 02 18:25:33.394784 2026] [:error] [pid 37543:tid 37567] [client 158.158.110.103:64865] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "ac5EHXhdk2bEYJCvILa-pwAAAVY"]
[Thu Apr 02 18:25:33.890499 2026] [:error] [pid 37543:tid 37560] [client 158.158.110.103:63613] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "ac5EHXhdk2bEYJCvILa-qAAAAU8"]
[Thu Apr 02 18:25:34.459556 2026] [:error] [pid 29467:tid 29491] [client 158.158.110.103:64314] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/0.php"] [unique_id "ac5EHr4VUBFCJAq-WOkxewAAARU"]
[Thu Apr 02 18:25:34.961594 2026] [:error] [pid 37543:tid 37547] [client 158.158.110.103:63662] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/0.php"] [unique_id "ac5EHnhdk2bEYJCvILa-rQAAAUI"]
[Thu Apr 02 18:25:35.458260 2026] [:error] [pid 23927:tid 23945] [client 158.158.110.103:64238] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/0.php"] [unique_id "ac5EH0sZwqCndhl9uKCDgQAAAZA"]
[Thu Apr 02 18:25:36.054579 2026] [:error] [pid 29467:tid 29483] [client 158.158.110.103:63562] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/0.php"] [unique_id "ac5EIL4VUBFCJAq-WOkxggAAAQ0"]
[Thu Apr 02 18:25:36.823398 2026] [:error] [pid 54384:tid 54400] [client 158.158.110.103:62995] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "ac5EINWWpaby3TVN7MfrhwAAAc4"]
[Thu Apr 02 18:25:37.434089 2026] [:error] [pid 54384:tid 54387] [client 158.158.110.103:63017] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "ac5EIdWWpaby3TVN7MfriAAAAcE"]
[Thu Apr 02 18:25:37.924736 2026] [:error] [pid 54384:tid 54389] [client 158.158.110.103:62994] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "ac5EIdWWpaby3TVN7MfrjwAAAcM"]
[Thu Apr 02 18:25:38.454547 2026] [:error] [pid 59305:tid 59330] [client 158.158.110.103:63636] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "ac5EIqr2tV4rDwKFxKdQUgAAANU"]
[Thu Apr 02 18:25:38.988451 2026] [:error] [pid 29467:tid 29481] [client 158.158.110.103:65478] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "ac5EIr4VUBFCJAq-WOkxjAAAAQs"]
[Thu Apr 02 18:25:39.513077 2026] [:error] [pid 54384:tid 54386] [client 158.158.110.103:64882] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "ac5EI9WWpaby3TVN7MfrkwAAAcA"]
[Thu Apr 02 18:25:40.123125 2026] [:error] [pid 23927:tid 23935] [client 158.158.110.103:64928] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "ac5EJEsZwqCndhl9uKCDhgAAAYY"]
[Thu Apr 02 18:25:40.481458 2026] [:error] [pid 23927:tid 23942] [client 158.158.110.103:65078] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac5EJEsZwqCndhl9uKCDiAAAAY0"]
[Thu Apr 02 18:25:40.775969 2026] [:error] [pid 59305:tid 59315] [client 158.158.110.103:64941] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "ac5EJKr2tV4rDwKFxKdQWAAAAMY"]
[Thu Apr 02 18:25:41.307919 2026] [:error] [pid 29467:tid 29490] [client 158.158.110.103:64244] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "ac5EJb4VUBFCJAq-WOkxkQAAARQ"]
[Thu Apr 02 18:25:41.847088 2026] [:error] [pid 29467:tid 29488] [client 158.158.110.103:64317] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "ac5EJb4VUBFCJAq-WOkxlgAAARI"]
[Thu Apr 02 18:25:42.338098 2026] [:error] [pid 23927:tid 23930] [client 158.158.110.103:65526] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "ac5EJksZwqCndhl9uKCDjAAAAYE"]
[Thu Apr 02 18:25:42.905575 2026] [:error] [pid 59194:tid 59231] [client 158.158.110.103:63624] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "ac5EJhMpAeV11hcQehwzDQAAABI"]
[Thu Apr 02 18:25:43.424049 2026] [:error] [pid 59194:tid 59220] [client 158.158.110.103:64919] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class.php"] [unique_id "ac5EJxMpAeV11hcQehwzDwAAAAc"]
[Thu Apr 02 18:25:43.902429 2026] [:error] [pid 29467:tid 29492] [client 158.158.110.103:63671] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class.php"] [unique_id "ac5EJ74VUBFCJAq-WOkxmgAAARY"]
[Thu Apr 02 18:25:44.383735 2026] [:error] [pid 59305:tid 59317] [client 158.158.110.103:63035] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class.php"] [unique_id "ac5EKKr2tV4rDwKFxKdQXgAAAMg"]
[Thu Apr 02 18:25:44.911359 2026] [:error] [pid 23927:tid 23929] [client 158.158.110.103:65518] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class.php"] [unique_id "ac5EKEsZwqCndhl9uKCDkAAAAYA"]
[Thu Apr 02 18:25:45.427217 2026] [:error] [pid 59305:tid 59331] [client 158.158.110.103:65523] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zwq13.php"] [unique_id "ac5EKar2tV4rDwKFxKdQXwAAANY"]
[Thu Apr 02 18:25:45.953434 2026] [:error] [pid 59200:tid 59261] [client 158.158.110.103:64895] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zwq13.php"] [unique_id "ac5EKbfP26txrdLs3Epf5QAAAFU"]
[Thu Apr 02 18:25:46.524527 2026] [:error] [pid 29467:tid 29473] [client 158.158.110.103:63643] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zwq13.php"] [unique_id "ac5EKr4VUBFCJAq-WOkxogAAAQM"]
[Thu Apr 02 18:25:47.234003 2026] [:error] [pid 23927:tid 23942] [client 158.158.110.103:63668] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zwq13.php"] [unique_id "ac5EK0sZwqCndhl9uKCDkwAAAY0"]
[Thu Apr 02 18:25:47.899935 2026] [:error] [pid 54384:tid 54386] [client 158.158.110.103:62922] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aapig.php"] [unique_id "ac5EK9WWpaby3TVN7MfrnwAAAcA"]
[Thu Apr 02 18:25:48.614127 2026] [:error] [pid 29467:tid 29478] [client 158.158.110.103:64286] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aapig.php"] [unique_id "ac5ELL4VUBFCJAq-WOkxsgAAAQg"]
[Thu Apr 02 18:25:49.243365 2026] [:error] [pid 29467:tid 29471] [client 158.158.110.103:63004] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aapig.php"] [unique_id "ac5ELb4VUBFCJAq-WOkxugAAAQE"]
[Thu Apr 02 18:25:49.776590 2026] [:error] [pid 23927:tid 23938] [client 158.158.110.103:64265] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aapig.php"] [unique_id "ac5ELUsZwqCndhl9uKCDlgAAAYk"]
[Thu Apr 02 18:25:50.286144 2026] [:error] [pid 23927:tid 23930] [client 158.158.110.103:63038] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/webadmin.php"] [unique_id "ac5ELksZwqCndhl9uKCDlwAAAYE"]
[Thu Apr 02 18:25:50.838082 2026] [:error] [pid 29467:tid 29492] [client 158.158.110.103:62927] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/webadmin.php"] [unique_id "ac5ELr4VUBFCJAq-WOkxywAAARY"]
[Thu Apr 02 18:25:51.003515 2026] [:error] [pid 37543:tid 37550] [client 158.158.110.103:65003] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac5EL3hdk2bEYJCvILa-vQAAAUU"]
[Thu Apr 02 18:25:51.402720 2026] [:error] [pid 54384:tid 54392] [client 158.158.110.103:64887] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/webadmin.php"] [unique_id "ac5EL9WWpaby3TVN7MfrogAAAcY"]
[Thu Apr 02 18:25:51.880614 2026] [:error] [pid 54384:tid 54410] [client 158.158.110.103:63576] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/webadmin.php"] [unique_id "ac5EL9WWpaby3TVN7MfrowAAAdg"]
[Thu Apr 02 18:25:52.606357 2026] [:error] [pid 59305:tid 59331] [client 158.158.110.103:62912] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xc0252.php"] [unique_id "ac5EMKr2tV4rDwKFxKdQawAAANY"]
[Thu Apr 02 18:25:53.240881 2026] [:error] [pid 54384:tid 54394] [client 158.158.110.103:63002] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xc0252.php"] [unique_id "ac5EMdWWpaby3TVN7MfrpwAAAcg"]
[Thu Apr 02 18:25:53.816706 2026] [:error] [pid 23927:tid 23939] [client 158.158.110.103:63567] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xc0252.php"] [unique_id "ac5EMUsZwqCndhl9uKCDnQAAAYo"]
[Thu Apr 02 18:25:54.320430 2026] [:error] [pid 29467:tid 29488] [client 158.158.110.103:62979] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xc0252.php"] [unique_id "ac5EMr4VUBFCJAq-WOkx5QAAARI"]
[Thu Apr 02 18:25:54.838868 2026] [:error] [pid 59200:tid 59244] [client 158.158.110.103:64229] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "ac5EMrfP26txrdLs3Epf6AAAAEQ"]
[Thu Apr 02 18:25:55.356349 2026] [:error] [pid 59201:tid 59287] [client 158.158.110.103:64232] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "ac5EM8AC0Tw8eL6gzZ4DAQAAAJQ"]
[Thu Apr 02 18:25:55.987625 2026] [:error] [pid 59200:tid 59256] [client 158.158.110.103:64243] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "ac5EM7fP26txrdLs3Epf6QAAAFA"]
[Thu Apr 02 18:25:56.530459 2026] [:error] [pid 59200:tid 59259] [client 158.158.110.103:62450] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "ac5ENLfP26txrdLs3Epf7AAAAFM"]
[Thu Apr 02 18:25:57.215543 2026] [:error] [pid 59201:tid 59282] [client 158.158.110.103:63572] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sc.php"] [unique_id "ac5ENcAC0Tw8eL6gzZ4DBQAAAI8"]
[Thu Apr 02 18:25:57.703848 2026] [:error] [pid 59201:tid 59273] [client 158.158.110.103:64914] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sc.php"] [unique_id "ac5ENcAC0Tw8eL6gzZ4DBwAAAIY"]
[Thu Apr 02 18:25:58.299218 2026] [:error] [pid 29467:tid 29478] [client 158.158.110.103:64228] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sc.php"] [unique_id "ac5ENr4VUBFCJAq-WOkx_AAAAQg"]
[Thu Apr 02 18:25:58.783549 2026] [:error] [pid 59305:tid 59328] [client 158.158.110.103:64231] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sc.php"] [unique_id "ac5ENqr2tV4rDwKFxKdQcgAAANM"]
[Thu Apr 02 18:25:59.266772 2026] [:error] [pid 23927:tid 23948] [client 158.158.110.103:64221] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mis.php"] [unique_id "ac5EN0sZwqCndhl9uKCDpAAAAZM"]
[Thu Apr 02 18:25:59.802940 2026] [:error] [pid 29467:tid 29475] [client 158.158.110.103:61824] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mis.php"] [unique_id "ac5EN74VUBFCJAq-WOkyCAAAAQU"]
[Thu Apr 02 18:26:00.408972 2026] [:error] [pid 29467:tid 29476] [client 158.158.110.103:64287] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mis.php"] [unique_id "ac5EOL4VUBFCJAq-WOkyDQAAAQY"]
[Thu Apr 02 18:26:01.024890 2026] [:error] [pid 59305:tid 59316] [client 158.158.110.103:62509] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mis.php"] [unique_id "ac5EOar2tV4rDwKFxKdQcwAAAMc"]
[Thu Apr 02 18:26:01.509202 2026] [:error] [pid 54384:tid 54394] [client 158.158.110.103:64272] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zogy1.php"] [unique_id "ac5EOdWWpaby3TVN7MfrswAAAcg"]
[Thu Apr 02 18:26:02.378617 2026] [:error] [pid 54384:tid 54404] [client 158.158.110.103:65512] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zogy1.php"] [unique_id "ac5EOtWWpaby3TVN7MfrtQAAAdI"]
[Thu Apr 02 18:26:03.434395 2026] [:error] [pid 23927:tid 23943] [client 158.158.110.103:65515] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zogy1.php"] [unique_id "ac5EO0sZwqCndhl9uKCDqQAAAY4"]
[Thu Apr 02 18:26:04.197601 2026] [:error] [pid 29467:tid 29482] [client 158.158.110.103:63555] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zogy1.php"] [unique_id "ac5EPL4VUBFCJAq-WOkyKgAAAQw"]
[Thu Apr 02 18:26:04.975601 2026] [:error] [pid 59305:tid 59315] [client 158.158.110.103:64273] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xvs.php"] [unique_id "ac5EPKr2tV4rDwKFxKdQfgAAAMY"]
[Thu Apr 02 18:26:05.861061 2026] [:error] [pid 29467:tid 29490] [client 158.158.110.103:62963] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xvs.php"] [unique_id "ac5EPb4VUBFCJAq-WOkyNQAAARQ"]
[Thu Apr 02 18:26:06.695414 2026] [:error] [pid 59305:tid 59330] [client 158.158.110.103:63026] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xvs.php"] [unique_id "ac5EPqr2tV4rDwKFxKdQigAAANU"]
[Thu Apr 02 18:26:07.322579 2026] [:error] [pid 59201:tid 59287] [client 158.158.110.103:62946] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xvs.php"] [unique_id "ac5EP8AC0Tw8eL6gzZ4DDgAAAJQ"]
[Thu Apr 02 18:26:11.387736 2026] [:error] [pid 59200:tid 59242] [client 51.103.161.170:34069] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/24.php"] [unique_id "ac5EQ7fP26txrdLs3EpgAQAAAEI"]
[Thu Apr 02 18:26:11.870280 2026] [:error] [pid 59305:tid 59316] [client 51.103.161.170:12307] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/24.php"] [unique_id "ac5EQ6r2tV4rDwKFxKdQpgAAAMc"]
[Thu Apr 02 18:26:12.419718 2026] [:error] [pid 59305:tid 59321] [client 51.103.161.170:12320] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/24.php"] [unique_id "ac5ERKr2tV4rDwKFxKdQqAAAAMw"]
[Thu Apr 02 18:26:12.971648 2026] [:error] [pid 59194:tid 59220] [client 51.103.161.170:34540] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/24.php"] [unique_id "ac5ERBMpAeV11hcQehwzHQAAAAc"]
[Thu Apr 02 18:26:13.474022 2026] [:error] [pid 59194:tid 59235] [client 51.103.161.170:34520] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "ac5ERRMpAeV11hcQehwzHgAAABY"]
[Thu Apr 02 18:26:14.032445 2026] [:error] [pid 54384:tid 54395] [client 51.103.161.170:34087] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "ac5ERtWWpaby3TVN7MfrwgAAAck"]
[Thu Apr 02 18:26:14.623181 2026] [:error] [pid 23927:tid 23929] [client 51.103.161.170:23273] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "ac5ERksZwqCndhl9uKCDzQAAAYA"]
[Thu Apr 02 18:26:15.122943 2026] [:error] [pid 59305:tid 59315] [client 51.103.161.170:12332] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "ac5ER6r2tV4rDwKFxKdQrQAAAMY"]
[Thu Apr 02 18:26:15.611482 2026] [:error] [pid 29467:tid 29470] [client 51.103.161.170:12350] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/as.php"] [unique_id "ac5ER74VUBFCJAq-WOkyUgAAAQA"]
[Thu Apr 02 18:26:16.217200 2026] [:error] [pid 29467:tid 29481] [client 51.103.161.170:23338] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/as.php"] [unique_id "ac5ESL4VUBFCJAq-WOkyWAAAAQs"]
[Thu Apr 02 18:26:16.972347 2026] [:error] [pid 23927:tid 23944] [client 51.103.161.170:23338] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/as.php"] [unique_id "ac5ESEsZwqCndhl9uKCD1AAAAY8"]
[Thu Apr 02 18:26:17.541321 2026] [:error] [pid 54384:tid 54403] [client 51.103.161.170:10789] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/as.php"] [unique_id "ac5ESdWWpaby3TVN7MfrxwAAAdE"]
[Thu Apr 02 18:26:17.678890 2026] [:error] [pid 23927:tid 23950] [client 158.158.110.103:64950] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/v3.php"] [unique_id "ac5ESUsZwqCndhl9uKCD1wAAAZU"]
[Thu Apr 02 18:26:18.057069 2026] [:error] [pid 54384:tid 54399] [client 51.103.161.170:23293] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fyiiz.php"] [unique_id "ac5EStWWpaby3TVN7MfryQAAAc0"]
[Thu Apr 02 18:26:18.299753 2026] [:error] [pid 54384:tid 54408] [client 158.158.110.103:64217] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/v3.php"] [unique_id "ac5EStWWpaby3TVN7MfrygAAAdY"]
[Thu Apr 02 18:26:18.565544 2026] [:error] [pid 23927:tid 23942] [client 51.103.161.170:10784] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fyiiz.php"] [unique_id "ac5ESksZwqCndhl9uKCD2QAAAY0"]
[Thu Apr 02 18:26:18.837128 2026] [:error] [pid 54384:tid 54392] [client 158.158.110.103:63589] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/v3.php"] [unique_id "ac5EStWWpaby3TVN7MfrzgAAAcY"]
[Thu Apr 02 18:26:19.043313 2026] [:error] [pid 59305:tid 59311] [client 51.103.161.170:12291] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fyiiz.php"] [unique_id "ac5ES6r2tV4rDwKFxKdQrgAAAMI"]
[Thu Apr 02 18:26:19.417313 2026] [:error] [pid 37543:tid 37548] [client 158.158.110.103:62940] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/v3.php"] [unique_id "ac5ES3hdk2bEYJCvILa-3QAAAUM"]
[Thu Apr 02 18:26:19.518604 2026] [:error] [pid 37543:tid 37563] [client 51.103.161.170:34058] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fyiiz.php"] [unique_id "ac5ES3hdk2bEYJCvILa-3gAAAVI"]
[Thu Apr 02 18:26:19.904673 2026] [:error] [pid 59200:tid 59245] [client 158.158.110.103:64929] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/torsa1.php"] [unique_id "ac5ES7fP26txrdLs3EpgCQAAAEU"]
[Thu Apr 02 18:26:19.993788 2026] [:error] [pid 54384:tid 54398] [client 51.103.161.170:23248] [client 51.103.161.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/app.php"] [unique_id "ac5ES9WWpaby3TVN7Mfr0QAAAcw"]
[Thu Apr 02 18:26:20.400539 2026] [:error] [pid 54384:tid 54409] [client 158.158.110.103:63019] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/torsa1.php"] [unique_id "ac5ETNWWpaby3TVN7Mfr0wAAAdc"]
[Thu Apr 02 18:26:20.466449 2026] [:error] [pid 54384:tid 54389] [client 51.103.161.170:12299] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/max.php"] [unique_id "ac5ETNWWpaby3TVN7Mfr1AAAAcM"]
[Thu Apr 02 18:26:20.887064 2026] [:error] [pid 29467:tid 29494] [client 158.158.110.103:65502] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/torsa1.php"] [unique_id "ac5ETL4VUBFCJAq-WOkyZAAAARg"]
[Thu Apr 02 18:26:20.938548 2026] [:error] [pid 29467:tid 29485] [client 51.103.161.170:12087] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/max.php"] [unique_id "ac5ETL4VUBFCJAq-WOkyZQAAAQ8"]
[Thu Apr 02 18:26:21.417120 2026] [:error] [pid 29467:tid 29481] [client 51.103.161.170:12086] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/max.php"] [unique_id "ac5ETb4VUBFCJAq-WOkyZwAAAQs"]
[Thu Apr 02 18:26:21.444656 2026] [:error] [pid 23927:tid 23933] [client 158.158.110.103:62521] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/torsa1.php"] [unique_id "ac5ETUsZwqCndhl9uKCD2wAAAYQ"]
[Thu Apr 02 18:26:21.900988 2026] [:error] [pid 59305:tid 59323] [client 51.103.161.170:12323] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/max.php"] [unique_id "ac5ETar2tV4rDwKFxKdQsgAAAM4"]
[Thu Apr 02 18:26:21.951140 2026] [:error] [pid 59305:tid 59314] [client 158.158.110.103:64951] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/to.php"] [unique_id "ac5ETar2tV4rDwKFxKdQswAAAMU"]
[Thu Apr 02 18:26:22.375487 2026] [:error] [pid 59201:tid 59272] [client 51.103.161.170:12066] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "ac5ETsAC0Tw8eL6gzZ4DHgAAAIU"]
[Thu Apr 02 18:26:22.526667 2026] [:error] [pid 54384:tid 54406] [client 158.158.110.103:63598] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/to.php"] [unique_id "ac5ETtWWpaby3TVN7Mfr2wAAAdQ"]
[Thu Apr 02 18:26:22.851806 2026] [:error] [pid 59201:tid 59291] [client 51.103.161.170:23267] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "ac5ETsAC0Tw8eL6gzZ4DHwAAAJg"]
[Thu Apr 02 18:26:23.101058 2026] [:error] [pid 54384:tid 54404] [client 158.158.110.103:64925] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/to.php"] [unique_id "ac5ET9WWpaby3TVN7Mfr3wAAAdI"]
[Thu Apr 02 18:26:23.328470 2026] [:error] [pid 37543:tid 37545] [client 51.103.161.170:23336] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "ac5ET3hdk2bEYJCvILa-3wAAAUA"]
[Thu Apr 02 18:26:23.634953 2026] [:error] [pid 23927:tid 23934] [client 158.158.110.103:63565] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/to.php"] [unique_id "ac5ET0sZwqCndhl9uKCD3QAAAYU"]
[Thu Apr 02 18:26:23.801014 2026] [:error] [pid 23927:tid 23943] [client 51.103.161.170:12091] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "ac5ET0sZwqCndhl9uKCD3gAAAY4"]
[Thu Apr 02 18:26:24.146368 2026] [:error] [pid 29467:tid 29494] [client 158.158.110.103:61868] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wqqs.php"] [unique_id "ac5EUL4VUBFCJAq-WOkyawAAARg"]
[Thu Apr 02 18:26:24.287045 2026] [:error] [pid 59194:tid 59225] [client 51.103.161.170:34061] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ac5EUBMpAeV11hcQehwzJgAAAAw"]
[Thu Apr 02 18:26:24.626384 2026] [:error] [pid 54384:tid 54389] [client 158.158.110.103:64282] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wqqs.php"] [unique_id "ac5EUNWWpaby3TVN7Mfr4AAAAcM"]
[Thu Apr 02 18:26:24.775557 2026] [:error] [pid 23927:tid 23931] [client 51.103.161.170:34050] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ac5EUEsZwqCndhl9uKCD4wAAAYI"]
[Thu Apr 02 18:26:25.159309 2026] [:error] [pid 59201:tid 59269] [client 158.158.110.103:64902] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wqqs.php"] [unique_id "ac5EUcAC0Tw8eL6gzZ4DIQAAAII"]
[Thu Apr 02 18:26:25.263349 2026] [:error] [pid 59201:tid 59286] [client 51.103.161.170:34545] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ac5EUcAC0Tw8eL6gzZ4DIgAAAJM"]
[Thu Apr 02 18:26:25.727404 2026] [:error] [pid 59194:tid 59227] [client 158.158.110.103:61805] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wqqs.php"] [unique_id "ac5EURMpAeV11hcQehwzKQAAAA4"]
[Thu Apr 02 18:26:25.735174 2026] [:error] [pid 29467:tid 29491] [client 51.103.161.170:23233] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ac5EUb4VUBFCJAq-WOkybgAAARU"]
[Thu Apr 02 18:26:26.237709 2026] [:error] [pid 59201:tid 59270] [client 51.103.161.170:34549] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "ac5EUsAC0Tw8eL6gzZ4DJQAAAIM"]
[Thu Apr 02 18:26:26.353572 2026] [:error] [pid 59305:tid 59311] [client 158.158.110.103:63653] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "ac5EUqr2tV4rDwKFxKdQuwAAAMI"]
[Thu Apr 02 18:26:26.710136 2026] [:error] [pid 59201:tid 59268] [client 51.103.161.170:12076] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "ac5EUsAC0Tw8eL6gzZ4DJgAAAIE"]
[Thu Apr 02 18:26:26.903377 2026] [:error] [pid 37543:tid 37561] [client 158.158.110.103:65480] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "ac5EUnhdk2bEYJCvILa-4QAAAVA"]
[Thu Apr 02 18:26:27.185457 2026] [:error] [pid 54384:tid 54407] [client 51.103.161.170:34539] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "ac5EU9WWpaby3TVN7Mfr5gAAAdU"]
[Thu Apr 02 18:26:27.431878 2026] [:error] [pid 54384:tid 54391] [client 158.158.110.103:61787] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "ac5EU9WWpaby3TVN7Mfr6AAAAcU"]
[Thu Apr 02 18:26:27.719634 2026] [:error] [pid 59305:tid 59310] [client 51.103.161.170:12059] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "ac5EU6r2tV4rDwKFxKdQvQAAAME"]
[Thu Apr 02 18:26:27.911957 2026] [:error] [pid 59201:tid 59272] [client 158.158.110.103:64211] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "ac5EU8AC0Tw8eL6gzZ4DKQAAAIU"]
[Thu Apr 02 18:26:28.245430 2026] [:error] [pid 54384:tid 54390] [client 51.103.161.170:42170] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/index.php"] [unique_id "ac5EVNWWpaby3TVN7Mfr6QAAAcQ"]
[Thu Apr 02 18:26:28.522510 2026] [:error] [pid 59194:tid 59229] [client 158.158.110.103:65504] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "ac5EVBMpAeV11hcQehwzLQAAABA"]
[Thu Apr 02 18:26:28.721151 2026] [:error] [pid 59194:tid 59222] [client 51.103.161.170:12298] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/index.php"] [unique_id "ac5EVBMpAeV11hcQehwzLgAAAAk"]
[Thu Apr 02 18:26:29.209559 2026] [:error] [pid 37543:tid 37547] [client 158.158.110.103:63634] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "ac5EVXhdk2bEYJCvILa-5AAAAUI"]
[Thu Apr 02 18:26:29.711697 2026] [:error] [pid 59305:tid 59309] [client 51.103.161.170:10758] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/index.php"] [unique_id "ac5EVar2tV4rDwKFxKdQwgAAAMA"]
[Thu Apr 02 18:26:29.783420 2026] [:error] [pid 59305:tid 59320] [client 158.158.110.103:64311] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "ac5EVar2tV4rDwKFxKdQwwAAAMs"]
[Thu Apr 02 18:26:30.195302 2026] [:error] [pid 29467:tid 29476] [client 51.103.161.170:23258] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/index.php"] [unique_id "ac5EVr4VUBFCJAq-WOkybwAAAQY"]
[Thu Apr 02 18:26:30.659138 2026] [:error] [pid 59201:tid 59285] [client 158.158.110.103:63605] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "ac5EVsAC0Tw8eL6gzZ4DKwAAAJI"]
[Thu Apr 02 18:26:30.718326 2026] [:error] [pid 37543:tid 37569] [client 51.103.161.170:34500] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "ac5EVnhdk2bEYJCvILa-6QAAAVg"]
[Thu Apr 02 18:26:31.223520 2026] [:error] [pid 59201:tid 59274] [client 51.103.161.170:23287] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "ac5EV8AC0Tw8eL6gzZ4DLAAAAIc"]
[Thu Apr 02 18:26:31.725501 2026] [:error] [pid 59305:tid 59318] [client 51.103.161.170:34102] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "ac5EV6r2tV4rDwKFxKdQxQAAAMk"]
[Thu Apr 02 18:26:31.783697 2026] [:error] [pid 54384:tid 54395] [client 158.158.110.103:64850] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aifa.php"] [unique_id "ac5EV9WWpaby3TVN7Mfr8QAAAck"]
[Thu Apr 02 18:26:32.228010 2026] [:error] [pid 37543:tid 37555] [client 51.103.161.170:12324] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "ac5EWHhdk2bEYJCvILa-7AAAAUo"]
[Thu Apr 02 18:26:32.419891 2026] [:error] [pid 59194:tid 59214] [client 158.158.110.103:63001] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aifa.php"] [unique_id "ac5EWBMpAeV11hcQehwzMQAAAAE"]
[Thu Apr 02 18:26:32.721273 2026] [:error] [pid 59305:tid 59313] [client 51.103.161.170:34085] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/0.php"] [unique_id "ac5EWKr2tV4rDwKFxKdQygAAAMQ"]
[Thu Apr 02 18:26:32.965710 2026] [:error] [pid 23927:tid 23946] [client 158.158.110.103:63603] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aifa.php"] [unique_id "ac5EWEsZwqCndhl9uKCD6AAAAZE"]
[Thu Apr 02 18:26:33.193360 2026] [:error] [pid 59305:tid 59314] [client 51.103.161.170:10781] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/0.php"] [unique_id "ac5EWar2tV4rDwKFxKdQzAAAAMU"]
[Thu Apr 02 18:26:33.444083 2026] [:error] [pid 54384:tid 54387] [client 158.158.110.103:63594] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aifa.php"] [unique_id "ac5EWdWWpaby3TVN7Mfr9AAAAcE"]
[Thu Apr 02 18:26:33.699047 2026] [:error] [pid 59200:tid 59259] [client 51.103.161.170:23278] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/0.php"] [unique_id "ac5EWbfP26txrdLs3EpgDgAAAFM"]
[Thu Apr 02 18:26:33.960394 2026] [:error] [pid 59305:tid 59312] [client 158.158.110.103:64235] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "ac5EWar2tV4rDwKFxKdQzQAAAMM"]
[Thu Apr 02 18:26:34.264534 2026] [:error] [pid 59305:tid 59319] [client 51.103.161.170:34109] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/0.php"] [unique_id "ac5EWqr2tV4rDwKFxKdQzgAAAMo"]
[Thu Apr 02 18:26:34.519289 2026] [:error] [pid 23927:tid 23931] [client 158.158.110.103:61247] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "ac5EWksZwqCndhl9uKCD7gAAAYI"]
[Thu Apr 02 18:26:34.741434 2026] [:error] [pid 23927:tid 23929] [client 51.103.161.170:34093] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "ac5EWksZwqCndhl9uKCD8QAAAYA"]
[Thu Apr 02 18:26:35.030147 2026] [:error] [pid 59305:tid 59321] [client 158.158.110.103:64890] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "ac5EW6r2tV4rDwKFxKdQ0QAAAMw"]
[Thu Apr 02 18:26:35.226575 2026] [:error] [pid 29467:tid 29488] [client 51.103.161.170:23353] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "ac5EW74VUBFCJAq-WOkycwAAARI"]
[Thu Apr 02 18:26:35.529486 2026] [:error] [pid 59305:tid 59313] [client 158.158.110.103:64898] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "ac5EW6r2tV4rDwKFxKdQ0wAAAMQ"]
[Thu Apr 02 18:26:35.710133 2026] [:error] [pid 59200:tid 59243] [client 51.103.161.170:34080] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "ac5EW7fP26txrdLs3EpgEAAAAEM"]
[Thu Apr 02 18:26:36.056666 2026] [:error] [pid 59305:tid 59332] [client 158.158.110.103:62525] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/feokc.php"] [unique_id "ac5EXKr2tV4rDwKFxKdQ1QAAANc"]
[Thu Apr 02 18:26:36.218884 2026] [:error] [pid 59305:tid 59325] [client 51.103.161.170:12052] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "ac5EXKr2tV4rDwKFxKdQ1gAAANA"]
[Thu Apr 02 18:26:36.710819 2026] [:error] [pid 59305:tid 59330] [client 51.103.161.170:10815] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "ac5EXKr2tV4rDwKFxKdQ2gAAANU"]
[Thu Apr 02 18:26:36.802547 2026] [:error] [pid 59305:tid 59328] [client 158.158.110.103:61198] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/feokc.php"] [unique_id "ac5EXKr2tV4rDwKFxKdQ3AAAANM"]
[Thu Apr 02 18:26:37.183830 2026] [:error] [pid 29467:tid 29494] [client 51.103.161.170:23764] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "ac5EXb4VUBFCJAq-WOkyeAAAARg"]
[Thu Apr 02 18:26:37.282740 2026] [:error] [pid 29467:tid 29481] [client 158.158.110.103:64290] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/feokc.php"] [unique_id "ac5EXb4VUBFCJAq-WOkyeQAAAQs"]
[Thu Apr 02 18:26:37.685179 2026] [:error] [pid 59305:tid 59309] [client 51.103.161.170:34074] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "ac5EXar2tV4rDwKFxKdQ4gAAAMA"]
[Thu Apr 02 18:26:37.773197 2026] [:error] [pid 37543:tid 37560] [client 158.158.110.103:61793] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/feokc.php"] [unique_id "ac5EXXhdk2bEYJCvILa-8gAAAU8"]
[Thu Apr 02 18:26:38.253582 2026] [:error] [pid 23927:tid 23939] [client 158.158.110.103:63034] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nc4.php"] [unique_id "ac5EXksZwqCndhl9uKCD_QAAAYo"]
[Thu Apr 02 18:26:38.282937 2026] [:error] [pid 23927:tid 23951] [client 51.103.161.170:34070] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "ac5EXksZwqCndhl9uKCD_gAAAZY"]
[Thu Apr 02 18:26:38.737923 2026] [:error] [pid 59194:tid 59232] [client 158.158.110.103:64933] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nc4.php"] [unique_id "ac5EXhMpAeV11hcQehwzMgAAABM"]
[Thu Apr 02 18:26:38.760841 2026] [:error] [pid 23927:tid 23936] [client 51.103.161.170:12331] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "ac5EXksZwqCndhl9uKCEAwAAAYc"]
[Thu Apr 02 18:26:39.217704 2026] [:error] [pid 23927:tid 23940] [client 158.158.110.103:64893] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nc4.php"] [unique_id "ac5EX0sZwqCndhl9uKCEBwAAAYs"]
[Thu Apr 02 18:26:39.247021 2026] [:error] [pid 37543:tid 37566] [client 51.103.161.170:12289] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "ac5EX3hdk2bEYJCvILa-9gAAAVU"]
[Thu Apr 02 18:26:39.728881 2026] [:error] [pid 54384:tid 54391] [client 51.103.161.170:34543] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "ac5EX9WWpaby3TVN7Mfr_gAAAcU"]
[Thu Apr 02 18:26:39.746583 2026] [:error] [pid 23927:tid 23944] [client 158.158.110.103:64921] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nc4.php"] [unique_id "ac5EX0sZwqCndhl9uKCEDQAAAY8"]
[Thu Apr 02 18:26:40.234659 2026] [:error] [pid 59305:tid 59315] [client 51.103.161.170:34516] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "ac5EYKr2tV4rDwKFxKdQ9AAAAMY"]
[Thu Apr 02 18:26:40.304586 2026] [:error] [pid 59305:tid 59327] [client 158.158.110.103:63009] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "ac5EYKr2tV4rDwKFxKdQ9gAAANI"]
[Thu Apr 02 18:26:40.782965 2026] [:error] [pid 29467:tid 29475] [client 158.158.110.103:63024] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "ac5EYL4VUBFCJAq-WOkykwAAAQU"]
[Thu Apr 02 18:26:40.786165 2026] [:error] [pid 29467:tid 29474] [client 51.103.161.170:64983] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class.php"] [unique_id "ac5EYL4VUBFCJAq-WOkylAAAAQQ"]
[Thu Apr 02 18:26:41.261733 2026] [:error] [pid 54384:tid 54400] [client 158.158.110.103:64911] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "ac5EYdWWpaby3TVN7Mfr_wAAAc4"]
[Thu Apr 02 18:26:41.325020 2026] [:error] [pid 29467:tid 29490] [client 51.103.161.170:12032] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class.php"] [unique_id "ac5EYb4VUBFCJAq-WOkymAAAARQ"]
[Thu Apr 02 18:26:41.748142 2026] [:error] [pid 29467:tid 29494] [client 158.158.110.103:62510] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "ac5EYb4VUBFCJAq-WOkymgAAARg"]
[Thu Apr 02 18:26:41.981974 2026] [:error] [pid 37543:tid 37552] [client 51.103.161.170:34506] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class.php"] [unique_id "ac5EYXhdk2bEYJCvILa-9wAAAUc"]
[Thu Apr 02 18:26:42.322509 2026] [:error] [pid 37543:tid 37555] [client 158.158.110.103:63611] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "ac5EYnhdk2bEYJCvILa--AAAAUo"]
[Thu Apr 02 18:26:42.460588 2026] [:error] [pid 59194:tid 59237] [client 51.103.161.170:12302] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class.php"] [unique_id "ac5EYhMpAeV11hcQehwzNAAAABg"]
[Thu Apr 02 18:26:42.852009 2026] [:error] [pid 59201:tid 59271] [client 158.158.110.103:63602] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "ac5EYsAC0Tw8eL6gzZ4DNgAAAIQ"]
[Thu Apr 02 18:26:42.961416 2026] [:error] [pid 37543:tid 37562] [client 51.103.161.170:12300] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zwq13.php"] [unique_id "ac5EYnhdk2bEYJCvILa--wAAAVE"]
[Thu Apr 02 18:26:43.407255 2026] [:error] [pid 29467:tid 29485] [client 158.158.110.103:65505] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "ac5EY74VUBFCJAq-WOkynwAAAQ8"]
[Thu Apr 02 18:26:43.463819 2026] [:error] [pid 59305:tid 59315] [client 51.103.161.170:10760] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zwq13.php"] [unique_id "ac5EY6r2tV4rDwKFxKdRAgAAAMY"]
[Thu Apr 02 18:26:43.989817 2026] [:error] [pid 29467:tid 29488] [client 158.158.110.103:63000] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "ac5EY74VUBFCJAq-WOkyowAAARI"]
[Thu Apr 02 18:26:44.021425 2026] [:error] [pid 59305:tid 59313] [client 51.103.161.170:34083] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zwq13.php"] [unique_id "ac5EZKr2tV4rDwKFxKdRAwAAAMQ"]
[Thu Apr 02 18:26:44.525672 2026] [:error] [pid 29467:tid 29472] [client 51.103.161.170:34066] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zwq13.php"] [unique_id "ac5EZL4VUBFCJAq-WOkypgAAAQI"]
[Thu Apr 02 18:26:44.560642 2026] [:error] [pid 29467:tid 29480] [client 158.158.110.103:63033] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "ac5EZL4VUBFCJAq-WOkypwAAAQo"]
[Thu Apr 02 18:26:45.041202 2026] [:error] [pid 29467:tid 29489] [client 158.158.110.103:65509] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "ac5EZb4VUBFCJAq-WOkyqQAAARM"]
[Thu Apr 02 18:26:45.213473 2026] [:error] [pid 29467:tid 29477] [client 51.103.161.170:12062] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aapig.php"] [unique_id "ac5EZb4VUBFCJAq-WOkyqgAAAQc"]
[Thu Apr 02 18:26:45.586660 2026] [:error] [pid 29467:tid 29486] [client 158.158.110.103:63011] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "ac5EZb4VUBFCJAq-WOkyrAAAARA"]
[Thu Apr 02 18:26:45.685028 2026] [:error] [pid 29467:tid 29482] [client 51.103.161.170:34512] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aapig.php"] [unique_id "ac5EZb4VUBFCJAq-WOkyrQAAAQw"]
[Thu Apr 02 18:26:46.083559 2026] [:error] [pid 59305:tid 59309] [client 158.158.110.103:62915] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "ac5EZqr2tV4rDwKFxKdREgAAAMA"]
[Thu Apr 02 18:26:46.156150 2026] [:error] [pid 59305:tid 59311] [client 51.103.161.170:34107] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aapig.php"] [unique_id "ac5EZqr2tV4rDwKFxKdREwAAAMI"]
[Thu Apr 02 18:26:46.636026 2026] [:error] [pid 29467:tid 29473] [client 51.103.161.170:42144] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aapig.php"] [unique_id "ac5EZr4VUBFCJAq-WOkytgAAAQM"]
[Thu Apr 02 18:26:46.674621 2026] [:error] [pid 29467:tid 29471] [client 158.158.110.103:64866] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/goat1.php"] [unique_id "ac5EZr4VUBFCJAq-WOkytwAAAQE"]
[Thu Apr 02 18:26:47.127726 2026] [:error] [pid 29467:tid 29479] [client 51.103.161.170:10754] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/webadmin.php"] [unique_id "ac5EZ74VUBFCJAq-WOkyvwAAAQk"]
[Thu Apr 02 18:26:47.268567 2026] [:error] [pid 59305:tid 59331] [client 158.158.110.103:61865] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/goat1.php"] [unique_id "ac5EZ6r2tV4rDwKFxKdRHAAAANY"]
[Thu Apr 02 18:26:47.610559 2026] [:error] [pid 59305:tid 59314] [client 51.103.161.170:12295] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/webadmin.php"] [unique_id "ac5EZ6r2tV4rDwKFxKdRHQAAAMU"]
[Thu Apr 02 18:26:47.813880 2026] [:error] [pid 59194:tid 59219] [client 158.158.110.103:62465] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/goat1.php"] [unique_id "ac5EZxMpAeV11hcQehwzNwAAAAY"]
[Thu Apr 02 18:26:48.081953 2026] [:error] [pid 29467:tid 29475] [client 51.103.161.170:12312] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/webadmin.php"] [unique_id "ac5EaL4VUBFCJAq-WOkywwAAAQU"]
[Thu Apr 02 18:26:48.293143 2026] [:error] [pid 59305:tid 59328] [client 158.158.110.103:64912] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/goat1.php"] [unique_id "ac5EaKr2tV4rDwKFxKdRJAAAANM"]
[Thu Apr 02 18:26:48.556096 2026] [:error] [pid 29467:tid 29470] [client 51.103.161.170:10699] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/webadmin.php"] [unique_id "ac5EaL4VUBFCJAq-WOkyxgAAAQA"]
[Thu Apr 02 18:26:48.844514 2026] [:error] [pid 59305:tid 59331] [client 158.158.110.103:64861] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-cron.php"] [unique_id "ac5EaKr2tV4rDwKFxKdRKgAAANY"]
[Thu Apr 02 18:26:49.029351 2026] [:error] [pid 59305:tid 59325] [client 51.103.161.170:10771] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xc0252.php"] [unique_id "ac5Eaar2tV4rDwKFxKdRKwAAANA"]
[Thu Apr 02 18:26:49.334111 2026] [:error] [pid 54384:tid 54404] [client 158.158.110.103:61881] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-cron.php"] [unique_id "ac5EadWWpaby3TVN7MfsDQAAAdI"]
[Thu Apr 02 18:26:49.503131 2026] [:error] [pid 23927:tid 23929] [client 51.103.161.170:23763] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xc0252.php"] [unique_id "ac5EaUsZwqCndhl9uKCEHAAAAYA"]
[Thu Apr 02 18:26:49.896922 2026] [:error] [pid 23927:tid 23947] [client 158.158.110.103:64958] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-cron.php"] [unique_id "ac5EaUsZwqCndhl9uKCEHgAAAZI"]
[Thu Apr 02 18:26:49.995397 2026] [:error] [pid 29467:tid 29487] [client 51.103.161.170:10793] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xc0252.php"] [unique_id "ac5Eab4VUBFCJAq-WOky0AAAARE"]
[Thu Apr 02 18:26:50.399335 2026] [:error] [pid 59305:tid 59321] [client 158.158.110.103:62996] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-cron.php"] [unique_id "ac5Eaqr2tV4rDwKFxKdRNQAAAMw"]
[Thu Apr 02 18:26:50.613901 2026] [:error] [pid 59201:tid 59289] [client 51.103.161.170:23319] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xc0252.php"] [unique_id "ac5EasAC0Tw8eL6gzZ4DOQAAAJY"]
[Thu Apr 02 18:26:50.877183 2026] [:error] [pid 59194:tid 59234] [client 158.158.110.103:62928] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yanz.php"] [unique_id "ac5EahMpAeV11hcQehwzOAAAABU"]
[Thu Apr 02 18:26:51.120400 2026] [:error] [pid 23927:tid 23943] [client 51.103.161.170:12318] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "ac5Ea0sZwqCndhl9uKCEJAAAAY4"]
[Thu Apr 02 18:26:51.367062 2026] [:error] [pid 23927:tid 23930] [client 158.158.110.103:64851] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yanz.php"] [unique_id "ac5Ea0sZwqCndhl9uKCEJQAAAYE"]
[Thu Apr 02 18:26:51.623282 2026] [:error] [pid 59200:tid 59261] [client 51.103.161.170:10700] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "ac5Ea7fP26txrdLs3EpgFgAAAFU"]
[Thu Apr 02 18:26:51.855931 2026] [:error] [pid 59305:tid 59314] [client 158.158.110.103:64262] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yanz.php"] [unique_id "ac5Ea6r2tV4rDwKFxKdRQAAAAMU"]
[Thu Apr 02 18:26:52.095110 2026] [:error] [pid 59305:tid 59309] [client 51.103.161.170:10786] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "ac5EbKr2tV4rDwKFxKdRQgAAAMA"]
[Thu Apr 02 18:26:52.446158 2026] [:error] [pid 59305:tid 59327] [client 158.158.110.103:64193] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yanz.php"] [unique_id "ac5EbKr2tV4rDwKFxKdRRgAAANI"]
[Thu Apr 02 18:26:52.593353 2026] [:error] [pid 59305:tid 59319] [client 51.103.161.170:42156] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "ac5EbKr2tV4rDwKFxKdRSQAAAMo"]
[Thu Apr 02 18:26:53.047398 2026] [:error] [pid 59305:tid 59314] [client 158.158.110.103:65485] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/config.php"] [unique_id "ac5Ebar2tV4rDwKFxKdRUAAAAMU"]
[Thu Apr 02 18:26:53.181124 2026] [:error] [pid 59305:tid 59309] [client 51.103.161.170:10795] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sc.php"] [unique_id "ac5Ebar2tV4rDwKFxKdRUwAAAMA"]
[Thu Apr 02 18:26:53.527303 2026] [:error] [pid 59305:tid 59314] [client 158.158.110.103:64863] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/config.php"] [unique_id "ac5Ebar2tV4rDwKFxKdRWAAAAMU"]
[Thu Apr 02 18:26:53.654938 2026] [:error] [pid 59305:tid 59316] [client 51.103.161.170:23335] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sc.php"] [unique_id "ac5Ebar2tV4rDwKFxKdRWgAAAMc"]
[Thu Apr 02 18:26:54.006684 2026] [:error] [pid 29467:tid 29478] [client 158.158.110.103:63592] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/config.php"] [unique_id "ac5Ebr4VUBFCJAq-WOky3wAAAQg"]
[Thu Apr 02 18:26:54.170525 2026] [:error] [pid 23927:tid 23929] [client 51.103.161.170:23252] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sc.php"] [unique_id "ac5EbksZwqCndhl9uKCEKgAAAYA"]
[Thu Apr 02 18:26:54.491631 2026] [:error] [pid 54384:tid 54395] [client 158.158.110.103:64203] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/config.php"] [unique_id "ac5EbtWWpaby3TVN7MfsFgAAAck"]
[Thu Apr 02 18:26:54.643256 2026] [:error] [pid 29467:tid 29480] [client 51.103.161.170:12043] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sc.php"] [unique_id "ac5Ebr4VUBFCJAq-WOky4QAAAQo"]
[Thu Apr 02 18:26:55.060793 2026] [:error] [pid 59305:tid 59313] [client 158.158.110.103:62956] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/network.php"] [unique_id "ac5Eb6r2tV4rDwKFxKdRZwAAAMQ"]
[Thu Apr 02 18:26:55.168391 2026] [:error] [pid 59305:tid 59333] [client 51.103.161.170:10648] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mis.php"] [unique_id "ac5Eb6r2tV4rDwKFxKdRaQAAANg"]
[Thu Apr 02 18:26:55.560583 2026] [:error] [pid 59201:tid 59270] [client 158.158.110.103:62931] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/network.php"] [unique_id "ac5Eb8AC0Tw8eL6gzZ4DPAAAAIM"]
[Thu Apr 02 18:26:55.640566 2026] [:error] [pid 59305:tid 59320] [client 51.103.161.170:23277] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mis.php"] [unique_id "ac5Eb6r2tV4rDwKFxKdRbAAAAMs"]
[Thu Apr 02 18:26:56.043466 2026] [:error] [pid 23927:tid 23953] [client 158.158.110.103:63647] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/network.php"] [unique_id "ac5EcEsZwqCndhl9uKCELgAAAZg"]
[Thu Apr 02 18:26:56.162494 2026] [:error] [pid 29467:tid 29488] [client 51.103.161.170:12057] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mis.php"] [unique_id "ac5EcL4VUBFCJAq-WOky5QAAARI"]
[Thu Apr 02 18:26:56.570954 2026] [:error] [pid 23927:tid 23930] [client 158.158.110.103:60555] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/network.php"] [unique_id "ac5EcEsZwqCndhl9uKCELwAAAYE"]
[Thu Apr 02 18:26:56.693647 2026] [:error] [pid 23927:tid 23944] [client 51.103.161.170:23339] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mis.php"] [unique_id "ac5EcEsZwqCndhl9uKCEMAAAAY8"]
[Thu Apr 02 18:26:57.060721 2026] [:error] [pid 23927:tid 23935] [client 158.158.110.103:63661] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-2019.php"] [unique_id "ac5EcUsZwqCndhl9uKCENAAAAYY"]
[Thu Apr 02 18:26:57.173642 2026] [:error] [pid 29467:tid 29485] [client 51.103.161.170:10692] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zogy1.php"] [unique_id "ac5Ecb4VUBFCJAq-WOky5gAAAQ8"]
[Thu Apr 02 18:26:57.561143 2026] [:error] [pid 23927:tid 23933] [client 158.158.110.103:63608] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-2019.php"] [unique_id "ac5EcUsZwqCndhl9uKCEOwAAAYQ"]
[Thu Apr 02 18:26:57.645691 2026] [:error] [pid 23927:tid 23945] [client 51.103.161.170:34052] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zogy1.php"] [unique_id "ac5EcUsZwqCndhl9uKCEPAAAAZA"]
[Thu Apr 02 18:26:58.062323 2026] [:error] [pid 29467:tid 29479] [client 158.158.110.103:62964] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-2019.php"] [unique_id "ac5Ecr4VUBFCJAq-WOky6gAAAQk"]
[Thu Apr 02 18:26:58.172618 2026] [:error] [pid 59305:tid 59333] [client 51.103.161.170:34496] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zogy1.php"] [unique_id "ac5Ecqr2tV4rDwKFxKdRbwAAANg"]
[Thu Apr 02 18:26:58.539078 2026] [:error] [pid 59200:tid 59251] [client 158.158.110.103:63625] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-2019.php"] [unique_id "ac5EcrfP26txrdLs3EpgFwAAAEs"]
[Thu Apr 02 18:26:58.720173 2026] [:error] [pid 29467:tid 29480] [client 51.103.161.170:23280] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zogy1.php"] [unique_id "ac5Ecr4VUBFCJAq-WOky7wAAAQo"]
[Thu Apr 02 18:26:59.074385 2026] [:error] [pid 29467:tid 29477] [client 158.158.110.103:63005] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bypass.php"] [unique_id "ac5Ec74VUBFCJAq-WOky8QAAAQc"]
[Thu Apr 02 18:26:59.223981 2026] [:error] [pid 29467:tid 29482] [client 51.103.161.170:34517] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xvs.php"] [unique_id "ac5Ec74VUBFCJAq-WOky9AAAAQw"]
[Thu Apr 02 18:26:59.607516 2026] [:error] [pid 29467:tid 29475] [client 158.158.110.103:63679] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bypass.php"] [unique_id "ac5Ec74VUBFCJAq-WOky9gAAAQU"]
[Thu Apr 02 18:26:59.700131 2026] [:error] [pid 29467:tid 29483] [client 51.103.161.170:12308] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xvs.php"] [unique_id "ac5Ec74VUBFCJAq-WOky9wAAAQ0"]
[Thu Apr 02 18:27:00.098826 2026] [:error] [pid 29467:tid 29470] [client 158.158.110.103:64304] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bypass.php"] [unique_id "ac5EdL4VUBFCJAq-WOky_wAAAQA"]
[Thu Apr 02 18:27:00.271669 2026] [:error] [pid 29467:tid 29491] [client 51.103.161.170:23270] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xvs.php"] [unique_id "ac5EdL4VUBFCJAq-WOkzAQAAARU"]
[Thu Apr 02 18:27:00.583196 2026] [:error] [pid 29467:tid 29474] [client 158.158.110.103:64288] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bypass.php"] [unique_id "ac5EdL4VUBFCJAq-WOkzBAAAAQQ"]
[Thu Apr 02 18:27:00.917642 2026] [:error] [pid 23927:tid 23929] [client 51.103.161.170:10798] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xvs.php"] [unique_id "ac5EdEsZwqCndhl9uKCEQwAAAYA"]
[Thu Apr 02 18:27:01.086101 2026] [:error] [pid 29467:tid 29479] [client 158.158.110.103:64860] [client 158.158.110.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "ac5Edb4VUBFCJAq-WOkzCAAAAQk"]
[Thu Apr 02 18:27:01.394510 2026] [:error] [pid 29467:tid 29481] [client 51.103.161.170:23266] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "ac5Edb4VUBFCJAq-WOkzCwAAAQs"]
[Thu Apr 02 18:27:01.606638 2026] [:error] [pid 54384:tid 54387] [client 158.158.110.103:62420] [client 158.158.110.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "ac5EddWWpaby3TVN7MfsGQAAAcE"]
[Thu Apr 02 18:27:01.868120 2026] [:error] [pid 29467:tid 29488] [client 51.103.161.170:10765] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "ac5Edb4VUBFCJAq-WOkzDgAAARI"]
[Thu Apr 02 18:27:02.092313 2026] [:error] [pid 29467:tid 29485] [client 158.158.110.103:64281] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "ac5Edr4VUBFCJAq-WOkzEAAAAQ8"]
[Thu Apr 02 18:27:02.461865 2026] [:error] [pid 29467:tid 29491] [client 51.103.161.170:34077] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "ac5Edr4VUBFCJAq-WOkzFQAAARU"]
[Thu Apr 02 18:27:02.575109 2026] [:error] [pid 54384:tid 54409] [client 158.158.110.103:63021] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "ac5EdtWWpaby3TVN7MfsGwAAAdc"]
[Thu Apr 02 18:27:03.095794 2026] [:error] [pid 29467:tid 29470] [client 158.158.110.103:64937] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "ac5Ed74VUBFCJAq-WOkzGAAAAQA"]
[Thu Apr 02 18:27:03.096046 2026] [:error] [pid 29467:tid 29488] [client 51.103.161.170:12034] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "ac5Ed74VUBFCJAq-WOkzGQAAARI"]
[Thu Apr 02 18:27:03.585461 2026] [:error] [pid 54384:tid 54389] [client 158.158.110.103:63588] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lock.php"] [unique_id "ac5Ed9WWpaby3TVN7MfsHgAAAcM"]
[Thu Apr 02 18:27:03.638622 2026] [:error] [pid 54384:tid 54406] [client 51.103.161.170:12293] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/az.php"] [unique_id "ac5Ed9WWpaby3TVN7MfsHwAAAdQ"]
[Thu Apr 02 18:27:04.119641 2026] [:error] [pid 29467:tid 29473] [client 158.158.110.103:64946] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lock.php"] [unique_id "ac5EeL4VUBFCJAq-WOkzHgAAAQM"]
[Thu Apr 02 18:27:04.276698 2026] [:error] [pid 37543:tid 37559] [client 51.103.161.170:10814] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/az.php"] [unique_id "ac5EeHhdk2bEYJCvILa_DgAAAU4"]
[Thu Apr 02 18:27:04.598078 2026] [:error] [pid 54384:tid 54386] [client 158.158.110.103:65525] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lock.php"] [unique_id "ac5EeNWWpaby3TVN7MfsJwAAAcA"]
[Thu Apr 02 18:27:04.784722 2026] [:error] [pid 59200:tid 59256] [client 51.103.161.170:23265] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/az.php"] [unique_id "ac5EeLfP26txrdLs3EpgGQAAAFA"]
[Thu Apr 02 18:27:05.076925 2026] [:error] [pid 54384:tid 54405] [client 158.158.110.103:64839] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lock.php"] [unique_id "ac5EedWWpaby3TVN7MfsKAAAAdM"]
[Thu Apr 02 18:27:05.556399 2026] [:error] [pid 37543:tid 37556] [client 158.158.110.103:64208] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mail.php"] [unique_id "ac5EeXhdk2bEYJCvILa_EAAAAUs"]
[Thu Apr 02 18:27:05.660534 2026] [:error] [pid 59194:tid 59237] [client 51.103.161.170:12080] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/az.php"] [unique_id "ac5EeRMpAeV11hcQehwzPwAAABg"]
[Thu Apr 02 18:27:06.094976 2026] [:error] [pid 59201:tid 59287] [client 158.158.110.103:64904] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mail.php"] [unique_id "ac5EesAC0Tw8eL6gzZ4DPgAAAJQ"]
[Thu Apr 02 18:27:06.597183 2026] [:error] [pid 59200:tid 59258] [client 158.158.110.103:64227] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mail.php"] [unique_id "ac5EerfP26txrdLs3EpgHQAAAFI"]
[Thu Apr 02 18:27:06.763025 2026] [:error] [pid 59194:tid 59231] [client 51.103.161.170:10690] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/web.php"] [unique_id "ac5EehMpAeV11hcQehwzQwAAABI"]
[Thu Apr 02 18:27:07.084887 2026] [:error] [pid 59194:tid 59220] [client 158.158.110.103:64957] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mail.php"] [unique_id "ac5EexMpAeV11hcQehwzRAAAAAc"]
[Thu Apr 02 18:27:07.303271 2026] [:error] [pid 23927:tid 23941] [client 51.103.161.170:23239] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/web.php"] [unique_id "ac5Ee0sZwqCndhl9uKCESgAAAYw"]
[Thu Apr 02 18:27:07.568206 2026] [:error] [pid 23927:tid 23947] [client 158.158.110.103:63652] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/marijuana.php"] [unique_id "ac5Ee0sZwqCndhl9uKCETQAAAZI"]
[Thu Apr 02 18:27:07.861743 2026] [:error] [pid 59200:tid 59264] [client 51.103.161.170:10781] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/web.php"] [unique_id "ac5Ee7fP26txrdLs3EpgHwAAAFg"]
[Thu Apr 02 18:27:08.049201 2026] [:error] [pid 54384:tid 54406] [client 158.158.110.103:63607] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/marijuana.php"] [unique_id "ac5EfNWWpaby3TVN7MfsKgAAAdQ"]
[Thu Apr 02 18:27:08.335455 2026] [:error] [pid 29467:tid 29489] [client 51.103.161.170:12056] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/web.php"] [unique_id "ac5EfL4VUBFCJAq-WOkzIwAAARM"]
[Thu Apr 02 18:27:08.629714 2026] [:error] [pid 29467:tid 29483] [client 158.158.110.103:62418] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/marijuana.php"] [unique_id "ac5EfL4VUBFCJAq-WOkzJQAAAQ0"]
[Thu Apr 02 18:27:08.891548 2026] [:error] [pid 29467:tid 29479] [client 51.103.161.170:34543] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ac5EfL4VUBFCJAq-WOkzKAAAAQk"]
[Thu Apr 02 18:27:09.108147 2026] [:error] [pid 59200:tid 59250] [client 158.158.110.103:64291] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/marijuana.php"] [unique_id "ac5EfbfP26txrdLs3EpgIQAAAEo"]
[Thu Apr 02 18:27:09.594184 2026] [:error] [pid 23927:tid 23952] [client 158.158.110.103:61780] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/333.php"] [unique_id "ac5EfUsZwqCndhl9uKCEUQAAAZc"]
[Thu Apr 02 18:27:09.664361 2026] [:error] [pid 59305:tid 59319] [client 51.103.161.170:34499] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ac5Efar2tV4rDwKFxKdRjQAAAMo"]
[Thu Apr 02 18:27:10.149686 2026] [:error] [pid 59305:tid 59310] [client 51.103.161.170:10641] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ac5Efqr2tV4rDwKFxKdRjgAAAME"]
[Thu Apr 02 18:27:10.219431 2026] [:error] [pid 59305:tid 59317] [client 158.158.110.103:65524] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/333.php"] [unique_id "ac5Efqr2tV4rDwKFxKdRjwAAAMg"]
[Thu Apr 02 18:27:10.720951 2026] [:error] [pid 23927:tid 23935] [client 51.103.161.170:23235] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ac5EfksZwqCndhl9uKCEVAAAAYY"]
[Thu Apr 02 18:27:10.743087 2026] [:error] [pid 59305:tid 59329] [client 158.158.110.103:59901] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/333.php"] [unique_id "ac5Efqr2tV4rDwKFxKdRkQAAANQ"]
[Thu Apr 02 18:27:11.224177 2026] [:error] [pid 54384:tid 54386] [client 158.158.110.103:62489] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/333.php"] [unique_id "ac5Ef9WWpaby3TVN7MfsLwAAAcA"]
[Thu Apr 02 18:27:11.707721 2026] [:error] [pid 37543:tid 37552] [client 158.158.110.103:65508] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/444.php"] [unique_id "ac5Ef3hdk2bEYJCvILa_FgAAAUc"]
[Thu Apr 02 18:27:12.187932 2026] [:error] [pid 23927:tid 23951] [client 158.158.110.103:64905] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/444.php"] [unique_id "ac5EgEsZwqCndhl9uKCEWAAAAZY"]
[Thu Apr 02 18:27:12.669744 2026] [:error] [pid 59305:tid 59315] [client 158.158.110.103:64907] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/444.php"] [unique_id "ac5EgKr2tV4rDwKFxKdRmQAAAMY"]
[Thu Apr 02 18:27:13.148014 2026] [:error] [pid 59305:tid 59324] [client 158.158.110.103:65483] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/444.php"] [unique_id "ac5Egar2tV4rDwKFxKdRmgAAAM8"]
[Thu Apr 02 18:27:13.627711 2026] [:error] [pid 54384:tid 54393] [client 158.158.110.103:64847] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "ac5EgdWWpaby3TVN7MfsMgAAAcc"]
[Thu Apr 02 18:27:14.107257 2026] [:error] [pid 23927:tid 23934] [client 158.158.110.103:64302] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "ac5EgksZwqCndhl9uKCEXAAAAYU"]
[Thu Apr 02 18:27:14.607296 2026] [:error] [pid 59194:tid 59237] [client 158.158.110.103:64944] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "ac5EghMpAeV11hcQehwzSwAAABg"]
[Thu Apr 02 18:27:15.113122 2026] [:error] [pid 54384:tid 54406] [client 158.158.110.103:64897] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "ac5Eg9WWpaby3TVN7MfsNgAAAdQ"]
[Thu Apr 02 18:27:15.622860 2026] [:error] [pid 54384:tid 54407] [client 158.158.110.103:62413] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/filesss.php"] [unique_id "ac5Eg9WWpaby3TVN7MfsOAAAAdU"]
[Thu Apr 02 18:27:16.282338 2026] [:error] [pid 37543:tid 37567] [client 158.158.110.103:64881] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/filesss.php"] [unique_id "ac5EhHhdk2bEYJCvILa_HwAAAVY"]
[Thu Apr 02 18:27:16.783315 2026] [:error] [pid 59200:tid 59241] [client 158.158.110.103:63016] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/filesss.php"] [unique_id "ac5EhLfP26txrdLs3EpgIwAAAEE"]
[Thu Apr 02 18:27:19.246532 2026] [:error] [pid 37543:tid 37559] [client 51.103.161.170:10689] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "ac5Eh3hdk2bEYJCvILa_JgAAAU4"]
[Thu Apr 02 18:27:19.826982 2026] [:error] [pid 59201:tid 59283] [client 51.103.161.170:23332] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "ac5Eh8AC0Tw8eL6gzZ4DRQAAAJA"]
[Thu Apr 02 18:27:20.324087 2026] [:error] [pid 54384:tid 54397] [client 51.103.161.170:23263] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "ac5EiNWWpaby3TVN7MfsRAAAAcs"]
[Thu Apr 02 18:27:20.993168 2026] [:error] [pid 59305:tid 59319] [client 51.103.161.170:23292] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "ac5EiKr2tV4rDwKFxKdRowAAAMo"]
[Thu Apr 02 18:27:21.665300 2026] [:error] [pid 23927:tid 23946] [client 51.103.161.170:10808] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "ac5EiUsZwqCndhl9uKCEbwAAAZE"]
[Thu Apr 02 18:27:22.257573 2026] [:error] [pid 59305:tid 59333] [client 51.103.161.170:12316] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "ac5Eiqr2tV4rDwKFxKdRqQAAANg"]
[Thu Apr 02 18:27:22.814063 2026] [:error] [pid 59201:tid 59281] [client 51.103.161.170:34101] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "ac5EisAC0Tw8eL6gzZ4DRgAAAI4"]
[Thu Apr 02 18:27:23.523565 2026] [:error] [pid 59201:tid 59269] [client 51.103.161.170:34084] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "ac5Ei8AC0Tw8eL6gzZ4DRwAAAII"]
[Thu Apr 02 18:27:23.923637 2026] [:error] [pid 23927:tid 23934] [client 158.158.110.103:61140] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gorila.php"] [unique_id "ac5Ei0sZwqCndhl9uKCEdAAAAYU"]
[Thu Apr 02 18:27:24.001662 2026] [:error] [pid 23927:tid 23944] [client 51.103.161.170:34497] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aifa.php"] [unique_id "ac5EjEsZwqCndhl9uKCEdQAAAY8"]
[Thu Apr 02 18:27:24.403591 2026] [:error] [pid 37543:tid 37564] [client 158.158.110.103:64257] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gorila.php"] [unique_id "ac5EjHhdk2bEYJCvILa_MwAAAVM"]
[Thu Apr 02 18:27:24.729838 2026] [:error] [pid 37543:tid 37560] [client 51.103.161.170:10796] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aifa.php"] [unique_id "ac5EjHhdk2bEYJCvILa_NgAAAU8"]
[Thu Apr 02 18:27:24.881958 2026] [:error] [pid 54384:tid 54401] [client 158.158.110.103:64838] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gorila.php"] [unique_id "ac5EjNWWpaby3TVN7MfsTwAAAc8"]
[Thu Apr 02 18:27:25.241063 2026] [:error] [pid 59200:tid 59248] [client 51.103.161.170:34088] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aifa.php"] [unique_id "ac5EjbfP26txrdLs3EpgMwAAAEg"]
[Thu Apr 02 18:27:25.368089 2026] [:error] [pid 59200:tid 59250] [client 158.158.110.103:62472] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gorila.php"] [unique_id "ac5EjbfP26txrdLs3EpgNAAAAEo"]
[Thu Apr 02 18:27:25.756098 2026] [:error] [pid 37543:tid 37546] [client 51.103.161.170:10702] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aifa.php"] [unique_id "ac5EjXhdk2bEYJCvILa_NwAAAUE"]
[Thu Apr 02 18:27:25.847894 2026] [:error] [pid 59305:tid 59321] [client 158.158.110.103:61195] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vanta.php"] [unique_id "ac5Ejar2tV4rDwKFxKdRqwAAAMw"]
[Thu Apr 02 18:27:26.317083 2026] [:error] [pid 23927:tid 23936] [client 51.103.161.170:23309] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "ac5EjksZwqCndhl9uKCEeQAAAYc"]
[Thu Apr 02 18:27:26.334450 2026] [:error] [pid 59201:tid 59275] [client 158.158.110.103:59876] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vanta.php"] [unique_id "ac5EjsAC0Tw8eL6gzZ4DSQAAAIg"]
[Thu Apr 02 18:27:26.811676 2026] [:error] [pid 29467:tid 29488] [client 158.158.110.103:62933] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vanta.php"] [unique_id "ac5Ejr4VUBFCJAq-WOkzLgAAARI"]
[Thu Apr 02 18:27:26.913959 2026] [:error] [pid 59305:tid 59332] [client 51.103.161.170:10740] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "ac5Ejqr2tV4rDwKFxKdRrAAAANc"]
[Thu Apr 02 18:27:27.317758 2026] [:error] [pid 59201:tid 59287] [client 158.158.110.103:62938] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vanta.php"] [unique_id "ac5Ej8AC0Tw8eL6gzZ4DSwAAAJQ"]
[Thu Apr 02 18:27:27.414298 2026] [:error] [pid 37543:tid 37550] [client 51.103.161.170:10805] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "ac5Ej3hdk2bEYJCvILa_OgAAAUU"]
[Thu Apr 02 18:27:27.797664 2026] [:error] [pid 37543:tid 37551] [client 158.158.110.103:62929] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sh3ll.php"] [unique_id "ac5Ej3hdk2bEYJCvILa_PAAAAUY"]
[Thu Apr 02 18:27:28.092215 2026] [:error] [pid 37543:tid 37552] [client 51.103.161.170:10764] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "ac5EkHhdk2bEYJCvILa_PQAAAUc"]
[Thu Apr 02 18:27:28.306124 2026] [:error] [pid 59305:tid 59322] [client 158.158.110.103:62914] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sh3ll.php"] [unique_id "ac5EkKr2tV4rDwKFxKdRrQAAAM0"]
[Thu Apr 02 18:27:28.646046 2026] [:error] [pid 59305:tid 59323] [client 51.103.161.170:34527] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/feokc.php"] [unique_id "ac5EkKr2tV4rDwKFxKdRrwAAAM4"]
[Thu Apr 02 18:27:28.801894 2026] [:error] [pid 59305:tid 59330] [client 158.158.110.103:62975] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sh3ll.php"] [unique_id "ac5EkKr2tV4rDwKFxKdRsAAAANU"]
[Thu Apr 02 18:27:29.128000 2026] [:error] [pid 59200:tid 59243] [client 51.103.161.170:10785] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/feokc.php"] [unique_id "ac5EkbfP26txrdLs3EpgOQAAAEM"]
[Thu Apr 02 18:27:29.288095 2026] [:error] [pid 59305:tid 59309] [client 158.158.110.103:64216] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sh3ll.php"] [unique_id "ac5Ekar2tV4rDwKFxKdRsgAAAMA"]
[Thu Apr 02 18:27:29.613918 2026] [:error] [pid 59305:tid 59325] [client 51.103.161.170:12345] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/feokc.php"] [unique_id "ac5Ekar2tV4rDwKFxKdRtgAAANA"]
[Thu Apr 02 18:27:29.825829 2026] [:error] [pid 59305:tid 59318] [client 158.158.110.103:62404] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cabs.php"] [unique_id "ac5Ekar2tV4rDwKFxKdRuAAAAMk"]
[Thu Apr 02 18:27:30.263014 2026] [:error] [pid 59305:tid 59324] [client 51.103.161.170:23342] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/feokc.php"] [unique_id "ac5Ekqr2tV4rDwKFxKdRuwAAAM8"]
[Thu Apr 02 18:27:30.357914 2026] [:error] [pid 23927:tid 23939] [client 158.158.110.103:61822] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cabs.php"] [unique_id "ac5EkksZwqCndhl9uKCEfAAAAYo"]
[Thu Apr 02 18:27:30.493128 2026] [:error] [pid 54384:tid 54386] [client 51.103.161.170:41550] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac5EktWWpaby3TVN7MfsUwAAAcA"]
[Thu Apr 02 18:27:30.929424 2026] [:error] [pid 59194:tid 59226] [client 51.103.161.170:34536] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nc4.php"] [unique_id "ac5EkhMpAeV11hcQehwzZwAAAA0"]
[Thu Apr 02 18:27:30.966012 2026] [:error] [pid 59194:tid 59215] [client 158.158.110.103:62425] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cabs.php"] [unique_id "ac5EkhMpAeV11hcQehwzaAAAAAI"]
[Thu Apr 02 18:27:31.507576 2026] [:error] [pid 59200:tid 59244] [client 158.158.110.103:64853] [client 158.158.110.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cabs.php"] [unique_id "ac5Ek7fP26txrdLs3EpgPQAAAEQ"]
[Thu Apr 02 18:27:31.644591 2026] [:error] [pid 59200:tid 59259] [client 51.103.161.170:12335] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nc4.php"] [unique_id "ac5Ek7fP26txrdLs3EpgPgAAAFM"]
[Thu Apr 02 18:27:32.175092 2026] [:error] [pid 59305:tid 59321] [client 51.103.161.170:12337] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nc4.php"] [unique_id "ac5ElKr2tV4rDwKFxKdRvgAAAMw"]
[Thu Apr 02 18:27:32.721000 2026] [:error] [pid 59201:tid 59271] [client 51.103.161.170:34504] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nc4.php"] [unique_id "ac5ElMAC0Tw8eL6gzZ4DTgAAAIQ"]
[Thu Apr 02 18:27:33.534674 2026] [:error] [pid 23927:tid 23931] [client 51.103.161.170:10791] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "ac5ElUsZwqCndhl9uKCEfgAAAYI"]
[Thu Apr 02 18:27:33.690529 2026] [:error] [pid 59201:tid 59285] [client 51.103.161.170:14338] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac5ElcAC0Tw8eL6gzZ4DUAAAAJI"]
[Thu Apr 02 18:27:34.066482 2026] [:error] [pid 37543:tid 37553] [client 51.103.161.170:23343] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "ac5Elnhdk2bEYJCvILa_QQAAAUg"]
[Thu Apr 02 18:27:34.594052 2026] [:error] [pid 59201:tid 59284] [client 51.103.161.170:12074] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "ac5ElsAC0Tw8eL6gzZ4DUwAAAJE"]
[Thu Apr 02 18:27:35.176154 2026] [:error] [pid 29467:tid 29483] [client 51.103.161.170:12092] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "ac5El74VUBFCJAq-WOkzMQAAAQ0"]
[Thu Apr 02 18:27:35.215810 2026] [:error] [pid 37543:tid 37560] [client 51.103.161.170:41541] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac5El3hdk2bEYJCvILa_QwAAAU8"]
[Thu Apr 02 18:27:35.782245 2026] [:error] [pid 59305:tid 59310] [client 51.103.161.170:23246] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "ac5El6r2tV4rDwKFxKdRwQAAAME"]
[Thu Apr 02 18:27:36.286077 2026] [:error] [pid 23927:tid 23934] [client 51.103.161.170:10707] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "ac5EmEsZwqCndhl9uKCEhQAAAYU"]
[Thu Apr 02 18:27:36.578375 2026] [:error] [pid 29467:tid 29494] [client 51.103.161.170:25184] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac5EmL4VUBFCJAq-WOkzOwAAARg"]
[Thu Apr 02 18:27:36.757050 2026] [:error] [pid 54384:tid 54403] [client 51.103.161.170:23288] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "ac5EmNWWpaby3TVN7MfsVwAAAdE"]
[Thu Apr 02 18:27:37.250310 2026] [:error] [pid 54384:tid 54398] [client 51.103.161.170:10251] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "ac5EmdWWpaby3TVN7MfsWAAAAcw"]
[Thu Apr 02 18:27:37.951933 2026] [:error] [pid 23927:tid 23938] [client 51.103.161.170:42128] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "ac5EmUsZwqCndhl9uKCEiQAAAYk"]
[Thu Apr 02 18:27:38.434743 2026] [:error] [pid 37543:tid 37559] [client 51.103.161.170:12301] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "ac5Emnhdk2bEYJCvILa_RQAAAU4"]
[Thu Apr 02 18:27:38.929089 2026] [:error] [pid 59200:tid 59254] [client 51.103.161.170:12033] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "ac5EmrfP26txrdLs3EpgSAAAAE4"]
[Thu Apr 02 18:27:39.412418 2026] [:error] [pid 59200:tid 59253] [client 51.103.161.170:23301] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "ac5Em7fP26txrdLs3EpgSwAAAE0"]
[Thu Apr 02 18:27:39.926967 2026] [:error] [pid 37543:tid 37545] [client 51.103.161.170:10799] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/goat1.php"] [unique_id "ac5Em3hdk2bEYJCvILa_RwAAAUA"]
[Thu Apr 02 18:27:40.435009 2026] [:error] [pid 59200:tid 59257] [client 51.103.161.170:42137] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/goat1.php"] [unique_id "ac5EnLfP26txrdLs3EpgTAAAAFE"]
[Thu Apr 02 18:27:40.954991 2026] [:error] [pid 37543:tid 37568] [client 51.103.161.170:34108] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/goat1.php"] [unique_id "ac5EnHhdk2bEYJCvILa_SAAAAVc"]
[Thu Apr 02 18:27:41.457847 2026] [:error] [pid 29467:tid 29472] [client 51.103.161.170:12336] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/goat1.php"] [unique_id "ac5Enb4VUBFCJAq-WOkzVQAAAQI"]
[Thu Apr 02 18:27:41.979738 2026] [:error] [pid 59201:tid 59273] [client 51.103.161.170:12315] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-cron.php"] [unique_id "ac5EncAC0Tw8eL6gzZ4DXQAAAIY"]
[Thu Apr 02 18:27:42.486696 2026] [:error] [pid 59305:tid 59331] [client 51.103.161.170:34095] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-cron.php"] [unique_id "ac5Enqr2tV4rDwKFxKdRzQAAANY"]
[Thu Apr 02 18:27:42.970488 2026] [:error] [pid 59305:tid 59321] [client 51.103.161.170:10253] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-cron.php"] [unique_id "ac5Enqr2tV4rDwKFxKdR0AAAAMw"]
[Thu Apr 02 18:27:43.510155 2026] [:error] [pid 59305:tid 59317] [client 51.103.161.170:12077] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-cron.php"] [unique_id "ac5En6r2tV4rDwKFxKdR0gAAAMg"]
[Thu Apr 02 18:27:44.081735 2026] [:error] [pid 59305:tid 59319] [client 51.103.161.170:10725] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yanz.php"] [unique_id "ac5EoKr2tV4rDwKFxKdR1AAAAMo"]
[Thu Apr 02 18:27:44.568105 2026] [:error] [pid 59305:tid 59327] [client 51.103.161.170:34073] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yanz.php"] [unique_id "ac5EoKr2tV4rDwKFxKdR1gAAANI"]
[Thu Apr 02 18:27:45.044163 2026] [:error] [pid 29467:tid 29475] [client 51.103.161.170:10693] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yanz.php"] [unique_id "ac5Eob4VUBFCJAq-WOkzZAAAAQU"]
[Thu Apr 02 18:27:45.614125 2026] [:error] [pid 23927:tid 23950] [client 51.103.161.170:10731] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yanz.php"] [unique_id "ac5EoUsZwqCndhl9uKCEkAAAAZU"]
[Thu Apr 02 18:27:46.127050 2026] [:error] [pid 23927:tid 23935] [client 51.103.161.170:23307] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/config.php"] [unique_id "ac5EoksZwqCndhl9uKCEkwAAAYY"]
[Thu Apr 02 18:27:46.621913 2026] [:error] [pid 23927:tid 23943] [client 51.103.161.170:10779] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/config.php"] [unique_id "ac5EoksZwqCndhl9uKCElAAAAY4"]
[Thu Apr 02 18:27:47.158278 2026] [:error] [pid 54384:tid 54408] [client 51.103.161.170:23777] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/config.php"] [unique_id "ac5Eo9WWpaby3TVN7MfsaQAAAdY"]
[Thu Apr 02 18:27:47.635881 2026] [:error] [pid 23927:tid 23938] [client 51.103.161.170:10264] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/config.php"] [unique_id "ac5Eo0sZwqCndhl9uKCEmAAAAYk"]
[Thu Apr 02 18:27:48.108718 2026] [:error] [pid 59305:tid 59312] [client 51.103.161.170:23317] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/network.php"] [unique_id "ac5EpKr2tV4rDwKFxKdR3wAAAMM"]
[Thu Apr 02 18:27:48.591275 2026] [:error] [pid 54384:tid 54390] [client 51.103.161.170:23348] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/network.php"] [unique_id "ac5EpNWWpaby3TVN7MfsbgAAAcQ"]
[Thu Apr 02 18:27:49.063841 2026] [:error] [pid 37543:tid 37565] [client 51.103.161.170:34076] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/network.php"] [unique_id "ac5EpXhdk2bEYJCvILa_SwAAAVQ"]
[Thu Apr 02 18:27:49.626160 2026] [:error] [pid 23927:tid 23946] [client 51.103.161.170:10289] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/network.php"] [unique_id "ac5EpUsZwqCndhl9uKCEpAAAAZE"]
[Thu Apr 02 18:27:50.098091 2026] [:error] [pid 23927:tid 23929] [client 51.103.161.170:42169] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-2019.php"] [unique_id "ac5EpksZwqCndhl9uKCEqgAAAYA"]
[Thu Apr 02 18:27:50.595689 2026] [:error] [pid 59305:tid 59333] [client 51.103.161.170:15841] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-2019.php"] [unique_id "ac5Epqr2tV4rDwKFxKdR6wAAANg"]
[Thu Apr 02 18:27:51.082394 2026] [:error] [pid 23927:tid 23950] [client 51.103.161.170:23274] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-2019.php"] [unique_id "ac5Ep0sZwqCndhl9uKCEsgAAAZU"]
[Thu Apr 02 18:27:51.576128 2026] [:error] [pid 37543:tid 37546] [client 51.103.161.170:42126] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-2019.php"] [unique_id "ac5Ep3hdk2bEYJCvILa_VwAAAUE"]
[Thu Apr 02 18:27:52.065692 2026] [:error] [pid 37543:tid 37567] [client 51.103.161.170:23316] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bypass.php"] [unique_id "ac5EqHhdk2bEYJCvILa_WwAAAVY"]
[Thu Apr 02 18:27:52.582119 2026] [:error] [pid 59305:tid 59310] [client 51.103.161.170:10706] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bypass.php"] [unique_id "ac5EqKr2tV4rDwKFxKdR9QAAAME"]
[Thu Apr 02 18:27:53.096147 2026] [:error] [pid 59201:tid 59271] [client 51.103.161.170:34548] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bypass.php"] [unique_id "ac5EqcAC0Tw8eL6gzZ4DdgAAAIQ"]
[Thu Apr 02 18:27:53.690922 2026] [:error] [pid 37543:tid 37563] [client 51.103.161.170:23322] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bypass.php"] [unique_id "ac5EqXhdk2bEYJCvILa_XQAAAVI"]
[Thu Apr 02 18:27:54.247662 2026] [:error] [pid 59305:tid 59323] [client 51.103.161.170:23241] [client 51.103.161.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "ac5Eqqr2tV4rDwKFxKdR_gAAAM4"]
[Thu Apr 02 18:27:54.789316 2026] [:error] [pid 37543:tid 37550] [client 51.103.161.170:10697] [client 51.103.161.170] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "ac5Eqnhdk2bEYJCvILa_XwAAAUU"]
[Thu Apr 02 18:27:55.262642 2026] [:error] [pid 59305:tid 59311] [client 51.103.161.170:23313] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "ac5Eq6r2tV4rDwKFxKdR_wAAAMI"]
[Thu Apr 02 18:27:55.750455 2026] [:error] [pid 54384:tid 54398] [client 51.103.161.170:23349] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "ac5Eq9WWpaby3TVN7MfshgAAAcw"]
[Thu Apr 02 18:27:56.225346 2026] [:error] [pid 59305:tid 59322] [client 51.103.161.170:10761] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "ac5ErKr2tV4rDwKFxKdSAgAAAM0"]
[Thu Apr 02 18:27:56.706105 2026] [:error] [pid 54384:tid 54403] [client 51.103.161.170:23790] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lock.php"] [unique_id "ac5ErNWWpaby3TVN7MfsiAAAAdE"]
[Thu Apr 02 18:27:57.178855 2026] [:error] [pid 37543:tid 37563] [client 51.103.161.170:23350] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lock.php"] [unique_id "ac5ErXhdk2bEYJCvILa_ZQAAAVI"]
[Thu Apr 02 18:27:57.657951 2026] [:error] [pid 59305:tid 59326] [client 51.103.161.170:12082] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lock.php"] [unique_id "ac5Erar2tV4rDwKFxKdSBQAAANE"]
[Thu Apr 02 18:27:58.135270 2026] [:error] [pid 59201:tid 59271] [client 51.103.161.170:12053] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lock.php"] [unique_id "ac5ErsAC0Tw8eL6gzZ4DewAAAIQ"]
[Thu Apr 02 18:27:58.609283 2026] [:error] [pid 29467:tid 29491] [client 51.103.161.170:10282] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mail.php"] [unique_id "ac5Err4VUBFCJAq-WOkzngAAARU"]
[Thu Apr 02 18:27:59.082006 2026] [:error] [pid 54384:tid 54402] [client 51.103.161.170:10776] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mail.php"] [unique_id "ac5Er9WWpaby3TVN7MfsiwAAAdA"]
[Thu Apr 02 18:27:59.559093 2026] [:error] [pid 54384:tid 54407] [client 51.103.161.170:12303] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mail.php"] [unique_id "ac5Er9WWpaby3TVN7MfsjAAAAdU"]
[Thu Apr 02 18:28:00.036116 2026] [:error] [pid 54384:tid 54387] [client 51.103.161.170:10300] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mail.php"] [unique_id "ac5EsNWWpaby3TVN7MfskAAAAcE"]
[Thu Apr 02 18:28:00.529846 2026] [:error] [pid 23927:tid 23950] [client 51.103.161.170:10790] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/marijuana.php"] [unique_id "ac5EsEsZwqCndhl9uKCEugAAAZU"]
[Thu Apr 02 18:28:01.002918 2026] [:error] [pid 29467:tid 29486] [client 51.103.161.170:23304] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/marijuana.php"] [unique_id "ac5Esb4VUBFCJAq-WOkzqQAAARA"]
[Thu Apr 02 18:28:01.475316 2026] [:error] [pid 59200:tid 59246] [client 51.103.161.170:34077] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/marijuana.php"] [unique_id "ac5EsbfP26txrdLs3EpgUwAAAEY"]
[Thu Apr 02 18:28:02.029910 2026] [:error] [pid 59305:tid 59323] [client 51.103.161.170:12089] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/marijuana.php"] [unique_id "ac5Esqr2tV4rDwKFxKdSEgAAAM4"]
[Thu Apr 02 18:28:02.505201 2026] [:error] [pid 59200:tid 59257] [client 51.103.161.170:10688] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/333.php"] [unique_id "ac5EsrfP26txrdLs3EpgVAAAAFE"]
[Thu Apr 02 18:28:02.985864 2026] [:error] [pid 59200:tid 59249] [client 51.103.161.170:12348] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/333.php"] [unique_id "ac5EsrfP26txrdLs3EpgVwAAAEk"]
[Thu Apr 02 18:28:03.460673 2026] [:error] [pid 59200:tid 59240] [client 51.103.161.170:10710] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/333.php"] [unique_id "ac5Es7fP26txrdLs3EpgWAAAAEA"]
[Thu Apr 02 18:28:03.947460 2026] [:error] [pid 29467:tid 29480] [client 51.103.161.170:23296] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/333.php"] [unique_id "ac5Es74VUBFCJAq-WOkzsgAAAQo"]
[Thu Apr 02 18:28:04.422350 2026] [:error] [pid 54384:tid 54386] [client 51.103.161.170:10773] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/444.php"] [unique_id "ac5EtNWWpaby3TVN7MfsmQAAAcA"]
[Thu Apr 02 18:28:04.896844 2026] [:error] [pid 59201:tid 59287] [client 51.103.161.170:10787] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/444.php"] [unique_id "ac5EtMAC0Tw8eL6gzZ4DnAAAAJQ"]
[Thu Apr 02 18:28:05.371544 2026] [:error] [pid 54384:tid 54403] [client 51.103.161.170:12033] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/444.php"] [unique_id "ac5EtdWWpaby3TVN7MfsmwAAAdE"]
[Thu Apr 02 18:28:05.844562 2026] [:error] [pid 59200:tid 59260] [client 51.103.161.170:12054] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/444.php"] [unique_id "ac5EtbfP26txrdLs3EpgXAAAAFQ"]
[Thu Apr 02 18:28:06.340604 2026] [:error] [pid 54384:tid 54390] [client 51.103.161.170:34075] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "ac5EttWWpaby3TVN7MfsnwAAAcQ"]
[Thu Apr 02 18:28:06.902159 2026] [:error] [pid 54384:tid 54398] [client 51.103.161.170:34542] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "ac5EttWWpaby3TVN7MfsoQAAAcw"]
[Thu Apr 02 18:28:07.416062 2026] [:error] [pid 29467:tid 29476] [client 51.103.161.170:10649] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "ac5Et74VUBFCJAq-WOkztAAAAQY"]
[Thu Apr 02 18:28:07.900452 2026] [:error] [pid 29467:tid 29477] [client 51.103.161.170:34550] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "ac5Et74VUBFCJAq-WOkztwAAAQc"]
[Thu Apr 02 18:28:08.373113 2026] [:error] [pid 29467:tid 29484] [client 51.103.161.170:34556] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/filesss.php"] [unique_id "ac5EuL4VUBFCJAq-WOkzugAAAQ4"]
[Thu Apr 02 18:28:08.844961 2026] [:error] [pid 59305:tid 59311] [client 51.103.161.170:12075] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/filesss.php"] [unique_id "ac5EuKr2tV4rDwKFxKdSHAAAAMI"]
[Thu Apr 02 18:28:09.334379 2026] [:error] [pid 29467:tid 29481] [client 51.103.161.170:12094] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/filesss.php"] [unique_id "ac5Eub4VUBFCJAq-WOkzvwAAAQs"]
[Thu Apr 02 18:28:09.896908 2026] [:error] [pid 59305:tid 59319] [client 51.103.161.170:34053] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/filesss.php"] [unique_id "ac5Euar2tV4rDwKFxKdSIAAAAMo"]
[Thu Apr 02 18:28:10.371903 2026] [:error] [pid 29467:tid 29477] [client 51.103.161.170:42134] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file88.php"] [unique_id "ac5Eur4VUBFCJAq-WOkzxQAAAQc"]
[Thu Apr 02 18:28:10.848651 2026] [:error] [pid 29467:tid 29485] [client 51.103.161.170:10782] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file88.php"] [unique_id "ac5Eur4VUBFCJAq-WOkzxgAAAQ8"]
[Thu Apr 02 18:28:11.321833 2026] [:error] [pid 29467:tid 29486] [client 51.103.161.170:12035] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file88.php"] [unique_id "ac5Eu74VUBFCJAq-WOkzygAAARA"]
[Thu Apr 02 18:28:11.841543 2026] [:error] [pid 29467:tid 29471] [client 51.103.161.170:15833] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file88.php"] [unique_id "ac5Eu74VUBFCJAq-WOkz0AAAAQE"]
[Thu Apr 02 18:28:12.327316 2026] [:error] [pid 59305:tid 59323] [client 51.103.161.170:12294] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/X7x.php"] [unique_id "ac5EvKr2tV4rDwKFxKdSJgAAAM4"]
[Thu Apr 02 18:28:12.801771 2026] [:error] [pid 59305:tid 59310] [client 51.103.161.170:23324] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/X7x.php"] [unique_id "ac5EvKr2tV4rDwKFxKdSJwAAAME"]
[Thu Apr 02 18:28:13.284764 2026] [:error] [pid 29467:tid 29472] [client 51.103.161.170:10770] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/X7x.php"] [unique_id "ac5Evb4VUBFCJAq-WOkz1QAAAQI"]
[Thu Apr 02 18:28:13.761764 2026] [:error] [pid 59305:tid 59322] [client 51.103.161.170:10753] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/X7x.php"] [unique_id "ac5Evar2tV4rDwKFxKdSLAAAAM0"]
[Thu Apr 02 18:28:14.416318 2026] [:error] [pid 37543:tid 37558] [client 51.103.161.170:34063] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admir.php"] [unique_id "ac5Evnhdk2bEYJCvILa_egAAAU0"]
[Thu Apr 02 18:28:14.900820 2026] [:error] [pid 59305:tid 59320] [client 51.103.161.170:10794] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admir.php"] [unique_id "ac5Evqr2tV4rDwKFxKdSLwAAAMs"]
[Thu Apr 02 18:28:15.425093 2026] [:error] [pid 23927:tid 23930] [client 51.103.161.170:10767] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admir.php"] [unique_id "ac5Ev0sZwqCndhl9uKCEyQAAAYE"]
[Thu Apr 02 18:28:15.935925 2026] [:error] [pid 54384:tid 54404] [client 51.103.161.170:23251] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admir.php"] [unique_id "ac5Ev9WWpaby3TVN7MfsswAAAdI"]
[Thu Apr 02 18:28:16.540881 2026] [:error] [pid 59305:tid 59314] [client 51.103.161.170:23269] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aj.php"] [unique_id "ac5EwKr2tV4rDwKFxKdSMwAAAMU"]
[Thu Apr 02 18:28:17.113842 2026] [:error] [pid 54384:tid 54395] [client 51.103.161.170:12048] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aj.php"] [unique_id "ac5EwdWWpaby3TVN7MfstgAAAck"]
[Thu Apr 02 18:28:17.669205 2026] [:error] [pid 59201:tid 59291] [client 51.103.161.170:42172] [client 51.103.161.170] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aj.php"] [unique_id "ac5EwcAC0Tw8eL6gzZ4DwwAAAJg"]
[Thu Apr 02 18:31:52.045960 2026] [:error] [pid 54384:tid 54402] [client 20.240.235.228:32981] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac5FmNWWpaby3TVN7MfuQQAAAdA"]
[Thu Apr 02 18:31:52.592380 2026] [:error] [pid 23927:tid 23939] [client 20.240.235.228:32975] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac5FmEsZwqCndhl9uKCGogAAAYo"]
[Thu Apr 02 18:31:53.123286 2026] [:error] [pid 29467:tid 29493] [client 20.240.235.228:33044] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac5Fmb4VUBFCJAq-WOk2fwAAARc"]
[Thu Apr 02 18:31:53.655193 2026] [:error] [pid 54384:tid 54406] [client 20.240.235.228:32986] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac5FmdWWpaby3TVN7MfuRAAAAdQ"]
[Thu Apr 02 18:32:23.161328 2026] [:error] [pid 54384:tid 54394] [client 20.240.235.228:32983] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gm.php"] [unique_id "ac5Ft9WWpaby3TVN7MfujAAAAcg"]
[Thu Apr 02 18:32:23.687338 2026] [:error] [pid 29467:tid 29482] [client 20.240.235.228:33068] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gm.php"] [unique_id "ac5Ft74VUBFCJAq-WOk22AAAAQw"]
[Thu Apr 02 18:32:24.214739 2026] [:error] [pid 29467:tid 29494] [client 20.240.235.228:32962] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gm.php"] [unique_id "ac5FuL4VUBFCJAq-WOk23QAAARg"]
[Thu Apr 02 18:32:24.773621 2026] [:error] [pid 29467:tid 29493] [client 20.240.235.228:33061] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gm.php"] [unique_id "ac5FuL4VUBFCJAq-WOk24wAAARc"]
[Thu Apr 02 18:32:25.300913 2026] [:error] [pid 59201:tid 59284] [client 20.240.235.228:33033] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ac5FucAC0Tw8eL6gzZ4E_gAAAJE"]
[Thu Apr 02 18:32:25.834095 2026] [:error] [pid 59305:tid 59330] [client 20.240.235.228:33069] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ac5Fuar2tV4rDwKFxKdUzAAAANU"]
[Thu Apr 02 18:32:26.402213 2026] [:error] [pid 29467:tid 29486] [client 20.240.235.228:32980] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ac5Fur4VUBFCJAq-WOk27QAAARA"]
[Thu Apr 02 18:32:26.930926 2026] [:error] [pid 59200:tid 59252] [client 20.240.235.228:32963] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "ac5FurfP26txrdLs3EphZgAAAEw"]
[Thu Apr 02 18:32:27.478128 2026] [:error] [pid 59305:tid 59331] [client 20.240.235.228:32990] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nhj6t74aqmkde3hgpCdefault.php"] [unique_id "ac5Fu6r2tV4rDwKFxKdU1gAAANY"]
[Thu Apr 02 18:32:28.037205 2026] [:error] [pid 59201:tid 59272] [client 20.240.235.228:32966] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nhj6t74aqmkde3hgpCdefault.php"] [unique_id "ac5FvMAC0Tw8eL6gzZ4FAgAAAIU"]
[Thu Apr 02 18:32:28.563100 2026] [:error] [pid 37543:tid 37559] [client 20.240.235.228:33048] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nhj6t74aqmkde3hgpCdefault.php"] [unique_id "ac5FvHhdk2bEYJCvILbBMwAAAU4"]
[Thu Apr 02 18:32:29.090992 2026] [:error] [pid 29467:tid 29472] [client 20.240.235.228:33070] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nhj6t74aqmkde3hgpCdefault.php"] [unique_id "ac5Fvb4VUBFCJAq-WOk2-QAAAQI"]
[Thu Apr 02 18:32:29.617670 2026] [:error] [pid 59200:tid 59247] [client 20.240.235.228:33031] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "ac5FvbfP26txrdLs3EphbQAAAEc"]
[Thu Apr 02 18:32:30.153488 2026] [:error] [pid 59305:tid 59312] [client 20.240.235.228:33058] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "ac5Fvqr2tV4rDwKFxKdU4gAAAMM"]
[Thu Apr 02 18:32:30.679047 2026] [:error] [pid 23927:tid 23942] [client 20.240.235.228:32979] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "ac5FvksZwqCndhl9uKCG0wAAAY0"]
[Thu Apr 02 18:32:31.215998 2026] [:error] [pid 29467:tid 29484] [client 20.240.235.228:33075] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "ac5Fv74VUBFCJAq-WOk3AgAAAQ4"]
[Thu Apr 02 18:32:31.763168 2026] [:error] [pid 59305:tid 59313] [client 20.240.235.228:32969] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "ac5Fv6r2tV4rDwKFxKdU6wAAAMQ"]
[Thu Apr 02 18:32:32.320346 2026] [:error] [pid 59305:tid 59331] [client 20.240.235.228:33001] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "ac5FwKr2tV4rDwKFxKdU9AAAANY"]
[Thu Apr 02 18:32:32.855710 2026] [:error] [pid 59305:tid 59309] [client 20.240.235.228:33013] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "ac5FwKr2tV4rDwKFxKdU-QAAAMA"]
[Thu Apr 02 18:32:33.386697 2026] [:error] [pid 29467:tid 29477] [client 20.240.235.228:33030] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "ac5Fwb4VUBFCJAq-WOk3CAAAAQc"]
[Thu Apr 02 18:32:33.930172 2026] [:error] [pid 59200:tid 59251] [client 20.240.235.228:33056] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x1.php"] [unique_id "ac5FwbfP26txrdLs3EphdQAAAEs"]
[Thu Apr 02 18:32:34.503976 2026] [:error] [pid 54384:tid 54386] [client 20.240.235.228:33071] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x1.php"] [unique_id "ac5FwtWWpaby3TVN7MfunAAAAcA"]
[Thu Apr 02 18:32:35.035528 2026] [:error] [pid 59305:tid 59318] [client 20.240.235.228:33036] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x1.php"] [unique_id "ac5Fw6r2tV4rDwKFxKdVDwAAAMk"]
[Thu Apr 02 18:32:35.578529 2026] [:error] [pid 54384:tid 54389] [client 20.240.235.228:33062] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x1.php"] [unique_id "ac5Fw9WWpaby3TVN7MfuowAAAcM"]
[Thu Apr 02 18:32:36.122510 2026] [:error] [pid 59200:tid 59254] [client 20.240.235.228:33039] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ta0ol.php"] [unique_id "ac5FxLfP26txrdLs3EphfQAAAE4"]
[Thu Apr 02 18:32:36.648842 2026] [:error] [pid 37543:tid 37568] [client 20.240.235.228:33081] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ta0ol.php"] [unique_id "ac5FxHhdk2bEYJCvILbBRgAAAVc"]
[Thu Apr 02 18:32:37.268929 2026] [:error] [pid 59305:tid 59317] [client 20.240.235.228:10823] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ta0ol.php"] [unique_id "ac5Fxar2tV4rDwKFxKdVGQAAAMg"]
[Thu Apr 02 18:32:37.811708 2026] [:error] [pid 59201:tid 59287] [client 20.240.235.228:32978] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ta0ol.php"] [unique_id "ac5FxcAC0Tw8eL6gzZ4FFgAAAJQ"]
[Thu Apr 02 18:32:38.386202 2026] [:error] [pid 54384:tid 54405] [client 20.240.235.228:32961] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "ac5FxtWWpaby3TVN7MfusAAAAdM"]
[Thu Apr 02 18:32:38.916902 2026] [:error] [pid 59200:tid 59251] [client 20.240.235.228:33043] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "ac5FxrfP26txrdLs3EphiQAAAEs"]
[Thu Apr 02 18:32:39.456078 2026] [:error] [pid 59201:tid 59273] [client 20.240.235.228:10836] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "ac5Fx8AC0Tw8eL6gzZ4FIAAAAIY"]
[Thu Apr 02 18:32:40.012964 2026] [:error] [pid 37543:tid 37545] [client 20.240.235.228:33034] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/privacy.php"] [unique_id "ac5FyHhdk2bEYJCvILbBVwAAAUA"]
[Thu Apr 02 18:32:40.588881 2026] [:error] [pid 59305:tid 59323] [client 20.240.235.228:33037] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/t00l.php"] [unique_id "ac5FyKr2tV4rDwKFxKdVHAAAAM4"]
[Thu Apr 02 18:32:41.118355 2026] [:error] [pid 37543:tid 37567] [client 20.240.235.228:33005] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/t00l.php"] [unique_id "ac5FyXhdk2bEYJCvILbBWwAAAVY"]
[Thu Apr 02 18:32:41.689438 2026] [:error] [pid 59194:tid 59236] [client 20.240.235.228:10833] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/t00l.php"] [unique_id "ac5FyRMpAeV11hcQehw0kgAAABc"]
[Thu Apr 02 18:32:42.218065 2026] [:error] [pid 54384:tid 54404] [client 20.240.235.228:33028] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/t00l.php"] [unique_id "ac5FytWWpaby3TVN7MfuugAAAdI"]
[Thu Apr 02 18:32:45.021108 2026] [:error] [pid 29467:tid 29492] [client 20.240.235.228:33019] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/24.php"] [unique_id "ac5Fzb4VUBFCJAq-WOk3JAAAARY"]
[Thu Apr 02 18:32:45.548541 2026] [:error] [pid 29467:tid 29493] [client 20.240.235.228:33040] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/24.php"] [unique_id "ac5Fzb4VUBFCJAq-WOk3KwAAARc"]
[Thu Apr 02 18:32:46.078194 2026] [:error] [pid 29467:tid 29480] [client 20.240.235.228:33085] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/24.php"] [unique_id "ac5Fzr4VUBFCJAq-WOk3MwAAAQo"]
[Thu Apr 02 18:32:46.628651 2026] [:error] [pid 23927:tid 23932] [client 20.240.235.228:32964] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/24.php"] [unique_id "ac5FzksZwqCndhl9uKCG6QAAAYM"]
[Thu Apr 02 18:32:48.174357 2026] [:error] [pid 29467:tid 29473] [client 20.240.235.228:33027] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "ac5F0L4VUBFCJAq-WOk3PAAAAQM"]
[Thu Apr 02 18:32:48.705343 2026] [:error] [pid 29467:tid 29494] [client 20.240.235.228:33045] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "ac5F0L4VUBFCJAq-WOk3QQAAARg"]
[Thu Apr 02 18:32:49.234475 2026] [:error] [pid 29467:tid 29476] [client 20.240.235.228:32965] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "ac5F0b4VUBFCJAq-WOk3RQAAAQY"]
[Thu Apr 02 18:32:49.767699 2026] [:error] [pid 23927:tid 23944] [client 20.240.235.228:33077] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "ac5F0UsZwqCndhl9uKCG-wAAAY8"]
[Thu Apr 02 18:32:50.350939 2026] [:error] [pid 23927:tid 23947] [client 20.240.235.228:33007] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/as.php"] [unique_id "ac5F0ksZwqCndhl9uKCHAQAAAZI"]
[Thu Apr 02 18:32:50.880178 2026] [:error] [pid 54384:tid 54406] [client 20.240.235.228:33011] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/as.php"] [unique_id "ac5F0tWWpaby3TVN7MfuxQAAAdQ"]
[Thu Apr 02 18:32:51.450997 2026] [:error] [pid 29467:tid 29482] [client 20.240.235.228:33041] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/as.php"] [unique_id "ac5F074VUBFCJAq-WOk3UQAAAQw"]
[Thu Apr 02 18:32:51.981797 2026] [:error] [pid 59305:tid 59324] [client 20.240.235.228:33087] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/as.php"] [unique_id "ac5F06r2tV4rDwKFxKdVOAAAAM8"]
[Thu Apr 02 18:32:52.562884 2026] [:error] [pid 29467:tid 29475] [client 20.240.235.228:33073] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fyiiz.php"] [unique_id "ac5F1L4VUBFCJAq-WOk3VgAAAQU"]
[Thu Apr 02 18:32:53.091468 2026] [:error] [pid 29467:tid 29482] [client 20.240.235.228:32960] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fyiiz.php"] [unique_id "ac5F1b4VUBFCJAq-WOk3XgAAAQw"]
[Thu Apr 02 18:32:53.628591 2026] [:error] [pid 54384:tid 54399] [client 20.240.235.228:33008] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fyiiz.php"] [unique_id "ac5F1dWWpaby3TVN7MfuzQAAAc0"]
[Thu Apr 02 18:32:54.158933 2026] [:error] [pid 29467:tid 29476] [client 20.240.235.228:33018] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fyiiz.php"] [unique_id "ac5F1r4VUBFCJAq-WOk3bgAAAQY"]
[Thu Apr 02 18:32:54.689386 2026] [:error] [pid 29467:tid 29482] [client 20.240.235.228:32996] [client 20.240.235.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/app.php"] [unique_id "ac5F1r4VUBFCJAq-WOk3egAAAQw"]
[Thu Apr 02 18:32:54.939875 2026] [:error] [pid 54384:tid 54392] [client 20.19.191.162:61825] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac5F1tWWpaby3TVN7Mfu0AAAAcY"]
[Thu Apr 02 18:32:55.238560 2026] [:error] [pid 54384:tid 54407] [client 20.240.235.228:33011] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/max.php"] [unique_id "ac5F19WWpaby3TVN7Mfu0wAAAdU"]
[Thu Apr 02 18:32:55.763420 2026] [:error] [pid 23927:tid 23949] [client 20.240.235.228:33025] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/max.php"] [unique_id "ac5F10sZwqCndhl9uKCHHQAAAZQ"]
[Thu Apr 02 18:32:56.297206 2026] [:error] [pid 59305:tid 59310] [client 20.240.235.228:10834] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/max.php"] [unique_id "ac5F2Kr2tV4rDwKFxKdVRQAAAME"]
[Thu Apr 02 18:32:56.834702 2026] [:error] [pid 37543:tid 37550] [client 20.240.235.228:33067] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/max.php"] [unique_id "ac5F2Hhdk2bEYJCvILbBhQAAAUU"]
[Thu Apr 02 18:32:57.364434 2026] [:error] [pid 59305:tid 59311] [client 20.240.235.228:10849] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "ac5F2ar2tV4rDwKFxKdVTAAAAMI"]
[Thu Apr 02 18:32:57.929154 2026] [:error] [pid 59305:tid 59327] [client 20.240.235.228:32994] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "ac5F2ar2tV4rDwKFxKdVUQAAANI"]
[Thu Apr 02 18:32:58.468133 2026] [:error] [pid 37543:tid 37566] [client 20.240.235.228:10816] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "ac5F2nhdk2bEYJCvILbBiAAAAVU"]
[Thu Apr 02 18:32:58.994615 2026] [:error] [pid 59305:tid 59317] [client 20.240.235.228:33084] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "ac5F2qr2tV4rDwKFxKdVXQAAAMg"]
[Thu Apr 02 18:32:59.533392 2026] [:error] [pid 59305:tid 59326] [client 20.240.235.228:33086] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ac5F26r2tV4rDwKFxKdVaAAAANE"]
[Thu Apr 02 18:33:00.067673 2026] [:error] [pid 54384:tid 54403] [client 20.240.235.228:33066] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ac5F3NWWpaby3TVN7Mfu3QAAAdE"]
[Thu Apr 02 18:33:00.638586 2026] [:error] [pid 59305:tid 59327] [client 20.240.235.228:10855] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ac5F3Kr2tV4rDwKFxKdVcwAAANI"]
[Thu Apr 02 18:33:01.194016 2026] [:error] [pid 29467:tid 29471] [client 20.240.235.228:10843] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ac5F3b4VUBFCJAq-WOk3rQAAAQE"]
[Thu Apr 02 18:33:01.722571 2026] [:error] [pid 59305:tid 59316] [client 20.240.235.228:33004] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "ac5F3ar2tV4rDwKFxKdVdwAAAMc"]
[Thu Apr 02 18:33:01.906628 2026] [:error] [pid 59305:tid 59321] [client 20.19.191.162:62026] [client 20.19.191.162] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac5F3ar2tV4rDwKFxKdVewAAAMw"]
[Thu Apr 02 18:33:02.260286 2026] [:error] [pid 54384:tid 54397] [client 20.240.235.228:33080] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "ac5F3tWWpaby3TVN7Mfu4AAAAcs"]
[Thu Apr 02 18:33:02.876145 2026] [:error] [pid 29467:tid 29472] [client 20.240.235.228:10829] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "ac5F3r4VUBFCJAq-WOk3vgAAAQI"]
[Thu Apr 02 18:33:03.407018 2026] [:error] [pid 59305:tid 59316] [client 20.240.235.228:33006] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "ac5F36r2tV4rDwKFxKdViwAAAMc"]
[Thu Apr 02 18:33:03.995864 2026] [:error] [pid 59305:tid 59317] [client 20.240.235.228:32984] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/index.php"] [unique_id "ac5F36r2tV4rDwKFxKdVlQAAAMg"]
[Thu Apr 02 18:33:04.708901 2026] [:error] [pid 59305:tid 59312] [client 20.240.235.228:32974] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/index.php"] [unique_id "ac5F4Kr2tV4rDwKFxKdVoQAAAMM"]
[Thu Apr 02 18:33:05.287251 2026] [:error] [pid 37543:tid 37555] [client 20.240.235.228:33046] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/index.php"] [unique_id "ac5F4Xhdk2bEYJCvILbBkQAAAUo"]
[Thu Apr 02 18:33:06.860788 2026] [:error] [pid 59200:tid 59261] [client 20.240.235.228:10846] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/index.php"] [unique_id "ac5F4rfP26txrdLs3EphuAAAAFU"]
[Thu Apr 02 18:33:07.386922 2026] [:error] [pid 59194:tid 59214] [client 20.240.235.228:33029] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "ac5F4xMpAeV11hcQehw0wAAAAAE"]
[Thu Apr 02 18:33:07.913906 2026] [:error] [pid 37543:tid 37557] [client 20.240.235.228:10832] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "ac5F43hdk2bEYJCvILbBnQAAAUw"]
[Thu Apr 02 18:33:08.473382 2026] [:error] [pid 59194:tid 59216] [client 20.240.235.228:10762] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "ac5F5BMpAeV11hcQehw0xQAAAAM"]
[Thu Apr 02 18:33:09.034487 2026] [:error] [pid 23927:tid 23940] [client 20.240.235.228:33078] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/erty.php"] [unique_id "ac5F5UsZwqCndhl9uKCHPgAAAYs"]
[Thu Apr 02 18:33:09.565937 2026] [:error] [pid 59201:tid 59287] [client 20.240.235.228:33076] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/0.php"] [unique_id "ac5F5cAC0Tw8eL6gzZ4FbgAAAJQ"]
[Thu Apr 02 18:33:11.102714 2026] [:error] [pid 29467:tid 29473] [client 20.240.235.228:33054] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/0.php"] [unique_id "ac5F574VUBFCJAq-WOk37AAAAQM"]
[Thu Apr 02 18:33:11.625961 2026] [:error] [pid 23927:tid 23935] [client 20.240.235.228:10835] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/0.php"] [unique_id "ac5F50sZwqCndhl9uKCHRQAAAYY"]
[Thu Apr 02 18:33:12.159964 2026] [:error] [pid 29467:tid 29492] [client 20.240.235.228:10838] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/0.php"] [unique_id "ac5F6L4VUBFCJAq-WOk38QAAARY"]
[Thu Apr 02 18:33:12.732608 2026] [:error] [pid 37543:tid 37552] [client 20.240.235.228:32991] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "ac5F6Hhdk2bEYJCvILbBsQAAAUc"]
[Thu Apr 02 18:33:13.282804 2026] [:error] [pid 23927:tid 23929] [client 20.240.235.228:33042] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "ac5F6UsZwqCndhl9uKCHUgAAAYA"]
[Thu Apr 02 18:33:13.831934 2026] [:error] [pid 23927:tid 23939] [client 20.240.235.228:32976] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "ac5F6UsZwqCndhl9uKCHWAAAAYo"]
[Thu Apr 02 18:33:14.357005 2026] [:error] [pid 23927:tid 23938] [client 20.240.235.228:33079] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "ac5F6ksZwqCndhl9uKCHXQAAAYk"]
[Thu Apr 02 18:33:14.884155 2026] [:error] [pid 23927:tid 23945] [client 20.240.235.228:10848] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "ac5F6ksZwqCndhl9uKCHYQAAAZA"]
[Thu Apr 02 18:33:16.413570 2026] [:error] [pid 59305:tid 59319] [client 20.240.235.228:10828] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "ac5F7Kr2tV4rDwKFxKdV0gAAAMo"]
[Thu Apr 02 18:33:16.942874 2026] [:error] [pid 23927:tid 23932] [client 20.240.235.228:33083] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "ac5F7EsZwqCndhl9uKCHawAAAYM"]
[Thu Apr 02 18:33:18.062806 2026] [:error] [pid 59194:tid 59225] [client 20.240.235.228:33035] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "ac5F7hMpAeV11hcQehw0zwAAAAw"]
[Thu Apr 02 18:33:18.592288 2026] [:error] [pid 59305:tid 59321] [client 20.240.235.228:33057] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "ac5F7qr2tV4rDwKFxKdV3AAAAMw"]
[Thu Apr 02 18:33:19.118849 2026] [:error] [pid 29467:tid 29480] [client 20.240.235.228:32998] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "ac5F774VUBFCJAq-WOk4EAAAAQo"]
[Thu Apr 02 18:33:19.676329 2026] [:error] [pid 59201:tid 59285] [client 20.240.235.228:33065] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "ac5F78AC0Tw8eL6gzZ4FiAAAAJI"]
[Thu Apr 02 18:33:20.203901 2026] [:error] [pid 54384:tid 54387] [client 20.240.235.228:33064] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "ac5F8NWWpaby3TVN7MfvGQAAAcE"]
[Thu Apr 02 18:33:20.745066 2026] [:error] [pid 54384:tid 54391] [client 20.240.235.228:10831] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class.php"] [unique_id "ac5F8NWWpaby3TVN7MfvJAAAAcU"]
[Thu Apr 02 18:33:21.269477 2026] [:error] [pid 59305:tid 59324] [client 20.240.235.228:33032] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class.php"] [unique_id "ac5F8ar2tV4rDwKFxKdV6gAAAM8"]
[Thu Apr 02 18:33:21.797833 2026] [:error] [pid 29467:tid 29493] [client 20.240.235.228:32992] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class.php"] [unique_id "ac5F8b4VUBFCJAq-WOk4FgAAARc"]
[Thu Apr 02 18:33:22.321452 2026] [:error] [pid 23927:tid 23943] [client 20.240.235.228:10876] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class.php"] [unique_id "ac5F8ksZwqCndhl9uKCHeQAAAY4"]
[Thu Apr 02 18:33:22.871468 2026] [:error] [pid 59201:tid 59286] [client 20.240.235.228:33023] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zwq13.php"] [unique_id "ac5F8sAC0Tw8eL6gzZ4FkwAAAJM"]
[Thu Apr 02 18:33:30.510991 2026] [:error] [pid 29467:tid 29474] [client 20.240.235.228:33082] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xvs.php"] [unique_id "ac5F-r4VUBFCJAq-WOk4TQAAAQQ"]
[Thu Apr 02 18:33:31.044416 2026] [:error] [pid 37543:tid 37568] [client 20.240.235.228:33072] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xvs.php"] [unique_id "ac5F-3hdk2bEYJCvILbB3wAAAVc"]
[Thu Apr 02 18:33:31.573013 2026] [:error] [pid 59200:tid 59261] [client 20.240.235.228:10867] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xvs.php"] [unique_id "ac5F-7fP26txrdLs3Eph2QAAAFU"]
[Thu Apr 02 18:33:32.124154 2026] [:error] [pid 54384:tid 54398] [client 20.240.235.228:33053] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xvs.php"] [unique_id "ac5F_NWWpaby3TVN7MfvSAAAAcw"]
[Thu Apr 02 18:33:32.652186 2026] [:error] [pid 59201:tid 59282] [client 20.240.235.228:32972] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "ac5F_MAC0Tw8eL6gzZ4FtQAAAI8"]
[Thu Apr 02 18:33:33.184434 2026] [:error] [pid 59194:tid 59218] [client 20.240.235.228:10753] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "ac5F_RMpAeV11hcQehw04wAAAAU"]
[Thu Apr 02 18:33:33.726884 2026] [:error] [pid 29467:tid 29475] [client 20.240.235.228:10850] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "ac5F_b4VUBFCJAq-WOk4UAAAAQU"]
[Thu Apr 02 18:33:34.862427 2026] [:error] [pid 59201:tid 59285] [client 20.240.235.228:32988] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "ac5F_sAC0Tw8eL6gzZ4FvAAAAJI"]
[Thu Apr 02 18:33:35.984496 2026] [:error] [pid 59200:tid 59250] [client 20.240.235.228:10856] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/az.php"] [unique_id "ac5F_7fP26txrdLs3Eph5gAAAEo"]
[Thu Apr 02 18:33:36.519872 2026] [:error] [pid 59200:tid 59264] [client 20.240.235.228:10826] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/az.php"] [unique_id "ac5GALfP26txrdLs3Eph6AAAAFg"]
[Thu Apr 02 18:33:37.064705 2026] [:error] [pid 54384:tid 54397] [client 20.240.235.228:10844] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/az.php"] [unique_id "ac5GAdWWpaby3TVN7MfvUQAAAcs"]
[Thu Apr 02 18:33:37.599891 2026] [:error] [pid 59201:tid 59276] [client 20.240.235.228:33024] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/az.php"] [unique_id "ac5GAcAC0Tw8eL6gzZ4FwQAAAIk"]
[Thu Apr 02 18:33:38.124797 2026] [:error] [pid 59305:tid 59314] [client 20.240.235.228:32968] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/web.php"] [unique_id "ac5GAqr2tV4rDwKFxKdWEQAAAMU"]
[Thu Apr 02 18:33:38.661773 2026] [:error] [pid 37543:tid 37567] [client 20.240.235.228:10860] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/web.php"] [unique_id "ac5GAnhdk2bEYJCvILbB9gAAAVY"]
[Thu Apr 02 18:33:39.222347 2026] [:error] [pid 54384:tid 54408] [client 20.240.235.228:10873] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/web.php"] [unique_id "ac5GA9WWpaby3TVN7MfvWQAAAdY"]
[Thu Apr 02 18:33:40.751294 2026] [:error] [pid 59200:tid 59249] [client 20.240.235.228:33021] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/web.php"] [unique_id "ac5GBLfP26txrdLs3Eph9gAAAEk"]
[Thu Apr 02 18:33:41.276273 2026] [:error] [pid 59200:tid 59246] [client 20.240.235.228:10790] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ac5GBbfP26txrdLs3Eph_QAAAEY"]
[Thu Apr 02 18:33:41.815089 2026] [:error] [pid 59200:tid 59259] [client 20.240.235.228:32970] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ac5GBbfP26txrdLs3Eph_gAAAFM"]
[Thu Apr 02 18:33:42.345485 2026] [:error] [pid 23927:tid 23940] [client 20.240.235.228:33020] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ac5GBksZwqCndhl9uKCHvAAAAYs"]
[Thu Apr 02 18:33:42.875287 2026] [:error] [pid 23927:tid 23947] [client 20.240.235.228:10819] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "ac5GBksZwqCndhl9uKCHvwAAAZI"]
[Thu Apr 02 18:33:43.401606 2026] [:error] [pid 37543:tid 37550] [client 20.240.235.228:10874] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lp6.php"] [unique_id "ac5GB3hdk2bEYJCvILbB_AAAAUU"]
[Thu Apr 02 18:33:43.938672 2026] [:error] [pid 59201:tid 59272] [client 20.240.235.228:10706] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lp6.php"] [unique_id "ac5GB8AC0Tw8eL6gzZ4FywAAAIU"]
[Thu Apr 02 18:33:44.465654 2026] [:error] [pid 54384:tid 54405] [client 20.240.235.228:32993] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lp6.php"] [unique_id "ac5GCNWWpaby3TVN7MfvbAAAAdM"]
[Thu Apr 02 18:33:44.995582 2026] [:error] [pid 59200:tid 59242] [client 20.240.235.228:10767] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lp6.php"] [unique_id "ac5GCLfP26txrdLs3EpiCQAAAEI"]
[Thu Apr 02 18:33:45.521926 2026] [:error] [pid 23927:tid 23941] [client 20.240.235.228:10870] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/com.php"] [unique_id "ac5GCUsZwqCndhl9uKCHwwAAAYw"]
[Thu Apr 02 18:33:46.205914 2026] [:error] [pid 23927:tid 23936] [client 20.240.235.228:10824] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/com.php"] [unique_id "ac5GCksZwqCndhl9uKCHzQAAAYc"]
[Thu Apr 02 18:33:46.743638 2026] [:error] [pid 23927:tid 23934] [client 20.240.235.228:10821] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/com.php"] [unique_id "ac5GCksZwqCndhl9uKCH2AAAAYU"]
[Thu Apr 02 18:33:47.275052 2026] [:error] [pid 59305:tid 59310] [client 20.240.235.228:10817] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/com.php"] [unique_id "ac5GC6r2tV4rDwKFxKdWLQAAAME"]
[Thu Apr 02 18:33:47.815525 2026] [:error] [pid 23927:tid 23932] [client 20.240.235.228:33074] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "ac5GC0sZwqCndhl9uKCH5AAAAYM"]
[Thu Apr 02 18:33:48.362501 2026] [:error] [pid 23927:tid 23951] [client 20.240.235.228:10792] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "ac5GDEsZwqCndhl9uKCH6AAAAZY"]
[Thu Apr 02 18:33:48.894246 2026] [:error] [pid 54384:tid 54399] [client 20.240.235.228:33049] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "ac5GDNWWpaby3TVN7MfvegAAAc0"]
[Thu Apr 02 18:33:49.452549 2026] [:error] [pid 23927:tid 23934] [client 20.240.235.228:10827] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "ac5GDUsZwqCndhl9uKCH8wAAAYU"]
[Thu Apr 02 18:33:49.999616 2026] [:error] [pid 37543:tid 37556] [client 20.240.235.228:10878] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wander.php"] [unique_id "ac5GDXhdk2bEYJCvILbCFgAAAUs"]
[Thu Apr 02 18:33:50.559817 2026] [:error] [pid 23927:tid 23949] [client 20.240.235.228:10694] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wander.php"] [unique_id "ac5GDksZwqCndhl9uKCIBAAAAZQ"]
[Thu Apr 02 18:33:51.125884 2026] [:error] [pid 23927:tid 23949] [client 20.240.235.228:10822] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wander.php"] [unique_id "ac5GD0sZwqCndhl9uKCIDwAAAZQ"]
[Thu Apr 02 18:33:51.660389 2026] [:error] [pid 59305:tid 59322] [client 20.240.235.228:33060] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wander.php"] [unique_id "ac5GD6r2tV4rDwKFxKdWOQAAAM0"]
[Thu Apr 02 18:33:52.193255 2026] [:error] [pid 59305:tid 59309] [client 20.240.235.228:10777] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/t.php"] [unique_id "ac5GEKr2tV4rDwKFxKdWPAAAAMA"]
[Thu Apr 02 18:33:53.852913 2026] [:error] [pid 54384:tid 54404] [client 20.240.235.228:33009] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/t.php"] [unique_id "ac5GEdWWpaby3TVN7MfviAAAAdI"]
[Thu Apr 02 18:33:54.403913 2026] [:error] [pid 59201:tid 59268] [client 20.240.235.228:10725] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/t.php"] [unique_id "ac5GEsAC0Tw8eL6gzZ4F3QAAAIE"]
[Thu Apr 02 18:33:55.797565 2026] [:error] [pid 29467:tid 29494] [client 20.240.235.228:10783] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/t.php"] [unique_id "ac5GE74VUBFCJAq-WOk4cwAAARg"]
[Thu Apr 02 18:33:56.323045 2026] [:error] [pid 37543:tid 37562] [client 20.240.235.228:10769] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "ac5GFHhdk2bEYJCvILbCHQAAAVE"]
[Thu Apr 02 18:33:56.900174 2026] [:error] [pid 37543:tid 37561] [client 20.240.235.228:10756] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "ac5GFHhdk2bEYJCvILbCHgAAAVA"]
[Thu Apr 02 18:33:57.434099 2026] [:error] [pid 54384:tid 54407] [client 20.240.235.228:10842] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "ac5GFdWWpaby3TVN7MfvmAAAAdU"]
[Thu Apr 02 18:33:58.044797 2026] [:error] [pid 23927:tid 23942] [client 20.240.235.228:33022] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "ac5GFksZwqCndhl9uKCINAAAAY0"]
[Thu Apr 02 18:33:58.587087 2026] [:error] [pid 59194:tid 59231] [client 20.240.235.228:10757] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac5GFhMpAeV11hcQehw0-gAAABI"]
[Thu Apr 02 18:33:59.117449 2026] [:error] [pid 59201:tid 59271] [client 20.240.235.228:10825] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac5GF8AC0Tw8eL6gzZ4F6AAAAIQ"]
[Thu Apr 02 18:33:59.642588 2026] [:error] [pid 59200:tid 59255] [client 20.240.235.228:10818] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac5GF7fP26txrdLs3EpiGwAAAE8"]
[Thu Apr 02 18:34:00.173468 2026] [:error] [pid 37543:tid 37549] [client 20.240.235.228:32987] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac5GGHhdk2bEYJCvILbCJwAAAUQ"]
[Thu Apr 02 18:34:00.701990 2026] [:error] [pid 59200:tid 59257] [client 20.240.235.228:32982] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/v3.php"] [unique_id "ac5GGLfP26txrdLs3EpiHwAAAFE"]
[Thu Apr 02 18:34:01.270376 2026] [:error] [pid 59194:tid 59227] [client 20.240.235.228:10847] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/v3.php"] [unique_id "ac5GGRMpAeV11hcQehw1DAAAAA4"]
[Thu Apr 02 18:34:01.796785 2026] [:error] [pid 29467:tid 29483] [client 20.240.235.228:32989] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/v3.php"] [unique_id "ac5GGb4VUBFCJAq-WOk4jQAAAQ0"]
[Thu Apr 02 18:34:02.323366 2026] [:error] [pid 59201:tid 59269] [client 20.240.235.228:33059] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/v3.php"] [unique_id "ac5GGsAC0Tw8eL6gzZ4F8gAAAII"]
[Thu Apr 02 18:34:02.862899 2026] [:error] [pid 29467:tid 29489] [client 20.240.235.228:10799] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/torsa1.php"] [unique_id "ac5GGr4VUBFCJAq-WOk4kwAAARM"]
[Thu Apr 02 18:34:03.393326 2026] [:error] [pid 59305:tid 59331] [client 20.240.235.228:32981] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/torsa1.php"] [unique_id "ac5GG6r2tV4rDwKFxKdWdAAAANY"]
[Thu Apr 02 18:34:03.918580 2026] [:error] [pid 59305:tid 59323] [client 20.240.235.228:10857] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/torsa1.php"] [unique_id "ac5GG6r2tV4rDwKFxKdWfQAAAM4"]
[Thu Apr 02 18:34:05.454539 2026] [:error] [pid 59201:tid 59273] [client 20.240.235.228:10861] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/torsa1.php"] [unique_id "ac5GHcAC0Tw8eL6gzZ4GBgAAAIY"]
[Thu Apr 02 18:34:05.984910 2026] [:error] [pid 37543:tid 37557] [client 20.240.235.228:33038] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/to.php"] [unique_id "ac5GHXhdk2bEYJCvILbCNQAAAUw"]
[Thu Apr 02 18:34:06.537696 2026] [:error] [pid 29467:tid 29480] [client 20.240.235.228:32971] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/to.php"] [unique_id "ac5GHr4VUBFCJAq-WOk4mgAAAQo"]
[Thu Apr 02 18:34:07.077943 2026] [:error] [pid 29467:tid 29482] [client 20.240.235.228:10845] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/to.php"] [unique_id "ac5GH74VUBFCJAq-WOk4nAAAAQw"]
[Thu Apr 02 18:34:07.603406 2026] [:error] [pid 23927:tid 23941] [client 20.240.235.228:32985] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/to.php"] [unique_id "ac5GH0sZwqCndhl9uKCIQwAAAYw"]
[Thu Apr 02 18:34:08.161746 2026] [:error] [pid 59305:tid 59332] [client 20.240.235.228:10766] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wqqs.php"] [unique_id "ac5GIKr2tV4rDwKFxKdWhQAAANc"]
[Thu Apr 02 18:34:08.694535 2026] [:error] [pid 37543:tid 37560] [client 20.240.235.228:10839] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wqqs.php"] [unique_id "ac5GIHhdk2bEYJCvILbCQgAAAU8"]
[Thu Apr 02 18:34:09.222010 2026] [:error] [pid 29467:tid 29470] [client 20.240.235.228:33010] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wqqs.php"] [unique_id "ac5GIb4VUBFCJAq-WOk4qQAAAQA"]
[Thu Apr 02 18:34:09.833002 2026] [:error] [pid 29467:tid 29475] [client 20.240.235.228:10868] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wqqs.php"] [unique_id "ac5GIb4VUBFCJAq-WOk4swAAAQU"]
[Thu Apr 02 18:34:10.361314 2026] [:error] [pid 29467:tid 29490] [client 20.240.235.228:10807] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "ac5GIr4VUBFCJAq-WOk4uwAAARQ"]
[Thu Apr 02 18:34:10.901496 2026] [:error] [pid 29467:tid 29486] [client 20.240.235.228:10787] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "ac5GIr4VUBFCJAq-WOk4wwAAARA"]
[Thu Apr 02 18:34:11.429471 2026] [:error] [pid 29467:tid 29470] [client 20.240.235.228:32977] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "ac5GI74VUBFCJAq-WOk4zQAAAQA"]
[Thu Apr 02 18:34:11.955246 2026] [:error] [pid 59201:tid 59288] [client 20.240.235.228:10735] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "ac5GI8AC0Tw8eL6gzZ4GJQAAAJU"]
[Thu Apr 02 18:34:12.501378 2026] [:error] [pid 54384:tid 54386] [client 20.240.235.228:10761] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "ac5GJNWWpaby3TVN7MfvqgAAAcA"]
[Thu Apr 02 18:34:13.054547 2026] [:error] [pid 23927:tid 23936] [client 20.240.235.228:10773] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "ac5GJUsZwqCndhl9uKCISAAAAYc"]
[Thu Apr 02 18:34:13.641009 2026] [:error] [pid 23927:tid 23953] [client 20.240.235.228:33016] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "ac5GJUsZwqCndhl9uKCITAAAAZg"]
[Thu Apr 02 18:34:14.185848 2026] [:error] [pid 37543:tid 37567] [client 20.240.235.228:10865] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "ac5GJnhdk2bEYJCvILbCSwAAAVY"]
[Thu Apr 02 18:34:14.727917 2026] [:error] [pid 23927:tid 23935] [client 20.240.235.228:10863] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aifa.php"] [unique_id "ac5GJksZwqCndhl9uKCITgAAAYY"]
[Thu Apr 02 18:34:15.280996 2026] [:error] [pid 23927:tid 23933] [client 20.240.235.228:10754] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aifa.php"] [unique_id "ac5GJ0sZwqCndhl9uKCIUwAAAYQ"]
[Thu Apr 02 18:34:15.817098 2026] [:error] [pid 59305:tid 59327] [client 20.240.235.228:10707] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aifa.php"] [unique_id "ac5GJ6r2tV4rDwKFxKdWmAAAANI"]
[Thu Apr 02 18:34:17.367314 2026] [:error] [pid 59305:tid 59313] [client 20.240.235.228:32973] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aifa.php"] [unique_id "ac5GKar2tV4rDwKFxKdWnwAAAMQ"]
[Thu Apr 02 18:34:17.900914 2026] [:error] [pid 59201:tid 59278] [client 20.240.235.228:10779] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "ac5GKcAC0Tw8eL6gzZ4GLQAAAIs"]
[Thu Apr 02 18:34:18.454151 2026] [:error] [pid 59305:tid 59312] [client 20.240.235.228:33050] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "ac5GKqr2tV4rDwKFxKdWpwAAAMM"]
[Thu Apr 02 18:34:18.998327 2026] [:error] [pid 59305:tid 59324] [client 20.240.235.228:10837] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "ac5GKqr2tV4rDwKFxKdWrwAAAM8"]
[Thu Apr 02 18:34:19.565871 2026] [:error] [pid 59201:tid 59276] [client 20.240.235.228:10813] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "ac5GK8AC0Tw8eL6gzZ4GMAAAAIk"]
[Thu Apr 02 18:34:20.701205 2026] [:error] [pid 59201:tid 59277] [client 20.240.235.228:10795] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/feokc.php"] [unique_id "ac5GLMAC0Tw8eL6gzZ4GNwAAAIo"]
[Thu Apr 02 18:34:21.271675 2026] [:error] [pid 23927:tid 23942] [client 20.240.235.228:32967] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/feokc.php"] [unique_id "ac5GLUsZwqCndhl9uKCIWgAAAY0"]
[Thu Apr 02 18:34:21.818568 2026] [:error] [pid 59305:tid 59333] [client 20.240.235.228:10869] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/feokc.php"] [unique_id "ac5GLar2tV4rDwKFxKdWtgAAANg"]
[Thu Apr 02 18:34:22.390025 2026] [:error] [pid 23927:tid 23934] [client 20.240.235.228:33063] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/feokc.php"] [unique_id "ac5GLksZwqCndhl9uKCIXAAAAYU"]
[Thu Apr 02 18:34:22.920738 2026] [:error] [pid 29467:tid 29487] [client 20.240.235.228:10624] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nc4.php"] [unique_id "ac5GLr4VUBFCJAq-WOk5AAAAARE"]
[Thu Apr 02 18:34:23.458100 2026] [:error] [pid 23927:tid 23939] [client 20.240.235.228:10811] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nc4.php"] [unique_id "ac5GL0sZwqCndhl9uKCIXwAAAYo"]
[Thu Apr 02 18:34:24.018416 2026] [:error] [pid 59305:tid 59318] [client 20.240.235.228:10711] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nc4.php"] [unique_id "ac5GMKr2tV4rDwKFxKdWvQAAAMk"]
[Thu Apr 02 18:34:24.567849 2026] [:error] [pid 23927:tid 23938] [client 20.240.235.228:32995] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nc4.php"] [unique_id "ac5GMEsZwqCndhl9uKCIYgAAAYk"]
[Thu Apr 02 18:34:25.123406 2026] [:error] [pid 23927:tid 23950] [client 20.240.235.228:10781] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "ac5GMUsZwqCndhl9uKCIaQAAAZU"]
[Thu Apr 02 18:34:25.658053 2026] [:error] [pid 29467:tid 29485] [client 20.240.235.228:10758] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "ac5GMb4VUBFCJAq-WOk5CQAAAQ8"]
[Thu Apr 02 18:34:26.235871 2026] [:error] [pid 59201:tid 59288] [client 20.240.235.228:10692] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "ac5GMsAC0Tw8eL6gzZ4GPwAAAJU"]
[Thu Apr 02 18:34:26.770904 2026] [:error] [pid 23927:tid 23931] [client 20.240.235.228:10879] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "ac5GMksZwqCndhl9uKCIdwAAAYI"]
[Thu Apr 02 18:34:27.317709 2026] [:error] [pid 29467:tid 29474] [client 20.240.235.228:10764] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "ac5GM74VUBFCJAq-WOk5DwAAAQQ"]
[Thu Apr 02 18:34:27.847188 2026] [:error] [pid 23927:tid 23947] [client 20.240.235.228:10691] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "ac5GM0sZwqCndhl9uKCIgQAAAZI"]
[Thu Apr 02 18:34:28.412755 2026] [:error] [pid 23927:tid 23943] [client 20.240.235.228:10871] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/acxx.php"] [unique_id "ac5GNEsZwqCndhl9uKCIhgAAAY4"]
[Thu Apr 02 18:34:35.642605 2026] [:error] [pid 59200:tid 59261] [client 20.240.235.228:10788] [client 20.240.235.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "ac5GO7fP26txrdLs3EpiZQAAAFU"]
[Thu Apr 02 18:34:36.170917 2026] [:error] [pid 59200:tid 59259] [client 20.240.235.228:10841] [client 20.240.235.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "ac5GPLfP26txrdLs3EpiZwAAAFM"]
[Thu Apr 02 18:34:37.793309 2026] [:error] [pid 59200:tid 59261] [client 20.240.235.228:10700] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mail.php"] [unique_id "ac5GPbfP26txrdLs3EpidwAAAFU"]
[Thu Apr 02 18:34:38.317557 2026] [:error] [pid 23927:tid 23936] [client 20.240.235.228:10877] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mail.php"] [unique_id "ac5GPksZwqCndhl9uKCIqgAAAYc"]
[Thu Apr 02 18:34:38.847836 2026] [:error] [pid 59305:tid 59328] [client 20.240.235.228:10851] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mail.php"] [unique_id "ac5GPqr2tV4rDwKFxKdXBQAAANM"]
[Thu Apr 02 18:34:39.385998 2026] [:error] [pid 59305:tid 59326] [client 20.240.235.228:33026] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/marijuana.php"] [unique_id "ac5GP6r2tV4rDwKFxKdXCQAAANE"]
[Thu Apr 02 18:34:39.935521 2026] [:error] [pid 54384:tid 54396] [client 20.240.235.228:10713] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/marijuana.php"] [unique_id "ac5GP9WWpaby3TVN7Mfv2QAAAco"]
[Thu Apr 02 18:34:40.467463 2026] [:error] [pid 59305:tid 59332] [client 20.240.235.228:33047] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/marijuana.php"] [unique_id "ac5GQKr2tV4rDwKFxKdXEAAAANc"]
[Thu Apr 02 18:34:40.996491 2026] [:error] [pid 59305:tid 59325] [client 20.240.235.228:10698] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/marijuana.php"] [unique_id "ac5GQKr2tV4rDwKFxKdXFAAAANA"]
[Thu Apr 02 18:34:41.533430 2026] [:error] [pid 59305:tid 59310] [client 20.240.235.228:10782] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/333.php"] [unique_id "ac5GQar2tV4rDwKFxKdXGAAAAME"]
[Thu Apr 02 18:34:42.082081 2026] [:error] [pid 59305:tid 59313] [client 20.240.235.228:10770] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/333.php"] [unique_id "ac5GQqr2tV4rDwKFxKdXHQAAAMQ"]
[Thu Apr 02 18:34:42.626867 2026] [:error] [pid 59194:tid 59229] [client 20.240.235.228:33002] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/333.php"] [unique_id "ac5GQhMpAeV11hcQehw1NQAAABA"]
[Thu Apr 02 18:34:43.229504 2026] [:error] [pid 59305:tid 59314] [client 20.240.235.228:10854] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/333.php"] [unique_id "ac5GQ6r2tV4rDwKFxKdXIQAAAMU"]
[Thu Apr 02 18:34:43.769125 2026] [:error] [pid 59194:tid 59222] [client 20.240.235.228:10786] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/444.php"] [unique_id "ac5GQxMpAeV11hcQehw1PgAAAAk"]
[Thu Apr 02 18:34:44.327765 2026] [:error] [pid 59201:tid 59271] [client 20.240.235.228:10755] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/444.php"] [unique_id "ac5GRMAC0Tw8eL6gzZ4GdwAAAIQ"]
[Thu Apr 02 18:34:44.877394 2026] [:error] [pid 54384:tid 54405] [client 20.240.235.228:33055] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/444.php"] [unique_id "ac5GRNWWpaby3TVN7Mfv3gAAAdM"]
[Thu Apr 02 18:34:45.502769 2026] [:error] [pid 54384:tid 54390] [client 20.240.235.228:10643] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/444.php"] [unique_id "ac5GRdWWpaby3TVN7Mfv4QAAAcQ"]
[Thu Apr 02 18:34:46.030929 2026] [:error] [pid 59201:tid 59286] [client 20.240.235.228:10866] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "ac5GRsAC0Tw8eL6gzZ4GfAAAAJM"]
[Thu Apr 02 18:34:46.568883 2026] [:error] [pid 23927:tid 23948] [client 20.240.235.228:10693] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "ac5GRksZwqCndhl9uKCItgAAAZM"]
[Thu Apr 02 18:34:47.098959 2026] [:error] [pid 59200:tid 59245] [client 20.240.235.228:10728] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "ac5GR7fP26txrdLs3EpihQAAAEU"]
[Thu Apr 02 18:34:47.632960 2026] [:error] [pid 23927:tid 23936] [client 20.240.235.228:10724] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file9.php"] [unique_id "ac5GR0sZwqCndhl9uKCIvQAAAYc"]
[Thu Apr 02 18:34:48.165122 2026] [:error] [pid 59200:tid 59251] [client 20.240.235.228:10797] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/filesss.php"] [unique_id "ac5GSLfP26txrdLs3EpijAAAAEs"]
[Thu Apr 02 18:34:48.713790 2026] [:error] [pid 23927:tid 23945] [client 20.240.235.228:10705] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/filesss.php"] [unique_id "ac5GSEsZwqCndhl9uKCIwAAAAZA"]
[Thu Apr 02 18:34:49.285220 2026] [:error] [pid 59201:tid 59291] [client 20.240.235.228:33012] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/filesss.php"] [unique_id "ac5GScAC0Tw8eL6gzZ4GjwAAAJg"]
[Thu Apr 02 18:34:50.508608 2026] [:error] [pid 59305:tid 59312] [client 20.240.235.228:10720] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/filesss.php"] [unique_id "ac5GSqr2tV4rDwKFxKdXMQAAAMM"]
[Thu Apr 02 18:34:51.068032 2026] [:error] [pid 59305:tid 59333] [client 20.240.235.228:10642] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file88.php"] [unique_id "ac5GS6r2tV4rDwKFxKdXMwAAANg"]
[Thu Apr 02 18:34:51.598615 2026] [:error] [pid 59201:tid 59287] [client 20.240.235.228:10853] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file88.php"] [unique_id "ac5GS8AC0Tw8eL6gzZ4GmQAAAJQ"]
[Thu Apr 02 18:34:52.150124 2026] [:error] [pid 29467:tid 29483] [client 20.240.235.228:32964] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file88.php"] [unique_id "ac5GTL4VUBFCJAq-WOk5TQAAAQ0"]
[Thu Apr 02 18:34:52.674249 2026] [:error] [pid 54384:tid 54386] [client 20.240.235.228:10737] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file88.php"] [unique_id "ac5GTNWWpaby3TVN7Mfv6AAAAcA"]
[Thu Apr 02 18:34:53.262647 2026] [:error] [pid 29467:tid 29471] [client 20.240.235.228:33051] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/X7x.php"] [unique_id "ac5GTb4VUBFCJAq-WOk5UQAAAQE"]
[Thu Apr 02 18:34:53.794372 2026] [:error] [pid 29467:tid 29489] [client 20.240.235.228:10727] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/X7x.php"] [unique_id "ac5GTb4VUBFCJAq-WOk5VQAAARM"]
[Thu Apr 02 18:34:54.353989 2026] [:error] [pid 37543:tid 37565] [client 20.240.235.228:10738] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/X7x.php"] [unique_id "ac5GTnhdk2bEYJCvILbCuQAAAVQ"]
[Thu Apr 02 18:34:54.884030 2026] [:error] [pid 37543:tid 37554] [client 20.240.235.228:10794] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/X7x.php"] [unique_id "ac5GTnhdk2bEYJCvILbCwQAAAUk"]
[Thu Apr 02 18:34:55.421308 2026] [:error] [pid 29467:tid 29492] [client 20.240.235.228:10717] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admir.php"] [unique_id "ac5GT74VUBFCJAq-WOk5XQAAARY"]
[Thu Apr 02 18:34:56.033681 2026] [:error] [pid 23927:tid 23929] [client 20.240.235.228:10803] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admir.php"] [unique_id "ac5GUEsZwqCndhl9uKCI2gAAAYA"]
[Thu Apr 02 18:34:56.569335 2026] [:error] [pid 59201:tid 59288] [client 20.240.235.228:10647] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admir.php"] [unique_id "ac5GUMAC0Tw8eL6gzZ4GowAAAJU"]
[Thu Apr 02 18:34:57.095684 2026] [:error] [pid 59305:tid 59316] [client 20.240.235.228:10852] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admir.php"] [unique_id "ac5GUar2tV4rDwKFxKdXOwAAAMc"]
[Thu Apr 02 18:34:58.628251 2026] [:error] [pid 37543:tid 37566] [client 20.240.235.228:10864] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aj.php"] [unique_id "ac5GUnhdk2bEYJCvILbCzQAAAVU"]
[Thu Apr 02 18:34:59.159009 2026] [:error] [pid 37543:tid 37569] [client 20.240.235.228:33003] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aj.php"] [unique_id "ac5GU3hdk2bEYJCvILbCzgAAAVg"]
[Thu Apr 02 18:34:59.694599 2026] [:error] [pid 59201:tid 59274] [client 20.240.235.228:8177] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aj.php"] [unique_id "ac5GU8AC0Tw8eL6gzZ4GpwAAAIc"]
[Thu Apr 02 18:35:00.274741 2026] [:error] [pid 59305:tid 59326] [client 20.240.235.228:10654] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aj.php"] [unique_id "ac5GVKr2tV4rDwKFxKdXRQAAANE"]
[Thu Apr 02 18:35:00.800397 2026] [:error] [pid 59200:tid 59240] [client 20.240.235.228:10798] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/opts.php"] [unique_id "ac5GVLfP26txrdLs3EpiqwAAAEA"]
[Thu Apr 02 18:35:01.378566 2026] [:error] [pid 23927:tid 23949] [client 20.240.235.228:10809] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/opts.php"] [unique_id "ac5GVUsZwqCndhl9uKCI4QAAAZQ"]
[Thu Apr 02 18:35:01.515357 2026] [:error] [pid 59305:tid 59313] [client 20.240.235.228:48621] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac5GVar2tV4rDwKFxKdXSwAAAMQ"]
[Thu Apr 02 18:35:01.915970 2026] [:error] [pid 29467:tid 29471] [client 20.240.235.228:33015] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/opts.php"] [unique_id "ac5GVb4VUBFCJAq-WOk5awAAAQE"]
[Thu Apr 02 18:35:02.474830 2026] [:error] [pid 59200:tid 59261] [client 20.240.235.228:10768] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/opts.php"] [unique_id "ac5GVrfP26txrdLs3EpirAAAAFU"]
[Thu Apr 02 18:35:03.011965 2026] [:error] [pid 29467:tid 29480] [client 20.240.235.228:10772] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/filer.php"] [unique_id "ac5GV74VUBFCJAq-WOk5eAAAAQo"]
[Thu Apr 02 18:35:03.543436 2026] [:error] [pid 29467:tid 29472] [client 20.240.235.228:10808] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/filer.php"] [unique_id "ac5GV74VUBFCJAq-WOk5fQAAAQI"]
[Thu Apr 02 18:35:03.582355 2026] [:error] [pid 29467:tid 29483] [client 20.240.235.228:35454] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac5GV74VUBFCJAq-WOk5gAAAAQ0"]
[Thu Apr 02 18:35:04.126644 2026] [:error] [pid 59305:tid 59309] [client 20.240.235.228:10714] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/filer.php"] [unique_id "ac5GWKr2tV4rDwKFxKdXTwAAAMA"]
[Thu Apr 02 18:35:04.709048 2026] [:error] [pid 54384:tid 54398] [client 20.240.235.228:10730] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/filer.php"] [unique_id "ac5GWNWWpaby3TVN7MfwBQAAAcw"]
[Thu Apr 02 18:35:05.319997 2026] [:error] [pid 59194:tid 59237] [client 20.240.235.228:10789] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lites.php"] [unique_id "ac5GWRMpAeV11hcQehw1VgAAABg"]
[Thu Apr 02 18:35:05.859975 2026] [:error] [pid 59305:tid 59326] [client 20.240.235.228:33014] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lites.php"] [unique_id "ac5GWar2tV4rDwKFxKdXUgAAANE"]
[Thu Apr 02 18:35:06.378391 2026] [:error] [pid 59200:tid 59259] [client 20.240.235.228:49877] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac5GWrfP26txrdLs3EpiswAAAFM"]
[Thu Apr 02 18:35:06.421525 2026] [:error] [pid 59305:tid 59317] [client 20.240.235.228:10771] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lites.php"] [unique_id "ac5GWqr2tV4rDwKFxKdXVwAAAMg"]
[Thu Apr 02 18:35:06.951401 2026] [:error] [pid 59200:tid 59248] [client 20.240.235.228:10820] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lites.php"] [unique_id "ac5GWrfP26txrdLs3EpitAAAAEg"]
[Thu Apr 02 18:35:07.483506 2026] [:error] [pid 54384:tid 54397] [client 20.240.235.228:10708] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "ac5GW9WWpaby3TVN7MfwCgAAAcs"]
[Thu Apr 02 18:35:08.021023 2026] [:error] [pid 59305:tid 59316] [client 20.240.235.228:10858] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "ac5GXKr2tV4rDwKFxKdXXAAAAMc"]
[Thu Apr 02 18:35:08.556678 2026] [:error] [pid 59305:tid 59327] [client 20.240.235.228:10800] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "ac5GXKr2tV4rDwKFxKdXXwAAANI"]
[Thu Apr 02 18:35:09.085107 2026] [:error] [pid 59305:tid 59312] [client 20.240.235.228:10875] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "ac5GXar2tV4rDwKFxKdXYwAAAMM"]
[Thu Apr 02 18:35:09.614192 2026] [:error] [pid 54384:tid 54387] [client 20.240.235.228:10718] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/he.php"] [unique_id "ac5GXdWWpaby3TVN7MfwEgAAAcE"]
[Thu Apr 02 18:35:10.151073 2026] [:error] [pid 37543:tid 37548] [client 20.240.235.228:45680] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "ac5GXnhdk2bEYJCvILbC0wAAAUM"]
[Thu Apr 02 18:35:10.185302 2026] [:error] [pid 59305:tid 59329] [client 20.240.235.228:10775] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/he.php"] [unique_id "ac5GXqr2tV4rDwKFxKdXZAAAANQ"]
[Thu Apr 02 18:35:10.742153 2026] [:error] [pid 29467:tid 29479] [client 20.240.235.228:10716] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/he.php"] [unique_id "ac5GXr4VUBFCJAq-WOk5lAAAAQk"]
[Thu Apr 02 18:35:11.294089 2026] [:error] [pid 59194:tid 59235] [client 20.240.235.228:10780] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/he.php"] [unique_id "ac5GXxMpAeV11hcQehw1XQAAABY"]
[Thu Apr 02 18:35:11.833774 2026] [:error] [pid 59200:tid 59246] [client 20.240.235.228:10810] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aves.php"] [unique_id "ac5GX7fP26txrdLs3EpiuQAAAEY"]
[Thu Apr 02 18:35:12.367920 2026] [:error] [pid 59305:tid 59311] [client 20.240.235.228:10741] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aves.php"] [unique_id "ac5GYKr2tV4rDwKFxKdXaAAAAMI"]
[Thu Apr 02 18:35:12.901629 2026] [:error] [pid 59305:tid 59319] [client 20.240.235.228:10765] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aves.php"] [unique_id "ac5GYKr2tV4rDwKFxKdXbgAAAMo"]
[Thu Apr 02 18:35:13.468044 2026] [:error] [pid 59305:tid 59325] [client 20.240.235.228:10625] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aves.php"] [unique_id "ac5GYar2tV4rDwKFxKdXcgAAANA"]
[Thu Apr 02 18:35:14.045899 2026] [:error] [pid 59305:tid 59332] [client 20.240.235.228:10815] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gorila.php"] [unique_id "ac5GYqr2tV4rDwKFxKdXeQAAANc"]
[Thu Apr 02 18:35:14.578287 2026] [:error] [pid 54384:tid 54408] [client 20.240.235.228:33052] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gorila.php"] [unique_id "ac5GYtWWpaby3TVN7MfwGwAAAdY"]
[Thu Apr 02 18:35:15.102420 2026] [:error] [pid 54384:tid 54388] [client 20.240.235.228:10791] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gorila.php"] [unique_id "ac5GY9WWpaby3TVN7MfwIAAAAcI"]
[Thu Apr 02 18:35:15.768762 2026] [:error] [pid 29467:tid 29479] [client 20.240.235.228:10805] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gorila.php"] [unique_id "ac5GY74VUBFCJAq-WOk5ngAAAQk"]
[Thu Apr 02 18:35:16.305459 2026] [:error] [pid 29467:tid 29493] [client 20.240.235.228:10830] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vanta.php"] [unique_id "ac5GZL4VUBFCJAq-WOk5pAAAARc"]
[Thu Apr 02 18:35:16.840077 2026] [:error] [pid 29467:tid 29472] [client 20.240.235.228:10704] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vanta.php"] [unique_id "ac5GZL4VUBFCJAq-WOk5qAAAAQI"]
[Thu Apr 02 18:35:17.363727 2026] [:error] [pid 29467:tid 29484] [client 20.240.235.228:10763] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vanta.php"] [unique_id "ac5GZb4VUBFCJAq-WOk5rwAAAQ4"]
[Thu Apr 02 18:35:17.918707 2026] [:error] [pid 37543:tid 37563] [client 20.240.235.228:10760] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vanta.php"] [unique_id "ac5GZXhdk2bEYJCvILbC3QAAAVI"]
[Thu Apr 02 18:35:18.528117 2026] [:error] [pid 37543:tid 37559] [client 20.240.235.228:8143] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sh3ll.php"] [unique_id "ac5GZnhdk2bEYJCvILbC4AAAAU4"]
[Thu Apr 02 18:35:19.085725 2026] [:error] [pid 59305:tid 59316] [client 20.240.235.228:10701] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sh3ll.php"] [unique_id "ac5GZ6r2tV4rDwKFxKdXiQAAAMc"]
[Thu Apr 02 18:35:19.651045 2026] [:error] [pid 29467:tid 29477] [client 20.240.235.228:10631] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sh3ll.php"] [unique_id "ac5GZ74VUBFCJAq-WOk5xgAAAQc"]
[Thu Apr 02 18:35:20.187729 2026] [:error] [pid 29467:tid 29487] [client 20.240.235.228:10736] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sh3ll.php"] [unique_id "ac5GaL4VUBFCJAq-WOk5zgAAARE"]
[Thu Apr 02 18:35:20.714788 2026] [:error] [pid 59305:tid 59320] [client 20.240.235.228:10627] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cabs.php"] [unique_id "ac5GaKr2tV4rDwKFxKdXnAAAAMs"]
[Thu Apr 02 18:35:21.242499 2026] [:error] [pid 59200:tid 59259] [client 20.240.235.228:33000] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cabs.php"] [unique_id "ac5GabfP26txrdLs3EpiwAAAAFM"]
[Thu Apr 02 18:35:22.380120 2026] [:error] [pid 59194:tid 59236] [client 20.240.235.228:32997] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cabs.php"] [unique_id "ac5GahMpAeV11hcQehw1ZgAAABc"]
[Thu Apr 02 18:35:22.907350 2026] [:error] [pid 37543:tid 37550] [client 20.240.235.228:10712] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cabs.php"] [unique_id "ac5Ganhdk2bEYJCvILbC_gAAAUU"]
[Thu Apr 02 18:42:48.802303 2026] [:error] [pid 29467:tid 29493] [client 20.240.235.228:44632] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/24.php"] [unique_id "ac5IKL4VUBFCJAq-WOlAxQAAARc"]
[Thu Apr 02 18:42:51.180593 2026] [:error] [pid 54384:tid 54404] [client 20.240.235.228:48912] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/24.php"] [unique_id "ac5IK9WWpaby3TVN7Mfy1QAAAdI"]
[Thu Apr 02 18:42:52.381076 2026] [:error] [pid 59305:tid 59323] [client 20.240.235.228:40344] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/24.php"] [unique_id "ac5ILKr2tV4rDwKFxKdb6wAAAM4"]
[Thu Apr 02 18:42:54.268957 2026] [:error] [pid 29467:tid 29494] [client 20.240.235.228:46418] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/24.php"] [unique_id "ac5ILr4VUBFCJAq-WOlA2wAAARg"]
[Thu Apr 02 18:42:56.155177 2026] [:error] [pid 29467:tid 29471] [client 20.240.235.228:12997] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "ac5IML4VUBFCJAq-WOlA6QAAAQE"]
[Thu Apr 02 18:42:59.823117 2026] [:error] [pid 23927:tid 23951] [client 20.240.235.228:46438] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "ac5IM0sZwqCndhl9uKCMTQAAAZY"]
[Thu Apr 02 18:43:02.818153 2026] [:error] [pid 59200:tid 59243] [client 20.240.235.228:39012] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "ac5INrfP26txrdLs3EpkkQAAAEM"]
[Thu Apr 02 18:43:07.401939 2026] [:error] [pid 54384:tid 54404] [client 20.240.235.228:34059] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "ac5IO9WWpaby3TVN7Mfy4QAAAdI"]
[Thu Apr 02 18:43:09.558093 2026] [:error] [pid 59201:tid 59283] [client 20.240.235.228:41955] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/as.php"] [unique_id "ac5IPcAC0Tw8eL6gzZ4IRwAAAJA"]
[Thu Apr 02 18:43:11.538290 2026] [:error] [pid 29467:tid 29487] [client 20.240.235.228:44577] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/as.php"] [unique_id "ac5IP74VUBFCJAq-WOlBPgAAARE"]
[Thu Apr 02 18:43:14.772643 2026] [:error] [pid 54384:tid 54403] [client 20.240.235.228:34099] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/as.php"] [unique_id "ac5IQtWWpaby3TVN7Mfy5AAAAdE"]
[Thu Apr 02 18:43:16.790012 2026] [:error] [pid 29467:tid 29474] [client 20.240.235.228:47359] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/as.php"] [unique_id "ac5IRL4VUBFCJAq-WOlBYAAAAQQ"]
[Thu Apr 02 18:43:19.477349 2026] [:error] [pid 59194:tid 59220] [client 20.240.235.228:42941] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fyiiz.php"] [unique_id "ac5IRxMpAeV11hcQehw3AwAAAAc"]
[Thu Apr 02 18:43:20.654167 2026] [:error] [pid 54384:tid 54409] [client 20.240.235.228:46450] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fyiiz.php"] [unique_id "ac5ISNWWpaby3TVN7Mfy6QAAAdc"]
[Thu Apr 02 18:43:22.412813 2026] [:error] [pid 37543:tid 37567] [client 20.240.235.228:50141] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fyiiz.php"] [unique_id "ac5ISnhdk2bEYJCvILbE0QAAAVY"]
[Thu Apr 02 18:43:25.014313 2026] [:error] [pid 23927:tid 23934] [client 20.240.235.228:45073] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fyiiz.php"] [unique_id "ac5ITUsZwqCndhl9uKCMegAAAYU"]
[Thu Apr 02 18:43:26.491377 2026] [:error] [pid 59305:tid 59333] [client 20.240.235.228:46386] [client 20.240.235.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/app.php"] [unique_id "ac5ITqr2tV4rDwKFxKdcLAAAANg"]
[Thu Apr 02 18:43:29.508606 2026] [:error] [pid 23927:tid 23950] [client 20.240.235.228:9014] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/max.php"] [unique_id "ac5IUUsZwqCndhl9uKCMfwAAAZU"]
[Thu Apr 02 18:43:31.093568 2026] [:error] [pid 23927:tid 23936] [client 20.240.235.228:46427] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/max.php"] [unique_id "ac5IU0sZwqCndhl9uKCMiAAAAYc"]
[Thu Apr 02 18:43:33.934517 2026] [:error] [pid 59201:tid 59287] [client 20.240.235.228:35918] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/max.php"] [unique_id "ac5IVcAC0Tw8eL6gzZ4IdgAAAJQ"]
[Thu Apr 02 18:43:36.990717 2026] [:error] [pid 37543:tid 37560] [client 20.240.235.228:49264] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "ac5IWHhdk2bEYJCvILbFGAAAAU8"]
[Thu Apr 02 18:43:41.472728 2026] [:error] [pid 29467:tid 29485] [client 20.240.235.228:46618] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "ac5IXb4VUBFCJAq-WOlBxgAAAQ8"]
[Thu Apr 02 18:43:43.434213 2026] [:error] [pid 59200:tid 59246] [client 20.240.235.228:43808] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "ac5IX7fP26txrdLs3EpkrwAAAEY"]
[Thu Apr 02 18:43:45.217052 2026] [:error] [pid 29467:tid 29491] [client 20.240.235.228:34091] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "ac5IYb4VUBFCJAq-WOlB1wAAARU"]
[Thu Apr 02 18:43:46.487304 2026] [:error] [pid 59305:tid 59320] [client 20.240.235.228:42023] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/Jcrop.php"] [unique_id "ac5IYqr2tV4rDwKFxKdccwAAAMs"]
[Thu Apr 02 18:43:57.774586 2026] [:error] [pid 59200:tid 59259] [client 20.240.235.228:44734] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/webadmin.php"] [unique_id "ac5IbbfP26txrdLs3EpkzgAAAFM"]
[Thu Apr 02 18:44:00.362520 2026] [:error] [pid 59305:tid 59323] [client 20.240.235.228:48317] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/webadmin.php"] [unique_id "ac5IcKr2tV4rDwKFxKdcoQAAAM4"]
[Thu Apr 02 18:44:03.288439 2026] [:error] [pid 23927:tid 23948] [client 20.240.235.228:46524] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/webadmin.php"] [unique_id "ac5Ic0sZwqCndhl9uKCMywAAAZM"]
[Thu Apr 02 18:44:04.701670 2026] [:error] [pid 59200:tid 59242] [client 20.240.235.228:46629] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/webadmin.php"] [unique_id "ac5IdLfP26txrdLs3Epk2QAAAEI"]
[Thu Apr 02 18:44:06.894261 2026] [:error] [pid 23927:tid 23934] [client 20.240.235.228:47317] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xc0252.php"] [unique_id "ac5IdksZwqCndhl9uKCM0wAAAYU"]
[Thu Apr 02 18:44:09.168460 2026] [:error] [pid 37543:tid 37549] [client 20.240.235.228:8976] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xc0252.php"] [unique_id "ac5IeXhdk2bEYJCvILbFPgAAAUQ"]
[Thu Apr 02 18:44:12.355677 2026] [:error] [pid 23927:tid 23948] [client 20.240.235.228:34086] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xc0252.php"] [unique_id "ac5IfEsZwqCndhl9uKCM4AAAAZM"]
[Thu Apr 02 18:44:14.620220 2026] [:error] [pid 59200:tid 59242] [client 20.240.235.228:47357] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xc0252.php"] [unique_id "ac5IfrfP26txrdLs3Epk4wAAAEI"]
[Thu Apr 02 18:44:16.379027 2026] [:error] [pid 29467:tid 29477] [client 20.240.235.228:38392] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "ac5IgL4VUBFCJAq-WOlB7gAAAQc"]
[Thu Apr 02 18:44:20.623010 2026] [:error] [pid 29467:tid 29491] [client 20.240.235.228:45258] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "ac5IhL4VUBFCJAq-WOlCDgAAARU"]
[Thu Apr 02 18:44:23.463074 2026] [:error] [pid 37543:tid 37554] [client 20.240.235.228:44257] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "ac5Ih3hdk2bEYJCvILbFSgAAAUk"]
[Thu Apr 02 18:44:26.601123 2026] [:error] [pid 59200:tid 59260] [client 20.240.235.228:49882] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "ac5IirfP26txrdLs3Epk7QAAAFQ"]
[Thu Apr 02 18:44:29.605614 2026] [:error] [pid 29467:tid 29479] [client 20.240.235.228:40228] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sc.php"] [unique_id "ac5Ijb4VUBFCJAq-WOlCPwAAAQk"]
[Thu Apr 02 18:44:31.254580 2026] [:error] [pid 59305:tid 59315] [client 20.240.235.228:44469] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sc.php"] [unique_id "ac5Ij6r2tV4rDwKFxKdcwgAAAMY"]
[Thu Apr 02 18:44:34.446303 2026] [:error] [pid 23927:tid 23942] [client 20.240.235.228:36081] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sc.php"] [unique_id "ac5IkksZwqCndhl9uKCNHAAAAY0"]
[Thu Apr 02 18:44:35.897906 2026] [:error] [pid 37543:tid 37546] [client 20.240.235.228:36049] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sc.php"] [unique_id "ac5Ik3hdk2bEYJCvILbFVgAAAUE"]
[Thu Apr 02 18:44:37.803710 2026] [:error] [pid 29467:tid 29476] [client 20.240.235.228:45281] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mis.php"] [unique_id "ac5Ilb4VUBFCJAq-WOlCYQAAAQY"]
[Thu Apr 02 18:44:39.059140 2026] [:error] [pid 59200:tid 59247] [client 20.240.235.228:40238] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mis.php"] [unique_id "ac5Il7fP26txrdLs3Epk8AAAAEc"]
[Thu Apr 02 18:44:41.982098 2026] [:error] [pid 59201:tid 59279] [client 20.240.235.228:41759] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mis.php"] [unique_id "ac5ImcAC0Tw8eL6gzZ4IqgAAAIw"]
[Thu Apr 02 18:44:44.122076 2026] [:error] [pid 54384:tid 54404] [client 20.240.235.228:35518] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mis.php"] [unique_id "ac5InNWWpaby3TVN7MfzjgAAAdI"]
[Thu Apr 02 18:44:46.278597 2026] [:error] [pid 29467:tid 29485] [client 20.240.235.228:12821] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zogy1.php"] [unique_id "ac5Inr4VUBFCJAq-WOlCkgAAAQ8"]
[Thu Apr 02 18:44:47.777787 2026] [:error] [pid 23927:tid 23951] [client 20.240.235.228:47246] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zogy1.php"] [unique_id "ac5In0sZwqCndhl9uKCNMQAAAZY"]
[Thu Apr 02 18:44:49.212109 2026] [:error] [pid 59200:tid 59256] [client 20.240.235.228:41771] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zogy1.php"] [unique_id "ac5IobfP26txrdLs3EplBAAAAFA"]
[Thu Apr 02 18:44:51.843022 2026] [:error] [pid 54384:tid 54401] [client 20.240.235.228:38402] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zogy1.php"] [unique_id "ac5Io9WWpaby3TVN7MfzoQAAAc8"]
[Thu Apr 02 18:44:53.745184 2026] [:error] [pid 59194:tid 59236] [client 20.240.235.228:49006] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xvs.php"] [unique_id "ac5IpRMpAeV11hcQehw3YAAAABc"]
[Thu Apr 02 18:44:54.869697 2026] [:error] [pid 54384:tid 54396] [client 20.240.235.228:8919] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xvs.php"] [unique_id "ac5IptWWpaby3TVN7MfzrgAAAco"]
[Thu Apr 02 18:44:56.381212 2026] [:error] [pid 29467:tid 29479] [client 20.240.235.228:12827] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xvs.php"] [unique_id "ac5IqL4VUBFCJAq-WOlCrgAAAQk"]
[Thu Apr 02 18:45:04.581536 2026] [:error] [pid 29467:tid 29485] [client 20.240.235.228:36896] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac5IsL4VUBFCJAq-WOlC1AAAAQ8"]
[Thu Apr 02 18:45:07.445300 2026] [:error] [pid 23927:tid 23933] [client 20.240.235.228:35504] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac5Is0sZwqCndhl9uKCNcgAAAYQ"]
[Thu Apr 02 18:45:11.523219 2026] [:error] [pid 23927:tid 23941] [client 20.240.235.228:36894] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac5It0sZwqCndhl9uKCNdwAAAYw"]
[Thu Apr 02 18:45:13.651734 2026] [:error] [pid 23927:tid 23949] [client 20.240.235.228:40070] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/admin.php"] [unique_id "ac5IuUsZwqCndhl9uKCNewAAAZQ"]
[Thu Apr 02 18:45:15.238871 2026] [:error] [pid 59200:tid 59242] [client 20.240.235.228:43223] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/v3.php"] [unique_id "ac5Iu7fP26txrdLs3EplJQAAAEI"]
[Thu Apr 02 18:45:18.859564 2026] [:error] [pid 23927:tid 23946] [client 20.240.235.228:43110] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/v3.php"] [unique_id "ac5IvksZwqCndhl9uKCNjgAAAZE"]
[Thu Apr 02 18:45:21.725293 2026] [:error] [pid 54384:tid 54401] [client 20.240.235.228:43256] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/v3.php"] [unique_id "ac5IwdWWpaby3TVN7Mfz0wAAAc8"]
[Thu Apr 02 18:45:24.705553 2026] [:error] [pid 59305:tid 59319] [client 20.240.235.228:46766] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/v3.php"] [unique_id "ac5IxKr2tV4rDwKFxKddQAAAAMo"]
[Thu Apr 02 18:45:26.024952 2026] [:error] [pid 23927:tid 23932] [client 20.240.235.228:13089] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/torsa1.php"] [unique_id "ac5IxksZwqCndhl9uKCNnAAAAYM"]
[Thu Apr 02 18:45:28.788994 2026] [:error] [pid 59201:tid 59286] [client 20.240.235.228:39682] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/torsa1.php"] [unique_id "ac5IyMAC0Tw8eL6gzZ4I_AAAAJM"]
[Thu Apr 02 18:45:31.410189 2026] [:error] [pid 29467:tid 29493] [client 20.240.235.228:39699] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/torsa1.php"] [unique_id "ac5Iy74VUBFCJAq-WOlDIAAAARc"]
[Thu Apr 02 18:45:33.409388 2026] [:error] [pid 29467:tid 29472] [client 20.240.235.228:46723] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/torsa1.php"] [unique_id "ac5Izb4VUBFCJAq-WOlDMQAAAQI"]
[Thu Apr 02 18:45:36.175431 2026] [:error] [pid 29467:tid 29491] [client 20.240.235.228:44131] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/to.php"] [unique_id "ac5I0L4VUBFCJAq-WOlDRwAAARU"]
[Thu Apr 02 18:45:38.121686 2026] [:error] [pid 23927:tid 23938] [client 20.240.235.228:43560] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/to.php"] [unique_id "ac5I0ksZwqCndhl9uKCNswAAAYk"]
[Thu Apr 02 18:45:40.144332 2026] [:error] [pid 59201:tid 59281] [client 20.240.235.228:47554] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/to.php"] [unique_id "ac5I1MAC0Tw8eL6gzZ4JDQAAAI4"]
[Thu Apr 02 18:45:41.504121 2026] [:error] [pid 59200:tid 59264] [client 20.240.235.228:38877] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/to.php"] [unique_id "ac5I1bfP26txrdLs3EplPQAAAFg"]
[Thu Apr 02 18:45:44.258027 2026] [:error] [pid 37543:tid 37558] [client 20.240.235.228:40743] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wqqs.php"] [unique_id "ac5I2Hhdk2bEYJCvILbFvQAAAU0"]
[Thu Apr 02 18:45:49.731381 2026] [:error] [pid 29467:tid 29477] [client 20.240.235.228:46288] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wqqs.php"] [unique_id "ac5I3b4VUBFCJAq-WOlDkQAAAQc"]
[Thu Apr 02 18:45:51.461732 2026] [:error] [pid 59305:tid 59315] [client 20.240.235.228:37977] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wqqs.php"] [unique_id "ac5I36r2tV4rDwKFxKddZgAAAMY"]
[Thu Apr 02 18:45:52.288494 2026] [:error] [pid 59305:tid 59310] [client 20.240.235.228:45237] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wqqs.php"] [unique_id "ac5I4Kr2tV4rDwKFxKddbAAAAME"]
[Thu Apr 02 18:45:54.673766 2026] [:error] [pid 29467:tid 29482] [client 20.240.235.228:37964] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "ac5I4r4VUBFCJAq-WOlDrgAAAQw"]
[Thu Apr 02 18:46:01.702665 2026] [:error] [pid 59200:tid 59246] [client 20.240.235.228:40013] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "ac5I6bfP26txrdLs3EplXgAAAEY"]
[Thu Apr 02 18:46:12.591243 2026] [:error] [pid 29467:tid 29470] [client 20.240.235.228:37450] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yanz.php"] [unique_id "ac5I9L4VUBFCJAq-WOlD7gAAAQA"]
[Thu Apr 02 18:46:14.257625 2026] [:error] [pid 59201:tid 59274] [client 20.240.235.228:40035] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yanz.php"] [unique_id "ac5I9sAC0Tw8eL6gzZ4JRQAAAIc"]
[Thu Apr 02 18:46:16.715571 2026] [:error] [pid 54384:tid 54392] [client 20.240.235.228:36028] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yanz.php"] [unique_id "ac5I-NWWpaby3TVN7Mf0FAAAAcY"]
[Thu Apr 02 18:46:21.801118 2026] [:error] [pid 54384:tid 54399] [client 20.240.235.228:46858] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yanz.php"] [unique_id "ac5I_dWWpaby3TVN7Mf0IwAAAc0"]
[Thu Apr 02 18:46:24.116387 2026] [:error] [pid 29467:tid 29494] [client 20.240.235.228:46228] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/config.php"] [unique_id "ac5JAL4VUBFCJAq-WOlEBQAAARg"]
[Thu Apr 02 18:46:28.591187 2026] [:error] [pid 29467:tid 29483] [client 20.240.235.228:40310] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/config.php"] [unique_id "ac5JBL4VUBFCJAq-WOlEDwAAAQ0"]
[Thu Apr 02 18:46:30.732214 2026] [:error] [pid 59305:tid 59318] [client 20.240.235.228:12957] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/config.php"] [unique_id "ac5JBqr2tV4rDwKFxKddzAAAAMk"]
[Thu Apr 02 18:46:32.509445 2026] [:error] [pid 59305:tid 59332] [client 20.240.235.228:49789] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/config.php"] [unique_id "ac5JCKr2tV4rDwKFxKdd1QAAANc"]
[Thu Apr 02 18:46:35.884792 2026] [:error] [pid 29467:tid 29491] [client 20.240.235.228:37739] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/network.php"] [unique_id "ac5JC74VUBFCJAq-WOlEKwAAARU"]
[Thu Apr 02 18:46:37.851684 2026] [:error] [pid 23927:tid 23950] [client 20.240.235.228:39829] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/network.php"] [unique_id "ac5JDUsZwqCndhl9uKCOgwAAAZU"]
[Thu Apr 02 18:46:39.456587 2026] [:error] [pid 59305:tid 59324] [client 20.240.235.228:40309] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/network.php"] [unique_id "ac5JD6r2tV4rDwKFxKdeEwAAAM8"]
[Thu Apr 02 18:46:43.074101 2026] [:error] [pid 54384:tid 54406] [client 20.240.235.228:35129] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/network.php"] [unique_id "ac5JE9WWpaby3TVN7Mf0nQAAAdQ"]
[Thu Apr 02 18:46:46.590544 2026] [:error] [pid 29467:tid 29472] [client 20.240.235.228:38305] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-2019.php"] [unique_id "ac5JFr4VUBFCJAq-WOlEaAAAAQI"]
[Thu Apr 02 18:46:50.522074 2026] [:error] [pid 23927:tid 23950] [client 20.240.235.228:35077] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-2019.php"] [unique_id "ac5JGksZwqCndhl9uKCOrAAAAZU"]
[Thu Apr 02 18:46:53.411929 2026] [:error] [pid 23927:tid 23938] [client 20.240.235.228:43473] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-2019.php"] [unique_id "ac5JHUsZwqCndhl9uKCOtwAAAYk"]
[Thu Apr 02 18:46:54.683844 2026] [:error] [pid 54384:tid 54403] [client 20.240.235.228:44840] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-2019.php"] [unique_id "ac5JHtWWpaby3TVN7Mf0xgAAAdE"]
[Thu Apr 02 18:46:56.403994 2026] [:error] [pid 59200:tid 59247] [client 20.240.235.228:44056] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bypass.php"] [unique_id "ac5JILfP26txrdLs3EplgwAAAEc"]
[Thu Apr 02 18:46:58.374759 2026] [:error] [pid 59305:tid 59316] [client 20.240.235.228:33679] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bypass.php"] [unique_id "ac5JIqr2tV4rDwKFxKdeOwAAAMc"]
[Thu Apr 02 18:47:00.126738 2026] [:error] [pid 59305:tid 59332] [client 20.240.235.228:43456] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bypass.php"] [unique_id "ac5JJKr2tV4rDwKFxKdePQAAANc"]
[Thu Apr 02 18:47:02.719925 2026] [:error] [pid 59201:tid 59289] [client 20.240.235.228:39365] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bypass.php"] [unique_id "ac5JJsAC0Tw8eL6gzZ4JfQAAAJY"]
[Thu Apr 02 18:47:06.278418 2026] [:error] [pid 37543:tid 37552] [client 20.240.235.228:43052] [client 20.240.235.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "ac5JKnhdk2bEYJCvILbGHAAAAUc"]
[Thu Apr 02 18:47:09.318092 2026] [:error] [pid 23927:tid 23941] [client 20.240.235.228:38964] [client 20.240.235.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "ac5JLUsZwqCndhl9uKCO4wAAAYw"]
[Thu Apr 02 18:47:11.019359 2026] [:error] [pid 29467:tid 29490] [client 20.240.235.228:35199] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "ac5JL74VUBFCJAq-WOlEuAAAARQ"]
[Thu Apr 02 18:47:20.265709 2026] [:error] [pid 59201:tid 59287] [client 20.240.235.228:38921] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aj.php"] [unique_id "ac5JOMAC0Tw8eL6gzZ4JoAAAAJQ"]
[Thu Apr 02 18:47:25.246124 2026] [:error] [pid 59194:tid 59221] [client 20.240.235.228:40327] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aj.php"] [unique_id "ac5JPRMpAeV11hcQehw3xQAAAAg"]
[Thu Apr 02 18:47:27.896064 2026] [:error] [pid 54384:tid 54391] [client 20.240.235.228:34724] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aj.php"] [unique_id "ac5JP9WWpaby3TVN7Mf1UQAAAcU"]
[Thu Apr 02 18:47:30.871516 2026] [:error] [pid 29467:tid 29484] [client 20.240.235.228:39072] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aj.php"] [unique_id "ac5JQr4VUBFCJAq-WOlFSQAAAQ4"]
[Thu Apr 02 18:47:33.139636 2026] [:error] [pid 59305:tid 59318] [client 20.240.235.228:8766] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/opts.php"] [unique_id "ac5JRar2tV4rDwKFxKdeowAAAMk"]
[Thu Apr 02 18:47:35.625871 2026] [:error] [pid 29467:tid 29492] [client 20.240.235.228:47200] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/opts.php"] [unique_id "ac5JR74VUBFCJAq-WOlFWAAAARY"]
[Thu Apr 02 18:47:36.542665 2026] [:error] [pid 23927:tid 23945] [client 20.240.235.228:42165] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/opts.php"] [unique_id "ac5JSEsZwqCndhl9uKCPMwAAAZA"]
[Thu Apr 02 18:47:38.711668 2026] [:error] [pid 23927:tid 23936] [client 20.240.235.228:47174] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/opts.php"] [unique_id "ac5JSksZwqCndhl9uKCPRgAAAYc"]
[Thu Apr 02 18:47:41.811400 2026] [:error] [pid 37543:tid 37557] [client 20.240.235.228:39081] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/filer.php"] [unique_id "ac5JTXhdk2bEYJCvILbGNwAAAUw"]
[Thu Apr 02 18:47:43.205452 2026] [:error] [pid 59200:tid 59252] [client 20.240.235.228:42127] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/filer.php"] [unique_id "ac5JT7fP26txrdLs3EplpgAAAEw"]
[Thu Apr 02 18:47:46.376657 2026] [:error] [pid 23927:tid 23931] [client 20.240.235.228:47037] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/filer.php"] [unique_id "ac5JUksZwqCndhl9uKCPVAAAAYI"]
[Thu Apr 02 18:47:48.832251 2026] [:error] [pid 23927:tid 23936] [client 20.240.235.228:34735] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/filer.php"] [unique_id "ac5JVEsZwqCndhl9uKCPXwAAAYc"]
[Thu Apr 02 18:47:51.374054 2026] [:error] [pid 29467:tid 29477] [client 20.240.235.228:34355] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lites.php"] [unique_id "ac5JV74VUBFCJAq-WOlFdAAAAQc"]
[Thu Apr 02 18:47:53.543099 2026] [:error] [pid 29467:tid 29476] [client 20.240.235.228:36841] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lites.php"] [unique_id "ac5JWb4VUBFCJAq-WOlFgwAAAQY"]
[Thu Apr 02 18:47:54.600318 2026] [:error] [pid 29467:tid 29480] [client 20.240.235.228:34715] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lites.php"] [unique_id "ac5JWr4VUBFCJAq-WOlFjwAAAQo"]
[Thu Apr 02 18:47:55.931545 2026] [:error] [pid 29467:tid 29484] [client 20.240.235.228:34698] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lites.php"] [unique_id "ac5JW74VUBFCJAq-WOlFngAAAQ4"]
[Thu Apr 02 18:47:57.642826 2026] [:error] [pid 29467:tid 29486] [client 20.240.235.228:49229] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "ac5JXb4VUBFCJAq-WOlFpAAAARA"]
[Thu Apr 02 18:47:58.900514 2026] [:error] [pid 23927:tid 23947] [client 20.240.235.228:35941] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "ac5JXksZwqCndhl9uKCPegAAAZI"]
[Thu Apr 02 18:48:01.807942 2026] [:error] [pid 29467:tid 29480] [client 20.240.235.228:47069] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "ac5JYb4VUBFCJAq-WOlFrQAAAQo"]
[Thu Apr 02 18:48:02.897543 2026] [:error] [pid 29467:tid 29483] [client 20.240.235.228:36541] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "ac5JYr4VUBFCJAq-WOlFsgAAAQ0"]
[Thu Apr 02 18:48:04.269955 2026] [:error] [pid 59194:tid 59233] [client 20.240.235.228:9074] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/he.php"] [unique_id "ac5JZBMpAeV11hcQehw34wAAABQ"]
[Thu Apr 02 18:48:06.161746 2026] [:error] [pid 59305:tid 59314] [client 20.240.235.228:8788] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/he.php"] [unique_id "ac5JZqr2tV4rDwKFxKde7AAAAMU"]
[Thu Apr 02 18:48:09.927100 2026] [:error] [pid 54384:tid 54386] [client 20.240.235.228:45543] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/he.php"] [unique_id "ac5JadWWpaby3TVN7Mf1mgAAAcA"]
[Thu Apr 02 18:48:11.171038 2026] [:error] [pid 59305:tid 59310] [client 20.240.235.228:49056] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/he.php"] [unique_id "ac5Ja6r2tV4rDwKFxKdfBAAAAME"]
[Thu Apr 02 18:48:13.559045 2026] [:error] [pid 59305:tid 59328] [client 20.240.235.228:45813] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aves.php"] [unique_id "ac5Jbar2tV4rDwKFxKdfEAAAANM"]
[Thu Apr 02 18:48:16.180306 2026] [:error] [pid 59305:tid 59318] [client 20.240.235.228:48343] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aves.php"] [unique_id "ac5JcKr2tV4rDwKFxKdfGQAAAMk"]
[Thu Apr 02 18:48:18.171998 2026] [:error] [pid 29467:tid 29471] [client 20.240.235.228:35445] [client 20.240.235.228] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aves.php"] [unique_id "ac5Jcr4VUBFCJAq-WOlFxgAAAQE"]
[Thu Apr 02 19:32:55.398059 2026] [:error] [pid 29467:tid 29489] [client 172.161.104.93:48275] [client 172.161.104.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dtwpf.php"] [unique_id "ac5T574VUBFCJAq-WOltzAAAARM"]
[Thu Apr 02 19:32:55.870100 2026] [:error] [pid 59194:tid 59217] [client 172.161.104.93:48340] [client 172.161.104.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dtwpf.php"] [unique_id "ac5T5xMpAeV11hcQehxBFgAAAAQ"]
[Thu Apr 02 19:32:56.346616 2026] [:error] [pid 29467:tid 29482] [client 172.161.104.93:50715] [client 172.161.104.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dtwpf.php"] [unique_id "ac5T6L4VUBFCJAq-WOltzwAAAQw"]
[Thu Apr 02 19:32:56.817199 2026] [:error] [pid 29467:tid 29494] [client 172.161.104.93:50693] [client 172.161.104.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dtwpf.php"] [unique_id "ac5T6L4VUBFCJAq-WOlt0QAAARg"]
[Thu Apr 02 19:32:57.306809 2026] [:error] [pid 29467:tid 29475] [client 172.161.104.93:44427] [client 172.161.104.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-ccv.php"] [unique_id "ac5T6b4VUBFCJAq-WOlt1AAAAQU"]
[Thu Apr 02 19:32:57.778069 2026] [:error] [pid 59200:tid 59249] [client 172.161.104.93:6667] [client 172.161.104.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-ccv.php"] [unique_id "ac5T6bfP26txrdLs3Epv2gAAAEk"]
[Thu Apr 02 19:32:58.256662 2026] [:error] [pid 23927:tid 23933] [client 172.161.104.93:9691] [client 172.161.104.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-ccv.php"] [unique_id "ac5T6ksZwqCndhl9uKClnwAAAYQ"]
[Thu Apr 02 19:32:58.738701 2026] [:error] [pid 37543:tid 37565] [client 172.161.104.93:9722] [client 172.161.104.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-ccv.php"] [unique_id "ac5T6nhdk2bEYJCvILbWZQAAAVQ"]
[Thu Apr 02 19:32:59.214277 2026] [:error] [pid 59194:tid 59235] [client 172.161.104.93:48536] [client 172.161.104.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/h2.php"] [unique_id "ac5T6xMpAeV11hcQehxBGAAAABY"]
[Thu Apr 02 19:32:59.727996 2026] [:error] [pid 29467:tid 29491] [client 172.161.104.93:22981] [client 172.161.104.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/h2.php"] [unique_id "ac5T674VUBFCJAq-WOlt2AAAARU"]
[Thu Apr 02 19:33:00.220287 2026] [:error] [pid 29467:tid 29475] [client 172.161.104.93:14007] [client 172.161.104.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/h2.php"] [unique_id "ac5T7L4VUBFCJAq-WOlt3wAAAQU"]
[Thu Apr 02 19:33:00.691678 2026] [:error] [pid 59201:tid 59289] [client 172.161.104.93:23039] [client 172.161.104.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/h2.php"] [unique_id "ac5T7MAC0Tw8eL6gzZ4WZAAAAJY"]
[Thu Apr 02 19:33:01.163180 2026] [:error] [pid 29467:tid 29471] [client 172.161.104.93:9727] [client 172.161.104.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/haz.php"] [unique_id "ac5T7b4VUBFCJAq-WOlt5gAAAQE"]
[Thu Apr 02 19:33:01.634213 2026] [:error] [pid 29467:tid 29489] [client 172.161.104.93:51411] [client 172.161.104.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/haz.php"] [unique_id "ac5T7b4VUBFCJAq-WOlt6gAAARM"]
[Thu Apr 02 19:33:02.129770 2026] [:error] [pid 59201:tid 59291] [client 172.161.104.93:57456] [client 172.161.104.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "ac5T7sAC0Tw8eL6gzZ4WZgAAAJg"]
[Thu Apr 02 19:33:02.607011 2026] [:error] [pid 59305:tid 59315] [client 172.161.104.93:38757] [client 172.161.104.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "ac5T7qr2tV4rDwKFxKd8-gAAAMY"]
[Thu Apr 02 19:33:03.078774 2026] [:error] [pid 23927:tid 23932] [client 172.161.104.93:61323] [client 172.161.104.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "ac5T70sZwqCndhl9uKClpQAAAYM"]
[Thu Apr 02 19:33:03.551021 2026] [:error] [pid 23927:tid 23941] [client 172.161.104.93:9671] [client 172.161.104.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "ac5T70sZwqCndhl9uKClpgAAAYw"]
[Thu Apr 02 19:33:04.103550 2026] [:error] [pid 29467:tid 29483] [client 172.161.104.93:48381] [client 172.161.104.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cilng.php"] [unique_id "ac5T8L4VUBFCJAq-WOlt8gAAAQ0"]
[Thu Apr 02 19:33:04.584973 2026] [:error] [pid 59305:tid 59311] [client 172.161.104.93:7213] [client 172.161.104.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cilng.php"] [unique_id "ac5T8Kr2tV4rDwKFxKd8_AAAAMI"]
[Thu Apr 02 19:33:05.083035 2026] [:error] [pid 29467:tid 29480] [client 172.161.104.93:6685] [client 172.161.104.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f222.php"] [unique_id "ac5T8b4VUBFCJAq-WOlt9AAAAQo"]
[Thu Apr 02 19:33:05.561960 2026] [:error] [pid 59194:tid 59227] [client 172.161.104.93:8835] [client 172.161.104.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f222.php"] [unique_id "ac5T8RMpAeV11hcQehxBGQAAAA4"]
[Thu Apr 02 19:33:06.032699 2026] [:error] [pid 59305:tid 59326] [client 172.161.104.93:50131] [client 172.161.104.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f222.php"] [unique_id "ac5T8qr2tV4rDwKFxKd9AAAAANE"]
[Thu Apr 02 19:33:06.539500 2026] [:error] [pid 37543:tid 37547] [client 172.161.104.93:50724] [client 172.161.104.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-block.php"] [unique_id "ac5T8nhdk2bEYJCvILbWZwAAAUI"]
[Thu Apr 02 19:33:07.052605 2026] [:error] [pid 29467:tid 29480] [client 172.161.104.93:7224] [client 172.161.104.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ckk.php"] [unique_id "ac5T874VUBFCJAq-WOlt9wAAAQo"]
[Thu Apr 02 19:33:07.523290 2026] [:error] [pid 59305:tid 59310] [client 172.161.104.93:8893] [client 172.161.104.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ckk.php"] [unique_id "ac5T86r2tV4rDwKFxKd9AgAAAME"]
[Thu Apr 02 19:33:07.998288 2026] [:error] [pid 54384:tid 54387] [client 172.161.104.93:54710] [client 172.161.104.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ckk.php"] [unique_id "ac5T89WWpaby3TVN7McIfwAAAcE"]
[Thu Apr 02 19:33:08.475194 2026] [:error] [pid 59305:tid 59320] [client 172.161.104.93:48362] [client 172.161.104.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ckk.php"] [unique_id "ac5T9Kr2tV4rDwKFxKd9BAAAAMs"]
[Thu Apr 02 19:33:08.946857 2026] [:error] [pid 59305:tid 59318] [client 172.161.104.93:54704] [client 172.161.104.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sfcl.php"] [unique_id "ac5T9Kr2tV4rDwKFxKd9BgAAAMk"]
[Thu Apr 02 19:33:09.419386 2026] [:error] [pid 59305:tid 59330] [client 172.161.104.93:42197] [client 172.161.104.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sfcl.php"] [unique_id "ac5T9ar2tV4rDwKFxKd9CAAAANU"]
[Thu Apr 02 19:33:09.893796 2026] [:error] [pid 59201:tid 59283] [client 172.161.104.93:7199] [client 172.161.104.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sfcl.php"] [unique_id "ac5T9cAC0Tw8eL6gzZ4WbwAAAJA"]
[Thu Apr 02 19:33:10.420904 2026] [:error] [pid 29467:tid 29482] [client 172.161.104.93:48369] [client 172.161.104.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "ac5T9r4VUBFCJAq-WOlt_gAAAQw"]
[Thu Apr 02 19:33:10.895044 2026] [:error] [pid 29467:tid 29493] [client 172.161.104.93:57481] [client 172.161.104.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "ac5T9r4VUBFCJAq-WOluAQAAARc"]
[Thu Apr 02 19:33:11.369450 2026] [:error] [pid 29467:tid 29480] [client 172.161.104.93:50116] [client 172.161.104.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/torsa.php"] [unique_id "ac5T974VUBFCJAq-WOluAgAAAQo"]
[Thu Apr 02 19:33:11.871569 2026] [:error] [pid 59305:tid 59332] [client 172.161.104.93:57481] [client 172.161.104.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/torsa.php"] [unique_id "ac5T96r2tV4rDwKFxKd9DAAAANc"]
[Thu Apr 02 19:33:12.342952 2026] [:error] [pid 59305:tid 59327] [client 172.161.104.93:48006] [client 172.161.104.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/torsa.php"] [unique_id "ac5T-Kr2tV4rDwKFxKd9DgAAANI"]
[Thu Apr 02 19:33:12.814925 2026] [:error] [pid 59305:tid 59317] [client 172.161.104.93:40606] [client 172.161.104.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/torsa.php"] [unique_id "ac5T-Kr2tV4rDwKFxKd9EAAAAMg"]
[Thu Apr 02 19:33:13.300321 2026] [:error] [pid 59305:tid 59322] [client 172.161.104.93:10866] [client 172.161.104.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "ac5T-ar2tV4rDwKFxKd9FQAAAM0"]
[Thu Apr 02 19:33:13.797227 2026] [:error] [pid 59305:tid 59309] [client 172.161.104.93:40610] [client 172.161.104.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "ac5T-ar2tV4rDwKFxKd9FwAAAMA"]
[Thu Apr 02 19:33:14.331473 2026] [:error] [pid 29467:tid 29473] [client 172.161.104.93:57482] [client 172.161.104.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "ac5T-r4VUBFCJAq-WOluCAAAAQM"]
[Thu Apr 02 19:33:14.851825 2026] [:error] [pid 59305:tid 59332] [client 172.161.104.93:6319] [client 172.161.104.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "ac5T-qr2tV4rDwKFxKd9HAAAANc"]
[Thu Apr 02 19:33:15.339829 2026] [:error] [pid 29467:tid 29487] [client 172.161.104.93:5514] [client 172.161.104.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/55.php"] [unique_id "ac5T-74VUBFCJAq-WOluCgAAARE"]
[Thu Apr 02 19:33:15.817581 2026] [:error] [pid 54384:tid 54403] [client 172.161.104.93:7172] [client 172.161.104.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/55.php"] [unique_id "ac5T-9WWpaby3TVN7McIhAAAAdE"]
[Thu Apr 02 19:33:16.304040 2026] [:error] [pid 59201:tid 59286] [client 172.161.104.93:26239] [client 172.161.104.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/55.php"] [unique_id "ac5T_MAC0Tw8eL6gzZ4WcQAAAJM"]
[Thu Apr 02 19:33:16.786802 2026] [:error] [pid 29467:tid 29486] [client 172.161.104.93:5617] [client 172.161.104.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/55.php"] [unique_id "ac5T_L4VUBFCJAq-WOluEAAAARA"]
[Thu Apr 02 19:33:17.265995 2026] [:error] [pid 23927:tid 23951] [client 172.161.104.93:59914] [client 172.161.104.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mmp.php"] [unique_id "ac5T_UsZwqCndhl9uKClvQAAAZY"]
[Thu Apr 02 19:33:17.793372 2026] [:error] [pid 23927:tid 23950] [client 172.161.104.93:7181] [client 172.161.104.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mmp.php"] [unique_id "ac5T_UsZwqCndhl9uKClwQAAAZU"]
[Thu Apr 02 19:33:18.321247 2026] [:error] [pid 54384:tid 54398] [client 172.161.104.93:7185] [client 172.161.104.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mmp.php"] [unique_id "ac5T_tWWpaby3TVN7McIjAAAAcw"]
[Thu Apr 02 19:33:18.804107 2026] [:error] [pid 54384:tid 54407] [client 172.161.104.93:48009] [client 172.161.104.93] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mmp.php"] [unique_id "ac5T_tWWpaby3TVN7McIjgAAAdU"]
[Sat Apr 04 03:18:58.059180 2026] [:error] [pid 12081:tid 12107] [client 34.171.66.74:35180] [client 34.171.66.74] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "adASoqMJBCYerZTQdmI9ngAAAEc"]
[Sat Apr 04 18:14:38.711394 2026] [:error] [pid 2458:tid 2504] [client 159.89.55.133:53586] [client 159.89.55.133] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "adDkjiNozic5SuWqclnRvwAAAEA"]
[Mon Apr 06 02:11:24.893900 2026] [:error] [pid 51580:tid 51647] [client 20.19.187.50:3487] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/n.php"] [unique_id "adKlzFNFl1NiyNgNZAlPPAAAAEg"]
[Mon Apr 06 02:11:26.383999 2026] [:error] [pid 51753:tid 51822] [client 20.19.187.50:42911] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/n.php"] [unique_id "adKlzq3pmp1JkaicYburIwAAAQs"]
[Mon Apr 06 02:11:27.398754 2026] [:error] [pid 51580:tid 51659] [client 20.19.187.50:28122] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/n.php"] [unique_id "adKlz1NFl1NiyNgNZAlPRAAAAFQ"]
[Mon Apr 06 02:11:28.189394 2026] [:error] [pid 51581:tid 51687] [client 20.19.187.50:7886] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/n.php"] [unique_id "adKl0N4k74fhQLPUy7FW5AAAAJI"]
[Mon Apr 06 02:11:28.793471 2026] [:error] [pid 51581:tid 51688] [client 20.19.187.50:27937] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "adKl0N4k74fhQLPUy7FW6AAAAJM"]
[Mon Apr 06 02:11:29.760844 2026] [:error] [pid 51580:tid 51646] [client 20.19.187.50:44826] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "adKl0VNFl1NiyNgNZAlPSgAAAEc"]
[Mon Apr 06 02:11:30.506055 2026] [:error] [pid 51753:tid 51826] [client 20.19.187.50:44190] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "adKl0q3pmp1JkaicYburMQAAAQ8"]
[Mon Apr 06 02:11:31.146830 2026] [:error] [pid 51753:tid 51830] [client 20.19.187.50:18156] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "adKl063pmp1JkaicYburNwAAARM"]
[Mon Apr 06 02:11:31.775682 2026] [:error] [pid 51753:tid 51826] [client 20.19.187.50:7911] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "adKl063pmp1JkaicYburPwAAAQ8"]
[Mon Apr 06 02:11:32.561360 2026] [:error] [pid 51580:tid 51652] [client 20.19.187.50:18112] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "adKl1FNFl1NiyNgNZAlPTAAAAE0"]
[Mon Apr 06 02:11:33.108836 2026] [:error] [pid 51580:tid 51659] [client 20.19.187.50:27951] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "adKl1VNFl1NiyNgNZAlPTwAAAFQ"]
[Mon Apr 06 02:11:33.800668 2026] [:error] [pid 51753:tid 51812] [client 20.19.187.50:44192] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "adKl1a3pmp1JkaicYburRwAAAQE"]
[Mon Apr 06 02:11:34.443917 2026] [:error] [pid 51581:tid 51686] [client 20.19.187.50:3736] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/r4f_1.php"] [unique_id "adKl1t4k74fhQLPUy7FW-AAAAJE"]
[Mon Apr 06 02:11:35.731391 2026] [:error] [pid 51753:tid 51832] [client 20.19.187.50:3545] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/r4f_1.php"] [unique_id "adKl163pmp1JkaicYburTwAAARU"]
[Mon Apr 06 02:11:36.749738 2026] [:error] [pid 51753:tid 51818] [client 20.19.187.50:57285] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/r4f_1.php"] [unique_id "adKl2K3pmp1JkaicYburUwAAAQc"]
[Mon Apr 06 02:11:37.273497 2026] [:error] [pid 51584:tid 51718] [client 20.19.187.50:3714] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/r4f_1.php"] [unique_id "adKl2cZ4qY_GoNCPARA-KwAAANU"]
[Mon Apr 06 02:11:37.875028 2026] [:error] [pid 51580:tid 51639] [client 20.19.187.50:18134] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "adKl2VNFl1NiyNgNZAlPVwAAAEA"]
[Mon Apr 06 02:11:38.821310 2026] [:error] [pid 51580:tid 51656] [client 20.19.187.50:7889] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "adKl2lNFl1NiyNgNZAlPWgAAAFE"]
[Mon Apr 06 02:11:39.766533 2026] [:error] [pid 51581:tid 51694] [client 20.19.187.50:27918] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "adKl294k74fhQLPUy7FXBwAAAJg"]
[Mon Apr 06 02:11:40.805144 2026] [:error] [pid 51584:tid 51698] [client 20.19.187.50:3573] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/wp-is.php"] [unique_id "adKl3MZ4qY_GoNCPARA-OAAAAME"]
[Mon Apr 06 02:11:41.875982 2026] [:error] [pid 51753:tid 51816] [client 20.19.187.50:44840] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class.php"] [unique_id "adKl3a3pmp1JkaicYburYAAAAQU"]
[Mon Apr 06 02:11:43.783940 2026] [:error] [pid 51584:tid 51707] [client 20.19.187.50:8669] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class.php"] [unique_id "adKl38Z4qY_GoNCPARA-QAAAAMo"]
[Mon Apr 06 02:11:44.748989 2026] [:error] [pid 51581:tid 51669] [client 20.19.187.50:3729] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class.php"] [unique_id "adKl4N4k74fhQLPUy7FXDQAAAIA"]
[Mon Apr 06 02:11:45.713047 2026] [:error] [pid 51753:tid 51815] [client 20.19.187.50:18114] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class.php"] [unique_id "adKl4a3pmp1JkaicYburcAAAAQQ"]
[Mon Apr 06 02:11:46.286619 2026] [:error] [pid 51581:tid 51680] [client 20.19.187.50:28102] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bless11.php"] [unique_id "adKl4t4k74fhQLPUy7FXEAAAAIs"]
[Mon Apr 06 02:11:46.968137 2026] [:error] [pid 51580:tid 51643] [client 20.19.187.50:18158] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bless11.php"] [unique_id "adKl4lNFl1NiyNgNZAlPegAAAEQ"]
[Mon Apr 06 02:11:47.660406 2026] [:error] [pid 51581:tid 51685] [client 20.19.187.50:38897] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bless11.php"] [unique_id "adKl494k74fhQLPUy7FXEgAAAJA"]
[Mon Apr 06 02:11:48.305740 2026] [:error] [pid 51580:tid 51645] [client 20.19.187.50:3782] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bless11.php"] [unique_id "adKl5FNFl1NiyNgNZAlPgQAAAEY"]
[Mon Apr 06 02:11:49.084955 2026] [:error] [pid 51584:tid 51703] [client 20.19.187.50:3543] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/o.php"] [unique_id "adKl5cZ4qY_GoNCPARA-UQAAAMY"]
[Mon Apr 06 02:11:49.741007 2026] [:error] [pid 51581:tid 51683] [client 20.19.187.50:18141] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/o.php"] [unique_id "adKl5d4k74fhQLPUy7FXGAAAAI4"]
[Mon Apr 06 02:11:50.680961 2026] [:error] [pid 51753:tid 51836] [client 20.19.187.50:44807] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/o.php"] [unique_id "adKl5q3pmp1JkaicYburewAAARg"]
[Mon Apr 06 02:11:51.607688 2026] [:error] [pid 51580:tid 51648] [client 20.19.187.50:7895] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/o.php"] [unique_id "adKl51NFl1NiyNgNZAlPiQAAAEk"]
[Mon Apr 06 02:11:52.646889 2026] [:error] [pid 51581:tid 51682] [client 20.19.187.50:57312] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a.php"] [unique_id "adKl6N4k74fhQLPUy7FXHwAAAI0"]
[Mon Apr 06 02:11:53.853265 2026] [:error] [pid 51753:tid 51836] [client 20.19.187.50:12163] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a.php"] [unique_id "adKl6a3pmp1JkaicYburhQAAARg"]
[Mon Apr 06 02:11:54.772817 2026] [:error] [pid 51581:tid 51669] [client 20.19.187.50:13772] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a.php"] [unique_id "adKl6t4k74fhQLPUy7FXJwAAAIA"]
[Mon Apr 06 02:11:55.735899 2026] [:error] [pid 51753:tid 51828] [client 20.19.187.50:13806] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a.php"] [unique_id "adKl663pmp1JkaicYburkQAAARE"]
[Mon Apr 06 02:11:57.206930 2026] [:error] [pid 51580:tid 51644] [client 20.19.187.50:49234] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/system_log.php"] [unique_id "adKl7VNFl1NiyNgNZAlPkAAAAEU"]
[Mon Apr 06 02:11:58.087954 2026] [:error] [pid 51753:tid 51812] [client 20.19.187.50:49223] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/system_log.php"] [unique_id "adKl7q3pmp1JkaicYburnQAAAQE"]
[Mon Apr 06 02:11:59.485319 2026] [:error] [pid 51753:tid 51825] [client 20.19.187.50:52778] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/system_log.php"] [unique_id "adKl763pmp1JkaicYburpgAAAQ4"]
[Mon Apr 06 02:12:01.152291 2026] [:error] [pid 51580:tid 51651] [client 20.19.187.50:12210] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/system_log.php"] [unique_id "adKl8VNFl1NiyNgNZAlPmgAAAEw"]
[Mon Apr 06 02:12:02.982128 2026] [:error] [pid 51580:tid 51661] [client 20.19.187.50:49247] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "adKl8lNFl1NiyNgNZAlPoAAAAFY"]
[Mon Apr 06 02:12:04.073735 2026] [:error] [pid 51753:tid 51820] [client 20.19.187.50:52741] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "adKl9K3pmp1JkaicYburtAAAAQk"]
[Mon Apr 06 02:12:05.080433 2026] [:error] [pid 51753:tid 51821] [client 20.19.187.50:52791] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "adKl9a3pmp1JkaicYburugAAAQo"]
[Mon Apr 06 02:12:07.468470 2026] [:error] [pid 51580:tid 51646] [client 20.19.187.50:57205] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/ssd/sallu.php"] [unique_id "adKl91NFl1NiyNgNZAlPtAAAAEc"]
[Mon Apr 06 02:12:08.748385 2026] [:error] [pid 51580:tid 51651] [client 20.19.187.50:27530] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "adKl-FNFl1NiyNgNZAlPuQAAAEw"]
[Mon Apr 06 02:12:09.802703 2026] [:error] [pid 51753:tid 51818] [client 20.19.187.50:38908] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "adKl-a3pmp1JkaicYburzAAAAQc"]
[Mon Apr 06 02:12:10.923802 2026] [:error] [pid 51580:tid 51646] [client 20.19.187.50:60997] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "adKl-lNFl1NiyNgNZAlPxwAAAEc"]
[Mon Apr 06 02:12:11.733939 2026] [:error] [pid 51584:tid 51714] [client 20.19.187.50:3783] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "adKl-8Z4qY_GoNCPARA-fwAAANE"]
[Mon Apr 06 02:12:12.517456 2026] [:error] [pid 51753:tid 51820] [client 20.19.187.50:27531] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "adKl_K3pmp1JkaicYbur1QAAAQk"]
[Mon Apr 06 02:12:13.124524 2026] [:error] [pid 51753:tid 51822] [client 20.19.187.50:57174] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "adKl_a3pmp1JkaicYbur1wAAAQs"]
[Mon Apr 06 02:12:14.335581 2026] [:error] [pid 51584:tid 51715] [client 20.19.187.50:38907] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "adKl_sZ4qY_GoNCPARA-lQAAANI"]
[Mon Apr 06 02:12:15.430506 2026] [:error] [pid 51580:tid 51655] [client 20.19.187.50:38503] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "adKl_1NFl1NiyNgNZAlP1wAAAFA"]
[Mon Apr 06 02:12:16.444422 2026] [:error] [pid 51581:tid 51680] [client 20.19.187.50:41155] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/css.php"] [unique_id "adKmAN4k74fhQLPUy7FXPAAAAIs"]
[Mon Apr 06 02:12:17.977853 2026] [:error] [pid 51580:tid 51651] [client 20.19.187.50:8153] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/css.php"] [unique_id "adKmAVNFl1NiyNgNZAlP4QAAAEw"]
[Mon Apr 06 02:12:19.934000 2026] [:error] [pid 51584:tid 51697] [client 20.19.187.50:61037] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/css.php"] [unique_id "adKmA8Z4qY_GoNCPARA-owAAAMA"]
[Mon Apr 06 02:12:30.630323 2026] [:error] [pid 51581:tid 51688] [client 20.19.187.50:41771] [client 20.19.187.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "adKmDt4k74fhQLPUy7FXcgAAAJM"]
[Mon Apr 06 02:12:36.582597 2026] [:error] [pid 51580:tid 51656] [client 20.19.187.50:8147] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "adKmFFNFl1NiyNgNZAlQKwAAAFE"]
[Mon Apr 06 02:12:39.978237 2026] [:error] [pid 51581:tid 51684] [client 20.19.187.50:40998] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "adKmF94k74fhQLPUy7FXhQAAAI8"]
[Mon Apr 06 02:12:41.829865 2026] [:error] [pid 51581:tid 51674] [client 20.19.187.50:8932] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "adKmGd4k74fhQLPUy7FXiwAAAIU"]
[Mon Apr 06 02:12:44.677906 2026] [:error] [pid 51580:tid 51648] [client 20.19.187.50:57733] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "adKmHFNFl1NiyNgNZAlQRQAAAEk"]
[Mon Apr 06 02:12:52.742250 2026] [:error] [pid 51584:tid 51703] [client 20.19.187.50:9680] [client 20.19.187.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "adKmJMZ4qY_GoNCPARA-7QAAAMY"]
[Mon Apr 06 02:13:03.158978 2026] [:error] [pid 51584:tid 51705] [client 20.19.187.50:57196] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/123.php"] [unique_id "adKmL8Z4qY_GoNCPARA_DgAAAMg"]
[Mon Apr 06 02:13:06.529123 2026] [:error] [pid 51580:tid 51646] [client 20.19.187.50:58440] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/123.php"] [unique_id "adKmMlNFl1NiyNgNZAlQmgAAAEc"]
[Mon Apr 06 02:13:17.603065 2026] [:error] [pid 51584:tid 51721] [client 20.19.187.50:8189] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "adKmPcZ4qY_GoNCPARA_MgAAANg"]
[Mon Apr 06 02:13:27.096513 2026] [:error] [pid 51584:tid 51700] [client 20.19.187.50:61870] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "adKmR8Z4qY_GoNCPARA_TwAAAMM"]
[Mon Apr 06 02:14:31.706591 2026] [:error] [pid 51581:tid 51674] [client 20.19.187.50:13360] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-gr.php"] [unique_id "adKmh94k74fhQLPUy7FY2gAAAIU"]
[Mon Apr 06 02:14:32.283657 2026] [:error] [pid 51580:tid 51659] [client 20.19.187.50:39966] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-gr.php"] [unique_id "adKmiFNFl1NiyNgNZAlSNgAAAFQ"]
[Mon Apr 06 02:14:33.009123 2026] [:error] [pid 51580:tid 51651] [client 20.19.187.50:59657] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-gr.php"] [unique_id "adKmiVNFl1NiyNgNZAlSOwAAAEw"]
[Mon Apr 06 02:14:33.587921 2026] [:error] [pid 51753:tid 51822] [client 20.19.187.50:10070] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-gr.php"] [unique_id "adKmia3pmp1JkaicYbuuVAAAAQs"]
[Mon Apr 06 02:14:34.136548 2026] [:error] [pid 51753:tid 51834] [client 20.19.187.50:39948] [client 20.19.187.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "adKmiq3pmp1JkaicYbuuVwAAARY"]
[Mon Apr 06 02:14:34.643794 2026] [:error] [pid 51584:tid 51717] [client 20.19.187.50:44190] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "adKmisZ4qY_GoNCPARA_5gAAANQ"]
[Mon Apr 06 02:14:35.456372 2026] [:error] [pid 51753:tid 51820] [client 20.19.187.50:12663] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "adKmi63pmp1JkaicYbuuXQAAAQk"]
[Mon Apr 06 02:14:36.005071 2026] [:error] [pid 51580:tid 51653] [client 20.19.187.50:18455] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "adKmjFNFl1NiyNgNZAlSUQAAAE4"]
[Mon Apr 06 02:14:36.514692 2026] [:error] [pid 51753:tid 51814] [client 20.19.187.50:19086] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ext.php"] [unique_id "adKmjK3pmp1JkaicYbuuXwAAAQM"]
[Mon Apr 06 02:14:37.407926 2026] [:error] [pid 51580:tid 51658] [client 20.19.187.50:39987] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ext.php"] [unique_id "adKmjVNFl1NiyNgNZAlSWQAAAFM"]
[Mon Apr 06 02:14:38.014440 2026] [:error] [pid 51753:tid 51819] [client 20.19.187.50:12616] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ext.php"] [unique_id "adKmjq3pmp1JkaicYbuuagAAAQg"]
[Mon Apr 06 02:14:38.792836 2026] [:error] [pid 51753:tid 51822] [client 20.19.187.50:57396] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ext.php"] [unique_id "adKmjq3pmp1JkaicYbuucgAAAQs"]
[Mon Apr 06 02:14:39.643927 2026] [:error] [pid 51584:tid 51702] [client 20.19.187.50:18436] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about3.php"] [unique_id "adKmj8Z4qY_GoNCPARA_7wAAAMU"]
[Mon Apr 06 02:14:40.737817 2026] [:error] [pid 51584:tid 51700] [client 20.19.187.50:19083] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about3.php"] [unique_id "adKmkMZ4qY_GoNCPARA_-QAAAMM"]
[Mon Apr 06 02:14:41.681505 2026] [:error] [pid 51580:tid 51657] [client 20.19.187.50:10045] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about3.php"] [unique_id "adKmkVNFl1NiyNgNZAlSaAAAAFI"]
[Mon Apr 06 02:14:42.755738 2026] [:error] [pid 51580:tid 51660] [client 20.19.187.50:18440] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about3.php"] [unique_id "adKmklNFl1NiyNgNZAlSbgAAAFU"]
[Mon Apr 06 02:14:43.736946 2026] [:error] [pid 51753:tid 51825] [client 20.19.187.50:59702] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "adKmk63pmp1JkaicYbuuiQAAAQ4"]
[Mon Apr 06 02:14:44.325926 2026] [:error] [pid 51580:tid 51650] [client 20.19.187.50:57371] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "adKmlFNFl1NiyNgNZAlSdAAAAEs"]
[Mon Apr 06 02:14:44.934178 2026] [:error] [pid 51580:tid 51651] [client 20.19.187.50:60955] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "adKmlFNFl1NiyNgNZAlSeQAAAEw"]
[Mon Apr 06 02:14:45.471603 2026] [:error] [pid 51753:tid 51831] [client 20.19.187.50:39960] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "adKmla3pmp1JkaicYbuunAAAARQ"]
[Mon Apr 06 02:14:45.962143 2026] [:error] [pid 51753:tid 51813] [client 20.19.187.50:4093] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zwso.php"] [unique_id "adKmla3pmp1JkaicYbuuoAAAAQI"]
[Mon Apr 06 02:14:46.484880 2026] [:error] [pid 51581:tid 51678] [client 20.19.187.50:4050] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zwso.php"] [unique_id "adKmlt4k74fhQLPUy7FY-gAAAIk"]
[Mon Apr 06 02:14:47.165554 2026] [:error] [pid 51753:tid 51829] [client 20.19.187.50:28473] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zwso.php"] [unique_id "adKml63pmp1JkaicYbuurQAAARI"]
[Mon Apr 06 02:14:48.088719 2026] [:error] [pid 51580:tid 51648] [client 20.19.187.50:10043] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zwso.php"] [unique_id "adKmmFNFl1NiyNgNZAlSgwAAAEk"]
[Mon Apr 06 02:14:48.636637 2026] [:error] [pid 51580:tid 51652] [client 20.19.187.50:12947] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "adKmmFNFl1NiyNgNZAlShgAAAE0"]
[Mon Apr 06 02:14:49.202976 2026] [:error] [pid 51584:tid 51700] [client 20.19.187.50:28432] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "adKmmcZ4qY_GoNCPARBACAAAAMM"]
[Mon Apr 06 02:14:49.781546 2026] [:error] [pid 51580:tid 51661] [client 20.19.187.50:11027] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "adKmmVNFl1NiyNgNZAlSigAAAFY"]
[Mon Apr 06 02:14:50.478481 2026] [:error] [pid 51580:tid 51660] [client 20.19.187.50:28451] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "adKmmlNFl1NiyNgNZAlSjgAAAFU"]
[Mon Apr 06 02:14:51.013697 2026] [:error] [pid 51581:tid 51670] [client 20.19.187.50:57381] [client 20.19.187.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "adKmm94k74fhQLPUy7FZCwAAAIE"]
[Mon Apr 06 02:14:51.820598 2026] [:error] [pid 51580:tid 51647] [client 20.19.187.50:57387] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ahax.php"] [unique_id "adKmm1NFl1NiyNgNZAlSlgAAAEg"]
[Mon Apr 06 02:14:52.853878 2026] [:error] [pid 51753:tid 51826] [client 20.19.187.50:28452] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ahax.php"] [unique_id "adKmnK3pmp1JkaicYbuu0QAAAQ8"]
[Mon Apr 06 02:14:53.455731 2026] [:error] [pid 51753:tid 51822] [client 20.19.187.50:57390] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ahax.php"] [unique_id "adKmna3pmp1JkaicYbuu1QAAAQs"]
[Mon Apr 06 02:14:54.415945 2026] [:error] [pid 51753:tid 51827] [client 20.19.187.50:12654] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/g.php"] [unique_id "adKmnq3pmp1JkaicYbuu3wAAARA"]
[Mon Apr 06 02:14:55.072644 2026] [:error] [pid 51584:tid 51706] [client 20.19.187.50:12545] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/g.php"] [unique_id "adKmn8Z4qY_GoNCPARBAEAAAAMk"]
[Mon Apr 06 02:14:55.588319 2026] [:error] [pid 51581:tid 51681] [client 20.19.187.50:59692] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/g.php"] [unique_id "adKmn94k74fhQLPUy7FZGAAAAIw"]
[Mon Apr 06 02:14:56.095587 2026] [:error] [pid 51581:tid 51672] [client 20.19.187.50:11017] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/g.php"] [unique_id "adKmoN4k74fhQLPUy7FZGgAAAIM"]
[Mon Apr 06 02:14:56.655514 2026] [:error] [pid 51580:tid 51655] [client 20.19.187.50:12589] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "adKmoFNFl1NiyNgNZAlSpwAAAFA"]
[Mon Apr 06 02:14:57.160573 2026] [:error] [pid 51753:tid 51823] [client 20.19.187.50:11045] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "adKmoa3pmp1JkaicYbuu8gAAAQw"]
[Mon Apr 06 02:14:57.811628 2026] [:error] [pid 51584:tid 51712] [client 20.19.187.50:10024] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "adKmocZ4qY_GoNCPARBAEwAAAM8"]
[Mon Apr 06 02:14:58.588024 2026] [:error] [pid 51584:tid 51702] [client 20.19.187.50:43569] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/0x.php"] [unique_id "adKmosZ4qY_GoNCPARBAGAAAAMU"]
[Mon Apr 06 02:14:59.210379 2026] [:error] [pid 51584:tid 51703] [client 20.19.187.50:12991] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/app/webroot/filemanager.php"] [unique_id "adKmo8Z4qY_GoNCPARBAHwAAAMY"]
[Mon Apr 06 02:14:59.788348 2026] [:error] [pid 51753:tid 51821] [client 20.19.187.50:28469] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/app/webroot/filemanager.php"] [unique_id "adKmo63pmp1JkaicYbuu_gAAAQo"]
[Mon Apr 06 02:15:00.612618 2026] [:error] [pid 51581:tid 51671] [client 20.19.187.50:12977] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/app/webroot/filemanager.php"] [unique_id "adKmpN4k74fhQLPUy7FZIgAAAII"]
[Mon Apr 06 02:15:01.277137 2026] [:error] [pid 51753:tid 51818] [client 20.19.187.50:39373] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/app/webroot/filemanager.php"] [unique_id "adKmpa3pmp1JkaicYbuvCgAAAQc"]
[Mon Apr 06 02:15:01.890829 2026] [:error] [pid 51753:tid 51815] [client 20.19.187.50:28440] [client 20.19.187.50] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "adKmpa3pmp1JkaicYbuvDgAAAQQ"]
[Mon Apr 06 02:15:02.659289 2026] [:error] [pid 51580:tid 51649] [client 20.19.187.50:60970] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/k.php"] [unique_id "adKmplNFl1NiyNgNZAlSugAAAEo"]
[Mon Apr 06 02:15:03.702420 2026] [:error] [pid 51753:tid 51830] [client 20.19.187.50:49152] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/k.php"] [unique_id "adKmp63pmp1JkaicYbuvFwAAARM"]
[Mon Apr 06 02:15:05.061600 2026] [:error] [pid 51753:tid 51835] [client 20.19.187.50:12935] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/k.php"] [unique_id "adKmqa3pmp1JkaicYbuvIwAAARc"]
[Mon Apr 06 02:15:06.386985 2026] [:error] [pid 51580:tid 51657] [client 20.19.187.50:44917] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/k.php"] [unique_id "adKmqlNFl1NiyNgNZAlSvgAAAFI"]
[Mon Apr 06 02:15:08.230341 2026] [:error] [pid 51581:tid 51677] [client 20.19.187.50:57377] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "adKmrN4k74fhQLPUy7FZMAAAAIg"]
[Mon Apr 06 02:15:10.047916 2026] [:error] [pid 51580:tid 51660] [client 20.19.187.50:44926] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "adKmrlNFl1NiyNgNZAlS0QAAAFU"]
[Mon Apr 06 02:15:11.075058 2026] [:error] [pid 51580:tid 51647] [client 20.19.187.50:60933] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "adKmr1NFl1NiyNgNZAlS3AAAAEg"]
[Mon Apr 06 02:15:12.217026 2026] [:error] [pid 51580:tid 51658] [client 20.19.187.50:59689] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "adKmsFNFl1NiyNgNZAlS3wAAAFM"]
[Mon Apr 06 02:15:15.069927 2026] [:error] [pid 51581:tid 51684] [client 20.19.187.50:12955] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/filemanager.php"] [unique_id "adKms94k74fhQLPUy7FZVQAAAI8"]
[Mon Apr 06 02:15:17.760632 2026] [:error] [pid 51753:tid 51816] [client 20.19.187.50:44902] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/filemanager.php"] [unique_id "adKmta3pmp1JkaicYbuvWgAAAQU"]
[Mon Apr 06 02:15:19.189278 2026] [:error] [pid 51753:tid 51825] [client 20.19.187.50:41810] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/filemanager.php"] [unique_id "adKmt63pmp1JkaicYbuvZAAAAQ4"]
[Mon Apr 06 02:15:20.204211 2026] [:error] [pid 51753:tid 51824] [client 20.19.187.50:44919] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/filemanager.php"] [unique_id "adKmuK3pmp1JkaicYbuvaQAAAQ0"]
[Mon Apr 06 02:15:21.174565 2026] [:error] [pid 51753:tid 51827] [client 20.19.187.50:28447] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/voga/sallu.php"] [unique_id "adKmua3pmp1JkaicYbuvbQAAARA"]
[Mon Apr 06 02:15:22.139968 2026] [:error] [pid 51753:tid 51820] [client 20.19.187.50:51540] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/voga/sallu.php"] [unique_id "adKmuq3pmp1JkaicYbuvcwAAAQk"]
[Mon Apr 06 02:15:23.121540 2026] [:error] [pid 51581:tid 51676] [client 20.19.187.50:39387] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/voga/sallu.php"] [unique_id "adKmu94k74fhQLPUy7FZcAAAAIc"]
[Mon Apr 06 02:15:24.084363 2026] [:error] [pid 51581:tid 51682] [client 20.19.187.50:3272] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/voga/sallu.php"] [unique_id "adKmvN4k74fhQLPUy7FZdQAAAI0"]
[Mon Apr 06 02:15:24.765890 2026] [:error] [pid 51580:tid 51655] [client 20.19.187.50:41150] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dlu.php"] [unique_id "adKmvFNFl1NiyNgNZAlTGgAAAFA"]
[Mon Apr 06 02:15:25.400561 2026] [:error] [pid 51580:tid 51641] [client 20.19.187.50:8322] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dlu.php"] [unique_id "adKmvVNFl1NiyNgNZAlTHQAAAEI"]
[Mon Apr 06 02:15:26.124846 2026] [:error] [pid 51580:tid 51659] [client 20.19.187.50:41835] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dlu.php"] [unique_id "adKmvlNFl1NiyNgNZAlTIAAAAFQ"]
[Mon Apr 06 02:15:26.698532 2026] [:error] [pid 51584:tid 51707] [client 20.19.187.50:10785] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dlu.php"] [unique_id "adKmvsZ4qY_GoNCPARBApQAAAMo"]
[Mon Apr 06 02:15:27.267169 2026] [:error] [pid 51581:tid 51669] [client 20.19.187.50:12582] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/555.php"] [unique_id "adKmv94k74fhQLPUy7FZfwAAAIA"]
[Mon Apr 06 02:15:28.231624 2026] [:error] [pid 51753:tid 51819] [client 20.19.187.50:39408] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/555.php"] [unique_id "adKmwK3pmp1JkaicYbuvkQAAAQg"]
[Mon Apr 06 02:15:28.838836 2026] [:error] [pid 51753:tid 51814] [client 20.19.187.50:48597] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/555.php"] [unique_id "adKmwK3pmp1JkaicYbuvlQAAAQM"]
[Mon Apr 06 02:15:30.077016 2026] [:error] [pid 51580:tid 51653] [client 20.19.187.50:10761] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/555.php"] [unique_id "adKmwlNFl1NiyNgNZAlTKAAAAE4"]
[Mon Apr 06 02:15:38.151572 2026] [:error] [pid 51580:tid 51659] [client 20.19.187.50:51567] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "adKmylNFl1NiyNgNZAlTZwAAAFQ"]
[Mon Apr 06 02:15:38.943250 2026] [:error] [pid 51753:tid 51829] [client 20.19.187.50:48580] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "adKmyq3pmp1JkaicYbuv2QAAARI"]
[Mon Apr 06 02:15:40.006319 2026] [:error] [pid 51584:tid 51715] [client 20.19.187.50:12946] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "adKmzMZ4qY_GoNCPARBAxgAAANI"]
[Mon Apr 06 02:15:40.722910 2026] [:error] [pid 51753:tid 51815] [client 20.19.187.50:60982] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "adKmzK3pmp1JkaicYbuv3wAAAQQ"]
[Mon Apr 06 02:15:41.713176 2026] [:error] [pid 51580:tid 51662] [client 20.19.187.50:48606] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "adKmzVNFl1NiyNgNZAlTfQAAAFc"]
[Mon Apr 06 02:15:42.589169 2026] [:error] [pid 51580:tid 51649] [client 20.19.187.50:12978] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "adKmzlNFl1NiyNgNZAlTgwAAAEo"]
[Mon Apr 06 02:15:43.498853 2026] [:error] [pid 51581:tid 51671] [client 20.19.187.50:14911] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "adKmz94k74fhQLPUy7FZswAAAII"]
[Mon Apr 06 02:15:44.805402 2026] [:error] [pid 51581:tid 51677] [client 20.19.187.50:49206] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "adKm0N4k74fhQLPUy7FZvQAAAIg"]
[Mon Apr 06 02:15:50.360760 2026] [:error] [pid 51581:tid 51679] [client 20.19.187.50:51583] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "adKm1t4k74fhQLPUy7FZ0AAAAIo"]
[Mon Apr 06 02:16:02.408985 2026] [:error] [pid 51753:tid 51825] [client 20.19.187.50:12971] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/manager.php"] [unique_id "adKm4q3pmp1JkaicYbuwTAAAAQ4"]
[Mon Apr 06 02:16:03.505655 2026] [:error] [pid 51753:tid 51826] [client 20.19.187.50:45506] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/manager.php"] [unique_id "adKm463pmp1JkaicYbuwUAAAAQ8"]
[Mon Apr 06 02:16:04.436649 2026] [:error] [pid 51753:tid 51820] [client 20.19.187.50:12577] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/manager.php"] [unique_id "adKm5K3pmp1JkaicYbuwWwAAAQk"]
[Mon Apr 06 02:16:05.061529 2026] [:error] [pid 51584:tid 51711] [client 20.19.187.50:41286] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/manager.php"] [unique_id "adKm5cZ4qY_GoNCPARBA_gAAAM4"]
[Mon Apr 06 02:16:05.914510 2026] [:error] [pid 51584:tid 51703] [client 20.19.187.50:51520] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "adKm5cZ4qY_GoNCPARBBAgAAAMY"]
[Mon Apr 06 02:16:06.617032 2026] [:error] [pid 51581:tid 51681] [client 20.19.187.50:44883] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "adKm5t4k74fhQLPUy7FZ3QAAAIw"]
[Mon Apr 06 02:16:07.635310 2026] [:error] [pid 51584:tid 51712] [client 20.19.187.50:51562] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "adKm58Z4qY_GoNCPARBBCAAAAM8"]
[Mon Apr 06 02:16:09.064725 2026] [:error] [pid 51580:tid 51639] [client 20.19.187.50:12964] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "adKm6VNFl1NiyNgNZAlT1QAAAEA"]
[Mon Apr 06 02:16:10.907538 2026] [:error] [pid 51753:tid 51812] [client 20.19.187.50:14192] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "adKm6q3pmp1JkaicYbuwewAAAQE"]
[Mon Apr 06 02:16:13.780129 2026] [:error] [pid 51580:tid 51639] [client 20.19.187.50:12961] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "adKm7VNFl1NiyNgNZAlT4wAAAEA"]
[Mon Apr 06 02:16:17.274794 2026] [:error] [pid 51753:tid 51824] [client 20.19.187.50:12956] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "adKm8a3pmp1JkaicYbuwlQAAAQ0"]
[Mon Apr 06 02:16:20.313350 2026] [:error] [pid 51753:tid 51836] [client 20.19.187.50:47326] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "adKm9K3pmp1JkaicYbuwpgAAARg"]
[Mon Apr 06 02:16:21.525308 2026] [:error] [pid 51753:tid 51826] [client 20.19.187.50:49199] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/v2.php"] [unique_id "adKm9a3pmp1JkaicYbuwsgAAAQ8"]
[Mon Apr 06 02:16:26.984101 2026] [:error] [pid 51584:tid 51697] [client 20.19.187.50:12990] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/v2.php"] [unique_id "adKm-sZ4qY_GoNCPARBBUAAAAMA"]
[Mon Apr 06 02:16:27.758951 2026] [:error] [pid 51753:tid 51817] [client 20.19.187.50:51554] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/v2.php"] [unique_id "adKm-63pmp1JkaicYbuwyQAAAQY"]
[Mon Apr 06 02:16:28.486803 2026] [:error] [pid 51581:tid 51685] [client 20.19.187.50:16883] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/v2.php"] [unique_id "adKm_N4k74fhQLPUy7FaBAAAAJA"]
[Mon Apr 06 02:16:29.137913 2026] [:error] [pid 51580:tid 51651] [client 20.19.187.50:12982] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "adKm_VNFl1NiyNgNZAlUGwAAAEw"]
[Mon Apr 06 02:16:30.040497 2026] [:error] [pid 51584:tid 51701] [client 20.19.187.50:12968] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "adKm_sZ4qY_GoNCPARBBWwAAAMQ"]
[Mon Apr 06 02:16:31.159876 2026] [:error] [pid 51753:tid 51817] [client 20.19.187.50:3281] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "adKm_63pmp1JkaicYbuw0wAAAQY"]
[Mon Apr 06 02:16:34.171804 2026] [:error] [pid 51580:tid 51648] [client 20.19.187.50:16890] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/admin-post.php"] [unique_id "adKnAlNFl1NiyNgNZAlUKwAAAEk"]
[Mon Apr 06 02:16:54.030380 2026] [:error] [pid 51580:tid 51659] [client 20.19.187.50:49210] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "adKnFlNFl1NiyNgNZAlUhAAAAFQ"]
[Mon Apr 06 02:16:56.768304 2026] [:error] [pid 51753:tid 51831] [client 20.19.187.50:8331] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "adKnGK3pmp1JkaicYbuxWgAAARQ"]
[Mon Apr 06 02:16:57.814835 2026] [:error] [pid 51584:tid 51721] [client 20.19.187.50:46777] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "adKnGcZ4qY_GoNCPARBBtQAAANg"]
[Mon Apr 06 02:16:58.917522 2026] [:error] [pid 51581:tid 51669] [client 20.19.187.50:39418] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/index/function.php"] [unique_id "adKnGt4k74fhQLPUy7FaLAAAAIA"]
[Mon Apr 06 02:17:00.037534 2026] [:error] [pid 51580:tid 51646] [client 20.19.187.50:12933] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/NewFile.php"] [unique_id "adKnHFNFl1NiyNgNZAlUqQAAAEc"]
[Mon Apr 06 02:17:03.974936 2026] [:error] [pid 51753:tid 51831] [client 20.19.187.50:48614] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/NewFile.php"] [unique_id "adKnH63pmp1JkaicYbuxgQAAARQ"]
[Mon Apr 06 02:17:07.358660 2026] [:error] [pid 51581:tid 51680] [client 20.19.187.50:10766] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/NewFile.php"] [unique_id "adKnI94k74fhQLPUy7FaOgAAAIs"]
[Mon Apr 06 02:17:11.296967 2026] [:error] [pid 51580:tid 51654] [client 20.19.187.50:27864] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/NewFile.php"] [unique_id "adKnJ1NFl1NiyNgNZAlUzQAAAE8"]
[Mon Apr 06 02:17:18.489529 2026] [:error] [pid 51584:tid 51721] [client 20.19.187.50:27876] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "adKnLsZ4qY_GoNCPARBB-gAAANg"]
[Mon Apr 06 02:17:21.206401 2026] [:error] [pid 51753:tid 51817] [client 20.19.187.50:51548] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "adKnMa3pmp1JkaicYbuyAwAAAQY"]
[Mon Apr 06 02:17:24.270132 2026] [:error] [pid 51584:tid 51708] [client 20.19.187.50:27863] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "adKnNMZ4qY_GoNCPARBCFwAAAMs"]
[Mon Apr 06 02:17:25.609753 2026] [:error] [pid 51580:tid 51652] [client 20.19.187.50:57766] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "adKnNVNFl1NiyNgNZAlVBgAAAE0"]
[Mon Apr 06 02:17:26.752583 2026] [:error] [pid 51580:tid 51662] [client 20.19.187.50:27881] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wolv2.php"] [unique_id "adKnNlNFl1NiyNgNZAlVDAAAAFc"]
[Mon Apr 06 02:17:27.811601 2026] [:error] [pid 51581:tid 51672] [client 20.19.187.50:58478] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wolv2.php"] [unique_id "adKnN94k74fhQLPUy7FaYAAAAIM"]
[Mon Apr 06 02:17:29.808873 2026] [:error] [pid 51580:tid 51642] [client 20.19.187.50:27872] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wolv2.php"] [unique_id "adKnOVNFl1NiyNgNZAlVIwAAAEM"]
[Mon Apr 06 02:17:31.832150 2026] [:error] [pid 51584:tid 51709] [client 20.19.187.50:58696] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wolv2.php"] [unique_id "adKnO8Z4qY_GoNCPARBCKQAAAMw"]
[Mon Apr 06 02:17:33.238230 2026] [:error] [pid 51580:tid 51645] [client 20.19.187.50:4028] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/geck.php"] [unique_id "adKnPVNFl1NiyNgNZAlVOwAAAEY"]
[Mon Apr 06 02:17:35.613898 2026] [:error] [pid 51584:tid 51718] [client 20.19.187.50:12256] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/geck.php"] [unique_id "adKnP8Z4qY_GoNCPARBCRQAAANU"]
[Mon Apr 06 02:17:37.385488 2026] [:error] [pid 51580:tid 51646] [client 20.19.187.50:61838] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/geck.php"] [unique_id "adKnQVNFl1NiyNgNZAlVTgAAAEc"]
[Mon Apr 06 02:17:39.613495 2026] [:error] [pid 51581:tid 51686] [client 20.19.187.50:3368] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/geck.php"] [unique_id "adKnQ94k74fhQLPUy7FahAAAAJE"]
[Mon Apr 06 02:17:42.464596 2026] [:error] [pid 51753:tid 51834] [client 20.19.187.50:12263] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xtt.php"] [unique_id "adKnRq3pmp1JkaicYbuySwAAARY"]
[Mon Apr 06 02:17:46.061808 2026] [:error] [pid 51580:tid 51639] [client 20.19.187.50:49267] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xtt.php"] [unique_id "adKnSlNFl1NiyNgNZAlVfQAAAEA"]
[Mon Apr 06 02:17:51.906819 2026] [:error] [pid 51753:tid 51815] [client 20.19.187.50:18171] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xtt.php"] [unique_id "adKnT63pmp1JkaicYbuygAAAAQQ"]
[Mon Apr 06 02:18:13.994632 2026] [:error] [pid 51584:tid 51713] [client 20.19.187.50:17737] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cc.php"] [unique_id "adKnZcZ4qY_GoNCPARBC5QAAANA"]
[Mon Apr 06 02:18:15.047336 2026] [:error] [pid 51580:tid 51645] [client 20.19.187.50:40979] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cc.php"] [unique_id "adKnZ1NFl1NiyNgNZAlV5wAAAEY"]
[Mon Apr 06 02:18:16.252595 2026] [:error] [pid 51580:tid 51643] [client 20.19.187.50:15672] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cc.php"] [unique_id "adKnaFNFl1NiyNgNZAlV7AAAAEQ"]
[Mon Apr 06 02:18:17.541720 2026] [:error] [pid 51753:tid 51824] [client 20.19.187.50:40579] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cc.php"] [unique_id "adKnaa3pmp1JkaicYbuy7AAAAQ0"]
[Mon Apr 06 02:18:18.305624 2026] [:error] [pid 51753:tid 51835] [client 20.19.187.50:15626] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bkxzo.php"] [unique_id "adKnaq3pmp1JkaicYbuy8AAAARc"]
[Mon Apr 06 02:18:19.437617 2026] [:error] [pid 51753:tid 51829] [client 20.19.187.50:15630] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bkxzo.php"] [unique_id "adKna63pmp1JkaicYbuy-QAAARI"]
[Mon Apr 06 02:18:20.432676 2026] [:error] [pid 51581:tid 51689] [client 20.19.187.50:61113] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bkxzo.php"] [unique_id "adKnbN4k74fhQLPUy7Fa2wAAAJQ"]
[Mon Apr 06 02:18:21.244336 2026] [:error] [pid 51581:tid 51685] [client 20.19.187.50:52068] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bkxzo.php"] [unique_id "adKnbd4k74fhQLPUy7Fa5gAAAJA"]
[Mon Apr 06 02:18:22.069541 2026] [:error] [pid 51753:tid 51816] [client 20.19.187.50:60909] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lo.php"] [unique_id "adKnbq3pmp1JkaicYbuy_AAAAQU"]
[Mon Apr 06 02:18:22.714745 2026] [:error] [pid 51580:tid 51660] [client 20.19.187.50:27500] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lo.php"] [unique_id "adKnblNFl1NiyNgNZAlWAgAAAFU"]
[Mon Apr 06 02:18:23.480168 2026] [:error] [pid 51753:tid 51819] [client 20.19.187.50:13314] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lo.php"] [unique_id "adKnb63pmp1JkaicYbuzAgAAAQg"]
[Mon Apr 06 02:18:24.247823 2026] [:error] [pid 51584:tid 51719] [client 20.19.187.50:17673] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lo.php"] [unique_id "adKncMZ4qY_GoNCPARBDBAAAANY"]
[Mon Apr 06 02:18:25.108816 2026] [:error] [pid 51584:tid 51715] [client 20.19.187.50:3765] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "adKnccZ4qY_GoNCPARBDCgAAANI"]
[Mon Apr 06 02:18:26.349991 2026] [:error] [pid 51753:tid 51832] [client 20.19.187.50:3727] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "adKncq3pmp1JkaicYbuzEAAAARU"]
[Mon Apr 06 02:18:31.849801 2026] [:error] [pid 51581:tid 51686] [client 20.19.187.50:48558] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "adKnd94k74fhQLPUy7Fa8wAAAJE"]
[Mon Apr 06 02:18:43.530648 2026] [:error] [pid 51753:tid 51827] [client 20.19.187.50:7338] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "adKng63pmp1JkaicYbuzcAAAARA"]
[Mon Apr 06 02:21:34.563471 2026] [:error] [pid 51580:tid 51658] [client 20.19.187.50:7394] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file15.php"] [unique_id "adKoLlNFl1NiyNgNZAlY0wAAAFM"]
[Mon Apr 06 02:21:35.859825 2026] [:error] [pid 51581:tid 51681] [client 20.19.187.50:64616] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file15.php"] [unique_id "adKoL94k74fhQLPUy7FcQAAAAIw"]
[Mon Apr 06 02:21:36.739310 2026] [:error] [pid 51753:tid 51832] [client 20.19.187.50:7577] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file15.php"] [unique_id "adKoMK3pmp1JkaicYbu2dgAAARU"]
[Mon Apr 06 02:21:37.613454 2026] [:error] [pid 51753:tid 51818] [client 20.19.187.50:60932] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file15.php"] [unique_id "adKoMa3pmp1JkaicYbu2eQAAAQc"]
[Mon Apr 06 02:21:38.799198 2026] [:error] [pid 51584:tid 51705] [client 20.19.187.50:64597] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "adKoMsZ4qY_GoNCPARBE0gAAAMg"]
[Mon Apr 06 02:21:39.992937 2026] [:error] [pid 51580:tid 51650] [client 20.19.187.50:58116] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "adKoM1NFl1NiyNgNZAlY6QAAAEs"]
[Mon Apr 06 02:21:41.380695 2026] [:error] [pid 51584:tid 51711] [client 20.19.187.50:12592] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "adKoNcZ4qY_GoNCPARBE2QAAAM4"]
[Mon Apr 06 02:21:43.033273 2026] [:error] [pid 51580:tid 51654] [client 20.19.187.50:64580] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wsd.php"] [unique_id "adKoN1NFl1NiyNgNZAlY8wAAAE8"]
[Mon Apr 06 02:21:44.787754 2026] [:error] [pid 51580:tid 51651] [client 20.19.187.50:60982] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "adKoOFNFl1NiyNgNZAlY-QAAAEw"]
[Mon Apr 06 02:21:46.150848 2026] [:error] [pid 51581:tid 51675] [client 20.19.187.50:9656] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "adKoOt4k74fhQLPUy7FcYQAAAIY"]
[Mon Apr 06 02:21:46.920866 2026] [:error] [pid 51580:tid 51659] [client 20.19.187.50:64606] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "adKoOlNFl1NiyNgNZAlZCQAAAFQ"]
[Mon Apr 06 02:21:47.608465 2026] [:error] [pid 51753:tid 51830] [client 20.19.187.50:7566] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "adKoO63pmp1JkaicYbu2kwAAARM"]
[Mon Apr 06 02:21:48.299188 2026] [:error] [pid 51580:tid 51647] [client 20.19.187.50:7413] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/an.php"] [unique_id "adKoPFNFl1NiyNgNZAlZEAAAAEg"]
[Mon Apr 06 02:21:49.198145 2026] [:error] [pid 51580:tid 51650] [client 20.19.187.50:64590] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/an.php"] [unique_id "adKoPVNFl1NiyNgNZAlZEwAAAEs"]
[Mon Apr 06 02:21:50.005527 2026] [:error] [pid 51584:tid 51719] [client 20.19.187.50:8603] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/an.php"] [unique_id "adKoPsZ4qY_GoNCPARBE5AAAANY"]
[Mon Apr 06 02:21:51.005159 2026] [:error] [pid 51584:tid 51718] [client 20.19.187.50:14203] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/an.php"] [unique_id "adKoP8Z4qY_GoNCPARBE5QAAANU"]
[Mon Apr 06 02:21:52.351319 2026] [:error] [pid 51753:tid 51812] [client 20.19.187.50:12553] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/404.php"] [unique_id "adKoQK3pmp1JkaicYbu2pQAAAQE"]
[Mon Apr 06 02:21:55.006901 2026] [:error] [pid 51753:tid 51815] [client 20.19.187.50:59618] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/404.php"] [unique_id "adKoQ63pmp1JkaicYbu2qgAAAQQ"]
[Mon Apr 06 02:22:02.126109 2026] [:error] [pid 51581:tid 51677] [client 20.19.187.50:58165] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/404.php"] [unique_id "adKoSt4k74fhQLPUy7FcgQAAAIg"]
[Mon Apr 06 02:22:04.927806 2026] [:error] [pid 51753:tid 51818] [client 20.19.187.50:9603] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/404.php"] [unique_id "adKoTK3pmp1JkaicYbu23AAAAQc"]
[Mon Apr 06 02:22:05.873279 2026] [:error] [pid 51753:tid 51829] [client 20.19.187.50:60949] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lol.php"] [unique_id "adKoTa3pmp1JkaicYbu25QAAARI"]
[Mon Apr 06 02:22:07.186574 2026] [:error] [pid 51753:tid 51814] [client 20.19.187.50:59635] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lol.php"] [unique_id "adKoT63pmp1JkaicYbu28AAAAQM"]
[Mon Apr 06 02:22:09.644507 2026] [:error] [pid 51580:tid 51659] [client 20.19.187.50:16487] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lol.php"] [unique_id "adKoUVNFl1NiyNgNZAlZQwAAAFQ"]
[Mon Apr 06 02:22:10.419845 2026] [:error] [pid 51580:tid 51649] [client 20.19.187.50:7398] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lol.php"] [unique_id "adKoUlNFl1NiyNgNZAlZRQAAAEo"]
[Mon Apr 06 02:22:11.389091 2026] [:error] [pid 51584:tid 51698] [client 20.19.187.50:7421] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/radio.php"] [unique_id "adKoU8Z4qY_GoNCPARBFBQAAAME"]
[Mon Apr 06 02:22:12.618278 2026] [:error] [pid 51753:tid 51836] [client 20.19.187.50:16494] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/radio.php"] [unique_id "adKoVK3pmp1JkaicYbu3EQAAARg"]
[Mon Apr 06 02:22:13.447712 2026] [:error] [pid 51753:tid 51812] [client 20.19.187.50:60945] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/radio.php"] [unique_id "adKoVa3pmp1JkaicYbu3FAAAAQE"]
[Mon Apr 06 02:22:14.419284 2026] [:error] [pid 51580:tid 51641] [client 20.19.187.50:59595] [client 20.19.187.50] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/radio.php"] [unique_id "adKoVlNFl1NiyNgNZAlZVQAAAEI"]
[Mon Apr 06 03:09:26.443445 2026] [:error] [pid 51581:tid 51681] [client 209.38.46.97:55617] [client 209.38.46.97] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 209.38.46.97, incrementing ddos counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "adKzZt4k74fhQLPUy7F0PAAAAIw"]
[Mon Apr 06 03:09:27.739092 2026] [:error] [pid 51581:tid 51673] [client 209.38.46.97:55617] [client 209.38.46.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "adKzZ94k74fhQLPUy7F0SAAAAIQ"]
[Mon Apr 06 03:09:28.735571 2026] [:error] [pid 51580:tid 51645] [client 209.38.46.97:60762] [client 209.38.46.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "adKzaFNFl1NiyNgNZAl9AAAAAEY"]
[Mon Apr 06 03:09:29.730997 2026] [:error] [pid 51753:tid 51817] [client 209.38.46.97:57037] [client 209.38.46.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "adKzaa3pmp1JkaicYbvpsQAAAQY"]
[Mon Apr 06 03:09:30.730265 2026] [:error] [pid 51580:tid 51653] [client 209.38.46.97:58884] [client 209.38.46.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "adKzalNFl1NiyNgNZAl9CQAAAE4"]
[Mon Apr 06 03:09:31.730517 2026] [:error] [pid 51753:tid 51823] [client 209.38.46.97:52807] [client 209.38.46.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "adKza63pmp1JkaicYbvpugAAAQw"]
[Mon Apr 06 03:09:32.728704 2026] [:error] [pid 51581:tid 51671] [client 209.38.46.97:51319] [client 209.38.46.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "adKzbN4k74fhQLPUy7F0WwAAAII"]
[Mon Apr 06 03:09:33.726620 2026] [:error] [pid 51580:tid 51644] [client 209.38.46.97:52392] [client 209.38.46.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "adKzbVNFl1NiyNgNZAl9GQAAAEU"]
[Mon Apr 06 03:09:34.723732 2026] [:error] [pid 51753:tid 51814] [client 209.38.46.97:63057] [client 209.38.46.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "adKzbq3pmp1JkaicYbvpywAAAQM"]
[Mon Apr 06 03:09:35.724612 2026] [:error] [pid 51753:tid 51826] [client 209.38.46.97:53946] [client 209.38.46.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "adKzb63pmp1JkaicYbvp0QAAAQ8"]
[Mon Apr 06 03:09:36.728888 2026] [:error] [pid 51581:tid 51670] [client 209.38.46.97:57136] [client 209.38.46.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "adKzcN4k74fhQLPUy7F0ZAAAAIE"]
[Mon Apr 06 03:09:37.727160 2026] [:error] [pid 51753:tid 51825] [client 209.38.46.97:60911] [client 209.38.46.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "adKzca3pmp1JkaicYbvp5QAAAQ4"]
[Mon Apr 06 03:09:38.727045 2026] [:error] [pid 51581:tid 51694] [client 209.38.46.97:53737] [client 209.38.46.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "adKzct4k74fhQLPUy7F0ZQAAAJg"]
[Mon Apr 06 03:09:39.728941 2026] [:error] [pid 51753:tid 51815] [client 209.38.46.97:64905] [client 209.38.46.97] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "adKzc63pmp1JkaicYbvp7QAAAQQ"]
[Mon Apr 06 19:29:13.531478 2026] [:error] [pid 35688:tid 35753] [client 62.197.144.100:40410] [client 62.197.144.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "adOZCeZ85qg4jLsRpQyNqAAAAIM"]
[Mon Apr 06 19:29:14.351960 2026] [:error] [pid 9442:tid 9468] [client 62.197.144.100:40422] [client 62.197.144.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "adOZCkPsNnAJTnmz6samjQAAARg"]
[Mon Apr 06 19:29:15.180926 2026] [:error] [pid 35688:tid 35760] [client 62.197.144.100:40436] [client 62.197.144.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "adOZC-Z85qg4jLsRpQyNsAAAAIo"]
[Mon Apr 06 19:29:16.008995 2026] [:error] [pid 9442:tid 9449] [client 62.197.144.100:59598] [client 62.197.144.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "adOZDEPsNnAJTnmz6samrgAAAQU"]
[Mon Apr 06 19:29:16.846693 2026] [:error] [pid 9442:tid 9460] [client 62.197.144.100:59608] [client 62.197.144.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lock360.php"] [unique_id "adOZDEPsNnAJTnmz6samtQAAARA"]
[Mon Apr 06 19:29:18.080144 2026] [:error] [pid 9413:tid 9419] [client 62.197.144.100:59620] [client 62.197.144.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "adOZDnllvEK3chn01wG7zwAAAYQ"]
[Mon Apr 06 19:29:18.911353 2026] [:error] [pid 35786:tid 35809] [client 62.197.144.100:59634] [client 62.197.144.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "adOZDmgkfCKTaLhwaKQVwQAAANA"]
[Mon Apr 06 19:29:19.756327 2026] [:error] [pid 10280:tid 10293] [client 62.197.144.100:59662] [client 62.197.144.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "adOZD18QUJkf8g-BFfPhLQAAAco"]
[Mon Apr 06 19:29:20.570536 2026] [:error] [pid 10280:tid 10303] [client 62.197.144.100:59682] [client 62.197.144.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/dist/"] [unique_id "adOZEF8QUJkf8g-BFfPhMQAAAdQ"]
[Mon Apr 06 19:29:23.879394 2026] [:error] [pid 10280:tid 10304] [client 62.197.144.100:59700] [client 62.197.144.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/lib/"] [unique_id "adOZE18QUJkf8g-BFfPhRAAAAdU"]
[Mon Apr 06 19:29:24.702391 2026] [:error] [pid 9442:tid 9450] [client 62.197.144.100:59738] [client 62.197.144.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/lib/"] [unique_id "adOZFEPsNnAJTnmz6samzwAAAQY"]
[Mon Apr 06 19:29:25.541963 2026] [:error] [pid 35688:tid 35772] [client 62.197.144.100:38054] [client 62.197.144.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/lib/"] [unique_id "adOZFeZ85qg4jLsRpQyN4wAAAJY"]
[Mon Apr 06 19:29:26.389513 2026] [:error] [pid 35688:tid 35763] [client 62.197.144.100:38086] [client 62.197.144.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/lib/"] [unique_id "adOZFuZ85qg4jLsRpQyN5QAAAI0"]
[Mon Apr 06 19:29:27.208270 2026] [:error] [pid 9442:tid 9460] [client 62.197.144.100:38114] [client 62.197.144.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/lib/"] [unique_id "adOZF0PsNnAJTnmz6sam7AAAARA"]
[Mon Apr 06 19:29:32.831588 2026] [:error] [pid 9442:tid 9467] [client 62.197.144.100:38130] [client 62.197.144.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/robots.php"] [unique_id "adOZHEPsNnAJTnmz6sanIQAAARc"]
[Mon Apr 06 19:29:33.652556 2026] [:error] [pid 9442:tid 9466] [client 62.197.144.100:38148] [client 62.197.144.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/robots.php"] [unique_id "adOZHUPsNnAJTnmz6sanJwAAARY"]
[Mon Apr 06 19:29:34.501821 2026] [:error] [pid 10280:tid 10293] [client 62.197.144.100:38166] [client 62.197.144.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/robots.php"] [unique_id "adOZHl8QUJkf8g-BFfPhWwAAAco"]
[Mon Apr 06 19:29:35.323993 2026] [:error] [pid 10280:tid 10305] [client 62.197.144.100:38196] [client 62.197.144.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/robots.php"] [unique_id "adOZH18QUJkf8g-BFfPhYgAAAdY"]
[Mon Apr 06 19:29:36.144956 2026] [:error] [pid 38562:tid 38575] [client 62.197.144.100:41926] [client 62.197.144.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/robots.php"] [unique_id "adOZIKeD6Ohe6wzRuy51TwAAAUo"]
[Mon Apr 06 19:29:41.066149 2026] [:error] [pid 35686:tid 35699] [client 62.197.144.100:41948] [client 62.197.144.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/"] [unique_id "adOZJcMKdea6oORd2fzK5QAAAAM"]
[Mon Apr 06 19:29:41.884908 2026] [:error] [pid 38562:tid 38565] [client 62.197.144.100:41986] [client 62.197.144.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/"] [unique_id "adOZJaeD6Ohe6wzRuy51bwAAAUA"]
[Mon Apr 06 19:29:42.727615 2026] [:error] [pid 35688:tid 35765] [client 62.197.144.100:41994] [client 62.197.144.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/"] [unique_id "adOZJuZ85qg4jLsRpQyOPQAAAI8"]
[Mon Apr 06 19:29:43.547352 2026] [:error] [pid 35688:tid 35753] [client 62.197.144.100:42002] [client 62.197.144.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/"] [unique_id "adOZJ-Z85qg4jLsRpQyOQAAAAIM"]
[Mon Apr 06 19:29:44.371953 2026] [:error] [pid 10280:tid 10297] [client 62.197.144.100:42022] [client 62.197.144.100] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/"] [unique_id "adOZKF8QUJkf8g-BFfPhjQAAAc4"]
[Tue Apr 07 11:33:08.287327 2026] [:error] [pid 37598:tid 37667] [client 159.223.184.140:44250] [client 159.223.184.140] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "adR69O9g7q_cV2WhPawsDwAAAIY"]
[Wed Apr 08 00:55:56.349923 2026] [:error] [pid 5246:tid 5258] [client 103.138.124.41:55806] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "adU3HBLpySxaVC8kLEZOhQAAAMg"]
[Wed Apr 08 00:55:57.730411 2026] [:error] [pid 4842:tid 5188] [client 103.138.124.41:47812] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "adU3HZdncJIGbBiMOXS3AwAAAEA"]
[Wed Apr 08 00:55:59.936471 2026] [:error] [pid 4840:tid 5184] [client 103.138.124.41:47816] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adU3HxsUwg2fEe9p9LStpgAAABg"]
[Wed Apr 08 00:56:01.304720 2026] [:error] [pid 4842:tid 5192] [client 103.138.124.41:47832] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "adU3IZdncJIGbBiMOXS3CQAAAEQ"]
[Wed Apr 08 00:56:03.478884 2026] [:error] [pid 4860:tid 5215] [client 103.138.124.41:47844] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "adU3Iwn6KmY32L3WSeGydwAAAIA"]
[Wed Apr 08 00:56:04.289714 2026] [:error] [pid 5337:tid 5373] [client 103.138.124.41:47846] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "adU3JCboIFdw6tlcN122hgAAAQ8"]
[Wed Apr 08 00:56:04.827385 2026] [:error] [pid 5337:tid 5365] [client 103.138.124.41:33304] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "adU3JCboIFdw6tlcN122hwAAAQc"]
[Wed Apr 08 00:56:05.364666 2026] [:error] [pid 4860:tid 5229] [client 103.138.124.41:33306] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "adU3JQn6KmY32L3WSeGyegAAAI4"]
[Wed Apr 08 00:56:05.902112 2026] [:error] [pid 5337:tid 5366] [client 103.138.124.41:33322] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "adU3JSboIFdw6tlcN122igAAAQg"]
[Wed Apr 08 00:56:06.451744 2026] [:error] [pid 4840:tid 5170] [client 103.138.124.41:33338] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "adU3JhsUwg2fEe9p9LStrgAAAAo"]
[Wed Apr 08 00:56:07.255828 2026] [:error] [pid 5246:tid 5273] [client 103.138.124.41:33348] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "adU3JxLpySxaVC8kLEZOlAAAANc"]
[Wed Apr 08 00:56:08.332259 2026] [:error] [pid 5337:tid 5361] [client 103.138.124.41:33350] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "adU3KCboIFdw6tlcN122kwAAAQM"]
[Wed Apr 08 00:56:09.416906 2026] [:error] [pid 5337:tid 5375] [client 103.138.124.41:33352] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "adU3KSboIFdw6tlcN122nQAAARE"]
[Wed Apr 08 00:56:10.232952 2026] [:error] [pid 4860:tid 5227] [client 103.138.124.41:33364] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "adU3Kgn6KmY32L3WSeGygAAAAIw"]
[Wed Apr 08 00:56:11.055720 2026] [:error] [pid 5337:tid 5382] [client 103.138.124.41:33374] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "adU3KyboIFdw6tlcN122qAAAARg"]
[Wed Apr 08 00:56:13.287895 2026] [:error] [pid 4842:tid 5204] [client 103.138.124.41:33388] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "adU3LZdncJIGbBiMOXS3HQAAAFA"]
[Wed Apr 08 00:56:14.114855 2026] [:error] [pid 5337:tid 5373] [client 103.138.124.41:33392] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "adU3LiboIFdw6tlcN122sQAAAQ8"]
[Wed Apr 08 00:56:15.192313 2026] [:error] [pid 4860:tid 5215] [client 103.138.124.41:43388] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "adU3Lwn6KmY32L3WSeGygwAAAIA"]
[Wed Apr 08 00:56:16.005117 2026] [:error] [pid 5337:tid 5377] [client 103.138.124.41:43392] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "adU3MCboIFdw6tlcN122tAAAARM"]
[Wed Apr 08 00:56:17.671267 2026] [:error] [pid 5246:tid 5271] [client 103.138.124.41:43404] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "adU3MRLpySxaVC8kLEZOqAAAANU"]
[Wed Apr 08 00:56:18.482122 2026] [:error] [pid 4860:tid 5219] [client 103.138.124.41:43418] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "adU3Mgn6KmY32L3WSeGyhQAAAIQ"]
[Wed Apr 08 00:56:19.287221 2026] [:error] [pid 4842:tid 5198] [client 103.138.124.41:43426] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "adU3M5dncJIGbBiMOXS3JQAAAEo"]
[Wed Apr 08 00:56:19.820328 2026] [:error] [pid 5337:tid 5369] [client 103.138.124.41:43432] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "adU3MyboIFdw6tlcN122vwAAAQs"]
[Wed Apr 08 00:56:21.887335 2026] [:error] [pid 4840:tid 5180] [client 103.138.124.41:43438] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "adU3NRsUwg2fEe9p9LStwAAAABQ"]
[Wed Apr 08 00:56:23.242750 2026] [:error] [pid 5337:tid 5366] [client 103.138.124.41:43452] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "adU3NyboIFdw6tlcN122ywAAAQg"]
[Wed Apr 08 00:56:23.783549 2026] [:error] [pid 5337:tid 5360] [client 103.138.124.41:43454] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "adU3NyboIFdw6tlcN122zQAAAQI"]
[Wed Apr 08 00:56:24.325117 2026] [:error] [pid 5246:tid 5256] [client 103.138.124.41:43458] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "adU3OBLpySxaVC8kLEZOrAAAAMY"]
[Wed Apr 08 00:56:27.052006 2026] [:error] [pid 4840:tid 5171] [client 103.138.124.41:57552] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/admin.php"] [unique_id "adU3OxsUwg2fEe9p9LStzwAAAAs"]
[Wed Apr 08 00:56:28.397577 2026] [:error] [pid 5246:tid 5255] [client 103.138.124.41:57556] [client 103.138.124.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.138.124.41, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "adU3PBLpySxaVC8kLEZOtAAAAMU"]
[Wed Apr 08 00:56:32.952304 2026] [:error] [pid 5246:tid 5270] [client 103.138.124.41:57556] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "adU3QBLpySxaVC8kLEZOygAAANQ"]
[Wed Apr 08 00:56:34.082450 2026] [:error] [pid 4840:tid 5178] [client 103.138.124.41:57566] [client 103.138.124.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.138.124.41, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "adU3QhsUwg2fEe9p9LSt2AAAABI"]
[Wed Apr 08 00:56:34.629586 2026] [:error] [pid 4840:tid 5174] [client 103.138.124.41:57566] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/item.php"] [unique_id "adU3QhsUwg2fEe9p9LSt2wAAAA4"]
[Wed Apr 08 00:56:37.414768 2026] [:error] [pid 4840:tid 5160] [client 103.138.124.41:56978] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "adU3RRsUwg2fEe9p9LSt7gAAAAA"]
[Wed Apr 08 00:56:41.329682 2026] [:error] [pid 4860:tid 5234] [client 103.138.124.41:56990] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "adU3SQn6KmY32L3WSeGypAAAAJM"]
[Wed Apr 08 00:56:42.438153 2026] [:error] [pid 5246:tid 5271] [client 103.138.124.41:56998] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "adU3ShLpySxaVC8kLEZO2gAAANU"]
[Wed Apr 08 00:56:43.816527 2026] [:error] [pid 5246:tid 5270] [client 103.138.124.41:57008] [client 103.138.124.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.138.124.41, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "adU3SxLpySxaVC8kLEZO4gAAANQ"]
[Wed Apr 08 00:56:44.091328 2026] [:error] [pid 5246:tid 5273] [client 103.138.124.41:57008] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "adU3TBLpySxaVC8kLEZO5QAAANc"]
[Wed Apr 08 00:56:49.330163 2026] [:error] [pid 5246:tid 5256] [client 103.138.124.41:58044] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "adU3URLpySxaVC8kLEZPDAAAAMY"]
[Wed Apr 08 00:56:50.697895 2026] [:error] [pid 4842:tid 5192] [client 103.138.124.41:58054] [client 103.138.124.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.138.124.41, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "adU3UpdncJIGbBiMOXS3YwAAAEQ"]
[Wed Apr 08 00:56:51.785164 2026] [:error] [pid 4842:tid 5196] [client 103.138.124.41:58054] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "adU3U5dncJIGbBiMOXS3aAAAAEg"]
[Wed Apr 08 00:56:52.591778 2026] [:error] [pid 5337:tid 5358] [client 103.138.124.41:58062] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/infi.php"] [unique_id "adU3VCboIFdw6tlcN123JAAAAQA"]
[Wed Apr 08 00:56:53.675464 2026] [:error] [pid 5337:tid 5379] [client 103.138.124.41:58070] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "adU3VSboIFdw6tlcN123LwAAARU"]
[Wed Apr 08 00:56:55.024851 2026] [:error] [pid 5337:tid 5375] [client 103.138.124.41:58080] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "adU3VyboIFdw6tlcN123PAAAARE"]
[Wed Apr 08 00:56:55.556265 2026] [:error] [pid 4842:tid 5198] [client 103.138.124.41:39445] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "adU3V5dncJIGbBiMOXS3agAAAEo"]
[Wed Apr 08 00:56:57.454949 2026] [:error] [pid 5337:tid 5367] [client 103.138.124.41:52052] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "adU3WSboIFdw6tlcN123TwAAAQk"]
[Wed Apr 08 00:56:58.298361 2026] [:error] [pid 5337:tid 5358] [client 103.138.124.41:52056] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "adU3WiboIFdw6tlcN123UwAAAQA"]
[Wed Apr 08 00:56:59.668306 2026] [:error] [pid 5246:tid 5260] [client 103.138.124.41:52068] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/edit.php"] [unique_id "adU3WxLpySxaVC8kLEZPIwAAAMo"]
[Wed Apr 08 00:57:01.064917 2026] [:error] [pid 4860:tid 5220] [client 103.138.124.41:52070] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "adU3XQn6KmY32L3WSeGyuQAAAIU"]
[Wed Apr 08 00:57:02.160271 2026] [:error] [pid 4840:tid 5160] [client 103.138.124.41:8157] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/click.php"] [unique_id "adU3XhsUwg2fEe9p9LSuDAAAAAA"]
[Wed Apr 08 00:57:03.530910 2026] [:error] [pid 4840:tid 5165] [client 103.138.124.41:52088] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "adU3XxsUwg2fEe9p9LSuFgAAAAU"]
[Wed Apr 08 00:57:07.256749 2026] [:error] [pid 5337:tid 5377] [client 103.138.124.41:18500] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "adU3YyboIFdw6tlcN123bgAAARM"]
[Wed Apr 08 00:57:07.795883 2026] [:error] [pid 4842:tid 5193] [client 103.138.124.41:58284] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "adU3Y5dncJIGbBiMOXS3dQAAAEU"]
[Wed Apr 08 00:57:08.338312 2026] [:error] [pid 4860:tid 5215] [client 103.138.124.41:58300] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "adU3ZAn6KmY32L3WSeGyzgAAAIA"]
[Wed Apr 08 00:57:08.872480 2026] [:error] [pid 4860:tid 5235] [client 103.138.124.41:58310] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "adU3ZAn6KmY32L3WSeGy0AAAAJQ"]
[Wed Apr 08 00:57:09.720515 2026] [:error] [pid 4860:tid 5217] [client 103.138.124.41:58318] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "adU3ZQn6KmY32L3WSeGy1gAAAII"]
[Wed Apr 08 00:57:10.254899 2026] [:error] [pid 4840:tid 5178] [client 103.138.124.41:58320] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "adU3ZhsUwg2fEe9p9LSuHgAAABI"]
[Wed Apr 08 00:57:11.342631 2026] [:error] [pid 4860:tid 5221] [client 103.138.124.41:58336] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adU3Zwn6KmY32L3WSeGy3gAAAIY"]
[Wed Apr 08 00:57:11.880806 2026] [:error] [pid 4842:tid 5190] [client 103.138.124.41:58340] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "adU3Z5dncJIGbBiMOXS3fgAAAEI"]
[Wed Apr 08 00:57:12.416504 2026] [:error] [pid 4840:tid 5170] [client 103.138.124.41:58354] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "adU3aBsUwg2fEe9p9LSuIQAAAAo"]
[Wed Apr 08 00:57:12.955532 2026] [:error] [pid 5337:tid 5364] [client 103.138.124.41:58368] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "adU3aCboIFdw6tlcN123egAAAQY"]
[Wed Apr 08 00:57:13.802125 2026] [:error] [pid 5337:tid 5376] [client 103.138.124.41:58374] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "adU3aSboIFdw6tlcN123gAAAARI"]
[Wed Apr 08 00:57:14.892673 2026] [:error] [pid 5246:tid 5260] [client 103.138.124.41:58384] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "adU3ahLpySxaVC8kLEZPOgAAAMo"]
[Wed Apr 08 00:57:16.581473 2026] [:error] [pid 5337:tid 5372] [client 103.138.124.41:47230] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "adU3bCboIFdw6tlcN123kAAAAQ4"]
[Wed Apr 08 00:57:20.324100 2026] [:error] [pid 4842:tid 5206] [client 103.138.124.41:47232] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "adU3cJdncJIGbBiMOXS3mwAAAFI"]
[Wed Apr 08 00:57:21.730446 2026] [:error] [pid 5337:tid 5365] [client 103.138.124.41:47238] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "adU3cSboIFdw6tlcN123owAAAQc"]
[Wed Apr 08 00:57:22.290414 2026] [:error] [pid 5337:tid 5372] [client 103.138.124.41:47242] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "adU3ciboIFdw6tlcN123pgAAAQ4"]
[Wed Apr 08 00:57:23.948798 2026] [:error] [pid 4860:tid 5227] [client 103.138.124.41:47254] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "adU3cwn6KmY32L3WSeGy7wAAAIw"]
[Wed Apr 08 00:57:26.679065 2026] [proxy_fcgi:error] [pid 5337:tid 5374] [client 103.138.124.41:58996] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 00:57:26.949752 2026] [proxy_fcgi:error] [pid 5337:tid 5375] [client 103.138.124.41:58996] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 00:57:27.219895 2026] [proxy_fcgi:error] [pid 5337:tid 5359] [client 103.138.124.41:58996] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 00:57:28.573455 2026] [:error] [pid 5337:tid 5366] [client 103.138.124.41:58996] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "adU3eCboIFdw6tlcN1230QAAAQg"]
[Wed Apr 08 00:57:29.102106 2026] [:error] [pid 5246:tid 5270] [client 103.138.124.41:55419] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "adU3eRLpySxaVC8kLEZPVgAAANQ"]
[Wed Apr 08 00:57:29.639934 2026] [:error] [pid 5337:tid 5366] [client 103.138.124.41:59018] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "adU3eSboIFdw6tlcN1233AAAAQg"]
[Wed Apr 08 00:57:30.181696 2026] [:error] [pid 5246:tid 5253] [client 103.138.124.41:59022] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "adU3ehLpySxaVC8kLEZPWAAAAMM"]
[Wed Apr 08 00:57:30.727106 2026] [:error] [pid 5246:tid 5265] [client 103.138.124.41:59038] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "adU3ehLpySxaVC8kLEZPWgAAAM8"]
[Wed Apr 08 00:57:31.268354 2026] [:error] [pid 5337:tid 5373] [client 103.138.124.41:59052] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "adU3eyboIFdw6tlcN1235wAAAQ8"]
[Wed Apr 08 00:57:32.090941 2026] [:error] [pid 5337:tid 5370] [client 103.138.124.41:59066] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "adU3fCboIFdw6tlcN1237AAAAQw"]
[Wed Apr 08 00:57:32.674055 2026] [:error] [pid 5337:tid 5361] [client 103.138.124.41:59080] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "adU3fCboIFdw6tlcN1238gAAAQM"]
[Wed Apr 08 00:57:33.208855 2026] [:error] [pid 5246:tid 5274] [client 103.138.124.41:59092] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "adU3fRLpySxaVC8kLEZPYAAAANg"]
[Wed Apr 08 00:57:33.746165 2026] [:error] [pid 4840:tid 5178] [client 103.138.124.41:59106] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "adU3fRsUwg2fEe9p9LSuQwAAABI"]
[Wed Apr 08 00:57:34.834167 2026] [:error] [pid 5246:tid 5261] [client 103.138.124.41:61907] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "adU3fhLpySxaVC8kLEZPagAAAMs"]
[Wed Apr 08 00:57:35.644608 2026] [:error] [pid 5337:tid 5372] [client 103.138.124.41:39696] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "adU3fyboIFdw6tlcN123-gAAAQ4"]
[Wed Apr 08 00:57:36.735386 2026] [:error] [pid 4860:tid 5221] [client 103.138.124.41:39708] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "adU3gAn6KmY32L3WSeGy-gAAAIY"]
[Wed Apr 08 00:57:37.816528 2026] [:error] [pid 4840:tid 5174] [client 103.138.124.41:39722] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "adU3gRsUwg2fEe9p9LSuSgAAAA4"]
[Wed Apr 08 00:57:39.183057 2026] [:error] [pid 5337:tid 5382] [client 103.138.124.41:39726] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "adU3gyboIFdw6tlcN124CAAAARg"]
[Wed Apr 08 00:57:40.794033 2026] [:error] [pid 4840:tid 5162] [client 103.138.124.41:39740] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "adU3hBsUwg2fEe9p9LSuWAAAAAI"]
[Wed Apr 08 00:57:41.615096 2026] [:error] [pid 4840:tid 5167] [client 103.138.124.41:39746] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "adU3hRsUwg2fEe9p9LSuXgAAAAc"]
[Wed Apr 08 00:57:46.500029 2026] [:error] [pid 4860:tid 5217] [client 103.138.124.41:39760] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "adU3ign6KmY32L3WSeGzDQAAAII"]
[Wed Apr 08 00:57:47.030631 2026] [:error] [pid 5337:tid 5367] [client 103.138.124.41:58950] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "adU3iyboIFdw6tlcN124LwAAAQk"]
[Wed Apr 08 00:57:47.835298 2026] [:error] [pid 5337:tid 5371] [client 103.138.124.41:58954] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "adU3iyboIFdw6tlcN124NAAAAQ0"]
[Wed Apr 08 00:57:48.935058 2026] [:error] [pid 5337:tid 5380] [client 103.138.124.41:58962] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "adU3jCboIFdw6tlcN124PwAAARY"]
[Wed Apr 08 00:57:49.481275 2026] [:error] [pid 5246:tid 5253] [client 103.138.124.41:58966] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "adU3jRLpySxaVC8kLEZPdQAAAMM"]
[Wed Apr 08 00:57:51.123724 2026] [:error] [pid 4842:tid 5209] [client 103.138.124.41:58982] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "adU3j5dncJIGbBiMOXS3wAAAAFU"]
[Wed Apr 08 00:57:51.672319 2026] [:error] [pid 4840:tid 5175] [client 103.138.124.41:58990] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "adU3jxsUwg2fEe9p9LSucAAAAA8"]
[Wed Apr 08 00:57:53.599096 2026] [:error] [pid 4840:tid 5165] [client 103.138.124.41:58992] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "adU3kRsUwg2fEe9p9LSuewAAAAU"]
[Wed Apr 08 00:57:54.422450 2026] [proxy_fcgi:error] [pid 4842:tid 5196] [client 103.138.124.41:58994] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 00:57:54.967846 2026] [:error] [pid 4842:tid 5192] [client 103.138.124.41:58994] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/function.php"] [unique_id "adU3kpdncJIGbBiMOXS3yQAAAEQ"]
[Wed Apr 08 00:57:55.512883 2026] [:error] [pid 4860:tid 5228] [client 103.138.124.41:57452] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "adU3kwn6KmY32L3WSeGzGwAAAI0"]
[Wed Apr 08 00:57:56.595477 2026] [:error] [pid 4842:tid 5209] [client 103.138.124.41:57460] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "adU3lJdncJIGbBiMOXS3zwAAAFU"]
[Wed Apr 08 00:57:57.140860 2026] [:error] [pid 5337:tid 5366] [client 103.138.124.41:57474] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "adU3lSboIFdw6tlcN124bQAAAQg"]
[Wed Apr 08 00:57:59.605190 2026] [:error] [pid 4860:tid 5217] [client 103.138.124.41:57476] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "adU3lwn6KmY32L3WSeGzKwAAAII"]
[Wed Apr 08 00:58:00.142457 2026] [:error] [pid 5246:tid 5260] [client 103.138.124.41:57492] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "adU3mBLpySxaVC8kLEZPigAAAMo"]
[Wed Apr 08 00:58:01.797370 2026] [:error] [pid 5246:tid 5265] [client 103.138.124.41:57500] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/index.php"] [unique_id "adU3mRLpySxaVC8kLEZPlAAAAM8"]
[Wed Apr 08 00:58:02.335473 2026] [:error] [pid 5246:tid 5256] [client 103.138.124.41:57512] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "adU3mhLpySxaVC8kLEZPlQAAAMY"]
[Wed Apr 08 00:58:02.885743 2026] [:error] [pid 5337:tid 5370] [client 103.138.124.41:57518] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "adU3miboIFdw6tlcN124gwAAAQw"]
[Wed Apr 08 00:58:04.784214 2026] [:error] [pid 5337:tid 5361] [client 103.138.124.41:57528] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "adU3nCboIFdw6tlcN124kAAAAQM"]
[Wed Apr 08 00:58:05.586269 2026] [:error] [pid 5246:tid 5267] [client 103.138.124.41:45688] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "adU3nRLpySxaVC8kLEZPnwAAANE"]
[Wed Apr 08 00:58:08.037960 2026] [:error] [pid 5337:tid 5359] [client 103.138.124.41:45704] [client 103.138.124.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.138.124.41, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/js/wp-login.php"] [unique_id "adU3oCboIFdw6tlcN124pAAAAQE"]
[Wed Apr 08 00:58:09.681352 2026] [:error] [pid 5337:tid 5359] [client 103.138.124.41:45704] [client 103.138.124.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.138.124.41, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "adU3oSboIFdw6tlcN124sAAAAQE"]
[Wed Apr 08 00:58:12.706137 2026] [proxy_fcgi:error] [pid 5337:tid 5376] [client 103.138.124.41:45704] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 00:58:16.840440 2026] [:error] [pid 5337:tid 5373] [client 103.138.124.41:45704] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "adU3qCboIFdw6tlcN1240wAAAQ8"]
[Wed Apr 08 00:58:18.234581 2026] [:error] [pid 4860:tid 5221] [client 103.138.124.41:37926] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "adU3qgn6KmY32L3WSeGzPgAAAIY"]
[Wed Apr 08 00:58:19.321705 2026] [:error] [pid 4840:tid 5175] [client 103.138.124.41:37928] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "adU3qxsUwg2fEe9p9LSumAAAAA8"]
[Wed Apr 08 00:58:22.329857 2026] [:error] [pid 5337:tid 5370] [client 103.138.124.41:37940] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "adU3riboIFdw6tlcN1247QAAAQw"]
[Wed Apr 08 00:58:23.420930 2026] [:error] [pid 5337:tid 5374] [client 103.138.124.41:37954] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "adU3ryboIFdw6tlcN1249AAAARA"]
[Wed Apr 08 00:58:24.225220 2026] [:error] [pid 5337:tid 5364] [client 103.138.124.41:37964] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "adU3sCboIFdw6tlcN124_QAAAQY"]
[Wed Apr 08 00:58:25.872314 2026] [proxy_fcgi:error] [pid 5337:tid 5371] [client 103.138.124.41:49736] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 00:58:26.149485 2026] [proxy_fcgi:error] [pid 5337:tid 5376] [client 103.138.124.41:49736] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 00:58:26.423475 2026] [:error] [pid 5337:tid 5366] [client 103.138.124.41:49736] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "adU3siboIFdw6tlcN125DQAAAQg"]
[Wed Apr 08 00:58:26.964917 2026] [:error] [pid 4842:tid 5200] [client 103.138.124.41:49748] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "adU3spdncJIGbBiMOXS3-wAAAEw"]
[Wed Apr 08 00:58:29.389917 2026] [:error] [pid 4860:tid 5228] [client 103.138.124.41:49750] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "adU3tQn6KmY32L3WSeGzWAAAAI0"]
[Wed Apr 08 00:58:30.200946 2026] [:error] [pid 5246:tid 5259] [client 103.138.124.41:49756] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "adU3thLpySxaVC8kLEZP0gAAAMk"]
[Wed Apr 08 00:58:31.554264 2026] [:error] [pid 5337:tid 5367] [client 103.138.124.41:49758] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "adU3tyboIFdw6tlcN125HQAAAQk"]
[Wed Apr 08 00:58:35.393426 2026] [:error] [pid 5246:tid 5250] [client 103.138.124.41:49760] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "adU3uxLpySxaVC8kLEZP5gAAAMA"]
[Wed Apr 08 00:58:35.937995 2026] [proxy_fcgi:error] [pid 4842:tid 5210] [client 103.138.124.41:54444] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 00:58:36.760188 2026] [:error] [pid 4842:tid 5192] [client 103.138.124.41:54444] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "adU3vJdncJIGbBiMOXS4DwAAAEQ"]
[Wed Apr 08 00:58:38.685962 2026] [proxy_fcgi:error] [pid 5337:tid 5375] [client 103.138.124.41:54460] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 00:58:39.250003 2026] [:error] [pid 5337:tid 5373] [client 103.138.124.41:54460] [client 103.138.124.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.138.124.41, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "adU3vyboIFdw6tlcN125OQAAAQ8"]
[Wed Apr 08 00:58:40.615971 2026] [:error] [pid 5337:tid 5373] [client 103.138.124.41:54460] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "adU3wCboIFdw6tlcN125SgAAAQ8"]
[Wed Apr 08 00:58:41.435992 2026] [:error] [pid 4842:tid 5208] [client 103.138.124.41:54470] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "adU3wZdncJIGbBiMOXS4EwAAAFQ"]
[Wed Apr 08 00:58:43.080766 2026] [:error] [pid 5337:tid 5366] [client 103.138.124.41:64559] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "adU3wyboIFdw6tlcN125UQAAAQg"]
[Wed Apr 08 00:58:44.441933 2026] [:error] [pid 5246:tid 5265] [client 103.138.124.41:54486] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "adU3xBLpySxaVC8kLEZP_wAAAM8"]
[Wed Apr 08 00:58:44.978948 2026] [:error] [pid 5246:tid 5250] [client 103.138.124.41:42654] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "adU3xBLpySxaVC8kLEZQAQAAAMA"]
[Wed Apr 08 00:58:46.327307 2026] [:error] [pid 5246:tid 5257] [client 103.138.124.41:23869] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "adU3xhLpySxaVC8kLEZQDAAAAMc"]
[Wed Apr 08 00:58:47.417028 2026] [proxy_fcgi:error] [pid 5337:tid 5360] [client 103.138.124.41:42672] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 00:58:47.684850 2026] [:error] [pid 5337:tid 5362] [client 103.138.124.41:42672] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "adU3xyboIFdw6tlcN125WwAAAQQ"]
[Wed Apr 08 00:58:48.504506 2026] [:error] [pid 5337:tid 5374] [client 103.138.124.41:42676] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/db.php"] [unique_id "adU3yCboIFdw6tlcN125XwAAARA"]
[Wed Apr 08 00:58:49.043042 2026] [:error] [pid 5337:tid 5364] [client 103.138.124.41:42686] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "adU3ySboIFdw6tlcN125ZQAAAQY"]
[Wed Apr 08 00:58:49.589428 2026] [:error] [pid 5246:tid 5272] [client 103.138.124.41:42688] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "adU3yRLpySxaVC8kLEZQFwAAANY"]
[Wed Apr 08 00:58:50.125522 2026] [:error] [pid 5337:tid 5359] [client 103.138.124.41:42702] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "adU3yiboIFdw6tlcN125bgAAAQE"]
[Wed Apr 08 00:58:50.667416 2026] [:error] [pid 4840:tid 5180] [client 103.138.124.41:42714] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "adU3yhsUwg2fEe9p9LSuvgAAABQ"]
[Wed Apr 08 00:58:51.203536 2026] [:error] [pid 4840:tid 5174] [client 103.138.124.41:12996] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "adU3yxsUwg2fEe9p9LSuwQAAAA4"]
[Wed Apr 08 00:58:52.293265 2026] [:error] [pid 5337:tid 5358] [client 103.138.124.41:42730] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "adU3zCboIFdw6tlcN125ewAAAQA"]
[Wed Apr 08 00:58:52.836021 2026] [:error] [pid 5337:tid 5366] [client 103.138.124.41:42742] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "adU3zCboIFdw6tlcN125fwAAAQg"]
[Wed Apr 08 00:58:53.369869 2026] [:error] [pid 4840:tid 5180] [client 103.138.124.41:42754] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "adU3zRsUwg2fEe9p9LSuygAAABQ"]
[Wed Apr 08 00:58:53.901766 2026] [:error] [pid 4840:tid 5183] [client 103.138.124.41:42766] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "adU3zRsUwg2fEe9p9LSuzgAAABc"]
[Wed Apr 08 00:58:54.438530 2026] [:error] [pid 5246:tid 5259] [client 103.138.124.41:61701] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "adU3zhLpySxaVC8kLEZQHgAAAMk"]
[Wed Apr 08 00:58:54.975095 2026] [proxy_fcgi:error] [pid 4840:tid 5168] [client 103.138.124.41:55664] AH01071: Got error 'Primary script unknown'
[Wed Apr 08 00:58:55.787401 2026] [:error] [pid 4840:tid 5172] [client 103.138.124.41:55664] [client 103.138.124.41] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 103.138.124.41, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "adU3zxsUwg2fEe9p9LSu3AAAAAw"]
[Wed Apr 08 00:58:57.146312 2026] [:error] [pid 4840:tid 5163] [client 103.138.124.41:55664] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "adU30RsUwg2fEe9p9LSu4gAAAAM"]
[Wed Apr 08 00:59:02.160102 2026] [:error] [pid 4840:tid 5180] [client 103.138.124.41:55668] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "adU31hsUwg2fEe9p9LSu-gAAABQ"]
[Wed Apr 08 00:59:02.697679 2026] [:error] [pid 4840:tid 5161] [client 103.138.124.41:55670] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "adU31hsUwg2fEe9p9LSu-wAAAAE"]
[Wed Apr 08 00:59:03.234820 2026] [:error] [pid 4842:tid 5209] [client 103.138.124.41:55684] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "adU315dncJIGbBiMOXS4MgAAAFU"]
[Wed Apr 08 00:59:05.418421 2026] [:error] [pid 5337:tid 5365] [client 103.138.124.41:55690] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "adU32SboIFdw6tlcN125zwAAAQc"]
[Wed Apr 08 00:59:05.955806 2026] [:error] [pid 5246:tid 5269] [client 103.138.124.41:54666] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "adU32RLpySxaVC8kLEZQNwAAANM"]
[Wed Apr 08 00:59:06.501578 2026] [:error] [pid 4840:tid 5175] [client 103.138.124.41:54674] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "adU32hsUwg2fEe9p9LSvBQAAAA8"]
[Wed Apr 08 00:59:08.144706 2026] [:error] [pid 4840:tid 5183] [client 103.138.124.41:54682] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "adU33BsUwg2fEe9p9LSvCwAAABc"]
[Wed Apr 08 00:59:08.953218 2026] [:error] [pid 5246:tid 5272] [client 103.138.124.41:30300] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "adU33BLpySxaVC8kLEZQOwAAANY"]
[Wed Apr 08 00:59:10.028373 2026] [:error] [pid 4842:tid 5211] [client 103.138.124.41:54704] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "adU33pdncJIGbBiMOXS4QgAAAFc"]
[Wed Apr 08 00:59:14.827788 2026] [:error] [pid 4840:tid 5169] [client 103.138.124.41:39586] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "adU34hsUwg2fEe9p9LSvIQAAAAk"]
[Wed Apr 08 00:59:15.659447 2026] [:error] [pid 4840:tid 5167] [client 103.138.124.41:54040] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/about.php"] [unique_id "adU34xsUwg2fEe9p9LSvIwAAAAc"]
[Wed Apr 08 00:59:17.826841 2026] [:error] [pid 4860:tid 5226] [client 103.138.124.41:54056] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "adU35Qn6KmY32L3WSeGzxwAAAIs"]
[Wed Apr 08 00:59:18.903468 2026] [:error] [pid 4842:tid 5193] [client 103.138.124.41:54072] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "adU35pdncJIGbBiMOXS4UgAAAEU"]
[Wed Apr 08 00:59:20.528232 2026] [:error] [pid 4860:tid 5232] [client 103.138.124.41:54078] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "adU36An6KmY32L3WSeGzzAAAAJE"]
[Wed Apr 08 00:59:22.166141 2026] [:error] [pid 4840:tid 5169] [client 103.138.124.41:47044] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "adU36hsUwg2fEe9p9LSvLgAAAAk"]
[Wed Apr 08 00:59:23.258903 2026] [:error] [pid 5337:tid 5363] [client 103.138.124.41:54094] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "adU36yboIFdw6tlcN126EgAAAQU"]
[Wed Apr 08 00:59:23.804835 2026] [:error] [pid 5337:tid 5370] [client 103.138.124.41:54100] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "adU36yboIFdw6tlcN126FAAAAQw"]
[Wed Apr 08 00:59:25.711414 2026] [:error] [pid 4840:tid 5162] [client 103.138.124.41:54104] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "adU37RsUwg2fEe9p9LSvOQAAAAI"]
[Wed Apr 08 00:59:27.634709 2026] [:error] [pid 5337:tid 5361] [client 103.138.124.41:57158] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "adU37yboIFdw6tlcN126JAAAAQM"]
[Wed Apr 08 00:59:29.255436 2026] [:error] [pid 5337:tid 5363] [client 103.138.124.41:57162] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "adU38SboIFdw6tlcN126KgAAAQU"]
[Wed Apr 08 00:59:29.786627 2026] [:error] [pid 5337:tid 5377] [client 103.138.124.41:57178] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "adU38SboIFdw6tlcN126KwAAARM"]
[Wed Apr 08 00:59:30.598764 2026] [:error] [pid 4860:tid 5226] [client 103.138.124.41:57184] [client 103.138.124.41] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "adU38gn6KmY32L3WSeGz1wAAAIs"]
[Wed Apr 08 01:00:04.994840 2026] [autoindex:error] [pid 4860:tid 5217] [client 185.198.190.19:34034] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Wed Apr 08 01:25:17.654928 2026] [:error] [pid 4840:tid 5174] [client 4.233.113.246:42606] [client 4.233.113.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "adU9_RsUwg2fEe9p9LS9zQAAAA4"]
[Wed Apr 08 01:25:18.688635 2026] [:error] [pid 4842:tid 5194] [client 4.233.113.246:42586] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "adU9_pdncJIGbBiMOXTBrgAAAEY"]
[Wed Apr 08 01:25:19.204709 2026] [:error] [pid 5337:tid 5371] [client 4.233.113.246:42576] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "adU9_yboIFdw6tlcN13V5gAAAQ0"]
[Wed Apr 08 01:25:19.705909 2026] [:error] [pid 4840:tid 5176] [client 4.233.113.246:27313] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "adU9_xsUwg2fEe9p9LS90QAAABA"]
[Wed Apr 08 01:25:20.193048 2026] [:error] [pid 5337:tid 5369] [client 4.233.113.246:56632] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "adU-ACboIFdw6tlcN13V7gAAAQs"]
[Wed Apr 08 01:25:20.707319 2026] [:error] [pid 5337:tid 5382] [client 4.233.113.246:58920] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wdone1.php"] [unique_id "adU-ACboIFdw6tlcN13V9QAAARg"]
[Wed Apr 08 01:25:21.185080 2026] [:error] [pid 5337:tid 5370] [client 4.233.113.246:38322] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wdone1.php"] [unique_id "adU-ASboIFdw6tlcN13V-QAAAQw"]
[Wed Apr 08 01:25:21.697417 2026] [:error] [pid 4840:tid 5181] [client 4.233.113.246:27324] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wdone1.php"] [unique_id "adU-ARsUwg2fEe9p9LS90gAAABU"]
[Wed Apr 08 01:25:22.176744 2026] [:error] [pid 5337:tid 5378] [client 4.233.113.246:42560] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wdone1.php"] [unique_id "adU-AiboIFdw6tlcN13WBAAAARQ"]
[Wed Apr 08 01:25:22.713027 2026] [:error] [pid 5246:tid 5265] [client 4.233.113.246:11777] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "adU-AhLpySxaVC8kLEZkgAAAAM8"]
[Wed Apr 08 01:25:23.202485 2026] [:error] [pid 5337:tid 5369] [client 4.233.113.246:11783] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "adU-AyboIFdw6tlcN13WDAAAAQs"]
[Wed Apr 08 01:25:23.712845 2026] [:error] [pid 5246:tid 5259] [client 4.233.113.246:11841] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "adU-AxLpySxaVC8kLEZkgwAAAMk"]
[Wed Apr 08 01:25:24.196972 2026] [:error] [pid 5246:tid 5268] [client 4.233.113.246:27027] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "adU-BBLpySxaVC8kLEZkhAAAANI"]
[Wed Apr 08 01:25:24.683436 2026] [:error] [pid 5337:tid 5360] [client 4.233.113.246:11852] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "adU-BCboIFdw6tlcN13WGgAAAQI"]
[Wed Apr 08 01:25:25.168159 2026] [:error] [pid 4860:tid 5234] [client 4.233.113.246:20131] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "adU-BQn6KmY32L3WSeG_0AAAAJM"]
[Wed Apr 08 01:25:25.640456 2026] [:error] [pid 4840:tid 5177] [client 4.233.113.246:11821] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "adU-BRsUwg2fEe9p9LS90wAAABE"]
[Wed Apr 08 01:25:26.129987 2026] [:error] [pid 4840:tid 5165] [client 4.233.113.246:4189] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "adU-BhsUwg2fEe9p9LS91QAAAAU"]
[Wed Apr 08 01:25:26.622013 2026] [:error] [pid 4840:tid 5163] [client 4.233.113.246:33878] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/awh.php"] [unique_id "adU-BhsUwg2fEe9p9LS91gAAAAM"]
[Wed Apr 08 01:25:27.126679 2026] [:error] [pid 4842:tid 5210] [client 4.233.113.246:41253] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/awh.php"] [unique_id "adU-B5dncJIGbBiMOXTBsgAAAFY"]
[Wed Apr 08 01:25:27.645250 2026] [:error] [pid 4840:tid 5168] [client 4.233.113.246:4747] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/awh.php"] [unique_id "adU-BxsUwg2fEe9p9LS92wAAAAg"]
[Wed Apr 08 01:25:28.135915 2026] [:error] [pid 5246:tid 5261] [client 4.233.113.246:56639] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/awh.php"] [unique_id "adU-CBLpySxaVC8kLEZkjAAAAMs"]
[Wed Apr 08 01:25:28.657028 2026] [:error] [pid 5337:tid 5359] [client 4.233.113.246:20138] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aee.php"] [unique_id "adU-CCboIFdw6tlcN13WNAAAAQE"]
[Wed Apr 08 01:25:29.142450 2026] [:error] [pid 5337:tid 5382] [client 4.233.113.246:11835] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aee.php"] [unique_id "adU-CSboIFdw6tlcN13WOAAAARg"]
[Wed Apr 08 01:25:29.618783 2026] [:error] [pid 5337:tid 5367] [client 4.233.113.246:4164] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aee.php"] [unique_id "adU-CSboIFdw6tlcN13WPQAAAQk"]
[Wed Apr 08 01:25:30.103814 2026] [:error] [pid 5337:tid 5377] [client 4.233.113.246:4212] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aee.php"] [unique_id "adU-CiboIFdw6tlcN13WQwAAARM"]
[Wed Apr 08 01:25:30.576376 2026] [:error] [pid 5337:tid 5375] [client 4.233.113.246:4192] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/new3.php"] [unique_id "adU-CiboIFdw6tlcN13WSgAAARE"]
[Wed Apr 08 01:25:31.056903 2026] [:error] [pid 4840:tid 5162] [client 4.233.113.246:50610] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/new3.php"] [unique_id "adU-CxsUwg2fEe9p9LS95AAAAAI"]
[Wed Apr 08 01:25:31.534390 2026] [:error] [pid 4860:tid 5217] [client 4.233.113.246:11843] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/new3.php"] [unique_id "adU-Cwn6KmY32L3WSeG_3AAAAII"]
[Wed Apr 08 01:25:32.022172 2026] [:error] [pid 5246:tid 5270] [client 4.233.113.246:38288] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/new3.php"] [unique_id "adU-DBLpySxaVC8kLEZklQAAANQ"]
[Wed Apr 08 01:25:32.502468 2026] [:error] [pid 4860:tid 5220] [client 4.233.113.246:58933] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ruabjw00.php"] [unique_id "adU-DAn6KmY32L3WSeG_3wAAAIU"]
[Wed Apr 08 01:25:32.986512 2026] [:error] [pid 5337:tid 5363] [client 4.233.113.246:38304] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ruabjw00.php"] [unique_id "adU-DCboIFdw6tlcN13WWgAAAQU"]
[Wed Apr 08 01:25:33.466475 2026] [:error] [pid 5246:tid 5254] [client 4.233.113.246:20149] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ruabjw00.php"] [unique_id "adU-DRLpySxaVC8kLEZkmAAAAMQ"]
[Wed Apr 08 01:25:33.967367 2026] [:error] [pid 5337:tid 5359] [client 4.233.113.246:27274] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ruabjw00.php"] [unique_id "adU-DSboIFdw6tlcN13WZAAAAQE"]
[Wed Apr 08 01:25:34.444300 2026] [:error] [pid 5337:tid 5373] [client 4.233.113.246:58906] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "adU-DiboIFdw6tlcN13WawAAAQ8"]
[Wed Apr 08 01:25:34.923850 2026] [:error] [pid 5337:tid 5378] [client 4.233.113.246:58924] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "adU-DiboIFdw6tlcN13WcwAAARQ"]
[Wed Apr 08 01:25:35.407664 2026] [:error] [pid 5337:tid 5366] [client 4.233.113.246:38315] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "adU-DyboIFdw6tlcN13WfAAAAQg"]
[Wed Apr 08 01:25:35.888681 2026] [:error] [pid 5337:tid 5367] [client 4.233.113.246:41262] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "adU-DyboIFdw6tlcN13WgAAAAQk"]
[Wed Apr 08 01:25:36.398579 2026] [:error] [pid 5337:tid 5382] [client 4.233.113.246:50592] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/webx.php"] [unique_id "adU-ECboIFdw6tlcN13WhQAAARg"]
[Wed Apr 08 01:25:36.880398 2026] [:error] [pid 5246:tid 5256] [client 4.233.113.246:11887] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/webx.php"] [unique_id "adU-EBLpySxaVC8kLEZkmwAAAMY"]
[Wed Apr 08 01:25:37.376511 2026] [:error] [pid 5337:tid 5367] [client 4.233.113.246:4190] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/webx.php"] [unique_id "adU-ESboIFdw6tlcN13WkAAAAQk"]
[Wed Apr 08 01:25:37.849951 2026] [:error] [pid 5337:tid 5373] [client 4.233.113.246:42592] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/webx.php"] [unique_id "adU-ESboIFdw6tlcN13WlQAAAQ8"]
[Wed Apr 08 01:25:38.335070 2026] [:error] [pid 5337:tid 5368] [client 4.233.113.246:42615] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hhxc.php"] [unique_id "adU-EiboIFdw6tlcN13WmgAAAQo"]
[Wed Apr 08 01:25:38.816478 2026] [:error] [pid 5337:tid 5371] [client 4.233.113.246:63140] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hhxc.php"] [unique_id "adU-EiboIFdw6tlcN13WowAAAQ0"]
[Wed Apr 08 01:25:39.299454 2026] [:error] [pid 5337:tid 5381] [client 4.233.113.246:20148] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hhxc.php"] [unique_id "adU-EyboIFdw6tlcN13WrAAAARc"]
[Wed Apr 08 01:25:39.781490 2026] [:error] [pid 5337:tid 5379] [client 4.233.113.246:11800] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hhxc.php"] [unique_id "adU-EyboIFdw6tlcN13WsAAAARU"]
[Wed Apr 08 01:25:40.255280 2026] [:error] [pid 5337:tid 5368] [client 4.233.113.246:11838] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-22.php"] [unique_id "adU-FCboIFdw6tlcN13WuAAAAQo"]
[Wed Apr 08 01:25:40.737967 2026] [:error] [pid 4840:tid 5172] [client 4.233.113.246:11847] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-22.php"] [unique_id "adU-FBsUwg2fEe9p9LS96gAAAAw"]
[Wed Apr 08 01:25:41.217715 2026] [:error] [pid 4860:tid 5222] [client 4.233.113.246:20123] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-22.php"] [unique_id "adU-FQn6KmY32L3WSeG_8gAAAIc"]
[Wed Apr 08 01:25:41.703180 2026] [:error] [pid 5246:tid 5251] [client 4.233.113.246:58881] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-22.php"] [unique_id "adU-FRLpySxaVC8kLEZkpwAAAME"]
[Wed Apr 08 01:25:42.189363 2026] [:error] [pid 5337:tid 5382] [client 4.233.113.246:4749] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/villain.php"] [unique_id "adU-FiboIFdw6tlcN13WwQAAARg"]
[Wed Apr 08 01:25:42.663152 2026] [:error] [pid 5337:tid 5375] [client 4.233.113.246:41243] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/villain.php"] [unique_id "adU-FiboIFdw6tlcN13WwgAAARE"]
[Wed Apr 08 01:25:43.163383 2026] [:error] [pid 4842:tid 5208] [client 4.233.113.246:4172] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/villain.php"] [unique_id "adU-F5dncJIGbBiMOXTBuAAAAFQ"]
[Wed Apr 08 01:25:43.645692 2026] [:error] [pid 5337:tid 5358] [client 4.233.113.246:56663] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/villain.php"] [unique_id "adU-FyboIFdw6tlcN13WygAAAQA"]
[Wed Apr 08 01:25:44.126759 2026] [:error] [pid 5337:tid 5373] [client 4.233.113.246:56624] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-db.php"] [unique_id "adU-GCboIFdw6tlcN13W0AAAAQ8"]
[Wed Apr 08 01:25:44.603328 2026] [:error] [pid 4840:tid 5177] [client 4.233.113.246:4183] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-db.php"] [unique_id "adU-GBsUwg2fEe9p9LS97AAAABE"]
[Wed Apr 08 01:25:45.080538 2026] [:error] [pid 5337:tid 5373] [client 4.233.113.246:4196] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-db.php"] [unique_id "adU-GSboIFdw6tlcN13W3gAAAQ8"]
[Wed Apr 08 01:25:45.553498 2026] [:error] [pid 4840:tid 5175] [client 4.233.113.246:33910] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-db.php"] [unique_id "adU-GRsUwg2fEe9p9LS97gAAAA8"]
[Wed Apr 08 01:25:46.036677 2026] [:error] [pid 5337:tid 5371] [client 4.233.113.246:57951] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/red.php"] [unique_id "adU-GiboIFdw6tlcN13W4gAAAQ0"]
[Wed Apr 08 01:25:46.520504 2026] [:error] [pid 5337:tid 5373] [client 4.233.113.246:4218] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/red.php"] [unique_id "adU-GiboIFdw6tlcN13W5AAAAQ8"]
[Wed Apr 08 01:25:47.002179 2026] [:error] [pid 5337:tid 5375] [client 4.233.113.246:11782] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/red.php"] [unique_id "adU-GyboIFdw6tlcN13W5gAAARE"]
[Wed Apr 08 01:25:47.484024 2026] [:error] [pid 5337:tid 5359] [client 4.233.113.246:43162] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/red.php"] [unique_id "adU-GyboIFdw6tlcN13W6QAAAQE"]
[Wed Apr 08 01:25:47.981682 2026] [:error] [pid 5246:tid 5274] [client 4.233.113.246:27289] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/an7.php"] [unique_id "adU-GxLpySxaVC8kLEZktgAAANg"]
[Wed Apr 08 01:25:48.465765 2026] [:error] [pid 5246:tid 5250] [client 4.233.113.246:41245] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/an7.php"] [unique_id "adU-HBLpySxaVC8kLEZkuAAAAMA"]
[Wed Apr 08 01:25:48.935609 2026] [:error] [pid 5337:tid 5373] [client 4.233.113.246:33897] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/an7.php"] [unique_id "adU-HCboIFdw6tlcN13W7wAAAQ8"]
[Wed Apr 08 01:25:49.419151 2026] [:error] [pid 4842:tid 5199] [client 4.233.113.246:33881] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/an7.php"] [unique_id "adU-HZdncJIGbBiMOXTBzQAAAEs"]
[Wed Apr 08 01:25:49.911546 2026] [:error] [pid 5246:tid 5266] [client 4.233.113.246:11864] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ava.php"] [unique_id "adU-HRLpySxaVC8kLEZkuQAAANA"]
[Wed Apr 08 01:25:50.397664 2026] [:error] [pid 4842:tid 5194] [client 4.233.113.246:38274] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ava.php"] [unique_id "adU-HpdncJIGbBiMOXTB0wAAAEY"]
[Wed Apr 08 01:25:50.878058 2026] [:error] [pid 5246:tid 5258] [client 4.233.113.246:63121] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ava.php"] [unique_id "adU-HhLpySxaVC8kLEZkugAAAMg"]
[Wed Apr 08 01:25:51.366432 2026] [:error] [pid 5246:tid 5267] [client 4.233.113.246:57973] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ava.php"] [unique_id "adU-HxLpySxaVC8kLEZkvQAAANE"]
[Wed Apr 08 01:25:51.860268 2026] [:error] [pid 4840:tid 5160] [client 4.233.113.246:50569] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uxijj.php"] [unique_id "adU-HxsUwg2fEe9p9LS9_gAAAAA"]
[Wed Apr 08 01:25:52.336062 2026] [:error] [pid 4860:tid 5216] [client 4.233.113.246:58937] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uxijj.php"] [unique_id "adU-IAn6KmY32L3WSeHABgAAAIE"]
[Wed Apr 08 01:25:52.813213 2026] [:error] [pid 5337:tid 5378] [client 4.233.113.246:11828] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uxijj.php"] [unique_id "adU-ICboIFdw6tlcN13XBgAAARQ"]
[Wed Apr 08 01:25:53.298620 2026] [:error] [pid 4842:tid 5190] [client 4.233.113.246:50562] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uxijj.php"] [unique_id "adU-IZdncJIGbBiMOXTB4AAAAEI"]
[Wed Apr 08 01:25:53.771729 2026] [:error] [pid 5337:tid 5365] [client 4.233.113.246:43195] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs7.php"] [unique_id "adU-ISboIFdw6tlcN13XDgAAAQc"]
[Wed Apr 08 01:25:54.249077 2026] [:error] [pid 4840:tid 5168] [client 4.233.113.246:33890] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs7.php"] [unique_id "adU-IhsUwg2fEe9p9LS-BAAAAAg"]
[Wed Apr 08 01:25:54.746589 2026] [:error] [pid 4860:tid 5239] [client 4.233.113.246:50602] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs7.php"] [unique_id "adU-Ign6KmY32L3WSeHAIgAAAJg"]
[Wed Apr 08 01:25:55.223590 2026] [:error] [pid 5337:tid 5380] [client 4.233.113.246:33907] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs7.php"] [unique_id "adU-IyboIFdw6tlcN13XHgAAARY"]
[Wed Apr 08 01:25:55.701939 2026] [:error] [pid 5337:tid 5365] [client 4.233.113.246:56601] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tool2.php"] [unique_id "adU-IyboIFdw6tlcN13XIQAAAQc"]
[Wed Apr 08 01:25:56.183572 2026] [:error] [pid 4860:tid 5231] [client 4.233.113.246:33889] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tool2.php"] [unique_id "adU-JAn6KmY32L3WSeHAKwAAAJA"]
[Wed Apr 08 01:25:56.666197 2026] [:error] [pid 4860:tid 5230] [client 4.233.113.246:38301] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tool2.php"] [unique_id "adU-JAn6KmY32L3WSeHALAAAAI8"]
[Wed Apr 08 01:25:57.158420 2026] [:error] [pid 4860:tid 5217] [client 4.233.113.246:43151] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tool2.php"] [unique_id "adU-JQn6KmY32L3WSeHALgAAAII"]
[Wed Apr 08 01:25:57.633801 2026] [:error] [pid 5337:tid 5358] [client 4.233.113.246:43153] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zjllx.php"] [unique_id "adU-JSboIFdw6tlcN13XJgAAAQA"]
[Wed Apr 08 01:25:58.113307 2026] [:error] [pid 5246:tid 5268] [client 4.233.113.246:63120] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zjllx.php"] [unique_id "adU-JhLpySxaVC8kLEZkyAAAANI"]
[Wed Apr 08 01:25:58.595381 2026] [:error] [pid 5337:tid 5361] [client 4.233.113.246:43189] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zjllx.php"] [unique_id "adU-JiboIFdw6tlcN13XJwAAAQM"]
[Wed Apr 08 01:25:59.085086 2026] [:error] [pid 4840:tid 5179] [client 4.233.113.246:20120] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zjllx.php"] [unique_id "adU-JxsUwg2fEe9p9LS-DwAAABM"]
[Wed Apr 08 01:25:59.568788 2026] [:error] [pid 4840:tid 5171] [client 4.233.113.246:58901] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/h2.php"] [unique_id "adU-JxsUwg2fEe9p9LS-EgAAAAs"]
[Wed Apr 08 01:26:00.041564 2026] [:error] [pid 5337:tid 5377] [client 4.233.113.246:11876] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/h2.php"] [unique_id "adU-KCboIFdw6tlcN13XLAAAARM"]
[Wed Apr 08 01:26:00.524393 2026] [:error] [pid 4840:tid 5172] [client 4.233.113.246:57927] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/h2.php"] [unique_id "adU-KBsUwg2fEe9p9LS-FQAAAAw"]
[Wed Apr 08 01:26:01.021571 2026] [:error] [pid 4842:tid 5200] [client 4.233.113.246:11902] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/h2.php"] [unique_id "adU-KZdncJIGbBiMOXTB6AAAAEw"]
[Wed Apr 08 01:26:01.512977 2026] [:error] [pid 5246:tid 5273] [client 4.233.113.246:41246] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tiny2.php"] [unique_id "adU-KRLpySxaVC8kLEZkzwAAANc"]
[Wed Apr 08 01:26:01.991974 2026] [:error] [pid 4840:tid 5165] [client 4.233.113.246:50580] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tiny2.php"] [unique_id "adU-KRsUwg2fEe9p9LS-IQAAAAU"]
[Wed Apr 08 01:26:02.468391 2026] [:error] [pid 5337:tid 5376] [client 4.233.113.246:4198] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tiny2.php"] [unique_id "adU-KiboIFdw6tlcN13XLwAAARI"]
[Wed Apr 08 01:26:02.952003 2026] [:error] [pid 5337:tid 5362] [client 4.233.113.246:50618] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tiny2.php"] [unique_id "adU-KiboIFdw6tlcN13XMAAAAQQ"]
[Wed Apr 08 01:26:03.428905 2026] [:error] [pid 5337:tid 5364] [client 4.233.113.246:41224] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wsheet1.php"] [unique_id "adU-KyboIFdw6tlcN13XMgAAAQY"]
[Wed Apr 08 01:26:03.908827 2026] [:error] [pid 5337:tid 5372] [client 4.233.113.246:27275] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wsheet1.php"] [unique_id "adU-KyboIFdw6tlcN13XMwAAAQ4"]
[Wed Apr 08 01:26:04.393858 2026] [:error] [pid 5337:tid 5380] [client 4.233.113.246:42603] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wsheet1.php"] [unique_id "adU-LCboIFdw6tlcN13XNQAAARY"]
[Wed Apr 08 01:26:04.877424 2026] [:error] [pid 303:tid 318] [client 4.233.113.246:56617] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wsheet1.php"] [unique_id "adU-LM9wWR0DHTrNMujULAAAAUw"]
[Wed Apr 08 01:26:05.371314 2026] [:error] [pid 5337:tid 5359] [client 4.233.113.246:63155] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dbc.php"] [unique_id "adU-LSboIFdw6tlcN13XNwAAAQE"]
[Wed Apr 08 01:26:05.845555 2026] [:error] [pid 5246:tid 5254] [client 4.233.113.246:56614] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dbc.php"] [unique_id "adU-LRLpySxaVC8kLEZk2gAAAMQ"]
[Wed Apr 08 01:26:06.325696 2026] [:error] [pid 4842:tid 5195] [client 4.233.113.246:37226] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dbc.php"] [unique_id "adU-LpdncJIGbBiMOXTB7QAAAEc"]
[Wed Apr 08 01:26:06.802088 2026] [:error] [pid 4860:tid 5227] [client 4.233.113.246:50619] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dbc.php"] [unique_id "adU-Lgn6KmY32L3WSeHAOAAAAIw"]
[Wed Apr 08 01:26:07.282144 2026] [:error] [pid 5246:tid 5269] [client 4.233.113.246:63167] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "adU-LxLpySxaVC8kLEZk4AAAANM"]
[Wed Apr 08 01:26:07.765835 2026] [:error] [pid 4840:tid 5167] [client 4.233.113.246:27269] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "adU-LxsUwg2fEe9p9LS-MwAAAAc"]
[Wed Apr 08 01:26:08.262385 2026] [:error] [pid 303:tid 330] [client 4.233.113.246:11785] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "adU-MM9wWR0DHTrNMujUMwAAAVg"]
[Wed Apr 08 01:26:08.739304 2026] [:error] [pid 4840:tid 5173] [client 4.233.113.246:56590] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "adU-MBsUwg2fEe9p9LS-NQAAAA0"]
[Wed Apr 08 01:26:09.223032 2026] [:error] [pid 303:tid 310] [client 4.233.113.246:56605] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ukaa.php"] [unique_id "adU-Mc9wWR0DHTrNMujUNgAAAUQ"]
[Wed Apr 08 01:26:09.703524 2026] [:error] [pid 303:tid 314] [client 4.233.113.246:50588] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ukaa.php"] [unique_id "adU-Mc9wWR0DHTrNMujUOAAAAUg"]
[Wed Apr 08 01:26:10.177657 2026] [:error] [pid 4860:tid 5237] [client 4.233.113.246:41252] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ukaa.php"] [unique_id "adU-Mgn6KmY32L3WSeHAQwAAAJY"]
[Wed Apr 08 01:26:10.672005 2026] [:error] [pid 5246:tid 5252] [client 4.233.113.246:38319] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ukaa.php"] [unique_id "adU-MhLpySxaVC8kLEZk7QAAAMI"]
[Wed Apr 08 01:26:11.147939 2026] [:error] [pid 4860:tid 5236] [client 4.233.113.246:42584] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xs.php"] [unique_id "adU-Mwn6KmY32L3WSeHARwAAAJU"]
[Wed Apr 08 01:26:11.626873 2026] [:error] [pid 5246:tid 5251] [client 4.233.113.246:42601] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xs.php"] [unique_id "adU-MxLpySxaVC8kLEZk8AAAAME"]
[Wed Apr 08 01:26:12.116501 2026] [:error] [pid 303:tid 320] [client 4.233.113.246:11886] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xs.php"] [unique_id "adU-NM9wWR0DHTrNMujUOgAAAU4"]
[Wed Apr 08 01:26:12.603892 2026] [:error] [pid 303:tid 326] [client 4.233.113.246:58930] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xs.php"] [unique_id "adU-NM9wWR0DHTrNMujUQAAAAVQ"]
[Wed Apr 08 01:26:13.099991 2026] [:error] [pid 303:tid 328] [client 4.233.113.246:27295] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "adU-Nc9wWR0DHTrNMujUQQAAAVY"]
[Wed Apr 08 01:26:13.585827 2026] [:error] [pid 4840:tid 5170] [client 4.233.113.246:43193] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "adU-NRsUwg2fEe9p9LS-SQAAAAo"]
[Wed Apr 08 01:26:14.094291 2026] [:error] [pid 303:tid 309] [client 4.233.113.246:56622] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "adU-Ns9wWR0DHTrNMujURwAAAUM"]
[Wed Apr 08 01:26:14.573976 2026] [:error] [pid 303:tid 320] [client 4.233.113.246:11869] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "adU-Ns9wWR0DHTrNMujUSgAAAU4"]
[Wed Apr 08 01:26:15.064287 2026] [:error] [pid 4840:tid 5184] [client 4.233.113.246:11805] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zogy1.php"] [unique_id "adU-NxsUwg2fEe9p9LS-SwAAABg"]
[Wed Apr 08 01:26:15.552914 2026] [:error] [pid 4842:tid 5194] [client 4.233.113.246:56585] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zogy1.php"] [unique_id "adU-N5dncJIGbBiMOXTB9AAAAEY"]
[Wed Apr 08 01:26:16.040603 2026] [:error] [pid 4840:tid 5179] [client 4.233.113.246:63139] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zogy1.php"] [unique_id "adU-OBsUwg2fEe9p9LS-TQAAABM"]
[Wed Apr 08 01:26:16.518794 2026] [:error] [pid 4842:tid 5202] [client 4.233.113.246:11818] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zogy1.php"] [unique_id "adU-OJdncJIGbBiMOXTB9gAAAE4"]
[Wed Apr 08 01:26:17.026146 2026] [:error] [pid 5246:tid 5271] [client 4.233.113.246:27281] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zoper1.php"] [unique_id "adU-ORLpySxaVC8kLEZk-gAAANU"]
[Wed Apr 08 01:26:17.511870 2026] [:error] [pid 4840:tid 5168] [client 4.233.113.246:4739] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zoper1.php"] [unique_id "adU-ORsUwg2fEe9p9LS-UAAAAAg"]
[Wed Apr 08 01:26:25.323996 2026] [:error] [pid 4840:tid 5181] [client 4.233.113.246:58928] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yussef.php"] [unique_id "adU-QRsUwg2fEe9p9LS-iQAAABU"]
[Wed Apr 08 01:26:25.822811 2026] [:error] [pid 4860:tid 5238] [client 4.233.113.246:33899] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yussef.php"] [unique_id "adU-QQn6KmY32L3WSeHAWgAAAJc"]
[Wed Apr 08 01:26:26.358018 2026] [:error] [pid 303:tid 329] [client 4.233.113.246:27270] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yussef.php"] [unique_id "adU-Qs9wWR0DHTrNMujUWgAAAVc"]
[Wed Apr 08 01:26:26.870680 2026] [:error] [pid 303:tid 313] [client 4.233.113.246:11788] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yussef.php"] [unique_id "adU-Qs9wWR0DHTrNMujUXgAAAUc"]
[Wed Apr 08 01:26:27.366324 2026] [:error] [pid 303:tid 315] [client 4.233.113.246:41254] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ay.php"] [unique_id "adU-Q89wWR0DHTrNMujUYAAAAUk"]
[Wed Apr 08 01:26:27.850322 2026] [:error] [pid 4842:tid 5196] [client 4.233.113.246:56628] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ay.php"] [unique_id "adU-Q5dncJIGbBiMOXTCAgAAAEg"]
[Wed Apr 08 01:26:28.369981 2026] [:error] [pid 303:tid 307] [client 4.233.113.246:4197] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ay.php"] [unique_id "adU-RM9wWR0DHTrNMujUYgAAAUE"]
[Wed Apr 08 01:26:28.847550 2026] [:error] [pid 4842:tid 5202] [client 4.233.113.246:38316] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ay.php"] [unique_id "adU-RJdncJIGbBiMOXTCBgAAAE4"]
[Wed Apr 08 01:26:29.322631 2026] [:error] [pid 303:tid 311] [client 4.233.113.246:58935] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/12.php"] [unique_id "adU-Rc9wWR0DHTrNMujUZgAAAUU"]
[Wed Apr 08 01:26:29.849546 2026] [:error] [pid 303:tid 306] [client 4.233.113.246:50571] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/12.php"] [unique_id "adU-Rc9wWR0DHTrNMujUaQAAAUA"]
[Wed Apr 08 01:26:30.326647 2026] [:error] [pid 303:tid 312] [client 4.233.113.246:38326] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/12.php"] [unique_id "adU-Rs9wWR0DHTrNMujUbgAAAUY"]
[Wed Apr 08 01:26:30.808465 2026] [:error] [pid 5246:tid 5266] [client 4.233.113.246:42604] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/12.php"] [unique_id "adU-RhLpySxaVC8kLEZlEwAAANA"]
[Wed Apr 08 01:26:31.301997 2026] [:error] [pid 5246:tid 5252] [client 4.233.113.246:41270] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/btx25.php"] [unique_id "adU-RxLpySxaVC8kLEZlFgAAAMI"]
[Wed Apr 08 01:26:31.787072 2026] [:error] [pid 5246:tid 5272] [client 4.233.113.246:58941] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/btx25.php"] [unique_id "adU-RxLpySxaVC8kLEZlGQAAANY"]
[Wed Apr 08 01:26:32.274131 2026] [:error] [pid 4840:tid 5170] [client 4.233.113.246:11879] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/btx25.php"] [unique_id "adU-SBsUwg2fEe9p9LS-kgAAAAo"]
[Wed Apr 08 01:26:32.793591 2026] [:error] [pid 4860:tid 5231] [client 4.233.113.246:50586] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/btx25.php"] [unique_id "adU-SAn6KmY32L3WSeHAYgAAAJA"]
[Wed Apr 08 01:26:33.271030 2026] [:error] [pid 303:tid 323] [client 4.233.113.246:56603] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x123x.php"] [unique_id "adU-Sc9wWR0DHTrNMujUdgAAAVE"]
[Wed Apr 08 01:26:33.769134 2026] [:error] [pid 5246:tid 5250] [client 4.233.113.246:37211] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x123x.php"] [unique_id "adU-SRLpySxaVC8kLEZlIgAAAMA"]
[Wed Apr 08 01:26:34.267040 2026] [:error] [pid 5246:tid 5252] [client 4.233.113.246:50574] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x123x.php"] [unique_id "adU-ShLpySxaVC8kLEZlJQAAAMI"]
[Wed Apr 08 01:26:34.759081 2026] [:error] [pid 4840:tid 5172] [client 4.233.113.246:4186] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x123x.php"] [unique_id "adU-ShsUwg2fEe9p9LS-lwAAAAw"]
[Wed Apr 08 01:26:35.267697 2026] [:error] [pid 4860:tid 5238] [client 4.233.113.246:41271] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/trx24.php"] [unique_id "adU-Swn6KmY32L3WSeHAZQAAAJc"]
[Wed Apr 08 01:26:35.759605 2026] [:error] [pid 4860:tid 5230] [client 4.233.113.246:43149] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/trx24.php"] [unique_id "adU-Swn6KmY32L3WSeHAZwAAAI8"]
[Wed Apr 08 01:26:36.269456 2026] [:error] [pid 5246:tid 5251] [client 4.233.113.246:56611] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/trx24.php"] [unique_id "adU-TBLpySxaVC8kLEZlKQAAAME"]
[Wed Apr 08 01:26:36.780940 2026] [:error] [pid 4860:tid 5220] [client 4.233.113.246:63148] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/trx24.php"] [unique_id "adU-TAn6KmY32L3WSeHAbwAAAIU"]
[Wed Apr 08 01:26:37.268785 2026] [:error] [pid 5246:tid 5273] [client 4.233.113.246:27307] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "adU-TRLpySxaVC8kLEZlMQAAANc"]
[Wed Apr 08 01:26:37.769801 2026] [:error] [pid 303:tid 319] [client 4.233.113.246:57958] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "adU-Tc9wWR0DHTrNMujUfgAAAU0"]
[Wed Apr 08 01:26:38.272969 2026] [:error] [pid 5246:tid 5266] [client 4.233.113.246:58929] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "adU-ThLpySxaVC8kLEZlNgAAANA"]
[Wed Apr 08 01:26:38.838349 2026] [:error] [pid 5246:tid 5262] [client 4.233.113.246:50596] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "adU-ThLpySxaVC8kLEZlOwAAAMw"]
[Wed Apr 08 01:26:39.336348 2026] [:error] [pid 4842:tid 5208] [client 4.233.113.246:43139] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "adU-T5dncJIGbBiMOXTCCgAAAFQ"]
[Wed Apr 08 01:26:39.835379 2026] [:error] [pid 5337:tid 5360] [client 4.233.113.246:33898] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "adU-TyboIFdw6tlcN13XVQAAAQI"]
[Wed Apr 08 01:26:40.383759 2026] [:error] [pid 4842:tid 5197] [client 4.233.113.246:21676] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "adU-UJdncJIGbBiMOXTCDQAAAEk"]
[Wed Apr 08 01:26:40.960852 2026] [:error] [pid 4840:tid 5166] [client 4.233.113.246:26348] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "adU-UBsUwg2fEe9p9LS-oAAAAAY"]
[Wed Apr 08 01:26:41.723532 2026] [:error] [pid 5246:tid 5258] [client 4.233.113.246:56621] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/less.php"] [unique_id "adU-URLpySxaVC8kLEZlQwAAAMg"]
[Wed Apr 08 01:26:42.198715 2026] [:error] [pid 303:tid 320] [client 4.233.113.246:41258] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/less.php"] [unique_id "adU-Us9wWR0DHTrNMujUjQAAAU4"]
[Wed Apr 08 01:26:42.744749 2026] [:error] [pid 5337:tid 5370] [client 4.233.113.246:11862] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/less.php"] [unique_id "adU-UiboIFdw6tlcN13XXQAAAQw"]
[Wed Apr 08 01:26:43.229090 2026] [:error] [pid 5337:tid 5359] [client 4.233.113.246:38305] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/less.php"] [unique_id "adU-UyboIFdw6tlcN13XZAAAAQE"]
[Wed Apr 08 01:26:43.730493 2026] [:error] [pid 4860:tid 5237] [client 4.233.113.246:42574] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ss.php"] [unique_id "adU-Uwn6KmY32L3WSeHAfwAAAJY"]
[Wed Apr 08 01:26:44.238007 2026] [:error] [pid 4840:tid 5165] [client 4.233.113.246:15542] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ss.php"] [unique_id "adU-VBsUwg2fEe9p9LS-rQAAAAU"]
[Wed Apr 08 01:26:44.779358 2026] [:error] [pid 4842:tid 5206] [client 4.233.113.246:27264] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ss.php"] [unique_id "adU-VJdncJIGbBiMOXTCDwAAAFI"]
[Wed Apr 08 01:26:45.369606 2026] [:error] [pid 4860:tid 5222] [client 4.233.113.246:56619] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ss.php"] [unique_id "adU-VQn6KmY32L3WSeHAggAAAIc"]
[Wed Apr 08 01:26:45.912811 2026] [:error] [pid 5337:tid 5379] [client 4.233.113.246:11829] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xdd.php"] [unique_id "adU-VSboIFdw6tlcN13XfAAAARU"]
[Wed Apr 08 01:26:46.500756 2026] [:error] [pid 5246:tid 5257] [client 4.233.113.246:38324] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xdd.php"] [unique_id "adU-VhLpySxaVC8kLEZlcwAAAMc"]
[Wed Apr 08 01:26:47.031647 2026] [:error] [pid 303:tid 310] [client 4.233.113.246:50560] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xdd.php"] [unique_id "adU-V89wWR0DHTrNMujUlgAAAUQ"]
[Wed Apr 08 01:26:47.604740 2026] [:error] [pid 303:tid 330] [client 4.233.113.246:42582] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xdd.php"] [unique_id "adU-V89wWR0DHTrNMujUmgAAAVg"]
[Wed Apr 08 01:26:48.102096 2026] [:error] [pid 5337:tid 5382] [client 4.233.113.246:60424] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "adU-WCboIFdw6tlcN13XhQAAARg"]
[Wed Apr 08 01:26:48.592368 2026] [:error] [pid 5246:tid 5270] [client 4.233.113.246:60470] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "adU-WBLpySxaVC8kLEZlfAAAANQ"]
[Wed Apr 08 01:26:49.068928 2026] [:error] [pid 4860:tid 5231] [client 4.233.113.246:34605] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "adU-WQn6KmY32L3WSeHAhwAAAJA"]
[Wed Apr 08 01:26:49.655697 2026] [:error] [pid 5337:tid 5375] [client 4.233.113.246:38310] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "adU-WSboIFdw6tlcN13XigAAARE"]
[Wed Apr 08 01:26:50.179790 2026] [:error] [pid 5337:tid 5371] [client 4.233.113.246:50565] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/roksad1.php"] [unique_id "adU-WiboIFdw6tlcN13XjQAAAQ0"]
[Wed Apr 08 01:26:50.675969 2026] [:error] [pid 4842:tid 5199] [client 4.233.113.246:15510] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/roksad1.php"] [unique_id "adU-WpdncJIGbBiMOXTCFAAAAEs"]
[Wed Apr 08 01:26:51.190941 2026] [:error] [pid 4860:tid 5235] [client 4.233.113.246:4192] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/roksad1.php"] [unique_id "adU-Wwn6KmY32L3WSeHAiQAAAJQ"]
[Wed Apr 08 01:26:51.756412 2026] [:error] [pid 4840:tid 5169] [client 4.233.113.246:4184] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/roksad1.php"] [unique_id "adU-WxsUwg2fEe9p9LS-vAAAAAk"]
[Wed Apr 08 01:26:52.250589 2026] [:error] [pid 5246:tid 5270] [client 4.233.113.246:27279] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/update1.php"] [unique_id "adU-XBLpySxaVC8kLEZlgQAAANQ"]
[Wed Apr 08 01:26:52.783224 2026] [:error] [pid 4842:tid 5191] [client 4.233.113.246:60419] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/update1.php"] [unique_id "adU-XJdncJIGbBiMOXTCGQAAAEM"]
[Wed Apr 08 01:26:53.285488 2026] [:error] [pid 4860:tid 5224] [client 4.233.113.246:50621] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/update1.php"] [unique_id "adU-XQn6KmY32L3WSeHAiwAAAIk"]
[Wed Apr 08 01:26:53.860890 2026] [:error] [pid 4842:tid 5195] [client 4.233.113.246:50566] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/update1.php"] [unique_id "adU-XZdncJIGbBiMOXTCGwAAAEc"]
[Wed Apr 08 01:26:54.408653 2026] [:error] [pid 4860:tid 5230] [client 4.233.113.246:63142] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "adU-Xgn6KmY32L3WSeHAkQAAAI8"]
[Wed Apr 08 01:26:54.902921 2026] [:error] [pid 5337:tid 5369] [client 4.233.113.246:38328] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "adU-XiboIFdw6tlcN13XnQAAAQs"]
[Wed Apr 08 01:26:55.434818 2026] [:error] [pid 4842:tid 5197] [client 4.233.113.246:26361] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "adU-X5dncJIGbBiMOXTCHAAAAEk"]
[Wed Apr 08 01:26:55.916546 2026] [:error] [pid 5337:tid 5359] [client 4.233.113.246:63138] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "adU-XyboIFdw6tlcN13XoQAAAQE"]
[Wed Apr 08 01:26:56.485521 2026] [:error] [pid 4840:tid 5181] [client 4.233.113.246:41276] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/9.php"] [unique_id "adU-YBsUwg2fEe9p9LS-xQAAABU"]
[Wed Apr 08 01:26:57.044093 2026] [:error] [pid 4840:tid 5170] [client 4.233.113.246:11863] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/9.php"] [unique_id "adU-YRsUwg2fEe9p9LS-xgAAAAo"]
[Wed Apr 08 01:26:57.586188 2026] [:error] [pid 4860:tid 5235] [client 4.233.113.246:11849] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/9.php"] [unique_id "adU-YQn6KmY32L3WSeHAmgAAAJQ"]
[Wed Apr 08 01:26:58.075766 2026] [:error] [pid 4842:tid 5209] [client 4.233.113.246:11834] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/9.php"] [unique_id "adU-YpdncJIGbBiMOXTCIgAAAFU"]
[Wed Apr 08 01:26:58.629189 2026] [:error] [pid 4860:tid 5216] [client 4.233.113.246:34603] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/new2.php"] [unique_id "adU-Ygn6KmY32L3WSeHAnQAAAIE"]
[Wed Apr 08 01:26:59.128318 2026] [:error] [pid 4840:tid 5169] [client 4.233.113.246:26345] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/new2.php"] [unique_id "adU-YxsUwg2fEe9p9LS-ywAAAAk"]
[Wed Apr 08 01:26:59.674487 2026] [:error] [pid 303:tid 312] [client 4.233.113.246:11856] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/new2.php"] [unique_id "adU-Y89wWR0DHTrNMujUqAAAAUY"]
[Wed Apr 08 01:27:00.175283 2026] [:error] [pid 303:tid 318] [client 4.233.113.246:4455] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/new2.php"] [unique_id "adU-ZM9wWR0DHTrNMujUrAAAAUw"]
[Wed Apr 08 01:27:00.661894 2026] [:error] [pid 4840:tid 5178] [client 4.233.113.246:33904] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/packsin1.php"] [unique_id "adU-ZBsUwg2fEe9p9LS-zgAAABI"]
[Wed Apr 08 01:27:01.224892 2026] [:error] [pid 5337:tid 5382] [client 4.233.113.246:15538] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/packsin1.php"] [unique_id "adU-ZSboIFdw6tlcN13XrQAAARg"]
[Wed Apr 08 01:27:01.715577 2026] [:error] [pid 303:tid 330] [client 4.233.113.246:27273] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/packsin1.php"] [unique_id "adU-Zc9wWR0DHTrNMujUtQAAAVg"]
[Wed Apr 08 01:27:02.215698 2026] [:error] [pid 303:tid 324] [client 4.233.113.246:11815] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/packsin1.php"] [unique_id "adU-Zs9wWR0DHTrNMujUuAAAAVI"]
[Wed Apr 08 01:27:02.740180 2026] [:error] [pid 303:tid 326] [client 4.233.113.246:15527] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wziar1.php"] [unique_id "adU-Zs9wWR0DHTrNMujUugAAAVQ"]
[Wed Apr 08 01:27:03.266186 2026] [:error] [pid 5337:tid 5375] [client 4.233.113.246:26355] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wziar1.php"] [unique_id "adU-ZyboIFdw6tlcN13XswAAARE"]
[Wed Apr 08 01:27:03.774300 2026] [:error] [pid 5246:tid 5271] [client 4.233.113.246:33860] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wziar1.php"] [unique_id "adU-ZxLpySxaVC8kLEZljwAAANU"]
[Wed Apr 08 01:27:04.321636 2026] [:error] [pid 4860:tid 5232] [client 4.233.113.246:38280] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wziar1.php"] [unique_id "adU-aAn6KmY32L3WSeHApAAAAJE"]
[Wed Apr 08 01:27:04.901754 2026] [:error] [pid 303:tid 317] [client 4.233.113.246:4431] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wswer1.php"] [unique_id "adU-aM9wWR0DHTrNMujUvQAAAUs"]
[Wed Apr 08 01:27:05.423663 2026] [:error] [pid 5337:tid 5358] [client 4.233.113.246:11796] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wswer1.php"] [unique_id "adU-aSboIFdw6tlcN13XugAAAQA"]
[Wed Apr 08 01:27:05.925764 2026] [:error] [pid 5246:tid 5268] [client 4.233.113.246:60479] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wswer1.php"] [unique_id "adU-aRLpySxaVC8kLEZllwAAANI"]
[Wed Apr 08 01:27:06.428922 2026] [:error] [pid 5337:tid 5377] [client 4.233.113.246:63130] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wswer1.php"] [unique_id "adU-aiboIFdw6tlcN13XvgAAARM"]
[Wed Apr 08 01:27:06.950862 2026] [:error] [pid 5337:tid 5368] [client 4.233.113.246:21686] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-ccv.php"] [unique_id "adU-aiboIFdw6tlcN13XxAAAAQo"]
[Wed Apr 08 01:27:07.488452 2026] [:error] [pid 303:tid 325] [client 4.233.113.246:63131] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-ccv.php"] [unique_id "adU-a89wWR0DHTrNMujUwQAAAVM"]
[Wed Apr 08 01:27:07.984850 2026] [:error] [pid 303:tid 315] [client 4.233.113.246:63147] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-ccv.php"] [unique_id "adU-a89wWR0DHTrNMujUwwAAAUk"]
[Wed Apr 08 01:27:08.537920 2026] [:error] [pid 4860:tid 5223] [client 4.233.113.246:42611] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-ccv.php"] [unique_id "adU-bAn6KmY32L3WSeHAqAAAAIg"]
[Wed Apr 08 01:27:09.072538 2026] [:error] [pid 303:tid 319] [client 4.233.113.246:4347] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wo.php"] [unique_id "adU-bc9wWR0DHTrNMujUxwAAAU0"]
[Wed Apr 08 01:27:09.734863 2026] [:error] [pid 5337:tid 5376] [client 4.233.113.246:63109] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wo.php"] [unique_id "adU-bSboIFdw6tlcN13X1AAAARI"]
[Wed Apr 08 01:27:10.240812 2026] [:error] [pid 4842:tid 5207] [client 4.233.113.246:11791] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wo.php"] [unique_id "adU-bpdncJIGbBiMOXTCKwAAAFM"]
[Wed Apr 08 01:27:10.758414 2026] [:error] [pid 303:tid 316] [client 4.233.113.246:63136] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wo.php"] [unique_id "adU-bs9wWR0DHTrNMujUzgAAAUo"]
[Wed Apr 08 01:27:11.266392 2026] [:error] [pid 4840:tid 5179] [client 4.233.113.246:27266] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "adU-bxsUwg2fEe9p9LS-0wAAABM"]
[Wed Apr 08 01:27:11.908572 2026] [:error] [pid 4840:tid 5170] [client 4.233.113.246:15498] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "adU-bxsUwg2fEe9p9LS-1gAAAAo"]
[Wed Apr 08 01:27:12.409748 2026] [:error] [pid 5337:tid 5369] [client 4.233.113.246:11789] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "adU-cCboIFdw6tlcN13X4AAAAQs"]
[Wed Apr 08 01:27:12.933043 2026] [:error] [pid 5337:tid 5373] [client 4.233.113.246:38296] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "adU-cCboIFdw6tlcN13X4wAAAQ8"]
[Wed Apr 08 01:27:13.569632 2026] [:error] [pid 5337:tid 5360] [client 4.233.113.246:26309] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/floya.php"] [unique_id "adU-cSboIFdw6tlcN13X6wAAAQI"]
[Wed Apr 08 01:27:14.143098 2026] [:error] [pid 4840:tid 5167] [client 4.233.113.246:34610] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/floya.php"] [unique_id "adU-chsUwg2fEe9p9LS-2gAAAAc"]
[Wed Apr 08 01:27:14.689912 2026] [:error] [pid 5246:tid 5274] [client 4.233.113.246:63108] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/floya.php"] [unique_id "adU-chLpySxaVC8kLEZloQAAANg"]
[Wed Apr 08 01:27:15.178647 2026] [:error] [pid 5246:tid 5254] [client 4.233.113.246:21649] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/floya.php"] [unique_id "adU-cxLpySxaVC8kLEZlpgAAAMQ"]
[Wed Apr 08 01:27:15.706504 2026] [:error] [pid 5246:tid 5253] [client 4.233.113.246:15505] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wolf.php"] [unique_id "adU-cxLpySxaVC8kLEZlqAAAAMM"]
[Wed Apr 08 01:27:16.182164 2026] [:error] [pid 5246:tid 5259] [client 4.233.113.246:21671] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wolf.php"] [unique_id "adU-dBLpySxaVC8kLEZlrAAAAMk"]
[Wed Apr 08 01:27:16.700501 2026] [:error] [pid 5246:tid 5274] [client 4.233.113.246:21650] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wolf.php"] [unique_id "adU-dBLpySxaVC8kLEZlrgAAANg"]
[Wed Apr 08 01:27:17.328525 2026] [:error] [pid 5337:tid 5370] [client 4.233.113.246:58604] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wolf.php"] [unique_id "adU-dSboIFdw6tlcN13YAAAAAQw"]
[Wed Apr 08 01:27:17.824937 2026] [:error] [pid 5337:tid 5371] [client 4.233.113.246:58623] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/only.php"] [unique_id "adU-dSboIFdw6tlcN13YBAAAAQ0"]
[Wed Apr 08 01:27:18.347386 2026] [:error] [pid 5246:tid 5272] [client 4.233.113.246:37664] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/only.php"] [unique_id "adU-dhLpySxaVC8kLEZluQAAANY"]
[Wed Apr 08 01:27:18.901407 2026] [:error] [pid 4840:tid 5164] [client 4.233.113.246:52996] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/only.php"] [unique_id "adU-dhsUwg2fEe9p9LS-5QAAAAQ"]
[Wed Apr 08 01:27:19.470574 2026] [:error] [pid 5337:tid 5366] [client 4.233.113.246:60448] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/only.php"] [unique_id "adU-dyboIFdw6tlcN13YEAAAAQg"]
[Wed Apr 08 01:27:19.991513 2026] [:error] [pid 4860:tid 5224] [client 4.233.113.246:58620] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vdb.php"] [unique_id "adU-dwn6KmY32L3WSeHAuQAAAIk"]
[Wed Apr 08 01:27:20.497913 2026] [:error] [pid 5337:tid 5382] [client 4.233.113.246:47735] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vdb.php"] [unique_id "adU-eCboIFdw6tlcN13YFQAAARg"]
[Wed Apr 08 01:27:21.059527 2026] [:error] [pid 5337:tid 5364] [client 4.233.113.246:16822] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vdb.php"] [unique_id "adU-eSboIFdw6tlcN13YGwAAAQY"]
[Wed Apr 08 01:27:21.589054 2026] [:error] [pid 5337:tid 5372] [client 4.233.113.246:34583] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vdb.php"] [unique_id "adU-eSboIFdw6tlcN13YHwAAAQ4"]
[Wed Apr 08 01:27:22.094292 2026] [:error] [pid 5337:tid 5361] [client 4.233.113.246:34600] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/om.php"] [unique_id "adU-eiboIFdw6tlcN13YJAAAAQM"]
[Wed Apr 08 01:27:22.603263 2026] [:error] [pid 5337:tid 5379] [client 4.233.113.246:47510] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/om.php"] [unique_id "adU-eiboIFdw6tlcN13YJwAAARU"]
[Wed Apr 08 01:27:23.098299 2026] [:error] [pid 5337:tid 5359] [client 4.233.113.246:53001] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/om.php"] [unique_id "adU-eyboIFdw6tlcN13YKAAAAQE"]
[Wed Apr 08 01:27:23.644753 2026] [:error] [pid 5337:tid 5382] [client 4.233.113.246:53007] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/om.php"] [unique_id "adU-eyboIFdw6tlcN13YKgAAARg"]
[Wed Apr 08 01:27:24.140407 2026] [:error] [pid 4860:tid 5220] [client 4.233.113.246:43809] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ox.php"] [unique_id "adU-fAn6KmY32L3WSeHAvwAAAIU"]
[Wed Apr 08 01:27:24.641907 2026] [:error] [pid 303:tid 308] [client 4.233.113.246:30276] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ox.php"] [unique_id "adU-fM9wWR0DHTrNMujU6AAAAUI"]
[Wed Apr 08 01:27:31.414720 2026] [:error] [pid 303:tid 330] [client 4.233.113.246:37340] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "adU-g89wWR0DHTrNMujVGwAAAVg"]
[Wed Apr 08 01:27:31.994907 2026] [:error] [pid 4840:tid 5162] [client 4.233.113.246:44469] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "adU-gxsUwg2fEe9p9LS-6AAAAAI"]
[Wed Apr 08 01:27:32.523941 2026] [:error] [pid 5246:tid 5260] [client 4.233.113.246:4145] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "adU-hBLpySxaVC8kLEZlxAAAAMo"]
[Wed Apr 08 01:27:33.116482 2026] [:error] [pid 303:tid 318] [client 4.233.113.246:22250] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "adU-hc9wWR0DHTrNMujVIgAAAUw"]
[Wed Apr 08 01:27:33.652033 2026] [:error] [pid 4840:tid 5180] [client 4.233.113.246:51980] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byp8.php"] [unique_id "adU-hRsUwg2fEe9p9LS-6gAAABQ"]
[Wed Apr 08 01:27:34.149632 2026] [:error] [pid 4860:tid 5226] [client 4.233.113.246:56136] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byp8.php"] [unique_id "adU-hgn6KmY32L3WSeHA0gAAAIs"]
[Wed Apr 08 01:27:34.714127 2026] [:error] [pid 5246:tid 5254] [client 4.233.113.246:19095] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byp8.php"] [unique_id "adU-hhLpySxaVC8kLEZl0AAAAMQ"]
[Wed Apr 08 01:27:35.216775 2026] [:error] [pid 303:tid 328] [client 4.233.113.246:56159] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byp8.php"] [unique_id "adU-h89wWR0DHTrNMujVJwAAAVY"]
[Wed Apr 08 01:27:35.822681 2026] [:error] [pid 303:tid 307] [client 4.233.113.246:28359] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "adU-h89wWR0DHTrNMujVKwAAAUE"]
[Wed Apr 08 01:27:36.668407 2026] [:error] [pid 4840:tid 5164] [client 4.233.113.246:22255] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "adU-iBsUwg2fEe9p9LS-8QAAAAQ"]
[Wed Apr 08 01:27:37.532634 2026] [:error] [pid 4840:tid 5161] [client 4.233.113.246:44447] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "adU-iRsUwg2fEe9p9LS-9gAAAAE"]
[Wed Apr 08 01:27:38.113249 2026] [:error] [pid 303:tid 306] [client 4.233.113.246:60524] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "adU-is9wWR0DHTrNMujVMAAAAUA"]
[Wed Apr 08 01:27:38.685040 2026] [:error] [pid 5246:tid 5255] [client 4.233.113.246:60517] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gilo.php"] [unique_id "adU-ihLpySxaVC8kLEZl2gAAAMU"]
[Wed Apr 08 01:27:39.237287 2026] [:error] [pid 4842:tid 5190] [client 4.233.113.246:18097] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gilo.php"] [unique_id "adU-i5dncJIGbBiMOXTCUAAAAEI"]
[Wed Apr 08 01:27:39.933341 2026] [:error] [pid 303:tid 309] [client 4.233.113.246:44464] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gilo.php"] [unique_id "adU-i89wWR0DHTrNMujVOQAAAUM"]
[Wed Apr 08 01:27:40.931607 2026] [:error] [pid 5337:tid 5360] [client 4.233.113.246:22244] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gilo.php"] [unique_id "adU-jCboIFdw6tlcN13YPQAAAQI"]
[Wed Apr 08 01:27:41.457577 2026] [:error] [pid 5337:tid 5365] [client 4.233.113.246:27381] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ww.php"] [unique_id "adU-jSboIFdw6tlcN13YQwAAAQc"]
[Wed Apr 08 01:27:42.088896 2026] [:error] [pid 5246:tid 5263] [client 4.233.113.246:24193] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ww.php"] [unique_id "adU-jhLpySxaVC8kLEZl4gAAAM0"]
[Wed Apr 08 01:27:42.794395 2026] [:error] [pid 303:tid 323] [client 4.233.113.246:28355] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ww.php"] [unique_id "adU-js9wWR0DHTrNMujVQgAAAVE"]
[Wed Apr 08 01:27:43.480523 2026] [:error] [pid 303:tid 319] [client 4.233.113.246:18106] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ww.php"] [unique_id "adU-j89wWR0DHTrNMujVRgAAAU0"]
[Wed Apr 08 01:27:44.086073 2026] [:error] [pid 303:tid 327] [client 4.233.113.246:18108] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x7r.php"] [unique_id "adU-kM9wWR0DHTrNMujVSQAAAVU"]
[Wed Apr 08 01:27:44.666358 2026] [:error] [pid 303:tid 317] [client 4.233.113.246:52004] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x7r.php"] [unique_id "adU-kM9wWR0DHTrNMujVTgAAAUs"]
[Wed Apr 08 01:27:45.308573 2026] [:error] [pid 5337:tid 5370] [client 4.233.113.246:24210] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x7r.php"] [unique_id "adU-kSboIFdw6tlcN13YSwAAAQw"]
[Wed Apr 08 01:27:45.978343 2026] [:error] [pid 5246:tid 5274] [client 4.233.113.246:32671] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x7r.php"] [unique_id "adU-kRLpySxaVC8kLEZl6gAAANg"]
[Wed Apr 08 01:27:46.656630 2026] [:error] [pid 5337:tid 5378] [client 4.233.113.246:38630] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/riz.php"] [unique_id "adU-kiboIFdw6tlcN13YUQAAARQ"]
[Wed Apr 08 01:27:47.270390 2026] [:error] [pid 5337:tid 5363] [client 4.233.113.246:33878] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/riz.php"] [unique_id "adU-kyboIFdw6tlcN13YVgAAAQU"]
[Wed Apr 08 01:27:47.839274 2026] [:error] [pid 4860:tid 5230] [client 4.233.113.246:29589] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/riz.php"] [unique_id "adU-kwn6KmY32L3WSeHA2gAAAI8"]
[Wed Apr 08 01:27:48.367496 2026] [:error] [pid 5246:tid 5264] [client 4.233.113.246:10034] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/riz.php"] [unique_id "adU-lBLpySxaVC8kLEZl7wAAAM4"]
[Wed Apr 08 01:27:49.029788 2026] [:error] [pid 4860:tid 5222] [client 4.233.113.246:4126] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp3.php"] [unique_id "adU-lQn6KmY32L3WSeHA3AAAAIc"]
[Wed Apr 08 01:27:49.584432 2026] [:error] [pid 4842:tid 5209] [client 4.233.113.246:24244] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp3.php"] [unique_id "adU-lZdncJIGbBiMOXTCWQAAAFU"]
[Wed Apr 08 01:27:50.234743 2026] [:error] [pid 4860:tid 5231] [client 4.233.113.246:20210] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp3.php"] [unique_id "adU-lgn6KmY32L3WSeHA3wAAAJA"]
[Wed Apr 08 01:27:50.767251 2026] [:error] [pid 5246:tid 5253] [client 4.233.113.246:21154] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp3.php"] [unique_id "adU-lhLpySxaVC8kLEZl9gAAAMM"]
[Wed Apr 08 01:27:51.337119 2026] [:error] [pid 5337:tid 5382] [client 4.233.113.246:32670] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gecko.php"] [unique_id "adU-lyboIFdw6tlcN13YXgAAARg"]
[Wed Apr 08 01:27:51.812482 2026] [:error] [pid 5337:tid 5378] [client 4.233.113.246:21128] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gecko.php"] [unique_id "adU-lyboIFdw6tlcN13YYQAAARQ"]
[Wed Apr 08 01:27:52.388989 2026] [:error] [pid 5337:tid 5373] [client 4.233.113.246:21178] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gecko.php"] [unique_id "adU-mCboIFdw6tlcN13YZgAAAQ8"]
[Wed Apr 08 01:27:52.892864 2026] [:error] [pid 5337:tid 5368] [client 4.233.113.246:27355] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gecko.php"] [unique_id "adU-mCboIFdw6tlcN13YbQAAAQo"]
[Wed Apr 08 01:27:53.489976 2026] [:error] [pid 5337:tid 5372] [client 4.233.113.246:24196] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ympoo.php"] [unique_id "adU-mSboIFdw6tlcN13YdgAAAQ4"]
[Wed Apr 08 01:27:54.058996 2026] [:error] [pid 5337:tid 5362] [client 4.233.113.246:29585] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ympoo.php"] [unique_id "adU-miboIFdw6tlcN13YeQAAAQQ"]
[Wed Apr 08 01:27:54.783338 2026] [:error] [pid 4860:tid 5220] [client 4.233.113.246:21172] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ympoo.php"] [unique_id "adU-mgn6KmY32L3WSeHA5gAAAIU"]
[Wed Apr 08 01:27:55.369362 2026] [:error] [pid 4842:tid 5208] [client 4.233.113.246:35986] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ympoo.php"] [unique_id "adU-m5dncJIGbBiMOXTCZAAAAFQ"]
[Wed Apr 08 01:27:55.927125 2026] [:error] [pid 303:tid 315] [client 4.233.113.246:56941] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/she.php"] [unique_id "adU-m89wWR0DHTrNMujVaQAAAUk"]
[Wed Apr 08 01:27:56.473600 2026] [:error] [pid 4842:tid 5198] [client 4.233.113.246:19352] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/she.php"] [unique_id "adU-nJdncJIGbBiMOXTCZQAAAEo"]
[Wed Apr 08 01:27:56.999548 2026] [:error] [pid 4842:tid 5196] [client 4.233.113.246:36010] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/she.php"] [unique_id "adU-nJdncJIGbBiMOXTCZgAAAEg"]
[Wed Apr 08 01:27:57.535331 2026] [:error] [pid 4860:tid 5232] [client 4.233.113.246:48881] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/she.php"] [unique_id "adU-nQn6KmY32L3WSeHA7QAAAJE"]
[Wed Apr 08 01:27:58.044467 2026] [:error] [pid 5246:tid 5271] [client 4.233.113.246:24233] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/haojj.php"] [unique_id "adU-nhLpySxaVC8kLEZmBgAAANU"]
[Wed Apr 08 01:27:58.525138 2026] [:error] [pid 5246:tid 5269] [client 4.233.113.246:27894] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/haojj.php"] [unique_id "adU-nhLpySxaVC8kLEZmCAAAANM"]
[Wed Apr 08 01:27:59.090509 2026] [:error] [pid 5246:tid 5266] [client 4.233.113.246:35983] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/haojj.php"] [unique_id "adU-nxLpySxaVC8kLEZmCgAAANA"]
[Wed Apr 08 01:27:59.574560 2026] [:error] [pid 303:tid 320] [client 4.233.113.246:4629] [client 4.233.113.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/haojj.php"] [unique_id "adU-n89wWR0DHTrNMujVdgAAAU4"]
[Thu Apr 09 02:16:31.670017 2026] [:error] [pid 40055:tid 40133] [client 149.36.48.67:44532] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "adabf3_5SjAJycOw5k_R_gAAAIM"]
[Thu Apr 09 02:16:32.539874 2026] [:error] [pid 40460:tid 40466] [client 149.36.48.67:44540] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "adabgIw-4-9CKD2kKMY9vQAAAEM"]
[Thu Apr 09 02:16:33.979023 2026] [:error] [pid 22056:tid 22062] [client 149.36.48.67:44550] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adabgWQ3CidOGkmVXZhPwAAAAMQ"]
[Thu Apr 09 02:16:34.831064 2026] [:error] [pid 40460:tid 40473] [client 149.36.48.67:44562] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "adabgow-4-9CKD2kKMY9xAAAAEo"]
[Thu Apr 09 02:16:36.224887 2026] [:error] [pid 22056:tid 22060] [client 149.36.48.67:50548] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "adabhGQ3CidOGkmVXZhP0wAAAMI"]
[Thu Apr 09 02:16:36.732459 2026] [:error] [pid 40055:tid 40143] [client 149.36.48.67:50560] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "adabhH_5SjAJycOw5k_SAAAAAI0"]
[Thu Apr 09 02:16:37.068865 2026] [:error] [pid 40460:tid 40463] [client 149.36.48.67:50574] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "adabhYw-4-9CKD2kKMY9ygAAAEA"]
[Thu Apr 09 02:16:37.425010 2026] [:error] [pid 40460:tid 40487] [client 149.36.48.67:50580] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "adabhYw-4-9CKD2kKMY9zAAAAFg"]
[Thu Apr 09 02:16:37.812754 2026] [:error] [pid 40054:tid 40116] [client 149.36.48.67:50588] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "adabhaymwSVk3s67lDePZAAAARE"]
[Thu Apr 09 02:16:38.172727 2026] [:error] [pid 40055:tid 40147] [client 149.36.48.67:50590] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "adabhn_5SjAJycOw5k_SAgAAAJE"]
[Thu Apr 09 02:16:38.745308 2026] [:error] [pid 40055:tid 40134] [client 149.36.48.67:50594] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "adabhn_5SjAJycOw5k_SBQAAAIQ"]
[Thu Apr 09 02:16:39.480903 2026] [:error] [pid 40053:tid 40076] [client 149.36.48.67:50610] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "adabh9dyKTqfO6aiQ6UcJQAAABI"]
[Thu Apr 09 02:16:40.158686 2026] [:error] [pid 40053:tid 40074] [client 149.36.48.67:50616] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "adabiNdyKTqfO6aiQ6UcKAAAABA"]
[Thu Apr 09 02:16:40.664629 2026] [:error] [pid 22056:tid 22069] [client 149.36.48.67:50628] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "adabiGQ3CidOGkmVXZhP3AAAAMs"]
[Thu Apr 09 02:16:41.171726 2026] [:error] [pid 22056:tid 22064] [client 149.36.48.67:50638] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "adabiWQ3CidOGkmVXZhP3wAAAMY"]
[Thu Apr 09 02:16:42.541338 2026] [:error] [pid 22056:tid 22080] [client 149.36.48.67:50650] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "adabimQ3CidOGkmVXZhP7QAAANY"]
[Thu Apr 09 02:16:43.047295 2026] [:error] [pid 40460:tid 40485] [client 149.36.48.67:50652] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "adabi4w-4-9CKD2kKMY90gAAAFY"]
[Thu Apr 09 02:16:43.733958 2026] [:error] [pid 40055:tid 40137] [client 149.36.48.67:50664] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "adabi3_5SjAJycOw5k_SCwAAAIc"]
[Thu Apr 09 02:16:44.246451 2026] [:error] [pid 22056:tid 22065] [client 149.36.48.67:50668] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "adabjGQ3CidOGkmVXZhP-QAAAMc"]
[Thu Apr 09 02:16:45.266749 2026] [:error] [pid 22056:tid 22068] [client 149.36.48.67:50682] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "adabjWQ3CidOGkmVXZhP_wAAAMo"]
[Thu Apr 09 02:16:45.775692 2026] [:error] [pid 22056:tid 22070] [client 149.36.48.67:35368] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "adabjWQ3CidOGkmVXZhQAwAAAMw"]
[Thu Apr 09 02:16:46.283504 2026] [:error] [pid 22056:tid 22072] [client 149.36.48.67:35374] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "adabjmQ3CidOGkmVXZhQBgAAAM4"]
[Thu Apr 09 02:16:46.619412 2026] [:error] [pid 40055:tid 40131] [client 149.36.48.67:35380] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "adabjn_5SjAJycOw5k_SDwAAAIE"]
[Thu Apr 09 02:16:46.955946 2026] [:error] [pid 22056:tid 22074] [client 149.36.48.67:35388] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "adabjmQ3CidOGkmVXZhQCQAAANA"]
[Thu Apr 09 02:16:47.804073 2026] [:error] [pid 22056:tid 22072] [client 149.36.48.67:35392] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "adabj2Q3CidOGkmVXZhQDwAAAM4"]
[Thu Apr 09 02:16:48.142435 2026] [:error] [pid 40460:tid 40483] [client 149.36.48.67:35408] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "adabkIw-4-9CKD2kKMY92gAAAFQ"]
[Thu Apr 09 02:16:48.477854 2026] [:error] [pid 22056:tid 22069] [client 149.36.48.67:35416] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "adabkGQ3CidOGkmVXZhQFQAAAMs"]
[Thu Apr 09 02:16:50.190709 2026] [:error] [pid 22056:tid 22073] [client 149.36.48.67:35430] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/admin.php"] [unique_id "adabkmQ3CidOGkmVXZhQJgAAAM8"]
[Thu Apr 09 02:16:52.517747 2026] [:error] [pid 40460:tid 40483] [client 149.36.48.67:35434] [client 149.36.48.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.36.48.67, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "adablIw-4-9CKD2kKMY95AAAAFQ"]
[Thu Apr 09 02:16:54.611415 2026] [:error] [pid 40460:tid 40471] [client 149.36.48.67:35434] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "adablow-4-9CKD2kKMY99gAAAEg"]
[Thu Apr 09 02:16:55.431886 2026] [:error] [pid 40054:tid 40099] [client 149.36.48.67:26950] [client 149.36.48.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.36.48.67, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "adabl6ymwSVk3s67lDePfQAAAQE"]
[Thu Apr 09 02:16:55.806000 2026] [:error] [pid 40054:tid 40124] [client 149.36.48.67:26950] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/item.php"] [unique_id "adabl6ymwSVk3s67lDePgAAAARg"]
[Thu Apr 09 02:16:57.570694 2026] [:error] [pid 22056:tid 22082] [client 149.36.48.67:45645] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "adabmWQ3CidOGkmVXZhQXQAAANg"]
[Thu Apr 09 02:16:59.414691 2026] [:error] [pid 40460:tid 40468] [client 149.36.48.67:22059] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "adabm4w-4-9CKD2kKMY-CQAAAEU"]
[Thu Apr 09 02:17:00.110526 2026] [:error] [pid 40460:tid 40472] [client 149.36.48.67:57244] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "adabnIw-4-9CKD2kKMY-DAAAAEk"]
[Thu Apr 09 02:17:00.964065 2026] [:error] [pid 40053:tid 40072] [client 149.36.48.67:47676] [client 149.36.48.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.36.48.67, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "adabnNdyKTqfO6aiQ6UcMwAAAA4"]
[Thu Apr 09 02:17:01.136290 2026] [:error] [pid 40053:tid 40078] [client 149.36.48.67:47676] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "adabnddyKTqfO6aiQ6UcNAAAABQ"]
[Thu Apr 09 02:17:04.765995 2026] [:error] [pid 40053:tid 40066] [client 149.36.48.67:57264] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "adaboNdyKTqfO6aiQ6UcSQAAAAg"]
[Thu Apr 09 02:17:05.728356 2026] [:error] [pid 40460:tid 40474] [client 149.36.48.67:51190] [client 149.36.48.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.36.48.67, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "adaboYw-4-9CKD2kKMY-GwAAAEs"]
[Thu Apr 09 02:17:06.419314 2026] [:error] [pid 40460:tid 40479] [client 149.36.48.67:51190] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "adaboow-4-9CKD2kKMY-IAAAAFA"]
[Thu Apr 09 02:17:06.925412 2026] [:error] [pid 22056:tid 22082] [client 149.36.48.67:51200] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/infi.php"] [unique_id "adabomQ3CidOGkmVXZhQcAAAANg"]
[Thu Apr 09 02:17:07.605304 2026] [:error] [pid 22056:tid 22078] [client 149.36.48.67:46889] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "adabo2Q3CidOGkmVXZhQdQAAANQ"]
[Thu Apr 09 02:17:08.462566 2026] [:error] [pid 40460:tid 40480] [client 149.36.48.67:51224] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "adabpIw-4-9CKD2kKMY-KAAAAFE"]
[Thu Apr 09 02:17:08.797555 2026] [:error] [pid 40053:tid 40059] [client 149.36.48.67:51232] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "adabpNdyKTqfO6aiQ6UcTQAAAAE"]
[Thu Apr 09 02:17:09.999285 2026] [:error] [pid 40054:tid 40119] [client 149.36.48.67:51242] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "adabpaymwSVk3s67lDePlwAAARQ"]
[Thu Apr 09 02:17:10.545195 2026] [:error] [pid 40055:tid 40154] [client 149.36.48.67:51246] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "adabpn_5SjAJycOw5k_SPQAAAJg"]
[Thu Apr 09 02:17:12.948192 2026] [:error] [pid 40460:tid 40475] [client 149.36.48.67:51254] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/edit.php"] [unique_id "adabqIw-4-9CKD2kKMY-OgAAAEw"]
[Thu Apr 09 02:17:13.797650 2026] [:error] [pid 40054:tid 40098] [client 149.36.48.67:51258] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "adabqaymwSVk3s67lDePoQAAAQA"]
[Thu Apr 09 02:17:14.480485 2026] [:error] [pid 22056:tid 22063] [client 149.36.48.67:51274] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/click.php"] [unique_id "adabqmQ3CidOGkmVXZhQgAAAAMU"]
[Thu Apr 09 02:17:15.396725 2026] [:error] [pid 40055:tid 40152] [client 149.36.48.67:36638] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "adabq3_5SjAJycOw5k_SUQAAAJY"]
[Thu Apr 09 02:17:17.037035 2026] [:error] [pid 40054:tid 40118] [client 149.36.48.67:36648] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "adabraymwSVk3s67lDePrQAAARM"]
[Thu Apr 09 02:17:17.373404 2026] [:error] [pid 22056:tid 22073] [client 149.36.48.67:17559] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "adabrWQ3CidOGkmVXZhQjQAAAM8"]
[Thu Apr 09 02:17:17.772957 2026] [:error] [pid 40055:tid 40140] [client 149.36.48.67:36670] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "adabrX_5SjAJycOw5k_SVQAAAIo"]
[Thu Apr 09 02:17:18.135933 2026] [:error] [pid 22056:tid 22065] [client 149.36.48.67:36674] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "adabrmQ3CidOGkmVXZhQjwAAAMc"]
[Thu Apr 09 02:17:18.642028 2026] [:error] [pid 40054:tid 40113] [client 149.36.48.67:36676] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "adabrqymwSVk3s67lDePrwAAAQ4"]
[Thu Apr 09 02:17:19.004783 2026] [:error] [pid 40054:tid 40119] [client 149.36.48.67:50750] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "adabr6ymwSVk3s67lDePsQAAARQ"]
[Thu Apr 09 02:17:19.692732 2026] [:error] [pid 22056:tid 22069] [client 149.36.48.67:36684] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adabr2Q3CidOGkmVXZhQmgAAAMs"]
[Thu Apr 09 02:17:20.033444 2026] [:error] [pid 22056:tid 22066] [client 149.36.48.67:36690] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "adabsGQ3CidOGkmVXZhQnQAAAMg"]
[Thu Apr 09 02:17:20.368627 2026] [:error] [pid 40460:tid 40482] [client 149.36.48.67:36698] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "adabsIw-4-9CKD2kKMY-TgAAAFM"]
[Thu Apr 09 02:17:20.706088 2026] [:error] [pid 22056:tid 22071] [client 149.36.48.67:36710] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "adabsGQ3CidOGkmVXZhQogAAAM0"]
[Thu Apr 09 02:17:21.235990 2026] [:error] [pid 40460:tid 40467] [client 149.36.48.67:36726] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "adabsYw-4-9CKD2kKMY-UQAAAEQ"]
[Thu Apr 09 02:17:21.914404 2026] [:error] [pid 22056:tid 22081] [client 149.36.48.67:36732] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "adabsWQ3CidOGkmVXZhQrAAAANc"]
[Thu Apr 09 02:17:22.936401 2026] [:error] [pid 22056:tid 22082] [client 149.36.48.67:36744] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "adabsmQ3CidOGkmVXZhQtQAAANg"]
[Thu Apr 09 02:17:24.470959 2026] [:error] [pid 40055:tid 40141] [client 149.36.48.67:36756] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "adabtH_5SjAJycOw5k_SZAAAAIs"]
[Thu Apr 09 02:17:25.322769 2026] [:error] [pid 22056:tid 22059] [client 149.36.48.67:49654] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "adabtWQ3CidOGkmVXZhQywAAAME"]
[Thu Apr 09 02:17:25.659009 2026] [:error] [pid 22056:tid 22065] [client 149.36.48.67:10722] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "adabtWQ3CidOGkmVXZhQzgAAAMc"]
[Thu Apr 09 02:17:27.926748 2026] [:error] [pid 22056:tid 22071] [client 149.36.48.67:62379] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "adabt2Q3CidOGkmVXZhQ3AAAAM0"]
[Thu Apr 09 02:17:28.815472 2026] [proxy_fcgi:error] [pid 22056:tid 22072] [client 149.36.48.67:49688] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 02:17:28.987439 2026] [proxy_fcgi:error] [pid 22056:tid 22076] [client 149.36.48.67:49688] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 02:17:29.159485 2026] [proxy_fcgi:error] [pid 22056:tid 22064] [client 149.36.48.67:49688] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 02:17:30.021764 2026] [:error] [pid 22056:tid 22071] [client 149.36.48.67:49688] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "adabumQ3CidOGkmVXZhQ7gAAAM0"]
[Thu Apr 09 02:17:30.356962 2026] [:error] [pid 22056:tid 22081] [client 149.36.48.67:49698] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "adabumQ3CidOGkmVXZhQ8gAAANc"]
[Thu Apr 09 02:17:30.701709 2026] [:error] [pid 22056:tid 22075] [client 149.36.48.67:49706] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "adabumQ3CidOGkmVXZhQ9AAAANE"]
[Thu Apr 09 02:17:31.038310 2026] [:error] [pid 22056:tid 22063] [client 149.36.48.67:49722] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "adabu2Q3CidOGkmVXZhQ9wAAAMU"]
[Thu Apr 09 02:17:31.376582 2026] [:error] [pid 40460:tid 40483] [client 149.36.48.67:49736] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "adabu4w-4-9CKD2kKMY-XgAAAFQ"]
[Thu Apr 09 02:17:31.711538 2026] [:error] [pid 40460:tid 40477] [client 149.36.48.67:40076] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "adabu4w-4-9CKD2kKMY-XwAAAE4"]
[Thu Apr 09 02:17:32.217628 2026] [:error] [pid 40460:tid 40470] [client 149.36.48.67:36328] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "adabvIw-4-9CKD2kKMY-YwAAAEc"]
[Thu Apr 09 02:17:32.552149 2026] [:error] [pid 22056:tid 22072] [client 149.36.48.67:49760] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "adabvGQ3CidOGkmVXZhRBgAAAM4"]
[Thu Apr 09 02:17:32.887090 2026] [:error] [pid 40460:tid 40473] [client 149.36.48.67:49770] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "adabvIw-4-9CKD2kKMY-ZQAAAEo"]
[Thu Apr 09 02:17:33.223310 2026] [:error] [pid 40460:tid 40486] [client 149.36.48.67:49786] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "adabvYw-4-9CKD2kKMY-ZwAAAFc"]
[Thu Apr 09 02:17:33.907609 2026] [:error] [pid 40460:tid 40487] [client 149.36.48.67:58186] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "adabvYw-4-9CKD2kKMY-awAAAFg"]
[Thu Apr 09 02:17:34.415721 2026] [:error] [pid 22056:tid 22070] [client 149.36.48.67:49798] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "adabvmQ3CidOGkmVXZhRDgAAAMw"]
[Thu Apr 09 02:17:36.726973 2026] [:error] [pid 40460:tid 40464] [client 149.36.48.67:44934] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "adabwIw-4-9CKD2kKMY-eAAAAEE"]
[Thu Apr 09 02:17:37.403931 2026] [:error] [pid 40053:tid 40080] [client 149.36.48.67:44936] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "adabwddyKTqfO6aiQ6UccAAAABY"]
[Thu Apr 09 02:17:38.259669 2026] [:error] [pid 40053:tid 40079] [client 149.36.48.67:2430] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "adabwtdyKTqfO6aiQ6UcdAAAABU"]
[Thu Apr 09 02:17:39.306010 2026] [:error] [pid 40054:tid 40109] [client 149.36.48.67:44954] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "adabw6ymwSVk3s67lDePywAAAQs"]
[Thu Apr 09 02:17:39.814118 2026] [:error] [pid 40460:tid 40473] [client 149.36.48.67:44966] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "adabw4w-4-9CKD2kKMY-fQAAAEo"]
[Thu Apr 09 02:17:42.889182 2026] [:error] [pid 40460:tid 40470] [client 149.36.48.67:44974] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "adabxow-4-9CKD2kKMY-kgAAAEc"]
[Thu Apr 09 02:17:43.224367 2026] [:error] [pid 22056:tid 22071] [client 149.36.48.67:44976] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "adabx2Q3CidOGkmVXZhRIgAAAM0"]
[Thu Apr 09 02:17:43.746310 2026] [:error] [pid 22056:tid 22062] [client 149.36.48.67:44992] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "adabx2Q3CidOGkmVXZhRJQAAAMQ"]
[Thu Apr 09 02:17:44.426383 2026] [:error] [pid 40054:tid 40101] [client 149.36.48.67:21627] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "adabyKymwSVk3s67lDeP1AAAAQM"]
[Thu Apr 09 02:17:44.762504 2026] [:error] [pid 40460:tid 40480] [client 149.36.48.67:33686] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "adabyIw-4-9CKD2kKMY-mQAAAFE"]
[Thu Apr 09 02:17:45.791785 2026] [:error] [pid 40053:tid 40075] [client 149.36.48.67:33698] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "adabyddyKTqfO6aiQ6UcigAAABE"]
[Thu Apr 09 02:17:46.126823 2026] [:error] [pid 40055:tid 40142] [client 149.36.48.67:33708] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "adabyn_5SjAJycOw5k_ShwAAAIw"]
[Thu Apr 09 02:17:47.318361 2026] [:error] [pid 22056:tid 22075] [client 149.36.48.67:33714] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "adaby2Q3CidOGkmVXZhRNQAAANE"]
[Thu Apr 09 02:17:49.288231 2026] [proxy_fcgi:error] [pid 40053:tid 40077] [client 149.36.48.67:33724] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 02:17:49.627989 2026] [:error] [pid 40053:tid 40068] [client 149.36.48.67:33724] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/function.php"] [unique_id "adabzddyKTqfO6aiQ6UckwAAAAo"]
[Thu Apr 09 02:17:49.961902 2026] [:error] [pid 40053:tid 40082] [client 149.36.48.67:33730] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "adabzddyKTqfO6aiQ6UclAAAABg"]
[Thu Apr 09 02:17:50.640380 2026] [:error] [pid 22056:tid 22063] [client 149.36.48.67:12892] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "adabzmQ3CidOGkmVXZhRVAAAAMU"]
[Thu Apr 09 02:17:50.977673 2026] [:error] [pid 40460:tid 40472] [client 149.36.48.67:33734] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "adabzow-4-9CKD2kKMY-ogAAAEk"]
[Thu Apr 09 02:17:52.517086 2026] [:error] [pid 22056:tid 22076] [client 149.36.48.67:33736] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "adab0GQ3CidOGkmVXZhRbQAAANI"]
[Thu Apr 09 02:17:52.851979 2026] [:error] [pid 22056:tid 22072] [client 149.36.48.67:33740] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "adab0GQ3CidOGkmVXZhRcQAAAM4"]
[Thu Apr 09 02:17:53.884371 2026] [:error] [pid 22056:tid 22078] [client 149.36.48.67:33746] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/index.php"] [unique_id "adab0WQ3CidOGkmVXZhRfAAAANQ"]
[Thu Apr 09 02:17:54.220496 2026] [:error] [pid 22056:tid 22070] [client 149.36.48.67:33758] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "adab0mQ3CidOGkmVXZhRfwAAAMw"]
[Thu Apr 09 02:17:54.555374 2026] [:error] [pid 40460:tid 40466] [client 149.36.48.67:33766] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "adab0ow-4-9CKD2kKMY-qAAAAEM"]
[Thu Apr 09 02:17:55.749186 2026] [:error] [pid 22056:tid 22061] [client 149.36.48.67:48268] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "adab02Q3CidOGkmVXZhRjQAAAMM"]
[Thu Apr 09 02:17:56.254463 2026] [:error] [pid 40460:tid 40475] [client 149.36.48.67:48278] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "adab1Iw-4-9CKD2kKMY-qgAAAEw"]
[Thu Apr 09 02:17:57.791898 2026] [:error] [pid 40055:tid 40149] [client 149.36.48.67:48292] [client 149.36.48.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.36.48.67, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/js/wp-login.php"] [unique_id "adab1X_5SjAJycOw5k_SnAAAAJM"]
[Thu Apr 09 02:17:58.822281 2026] [:error] [pid 40055:tid 40145] [client 149.36.48.67:48292] [client 149.36.48.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.36.48.67, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "adab1n_5SjAJycOw5k_SowAAAI8"]
[Thu Apr 09 02:18:00.740640 2026] [proxy_fcgi:error] [pid 40055:tid 40139] [client 149.36.48.67:48292] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 02:18:03.322600 2026] [:error] [pid 40055:tid 40131] [client 149.36.48.67:48292] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "adab23_5SjAJycOw5k_SwAAAAIE"]
[Thu Apr 09 02:18:05.429123 2026] [:error] [pid 40054:tid 40113] [client 149.36.48.67:48300] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "adab3aymwSVk3s67lDeP6gAAAQ4"]
[Thu Apr 09 02:18:06.107972 2026] [:error] [pid 22056:tid 22079] [client 149.36.48.67:10367] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "adab3mQ3CidOGkmVXZhRuQAAANU"]
[Thu Apr 09 02:18:07.989215 2026] [:error] [pid 22056:tid 22071] [client 149.36.48.67:33636] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "adab32Q3CidOGkmVXZhRyQAAAM0"]
[Thu Apr 09 02:18:08.669565 2026] [:error] [pid 40460:tid 40479] [client 149.36.48.67:6538] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "adab4Iw-4-9CKD2kKMY-xQAAAFA"]
[Thu Apr 09 02:18:09.178425 2026] [:error] [pid 40054:tid 40112] [client 149.36.48.67:33662] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "adab4aymwSVk3s67lDeP8wAAAQ0"]
[Thu Apr 09 02:18:10.209714 2026] [proxy_fcgi:error] [pid 40053:tid 40066] [client 149.36.48.67:33674] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 02:18:10.381172 2026] [proxy_fcgi:error] [pid 40053:tid 40079] [client 149.36.48.67:33674] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 02:18:10.549060 2026] [:error] [pid 40053:tid 40074] [client 149.36.48.67:33674] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "adab4tdyKTqfO6aiQ6UcpwAAABA"]
[Thu Apr 09 02:18:10.886298 2026] [:error] [pid 40460:tid 40466] [client 149.36.48.67:33686] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "adab4ow-4-9CKD2kKMY-ywAAAEM"]
[Thu Apr 09 02:18:13.852370 2026] [:error] [pid 40055:tid 40140] [client 149.36.48.67:33690] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "adab5X_5SjAJycOw5k_S1gAAAIo"]
[Thu Apr 09 02:18:14.381083 2026] [:error] [pid 40053:tid 40060] [client 149.36.48.67:33694] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "adab5tdyKTqfO6aiQ6UcrAAAAAI"]
[Thu Apr 09 02:18:15.230099 2026] [:error] [pid 40054:tid 40098] [client 149.36.48.67:39216] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "adab56ymwSVk3s67lDeQBwAAAQA"]
[Thu Apr 09 02:18:16.769648 2026] [:error] [pid 40053:tid 40061] [client 149.36.48.67:39218] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "adab6NdyKTqfO6aiQ6UctwAAAAM"]
[Thu Apr 09 02:18:17.111116 2026] [proxy_fcgi:error] [pid 40055:tid 40139] [client 149.36.48.67:17916] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 02:18:17.621517 2026] [:error] [pid 40055:tid 40135] [client 149.36.48.67:17916] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "adab6X_5SjAJycOw5k_S4AAAAIU"]
[Thu Apr 09 02:18:18.819243 2026] [proxy_fcgi:error] [pid 22056:tid 22073] [client 149.36.48.67:39232] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 02:18:19.158140 2026] [:error] [pid 22056:tid 22062] [client 149.36.48.67:39232] [client 149.36.48.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.36.48.67, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "adab62Q3CidOGkmVXZhR7gAAAMQ"]
[Thu Apr 09 02:18:20.019329 2026] [:error] [pid 22056:tid 22058] [client 149.36.48.67:39232] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "adab7GQ3CidOGkmVXZhR9AAAAMA"]
[Thu Apr 09 02:18:20.527607 2026] [:error] [pid 40053:tid 40081] [client 149.36.48.67:39260] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "adab7NdyKTqfO6aiQ6UcuwAAABc"]
[Thu Apr 09 02:18:21.552760 2026] [:error] [pid 40055:tid 40148] [client 149.36.48.67:30730] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "adab7X_5SjAJycOw5k_S9gAAAJI"]
[Thu Apr 09 02:18:22.403946 2026] [:error] [pid 22056:tid 22072] [client 149.36.48.67:39274] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "adab7mQ3CidOGkmVXZhR_wAAAM4"]
[Thu Apr 09 02:18:22.739053 2026] [:error] [pid 40460:tid 40477] [client 149.36.48.67:39282] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "adab7ow-4-9CKD2kKMY-2gAAAE4"]
[Thu Apr 09 02:18:23.589999 2026] [:error] [pid 40053:tid 40080] [client 149.36.48.67:39286] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "adab79dyKTqfO6aiQ6UcxQAAABY"]
[Thu Apr 09 02:18:24.280024 2026] [proxy_fcgi:error] [pid 40460:tid 40469] [client 149.36.48.67:55246] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 02:18:24.447780 2026] [:error] [pid 40460:tid 40464] [client 149.36.48.67:55246] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "adab8Iw-4-9CKD2kKMY-5AAAAEE"]
[Thu Apr 09 02:18:24.795987 2026] [:error] [pid 40054:tid 40100] [client 149.36.48.67:39246] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "adab8KymwSVk3s67lDeQLgAAAQI"]
[Thu Apr 09 02:18:24.953060 2026] [:error] [pid 40460:tid 40487] [client 149.36.48.67:38554] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/db.php"] [unique_id "adab8Iw-4-9CKD2kKMY-6gAAAFg"]
[Thu Apr 09 02:18:25.288602 2026] [:error] [pid 40460:tid 40485] [client 149.36.48.67:38574] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "adab8Yw-4-9CKD2kKMY-7AAAAFY"]
[Thu Apr 09 02:18:25.624387 2026] [:error] [pid 40460:tid 40475] [client 149.36.48.67:38582] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "adab8Yw-4-9CKD2kKMY-7QAAAEw"]
[Thu Apr 09 02:18:25.648270 2026] [:error] [pid 22056:tid 22075] [client 149.36.48.67:38560] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "adab8WQ3CidOGkmVXZhSDAAAANE"]
[Thu Apr 09 02:18:25.959909 2026] [:error] [pid 22056:tid 22081] [client 149.36.48.67:63359] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "adab8WQ3CidOGkmVXZhSDQAAANc"]
[Thu Apr 09 02:18:26.295442 2026] [:error] [pid 40460:tid 40472] [client 149.36.48.67:38628] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "adab8ow-4-9CKD2kKMY-7gAAAEk"]
[Thu Apr 09 02:18:26.630788 2026] [:error] [pid 22056:tid 22068] [client 149.36.48.67:38640] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "adab8mQ3CidOGkmVXZhSFgAAAMo"]
[Thu Apr 09 02:18:27.024356 2026] [:error] [pid 22056:tid 22075] [client 149.36.48.67:38612] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adab82Q3CidOGkmVXZhSGwAAANE"]
[Thu Apr 09 02:18:27.313162 2026] [:error] [pid 40055:tid 40134] [client 149.36.48.67:38650] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "adab83_5SjAJycOw5k_TCAAAAIQ"]
[Thu Apr 09 02:18:27.647752 2026] [:error] [pid 40054:tid 40104] [client 149.36.48.67:38676] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "adab86ymwSVk3s67lDeQMgAAAQY"]
[Thu Apr 09 02:18:27.873648 2026] [:error] [pid 22056:tid 22072] [client 149.36.48.67:38662] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "adab82Q3CidOGkmVXZhSIAAAAM4"]
[Thu Apr 09 02:18:27.982726 2026] [:error] [pid 40460:tid 40479] [client 149.36.48.67:38688] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "adab84w-4-9CKD2kKMY-9AAAAFA"]
[Thu Apr 09 02:18:28.320130 2026] [:error] [pid 40055:tid 40142] [client 149.36.48.67:38702] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "adab9H_5SjAJycOw5k_TCgAAAIw"]
[Thu Apr 09 02:18:28.655941 2026] [:error] [pid 40055:tid 40138] [client 149.36.48.67:38712] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "adab9H_5SjAJycOw5k_TDQAAAIg"]
[Thu Apr 09 02:18:28.995160 2026] [proxy_fcgi:error] [pid 40054:tid 40114] [client 149.36.48.67:38722] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 02:18:29.254132 2026] [:error] [pid 40054:tid 40101] [client 149.36.48.67:38690] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "adab9aymwSVk3s67lDeQPgAAAQM"]
[Thu Apr 09 02:18:29.506065 2026] [:error] [pid 40054:tid 40113] [client 149.36.48.67:38722] [client 149.36.48.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.36.48.67, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "adab9aymwSVk3s67lDeQQQAAAQ4"]
[Thu Apr 09 02:18:29.760486 2026] [:error] [pid 40054:tid 40104] [client 149.36.48.67:38724] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "adab9aymwSVk3s67lDeQRQAAAQY"]
[Thu Apr 09 02:18:30.095846 2026] [:error] [pid 22056:tid 22067] [client 149.36.48.67:38728] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "adab9mQ3CidOGkmVXZhSIwAAAMk"]
[Thu Apr 09 02:18:30.365746 2026] [:error] [pid 40054:tid 40105] [client 149.36.48.67:38722] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "adab9qymwSVk3s67lDeQSQAAAQc"]
[Thu Apr 09 02:18:30.455665 2026] [:error] [pid 40460:tid 40480] [client 149.36.48.67:38740] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "adab9ow-4-9CKD2kKMY-_AAAAFE"]
[Thu Apr 09 02:18:30.806183 2026] [:error] [pid 22056:tid 22061] [client 149.36.48.67:38754] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "adab9mQ3CidOGkmVXZhSJQAAAMM"]
[Thu Apr 09 02:18:31.140243 2026] [:error] [pid 40055:tid 40143] [client 149.36.48.67:38756] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "adab93_5SjAJycOw5k_TIAAAAI0"]
[Thu Apr 09 02:18:31.645932 2026] [:error] [pid 40053:tid 40068] [client 149.36.48.67:5821] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "adab99dyKTqfO6aiQ6Uc5AAAAAo"]
[Thu Apr 09 02:18:32.324387 2026] [:error] [pid 40054:tid 40109] [client 149.36.48.67:38766] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "adab-KymwSVk3s67lDeQTgAAAQs"]
[Thu Apr 09 02:18:33.003505 2026] [:error] [pid 40053:tid 40062] [client 149.36.48.67:38776] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "adab-ddyKTqfO6aiQ6Uc7QAAAAQ"]
[Thu Apr 09 02:18:33.464032 2026] [:error] [pid 40460:tid 40469] [client 149.36.48.67:38742] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "adab-Yw-4-9CKD2kKMY_FgAAAEY"]
[Thu Apr 09 02:18:33.509517 2026] [:error] [pid 22056:tid 22077] [client 149.36.48.67:38790] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "adab-WQ3CidOGkmVXZhSLgAAANM"]
[Thu Apr 09 02:18:33.805173 2026] [:error] [pid 22056:tid 22066] [client 149.36.48.67:38804] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "adab-WQ3CidOGkmVXZhSMgAAAMg"]
[Thu Apr 09 02:18:34.015927 2026] [:error] [pid 22056:tid 22070] [client 149.36.48.67:38806] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "adab-mQ3CidOGkmVXZhSNAAAAMw"]
[Thu Apr 09 02:18:34.139379 2026] [:error] [pid 22056:tid 22059] [client 149.36.48.67:38812] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "adab-mQ3CidOGkmVXZhSNwAAAME"]
[Thu Apr 09 02:18:35.391370 2026] [:error] [pid 40054:tid 40108] [client 149.36.48.67:38824] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "adab-6ymwSVk3s67lDeQWQAAAQo"]
[Thu Apr 09 02:18:35.509817 2026] [:error] [pid 40460:tid 40473] [client 149.36.48.67:38832] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "adab-4w-4-9CKD2kKMY_JQAAAEo"]
[Thu Apr 09 02:18:35.903519 2026] [:error] [pid 40460:tid 40478] [client 149.36.48.67:36368] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "adab-4w-4-9CKD2kKMY_JgAAAE8"]
[Thu Apr 09 02:18:35.909824 2026] [:error] [pid 40055:tid 40138] [client 149.36.48.67:35412] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "adab-3_5SjAJycOw5k_TPAAAAIg"]
[Thu Apr 09 02:18:36.281602 2026] [:error] [pid 40460:tid 40464] [client 149.36.48.67:35440] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "adab_Iw-4-9CKD2kKMY_LgAAAEE"]
[Thu Apr 09 02:18:36.625820 2026] [:error] [pid 22056:tid 22063] [client 149.36.48.67:35442] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "adab_GQ3CidOGkmVXZhSQQAAAMU"]
[Thu Apr 09 02:18:37.130417 2026] [:error] [pid 22056:tid 22079] [client 149.36.48.67:35456] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "adab_WQ3CidOGkmVXZhSSQAAANU"]
[Thu Apr 09 02:18:37.302539 2026] [:error] [pid 22056:tid 22074] [client 149.36.48.67:35454] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "adab_WQ3CidOGkmVXZhSTAAAANA"]
[Thu Apr 09 02:18:37.818494 2026] [:error] [pid 40055:tid 40152] [client 149.36.48.67:35474] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "adab_X_5SjAJycOw5k_TQgAAAJY"]
[Thu Apr 09 02:18:38.166610 2026] [:error] [pid 40054:tid 40104] [client 149.36.48.67:35472] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "adab_qymwSVk3s67lDeQYwAAAQY"]
[Thu Apr 09 02:18:38.505065 2026] [:error] [pid 40054:tid 40110] [client 149.36.48.67:35476] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "adab_qymwSVk3s67lDeQZQAAAQw"]
[Thu Apr 09 02:18:38.673902 2026] [:error] [pid 40055:tid 40133] [client 149.36.48.67:35490] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "adab_n_5SjAJycOw5k_TRQAAAIM"]
[Thu Apr 09 02:18:40.735864 2026] [:error] [pid 22056:tid 22078] [client 149.36.48.67:35520] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "adacAGQ3CidOGkmVXZhSXwAAANQ"]
[Thu Apr 09 02:18:41.069887 2026] [:error] [pid 22056:tid 22068] [client 149.36.48.67:35536] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "adacAWQ3CidOGkmVXZhSYwAAAMo"]
[Thu Apr 09 02:18:41.405323 2026] [:error] [pid 40460:tid 40479] [client 149.36.48.67:35538] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "adacAYw-4-9CKD2kKMY_QQAAAFA"]
[Thu Apr 09 02:18:42.008309 2026] [:error] [pid 40055:tid 40135] [client 149.36.48.67:35506] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "adacAn_5SjAJycOw5k_TVgAAAIU"]
[Thu Apr 09 02:18:42.254869 2026] [:error] [pid 40460:tid 40463] [client 149.36.48.67:35546] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "adacAow-4-9CKD2kKMY_RwAAAEA"]
[Thu Apr 09 02:18:42.516165 2026] [:error] [pid 40055:tid 40151] [client 149.36.48.67:35556] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/about.php"] [unique_id "adacAn_5SjAJycOw5k_TWAAAAJU"]
[Thu Apr 09 02:18:42.589705 2026] [:error] [pid 40054:tid 40101] [client 149.36.48.67:35570] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "adacAqymwSVk3s67lDeQagAAAQM"]
[Thu Apr 09 02:18:42.923894 2026] [:error] [pid 22056:tid 22063] [client 149.36.48.67:35584] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "adacAmQ3CidOGkmVXZhSaAAAAMU"]
[Thu Apr 09 02:18:43.881585 2026] [:error] [pid 40460:tid 40485] [client 149.36.48.67:35580] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "adacA4w-4-9CKD2kKMY_UQAAAFY"]
[Thu Apr 09 02:18:44.559780 2026] [:error] [pid 40460:tid 40471] [client 149.36.48.67:35602] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "adacBIw-4-9CKD2kKMY_WAAAAEg"]
[Thu Apr 09 02:18:45.576760 2026] [:error] [pid 40054:tid 40103] [client 149.36.48.67:51971] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "adacBaymwSVk3s67lDeQcwAAAQU"]
[Thu Apr 09 02:18:46.038932 2026] [:error] [pid 22056:tid 22072] [client 149.36.48.67:35586] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/admin.php"] [unique_id "adacBmQ3CidOGkmVXZhSggAAAM4"]
[Thu Apr 09 02:18:46.598206 2026] [:error] [pid 22056:tid 22077] [client 149.36.48.67:54880] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "adacBmQ3CidOGkmVXZhSiQAAANM"]
[Thu Apr 09 02:18:46.891208 2026] [:error] [pid 40460:tid 40478] [client 149.36.48.67:54888] [client 149.36.48.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.36.48.67, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "adacBow-4-9CKD2kKMY_YQAAAE8"]
[Thu Apr 09 02:18:47.276506 2026] [:error] [pid 22056:tid 22079] [client 149.36.48.67:54896] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "adacB2Q3CidOGkmVXZhSjwAAANU"]
[Thu Apr 09 02:18:47.612581 2026] [:error] [pid 40054:tid 40122] [client 149.36.48.67:22632] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "adacB6ymwSVk3s67lDeQeAAAARY"]
[Thu Apr 09 02:18:48.948484 2026] [:error] [pid 40460:tid 40486] [client 149.36.48.67:54888] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "adacCIw-4-9CKD2kKMY_bgAAAFc"]
[Thu Apr 09 02:18:49.627896 2026] [:error] [pid 22056:tid 22081] [client 149.36.48.67:54918] [client 149.36.48.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.36.48.67, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "adacCWQ3CidOGkmVXZhSlwAAANc"]
[Thu Apr 09 02:18:49.972964 2026] [:error] [pid 22056:tid 22065] [client 149.36.48.67:54918] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/item.php"] [unique_id "adacCWQ3CidOGkmVXZhSmwAAAMc"]
[Thu Apr 09 02:18:50.116072 2026] [:error] [pid 40053:tid 40077] [client 149.36.48.67:54904] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "adacCtdyKTqfO6aiQ6UdFQAAABM"]
[Thu Apr 09 02:18:51.306281 2026] [:error] [pid 40054:tid 40108] [client 149.36.48.67:54928] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "adacC6ymwSVk3s67lDeQhAAAAQo"]
[Thu Apr 09 02:18:51.678136 2026] [:error] [pid 40055:tid 40142] [client 149.36.48.67:54924] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "adacC3_5SjAJycOw5k_TbgAAAIw"]
[Thu Apr 09 02:18:52.328705 2026] [:error] [pid 22056:tid 22059] [client 149.36.48.67:54936] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "adacDGQ3CidOGkmVXZhSoQAAAME"]
[Thu Apr 09 02:18:52.663555 2026] [:error] [pid 22056:tid 22067] [client 149.36.48.67:54954] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "adacDGQ3CidOGkmVXZhSowAAAMk"]
[Thu Apr 09 02:18:53.202968 2026] [:error] [pid 22056:tid 22062] [client 149.36.48.67:35357] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "adacDWQ3CidOGkmVXZhSqAAAAMQ"]
[Thu Apr 09 02:18:53.402995 2026] [:error] [pid 40055:tid 40147] [client 149.36.48.67:54950] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "adacDX_5SjAJycOw5k_TfAAAAJE"]
[Thu Apr 09 02:18:53.884897 2026] [:error] [pid 40460:tid 40475] [client 149.36.48.67:54974] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "adacDYw-4-9CKD2kKMY_dAAAAEw"]
[Thu Apr 09 02:18:54.084266 2026] [:error] [pid 22056:tid 22079] [client 149.36.48.67:54990] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "adacDmQ3CidOGkmVXZhSrgAAANU"]
[Thu Apr 09 02:18:54.219574 2026] [:error] [pid 40054:tid 40107] [client 149.36.48.67:54996] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "adacDqymwSVk3s67lDeQjAAAAQk"]
[Thu Apr 09 02:18:54.945615 2026] [:error] [pid 22056:tid 22061] [client 149.36.48.67:54998] [client 149.36.48.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.36.48.67, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "adacDmQ3CidOGkmVXZhStAAAAMM"]
[Thu Apr 09 02:18:55.130102 2026] [:error] [pid 22056:tid 22074] [client 149.36.48.67:54998] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "adacD2Q3CidOGkmVXZhStQAAANA"]
[Thu Apr 09 02:18:55.616959 2026] [:error] [pid 40053:tid 40070] [client 149.36.48.67:55004] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "adacD9dyKTqfO6aiQ6UdIQAAAAw"]
[Thu Apr 09 02:18:56.293487 2026] [:error] [pid 40460:tid 40470] [client 149.36.48.67:53664] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "adacEIw-4-9CKD2kKMY_eAAAAEc"]
[Thu Apr 09 02:18:56.627671 2026] [:error] [pid 40460:tid 40481] [client 149.36.48.67:53670] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "adacEIw-4-9CKD2kKMY_egAAAFI"]
[Thu Apr 09 02:18:57.305495 2026] [:error] [pid 40055:tid 40151] [client 149.36.48.67:53680] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "adacEX_5SjAJycOw5k_TkwAAAJU"]
[Thu Apr 09 02:18:57.820059 2026] [:error] [pid 40055:tid 40132] [client 149.36.48.67:53696] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "adacEX_5SjAJycOw5k_TmwAAAII"]
[Thu Apr 09 02:18:58.393711 2026] [:error] [pid 40055:tid 40146] [client 149.36.48.67:4850] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "adacEn_5SjAJycOw5k_TpQAAAJA"]
[Thu Apr 09 02:18:59.010115 2026] [:error] [pid 40055:tid 40142] [client 149.36.48.67:53702] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "adacE3_5SjAJycOw5k_TqwAAAIw"]
[Thu Apr 09 02:18:59.241129 2026] [:error] [pid 40054:tid 40100] [client 149.36.48.67:30094] [client 149.36.48.67] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 149.36.48.67, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "adacE6ymwSVk3s67lDeQmAAAAQI"]
[Thu Apr 09 02:18:59.689385 2026] [:error] [pid 22056:tid 22068] [client 149.36.48.67:53722] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "adacE2Q3CidOGkmVXZhSuwAAAMo"]
[Thu Apr 09 02:18:59.925851 2026] [:error] [pid 40054:tid 40114] [client 149.36.48.67:30094] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "adacE6ymwSVk3s67lDeQnAAAAQ8"]
[Thu Apr 09 02:19:00.374932 2026] [:error] [pid 22056:tid 22079] [client 149.36.48.67:53734] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "adacFGQ3CidOGkmVXZhSxQAAANU"]
[Thu Apr 09 02:19:00.440620 2026] [:error] [pid 22056:tid 22060] [client 149.36.48.67:53738] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/infi.php"] [unique_id "adacFGQ3CidOGkmVXZhSxwAAAMI"]
[Thu Apr 09 02:19:01.121175 2026] [:error] [pid 22056:tid 22071] [client 149.36.48.67:21032] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "adacFWQ3CidOGkmVXZhSzgAAAM0"]
[Thu Apr 09 02:19:01.974898 2026] [:error] [pid 22056:tid 22062] [client 149.36.48.67:53760] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "adacFWQ3CidOGkmVXZhS1wAAAMQ"]
[Thu Apr 09 02:19:02.308637 2026] [:error] [pid 40055:tid 40134] [client 149.36.48.67:53782] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "adacFn_5SjAJycOw5k_TsgAAAIQ"]
[Thu Apr 09 02:19:02.406174 2026] [:error] [pid 40460:tid 40463] [client 149.36.48.67:53766] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/as.php"] [unique_id "adacFow-4-9CKD2kKMY_hwAAAEA"]
[Thu Apr 09 02:19:02.919158 2026] [:error] [pid 40460:tid 40468] [client 149.36.48.67:53808] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "adacFow-4-9CKD2kKMY_iwAAAEU"]
[Thu Apr 09 02:19:03.260394 2026] [:error] [pid 40055:tid 40151] [client 149.36.48.67:53820] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/install.php"] [unique_id "adacF3_5SjAJycOw5k_TtwAAAJU"]
[Thu Apr 09 02:19:03.508073 2026] [:error] [pid 40460:tid 40466] [client 149.36.48.67:53794] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "adacF4w-4-9CKD2kKMY_kAAAAEM"]
[Thu Apr 09 02:19:03.595315 2026] [:error] [pid 22056:tid 22060] [client 149.36.48.67:53822] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "adacF2Q3CidOGkmVXZhS2wAAAMI"]
[Thu Apr 09 02:19:04.015355 2026] [:error] [pid 40460:tid 40481] [client 149.36.48.67:39614] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "adacGIw-4-9CKD2kKMY_lAAAAFI"]
[Thu Apr 09 02:19:04.872152 2026] [:error] [pid 40055:tid 40142] [client 149.36.48.67:53862] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/edit.php"] [unique_id "adacGH_5SjAJycOw5k_TwwAAAIw"]
[Thu Apr 09 02:19:04.961890 2026] [:error] [pid 40460:tid 40484] [client 149.36.48.67:53854] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "adacGIw-4-9CKD2kKMY_mgAAAFU"]
[Thu Apr 09 02:19:05.721986 2026] [:error] [pid 40055:tid 40136] [client 149.36.48.67:60630] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "adacGX_5SjAJycOw5k_TzAAAAIY"]
[Thu Apr 09 02:19:05.813409 2026] [:error] [pid 40055:tid 40144] [client 149.36.48.67:60640] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "adacGX_5SjAJycOw5k_TzgAAAI4"]
[Thu Apr 09 02:19:06.400410 2026] [:error] [pid 40460:tid 40463] [client 149.36.48.67:60646] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/click.php"] [unique_id "adacGow-4-9CKD2kKMY_owAAAEA"]
[Thu Apr 09 02:19:06.492764 2026] [:error] [pid 40460:tid 40487] [client 149.36.48.67:63869] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "adacGow-4-9CKD2kKMY_pQAAAFg"]
[Thu Apr 09 02:19:07.169200 2026] [:error] [pid 40460:tid 40466] [client 149.36.48.67:60686] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "adacG4w-4-9CKD2kKMY_rgAAAEM"]
[Thu Apr 09 02:19:07.248777 2026] [:error] [pid 40460:tid 40470] [client 149.36.48.67:60672] [client 149.36.48.67] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "adacG4w-4-9CKD2kKMY_rwAAAEc"]
[Thu Apr 09 02:19:08.401386 2026] [:error] [pid 40054:tid 40114] [client 156.146.54.59:60692] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "adacHKymwSVk3s67lDeQswAAAQ8"]
[Thu Apr 09 02:19:08.790592 2026] [:error] [pid 40055:tid 40137] [client 156.146.54.59:60696] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "adacHH_5SjAJycOw5k_T3wAAAIc"]
[Thu Apr 09 02:19:08.907821 2026] [:error] [pid 40053:tid 40078] [client 156.146.54.59:60708] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "adacHNdyKTqfO6aiQ6UdLwAAABQ"]
[Thu Apr 09 02:19:09.125363 2026] [:error] [pid 40054:tid 40098] [client 156.146.54.59:60714] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "adacHaymwSVk3s67lDeQtQAAAQA"]
[Thu Apr 09 02:19:09.413004 2026] [:error] [pid 40055:tid 40146] [client 156.146.54.59:60720] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "adacHX_5SjAJycOw5k_T4gAAAJA"]
[Thu Apr 09 02:19:09.460506 2026] [:error] [pid 40460:tid 40476] [client 156.146.54.59:60734] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "adacHYw-4-9CKD2kKMY_tgAAAE0"]
[Thu Apr 09 02:19:09.795043 2026] [:error] [pid 40460:tid 40469] [client 156.146.54.59:60754] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "adacHYw-4-9CKD2kKMY_uQAAAEY"]
[Thu Apr 09 02:19:10.089915 2026] [:error] [pid 40460:tid 40486] [client 156.146.54.59:60740] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "adacHow-4-9CKD2kKMY_vAAAAFc"]
[Thu Apr 09 02:19:10.301079 2026] [:error] [pid 40055:tid 40130] [client 156.146.54.59:60756] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "adacHn_5SjAJycOw5k_T5wAAAIA"]
[Thu Apr 09 02:19:10.635676 2026] [:error] [pid 40054:tid 40101] [client 156.146.54.59:60780] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "adacHqymwSVk3s67lDeQtgAAAQM"]
[Thu Apr 09 02:19:11.311647 2026] [:error] [pid 40460:tid 40471] [client 156.146.54.59:60782] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adacH4w-4-9CKD2kKMY_wwAAAEg"]
[Thu Apr 09 02:19:11.646788 2026] [:error] [pid 22056:tid 22064] [client 156.146.54.59:60792] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "adacH2Q3CidOGkmVXZhS5wAAAMY"]
[Thu Apr 09 02:19:11.796245 2026] [:error] [pid 40053:tid 40076] [client 156.146.54.59:60770] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "adacH9dyKTqfO6aiQ6UdQQAAABI"]
[Thu Apr 09 02:19:11.980813 2026] [:error] [pid 40053:tid 40077] [client 156.146.54.59:60806] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "adacH9dyKTqfO6aiQ6UdRAAAABM"]
[Thu Apr 09 02:19:12.132645 2026] [:error] [pid 22056:tid 22081] [client 156.146.54.59:60812] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "adacIGQ3CidOGkmVXZhS6gAAANc"]
[Thu Apr 09 02:19:12.316299 2026] [:error] [pid 40055:tid 40131] [client 156.146.54.59:60824] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "adacIH_5SjAJycOw5k_T6QAAAIE"]
[Thu Apr 09 02:19:12.823171 2026] [:error] [pid 40055:tid 40143] [client 156.146.54.59:60856] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "adacIH_5SjAJycOw5k_T7AAAAI0"]
[Thu Apr 09 02:19:12.983576 2026] [:error] [pid 22056:tid 22072] [client 156.146.54.59:60840] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "adacIGQ3CidOGkmVXZhS7wAAAM4"]
[Thu Apr 09 02:19:13.318146 2026] [:error] [pid 40460:tid 40486] [client 156.146.54.59:60876] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "adacIYw-4-9CKD2kKMY_xwAAAFc"]
[Thu Apr 09 02:19:13.502335 2026] [:error] [pid 22056:tid 22065] [client 156.146.54.59:60872] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "adacIWQ3CidOGkmVXZhS8wAAAMc"]
[Thu Apr 09 02:19:14.008065 2026] [:error] [pid 40055:tid 40146] [client 156.146.54.59:60886] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "adacIn_5SjAJycOw5k_T-AAAAJA"]
[Thu Apr 09 02:19:14.382688 2026] [:error] [pid 40460:tid 40463] [client 156.146.54.59:60912] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "adacIow-4-9CKD2kKMY_yQAAAEA"]
[Thu Apr 09 02:19:14.574873 2026] [:error] [pid 40055:tid 40142] [client 156.146.54.59:60900] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "adacIn_5SjAJycOw5k_T_QAAAIw"]
[Thu Apr 09 02:19:14.717760 2026] [:error] [pid 40460:tid 40484] [client 156.146.54.59:48510] [client 156.146.54.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 156.146.54.59, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "adacIow-4-9CKD2kKMY_zAAAAFU"]
[Thu Apr 09 02:19:14.729044 2026] [proxy_fcgi:error] [pid 40460:tid 40484] [client 156.146.54.59:48510] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 02:19:14.896932 2026] [:error] [pid 40460:tid 40477] [client 156.146.54.59:48510] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "adacIow-4-9CKD2kKMY_zgAAAE4"]
[Thu Apr 09 02:19:15.578837 2026] [:error] [pid 40053:tid 40078] [client 156.146.54.59:48522] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "adacI9dyKTqfO6aiQ6UdSgAAABQ"]
[Thu Apr 09 02:19:15.939545 2026] [:error] [pid 40460:tid 40464] [client 156.146.54.59:48526] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/network.php"] [unique_id "adacI4w-4-9CKD2kKMY_0gAAAEE"]
[Thu Apr 09 02:19:16.128768 2026] [:error] [pid 40054:tid 40110] [client 156.146.54.59:48514] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "adacJKymwSVk3s67lDeQxAAAAQw"]
[Thu Apr 09 02:19:16.981856 2026] [:error] [pid 40054:tid 40108] [client 156.146.54.59:48542] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "adacJKymwSVk3s67lDeQygAAAQo"]
[Thu Apr 09 02:19:17.317676 2026] [:error] [pid 40054:tid 40102] [client 156.146.54.59:48544] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "adacJaymwSVk3s67lDeQywAAAQQ"]
[Thu Apr 09 02:19:17.481465 2026] [:error] [pid 40460:tid 40472] [client 156.146.54.59:48536] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "adacJYw-4-9CKD2kKMY_4QAAAEk"]
[Thu Apr 09 02:19:17.818854 2026] [:error] [pid 40055:tid 40140] [client 156.146.54.59:48550] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "adacJX_5SjAJycOw5k_UAgAAAIo"]
[Thu Apr 09 02:19:18.336501 2026] [:error] [pid 40460:tid 40475] [client 156.146.54.59:48546] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "adacJow-4-9CKD2kKMY_6AAAAEw"]
[Thu Apr 09 02:19:18.504902 2026] [:error] [pid 40055:tid 40136] [client 156.146.54.59:48564] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "adacJn_5SjAJycOw5k_UCAAAAIY"]
[Thu Apr 09 02:19:18.848956 2026] [:error] [pid 22056:tid 22077] [client 156.146.54.59:48582] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "adacJmQ3CidOGkmVXZhS-AAAANM"]
[Thu Apr 09 02:19:19.202873 2026] [proxy_fcgi:error] [pid 22056:tid 22069] [client 156.146.54.59:48594] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 02:19:19.207892 2026] [proxy_fcgi:error] [pid 40054:tid 40115] [client 156.146.54.59:48570] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 02:19:19.370073 2026] [:error] [pid 22056:tid 22065] [client 156.146.54.59:48594] [client 156.146.54.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 156.146.54.59, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "adacJ2Q3CidOGkmVXZhS_AAAAMc"]
[Thu Apr 09 02:19:19.379133 2026] [proxy_fcgi:error] [pid 40054:tid 40118] [client 156.146.54.59:48570] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 02:19:19.549845 2026] [proxy_fcgi:error] [pid 40054:tid 40113] [client 156.146.54.59:48570] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 02:19:19.715420 2026] [:error] [pid 22056:tid 22064] [client 156.146.54.59:48594] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "adacJ2Q3CidOGkmVXZhS_gAAAMY"]
[Thu Apr 09 02:19:20.404147 2026] [:error] [pid 40054:tid 40100] [client 156.146.54.59:48570] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "adacKKymwSVk3s67lDeQ3QAAAQI"]
[Thu Apr 09 02:19:20.563130 2026] [:error] [pid 40054:tid 40099] [client 156.146.54.59:48608] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "adacKKymwSVk3s67lDeQ3wAAAQE"]
[Thu Apr 09 02:19:20.745782 2026] [:error] [pid 40054:tid 40109] [client 156.146.54.59:48624] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "adacKKymwSVk3s67lDeQ4QAAAQs"]
[Thu Apr 09 02:19:21.070851 2026] [:error] [pid 22056:tid 22068] [client 156.146.54.59:48630] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "adacKWQ3CidOGkmVXZhTBQAAAMo"]
[Thu Apr 09 02:19:21.080939 2026] [:error] [pid 40460:tid 40483] [client 156.146.54.59:48634] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "adacKYw-4-9CKD2kKMY_7QAAAFQ"]
[Thu Apr 09 02:19:21.405704 2026] [:error] [pid 22056:tid 22077] [client 156.146.54.59:48646] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "adacKWQ3CidOGkmVXZhTCAAAANM"]
[Thu Apr 09 02:19:21.414273 2026] [:error] [pid 22056:tid 22071] [client 156.146.54.59:48650] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "adacKWQ3CidOGkmVXZhTCQAAAM0"]
[Thu Apr 09 02:19:21.749191 2026] [:error] [pid 40055:tid 40151] [client 156.146.54.59:48664] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "adacKX_5SjAJycOw5k_UEQAAAJU"]
[Thu Apr 09 02:19:22.084330 2026] [:error] [pid 40053:tid 40059] [client 156.146.54.59:48666] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "adacKtdyKTqfO6aiQ6UdTwAAAAE"]
[Thu Apr 09 02:19:22.253881 2026] [:error] [pid 40055:tid 40146] [client 156.146.54.59:48660] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "adacKn_5SjAJycOw5k_UGgAAAJA"]
[Thu Apr 09 02:19:22.591253 2026] [:error] [pid 40053:tid 40078] [client 156.146.54.59:48682] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "adacKtdyKTqfO6aiQ6UdUgAAABQ"]
[Thu Apr 09 02:19:22.926469 2026] [:error] [pid 40053:tid 40077] [client 156.146.54.59:48694] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "adacKtdyKTqfO6aiQ6UdVAAAABM"]
[Thu Apr 09 02:19:22.931023 2026] [:error] [pid 22056:tid 22075] [client 156.146.54.59:48688] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "adacKmQ3CidOGkmVXZhTDQAAANE"]
[Thu Apr 09 02:19:23.261616 2026] [:error] [pid 40053:tid 40063] [client 156.146.54.59:48706] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "adacK9dyKTqfO6aiQ6UdWQAAAAU"]
[Thu Apr 09 02:19:23.596122 2026] [:error] [pid 40054:tid 40099] [client 156.146.54.59:48722] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "adacK6ymwSVk3s67lDeQ7QAAAQE"]
[Thu Apr 09 02:19:23.949773 2026] [:error] [pid 40054:tid 40118] [client 156.146.54.59:48714] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "adacK6ymwSVk3s67lDeQ8wAAARM"]
[Thu Apr 09 02:19:24.277499 2026] [:error] [pid 40054:tid 40121] [client 156.146.54.59:48738] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "adacLKymwSVk3s67lDeQ9gAAARU"]
[Thu Apr 09 02:19:24.284662 2026] [:error] [pid 40054:tid 40113] [client 156.146.54.59:48752] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "adacLKymwSVk3s67lDeQ9wAAAQ4"]
[Thu Apr 09 02:19:24.783995 2026] [:error] [pid 40055:tid 40135] [client 156.146.54.59:48768] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "adacLH_5SjAJycOw5k_UHQAAAIU"]
[Thu Apr 09 02:19:24.793617 2026] [:error] [pid 22056:tid 22082] [client 156.146.54.59:48774] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/count.php"] [unique_id "adacLGQ3CidOGkmVXZhTEwAAANg"]
[Thu Apr 09 02:19:25.461788 2026] [:error] [pid 22056:tid 22059] [client 156.146.54.59:37774] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "adacLWQ3CidOGkmVXZhTGwAAAME"]
[Thu Apr 09 02:19:26.139634 2026] [:error] [pid 22056:tid 22078] [client 156.146.54.59:37790] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "adacLmQ3CidOGkmVXZhTJgAAANQ"]
[Thu Apr 09 02:19:26.154555 2026] [:error] [pid 40054:tid 40106] [client 156.146.54.59:37778] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "adacLqymwSVk3s67lDeRAwAAAQg"]
[Thu Apr 09 02:19:26.838704 2026] [:error] [pid 22056:tid 22081] [client 156.146.54.59:37802] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||measureyourcause.measureyourbrand.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/images/stories/themes.php"] [unique_id "adacLmQ3CidOGkmVXZhTMwAAANc"]
[Thu Apr 09 02:19:26.987296 2026] [:error] [pid 40054:tid 40112] [client 156.146.54.59:37800] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "adacLqymwSVk3s67lDeRCAAAAQ0"]
[Thu Apr 09 02:19:27.006417 2026] [:error] [pid 22056:tid 22066] [client 156.146.54.59:37802] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "adacL2Q3CidOGkmVXZhTNAAAAMg"]
[Thu Apr 09 02:19:27.688601 2026] [:error] [pid 40460:tid 40468] [client 156.146.54.59:37818] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "adacL4w-4-9CKD2kKMY_-QAAAEU"]
[Thu Apr 09 02:19:28.022570 2026] [:error] [pid 40053:tid 40072] [client 156.146.54.59:37832] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "adacMNdyKTqfO6aiQ6UdYwAAAA4"]
[Thu Apr 09 02:19:28.024138 2026] [:error] [pid 40054:tid 40106] [client 156.146.54.59:37808] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "adacMKymwSVk3s67lDeRDgAAAQg"]
[Thu Apr 09 02:19:28.532666 2026] [:error] [pid 40460:tid 40478] [client 156.146.54.59:37834] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "adacMIw-4-9CKD2kKMY__gAAAE8"]
[Thu Apr 09 02:19:29.388878 2026] [:error] [pid 22056:tid 22069] [client 156.146.54.59:37844] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "adacMWQ3CidOGkmVXZhTXAAAAMs"]
[Thu Apr 09 02:19:30.064835 2026] [:error] [pid 40460:tid 40485] [client 156.146.54.59:37870] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "adacMow-4-9CKD2kKMZABAAAAFY"]
[Thu Apr 09 02:19:30.573959 2026] [:error] [pid 22056:tid 22076] [client 156.146.54.59:37880] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "adacMmQ3CidOGkmVXZhTYQAAANI"]
[Thu Apr 09 02:19:31.618030 2026] [:error] [pid 40054:tid 40114] [client 156.146.54.59:37854] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "adacM6ymwSVk3s67lDeRIwAAAQ8"]
[Thu Apr 09 02:19:31.953430 2026] [:error] [pid 22056:tid 22059] [client 156.146.54.59:37898] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "adacM2Q3CidOGkmVXZhTZwAAAME"]
[Thu Apr 09 02:19:32.460078 2026] [:error] [pid 22056:tid 22061] [client 156.146.54.59:37904] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "adacNGQ3CidOGkmVXZhTbAAAAMM"]
[Thu Apr 09 02:19:33.137997 2026] [:error] [pid 40460:tid 40469] [client 156.146.54.59:37908] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "adacNYw-4-9CKD2kKMZACgAAAEY"]
[Thu Apr 09 02:19:33.269842 2026] [:error] [pid 22056:tid 22067] [client 156.146.54.59:37884] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "adacNWQ3CidOGkmVXZhTcwAAAMk"]
[Thu Apr 09 02:19:33.472698 2026] [:error] [pid 40460:tid 40467] [client 156.146.54.59:37924] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "adacNYw-4-9CKD2kKMZACwAAAEQ"]
[Thu Apr 09 02:19:33.604954 2026] [:error] [pid 40055:tid 40142] [client 156.146.54.59:37936] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/colour.php"] [unique_id "adacNX_5SjAJycOw5k_UKwAAAIw"]
[Thu Apr 09 02:19:34.111029 2026] [:error] [pid 40054:tid 40110] [client 156.146.54.59:37960] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "adacNqymwSVk3s67lDeRJwAAAQw"]
[Thu Apr 09 02:19:34.446189 2026] [:error] [pid 40053:tid 40081] [client 156.146.54.59:37968] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "adacNtdyKTqfO6aiQ6UdbgAAABc"]
[Thu Apr 09 02:19:34.494306 2026] [:error] [pid 40055:tid 40139] [client 156.146.54.59:37948] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "adacNn_5SjAJycOw5k_UMgAAAIk"]
[Thu Apr 09 02:19:34.829742 2026] [:error] [pid 40460:tid 40481] [client 156.146.54.59:45992] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "adacNow-4-9CKD2kKMZADQAAAFI"]
[Thu Apr 09 02:19:35.136022 2026] [:error] [pid 40460:tid 40476] [client 156.146.54.59:45976] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "adacN4w-4-9CKD2kKMZADwAAAE0"]
[Thu Apr 09 02:19:35.818626 2026] [:error] [pid 22056:tid 22082] [client 156.146.54.59:46022] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "adacN2Q3CidOGkmVXZhTggAAANg"]
[Thu Apr 09 02:19:36.029077 2026] [:error] [pid 22056:tid 22077] [client 156.146.54.59:46006] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "adacOGQ3CidOGkmVXZhThQAAANM"]
[Thu Apr 09 02:19:36.156214 2026] [:error] [pid 40055:tid 40136] [client 156.146.54.59:46032] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/about5.php"] [unique_id "adacOH_5SjAJycOw5k_UNgAAAIY"]
[Thu Apr 09 02:19:36.546650 2026] [proxy_fcgi:error] [pid 40055:tid 40133] [client 156.146.54.59:46040] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 02:19:36.886522 2026] [:error] [pid 40055:tid 40149] [client 156.146.54.59:46040] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/function.php"] [unique_id "adacOH_5SjAJycOw5k_UOgAAAJM"]
[Thu Apr 09 02:19:37.181993 2026] [:error] [pid 40053:tid 40061] [client 156.146.54.59:46044] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/db.php"] [unique_id "adacOddyKTqfO6aiQ6UddAAAAAM"]
[Thu Apr 09 02:19:37.221895 2026] [:error] [pid 40053:tid 40065] [client 156.146.54.59:46046] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "adacOddyKTqfO6aiQ6UddQAAAAc"]
[Thu Apr 09 02:19:37.862082 2026] [:error] [pid 40053:tid 40076] [client 156.146.54.59:46048] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "adacOddyKTqfO6aiQ6UdegAAABI"]
[Thu Apr 09 02:19:37.901289 2026] [:error] [pid 40053:tid 40064] [client 156.146.54.59:46052] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "adacOddyKTqfO6aiQ6UdewAAAAY"]
[Thu Apr 09 02:19:38.235103 2026] [:error] [pid 40054:tid 40114] [client 156.146.54.59:46068] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "adacOqymwSVk3s67lDeRKgAAAQ8"]
[Thu Apr 09 02:19:38.714466 2026] [:error] [pid 40053:tid 40079] [client 156.146.54.59:46060] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "adacOtdyKTqfO6aiQ6UdgQAAABU"]
[Thu Apr 09 02:19:39.048718 2026] [:error] [pid 40054:tid 40109] [client 156.146.54.59:46094] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "adacO6ymwSVk3s67lDeRKwAAAQs"]
[Thu Apr 09 02:19:39.382912 2026] [:error] [pid 22056:tid 22062] [client 156.146.54.59:46110] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "adacO2Q3CidOGkmVXZhTjQAAAMQ"]
[Thu Apr 09 02:19:39.768186 2026] [:error] [pid 40460:tid 40482] [client 156.146.54.59:46082] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "adacO4w-4-9CKD2kKMZAIwAAAFM"]
[Thu Apr 09 02:19:40.061488 2026] [:error] [pid 40054:tid 40107] [client 156.146.54.59:46124] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "adacPKymwSVk3s67lDeRMQAAAQk"]
[Thu Apr 09 02:19:40.104431 2026] [:error] [pid 22056:tid 22077] [client 156.146.54.59:46128] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "adacPGQ3CidOGkmVXZhTkAAAANM"]
[Thu Apr 09 02:19:40.738618 2026] [:error] [pid 22056:tid 22066] [client 156.146.54.59:46142] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "adacPGQ3CidOGkmVXZhTmgAAAMg"]
[Thu Apr 09 02:19:41.074813 2026] [:error] [pid 40460:tid 40469] [client 156.146.54.59:46158] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "adacPYw-4-9CKD2kKMZAJQAAAEY"]
[Thu Apr 09 02:19:41.130055 2026] [:error] [pid 22056:tid 22077] [client 156.146.54.59:46144] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/index.php"] [unique_id "adacPWQ3CidOGkmVXZhTngAAANM"]
[Thu Apr 09 02:19:41.478560 2026] [:error] [pid 40055:tid 40141] [client 156.146.54.59:46176] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "adacPX_5SjAJycOw5k_UPwAAAIs"]
[Thu Apr 09 02:19:41.603574 2026] [:error] [pid 40054:tid 40102] [client 156.146.54.59:46168] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "adacPaymwSVk3s67lDeRNQAAAQQ"]
[Thu Apr 09 02:19:41.814711 2026] [:error] [pid 40055:tid 40131] [client 156.146.54.59:46192] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "adacPX_5SjAJycOw5k_UQAAAAIE"]
[Thu Apr 09 02:19:41.937857 2026] [:error] [pid 40460:tid 40483] [client 156.146.54.59:46194] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "adacPYw-4-9CKD2kKMZAKQAAAFQ"]
[Thu Apr 09 02:19:42.618373 2026] [:error] [pid 40460:tid 40465] [client 156.146.54.59:46214] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "adacPow-4-9CKD2kKMZAMQAAAEI"]
[Thu Apr 09 02:19:43.017093 2026] [:error] [pid 40460:tid 40487] [client 156.146.54.59:46210] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "adacP4w-4-9CKD2kKMZANQAAAFg"]
[Thu Apr 09 02:19:43.128301 2026] [:error] [pid 40055:tid 40145] [client 156.146.54.59:46230] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "adacP3_5SjAJycOw5k_URAAAAI8"]
[Thu Apr 09 02:19:43.463031 2026] [:error] [pid 40460:tid 40486] [client 156.146.54.59:46244] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "adacP4w-4-9CKD2kKMZANwAAAFc"]
[Thu Apr 09 02:19:43.522881 2026] [:error] [pid 40460:tid 40463] [client 156.146.54.59:46232] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "adacP4w-4-9CKD2kKMZAOAAAAEA"]
[Thu Apr 09 02:19:43.797132 2026] [:error] [pid 40460:tid 40478] [client 156.146.54.59:46254] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "adacP4w-4-9CKD2kKMZAOgAAAE8"]
[Thu Apr 09 02:19:44.501374 2026] [:error] [pid 40460:tid 40476] [client 156.146.54.59:46278] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "adacQIw-4-9CKD2kKMZARwAAAE0"]
[Thu Apr 09 02:19:45.085448 2026] [:error] [pid 40460:tid 40484] [client 156.146.54.59:46270] [client 156.146.54.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 156.146.54.59, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/js/wp-login.php"] [unique_id "adacQYw-4-9CKD2kKMZATQAAAFU"]
[Thu Apr 09 02:19:45.179378 2026] [:error] [pid 40053:tid 40058] [client 156.146.54.59:40522] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "adacQddyKTqfO6aiQ6UdjQAAAAA"]
[Thu Apr 09 02:19:45.686448 2026] [:error] [pid 40054:tid 40099] [client 156.146.54.59:40536] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "adacQaymwSVk3s67lDeROQAAAQE"]
[Thu Apr 09 02:19:46.133519 2026] [:error] [pid 40460:tid 40470] [client 156.146.54.59:46270] [client 156.146.54.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 156.146.54.59, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "adacQow-4-9CKD2kKMZAVAAAAEc"]
[Thu Apr 09 02:19:46.197406 2026] [:error] [pid 40460:tid 40473] [client 156.146.54.59:40550] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "adacQow-4-9CKD2kKMZAVQAAAEo"]
[Thu Apr 09 02:19:47.564724 2026] [:error] [pid 40460:tid 40467] [client 156.146.54.59:40566] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "adacQ4w-4-9CKD2kKMZAagAAAEQ"]
[Thu Apr 09 02:19:47.901085 2026] [:error] [pid 40460:tid 40464] [client 156.146.54.59:40578] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "adacQ4w-4-9CKD2kKMZAbgAAAEE"]
[Thu Apr 09 02:19:48.024434 2026] [proxy_fcgi:error] [pid 40460:tid 40471] [client 156.146.54.59:46270] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 02:19:48.579852 2026] [:error] [pid 40054:tid 40116] [client 156.146.54.59:40584] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "adacRKymwSVk3s67lDeRPwAAARE"]
[Thu Apr 09 02:19:49.604381 2026] [:error] [pid 40460:tid 40486] [client 156.146.54.59:40600] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "adacRYw-4-9CKD2kKMZAfwAAAFc"]
[Thu Apr 09 02:19:50.280151 2026] [:error] [pid 40055:tid 40154] [client 156.146.54.59:40608] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "adacRn_5SjAJycOw5k_UTgAAAJg"]
[Thu Apr 09 02:19:50.609922 2026] [:error] [pid 40460:tid 40473] [client 156.146.54.59:46270] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "adacRow-4-9CKD2kKMZAhgAAAEo"]
[Thu Apr 09 02:19:50.959284 2026] [:error] [pid 40054:tid 40119] [client 156.146.54.59:40624] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "adacRqymwSVk3s67lDeRQgAAARQ"]
[Thu Apr 09 02:19:51.457978 2026] [:error] [pid 40055:tid 40131] [client 156.146.54.59:40626] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "adacR3_5SjAJycOw5k_UWAAAAIE"]
[Thu Apr 09 02:19:51.465388 2026] [:error] [pid 40053:tid 40076] [client 156.146.54.59:40642] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "adacR9dyKTqfO6aiQ6UdmAAAABI"]
[Thu Apr 09 02:19:51.971371 2026] [:error] [pid 40054:tid 40106] [client 156.146.54.59:40648] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "adacR6ymwSVk3s67lDeRRQAAAQg"]
[Thu Apr 09 02:19:52.137188 2026] [:error] [pid 40053:tid 40077] [client 156.146.54.59:40644] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "adacSNdyKTqfO6aiQ6UdngAAABM"]
[Thu Apr 09 02:19:52.992113 2026] [:error] [pid 40055:tid 40153] [client 156.146.54.59:40658] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "adacSH_5SjAJycOw5k_UYQAAAJc"]
[Thu Apr 09 02:19:53.841231 2026] [:error] [pid 22056:tid 22060] [client 156.146.54.59:40682] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "adacSWQ3CidOGkmVXZhTzQAAAMI"]
[Thu Apr 09 02:19:54.012201 2026] [:error] [pid 22056:tid 22062] [client 156.146.54.59:40666] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "adacSmQ3CidOGkmVXZhT0AAAAMQ"]
[Thu Apr 09 02:19:54.179493 2026] [proxy_fcgi:error] [pid 40460:tid 40481] [client 156.146.54.59:40692] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 02:19:54.349391 2026] [:error] [pid 40460:tid 40470] [client 156.146.54.59:40692] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/shell.php"] [unique_id "adacSow-4-9CKD2kKMZAiQAAAEc"]
[Thu Apr 09 02:19:54.684990 2026] [:error] [pid 22056:tid 22067] [client 156.146.54.59:40716] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "adacSmQ3CidOGkmVXZhT1AAAAMk"]
[Thu Apr 09 02:19:54.692551 2026] [:error] [pid 40460:tid 40484] [client 156.146.54.59:40704] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "adacSow-4-9CKD2kKMZAjQAAAFU"]
[Thu Apr 09 02:19:55.199904 2026] [:error] [pid 40460:tid 40464] [client 156.146.54.59:33994] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "adacS4w-4-9CKD2kKMZAkAAAAEE"]
[Thu Apr 09 02:19:55.362112 2026] [:error] [pid 22056:tid 22074] [client 156.146.54.59:33986] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "adacS2Q3CidOGkmVXZhT2wAAANA"]
[Thu Apr 09 02:19:55.696624 2026] [:error] [pid 40053:tid 40065] [client 156.146.54.59:34004] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "adacS9dyKTqfO6aiQ6UdogAAAAc"]
[Thu Apr 09 02:19:56.223528 2026] [proxy_fcgi:error] [pid 40053:tid 40071] [client 156.146.54.59:33996] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 02:19:56.393337 2026] [proxy_fcgi:error] [pid 40053:tid 40066] [client 156.146.54.59:33996] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 02:19:56.559947 2026] [:error] [pid 40053:tid 40065] [client 156.146.54.59:33996] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "adacTNdyKTqfO6aiQ6UdsQAAAAc"]
[Thu Apr 09 02:19:56.894699 2026] [:error] [pid 40055:tid 40145] [client 156.146.54.59:34018] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "adacTH_5SjAJycOw5k_UZQAAAI8"]
[Thu Apr 09 02:19:57.072785 2026] [:error] [pid 40053:tid 40062] [client 156.146.54.59:34008] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/wp-2019.php"] [unique_id "adacTddyKTqfO6aiQ6UduAAAAAQ"]
[Thu Apr 09 02:19:57.407086 2026] [:error] [pid 40055:tid 40147] [client 156.146.54.59:34034] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "adacTX_5SjAJycOw5k_UagAAAJE"]
[Thu Apr 09 02:19:57.914337 2026] [:error] [pid 40055:tid 40144] [client 156.146.54.59:34038] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/log.php"] [unique_id "adacTX_5SjAJycOw5k_UcQAAAI4"]
[Thu Apr 09 02:19:58.251968 2026] [:error] [pid 40460:tid 40466] [client 156.146.54.59:34052] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "adacTow-4-9CKD2kKMZAkwAAAEM"]
[Thu Apr 09 02:19:58.439611 2026] [:error] [pid 40055:tid 40153] [client 156.146.54.59:34026] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "adacTn_5SjAJycOw5k_UeAAAAJc"]
[Thu Apr 09 02:19:58.587164 2026] [:error] [pid 22056:tid 22075] [client 156.146.54.59:34054] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "adacTmQ3CidOGkmVXZhT3wAAANE"]
[Thu Apr 09 02:19:58.921685 2026] [:error] [pid 40460:tid 40481] [client 156.146.54.59:34078] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/aw.php"] [unique_id "adacTow-4-9CKD2kKMZAlwAAAFI"]
[Thu Apr 09 02:19:58.945228 2026] [:error] [pid 40460:tid 40470] [client 156.146.54.59:34068] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "adacTow-4-9CKD2kKMZAmAAAAEc"]
[Thu Apr 09 02:19:59.876670 2026] [:error] [pid 40054:tid 40108] [client 156.146.54.59:34088] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "adacT6ymwSVk3s67lDeRUwAAAQo"]
[Thu Apr 09 02:20:00.043638 2026] [:error] [pid 40055:tid 40130] [client 156.146.54.59:34086] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/db.php"] [unique_id "adacUH_5SjAJycOw5k_UgwAAAIA"]
[Thu Apr 09 02:20:00.384994 2026] [:error] [pid 40055:tid 40137] [client 156.146.54.59:34104] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/install.php"] [unique_id "adacUH_5SjAJycOw5k_UhAAAAIc"]
[Thu Apr 09 02:20:01.157653 2026] [:error] [pid 22056:tid 22077] [client 156.146.54.59:34106] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/install.php"] [unique_id "adacUWQ3CidOGkmVXZhT7wAAANM"]
[Thu Apr 09 02:20:01.497524 2026] [:error] [pid 40055:tid 40148] [client 156.146.54.59:34110] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "adacUX_5SjAJycOw5k_UhgAAAJI"]
[Thu Apr 09 02:20:01.498669 2026] [:error] [pid 22056:tid 22072] [client 156.146.54.59:34102] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "adacUWQ3CidOGkmVXZhT8QAAAM4"]
[Thu Apr 09 02:20:01.848588 2026] [proxy_fcgi:error] [pid 22056:tid 22082] [client 156.146.54.59:34132] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 02:20:02.197435 2026] [:error] [pid 22056:tid 22075] [client 156.146.54.59:34118] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/template-less.php"] [unique_id "adacUmQ3CidOGkmVXZhT-QAAANE"]
[Thu Apr 09 02:20:02.399505 2026] [:error] [pid 22056:tid 22061] [client 156.146.54.59:34132] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "adacUmQ3CidOGkmVXZhT_QAAAMM"]
[Thu Apr 09 02:20:02.540899 2026] [:error] [pid 22056:tid 22071] [client 156.146.54.59:34146] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "adacUmQ3CidOGkmVXZhT_wAAAM0"]
[Thu Apr 09 02:20:03.616800 2026] [proxy_fcgi:error] [pid 22056:tid 22075] [client 156.146.54.59:34154] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 02:20:03.964777 2026] [:error] [pid 22056:tid 22077] [client 156.146.54.59:34154] [client 156.146.54.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 156.146.54.59, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "adacU2Q3CidOGkmVXZhUCQAAANM"]
[Thu Apr 09 02:20:04.096679 2026] [:error] [pid 40460:tid 40482] [client 156.146.54.59:34164] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/min.php"] [unique_id "adacVIw-4-9CKD2kKMZAsgAAAFM"]
[Thu Apr 09 02:20:04.437021 2026] [:error] [pid 22056:tid 22071] [client 156.146.54.59:34170] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "adacVGQ3CidOGkmVXZhUDAAAAM0"]
[Thu Apr 09 02:20:04.824030 2026] [:error] [pid 22056:tid 22078] [client 156.146.54.59:34154] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "adacVGQ3CidOGkmVXZhUEAAAANQ"]
[Thu Apr 09 02:20:05.125462 2026] [:error] [pid 40460:tid 40469] [client 156.146.54.59:55748] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/file.php"] [unique_id "adacVYw-4-9CKD2kKMZAuAAAAEY"]
[Thu Apr 09 02:20:05.336000 2026] [:error] [pid 40053:tid 40070] [client 156.146.54.59:55762] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "adacVddyKTqfO6aiQ6UdwwAAAAw"]
[Thu Apr 09 02:20:05.634333 2026] [:error] [pid 40053:tid 40066] [client 156.146.54.59:55764] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "adacVddyKTqfO6aiQ6UdxQAAAAg"]
[Thu Apr 09 02:20:06.153270 2026] [:error] [pid 40055:tid 40142] [client 156.146.54.59:55770] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/load.php"] [unique_id "adacVn_5SjAJycOw5k_UkgAAAIw"]
[Thu Apr 09 02:20:06.365123 2026] [:error] [pid 40055:tid 40139] [client 156.146.54.59:55768] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "adacVn_5SjAJycOw5k_UlQAAAIk"]
[Thu Apr 09 02:20:06.488641 2026] [:error] [pid 40053:tid 40068] [client 156.146.54.59:55778] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "adacVtdyKTqfO6aiQ6UdywAAAAo"]
[Thu Apr 09 02:20:06.827909 2026] [:error] [pid 40460:tid 40482] [client 156.146.54.59:55792] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "adacVow-4-9CKD2kKMZAvAAAAFM"]
[Thu Apr 09 02:20:07.218442 2026] [:error] [pid 22056:tid 22064] [client 156.146.54.59:55788] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "adacV2Q3CidOGkmVXZhUGgAAAMY"]
[Thu Apr 09 02:20:07.561718 2026] [:error] [pid 22056:tid 22069] [client 156.146.54.59:55806] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "adacV2Q3CidOGkmVXZhUGwAAAMs"]
[Thu Apr 09 02:20:07.677005 2026] [:error] [pid 40054:tid 40101] [client 156.146.54.59:55800] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "adacV6ymwSVk3s67lDeRWgAAAQM"]
[Thu Apr 09 02:20:08.184574 2026] [:error] [pid 22056:tid 22060] [client 156.146.54.59:55826] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "adacWGQ3CidOGkmVXZhUIgAAAMI"]
[Thu Apr 09 02:20:08.442048 2026] [:error] [pid 22056:tid 22064] [client 156.146.54.59:55814] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "adacWGQ3CidOGkmVXZhUJgAAAMY"]
[Thu Apr 09 02:20:08.869922 2026] [:error] [pid 22056:tid 22078] [client 156.146.54.59:55832] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "adacWGQ3CidOGkmVXZhUKgAAANQ"]
[Thu Apr 09 02:20:09.125113 2026] [proxy_fcgi:error] [pid 40053:tid 40059] [client 156.146.54.59:55844] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 02:20:09.205477 2026] [:error] [pid 40055:tid 40154] [client 156.146.54.59:55860] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "adacWX_5SjAJycOw5k_UnQAAAJg"]
[Thu Apr 09 02:20:09.294751 2026] [:error] [pid 40053:tid 40070] [client 156.146.54.59:55844] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "adacWddyKTqfO6aiQ6Ud0gAAAAw"]
[Thu Apr 09 02:20:09.544224 2026] [:error] [pid 40055:tid 40142] [client 156.146.54.59:55862] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "adacWX_5SjAJycOw5k_UoAAAAIw"]
[Thu Apr 09 02:20:09.802400 2026] [:error] [pid 40460:tid 40468] [client 156.146.54.59:55872] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/db.php"] [unique_id "adacWYw-4-9CKD2kKMZAwgAAAEU"]
[Thu Apr 09 02:20:10.138076 2026] [:error] [pid 22056:tid 22075] [client 156.146.54.59:55882] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "adacWmQ3CidOGkmVXZhULQAAANE"]
[Thu Apr 09 02:20:10.476164 2026] [:error] [pid 40054:tid 40109] [client 156.146.54.59:55888] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "adacWqymwSVk3s67lDeRYQAAAQs"]
[Thu Apr 09 02:20:10.812830 2026] [:error] [pid 40054:tid 40118] [client 156.146.54.59:55904] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "adacWqymwSVk3s67lDeRYwAAARM"]
[Thu Apr 09 02:20:11.148975 2026] [:error] [pid 40054:tid 40112] [client 156.146.54.59:55910] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "adacW6ymwSVk3s67lDeRZgAAAQ0"]
[Thu Apr 09 02:20:11.484078 2026] [:error] [pid 40054:tid 40124] [client 156.146.54.59:55916] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "adacW6ymwSVk3s67lDeRaQAAARg"]
[Thu Apr 09 02:20:12.167581 2026] [:error] [pid 40460:tid 40484] [client 156.146.54.59:55922] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "adacXIw-4-9CKD2kKMZAygAAAFU"]
[Thu Apr 09 02:20:12.502360 2026] [:error] [pid 22056:tid 22081] [client 156.146.54.59:55938] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "adacXGQ3CidOGkmVXZhUMwAAANc"]
[Thu Apr 09 02:20:12.561380 2026] [:error] [pid 40053:tid 40077] [client 156.146.54.59:55876] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/system.php"] [unique_id "adacXNdyKTqfO6aiQ6Ud4AAAABM"]
[Thu Apr 09 02:20:12.839164 2026] [:error] [pid 40460:tid 40464] [client 156.146.54.59:55952] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "adacXIw-4-9CKD2kKMZAzAAAAEE"]
[Thu Apr 09 02:20:13.068508 2026] [:error] [pid 40054:tid 40102] [client 156.146.54.59:55958] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "adacXaymwSVk3s67lDeRbgAAAQQ"]
[Thu Apr 09 02:20:13.174645 2026] [:error] [pid 40460:tid 40467] [client 156.146.54.59:55974] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "adacXYw-4-9CKD2kKMZA0AAAAEQ"]
[Thu Apr 09 02:20:13.516488 2026] [:error] [pid 40053:tid 40073] [client 156.146.54.59:55990] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "adacXddyKTqfO6aiQ6Ud4gAAAA8"]
[Thu Apr 09 02:20:13.748464 2026] [:error] [pid 40054:tid 40115] [client 156.146.54.59:55978] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "adacXaymwSVk3s67lDeRcQAAARA"]
[Thu Apr 09 02:20:13.857076 2026] [proxy_fcgi:error] [pid 40054:tid 40118] [client 156.146.54.59:55996] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 02:20:14.083897 2026] [:error] [pid 40055:tid 40131] [client 156.146.54.59:56000] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "adacXn_5SjAJycOw5k_UpAAAAIE"]
[Thu Apr 09 02:20:14.369786 2026] [:error] [pid 40054:tid 40121] [client 156.146.54.59:55996] [client 156.146.54.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 156.146.54.59, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "adacXqymwSVk3s67lDeRdgAAARU"]
[Thu Apr 09 02:20:14.418879 2026] [:error] [pid 40460:tid 40484] [client 156.146.54.59:56004] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "adacXow-4-9CKD2kKMZA1wAAAFU"]
[Thu Apr 09 02:20:15.097088 2026] [:error] [pid 40460:tid 40481] [client 156.146.54.59:57642] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/src/Response/about.php"] [unique_id "adacX4w-4-9CKD2kKMZA3AAAAFI"]
[Thu Apr 09 02:20:15.231566 2026] [:error] [pid 40054:tid 40114] [client 156.146.54.59:55996] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "adacX6ymwSVk3s67lDeRfQAAAQ8"]
[Thu Apr 09 02:20:18.128716 2026] [:error] [pid 40055:tid 40140] [client 156.146.54.59:57656] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ms-pie.php"] [unique_id "adacYn_5SjAJycOw5k_UyAAAAIo"]
[Thu Apr 09 02:20:18.458451 2026] [:error] [pid 40055:tid 40150] [client 156.146.54.59:57662] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "adacYn_5SjAJycOw5k_UygAAAJQ"]
[Thu Apr 09 02:20:18.802996 2026] [:error] [pid 40054:tid 40103] [client 156.146.54.59:57680] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "adacYqymwSVk3s67lDeRhgAAAQU"]
[Thu Apr 09 02:20:19.138643 2026] [:error] [pid 40053:tid 40080] [client 156.146.54.59:57684] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "adacY9dyKTqfO6aiQ6Ud6QAAABY"]
[Thu Apr 09 02:20:19.152850 2026] [:error] [pid 40054:tid 40112] [client 156.146.54.59:57668] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "adacY6ymwSVk3s67lDeRigAAAQ0"]
[Thu Apr 09 02:20:19.829841 2026] [:error] [pid 40460:tid 40481] [client 156.146.54.59:57716] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/nav-menu.php"] [unique_id "adacY4w-4-9CKD2kKMZA9AAAAFI"]
[Thu Apr 09 02:20:20.164914 2026] [:error] [pid 40460:tid 40468] [client 156.146.54.59:57726] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/user.php"] [unique_id "adacZIw-4-9CKD2kKMZA-AAAAEU"]
[Thu Apr 09 02:20:20.509929 2026] [:error] [pid 22056:tid 22075] [client 156.146.54.59:57700] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "adacZGQ3CidOGkmVXZhURQAAANE"]
[Thu Apr 09 02:20:20.857458 2026] [:error] [pid 40055:tid 40132] [client 156.146.54.59:57750] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "adacZH_5SjAJycOw5k_UzAAAAII"]
[Thu Apr 09 02:20:21.193868 2026] [:error] [pid 22056:tid 22072] [client 156.146.54.59:57766] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "adacZWQ3CidOGkmVXZhURwAAAM4"]
[Thu Apr 09 02:20:22.216165 2026] [:error] [pid 40055:tid 40152] [client 156.146.54.59:57768] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "adacZn_5SjAJycOw5k_U2AAAAJY"]
[Thu Apr 09 02:20:22.407275 2026] [:error] [pid 40053:tid 40079] [client 156.146.54.59:57740] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/dist/script-modules/block-library/search/about.php"] [unique_id "adacZtdyKTqfO6aiQ6Ud9gAAABU"]
[Thu Apr 09 02:20:22.725599 2026] [:error] [pid 40055:tid 40138] [client 156.146.54.59:57778] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "adacZn_5SjAJycOw5k_U2gAAAIg"]
[Thu Apr 09 02:20:22.742383 2026] [:error] [pid 40055:tid 40132] [client 156.146.54.59:57790] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-cropped-image-control.php"] [unique_id "adacZn_5SjAJycOw5k_U2wAAAII"]
[Thu Apr 09 02:20:23.077184 2026] [:error] [pid 22056:tid 22079] [client 156.146.54.59:57814] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/ultra.php"] [unique_id "adacZ2Q3CidOGkmVXZhUUAAAANU"]
[Thu Apr 09 02:20:23.401208 2026] [:error] [pid 40054:tid 40116] [client 156.146.54.59:57802] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "adacZ6ymwSVk3s67lDeRkQAAARE"]
[Thu Apr 09 02:20:23.583362 2026] [:error] [pid 40055:tid 40148] [client 156.146.54.59:57830] [client 156.146.54.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 156.146.54.59, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "adacZ3_5SjAJycOw5k_U3wAAAJI"]
[Thu Apr 09 02:20:23.928074 2026] [:error] [pid 40055:tid 40140] [client 156.146.54.59:57830] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/preferences/wp-login.php"] [unique_id "adacZ3_5SjAJycOw5k_U4gAAAIo"]
[Thu Apr 09 02:20:24.263489 2026] [:error] [pid 22056:tid 22067] [client 156.146.54.59:57854] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/media-text/index.php"] [unique_id "adacaGQ3CidOGkmVXZhUXwAAAMk"]
[Thu Apr 09 02:20:24.599337 2026] [:error] [pid 40053:tid 40072] [client 156.146.54.59:57862] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/phpmailer/phpmailer.php"] [unique_id "adacaNdyKTqfO6aiQ6Ud9wAAAA4"]
[Thu Apr 09 02:20:25.632956 2026] [:error] [pid 22056:tid 22067] [client 156.146.54.59:57844] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "adacaWQ3CidOGkmVXZhUagAAAMk"]
[Thu Apr 09 02:20:25.956909 2026] [:error] [pid 40053:tid 40069] [client 156.146.54.59:47926] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/latest-comments/template-loader.php"] [unique_id "adacaddyKTqfO6aiQ6UeAQAAAAs"]
[Thu Apr 09 02:20:26.138362 2026] [:error] [pid 22056:tid 22075] [client 156.146.54.59:47940] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/about.php"] [unique_id "adacamQ3CidOGkmVXZhUbAAAANE"]
[Thu Apr 09 02:20:27.489006 2026] [:error] [pid 40460:tid 40471] [client 156.146.54.59:47948] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/nextpage/index.php"] [unique_id "adaca4w-4-9CKD2kKMZBBwAAAEg"]
[Thu Apr 09 02:20:27.496680 2026] [:error] [pid 22056:tid 22080] [client 156.146.54.59:47964] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "adaca2Q3CidOGkmVXZhUeAAAANY"]
[Thu Apr 09 02:20:28.171105 2026] [:error] [pid 22056:tid 22073] [client 156.146.54.59:47972] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/link-template-firewall.php"] [unique_id "adacbGQ3CidOGkmVXZhUfgAAAM8"]
[Thu Apr 09 02:20:28.172194 2026] [:error] [pid 40054:tid 40107] [client 156.146.54.59:47984] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "adacbKymwSVk3s67lDeRlgAAAQk"]
[Thu Apr 09 02:20:30.576943 2026] [:error] [pid 40053:tid 40077] [client 156.146.54.59:47988] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "adacbtdyKTqfO6aiQ6UeFwAAABM"]
[Thu Apr 09 02:20:30.736427 2026] [:error] [pid 40054:tid 40113] [client 156.146.54.59:48002] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "adacbqymwSVk3s67lDeRnAAAAQ4"]
[Thu Apr 09 02:20:30.919277 2026] [:error] [pid 40054:tid 40122] [client 156.146.54.59:48006] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/src/Decode/HTML/sitemaps.php"] [unique_id "adacbqymwSVk3s67lDeRnQAAARY"]
[Thu Apr 09 02:20:31.254810 2026] [:error] [pid 40460:tid 40463] [client 156.146.54.59:48024] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/mer_gagal.php"] [unique_id "adacb4w-4-9CKD2kKMZBEgAAAEA"]
[Thu Apr 09 02:20:31.589245 2026] [:error] [pid 40460:tid 40465] [client 156.146.54.59:48032] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/html-api/wp-login.php"] [unique_id "adacb4w-4-9CKD2kKMZBGQAAAEI"]
[Thu Apr 09 02:20:31.762814 2026] [:error] [pid 40460:tid 40485] [client 156.146.54.59:48022] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "adacb4w-4-9CKD2kKMZBGwAAAFY"]
[Thu Apr 09 02:20:32.443772 2026] [:error] [pid 40055:tid 40151] [client 156.146.54.59:48046] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/alfa-rex.php"] [unique_id "adaccH_5SjAJycOw5k_U_AAAAJU"]
[Thu Apr 09 02:20:32.444930 2026] [:error] [pid 40460:tid 40470] [client 156.146.54.59:48060] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "adaccIw-4-9CKD2kKMZBIAAAAEc"]
[Thu Apr 09 02:20:32.778044 2026] [:error] [pid 40054:tid 40102] [client 156.146.54.59:48066] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/Core32.php"] [unique_id "adaccKymwSVk3s67lDeRnwAAAQQ"]
[Thu Apr 09 02:20:32.780409 2026] [:error] [pid 40055:tid 40145] [client 156.146.54.59:48070] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "adaccH_5SjAJycOw5k_U_QAAAI8"]
[Thu Apr 09 02:20:33.967121 2026] [:error] [pid 40460:tid 40480] [client 156.146.54.59:48082] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/wp-conflg.php"] [unique_id "adaccYw-4-9CKD2kKMZBLQAAAFE"]
[Thu Apr 09 02:20:33.967708 2026] [:error] [pid 40460:tid 40477] [client 156.146.54.59:48086] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "adaccYw-4-9CKD2kKMZBLgAAAE4"]
[Thu Apr 09 02:20:34.991918 2026] [:error] [pid 40054:tid 40106] [client 156.146.54.59:48100] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/index.php"] [unique_id "adaccqymwSVk3s67lDeRpgAAAQg"]
[Thu Apr 09 02:20:35.162724 2026] [:error] [pid 40460:tid 40484] [client 156.146.54.59:48116] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "adacc4w-4-9CKD2kKMZBNwAAAFU"]
[Thu Apr 09 02:20:35.327646 2026] [:error] [pid 22056:tid 22065] [client 156.146.54.59:35796] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "adacc2Q3CidOGkmVXZhUjwAAAMc"]
[Thu Apr 09 02:20:36.180912 2026] [:error] [pid 22056:tid 22058] [client 156.146.54.59:35798] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "adacdGQ3CidOGkmVXZhUmAAAAMA"]
[Thu Apr 09 02:20:36.515921 2026] [:error] [pid 40460:tid 40487] [client 156.146.54.59:35810] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "adacdIw-4-9CKD2kKMZBPwAAAFg"]
[Thu Apr 09 02:20:37.026430 2026] [:error] [pid 22056:tid 22066] [client 156.146.54.59:35820] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "adacdWQ3CidOGkmVXZhUnAAAAMg"]
[Thu Apr 09 02:20:37.705196 2026] [:error] [pid 40460:tid 40478] [client 156.146.54.59:35826] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "adacdYw-4-9CKD2kKMZBRQAAAE8"]
[Thu Apr 09 02:20:38.040528 2026] [:error] [pid 40460:tid 40476] [client 156.146.54.59:35836] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "adacdow-4-9CKD2kKMZBSQAAAE0"]
[Thu Apr 09 02:20:39.404344 2026] [:error] [pid 22056:tid 22073] [client 156.146.54.59:35838] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "adacd2Q3CidOGkmVXZhUtgAAAM8"]
[Thu Apr 09 02:20:40.088140 2026] [:error] [pid 40054:tid 40101] [client 156.146.54.59:35854] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "adaceKymwSVk3s67lDeRrAAAAQM"]
[Thu Apr 09 02:20:40.468322 2026] [:error] [pid 40054:tid 40114] [client 156.146.54.59:35866] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "adaceKymwSVk3s67lDeRsAAAAQ8"]
[Thu Apr 09 02:20:41.149680 2026] [:error] [pid 22056:tid 22070] [client 156.146.54.59:35878] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "adaceWQ3CidOGkmVXZhUxwAAAMw"]
[Thu Apr 09 02:20:41.655275 2026] [:error] [pid 40054:tid 40104] [client 156.146.54.59:35890] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "adaceaymwSVk3s67lDeRtQAAAQY"]
[Thu Apr 09 02:20:42.846660 2026] [:error] [pid 40054:tid 40102] [client 156.146.54.59:35906] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "adaceqymwSVk3s67lDeRwAAAAQQ"]
[Thu Apr 09 02:20:43.524013 2026] [:error] [pid 40055:tid 40141] [client 156.146.54.59:35914] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "adace3_5SjAJycOw5k_VFgAAAIs"]
[Thu Apr 09 02:20:44.201584 2026] [:error] [pid 40055:tid 40137] [client 156.146.54.59:35916] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "adacfH_5SjAJycOw5k_VGQAAAIc"]
[Thu Apr 09 02:20:44.706875 2026] [:error] [pid 40055:tid 40132] [client 156.146.54.59:35930] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/as.php"] [unique_id "adacfH_5SjAJycOw5k_VGwAAAII"]
[Thu Apr 09 02:20:45.216443 2026] [:error] [pid 40054:tid 40115] [client 156.146.54.59:38528] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "adacfaymwSVk3s67lDeRyAAAARA"]
[Thu Apr 09 02:20:45.550773 2026] [:error] [pid 40460:tid 40464] [client 156.146.54.59:38538] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/install.php"] [unique_id "adacfYw-4-9CKD2kKMZBXwAAAEE"]
[Thu Apr 09 02:20:45.885197 2026] [:error] [pid 40055:tid 40139] [client 156.146.54.59:38548] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "adacfX_5SjAJycOw5k_VHgAAAIk"]
[Thu Apr 09 02:20:47.251017 2026] [:error] [pid 40055:tid 40152] [client 156.146.54.59:38556] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "adacf3_5SjAJycOw5k_VJgAAAJY"]
[Thu Apr 09 02:20:48.100394 2026] [:error] [pid 22056:tid 22061] [client 156.146.54.59:38572] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "adacgGQ3CidOGkmVXZhU-QAAAMM"]
[Thu Apr 09 02:20:48.780251 2026] [:error] [pid 22056:tid 22075] [client 156.146.54.59:38584] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "adacgGQ3CidOGkmVXZhVBAAAANE"]
[Thu Apr 09 02:20:49.461089 2026] [:error] [pid 40055:tid 40151] [client 156.146.54.59:38594] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "adacgX_5SjAJycOw5k_VKgAAAJU"]
[Thu Apr 09 02:20:50.652268 2026] [:error] [pid 40460:tid 40481] [client 156.146.54.59:38606] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "adacgow-4-9CKD2kKMZBbQAAAFI"]
[Thu Apr 09 02:20:51.156104 2026] [:error] [pid 40460:tid 40478] [client 156.146.54.59:38612] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "adacg4w-4-9CKD2kKMZBcAAAAE8"]
[Thu Apr 09 02:20:51.661674 2026] [:error] [pid 40460:tid 40469] [client 156.146.54.59:38614] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "adacg4w-4-9CKD2kKMZBcgAAAEY"]
[Thu Apr 09 02:20:52.342054 2026] [:error] [pid 40460:tid 40472] [client 156.146.54.59:38628] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "adachIw-4-9CKD2kKMZBdQAAAEk"]
[Thu Apr 09 02:20:54.051224 2026] [:error] [pid 40460:tid 40463] [client 156.146.54.59:38642] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "adachow-4-9CKD2kKMZBggAAAEA"]
[Thu Apr 09 02:20:54.387183 2026] [:error] [pid 22056:tid 22063] [client 156.146.54.59:38658] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "adachmQ3CidOGkmVXZhVLgAAAMU"]
[Thu Apr 09 02:20:55.028160 2026] [autoindex:error] [pid 22056:tid 22077] [client 156.146.54.59:35804] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 02:20:55.235465 2026] [:error] [pid 22056:tid 22080] [client 156.146.54.59:33518] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "adach2Q3CidOGkmVXZhVOgAAANY"]
[Thu Apr 09 02:20:55.570562 2026] [:error] [pid 22056:tid 22069] [client 156.146.54.59:33528] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "adach2Q3CidOGkmVXZhVPQAAAMs"]
[Thu Apr 09 02:20:56.244638 2026] [:error] [pid 22056:tid 22080] [client 156.146.54.59:33534] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "adaciGQ3CidOGkmVXZhVRwAAANY"]
[Thu Apr 09 02:20:56.579413 2026] [:error] [pid 22056:tid 22076] [client 156.146.54.59:33548] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "adaciGQ3CidOGkmVXZhVTgAAANI"]
[Thu Apr 09 02:20:56.914640 2026] [:error] [pid 40460:tid 40482] [client 156.146.54.59:33564] [client 156.146.54.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 156.146.54.59, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "adaciIw-4-9CKD2kKMZBhQAAAFM"]
[Thu Apr 09 02:20:56.924314 2026] [proxy_fcgi:error] [pid 40460:tid 40482] [client 156.146.54.59:33564] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 02:20:57.093186 2026] [:error] [pid 40460:tid 40478] [client 156.146.54.59:33564] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "adaciYw-4-9CKD2kKMZBhwAAAE8"]
[Thu Apr 09 02:20:57.767321 2026] [:error] [pid 40055:tid 40130] [client 156.146.54.59:33578] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "adaciX_5SjAJycOw5k_VMwAAAIA"]
[Thu Apr 09 02:20:58.102447 2026] [:error] [pid 40055:tid 40134] [client 156.146.54.59:33590] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/network.php"] [unique_id "adacin_5SjAJycOw5k_VNgAAAIQ"]
[Thu Apr 09 02:20:59.637109 2026] [:error] [pid 40055:tid 40130] [client 156.146.54.59:33596] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "adaci3_5SjAJycOw5k_VRwAAAIA"]
[Thu Apr 09 02:20:59.971585 2026] [:error] [pid 40054:tid 40100] [client 156.146.54.59:33606] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "adaci6ymwSVk3s67lDeR3AAAAQI"]
[Thu Apr 09 02:21:00.666888 2026] [:error] [pid 40054:tid 40103] [client 156.146.54.59:33610] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "adacjKymwSVk3s67lDeR3wAAAQU"]
[Thu Apr 09 02:21:01.007811 2026] [:error] [pid 40054:tid 40105] [client 156.146.54.59:33620] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "adacjaymwSVk3s67lDeR4QAAAQc"]
[Thu Apr 09 02:21:01.346199 2026] [proxy_fcgi:error] [pid 40460:tid 40468] [client 156.146.54.59:33632] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 02:21:01.516137 2026] [:error] [pid 40460:tid 40463] [client 156.146.54.59:33632] [client 156.146.54.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 156.146.54.59, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "adacjYw-4-9CKD2kKMZBlQAAAEA"]
[Thu Apr 09 02:21:01.861748 2026] [:error] [pid 40460:tid 40474] [client 156.146.54.59:33632] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "adacjYw-4-9CKD2kKMZBmAAAAEs"]
[Thu Apr 09 02:21:02.718487 2026] [:error] [pid 40460:tid 40478] [client 156.146.54.59:33644] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "adacjow-4-9CKD2kKMZBoAAAAE8"]
[Thu Apr 09 02:21:03.236782 2026] [:error] [pid 40055:tid 40142] [client 156.146.54.59:33652] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "adacj3_5SjAJycOw5k_VYAAAAIw"]
[Thu Apr 09 02:21:03.571892 2026] [:error] [pid 40460:tid 40467] [client 156.146.54.59:33664] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "adacj4w-4-9CKD2kKMZBpQAAAEQ"]
[Thu Apr 09 02:21:04.423728 2026] [:error] [pid 22056:tid 22063] [client 156.146.54.59:33668] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "adackGQ3CidOGkmVXZhVXQAAAMU"]
[Thu Apr 09 02:21:05.101931 2026] [:error] [pid 40055:tid 40130] [client 156.146.54.59:52852] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "adackX_5SjAJycOw5k_VcAAAAIA"]
[Thu Apr 09 02:21:06.129884 2026] [:error] [pid 40460:tid 40464] [client 156.146.54.59:52858] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "adackow-4-9CKD2kKMZBswAAAEE"]
[Thu Apr 09 02:21:06.465656 2026] [:error] [pid 40053:tid 40058] [client 156.146.54.59:52866] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "adacktdyKTqfO6aiQ6UeMAAAAAA"]
[Thu Apr 09 02:21:06.972957 2026] [:error] [pid 22056:tid 22080] [client 156.146.54.59:52874] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/count.php"] [unique_id "adackmQ3CidOGkmVXZhVZAAAANY"]
[Thu Apr 09 02:21:08.338117 2026] [:error] [pid 40055:tid 40137] [client 156.146.54.59:52876] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "adaclH_5SjAJycOw5k_VjQAAAIc"]
[Thu Apr 09 02:21:09.023017 2026] [:error] [pid 22056:tid 22065] [client 156.146.54.59:52886] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||measureyourcause.measureyourbrand.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/images/stories/themes.php"] [unique_id "adaclWQ3CidOGkmVXZhVbQAAAMc"]
[Thu Apr 09 02:21:09.191174 2026] [:error] [pid 22056:tid 22072] [client 156.146.54.59:52886] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "adaclWQ3CidOGkmVXZhVbwAAAM4"]
[Thu Apr 09 02:21:09.870051 2026] [:error] [pid 22056:tid 22062] [client 156.146.54.59:52890] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "adaclWQ3CidOGkmVXZhVcwAAAMQ"]
[Thu Apr 09 02:21:10.204649 2026] [:error] [pid 40460:tid 40483] [client 156.146.54.59:52892] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "adaclow-4-9CKD2kKMZBugAAAFQ"]
[Thu Apr 09 02:21:11.575667 2026] [:error] [pid 40460:tid 40474] [client 156.146.54.59:52908] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "adacl4w-4-9CKD2kKMZBxAAAAEs"]
[Thu Apr 09 02:21:12.264393 2026] [:error] [pid 40460:tid 40480] [client 156.146.54.59:52924] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "adacmIw-4-9CKD2kKMZByQAAAFE"]
[Thu Apr 09 02:21:12.768978 2026] [:error] [pid 40054:tid 40113] [client 156.146.54.59:52936] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "adacmKymwSVk3s67lDeR8gAAAQ4"]
[Thu Apr 09 02:21:13.962287 2026] [:error] [pid 40055:tid 40149] [client 156.146.54.59:52948] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "adacmX_5SjAJycOw5k_VvQAAAJM"]
[Thu Apr 09 02:21:14.297980 2026] [:error] [pid 22056:tid 22080] [client 156.146.54.59:52950] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/colour.php"] [unique_id "adacmmQ3CidOGkmVXZhVdwAAANY"]
[Thu Apr 09 02:21:14.803703 2026] [:error] [pid 40055:tid 40134] [client 156.146.54.59:52968] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "adacmn_5SjAJycOw5k_VwQAAAIQ"]
[Thu Apr 09 02:21:15.139811 2026] [:error] [pid 40460:tid 40471] [client 156.146.54.59:43744] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "adacm4w-4-9CKD2kKMZB1gAAAEg"]
[Thu Apr 09 02:21:15.817838 2026] [:error] [pid 40053:tid 40064] [client 156.146.54.59:43756] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "adacm9dyKTqfO6aiQ6UeQQAAAAY"]
[Thu Apr 09 02:21:16.505362 2026] [:error] [pid 40055:tid 40150] [client 156.146.54.59:43768] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "adacnH_5SjAJycOw5k_VxQAAAJQ"]
[Thu Apr 09 02:21:16.839677 2026] [:error] [pid 40460:tid 40475] [client 156.146.54.59:43778] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/about5.php"] [unique_id "adacnIw-4-9CKD2kKMZB5gAAAEw"]
[Thu Apr 09 02:21:17.865921 2026] [:error] [pid 22056:tid 22076] [client 156.146.54.59:43794] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/db.php"] [unique_id "adacnWQ3CidOGkmVXZhVggAAANI"]
[Thu Apr 09 02:21:18.544132 2026] [:error] [pid 22056:tid 22074] [client 156.146.54.59:43796] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "adacnmQ3CidOGkmVXZhVhgAAANA"]
[Thu Apr 09 02:21:19.395794 2026] [:error] [pid 40053:tid 40074] [client 156.146.54.59:43798] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "adacn9dyKTqfO6aiQ6UeTwAAABA"]
[Thu Apr 09 02:21:19.730616 2026] [:error] [pid 22056:tid 22064] [client 156.146.54.59:43802] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "adacn2Q3CidOGkmVXZhViAAAAMY"]
[Thu Apr 09 02:21:20.066440 2026] [:error] [pid 40055:tid 40140] [client 156.146.54.59:43808] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "adacoH_5SjAJycOw5k_V3AAAAIo"]
[Thu Apr 09 02:21:20.743570 2026] [:error] [pid 40460:tid 40483] [client 156.146.54.59:43810] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "adacoIw-4-9CKD2kKMZCDgAAAFQ"]
[Thu Apr 09 02:21:21.424957 2026] [:error] [pid 40053:tid 40078] [client 156.146.54.59:43822] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "adacoddyKTqfO6aiQ6UeVwAAABQ"]
[Thu Apr 09 02:21:21.759935 2026] [:error] [pid 40053:tid 40069] [client 156.146.54.59:43828] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "adacoddyKTqfO6aiQ6UeWQAAAAs"]
[Thu Apr 09 02:21:22.270346 2026] [:error] [pid 40054:tid 40118] [client 156.146.54.59:43838] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "adacoqymwSVk3s67lDeSHgAAARM"]
[Thu Apr 09 02:21:22.609082 2026] [:error] [pid 40054:tid 40124] [client 156.146.54.59:43850] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "adacoqymwSVk3s67lDeSHwAAARg"]
[Thu Apr 09 02:21:23.287877 2026] [:error] [pid 40054:tid 40099] [client 156.146.54.59:43858] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "adaco6ymwSVk3s67lDeSIwAAAQE"]
[Thu Apr 09 02:21:23.793514 2026] [:error] [pid 22056:tid 22068] [client 156.146.54.59:43866] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "adaco2Q3CidOGkmVXZhVkQAAAMo"]
[Thu Apr 09 02:21:24.129522 2026] [:error] [pid 22056:tid 22080] [client 156.146.54.59:43872] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "adacpGQ3CidOGkmVXZhVkgAAANY"]
[Thu Apr 09 02:21:24.466080 2026] [:error] [pid 22056:tid 22082] [client 156.146.54.59:43878] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "adacpGQ3CidOGkmVXZhVlQAAANg"]
[Thu Apr 09 02:21:25.141683 2026] [:error] [pid 22056:tid 22060] [client 156.146.54.59:60546] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "adacpWQ3CidOGkmVXZhVnAAAAMI"]
[Thu Apr 09 02:21:25.820135 2026] [:error] [pid 22056:tid 22082] [client 156.146.54.59:60556] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "adacpWQ3CidOGkmVXZhVogAAANg"]
[Thu Apr 09 02:21:26.326674 2026] [:error] [pid 22056:tid 22058] [client 156.146.54.59:60558] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "adacpmQ3CidOGkmVXZhVqAAAAMA"]
[Thu Apr 09 02:21:26.832438 2026] [:error] [pid 40054:tid 40107] [client 156.146.54.59:60560] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "adacpqymwSVk3s67lDeSLQAAAQk"]
[Thu Apr 09 02:21:28.196200 2026] [:error] [pid 40054:tid 40101] [client 156.146.54.59:60568] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "adacqKymwSVk3s67lDeSOgAAAQM"]
[Thu Apr 09 02:21:28.532444 2026] [:error] [pid 40055:tid 40135] [client 156.146.54.59:60576] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "adacqH_5SjAJycOw5k_V9AAAAIU"]
[Thu Apr 09 02:21:29.210607 2026] [:error] [pid 22056:tid 22063] [client 156.146.54.59:60590] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "adacqWQ3CidOGkmVXZhVtgAAAMU"]
[Thu Apr 09 02:21:30.232751 2026] [:error] [pid 22056:tid 22080] [client 156.146.54.59:60600] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "adacqmQ3CidOGkmVXZhVvgAAANY"]
[Thu Apr 09 02:21:30.909889 2026] [:error] [pid 22056:tid 22058] [client 156.146.54.59:60614] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "adacqmQ3CidOGkmVXZhVxAAAAMA"]
[Thu Apr 09 02:21:31.591175 2026] [:error] [pid 22056:tid 22080] [client 156.146.54.59:60630] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "adacq2Q3CidOGkmVXZhVzAAAANY"]
[Thu Apr 09 02:21:32.101573 2026] [:error] [pid 40055:tid 40151] [client 156.146.54.59:60646] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "adacrH_5SjAJycOw5k_V-wAAAJU"]
[Thu Apr 09 02:21:32.608350 2026] [:error] [pid 40055:tid 40140] [client 156.146.54.59:60660] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "adacrH_5SjAJycOw5k_V_wAAAIo"]
[Thu Apr 09 02:21:33.635489 2026] [:error] [pid 40460:tid 40478] [client 156.146.54.59:60666] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "adacrYw-4-9CKD2kKMZCLwAAAE8"]
[Thu Apr 09 02:21:34.483121 2026] [:error] [pid 40460:tid 40487] [client 156.146.54.59:60672] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "adacrow-4-9CKD2kKMZCNgAAAFg"]
[Thu Apr 09 02:21:34.827394 2026] [proxy_fcgi:error] [pid 40055:tid 40136] [client 156.146.54.59:41140] AH01071: Got error 'Primary script unknown'
[Thu Apr 09 02:21:34.995962 2026] [:error] [pid 40055:tid 40138] [client 156.146.54.59:41140] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/shell.php"] [unique_id "adacrn_5SjAJycOw5k_WCAAAAIg"]
[Thu Apr 09 02:21:35.331366 2026] [:error] [pid 40055:tid 40135] [client 156.146.54.59:41144] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "adacr3_5SjAJycOw5k_WDQAAAIU"]
[Thu Apr 09 02:21:36.008546 2026] [:error] [pid 40055:tid 40139] [client 156.146.54.59:41148] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "adacsH_5SjAJycOw5k_WEgAAAIk"]
[Thu Apr 09 02:21:36.343611 2026] [:error] [pid 40055:tid 40145] [client 156.146.54.59:41158] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "adacsH_5SjAJycOw5k_WFAAAAI8"]
[Thu Apr 09 02:21:37.709382 2026] [:error] [pid 40055:tid 40143] [client 156.146.54.59:41172] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/wp-2019.php"] [unique_id "adacsX_5SjAJycOw5k_WIgAAAI0"]
[Thu Apr 09 02:21:38.049602 2026] [:error] [pid 22056:tid 22062] [client 156.146.54.59:41178] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "adacsmQ3CidOGkmVXZhV1wAAAMQ"]
[Thu Apr 09 02:21:38.555438 2026] [:error] [pid 40055:tid 40144] [client 156.146.54.59:41184] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/log.php"] [unique_id "adacsn_5SjAJycOw5k_WJgAAAI4"]
[Thu Apr 09 02:21:38.890547 2026] [:error] [pid 22056:tid 22059] [client 156.146.54.59:41192] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "adacsmQ3CidOGkmVXZhV3AAAAME"]
[Thu Apr 09 02:21:39.225318 2026] [:error] [pid 40055:tid 40135] [client 156.146.54.59:41208] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "adacs3_5SjAJycOw5k_WKAAAAIU"]
[Thu Apr 09 02:21:39.560413 2026] [:error] [pid 40460:tid 40470] [client 156.146.54.59:41212] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/aw.php"] [unique_id "adacs4w-4-9CKD2kKMZCPgAAAEc"]
[Thu Apr 09 02:21:40.580871 2026] [:error] [pid 40460:tid 40466] [client 156.146.54.59:41222] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/db.php"] [unique_id "adactIw-4-9CKD2kKMZCSQAAAEM"]
[Thu Apr 09 02:21:40.914933 2026] [:error] [pid 40055:tid 40133] [client 156.146.54.59:41234] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/install.php"] [unique_id "adactH_5SjAJycOw5k_WLAAAAIM"]
[Thu Apr 09 02:21:41.601169 2026] [:error] [pid 40054:tid 40112] [client 156.146.54.59:41246] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/install.php"] [unique_id "adactaymwSVk3s67lDeSTwAAAQ0"]
[Thu Apr 09 02:21:41.935976 2026] [:error] [pid 40054:tid 40105] [client 156.146.54.59:41254] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "adactaymwSVk3s67lDeSUAAAAQc"]
[Thu Apr 09 02:21:42.614880 2026] [:error] [pid 40055:tid 40141] [client 156.146.54.59:41260] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/template-less.php"] [unique_id "adactn_5SjAJycOw5k_WMwAAAIs"]
[Thu Apr 09 02:21:42.950341 2026] [:error] [pid 22056:tid 22058] [client 156.146.54.59:41268] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "adactmQ3CidOGkmVXZhV8wAAAMA"]
[Thu Apr 09 02:21:44.478682 2026] [:error] [pid 22056:tid 22077] [client 156.146.54.59:41282] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/min.php"] [unique_id "adacuGQ3CidOGkmVXZhWHAAAANM"]
[Thu Apr 09 02:21:44.813653 2026] [:error] [pid 22056:tid 22070] [client 156.146.54.59:46772] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "adacuGQ3CidOGkmVXZhWJgAAAMw"]
[Thu Apr 09 02:21:46.830468 2026] [:error] [pid 22056:tid 22076] [client 156.146.54.59:46776] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/file.php"] [unique_id "adacumQ3CidOGkmVXZhWMwAAANI"]
[Thu Apr 09 02:21:47.337070 2026] [:error] [pid 22056:tid 22063] [client 156.146.54.59:46784] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "adacu2Q3CidOGkmVXZhWNwAAAMU"]
[Thu Apr 09 02:21:47.841576 2026] [:error] [pid 40460:tid 40483] [client 156.146.54.59:46786] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/load.php"] [unique_id "adacu4w-4-9CKD2kKMZCXgAAAFQ"]
[Thu Apr 09 02:21:48.177375 2026] [:error] [pid 40054:tid 40102] [client 156.146.54.59:46802] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "adacvKymwSVk3s67lDeSWQAAAQQ"]
[Thu Apr 09 02:21:48.511815 2026] [:error] [pid 22056:tid 22073] [client 156.146.54.59:46814] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "adacvGQ3CidOGkmVXZhWOwAAAM8"]
[Thu Apr 09 02:21:49.360530 2026] [:error] [pid 40054:tid 40118] [client 156.146.54.59:46816] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "adacvaymwSVk3s67lDeSXQAAARM"]
[Thu Apr 09 02:21:49.865462 2026] [:error] [pid 40054:tid 40100] [client 156.146.54.59:46828] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "adacvaymwSVk3s67lDeSYAAAAQI"]
[Thu Apr 09 02:21:50.546703 2026] [:error] [pid 40055:tid 40138] [client 156.146.54.59:46844] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "adacvn_5SjAJycOw5k_WUQAAAIg"]
[Thu Apr 09 02:21:50.881251 2026] [:error] [pid 40055:tid 40139] [client 156.146.54.59:46846] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "adacvn_5SjAJycOw5k_WUwAAAIk"]
[Thu Apr 09 02:21:51.216277 2026] [:error] [pid 40054:tid 40105] [client 156.146.54.59:46850] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "adacv6ymwSVk3s67lDeSZwAAAQc"]
[Thu Apr 09 02:21:52.920618 2026] [:error] [pid 40055:tid 40141] [client 156.146.54.59:46860] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/system.php"] [unique_id "adacwH_5SjAJycOw5k_WXQAAAIs"]
[Thu Apr 09 02:21:53.426051 2026] [:error] [pid 22056:tid 22068] [client 156.146.54.59:46862] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "adacwWQ3CidOGkmVXZhWUAAAAMo"]
[Thu Apr 09 02:21:54.102516 2026] [:error] [pid 40055:tid 40153] [client 156.146.54.59:46864] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "adacwn_5SjAJycOw5k_WYQAAAJc"]
[Thu Apr 09 02:21:54.437830 2026] [:error] [pid 40055:tid 40152] [client 156.146.54.59:46868] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "adacwn_5SjAJycOw5k_WZQAAAJY"]
[Thu Apr 09 02:21:54.772164 2026] [:error] [pid 22056:tid 22080] [client 156.146.54.59:45422] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "adacwmQ3CidOGkmVXZhWXQAAANY"]
[Thu Apr 09 02:21:55.453150 2026] [:error] [pid 40054:tid 40119] [client 156.146.54.59:45432] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/src/Response/about.php"] [unique_id "adacw6ymwSVk3s67lDeScgAAARQ"]
[Thu Apr 09 02:21:56.994581 2026] [:error] [pid 40460:tid 40465] [client 156.146.54.59:45448] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ms-pie.php"] [unique_id "adacxIw-4-9CKD2kKMZCeQAAAEI"]
[Thu Apr 09 02:21:58.016900 2026] [:error] [pid 40055:tid 40135] [client 156.146.54.59:45452] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "adacxn_5SjAJycOw5k_WcAAAAIU"]
[Thu Apr 09 02:21:58.722948 2026] [:error] [pid 40053:tid 40075] [client 156.146.54.59:45456] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/nav-menu.php"] [unique_id "adacxtdyKTqfO6aiQ6UecQAAABE"]
[Thu Apr 09 02:21:59.058478 2026] [:error] [pid 40460:tid 40471] [client 156.146.54.59:45464] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/user.php"] [unique_id "adacx4w-4-9CKD2kKMZCggAAAEg"]
[Thu Apr 09 02:22:01.277475 2026] [:error] [pid 22056:tid 22075] [client 156.146.54.59:45478] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/dist/script-modules/block-library/search/about.php"] [unique_id "adacyWQ3CidOGkmVXZhWjQAAANE"]
[Thu Apr 09 02:22:01.613303 2026] [:error] [pid 40053:tid 40081] [client 156.146.54.59:45484] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-cropped-image-control.php"] [unique_id "adacyddyKTqfO6aiQ6UedQAAABc"]
[Thu Apr 09 02:22:01.948760 2026] [:error] [pid 40460:tid 40473] [client 156.146.54.59:45496] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/ultra.php"] [unique_id "adacyYw-4-9CKD2kKMZChgAAAEo"]
[Thu Apr 09 02:22:02.461413 2026] [:error] [pid 40053:tid 40078] [client 156.146.54.59:45502] [client 156.146.54.59] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 156.146.54.59, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "adacytdyKTqfO6aiQ6UeegAAABQ"]
[Thu Apr 09 02:22:02.803090 2026] [:error] [pid 40053:tid 40073] [client 156.146.54.59:45502] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/preferences/wp-login.php"] [unique_id "adacytdyKTqfO6aiQ6UefQAAAA8"]
[Thu Apr 09 02:22:03.140064 2026] [:error] [pid 40460:tid 40486] [client 156.146.54.59:45518] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/media-text/index.php"] [unique_id "adacy4w-4-9CKD2kKMZChwAAAFc"]
[Thu Apr 09 02:22:03.474701 2026] [:error] [pid 22056:tid 22077] [client 156.146.54.59:45534] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/phpmailer/phpmailer.php"] [unique_id "adacy2Q3CidOGkmVXZhWlgAAANM"]
[Thu Apr 09 02:22:04.840851 2026] [:error] [pid 40054:tid 40117] [client 156.146.54.59:45542] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/latest-comments/template-loader.php"] [unique_id "adaczKymwSVk3s67lDeSiwAAARI"]
[Thu Apr 09 02:22:06.394948 2026] [:error] [pid 40055:tid 40137] [client 156.146.54.59:36598] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/nextpage/index.php"] [unique_id "adaczn_5SjAJycOw5k_WgAAAAIc"]
[Thu Apr 09 02:22:07.075025 2026] [:error] [pid 40460:tid 40476] [client 156.146.54.59:36610] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/link-template-firewall.php"] [unique_id "adacz4w-4-9CKD2kKMZCkAAAAE0"]
[Thu Apr 09 02:22:09.615169 2026] [:error] [pid 40054:tid 40118] [client 156.146.54.59:36626] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "adac0aymwSVk3s67lDeSoAAAARM"]
[Thu Apr 09 02:22:09.960191 2026] [:error] [pid 22056:tid 22077] [client 156.146.54.59:36642] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/src/Decode/HTML/sitemaps.php"] [unique_id "adac0WQ3CidOGkmVXZhWogAAANM"]
[Thu Apr 09 02:22:10.367106 2026] [:error] [pid 40460:tid 40478] [client 156.146.54.59:36654] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/mer_gagal.php"] [unique_id "adac0ow-4-9CKD2kKMZCoAAAAE8"]
[Thu Apr 09 02:22:10.769112 2026] [:error] [pid 40055:tid 40147] [client 156.146.54.59:36658] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/html-api/wp-login.php"] [unique_id "adac0n_5SjAJycOw5k_WiQAAAJE"]
[Thu Apr 09 02:22:11.632385 2026] [:error] [pid 40460:tid 40471] [client 156.146.54.59:36668] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/alfa-rex.php"] [unique_id "adac04w-4-9CKD2kKMZCpwAAAEg"]
[Thu Apr 09 02:22:11.967633 2026] [:error] [pid 40055:tid 40153] [client 156.146.54.59:36678] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/Core32.php"] [unique_id "adac03_5SjAJycOw5k_WigAAAJc"]
[Thu Apr 09 02:22:13.334802 2026] [:error] [pid 22056:tid 22068] [client 156.146.54.59:36680] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/wp-conflg.php"] [unique_id "adac1WQ3CidOGkmVXZhWrwAAAMo"]
[Thu Apr 09 02:22:14.416781 2026] [:error] [pid 40054:tid 40123] [client 156.146.54.59:36696] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/index.php"] [unique_id "adac1qymwSVk3s67lDeSqgAAARc"]
[Thu Apr 09 02:22:14.819608 2026] [:error] [pid 40055:tid 40136] [client 156.146.54.59:39210] [client 156.146.54.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "adac1n_5SjAJycOw5k_WjgAAAIY"]
[Thu Apr 09 02:22:35.307217 2026] [autoindex:error] [pid 40055:tid 40141] [client 156.146.54.59:39220] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 09 04:37:14.112462 2026] [:error] [pid 22627:tid 22632] [client 20.205.208.34:19915] [client 20.205.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/index.php"] [unique_id "ada8evr8glsF_jKQpr7A3gAAAQI"]
[Thu Apr 09 04:37:14.473708 2026] [:error] [pid 20535:tid 20565] [client 20.205.208.34:19950] [client 20.205.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/index.php"] [unique_id "ada8egWiD9hWnEUHWdP6rgAAABU"]
[Thu Apr 09 04:37:14.842008 2026] [:error] [pid 20535:tid 20554] [client 20.205.208.34:15708] [client 20.205.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/index.php"] [unique_id "ada8egWiD9hWnEUHWdP6sAAAAAo"]
[Thu Apr 09 04:37:15.215533 2026] [:error] [pid 20537:tid 20603] [client 20.205.208.34:19489] [client 20.205.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/index.php"] [unique_id "ada8e8STjpSeyrxLmN76vwAAAIU"]
[Thu Apr 09 13:22:44.953784 2026] [:error] [pid 24927:tid 24933] [client 20.205.208.34:24674] [client 20.205.208.34] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/preferences/index.php"] [unique_id "adc3pDXObuzEuw8mNJtVgQAAAQM"]
[Thu Apr 09 13:22:46.063674 2026] [:error] [pid 24927:tid 24944] [client 20.205.208.34:7559] [client 20.205.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "adc3pjXObuzEuw8mNJtViwAAAQ4"]
[Thu Apr 09 13:22:46.419900 2026] [:error] [pid 24515:tid 24542] [client 20.205.208.34:17001] [client 20.205.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "adc3pq1OMnvM2fMnB1MuqAAAABc"]
[Thu Apr 09 13:22:46.793110 2026] [:error] [pid 24927:tid 24941] [client 20.205.208.34:25392] [client 20.205.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "adc3pjXObuzEuw8mNJtVjQAAAQs"]
[Thu Apr 09 13:22:47.147828 2026] [:error] [pid 24927:tid 24952] [client 20.205.208.34:13724] [client 20.205.208.34] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "adc3pzXObuzEuw8mNJtVkAAAARY"]
[Fri Apr 10 16:35:54.144357 2026] [:error] [pid 3934:tid 3951] [client 158.158.53.142:63696] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file6.php"] [unique_id "adi2aoa41m-BS8mg82cYegAAAMw"]
[Fri Apr 10 16:35:55.699663 2026] [:error] [pid 3934:tid 3951] [client 158.158.53.142:65433] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file6.php"] [unique_id "adi2a4a41m-BS8mg82cYfwAAAMw"]
[Fri Apr 10 16:35:56.691858 2026] [:error] [pid 13189:tid 13204] [client 158.158.53.142:65523] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file6.php"] [unique_id "adi2bJAxiJKPums3eBAfIwAAAEw"]
[Fri Apr 10 16:35:57.429916 2026] [:error] [pid 13189:tid 13211] [client 158.158.53.142:64188] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file6.php"] [unique_id "adi2bZAxiJKPums3eBAfJAAAAFM"]
[Fri Apr 10 16:35:58.536879 2026] [:error] [pid 13189:tid 13205] [client 158.158.53.142:63716] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sl.php"] [unique_id "adi2bpAxiJKPums3eBAfKQAAAE0"]
[Fri Apr 10 16:35:59.316952 2026] [:error] [pid 3934:tid 3950] [client 158.158.53.142:65422] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sl.php"] [unique_id "adi2b4a41m-BS8mg82cYmwAAAMs"]
[Fri Apr 10 16:36:00.015875 2026] [:error] [pid 13100:tid 13116] [client 158.158.53.142:64231] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sl.php"] [unique_id "adi2cFzg-ZkZ0InWIP1bzQAAAQs"]
[Fri Apr 10 16:36:00.819337 2026] [:error] [pid 13189:tid 13216] [client 158.158.53.142:65525] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sl.php"] [unique_id "adi2cJAxiJKPums3eBAfMQAAAFg"]
[Fri Apr 10 16:36:01.852628 2026] [:error] [pid 13101:tid 13151] [client 158.158.53.142:64165] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/flox.php"] [unique_id "adi2cd8Ldw85818pj2pp8gAAAJI"]
[Fri Apr 10 16:36:02.848332 2026] [:error] [pid 3934:tid 3961] [client 158.158.53.142:64775] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/flox.php"] [unique_id "adi2coa41m-BS8mg82cYrAAAANY"]
[Fri Apr 10 16:36:04.723092 2026] [:error] [pid 13102:tid 13183] [client 158.158.53.142:64223] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/flox.php"] [unique_id "adi2dP9xLvjW2guI55YaTQAAABc"]
[Fri Apr 10 16:36:07.004398 2026] [:error] [pid 13101:tid 13146] [client 158.158.53.142:64782] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/flox.php"] [unique_id "adi2d98Ldw85818pj2pp_AAAAI0"]
[Fri Apr 10 16:36:07.826034 2026] [:error] [pid 3934:tid 3950] [client 158.158.53.142:64768] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mff.php"] [unique_id "adi2d4a41m-BS8mg82cYxAAAAMs"]
[Fri Apr 10 16:36:09.148272 2026] [:error] [pid 13101:tid 13150] [client 158.158.53.142:65474] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mff.php"] [unique_id "adi2ed8Ldw85818pj2pqAgAAAJE"]
[Fri Apr 10 16:36:09.879511 2026] [:error] [pid 13102:tid 13167] [client 158.158.53.142:64169] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mff.php"] [unique_id "adi2ef9xLvjW2guI55YaXgAAAAc"]
[Fri Apr 10 16:36:10.402157 2026] [:error] [pid 13101:tid 13137] [client 158.158.53.142:64199] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mff.php"] [unique_id "adi2et8Ldw85818pj2pqBwAAAIQ"]
[Fri Apr 10 16:36:10.944829 2026] [:error] [pid 13101:tid 13139] [client 158.158.53.142:65472] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aq.php"] [unique_id "adi2et8Ldw85818pj2pqCQAAAIY"]
[Fri Apr 10 16:36:11.474168 2026] [:error] [pid 13102:tid 13183] [client 158.158.53.142:64241] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aq.php"] [unique_id "adi2e_9xLvjW2guI55YaaAAAABc"]
[Fri Apr 10 16:36:12.134029 2026] [:error] [pid 13101:tid 13151] [client 158.158.53.142:65445] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aq.php"] [unique_id "adi2fN8Ldw85818pj2pqDQAAAJI"]
[Fri Apr 10 16:36:12.664654 2026] [:error] [pid 13101:tid 13137] [client 158.158.53.142:64154] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aq.php"] [unique_id "adi2fN8Ldw85818pj2pqEgAAAIQ"]
[Fri Apr 10 16:36:13.291995 2026] [:error] [pid 13101:tid 13139] [client 158.158.53.142:64142] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/filemanger2.php"] [unique_id "adi2fd8Ldw85818pj2pqFwAAAIY"]
[Fri Apr 10 16:36:13.776840 2026] [:error] [pid 3934:tid 3959] [client 158.158.53.142:65521] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/filemanger2.php"] [unique_id "adi2fYa41m-BS8mg82cY1gAAANQ"]
[Fri Apr 10 16:36:14.290531 2026] [:error] [pid 3934:tid 3951] [client 158.158.53.142:64217] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/filemanger2.php"] [unique_id "adi2foa41m-BS8mg82cY2QAAAMw"]
[Fri Apr 10 16:36:14.805259 2026] [:error] [pid 13102:tid 13178] [client 158.158.53.142:64809] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/filemanger2.php"] [unique_id "adi2fv9xLvjW2guI55YabAAAABI"]
[Fri Apr 10 16:36:15.310083 2026] [:error] [pid 13189:tid 13212] [client 158.158.53.142:65413] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "adi2f5AxiJKPums3eBAfSwAAAFQ"]
[Fri Apr 10 16:36:15.806738 2026] [:error] [pid 13189:tid 13192] [client 158.158.53.142:64876] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "adi2f5AxiJKPums3eBAfTwAAAEA"]
[Fri Apr 10 16:36:16.320172 2026] [:error] [pid 13189:tid 13200] [client 158.158.53.142:64880] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "adi2gJAxiJKPums3eBAfUgAAAEg"]
[Fri Apr 10 16:36:16.801051 2026] [:error] [pid 13102:tid 13164] [client 158.158.53.142:64246] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "adi2gP9xLvjW2guI55YadQAAAAQ"]
[Fri Apr 10 16:36:17.342350 2026] [:error] [pid 3934:tid 3949] [client 158.158.53.142:65494] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-vn1.php"] [unique_id "adi2gYa41m-BS8mg82cY5QAAAMo"]
[Fri Apr 10 16:36:17.816504 2026] [:error] [pid 13102:tid 13176] [client 158.158.53.142:64813] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-vn1.php"] [unique_id "adi2gf9xLvjW2guI55YaeQAAABA"]
[Fri Apr 10 16:36:18.302107 2026] [:error] [pid 13102:tid 13161] [client 158.158.53.142:64175] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-vn1.php"] [unique_id "adi2gv9xLvjW2guI55YaegAAAAE"]
[Fri Apr 10 16:36:18.795348 2026] [:error] [pid 13101:tid 13148] [client 158.158.53.142:65411] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-vn1.php"] [unique_id "adi2gt8Ldw85818pj2pqIgAAAI8"]
[Fri Apr 10 16:36:19.329769 2026] [:error] [pid 13101:tid 13139] [client 158.158.53.142:64230] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ewp.php"] [unique_id "adi2g98Ldw85818pj2pqIwAAAIY"]
[Fri Apr 10 16:36:19.845397 2026] [:error] [pid 13101:tid 13151] [client 158.158.53.142:64248] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ewp.php"] [unique_id "adi2g98Ldw85818pj2pqJwAAAJI"]
[Fri Apr 10 16:36:20.321086 2026] [:error] [pid 13101:tid 13134] [client 158.158.53.142:64816] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ewp.php"] [unique_id "adi2hN8Ldw85818pj2pqKgAAAIE"]
[Fri Apr 10 16:36:20.841555 2026] [:error] [pid 13101:tid 13143] [client 158.158.53.142:64823] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ewp.php"] [unique_id "adi2hN8Ldw85818pj2pqLwAAAIo"]
[Fri Apr 10 16:36:21.317577 2026] [:error] [pid 13101:tid 13156] [client 158.158.53.142:63702] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kikikoko.php"] [unique_id "adi2hd8Ldw85818pj2pqMgAAAJc"]
[Fri Apr 10 16:36:21.860887 2026] [:error] [pid 13189:tid 13212] [client 158.158.53.142:64194] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kikikoko.php"] [unique_id "adi2hZAxiJKPums3eBAfVAAAAFQ"]
[Fri Apr 10 16:36:22.429883 2026] [:error] [pid 13101:tid 13151] [client 158.158.53.142:63623] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kikikoko.php"] [unique_id "adi2ht8Ldw85818pj2pqNwAAAJI"]
[Fri Apr 10 16:36:23.095983 2026] [:error] [pid 3934:tid 3961] [client 158.158.53.142:64868] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kikikoko.php"] [unique_id "adi2h4a41m-BS8mg82cY8gAAANY"]
[Fri Apr 10 16:36:23.656769 2026] [:error] [pid 3934:tid 3946] [client 158.158.53.142:64137] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nwflm.php"] [unique_id "adi2h4a41m-BS8mg82cY9AAAAMc"]
[Fri Apr 10 16:36:24.196214 2026] [:error] [pid 3934:tid 3959] [client 158.158.53.142:64235] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nwflm.php"] [unique_id "adi2iIa41m-BS8mg82cY-gAAANQ"]
[Fri Apr 10 16:36:24.902040 2026] [:error] [pid 13102:tid 13170] [client 158.158.53.142:65482] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nwflm.php"] [unique_id "adi2iP9xLvjW2guI55YagwAAAAo"]
[Fri Apr 10 16:36:25.409062 2026] [:error] [pid 3934:tid 3948] [client 158.158.53.142:64778] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nwflm.php"] [unique_id "adi2iYa41m-BS8mg82cZEwAAAMk"]
[Fri Apr 10 16:36:25.948708 2026] [:error] [pid 13102:tid 13179] [client 158.158.53.142:64817] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "adi2if9xLvjW2guI55YahgAAABM"]
[Fri Apr 10 16:36:26.578069 2026] [:error] [pid 13189:tid 13193] [client 158.158.53.142:65451] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "adi2ipAxiJKPums3eBAffgAAAEE"]
[Fri Apr 10 16:36:27.084446 2026] [:error] [pid 13189:tid 13197] [client 158.158.53.142:64875] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "adi2i5AxiJKPums3eBAffwAAAEU"]
[Fri Apr 10 16:36:27.596721 2026] [:error] [pid 13189:tid 13210] [client 158.158.53.142:64128] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "adi2i5AxiJKPums3eBAfgQAAAFI"]
[Fri Apr 10 16:36:28.153694 2026] [:error] [pid 13189:tid 13200] [client 158.158.53.142:64213] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "adi2jJAxiJKPums3eBAfgwAAAEg"]
[Fri Apr 10 16:36:28.732561 2026] [:error] [pid 3934:tid 3960] [client 158.158.53.142:64852] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "adi2jIa41m-BS8mg82cZMwAAANU"]
[Fri Apr 10 16:36:29.281003 2026] [:error] [pid 3934:tid 3947] [client 158.158.53.142:64228] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "adi2jYa41m-BS8mg82cZNgAAAMg"]
[Fri Apr 10 16:36:29.822995 2026] [:error] [pid 13102:tid 13174] [client 158.158.53.142:64147] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "adi2jf9xLvjW2guI55YajQAAAA4"]
[Fri Apr 10 16:36:30.381104 2026] [:error] [pid 3934:tid 3951] [client 158.158.53.142:64237] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "adi2joa41m-BS8mg82cZPAAAAMw"]
[Fri Apr 10 16:36:30.857714 2026] [:error] [pid 3934:tid 3949] [client 158.158.53.142:64836] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "adi2joa41m-BS8mg82cZQgAAAMo"]
[Fri Apr 10 16:36:31.379431 2026] [:error] [pid 13101:tid 13157] [client 158.158.53.142:64168] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "adi2j98Ldw85818pj2pqTAAAAJg"]
[Fri Apr 10 16:36:32.051110 2026] [:error] [pid 13100:tid 13114] [client 158.158.53.142:65510] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "adi2kFzg-ZkZ0InWIP1b_gAAAQk"]
[Fri Apr 10 16:36:32.564869 2026] [:error] [pid 3934:tid 3957] [client 158.158.53.142:65412] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "adi2kIa41m-BS8mg82cZTwAAANI"]
[Fri Apr 10 16:36:33.178299 2026] [:error] [pid 13102:tid 13163] [client 158.158.53.142:64239] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "adi2kf9xLvjW2guI55YalQAAAAM"]
[Fri Apr 10 16:36:33.707754 2026] [:error] [pid 13189:tid 13196] [client 158.158.53.142:64783] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "adi2kZAxiJKPums3eBAfjAAAAEQ"]
[Fri Apr 10 16:36:34.398706 2026] [:error] [pid 13100:tid 13125] [client 158.158.53.142:65493] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "adi2klzg-ZkZ0InWIP1cBwAAARQ"]
[Fri Apr 10 16:36:34.890318 2026] [:error] [pid 13102:tid 13176] [client 158.158.53.142:62572] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "adi2kv9xLvjW2guI55YanAAAABA"]
[Fri Apr 10 16:36:35.449498 2026] [:error] [pid 13189:tid 13207] [client 158.158.53.142:63627] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "adi2k5AxiJKPums3eBAfkAAAAE8"]
[Fri Apr 10 16:36:36.061994 2026] [:error] [pid 3934:tid 3939] [client 158.158.53.142:64240] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "adi2lIa41m-BS8mg82cZXAAAAMA"]
[Fri Apr 10 16:36:36.588972 2026] [:error] [pid 13101:tid 13142] [client 158.158.53.142:63634] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "adi2lN8Ldw85818pj2pqUQAAAIk"]
[Fri Apr 10 16:36:38.212163 2026] [:error] [pid 13100:tid 13117] [client 158.158.53.142:64894] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "adi2llzg-ZkZ0InWIP1cCwAAAQw"]
[Fri Apr 10 16:36:38.888123 2026] [:error] [pid 13101:tid 13157] [client 158.158.53.142:63720] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "adi2lt8Ldw85818pj2pqVgAAAJg"]
[Fri Apr 10 16:36:39.897540 2026] [:error] [pid 13189:tid 13216] [client 158.158.53.142:63707] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "adi2l5AxiJKPums3eBAfoAAAAFg"]
[Fri Apr 10 16:36:40.648927 2026] [:error] [pid 13189:tid 13203] [client 158.158.53.142:63085] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "adi2mJAxiJKPums3eBAfpAAAAEs"]
[Fri Apr 10 16:36:41.200986 2026] [:error] [pid 13101:tid 13140] [client 158.158.53.142:63728] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/water.php"] [unique_id "adi2md8Ldw85818pj2pqYgAAAIc"]
[Fri Apr 10 16:36:41.877374 2026] [:error] [pid 13102:tid 13175] [client 158.158.53.142:64249] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/water.php"] [unique_id "adi2mf9xLvjW2guI55YapAAAAA8"]
[Fri Apr 10 16:36:42.503969 2026] [:error] [pid 3934:tid 3961] [client 158.158.53.142:63015] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/water.php"] [unique_id "adi2moa41m-BS8mg82cZcAAAANY"]
[Fri Apr 10 16:36:43.127620 2026] [:error] [pid 13101:tid 13157] [client 158.158.53.142:65463] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/water.php"] [unique_id "adi2m98Ldw85818pj2pqZwAAAJg"]
[Fri Apr 10 16:36:43.692045 2026] [:error] [pid 13189:tid 13203] [client 158.158.53.142:63704] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "adi2m5AxiJKPums3eBAfrwAAAEs"]
[Fri Apr 10 16:36:44.206379 2026] [:error] [pid 13101:tid 13141] [client 158.158.53.142:64863] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "adi2nN8Ldw85818pj2pqaQAAAIg"]
[Fri Apr 10 16:36:44.728029 2026] [:error] [pid 13189:tid 13198] [client 158.158.53.142:64777] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "adi2nJAxiJKPums3eBAfuAAAAEY"]
[Fri Apr 10 16:36:45.337716 2026] [:error] [pid 3934:tid 3954] [client 158.158.53.142:65438] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "adi2nYa41m-BS8mg82cZdwAAAM8"]
[Fri Apr 10 16:36:46.000767 2026] [:error] [pid 13101:tid 13140] [client 158.158.53.142:64804] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/13.php"] [unique_id "adi2nd8Ldw85818pj2pqbQAAAIc"]
[Fri Apr 10 16:36:46.741563 2026] [:error] [pid 13100:tid 13112] [client 158.158.53.142:64170] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/13.php"] [unique_id "adi2nlzg-ZkZ0InWIP1cFAAAAQc"]
[Fri Apr 10 16:36:47.354920 2026] [:error] [pid 3934:tid 3953] [client 158.158.53.142:64845] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/13.php"] [unique_id "adi2n4a41m-BS8mg82cZiwAAAM4"]
[Fri Apr 10 16:36:47.940539 2026] [:error] [pid 3934:tid 3955] [client 158.158.53.142:65421] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/13.php"] [unique_id "adi2n4a41m-BS8mg82cZkgAAANA"]
[Fri Apr 10 16:36:48.614756 2026] [:error] [pid 13102:tid 13166] [client 158.158.53.142:64793] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wert.php"] [unique_id "adi2oP9xLvjW2guI55YarwAAAAY"]
[Fri Apr 10 16:36:49.317465 2026] [:error] [pid 13100:tid 13117] [client 158.158.53.142:65431] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wert.php"] [unique_id "adi2oVzg-ZkZ0InWIP1cFwAAAQw"]
[Fri Apr 10 16:36:50.186282 2026] [:error] [pid 3934:tid 3959] [client 158.158.53.142:64886] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wert.php"] [unique_id "adi2ooa41m-BS8mg82cZngAAANQ"]
[Fri Apr 10 16:36:50.761001 2026] [:error] [pid 3934:tid 3954] [client 158.158.53.142:63741] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wert.php"] [unique_id "adi2ooa41m-BS8mg82cZoAAAAM8"]
[Fri Apr 10 16:36:51.322721 2026] [:error] [pid 13189:tid 13210] [client 158.158.53.142:64227] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/11.php"] [unique_id "adi2o5AxiJKPums3eBAfwQAAAFI"]
[Fri Apr 10 16:36:52.126257 2026] [:error] [pid 13101:tid 13144] [client 158.158.53.142:63618] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/11.php"] [unique_id "adi2pN8Ldw85818pj2pqfAAAAIs"]
[Fri Apr 10 16:36:52.683314 2026] [:error] [pid 3934:tid 3960] [client 158.158.53.142:65437] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/11.php"] [unique_id "adi2pIa41m-BS8mg82cZsgAAANU"]
[Fri Apr 10 16:36:59.401297 2026] [:error] [pid 13100:tid 13128] [client 158.158.53.142:64160] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "adi2q1zg-ZkZ0InWIP1cMAAAARc"]
[Fri Apr 10 16:37:00.000028 2026] [:error] [pid 13189:tid 13200] [client 158.158.53.142:64798] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "adi2q5AxiJKPums3eBAf6wAAAEg"]
[Fri Apr 10 16:37:00.531818 2026] [:error] [pid 3934:tid 3944] [client 158.158.53.142:64895] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "adi2rIa41m-BS8mg82cZ3QAAAMU"]
[Fri Apr 10 16:37:01.431834 2026] [:error] [pid 3934:tid 3962] [client 158.158.53.142:65473] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "adi2rYa41m-BS8mg82cZ4wAAANc"]
[Fri Apr 10 16:37:02.022749 2026] [:error] [pid 3934:tid 3941] [client 158.158.53.142:63637] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "adi2roa41m-BS8mg82cZ6AAAAMI"]
[Fri Apr 10 16:37:02.525387 2026] [:error] [pid 13189:tid 13194] [client 158.158.53.142:65415] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "adi2rpAxiJKPums3eBAf8QAAAEI"]
[Fri Apr 10 16:37:03.223463 2026] [:error] [pid 3934:tid 3951] [client 158.158.53.142:63693] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "adi2r4a41m-BS8mg82cZ7gAAAMw"]
[Fri Apr 10 16:37:03.758214 2026] [:error] [pid 3934:tid 3956] [client 158.158.53.142:64143] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "adi2r4a41m-BS8mg82cZ9QAAANE"]
[Fri Apr 10 16:37:04.594603 2026] [:error] [pid 3934:tid 3953] [client 158.158.53.142:65460] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/3.php"] [unique_id "adi2sIa41m-BS8mg82cZ_wAAAM4"]
[Fri Apr 10 16:37:05.572914 2026] [:error] [pid 3934:tid 3963] [client 158.158.53.142:65527] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/3.php"] [unique_id "adi2sYa41m-BS8mg82caCAAAANg"]
[Fri Apr 10 16:37:07.157476 2026] [:error] [pid 3934:tid 3947] [client 158.158.53.142:64857] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/3.php"] [unique_id "adi2s4a41m-BS8mg82caDgAAAMg"]
[Fri Apr 10 16:37:08.370005 2026] [:error] [pid 13100:tid 13109] [client 158.158.53.142:64185] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/3.php"] [unique_id "adi2tFzg-ZkZ0InWIP1cPwAAAQQ"]
[Fri Apr 10 16:37:09.846853 2026] [:error] [pid 13189:tid 13204] [client 158.158.53.142:65434] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/4.php"] [unique_id "adi2tZAxiJKPums3eBAgAQAAAEw"]
[Fri Apr 10 16:37:12.613922 2026] [:error] [pid 3934:tid 3944] [client 158.158.53.142:65506] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/4.php"] [unique_id "adi2uIa41m-BS8mg82caGwAAAMU"]
[Fri Apr 10 16:37:14.770912 2026] [:error] [pid 13101:tid 13135] [client 158.158.53.142:64178] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/4.php"] [unique_id "adi2ut8Ldw85818pj2pqqgAAAII"]
[Fri Apr 10 16:37:17.575555 2026] [:error] [pid 13100:tid 13110] [client 158.158.53.142:65508] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/4.php"] [unique_id "adi2vVzg-ZkZ0InWIP1cVgAAAQU"]
[Fri Apr 10 16:37:19.009668 2026] [:error] [pid 3934:tid 3944] [client 158.158.53.142:63690] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/5.php"] [unique_id "adi2v4a41m-BS8mg82caJwAAAMU"]
[Fri Apr 10 16:37:19.790749 2026] [:error] [pid 13102:tid 13176] [client 158.158.53.142:63633] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/5.php"] [unique_id "adi2v_9xLvjW2guI55Ya3AAAABA"]
[Fri Apr 10 16:37:20.752571 2026] [:error] [pid 13189:tid 13202] [client 158.158.53.142:63719] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/5.php"] [unique_id "adi2wJAxiJKPums3eBAgHwAAAEo"]
[Fri Apr 10 16:37:21.381661 2026] [:error] [pid 13102:tid 13170] [client 158.158.53.142:64794] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/5.php"] [unique_id "adi2wf9xLvjW2guI55Ya3wAAAAo"]
[Fri Apr 10 16:37:22.095684 2026] [:error] [pid 13102:tid 13181] [client 158.158.53.142:63687] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/6.php"] [unique_id "adi2wv9xLvjW2guI55Ya4wAAABU"]
[Fri Apr 10 16:37:22.734425 2026] [:error] [pid 13102:tid 13173] [client 158.158.53.142:63688] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/6.php"] [unique_id "adi2wv9xLvjW2guI55Ya6AAAAA0"]
[Fri Apr 10 16:37:23.336654 2026] [:error] [pid 13100:tid 13121] [client 158.158.53.142:65456] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/6.php"] [unique_id "adi2w1zg-ZkZ0InWIP1cYwAAARA"]
[Fri Apr 10 16:37:23.904705 2026] [:error] [pid 13189:tid 13210] [client 158.158.53.142:63686] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/6.php"] [unique_id "adi2w5AxiJKPums3eBAgIwAAAFI"]
[Fri Apr 10 16:37:24.476855 2026] [:error] [pid 13100:tid 13122] [client 158.158.53.142:64140] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/9.php"] [unique_id "adi2xFzg-ZkZ0InWIP1cZwAAARE"]
[Fri Apr 10 16:37:25.080691 2026] [:error] [pid 13189:tid 13209] [client 158.158.53.142:63680] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/9.php"] [unique_id "adi2xZAxiJKPums3eBAgJQAAAFE"]
[Fri Apr 10 16:37:25.567758 2026] [:error] [pid 3934:tid 3959] [client 158.158.53.142:63708] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/9.php"] [unique_id "adi2xYa41m-BS8mg82caMwAAANQ"]
[Fri Apr 10 16:37:26.135389 2026] [:error] [pid 13189:tid 13207] [client 158.158.53.142:65436] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/9.php"] [unique_id "adi2xpAxiJKPums3eBAgKQAAAE8"]
[Fri Apr 10 16:37:26.723034 2026] [:error] [pid 3934:tid 3955] [client 158.158.53.142:64864] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/10.php"] [unique_id "adi2xoa41m-BS8mg82caOgAAANA"]
[Fri Apr 10 16:37:27.266851 2026] [:error] [pid 13100:tid 13118] [client 158.158.53.142:65505] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/10.php"] [unique_id "adi2x1zg-ZkZ0InWIP1cbQAAAQ0"]
[Fri Apr 10 16:37:27.780072 2026] [:error] [pid 13102:tid 13162] [client 158.158.53.142:63621] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/10.php"] [unique_id "adi2x_9xLvjW2guI55Ya8AAAAAI"]
[Fri Apr 10 16:37:28.299517 2026] [:error] [pid 3934:tid 3946] [client 158.158.53.142:63040] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/10.php"] [unique_id "adi2yIa41m-BS8mg82caPgAAAMc"]
[Fri Apr 10 16:37:28.849624 2026] [:error] [pid 3934:tid 3958] [client 158.158.53.142:64197] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.mopj.php"] [unique_id "adi2yIa41m-BS8mg82caQAAAANM"]
[Fri Apr 10 16:37:29.445207 2026] [:error] [pid 13100:tid 13109] [client 158.158.53.142:65504] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.mopj.php"] [unique_id "adi2yVzg-ZkZ0InWIP1cdwAAAQQ"]
[Fri Apr 10 16:37:30.024824 2026] [:error] [pid 13102:tid 13160] [client 158.158.53.142:65418] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.mopj.php"] [unique_id "adi2yv9xLvjW2guI55Ya8gAAAAA"]
[Fri Apr 10 16:37:30.514547 2026] [:error] [pid 13189:tid 13207] [client 158.158.53.142:65490] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.mopj.php"] [unique_id "adi2ypAxiJKPums3eBAgNAAAAE8"]
[Fri Apr 10 16:37:30.995189 2026] [:error] [pid 3934:tid 3963] [client 158.158.53.142:64190] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/100.php"] [unique_id "adi2yoa41m-BS8mg82caSwAAANg"]
[Fri Apr 10 16:37:31.547481 2026] [:error] [pid 13100:tid 13128] [client 158.158.53.142:65517] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/100.php"] [unique_id "adi2y1zg-ZkZ0InWIP1chAAAARc"]
[Fri Apr 10 16:37:32.039971 2026] [:error] [pid 13189:tid 13214] [client 158.158.53.142:64851] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/100.php"] [unique_id "adi2zJAxiJKPums3eBAgNQAAAFY"]
[Fri Apr 10 16:37:32.552792 2026] [:error] [pid 3934:tid 3949] [client 158.158.53.142:63713] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/100.php"] [unique_id "adi2zIa41m-BS8mg82caTwAAAMo"]
[Fri Apr 10 16:37:33.034970 2026] [:error] [pid 3934:tid 3951] [client 158.158.53.142:63723] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nano.php"] [unique_id "adi2zYa41m-BS8mg82caUwAAAMw"]
[Fri Apr 10 16:37:33.566910 2026] [:error] [pid 13101:tid 13134] [client 158.158.53.142:65438] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nano.php"] [unique_id "adi2zd8Ldw85818pj2pq1AAAAIE"]
[Fri Apr 10 16:37:34.208837 2026] [:error] [pid 13102:tid 13184] [client 158.158.53.142:65518] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nano.php"] [unique_id "adi2zv9xLvjW2guI55Ya-AAAABg"]
[Fri Apr 10 16:37:34.786681 2026] [:error] [pid 13101:tid 13136] [client 158.158.53.142:62977] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nano.php"] [unique_id "adi2zt8Ldw85818pj2pq2gAAAIM"]
[Fri Apr 10 16:37:35.529154 2026] [:error] [pid 3934:tid 3952] [client 158.158.53.142:65408] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f35_S.php"] [unique_id "adi2z4a41m-BS8mg82caWwAAAM0"]
[Fri Apr 10 16:37:36.046308 2026] [:error] [pid 3934:tid 3955] [client 158.158.53.142:63718] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f35_S.php"] [unique_id "adi20Ia41m-BS8mg82caYQAAANA"]
[Fri Apr 10 16:37:36.560305 2026] [:error] [pid 13102:tid 13181] [client 158.158.53.142:64211] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f35_S.php"] [unique_id "adi20P9xLvjW2guI55Ya-wAAABU"]
[Fri Apr 10 16:37:37.221325 2026] [:error] [pid 3934:tid 3952] [client 158.158.53.142:64795] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f35_S.php"] [unique_id "adi20Ya41m-BS8mg82caZgAAAM0"]
[Fri Apr 10 16:37:37.732165 2026] [:error] [pid 3934:tid 3944] [client 158.158.53.142:64195] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2026w.php"] [unique_id "adi20Ya41m-BS8mg82caaQAAAMU"]
[Fri Apr 10 16:37:38.222353 2026] [:error] [pid 3934:tid 3948] [client 158.158.53.142:64837] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2026w.php"] [unique_id "adi20oa41m-BS8mg82caawAAAMk"]
[Fri Apr 10 16:37:38.759187 2026] [:error] [pid 13102:tid 13162] [client 158.158.53.142:64812] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2026w.php"] [unique_id "adi20v9xLvjW2guI55YbAAAAAAI"]
[Fri Apr 10 16:37:39.351504 2026] [:error] [pid 13189:tid 13212] [client 158.158.53.142:65414] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2026w.php"] [unique_id "adi205AxiJKPums3eBAgPQAAAFQ"]
[Fri Apr 10 16:37:39.866685 2026] [:error] [pid 13101:tid 13143] [client 158.158.53.142:64161] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/111.php"] [unique_id "adi2098Ldw85818pj2pq4gAAAIo"]
[Fri Apr 10 16:37:40.351936 2026] [:error] [pid 3934:tid 3945] [client 158.158.53.142:63051] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/111.php"] [unique_id "adi21Ia41m-BS8mg82caeQAAAMY"]
[Fri Apr 10 16:37:40.919950 2026] [:error] [pid 13189:tid 13204] [client 158.158.53.142:63002] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/111.php"] [unique_id "adi21JAxiJKPums3eBAgPwAAAEw"]
[Fri Apr 10 16:37:41.523720 2026] [:error] [pid 3934:tid 3963] [client 158.158.53.142:64790] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/111.php"] [unique_id "adi21Ya41m-BS8mg82cafwAAANg"]
[Fri Apr 10 16:37:42.103862 2026] [:error] [pid 13189:tid 13216] [client 158.158.53.142:62173] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp1.php"] [unique_id "adi21pAxiJKPums3eBAgQgAAAFg"]
[Fri Apr 10 16:37:42.597921 2026] [:error] [pid 13100:tid 13110] [client 158.158.53.142:63660] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp1.php"] [unique_id "adi21lzg-ZkZ0InWIP1crgAAAQU"]
[Fri Apr 10 16:37:43.137483 2026] [:error] [pid 13102:tid 13162] [client 158.158.53.142:63650] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp1.php"] [unique_id "adi21_9xLvjW2guI55YbCAAAAAI"]
[Fri Apr 10 16:37:43.673024 2026] [:error] [pid 3934:tid 3956] [client 158.158.53.142:65489] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp1.php"] [unique_id "adi214a41m-BS8mg82cahQAAANE"]
[Fri Apr 10 16:37:44.218390 2026] [:error] [pid 3934:tid 3950] [client 158.158.53.142:64772] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "adi22Ia41m-BS8mg82caiwAAAMs"]
[Fri Apr 10 16:37:44.748278 2026] [:error] [pid 13189:tid 13212] [client 158.158.53.142:64842] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "adi22JAxiJKPums3eBAgSwAAAFQ"]
[Fri Apr 10 16:37:45.371187 2026] [:error] [pid 13189:tid 13195] [client 158.158.53.142:64173] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "adi22ZAxiJKPums3eBAgUgAAAEM"]
[Fri Apr 10 16:37:45.873170 2026] [:error] [pid 3934:tid 3944] [client 158.158.53.142:65464] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "adi22Ya41m-BS8mg82cajwAAAMU"]
[Fri Apr 10 16:37:46.432053 2026] [:error] [pid 3934:tid 3950] [client 158.158.53.142:62589] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "adi22oa41m-BS8mg82cakwAAAMs"]
[Fri Apr 10 16:37:46.921176 2026] [:error] [pid 13189:tid 13212] [client 158.158.53.142:64853] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "adi22pAxiJKPums3eBAgWQAAAFQ"]
[Fri Apr 10 16:37:47.454913 2026] [:error] [pid 13189:tid 13207] [client 158.158.53.142:65442] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "adi225AxiJKPums3eBAgXAAAAE8"]
[Fri Apr 10 16:37:47.942807 2026] [:error] [pid 3934:tid 3942] [client 158.158.53.142:62152] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "adi224a41m-BS8mg82camAAAAMM"]
[Fri Apr 10 16:37:48.535804 2026] [:error] [pid 13101:tid 13142] [client 158.158.53.142:64146] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwpg.php"] [unique_id "adi23N8Ldw85818pj2pq5gAAAIk"]
[Fri Apr 10 16:37:49.070804 2026] [:error] [pid 3934:tid 3957] [client 158.158.53.142:64872] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwpg.php"] [unique_id "adi23Ya41m-BS8mg82canQAAANI"]
[Fri Apr 10 16:37:49.583684 2026] [:error] [pid 13189:tid 13211] [client 158.158.53.142:63677] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwpg.php"] [unique_id "adi23ZAxiJKPums3eBAgYgAAAFM"]
[Fri Apr 10 16:37:50.158890 2026] [:error] [pid 13100:tid 13110] [client 158.158.53.142:62476] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwpg.php"] [unique_id "adi23lzg-ZkZ0InWIP1cwQAAAQU"]
[Fri Apr 10 16:37:50.634222 2026] [:error] [pid 13102:tid 13181] [client 158.158.53.142:64785] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "adi23v9xLvjW2guI55YbGAAAABU"]
[Fri Apr 10 16:37:51.125145 2026] [:error] [pid 13189:tid 13203] [client 158.158.53.142:64251] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "adi235AxiJKPums3eBAgZAAAAEs"]
[Fri Apr 10 16:37:51.665106 2026] [:error] [pid 3934:tid 3960] [client 158.158.53.142:62992] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "adi234a41m-BS8mg82caogAAANU"]
[Fri Apr 10 16:37:52.158631 2026] [:error] [pid 3934:tid 3953] [client 158.158.53.142:65432] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "adi24Ia41m-BS8mg82capgAAAM4"]
[Fri Apr 10 16:37:52.762337 2026] [:error] [pid 3934:tid 3944] [client 158.158.53.142:64189] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "adi24Ia41m-BS8mg82capwAAAMU"]
[Fri Apr 10 16:37:53.244180 2026] [:error] [pid 13100:tid 13123] [client 158.158.53.142:65467] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "adi24Vzg-ZkZ0InWIP1cxQAAARI"]
[Fri Apr 10 16:37:53.721791 2026] [:error] [pid 3934:tid 3949] [client 158.158.53.142:63689] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "adi24Ya41m-BS8mg82casAAAAMo"]
[Fri Apr 10 16:37:54.241411 2026] [:error] [pid 13102:tid 13163] [client 158.158.53.142:65471] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "adi24v9xLvjW2guI55YbGwAAAAM"]
[Fri Apr 10 16:37:54.817737 2026] [:error] [pid 3934:tid 3957] [client 158.158.53.142:64786] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "adi24oa41m-BS8mg82catgAAANI"]
[Fri Apr 10 16:37:55.410333 2026] [:error] [pid 13102:tid 13165] [client 158.158.53.142:63654] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "adi24_9xLvjW2guI55YbJQAAAAU"]
[Fri Apr 10 16:37:55.888663 2026] [:error] [pid 13102:tid 13184] [client 158.158.53.142:63047] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "adi24_9xLvjW2guI55YbKAAAABg"]
[Fri Apr 10 16:37:56.432842 2026] [:error] [pid 3934:tid 3959] [client 158.158.53.142:64893] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "adi25Ia41m-BS8mg82cavwAAANQ"]
[Fri Apr 10 16:37:56.984436 2026] [:error] [pid 3934:tid 3941] [client 158.158.53.142:62994] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "adi25Ia41m-BS8mg82cawgAAAMI"]
[Fri Apr 10 16:37:57.511379 2026] [:error] [pid 13189:tid 13200] [client 158.158.53.142:64779] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "adi25ZAxiJKPums3eBAgaAAAAEg"]
[Fri Apr 10 16:37:58.031149 2026] [:error] [pid 3934:tid 3952] [client 158.158.53.142:64252] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "adi25oa41m-BS8mg82cayAAAAM0"]
[Fri Apr 10 16:37:58.537757 2026] [:error] [pid 3934:tid 3955] [client 158.158.53.142:63720] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "adi25oa41m-BS8mg82caywAAANA"]
[Fri Apr 10 16:38:04.900552 2026] [:error] [pid 13189:tid 13201] [client 158.158.53.142:65435] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fvvff.php"] [unique_id "adi27JAxiJKPums3eBAghwAAAEk"]
[Fri Apr 10 16:38:05.434142 2026] [:error] [pid 13102:tid 13182] [client 158.158.53.142:64156] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fvvff.php"] [unique_id "adi27f9xLvjW2guI55YbPQAAABY"]
[Fri Apr 10 16:38:05.990080 2026] [:error] [pid 13102:tid 13176] [client 158.158.53.142:64182] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fvvff.php"] [unique_id "adi27f9xLvjW2guI55YbQgAAABA"]
[Fri Apr 10 16:38:06.837047 2026] [:error] [pid 13102:tid 13178] [client 158.158.53.142:64166] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fvvff.php"] [unique_id "adi27v9xLvjW2guI55YbRgAAABI"]
[Fri Apr 10 16:38:07.569882 2026] [:error] [pid 13102:tid 13182] [client 158.158.53.142:64163] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "adi27_9xLvjW2guI55YbSQAAABY"]
[Fri Apr 10 16:38:08.082662 2026] [:error] [pid 13189:tid 13212] [client 158.158.53.142:64885] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "adi28JAxiJKPums3eBAgiwAAAFQ"]
[Fri Apr 10 16:38:08.613098 2026] [:error] [pid 13189:tid 13200] [client 158.158.53.142:64135] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "adi28JAxiJKPums3eBAgjwAAAEg"]
[Fri Apr 10 16:38:09.093067 2026] [:error] [pid 3934:tid 3950] [client 158.158.53.142:64200] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "adi28Ya41m-BS8mg82ca6AAAAMs"]
[Fri Apr 10 16:38:09.606762 2026] [:error] [pid 13102:tid 13178] [client 158.158.53.142:63721] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "adi28f9xLvjW2guI55YbUAAAABI"]
[Fri Apr 10 16:38:10.254450 2026] [:error] [pid 3934:tid 3960] [client 158.158.53.142:64822] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "adi28oa41m-BS8mg82ca7gAAANU"]
[Fri Apr 10 16:38:10.809426 2026] [:error] [pid 3934:tid 3955] [client 158.158.53.142:65526] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "adi28oa41m-BS8mg82ca9AAAANA"]
[Fri Apr 10 16:38:11.361593 2026] [:error] [pid 3934:tid 3949] [client 158.158.53.142:63699] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "adi284a41m-BS8mg82ca_QAAAMo"]
[Fri Apr 10 16:38:11.852270 2026] [:error] [pid 13102:tid 13161] [client 158.158.53.142:65443] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "adi28_9xLvjW2guI55YbVAAAAAE"]
[Fri Apr 10 16:38:12.404298 2026] [:error] [pid 13102:tid 13172] [client 158.158.53.142:65487] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "adi29P9xLvjW2guI55YbVQAAAAw"]
[Fri Apr 10 16:38:12.996200 2026] [:error] [pid 13101:tid 13147] [client 158.158.53.142:63736] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "adi29N8Ldw85818pj2prBwAAAI4"]
[Fri Apr 10 16:38:13.560082 2026] [:error] [pid 13102:tid 13178] [client 158.158.53.142:64859] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "adi29f9xLvjW2guI55YbXAAAABI"]
[Fri Apr 10 16:38:14.372486 2026] [:error] [pid 13189:tid 13205] [client 158.158.53.142:62567] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "adi29pAxiJKPums3eBAgpAAAAE0"]
[Fri Apr 10 16:38:14.988581 2026] [:error] [pid 13189:tid 13200] [client 158.158.53.142:64881] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "adi29pAxiJKPums3eBAgpQAAAEg"]
[Fri Apr 10 16:38:15.525423 2026] [:error] [pid 13102:tid 13160] [client 158.158.53.142:65520] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "adi29_9xLvjW2guI55YbYwAAAAA"]
[Fri Apr 10 16:38:16.123830 2026] [:error] [pid 13102:tid 13176] [client 158.158.53.142:65457] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "adi2-P9xLvjW2guI55YbZQAAABA"]
[Fri Apr 10 16:38:16.663444 2026] [:error] [pid 13101:tid 13140] [client 158.158.53.142:64177] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "adi2-N8Ldw85818pj2prEAAAAIc"]
[Fri Apr 10 16:38:17.139845 2026] [:error] [pid 13100:tid 13119] [client 158.158.53.142:63659] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "adi2-Vzg-ZkZ0InWIP1c4gAAAQ4"]
[Fri Apr 10 16:38:17.710287 2026] [:error] [pid 3934:tid 3949] [client 158.158.53.142:64773] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "adi2-Ya41m-BS8mg82cbEQAAAMo"]
[Fri Apr 10 16:38:18.200453 2026] [:error] [pid 13189:tid 13201] [client 158.158.53.142:63060] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "adi2-pAxiJKPums3eBAgrwAAAEk"]
[Fri Apr 10 16:38:18.704541 2026] [:error] [pid 3934:tid 3944] [client 158.158.53.142:63619] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "adi2-oa41m-BS8mg82cbFAAAAMU"]
[Fri Apr 10 16:38:19.208880 2026] [:error] [pid 3934:tid 3954] [client 158.158.53.142:62564] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "adi2-4a41m-BS8mg82cbGAAAAM8"]
[Fri Apr 10 16:38:19.960059 2026] [:error] [pid 13100:tid 13113] [client 158.158.53.142:63624] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "adi2-1zg-ZkZ0InWIP1c7wAAAQg"]
[Fri Apr 10 16:38:20.511770 2026] [:error] [pid 13100:tid 13116] [client 158.158.53.142:64774] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "adi2_Fzg-ZkZ0InWIP1c8gAAAQs"]
[Fri Apr 10 16:38:21.115814 2026] [:error] [pid 3934:tid 3956] [client 158.158.53.142:64866] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "adi2_Ya41m-BS8mg82cbIAAAANE"]
[Fri Apr 10 16:38:21.793726 2026] [:error] [pid 3934:tid 3959] [client 158.158.53.142:63100] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "adi2_Ya41m-BS8mg82cbIQAAANQ"]
[Fri Apr 10 16:38:22.320431 2026] [:error] [pid 3934:tid 3944] [client 158.158.53.142:64208] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "adi2_oa41m-BS8mg82cbJAAAAMU"]
[Fri Apr 10 16:38:22.837585 2026] [:error] [pid 13100:tid 13109] [client 158.158.53.142:63617] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "adi2_lzg-ZkZ0InWIP1c9wAAAQQ"]
[Fri Apr 10 16:38:23.449727 2026] [:error] [pid 3934:tid 3955] [client 158.158.53.142:64183] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "adi2_4a41m-BS8mg82cbKgAAANA"]
[Fri Apr 10 16:38:23.956823 2026] [:error] [pid 3934:tid 3948] [client 158.158.53.142:62127] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "adi2_4a41m-BS8mg82cbLQAAAMk"]
[Fri Apr 10 16:38:24.454622 2026] [:error] [pid 13102:tid 13165] [client 158.158.53.142:64838] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "adi3AP9xLvjW2guI55YbiwAAAAU"]
[Fri Apr 10 16:38:24.982298 2026] [:error] [pid 3934:tid 3956] [client 158.158.53.142:65465] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "adi3AIa41m-BS8mg82cbMgAAANE"]
[Fri Apr 10 16:38:25.509043 2026] [:error] [pid 3934:tid 3963] [client 158.158.53.142:63004] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "adi3AYa41m-BS8mg82cbOAAAANg"]
[Fri Apr 10 16:38:25.993290 2026] [:error] [pid 13100:tid 13113] [client 158.158.53.142:63635] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "adi3AVzg-ZkZ0InWIP1c-wAAAQg"]
[Fri Apr 10 16:38:26.513511 2026] [:error] [pid 3934:tid 3943] [client 158.158.53.142:65454] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "adi3Aoa41m-BS8mg82cbQAAAAMQ"]
[Fri Apr 10 16:38:27.022436 2026] [:error] [pid 3934:tid 3954] [client 158.158.53.142:62528] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "adi3A4a41m-BS8mg82cbRAAAAM8"]
[Fri Apr 10 16:38:27.500171 2026] [:error] [pid 13101:tid 13134] [client 158.158.53.142:64132] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/style.php"] [unique_id "adi3A98Ldw85818pj2prFwAAAIE"]
[Fri Apr 10 16:38:28.015545 2026] [:error] [pid 13101:tid 13146] [client 158.158.53.142:63725] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/style.php"] [unique_id "adi3BN8Ldw85818pj2prGQAAAI0"]
[Fri Apr 10 16:38:28.532577 2026] [:error] [pid 13102:tid 13173] [client 158.158.53.142:63009] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/style.php"] [unique_id "adi3BP9xLvjW2guI55YbjAAAAA0"]
[Fri Apr 10 16:38:29.071879 2026] [:error] [pid 3934:tid 3962] [client 158.158.53.142:63649] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/style.php"] [unique_id "adi3BYa41m-BS8mg82cbUwAAANc"]
[Fri Apr 10 16:38:29.604720 2026] [:error] [pid 13189:tid 13201] [client 158.158.53.142:64232] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "adi3BZAxiJKPums3eBAgxAAAAEk"]
[Fri Apr 10 16:38:30.179217 2026] [:error] [pid 13101:tid 13153] [client 158.158.53.142:65452] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "adi3Bt8Ldw85818pj2prHAAAAJQ"]
[Fri Apr 10 16:38:30.690817 2026] [:error] [pid 13189:tid 13197] [client 158.158.53.142:65441] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "adi3BpAxiJKPums3eBAgygAAAEU"]
[Fri Apr 10 16:38:31.225629 2026] [:error] [pid 3934:tid 3957] [client 158.158.53.142:63065] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "adi3B4a41m-BS8mg82cbWwAAANI"]
[Fri Apr 10 16:38:31.785491 2026] [:error] [pid 13101:tid 13156] [client 158.158.53.142:64867] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/av.php"] [unique_id "adi3B98Ldw85818pj2prIgAAAJc"]
[Fri Apr 10 16:38:32.284593 2026] [:error] [pid 13101:tid 13155] [client 158.158.53.142:64243] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/av.php"] [unique_id "adi3CN8Ldw85818pj2prJQAAAJY"]
[Fri Apr 10 16:38:32.847437 2026] [:error] [pid 13189:tid 13214] [client 158.158.53.142:63058] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/av.php"] [unique_id "adi3CJAxiJKPums3eBAg0QAAAFY"]
[Fri Apr 10 16:38:33.522170 2026] [:error] [pid 13101:tid 13153] [client 158.158.53.142:63684] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/av.php"] [unique_id "adi3Cd8Ldw85818pj2prKQAAAJQ"]
[Fri Apr 10 16:38:34.154405 2026] [:error] [pid 13101:tid 13156] [client 158.158.53.142:64159] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adi3Ct8Ldw85818pj2prLQAAAJc"]
[Fri Apr 10 16:38:34.710142 2026] [:error] [pid 13102:tid 13180] [client 158.158.53.142:65416] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adi3Cv9xLvjW2guI55YbkAAAABQ"]
[Fri Apr 10 16:38:35.233987 2026] [:error] [pid 13189:tid 13196] [client 158.158.53.142:63673] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adi3C5AxiJKPums3eBAg3QAAAEQ"]
[Fri Apr 10 16:38:35.737362 2026] [:error] [pid 13189:tid 13193] [client 158.158.53.142:64882] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adi3C5AxiJKPums3eBAg4gAAAEE"]
[Fri Apr 10 16:38:36.295989 2026] [:error] [pid 3934:tid 3954] [client 158.158.53.142:64158] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bless4.php"] [unique_id "adi3DIa41m-BS8mg82cbZgAAAM8"]
[Fri Apr 10 16:38:36.922643 2026] [:error] [pid 3934:tid 3940] [client 158.158.53.142:64179] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bless4.php"] [unique_id "adi3DIa41m-BS8mg82cbawAAAME"]
[Fri Apr 10 16:38:37.519232 2026] [:error] [pid 13100:tid 13129] [client 158.158.53.142:64253] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bless4.php"] [unique_id "adi3DVzg-ZkZ0InWIP1dBgAAARg"]
[Fri Apr 10 16:38:38.030543 2026] [:error] [pid 13189:tid 13207] [client 158.158.53.142:63059] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bless4.php"] [unique_id "adi3DpAxiJKPums3eBAg5wAAAE8"]
[Fri Apr 10 16:38:38.537555 2026] [:error] [pid 13102:tid 13166] [client 158.158.53.142:62102] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "adi3Dv9xLvjW2guI55YbmQAAAAY"]
[Fri Apr 10 16:38:39.069643 2026] [:error] [pid 13101:tid 13152] [client 158.158.53.142:65512] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "adi3D98Ldw85818pj2prMAAAAJM"]
[Fri Apr 10 16:38:39.815277 2026] [:error] [pid 13102:tid 13165] [client 158.158.53.142:65485] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "adi3D_9xLvjW2guI55YbnQAAAAU"]
[Fri Apr 10 16:38:40.517376 2026] [:error] [pid 3934:tid 3961] [client 158.158.53.142:63738] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "adi3EIa41m-BS8mg82cbeQAAANY"]
[Fri Apr 10 16:38:41.175663 2026] [:error] [pid 3934:tid 3960] [client 158.158.53.142:64882] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "adi3EYa41m-BS8mg82cbfQAAANU"]
[Fri Apr 10 16:38:41.760624 2026] [:error] [pid 13189:tid 13203] [client 158.158.53.142:64770] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "adi3EZAxiJKPums3eBAg7QAAAEs"]
[Fri Apr 10 16:38:42.241076 2026] [:error] [pid 13100:tid 13118] [client 158.158.53.142:65502] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "adi3Elzg-ZkZ0InWIP1dEAAAAQ0"]
[Fri Apr 10 16:38:42.911764 2026] [:error] [pid 3934:tid 3959] [client 158.158.53.142:65501] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "adi3Eoa41m-BS8mg82cbgQAAANQ"]
[Fri Apr 10 16:38:43.820218 2026] [:error] [pid 13189:tid 13204] [client 158.158.53.142:63031] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plss3.php"] [unique_id "adi3E5AxiJKPums3eBAg8wAAAEw"]
[Fri Apr 10 16:38:44.457292 2026] [:error] [pid 13189:tid 13206] [client 158.158.53.142:60720] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plss3.php"] [unique_id "adi3FJAxiJKPums3eBAg-AAAAE4"]
[Fri Apr 10 16:38:45.041386 2026] [:error] [pid 13102:tid 13171] [client 158.158.53.142:64138] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plss3.php"] [unique_id "adi3Ff9xLvjW2guI55YbqwAAAAs"]
[Fri Apr 10 16:38:45.782292 2026] [:error] [pid 13102:tid 13162] [client 158.158.53.142:64820] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plss3.php"] [unique_id "adi3Ff9xLvjW2guI55YbsAAAAAI"]
[Fri Apr 10 16:38:46.371509 2026] [:error] [pid 13102:tid 13173] [client 158.158.53.142:63703] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "adi3Fv9xLvjW2guI55YbtAAAAA0"]
[Fri Apr 10 16:38:46.964853 2026] [:error] [pid 13102:tid 13165] [client 158.158.53.142:65448] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "adi3Fv9xLvjW2guI55YbuAAAAAU"]
[Fri Apr 10 16:38:47.546503 2026] [:error] [pid 13102:tid 13180] [client 158.158.53.142:63029] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "adi3F_9xLvjW2guI55YbuQAAABQ"]
[Fri Apr 10 16:38:48.290730 2026] [:error] [pid 13101:tid 13147] [client 158.158.53.142:64162] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "adi3GN8Ldw85818pj2prNwAAAI4"]
[Fri Apr 10 16:38:49.307462 2026] [:error] [pid 13189:tid 13202] [client 158.158.53.142:64136] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "adi3GZAxiJKPums3eBAg_QAAAEo"]
[Fri Apr 10 16:38:49.926017 2026] [:error] [pid 13102:tid 13165] [client 158.158.53.142:65479] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "adi3Gf9xLvjW2guI55YbwQAAAAU"]
[Fri Apr 10 16:38:50.622305 2026] [:error] [pid 13102:tid 13161] [client 158.158.53.142:63705] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "adi3Gv9xLvjW2guI55YbwwAAAAE"]
[Fri Apr 10 16:38:51.343189 2026] [:error] [pid 13189:tid 13203] [client 158.158.53.142:63084] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "adi3G5AxiJKPums3eBAhBgAAAEs"]
[Fri Apr 10 16:38:51.895265 2026] [:error] [pid 3934:tid 3940] [client 158.158.53.142:63642] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adi3G4a41m-BS8mg82cbkQAAAME"]
[Fri Apr 10 16:38:53.114759 2026] [:error] [pid 13101:tid 13138] [client 158.158.53.142:64226] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adi3Hd8Ldw85818pj2prPQAAAIU"]
[Fri Apr 10 16:38:53.979606 2026] [:error] [pid 13101:tid 13146] [client 158.158.53.142:64174] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adi3Hd8Ldw85818pj2prPgAAAI0"]
[Fri Apr 10 16:38:54.560860 2026] [:error] [pid 13101:tid 13145] [client 158.158.53.142:63726] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adi3Ht8Ldw85818pj2prQQAAAIw"]
[Fri Apr 10 16:38:55.455371 2026] [:error] [pid 13100:tid 13117] [client 158.158.53.142:63712] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adi3H1zg-ZkZ0InWIP1dJgAAAQw"]
[Fri Apr 10 16:38:56.214435 2026] [:error] [pid 13189:tid 13216] [client 158.158.53.142:65430] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adi3IJAxiJKPums3eBAhFwAAAFg"]
[Fri Apr 10 16:38:57.036145 2026] [:error] [pid 13102:tid 13170] [client 158.158.53.142:65499] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adi3If9xLvjW2guI55Yb4QAAAAo"]
[Fri Apr 10 16:39:01.034046 2026] [:error] [pid 13102:tid 13166] [client 158.158.53.142:63685] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adi3Jf9xLvjW2guI55Yb8gAAAAY"]
[Fri Apr 10 16:39:11.029846 2026] [:error] [pid 13102:tid 13167] [client 158.158.53.142:65425] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adi3L_9xLvjW2guI55YcDQAAAAc"]
[Fri Apr 10 16:39:11.566183 2026] [:error] [pid 3934:tid 3963] [client 158.158.53.142:64152] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adi3L4a41m-BS8mg82cbxwAAANg"]
[Fri Apr 10 16:39:12.191471 2026] [:error] [pid 13189:tid 13200] [client 158.158.53.142:64862] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adi3MJAxiJKPums3eBAhTgAAAEg"]
[Fri Apr 10 16:39:12.847405 2026] [:error] [pid 3934:tid 3960] [client 158.158.53.142:63697] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adi3MIa41m-BS8mg82cbzQAAANU"]
[Fri Apr 10 16:39:13.651362 2026] [:error] [pid 13101:tid 13150] [client 158.158.53.142:63717] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "adi3Md8Ldw85818pj2prUAAAAJE"]
[Fri Apr 10 16:39:14.543454 2026] [:error] [pid 3934:tid 3941] [client 158.158.53.142:63722] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "adi3Moa41m-BS8mg82cb1QAAAMI"]
[Fri Apr 10 16:39:15.501902 2026] [:error] [pid 13189:tid 13194] [client 158.158.53.142:65469] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "adi3M5AxiJKPums3eBAhWgAAAEI"]
[Fri Apr 10 16:39:16.285656 2026] [:error] [pid 13100:tid 13127] [client 158.158.53.142:62562] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "adi3NFzg-ZkZ0InWIP1dMgAAARY"]
[Fri Apr 10 16:39:17.048740 2026] [:error] [pid 13102:tid 13179] [client 158.158.53.142:63043] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "adi3Nf9xLvjW2guI55YcHgAAABM"]
[Fri Apr 10 16:39:17.725851 2026] [:error] [pid 13102:tid 13169] [client 158.158.53.142:64780] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "adi3Nf9xLvjW2guI55YcJQAAAAk"]
[Fri Apr 10 16:39:18.625529 2026] [:error] [pid 13189:tid 13199] [client 158.158.53.142:64187] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "adi3NpAxiJKPums3eBAhbgAAAEc"]
[Fri Apr 10 16:39:19.417363 2026] [:error] [pid 13101:tid 13133] [client 158.158.53.142:65515] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "adi3N98Ldw85818pj2prXQAAAIA"]
[Fri Apr 10 16:39:20.565066 2026] [:error] [pid 13189:tid 13201] [client 158.158.53.142:63733] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/we.php"] [unique_id "adi3OJAxiJKPums3eBAhegAAAEk"]
[Fri Apr 10 16:39:21.221610 2026] [:error] [pid 13101:tid 13144] [client 158.158.53.142:63700] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/we.php"] [unique_id "adi3Od8Ldw85818pj2prXwAAAIs"]
[Fri Apr 10 16:39:21.956643 2026] [:error] [pid 13102:tid 13164] [client 158.158.53.142:64892] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/we.php"] [unique_id "adi3Of9xLvjW2guI55YcNwAAAAQ"]
[Fri Apr 10 16:39:22.727049 2026] [:error] [pid 13189:tid 13203] [client 158.158.53.142:65466] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/we.php"] [unique_id "adi3OpAxiJKPums3eBAhhQAAAEs"]
[Fri Apr 10 16:39:23.465558 2026] [:error] [pid 13101:tid 13138] [client 158.158.53.142:64198] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "adi3O98Ldw85818pj2prYQAAAIU"]
[Fri Apr 10 16:39:24.508464 2026] [:error] [pid 13100:tid 13122] [client 158.158.53.142:63730] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "adi3PFzg-ZkZ0InWIP1dOQAAARE"]
[Fri Apr 10 16:39:25.147004 2026] [:error] [pid 3934:tid 3955] [client 158.158.53.142:65470] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "adi3PYa41m-BS8mg82cb_wAAANA"]
[Fri Apr 10 16:39:25.709568 2026] [:error] [pid 13101:tid 13133] [client 158.158.53.142:64856] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "adi3Pd8Ldw85818pj2prZAAAAIA"]
[Fri Apr 10 16:39:26.405121 2026] [:error] [pid 3934:tid 3958] [client 158.158.53.142:61327] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "adi3Poa41m-BS8mg82ccBAAAANM"]
[Fri Apr 10 16:39:27.240554 2026] [:error] [pid 13189:tid 13213] [client 158.158.53.142:64806] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "adi3P5AxiJKPums3eBAhoAAAAFU"]
[Fri Apr 10 16:39:27.902503 2026] [:error] [pid 13189:tid 13202] [client 158.158.53.142:64176] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "adi3P5AxiJKPums3eBAhpAAAAEo"]
[Fri Apr 10 16:39:28.423729 2026] [:error] [pid 13189:tid 13196] [client 158.158.53.142:64247] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "adi3QJAxiJKPums3eBAhpwAAAEQ"]
[Fri Apr 10 16:39:29.176098 2026] [:error] [pid 3934:tid 3946] [client 158.158.53.142:64244] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-michan.php"] [unique_id "adi3QYa41m-BS8mg82ccFAAAAMc"]
[Fri Apr 10 16:39:30.232767 2026] [:error] [pid 3934:tid 3948] [client 158.158.53.142:64796] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-michan.php"] [unique_id "adi3Qoa41m-BS8mg82ccHgAAAMk"]
[Fri Apr 10 16:39:31.324512 2026] [:error] [pid 13101:tid 13147] [client 158.158.53.142:65511] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-michan.php"] [unique_id "adi3Q98Ldw85818pj2prZwAAAI4"]
[Fri Apr 10 16:39:32.836779 2026] [:error] [pid 13189:tid 13214] [client 158.158.53.142:63672] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-michan.php"] [unique_id "adi3RJAxiJKPums3eBAhtwAAAFY"]
[Fri Apr 10 16:39:34.501562 2026] [:error] [pid 13189:tid 13206] [client 158.158.53.142:62998] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "adi3RpAxiJKPums3eBAhvAAAAE4"]
[Fri Apr 10 16:39:45.299671 2026] [:error] [pid 3934:tid 3942] [client 158.158.53.142:64191] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "adi3UYa41m-BS8mg82ccWgAAAMM"]
[Fri Apr 10 16:39:46.537303 2026] [:error] [pid 13100:tid 13116] [client 158.158.53.142:62467] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "adi3Ulzg-ZkZ0InWIP1dTwAAAQs"]
[Fri Apr 10 16:39:47.349426 2026] [:error] [pid 13102:tid 13162] [client 158.158.53.142:62089] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "adi3U_9xLvjW2guI55YcXwAAAAI"]
[Fri Apr 10 16:39:47.954110 2026] [:error] [pid 13102:tid 13182] [client 158.158.53.142:62500] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adi3U_9xLvjW2guI55YcZAAAABY"]
[Fri Apr 10 16:39:48.767342 2026] [:error] [pid 3934:tid 3947] [client 158.158.53.142:65450] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adi3VIa41m-BS8mg82ccZQAAAMg"]
[Fri Apr 10 16:39:49.444780 2026] [:error] [pid 3934:tid 3943] [client 158.158.53.142:63691] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adi3VYa41m-BS8mg82ccaQAAAMQ"]
[Fri Apr 10 16:39:50.099073 2026] [:error] [pid 13102:tid 13174] [client 158.158.53.142:63027] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adi3Vv9xLvjW2guI55YcZwAAAA4"]
[Fri Apr 10 16:39:50.692662 2026] [:error] [pid 13189:tid 13202] [client 158.158.53.142:63664] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "adi3VpAxiJKPums3eBAh4wAAAEo"]
[Fri Apr 10 16:39:51.484003 2026] [:error] [pid 13189:tid 13192] [client 158.158.53.142:63682] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "adi3V5AxiJKPums3eBAh6AAAAEA"]
[Fri Apr 10 16:39:52.340953 2026] [:error] [pid 13100:tid 13128] [client 158.158.53.142:64797] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "adi3WFzg-ZkZ0InWIP1dVwAAARc"]
[Fri Apr 10 16:39:52.925305 2026] [:error] [pid 13102:tid 13168] [client 158.158.53.142:64889] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "adi3WP9xLvjW2guI55YcbQAAAAg"]
[Fri Apr 10 16:39:53.969969 2026] [:error] [pid 3934:tid 3960] [client 158.158.53.142:65481] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adi3WYa41m-BS8mg82ccdwAAANU"]
[Fri Apr 10 16:39:55.042447 2026] [:error] [pid 3934:tid 3961] [client 158.158.53.142:63081] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adi3W4a41m-BS8mg82ccfQAAANY"]
[Fri Apr 10 16:39:56.611551 2026] [:error] [pid 13189:tid 13216] [client 158.158.53.142:61405] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adi3XJAxiJKPums3eBAh9AAAAFg"]
[Fri Apr 10 16:39:58.075216 2026] [:error] [pid 13189:tid 13208] [client 158.158.53.142:64148] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "adi3XpAxiJKPums3eBAh_gAAAFA"]
[Fri Apr 10 16:39:59.131329 2026] [:error] [pid 13189:tid 13209] [client 158.158.53.142:65424] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "adi3X5AxiJKPums3eBAiAwAAAFE"]
[Fri Apr 10 16:39:59.971746 2026] [:error] [pid 13189:tid 13212] [client 158.158.53.142:63022] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "adi3X5AxiJKPums3eBAiBgAAAFQ"]
[Fri Apr 10 16:40:00.923977 2026] [:error] [pid 13189:tid 13205] [client 158.158.53.142:63070] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "adi3YJAxiJKPums3eBAiDgAAAE0"]
[Fri Apr 10 16:40:02.589900 2026] [:error] [pid 13189:tid 13214] [client 158.158.53.142:63710] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "adi3YpAxiJKPums3eBAiGQAAAFY"]
[Fri Apr 10 16:40:05.632004 2026] [:error] [pid 13101:tid 13140] [client 158.158.53.142:65410] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "adi3Zd8Ldw85818pj2proAAAAIc"]
[Fri Apr 10 16:40:07.235903 2026] [:error] [pid 3934:tid 3952] [client 158.158.53.142:63088] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "adi3Z4a41m-BS8mg82cc5gAAAM0"]
[Fri Apr 10 16:40:08.091582 2026] [:error] [pid 13189:tid 13198] [client 158.158.53.142:62475] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "adi3aJAxiJKPums3eBAiLAAAAEY"]
[Fri Apr 10 16:40:08.951995 2026] [:error] [pid 13189:tid 13205] [client 158.158.53.142:63080] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "adi3aJAxiJKPums3eBAiMAAAAE0"]
[Fri Apr 10 16:40:16.448714 2026] [:error] [pid 3934:tid 3940] [client 158.158.53.142:64216] [client 158.158.53.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "adi3cIa41m-BS8mg82cdRAAAAME"]
[Fri Apr 10 16:40:18.116510 2026] [:error] [pid 13189:tid 13194] [client 158.158.53.142:64201] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "adi3cpAxiJKPums3eBAiSwAAAEI"]
[Fri Apr 10 16:40:19.505010 2026] [:error] [pid 13102:tid 13180] [client 158.158.53.142:64145] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "adi3c_9xLvjW2guI55YczwAAABQ"]
[Fri Apr 10 16:40:21.376176 2026] [:error] [pid 13100:tid 13121] [client 158.158.53.142:63656] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "adi3dVzg-ZkZ0InWIP1dggAAARA"]
[Fri Apr 10 16:40:23.975489 2026] [:error] [pid 13189:tid 13215] [client 158.158.53.142:62533] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "adi3d5AxiJKPums3eBAiWwAAAFc"]
[Fri Apr 10 16:40:28.452225 2026] [:error] [pid 13189:tid 13196] [client 158.158.53.142:63742] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adi3fJAxiJKPums3eBAiZgAAAEQ"]
[Fri Apr 10 16:40:33.883415 2026] [:error] [pid 13189:tid 13202] [client 158.158.53.142:62559] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adi3gZAxiJKPums3eBAibAAAAEo"]
[Fri Apr 10 16:40:36.430151 2026] [:error] [pid 13100:tid 13129] [client 158.158.53.142:64821] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adi3hFzg-ZkZ0InWIP1drAAAARg"]
[Fri Apr 10 16:40:37.579927 2026] [:error] [pid 13100:tid 13128] [client 158.158.53.142:62151] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adi3hVzg-ZkZ0InWIP1drwAAARc"]
[Fri Apr 10 16:40:38.440051 2026] [:error] [pid 13189:tid 13195] [client 158.158.53.142:64792] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adi3hpAxiJKPums3eBAidwAAAEM"]
[Fri Apr 10 16:40:39.547650 2026] [:error] [pid 13102:tid 13162] [client 158.158.53.142:63698] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adi3h_9xLvjW2guI55Yc-AAAAAI"]
[Fri Apr 10 16:40:40.240757 2026] [:error] [pid 3934:tid 3947] [client 158.158.53.142:65447] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adi3iIa41m-BS8mg82cd1QAAAMg"]
[Fri Apr 10 16:40:41.698453 2026] [:error] [pid 13189:tid 13214] [client 158.158.53.142:63653] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adi3iZAxiJKPums3eBAihQAAAFY"]
[Fri Apr 10 16:40:43.018144 2026] [:error] [pid 13189:tid 13207] [client 158.158.53.142:63034] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/prv8.php"] [unique_id "adi3i5AxiJKPums3eBAijwAAAE8"]
[Fri Apr 10 16:40:44.550510 2026] [:error] [pid 3934:tid 3949] [client 158.158.53.142:65495] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/prv8.php"] [unique_id "adi3jIa41m-BS8mg82cd6gAAAMo"]
[Fri Apr 10 16:40:45.647799 2026] [:error] [pid 13189:tid 13195] [client 158.158.53.142:63694] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/prv8.php"] [unique_id "adi3jZAxiJKPums3eBAioQAAAEM"]
[Fri Apr 10 16:40:47.081475 2026] [:error] [pid 13102:tid 13163] [client 158.158.53.142:65500] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/prv8.php"] [unique_id "adi3j_9xLvjW2guI55YdGAAAAAM"]
[Fri Apr 10 16:40:49.037292 2026] [:error] [pid 13100:tid 13126] [client 158.158.53.142:64172] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/k.php"] [unique_id "adi3kVzg-ZkZ0InWIP1d1gAAARU"]
[Fri Apr 10 16:40:49.883409 2026] [:error] [pid 13102:tid 13168] [client 158.158.53.142:62999] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/k.php"] [unique_id "adi3kf9xLvjW2guI55YdIAAAAAg"]
[Fri Apr 10 16:40:50.657468 2026] [:error] [pid 13102:tid 13163] [client 158.158.53.142:62579] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/k.php"] [unique_id "adi3kv9xLvjW2guI55YdIgAAAAM"]
[Fri Apr 10 16:40:51.561107 2026] [:error] [pid 13101:tid 13136] [client 158.158.53.142:64165] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/k.php"] [unique_id "adi3k98Ldw85818pj2psBAAAAIM"]
[Fri Apr 10 16:40:52.115411 2026] [:error] [pid 13101:tid 13157] [client 158.158.53.142:63670] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "adi3lN8Ldw85818pj2psBgAAAJg"]
[Fri Apr 10 16:40:52.616452 2026] [:error] [pid 13101:tid 13143] [client 158.158.53.142:63658] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "adi3lN8Ldw85818pj2psBwAAAIo"]
[Fri Apr 10 16:40:53.450561 2026] [:error] [pid 13101:tid 13148] [client 158.158.53.142:64819] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "adi3ld8Ldw85818pj2psCgAAAI8"]
[Fri Apr 10 16:40:54.083967 2026] [:error] [pid 13101:tid 13144] [client 158.158.53.142:65508] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "adi3lt8Ldw85818pj2psDQAAAIs"]
[Fri Apr 10 16:40:54.813170 2026] [:error] [pid 13102:tid 13176] [client 158.158.53.142:61392] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "adi3lv9xLvjW2guI55YdKQAAABA"]
[Fri Apr 10 16:40:55.793665 2026] [:error] [pid 13189:tid 13208] [client 158.158.53.142:64192] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "adi3l5AxiJKPums3eBAivQAAAFA"]
[Fri Apr 10 16:40:56.415567 2026] [:error] [pid 13189:tid 13209] [client 158.158.53.142:64203] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "adi3mJAxiJKPums3eBAiwAAAAFE"]
[Fri Apr 10 16:40:57.026551 2026] [:error] [pid 13100:tid 13126] [client 158.158.53.142:64233] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "adi3mVzg-ZkZ0InWIP1d4QAAARU"]
[Fri Apr 10 16:40:57.723065 2026] [:error] [pid 13189:tid 13199] [client 158.158.53.142:63683] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/in.php"] [unique_id "adi3mZAxiJKPums3eBAixwAAAEc"]
[Fri Apr 10 16:40:58.358538 2026] [:error] [pid 13101:tid 13154] [client 158.158.53.142:63668] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/in.php"] [unique_id "adi3mt8Ldw85818pj2psGgAAAJU"]
[Fri Apr 10 16:40:59.314488 2026] [:error] [pid 13101:tid 13147] [client 158.158.53.142:63709] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/in.php"] [unique_id "adi3m98Ldw85818pj2psIQAAAI4"]
[Fri Apr 10 16:41:00.379593 2026] [:error] [pid 13100:tid 13129] [client 158.158.53.142:64206] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/in.php"] [unique_id "adi3nFzg-ZkZ0InWIP1d5QAAARg"]
[Fri Apr 10 16:41:01.158800 2026] [:error] [pid 13102:tid 13169] [client 158.158.53.142:64153] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "adi3nf9xLvjW2guI55YdMAAAAAk"]
[Fri Apr 10 16:41:01.800301 2026] [:error] [pid 13102:tid 13177] [client 158.158.53.142:61413] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "adi3nf9xLvjW2guI55YdNAAAABE"]
[Fri Apr 10 16:41:02.950548 2026] [:error] [pid 13189:tid 13193] [client 158.158.53.142:64231] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "adi3npAxiJKPums3eBAi2AAAAEE"]
[Fri Apr 10 16:41:03.826435 2026] [:error] [pid 13189:tid 13200] [client 158.158.53.142:65516] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "adi3n5AxiJKPums3eBAi4gAAAEg"]
[Fri Apr 10 16:41:28.594447 2026] [:error] [pid 3934:tid 3957] [client 158.158.53.142:65423] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ew.php"] [unique_id "adi3uIa41m-BS8mg82ceagAAANI"]
[Fri Apr 10 16:41:29.325653 2026] [:error] [pid 13101:tid 13138] [client 158.158.53.142:64801] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ew.php"] [unique_id "adi3ud8Ldw85818pj2psWgAAAIU"]
[Fri Apr 10 16:41:30.874797 2026] [:error] [pid 13189:tid 13206] [client 158.158.53.142:64171] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ew.php"] [unique_id "adi3upAxiJKPums3eBAjLwAAAE4"]
[Fri Apr 10 16:41:33.268479 2026] [:error] [pid 13102:tid 13184] [client 158.158.53.142:64826] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ew.php"] [unique_id "adi3vf9xLvjW2guI55YdaAAAABg"]
[Fri Apr 10 16:41:34.511646 2026] [:error] [pid 13102:tid 13170] [client 158.158.53.142:64239] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "adi3vv9xLvjW2guI55YdbAAAAAo"]
[Fri Apr 10 16:41:36.246915 2026] [:error] [pid 13102:tid 13163] [client 158.158.53.142:64170] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "adi3wP9xLvjW2guI55YdcAAAAAM"]
[Fri Apr 10 16:41:38.871606 2026] [:error] [pid 3934:tid 3945] [client 158.158.53.142:63692] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "adi3woa41m-BS8mg82ceqAAAAMY"]
[Fri Apr 10 16:41:40.078599 2026] [:error] [pid 3934:tid 3945] [client 158.158.53.142:64207] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "adi3xIa41m-BS8mg82ceuAAAAMY"]
[Fri Apr 10 16:41:41.968704 2026] [:error] [pid 3934:tid 3951] [client 158.158.53.142:64219] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class19.php"] [unique_id "adi3xYa41m-BS8mg82cezQAAAMw"]
[Fri Apr 10 16:41:42.997205 2026] [:error] [pid 3934:tid 3954] [client 158.158.53.142:65449] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class19.php"] [unique_id "adi3xoa41m-BS8mg82ce1AAAAM8"]
[Fri Apr 10 16:41:44.728553 2026] [:error] [pid 13102:tid 13170] [client 158.158.53.142:64245] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class19.php"] [unique_id "adi3yP9xLvjW2guI55YdowAAAAo"]
[Fri Apr 10 16:41:45.678563 2026] [:error] [pid 13100:tid 13106] [client 158.158.53.142:64891] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class19.php"] [unique_id "adi3yVzg-ZkZ0InWIP1eFwAAAQE"]
[Fri Apr 10 16:41:47.135817 2026] [:error] [pid 13102:tid 13171] [client 158.158.53.142:65522] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class20.php"] [unique_id "adi3y_9xLvjW2guI55YdqAAAAAs"]
[Fri Apr 10 16:41:48.080328 2026] [:error] [pid 3934:tid 3942] [client 158.158.53.142:61406] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class20.php"] [unique_id "adi3zIa41m-BS8mg82ce4QAAAMM"]
[Fri Apr 10 16:41:48.609315 2026] [:error] [pid 3934:tid 3955] [client 158.158.53.142:65419] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class20.php"] [unique_id "adi3zIa41m-BS8mg82ce4wAAANA"]
[Fri Apr 10 16:41:49.263408 2026] [:error] [pid 13189:tid 13204] [client 158.158.53.142:64184] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class20.php"] [unique_id "adi3zZAxiJKPums3eBAjcgAAAEw"]
[Fri Apr 10 16:41:49.890478 2026] [:error] [pid 13100:tid 13121] [client 158.158.53.142:64879] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file18.php"] [unique_id "adi3zVzg-ZkZ0InWIP1eIAAAARA"]
[Fri Apr 10 16:41:50.492822 2026] [:error] [pid 13189:tid 13195] [client 158.158.53.142:62145] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file18.php"] [unique_id "adi3zpAxiJKPums3eBAjewAAAEM"]
[Fri Apr 10 16:41:51.440438 2026] [:error] [pid 13189:tid 13205] [client 158.158.53.142:64886] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file18.php"] [unique_id "adi3z5AxiJKPums3eBAjfgAAAE0"]
[Fri Apr 10 16:41:52.160886 2026] [:error] [pid 13189:tid 13201] [client 158.158.53.142:61428] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file18.php"] [unique_id "adi30JAxiJKPums3eBAjggAAAEk"]
[Fri Apr 10 16:41:53.213152 2026] [:error] [pid 13100:tid 13105] [client 158.158.53.142:65429] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vee.php"] [unique_id "adi30Vzg-ZkZ0InWIP1eIgAAAQA"]
[Fri Apr 10 16:41:54.943584 2026] [:error] [pid 3934:tid 3945] [client 158.158.53.142:62535] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vee.php"] [unique_id "adi30oa41m-BS8mg82ce7AAAAMY"]
[Fri Apr 10 16:41:58.370960 2026] [:error] [pid 3934:tid 3947] [client 158.158.53.142:63707] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vee.php"] [unique_id "adi31oa41m-BS8mg82ce_AAAAMg"]
[Fri Apr 10 16:42:01.374493 2026] [:error] [pid 13101:tid 13146] [client 158.158.53.142:65474] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vee.php"] [unique_id "adi32d8Ldw85818pj2pseAAAAI0"]
[Fri Apr 10 16:42:03.585718 2026] [:error] [pid 3934:tid 3960] [client 158.158.53.142:63732] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cabs.php"] [unique_id "adi324a41m-BS8mg82cfDgAAANU"]
[Fri Apr 10 16:42:04.328173 2026] [:error] [pid 3934:tid 3962] [client 158.158.53.142:65524] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cabs.php"] [unique_id "adi33Ia41m-BS8mg82cfEgAAANc"]
[Fri Apr 10 16:42:05.889198 2026] [:error] [pid 3934:tid 3950] [client 158.158.53.142:62516] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cabs.php"] [unique_id "adi33Ya41m-BS8mg82cfHwAAAMs"]
[Fri Apr 10 16:42:07.067004 2026] [:error] [pid 13102:tid 13183] [client 158.158.53.142:64250] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cabs.php"] [unique_id "adi33_9xLvjW2guI55YdzAAAABc"]
[Fri Apr 10 16:42:07.805557 2026] [:error] [pid 3934:tid 3950] [client 158.158.53.142:64783] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "adi334a41m-BS8mg82cfJwAAAMs"]
[Fri Apr 10 16:42:08.557101 2026] [:error] [pid 13102:tid 13168] [client 158.158.53.142:64776] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "adi34P9xLvjW2guI55Yd0gAAAAg"]
[Fri Apr 10 16:42:09.232617 2026] [:error] [pid 3934:tid 3953] [client 158.158.53.142:63016] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "adi34Ya41m-BS8mg82cfLwAAAM4"]
[Fri Apr 10 16:42:09.832762 2026] [:error] [pid 13100:tid 13116] [client 158.158.53.142:63068] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "adi34Vzg-ZkZ0InWIP1eLwAAAQs"]
[Fri Apr 10 16:42:10.466695 2026] [:error] [pid 13101:tid 13144] [client 158.158.53.142:62498] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x1da.php"] [unique_id "adi34t8Ldw85818pj2psiAAAAIs"]
[Fri Apr 10 16:42:11.207261 2026] [:error] [pid 13101:tid 13151] [client 158.158.53.142:63061] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x1da.php"] [unique_id "adi3498Ldw85818pj2psiwAAAJI"]
[Fri Apr 10 16:42:11.870123 2026] [:error] [pid 13102:tid 13177] [client 158.158.53.142:64877] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x1da.php"] [unique_id "adi34_9xLvjW2guI55Yd2AAAABE"]
[Fri Apr 10 16:42:12.958401 2026] [:error] [pid 13102:tid 13175] [client 158.158.53.142:65413] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x1da.php"] [unique_id "adi35P9xLvjW2guI55Yd3gAAAA8"]
[Fri Apr 10 16:42:13.875697 2026] [:error] [pid 13100:tid 13121] [client 158.158.53.142:64248] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "adi35Vzg-ZkZ0InWIP1eOQAAARA"]
[Fri Apr 10 16:42:14.654290 2026] [:error] [pid 13189:tid 13214] [client 158.158.53.142:64215] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "adi35pAxiJKPums3eBAjlwAAAFY"]
[Fri Apr 10 16:42:15.551503 2026] [:error] [pid 13189:tid 13198] [client 158.158.53.142:63720] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "adi355AxiJKPums3eBAjmgAAAEY"]
[Fri Apr 10 16:42:16.248499 2026] [:error] [pid 13189:tid 13209] [client 158.158.53.142:64166] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "adi36JAxiJKPums3eBAjngAAAFE"]
[Fri Apr 10 16:42:17.138723 2026] [:error] [pid 3934:tid 3942] [client 158.158.53.142:62585] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "adi36Ya41m-BS8mg82cfNgAAAMM"]
[Fri Apr 10 16:42:17.965631 2026] [:error] [pid 3934:tid 3940] [client 158.158.53.142:64850] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "adi36Ya41m-BS8mg82cfQQAAAME"]
[Fri Apr 10 16:42:18.883025 2026] [:error] [pid 3934:tid 3958] [client 158.158.53.142:65488] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "adi36oa41m-BS8mg82cfSgAAANM"]
[Fri Apr 10 16:42:19.993417 2026] [:error] [pid 13101:tid 13139] [client 158.158.53.142:63674] [client 158.158.53.142] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "adi3698Ldw85818pj2pskwAAAIY"]
[Fri Apr 10 23:13:21.866788 2026] [:error] [pid 13189:tid 13204] [client 20.91.189.245:40869] [client 20.91.189.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Ipv6.php"] [unique_id "adkTkZAxiJKPums3eBD8jAAAAEw"]
[Fri Apr 10 23:13:25.222765 2026] [:error] [pid 62769:tid 62791] [client 20.91.189.245:37915] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file-gertdxz.php"] [unique_id "adkTlcWsSnfLoB8ifjCtHQAAAlQ"]
[Fri Apr 10 23:13:25.797630 2026] [:error] [pid 62651:tid 62655] [client 20.91.189.245:44514] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file-gertdxz.php"] [unique_id "adkTlTbAH0le57SIaqw1ygAAAcI"]
[Fri Apr 10 23:13:26.376871 2026] [:error] [pid 62769:tid 62782] [client 20.91.189.245:36057] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file-gertdxz.php"] [unique_id "adkTlsWsSnfLoB8ifjCtIwAAAks"]
[Fri Apr 10 23:13:26.917872 2026] [:error] [pid 13101:tid 13133] [client 20.91.189.245:43437] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file-gertdxz.php"] [unique_id "adkTlt8Ldw85818pj2oUhgAAAIA"]
[Fri Apr 10 23:13:27.512768 2026] [:error] [pid 13101:tid 13156] [client 20.91.189.245:21934] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "adkTl98Ldw85818pj2oUigAAAJc"]
[Fri Apr 10 23:13:28.203250 2026] [:error] [pid 62769:tid 62794] [client 20.91.189.245:59401] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "adkTmMWsSnfLoB8ifjCtNgAAAlc"]
[Fri Apr 10 23:13:28.809833 2026] [:error] [pid 62769:tid 62786] [client 20.91.189.245:50585] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "adkTmMWsSnfLoB8ifjCtQAAAAk8"]
[Fri Apr 10 23:13:29.563557 2026] [:error] [pid 62651:tid 62666] [client 20.91.189.245:58346] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "adkTmTbAH0le57SIaqw1zgAAAc0"]
[Fri Apr 10 23:13:30.115277 2026] [:error] [pid 62819:tid 62837] [client 20.91.189.245:25595] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "adkTmvU20EyPf7Nlsld_pwAAAo8"]
[Fri Apr 10 23:13:30.740326 2026] [:error] [pid 62819:tid 62834] [client 20.91.189.245:3497] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "adkTmvU20EyPf7Nlsld_qAAAAow"]
[Fri Apr 10 23:13:31.325983 2026] [:error] [pid 13189:tid 13201] [client 20.91.189.245:25087] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "adkTm5AxiJKPums3eBD8mAAAAEk"]
[Fri Apr 10 23:13:31.944782 2026] [:error] [pid 63062:tid 63088] [client 20.91.189.245:3490] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "adkTm52HtsmV85NqkMcLAwAAA5g"]
[Fri Apr 10 23:13:32.567619 2026] [:error] [pid 13101:tid 13133] [client 20.91.189.245:35009] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/config.php"] [unique_id "adkTnN8Ldw85818pj2oUkAAAAIA"]
[Fri Apr 10 23:13:33.195141 2026] [:error] [pid 62710:tid 62715] [client 20.91.189.245:3384] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/config.php"] [unique_id "adkTneME7qrf5xEWWJs-GwAAAgI"]
[Fri Apr 10 23:13:33.919745 2026] [:error] [pid 62769:tid 62791] [client 20.91.189.245:3764] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/config.php"] [unique_id "adkTncWsSnfLoB8ifjCtVQAAAlQ"]
[Fri Apr 10 23:13:34.486723 2026] [:error] [pid 62769:tid 62793] [client 20.91.189.245:30433] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/config.php"] [unique_id "adkTnsWsSnfLoB8ifjCtWQAAAlY"]
[Fri Apr 10 23:13:35.064410 2026] [:error] [pid 62819:tid 62835] [client 20.91.189.245:42956] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "adkTn_U20EyPf7Nlsld_sQAAAo0"]
[Fri Apr 10 23:13:35.657647 2026] [:error] [pid 13101:tid 13138] [client 20.91.189.245:3381] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "adkTn98Ldw85818pj2oUmAAAAIU"]
[Fri Apr 10 23:13:36.196358 2026] [:error] [pid 62769:tid 62772] [client 20.91.189.245:25839] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "adkToMWsSnfLoB8ifjCtZAAAAkE"]
[Fri Apr 10 23:13:36.953289 2026] [:error] [pid 62769:tid 62781] [client 20.91.189.245:40149] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "adkToMWsSnfLoB8ifjCtaQAAAko"]
[Fri Apr 10 23:13:37.565356 2026] [:error] [pid 62769:tid 62784] [client 20.91.189.245:40132] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/9.php"] [unique_id "adkTocWsSnfLoB8ifjCtcAAAAk0"]
[Fri Apr 10 23:13:38.290814 2026] [:error] [pid 13189:tid 13196] [client 20.91.189.245:62357] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/9.php"] [unique_id "adkTopAxiJKPums3eBD8nwAAAEQ"]
[Fri Apr 10 23:13:38.862442 2026] [:error] [pid 63134:tid 63147] [client 20.91.189.245:48489] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/9.php"] [unique_id "adkTotFALqPDwWi6eJLCvQAAA8o"]
[Fri Apr 10 23:13:39.556937 2026] [:error] [pid 62819:tid 62845] [client 20.91.189.245:50639] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/9.php"] [unique_id "adkTo_U20EyPf7Nlsld_tgAAApc"]
[Fri Apr 10 23:13:40.210471 2026] [:error] [pid 13101:tid 13138] [client 20.91.189.245:61951] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "adkTpN8Ldw85818pj2oUpgAAAIU"]
[Fri Apr 10 23:13:41.024094 2026] [:error] [pid 62710:tid 62726] [client 20.91.189.245:65306] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "adkTpeME7qrf5xEWWJs-IAAAAg0"]
[Fri Apr 10 23:13:41.793315 2026] [:error] [pid 63134:tid 63146] [client 20.91.189.245:34518] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "adkTpdFALqPDwWi6eJLCwQAAA8k"]
[Fri Apr 10 23:13:42.521480 2026] [:error] [pid 62884:tid 62902] [client 20.91.189.245:47090] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "adkTpuUCK1xrhnnmpo2W4gAAAss"]
[Fri Apr 10 23:13:43.194954 2026] [:error] [pid 13100:tid 13106] [client 20.91.189.245:47098] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "adkTp1zg-ZkZ0InWIP3PbgAAAQE"]
[Fri Apr 10 23:13:44.377655 2026] [:error] [pid 13100:tid 13122] [client 20.91.189.245:54613] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "adkTqFzg-ZkZ0InWIP3PcAAAARE"]
[Fri Apr 10 23:13:45.100209 2026] [:error] [pid 13189:tid 13209] [client 20.91.189.245:47053] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "adkTqZAxiJKPums3eBD8rAAAAFE"]
[Fri Apr 10 23:13:45.690670 2026] [:error] [pid 13101:tid 13137] [client 20.91.189.245:37032] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "adkTqd8Ldw85818pj2oUuQAAAIQ"]
[Fri Apr 10 23:13:46.292679 2026] [:error] [pid 13101:tid 13148] [client 20.91.189.245:50653] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wswer1.php"] [unique_id "adkTqt8Ldw85818pj2oUvgAAAI8"]
[Fri Apr 10 23:13:46.952979 2026] [:error] [pid 62819:tid 62834] [client 20.91.189.245:48491] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wswer1.php"] [unique_id "adkTqvU20EyPf7Nlsld_wQAAAow"]
[Fri Apr 10 23:13:47.642311 2026] [:error] [pid 63062:tid 63071] [client 20.91.189.245:58340] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wswer1.php"] [unique_id "adkTq52HtsmV85NqkMcLCQAAA4c"]
[Fri Apr 10 23:13:48.404532 2026] [:error] [pid 62884:tid 62908] [client 20.91.189.245:39014] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wswer1.php"] [unique_id "adkTrOUCK1xrhnnmpo2W5wAAAtE"]
[Fri Apr 10 23:13:49.014521 2026] [:error] [pid 62710:tid 62713] [client 20.91.189.245:47092] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "adkTreME7qrf5xEWWJs-LgAAAgA"]
[Fri Apr 10 23:13:49.701537 2026] [:error] [pid 62710:tid 62737] [client 20.91.189.245:26674] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "adkTreME7qrf5xEWWJs-MAAAAhg"]
[Fri Apr 10 23:13:50.287819 2026] [:error] [pid 62710:tid 62717] [client 20.91.189.245:47076] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "adkTruME7qrf5xEWWJs-OAAAAgQ"]
[Fri Apr 10 23:13:50.896848 2026] [:error] [pid 62769:tid 62783] [client 20.91.189.245:37534] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "adkTrsWsSnfLoB8ifjCtmwAAAkw"]
[Fri Apr 10 23:13:51.539032 2026] [:error] [pid 62884:tid 62906] [client 20.91.189.245:62380] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "adkTr-UCK1xrhnnmpo2W7AAAAs8"]
[Fri Apr 10 23:13:52.116925 2026] [:error] [pid 13189:tid 13205] [client 20.91.189.245:50685] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "adkTsJAxiJKPums3eBD8swAAAE0"]
[Fri Apr 10 23:13:52.779906 2026] [:error] [pid 13189:tid 13192] [client 20.91.189.245:45564] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "adkTsJAxiJKPums3eBD8tAAAAEA"]
[Fri Apr 10 23:13:53.538852 2026] [:error] [pid 62769:tid 62771] [client 20.91.189.245:45549] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "adkTscWsSnfLoB8ifjCtoAAAAkA"]
[Fri Apr 10 23:13:54.122779 2026] [:error] [pid 13189:tid 13195] [client 20.91.189.245:38993] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/img.php"] [unique_id "adkTspAxiJKPums3eBD8uwAAAEM"]
[Fri Apr 10 23:13:54.694277 2026] [:error] [pid 62769:tid 62784] [client 20.91.189.245:55675] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/img.php"] [unique_id "adkTssWsSnfLoB8ifjCtogAAAk0"]
[Fri Apr 10 23:13:55.263520 2026] [:error] [pid 62651:tid 62657] [client 20.91.189.245:58355] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/img.php"] [unique_id "adkTszbAH0le57SIaqw13AAAAcQ"]
[Fri Apr 10 23:13:55.807392 2026] [:error] [pid 63134:tid 63138] [client 20.91.189.245:3223] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/img.php"] [unique_id "adkTs9FALqPDwWi6eJLC4AAAA8E"]
[Fri Apr 10 23:13:56.426439 2026] [:error] [pid 63134:tid 63146] [client 20.91.189.245:26633] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/new3.php"] [unique_id "adkTtNFALqPDwWi6eJLC5gAAA8k"]
[Fri Apr 10 23:13:57.001891 2026] [:error] [pid 13101:tid 13135] [client 20.91.189.245:55138] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/new3.php"] [unique_id "adkTtd8Ldw85818pj2oU0gAAAII"]
[Fri Apr 10 23:13:57.609977 2026] [:error] [pid 13101:tid 13155] [client 20.91.189.245:55636] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/new3.php"] [unique_id "adkTtd8Ldw85818pj2oU2AAAAJY"]
[Fri Apr 10 23:13:58.141761 2026] [:error] [pid 62884:tid 62904] [client 20.91.189.245:3209] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/new3.php"] [unique_id "adkTtuUCK1xrhnnmpo2W8wAAAs0"]
[Fri Apr 10 23:13:58.711655 2026] [:error] [pid 13189:tid 13215] [client 20.91.189.245:37528] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-turn.php"] [unique_id "adkTtpAxiJKPums3eBD8xQAAAFc"]
[Fri Apr 10 23:13:59.242621 2026] [:error] [pid 62819:tid 62837] [client 20.91.189.245:55141] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-turn.php"] [unique_id "adkTt_U20EyPf7Nlsld_zgAAAo8"]
[Fri Apr 10 23:13:59.774790 2026] [:error] [pid 13100:tid 13105] [client 20.91.189.245:54642] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-turn.php"] [unique_id "adkTt1zg-ZkZ0InWIP3PfAAAAQA"]
[Fri Apr 10 23:14:00.316679 2026] [:error] [pid 13101:tid 13144] [client 20.91.189.245:45563] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-turn.php"] [unique_id "adkTuN8Ldw85818pj2oU5gAAAIs"]
[Fri Apr 10 23:14:00.874982 2026] [:error] [pid 13101:tid 13154] [client 20.91.189.245:55642] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "adkTuN8Ldw85818pj2oU7AAAAJU"]
[Fri Apr 10 23:14:01.395364 2026] [:error] [pid 62769:tid 62793] [client 20.91.189.245:37533] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "adkTucWsSnfLoB8ifjCtrwAAAlY"]
[Fri Apr 10 23:14:01.930219 2026] [:error] [pid 13189:tid 13216] [client 20.91.189.245:55152] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "adkTuZAxiJKPums3eBD8yAAAAFg"]
[Fri Apr 10 23:14:02.486532 2026] [:error] [pid 13101:tid 13142] [client 20.91.189.245:3261] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "adkTut8Ldw85818pj2oU-AAAAIk"]
[Fri Apr 10 23:14:03.037794 2026] [:error] [pid 62710:tid 62725] [client 20.91.189.245:37021] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/red.php"] [unique_id "adkTu-ME7qrf5xEWWJs-SQAAAgw"]
[Fri Apr 10 23:14:03.562170 2026] [:error] [pid 62884:tid 62893] [client 20.91.189.245:37538] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/red.php"] [unique_id "adkTu-UCK1xrhnnmpo2XBQAAAsI"]
[Fri Apr 10 23:14:04.103517 2026] [:error] [pid 62884:tid 62895] [client 20.91.189.245:58348] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/red.php"] [unique_id "adkTvOUCK1xrhnnmpo2XBwAAAsQ"]
[Fri Apr 10 23:14:04.641579 2026] [:error] [pid 13101:tid 13139] [client 20.91.189.245:34501] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/red.php"] [unique_id "adkTvN8Ldw85818pj2oVAAAAAIY"]
[Fri Apr 10 23:14:05.168531 2026] [:error] [pid 62769:tid 62793] [client 20.91.189.245:3210] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ss.php"] [unique_id "adkTvcWsSnfLoB8ifjCtwAAAAlY"]
[Fri Apr 10 23:14:05.704286 2026] [:error] [pid 13189:tid 13195] [client 20.91.189.245:62353] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ss.php"] [unique_id "adkTvZAxiJKPums3eBD80QAAAEM"]
[Fri Apr 10 23:14:06.226468 2026] [:error] [pid 13189:tid 13194] [client 20.91.189.245:50627] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ss.php"] [unique_id "adkTvpAxiJKPums3eBD81AAAAEI"]
[Fri Apr 10 23:14:06.763040 2026] [:error] [pid 13100:tid 13111] [client 20.91.189.245:36993] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ss.php"] [unique_id "adkTvlzg-ZkZ0InWIP3PgAAAAQY"]
[Fri Apr 10 23:14:07.317588 2026] [:error] [pid 62769:tid 62775] [client 20.91.189.245:58343] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "adkTv8WsSnfLoB8ifjCtxgAAAkQ"]
[Fri Apr 10 23:14:07.848507 2026] [:error] [pid 62769:tid 62780] [client 20.91.189.245:37562] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "adkTv8WsSnfLoB8ifjCt0gAAAkk"]
[Fri Apr 10 23:14:08.373671 2026] [:error] [pid 62769:tid 62795] [client 20.91.189.245:26682] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "adkTwMWsSnfLoB8ifjCt1wAAAlg"]
[Fri Apr 10 23:14:08.904281 2026] [:error] [pid 62769:tid 62774] [client 20.91.189.245:3490] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "adkTwMWsSnfLoB8ifjCt4AAAAkM"]
[Fri Apr 10 23:14:09.434186 2026] [:error] [pid 62710:tid 62722] [client 20.91.189.245:50672] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gecko.php"] [unique_id "adkTweME7qrf5xEWWJs-WQAAAgk"]
[Fri Apr 10 23:14:09.991318 2026] [:error] [pid 62819:tid 62824] [client 20.91.189.245:37003] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gecko.php"] [unique_id "adkTwfU20EyPf7Nlsld_1AAAAoI"]
[Fri Apr 10 23:14:10.569771 2026] [:error] [pid 13189:tid 13215] [client 20.91.189.245:45545] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gecko.php"] [unique_id "adkTwpAxiJKPums3eBD82QAAAFc"]
[Fri Apr 10 23:14:11.092129 2026] [:error] [pid 13189:tid 13209] [client 20.91.189.245:39033] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gecko.php"] [unique_id "adkTw5AxiJKPums3eBD83wAAAFE"]
[Fri Apr 10 23:14:11.627964 2026] [:error] [pid 62769:tid 62783] [client 20.91.189.245:26659] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wziar1.php"] [unique_id "adkTw8WsSnfLoB8ifjCt6wAAAkw"]
[Fri Apr 10 23:14:12.158473 2026] [:error] [pid 13189:tid 13213] [client 20.91.189.245:39023] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wziar1.php"] [unique_id "adkTxJAxiJKPums3eBD84wAAAFU"]
[Fri Apr 10 23:14:12.707984 2026] [:error] [pid 13189:tid 13198] [client 20.91.189.245:45556] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wziar1.php"] [unique_id "adkTxJAxiJKPums3eBD85gAAAEY"]
[Fri Apr 10 23:14:13.245956 2026] [:error] [pid 62769:tid 62787] [client 20.91.189.245:58363] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wziar1.php"] [unique_id "adkTxcWsSnfLoB8ifjCt9QAAAlA"]
[Fri Apr 10 23:14:13.812382 2026] [:error] [pid 62769:tid 62771] [client 20.91.189.245:3249] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xs.php"] [unique_id "adkTxcWsSnfLoB8ifjCt-wAAAkA"]
[Fri Apr 10 23:14:14.352703 2026] [:error] [pid 62769:tid 62781] [client 20.91.189.245:50670] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xs.php"] [unique_id "adkTxsWsSnfLoB8ifjCuAQAAAko"]
[Fri Apr 10 23:14:14.913539 2026] [:error] [pid 63134:tid 63154] [client 20.91.189.245:39006] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xs.php"] [unique_id "adkTxtFALqPDwWi6eJLC-AAAA9E"]
[Fri Apr 10 23:14:15.438944 2026] [:error] [pid 62769:tid 62774] [client 20.91.189.245:65325] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xs.php"] [unique_id "adkTx8WsSnfLoB8ifjCuCAAAAkM"]
[Fri Apr 10 23:14:15.966200 2026] [:error] [pid 13189:tid 13214] [client 20.91.189.245:58332] [client 20.91.189.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "adkTx5AxiJKPums3eBD87QAAAFY"]
[Fri Apr 10 23:14:16.486983 2026] [:error] [pid 62769:tid 62778] [client 20.91.189.245:62347] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/pp.php"] [unique_id "adkTyMWsSnfLoB8ifjCuEwAAAkc"]
[Fri Apr 10 23:14:17.013464 2026] [:error] [pid 63134:tid 63158] [client 20.91.189.245:54604] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/pp.php"] [unique_id "adkTydFALqPDwWi6eJLC-gAAA9U"]
[Fri Apr 10 23:14:17.544746 2026] [:error] [pid 62710:tid 62733] [client 20.91.189.245:37008] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/pp.php"] [unique_id "adkTyeME7qrf5xEWWJs-aAAAAhQ"]
[Fri Apr 10 23:14:18.116847 2026] [:error] [pid 13101:tid 13156] [client 20.91.189.245:48470] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/pp.php"] [unique_id "adkTyt8Ldw85818pj2oVDwAAAJc"]
[Fri Apr 10 23:14:18.655700 2026] [:error] [pid 62884:tid 62915] [client 20.91.189.245:39015] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/myy.php"] [unique_id "adkTyuUCK1xrhnnmpo2XNAAAAtg"]
[Fri Apr 10 23:14:19.193875 2026] [:error] [pid 62769:tid 62780] [client 20.91.189.245:55143] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/myy.php"] [unique_id "adkTy8WsSnfLoB8ifjCuHAAAAkk"]
[Fri Apr 10 23:14:19.769154 2026] [:error] [pid 62819:tid 62842] [client 20.91.189.245:58338] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/myy.php"] [unique_id "adkTy_U20EyPf7Nlsld_4AAAApQ"]
[Fri Apr 10 23:14:20.296508 2026] [:error] [pid 62710:tid 62729] [client 20.91.189.245:58333] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/myy.php"] [unique_id "adkTzOME7qrf5xEWWJs-bwAAAhA"]
[Fri Apr 10 23:14:20.827759 2026] [:error] [pid 62769:tid 62790] [client 20.91.189.245:39025] [client 20.91.189.245] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "adkTzMWsSnfLoB8ifjCuHwAAAlM"]
[Fri Apr 10 23:14:21.359074 2026] [:error] [pid 62884:tid 62900] [client 20.91.189.245:3241] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wdone1.php"] [unique_id "adkTzeUCK1xrhnnmpo2XQwAAAsk"]
[Fri Apr 10 23:14:21.896730 2026] [:error] [pid 62819:tid 62822] [client 20.91.189.245:3258] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wdone1.php"] [unique_id "adkTzfU20EyPf7Nlsld_5wAAAoA"]
[Fri Apr 10 23:14:22.435933 2026] [:error] [pid 13101:tid 13147] [client 20.91.189.245:55142] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wdone1.php"] [unique_id "adkTzt8Ldw85818pj2oVGAAAAI4"]
[Fri Apr 10 23:14:22.986215 2026] [:error] [pid 62884:tid 62903] [client 20.91.189.245:45507] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "adkTzuUCK1xrhnnmpo2XTQAAAsw"]
[Fri Apr 10 23:14:23.516423 2026] [:error] [pid 13101:tid 13140] [client 20.91.189.245:62726] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "adkTz98Ldw85818pj2oVGwAAAIc"]
[Fri Apr 10 23:14:31.869044 2026] [:error] [pid 63134:tid 63143] [client 20.91.189.245:37508] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/db.php"] [unique_id "adkT19FALqPDwWi6eJLDHQAAA8Y"]
[Fri Apr 10 23:14:32.504544 2026] [:error] [pid 13189:tid 13200] [client 20.91.189.245:54605] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/db.php"] [unique_id "adkT2JAxiJKPums3eBD9DwAAAEg"]
[Fri Apr 10 23:14:33.053688 2026] [:error] [pid 62710:tid 62731] [client 20.91.189.245:45510] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/db.php"] [unique_id "adkT2eME7qrf5xEWWJs-kQAAAhI"]
[Fri Apr 10 23:14:33.631254 2026] [:error] [pid 62769:tid 62792] [client 20.91.189.245:3531] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/db.php"] [unique_id "adkT2cWsSnfLoB8ifjCuPgAAAlU"]
[Fri Apr 10 23:14:34.182602 2026] [:error] [pid 13189:tid 13214] [client 20.91.189.245:62780] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class-wp-image.php"] [unique_id "adkT2pAxiJKPums3eBD9FQAAAFY"]
[Fri Apr 10 23:14:34.766451 2026] [:error] [pid 62651:tid 62665] [client 20.91.189.245:47070] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class-wp-image.php"] [unique_id "adkT2jbAH0le57SIaqw2LgAAAcw"]
[Fri Apr 10 23:14:35.382880 2026] [:error] [pid 13101:tid 13144] [client 20.91.189.245:3205] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class-wp-image.php"] [unique_id "adkT298Ldw85818pj2oVUQAAAIs"]
[Fri Apr 10 23:14:35.945839 2026] [:error] [pid 62769:tid 62782] [client 20.91.189.245:62379] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class-wp-image.php"] [unique_id "adkT28WsSnfLoB8ifjCuTQAAAks"]
[Fri Apr 10 23:14:36.537821 2026] [:error] [pid 62769:tid 62793] [client 20.91.189.245:62392] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/riz.php"] [unique_id "adkT3MWsSnfLoB8ifjCuVAAAAlY"]
[Fri Apr 10 23:14:37.062324 2026] [:error] [pid 62769:tid 62775] [client 20.91.189.245:38984] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/riz.php"] [unique_id "adkT3cWsSnfLoB8ifjCuWwAAAkQ"]
[Fri Apr 10 23:14:37.615706 2026] [:error] [pid 62769:tid 62781] [client 20.91.189.245:58324] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/riz.php"] [unique_id "adkT3cWsSnfLoB8ifjCuYwAAAko"]
[Fri Apr 10 23:14:38.149876 2026] [:error] [pid 63134:tid 63154] [client 20.91.189.245:58321] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/riz.php"] [unique_id "adkT3tFALqPDwWi6eJLDIgAAA9E"]
[Fri Apr 10 23:14:38.695030 2026] [:error] [pid 62710:tid 62728] [client 20.91.189.245:59504] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/packsin1.php"] [unique_id "adkT3uME7qrf5xEWWJs-mwAAAg8"]
[Fri Apr 10 23:14:39.218781 2026] [:error] [pid 13189:tid 13200] [client 20.91.189.245:37563] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/packsin1.php"] [unique_id "adkT35AxiJKPums3eBD9GwAAAEg"]
[Fri Apr 10 23:14:39.809871 2026] [:error] [pid 62884:tid 62897] [client 20.91.189.245:50650] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/packsin1.php"] [unique_id "adkT3-UCK1xrhnnmpo2XhgAAAsY"]
[Fri Apr 10 23:14:40.353293 2026] [:error] [pid 62769:tid 62782] [client 20.91.189.245:50648] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/packsin1.php"] [unique_id "adkT4MWsSnfLoB8ifjCubgAAAks"]
[Fri Apr 10 23:14:40.881974 2026] [:error] [pid 62651:tid 62664] [client 20.91.189.245:3522] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/om.php"] [unique_id "adkT4DbAH0le57SIaqw2TgAAAcs"]
[Fri Apr 10 23:14:41.436528 2026] [:error] [pid 62651:tid 62666] [client 20.91.189.245:45555] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/om.php"] [unique_id "adkT4TbAH0le57SIaqw2UgAAAc0"]
[Fri Apr 10 23:14:41.962603 2026] [:error] [pid 13100:tid 13128] [client 20.91.189.245:59514] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/om.php"] [unique_id "adkT4Vzg-ZkZ0InWIP3PkgAAARc"]
[Fri Apr 10 23:14:42.493179 2026] [:error] [pid 62884:tid 62907] [client 20.91.189.245:55632] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/om.php"] [unique_id "adkT4uUCK1xrhnnmpo2XiAAAAtA"]
[Fri Apr 10 23:14:43.027810 2026] [:error] [pid 13101:tid 13138] [client 20.91.189.245:62775] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/006.php"] [unique_id "adkT498Ldw85818pj2oVZAAAAIU"]
[Fri Apr 10 23:14:43.555176 2026] [:error] [pid 63134:tid 63157] [client 20.91.189.245:32502] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/006.php"] [unique_id "adkT49FALqPDwWi6eJLDKwAAA9Q"]
[Fri Apr 10 23:14:44.100838 2026] [:error] [pid 63134:tid 63146] [client 20.91.189.245:37525] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/006.php"] [unique_id "adkT5NFALqPDwWi6eJLDLQAAA8k"]
[Fri Apr 10 23:14:44.636409 2026] [:error] [pid 63134:tid 63139] [client 20.91.189.245:58329] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/006.php"] [unique_id "adkT5NFALqPDwWi6eJLDLwAAA8I"]
[Fri Apr 10 23:14:45.176547 2026] [:error] [pid 62819:tid 62836] [client 20.91.189.245:62378] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "adkT5fU20EyPf7Nlsld_9QAAAo4"]
[Fri Apr 10 23:14:45.824643 2026] [:error] [pid 13101:tid 13156] [client 20.91.189.245:45522] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "adkT5d8Ldw85818pj2oVbgAAAJc"]
[Fri Apr 10 23:14:46.370231 2026] [:error] [pid 62710:tid 62726] [client 20.91.189.245:54641] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "adkT5uME7qrf5xEWWJs-qQAAAg0"]
[Fri Apr 10 23:14:46.968012 2026] [:error] [pid 63134:tid 63151] [client 20.91.189.245:55639] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "adkT5tFALqPDwWi6eJLDMgAAA84"]
[Fri Apr 10 23:14:47.558907 2026] [:error] [pid 62769:tid 62793] [client 20.91.189.245:51092] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "adkT58WsSnfLoB8ifjCujgAAAlY"]
[Fri Apr 10 23:14:48.119078 2026] [:error] [pid 62769:tid 62782] [client 20.91.189.245:55135] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "adkT6MWsSnfLoB8ifjCukQAAAks"]
[Fri Apr 10 23:14:48.695841 2026] [:error] [pid 62710:tid 62725] [client 20.91.189.245:62740] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "adkT6OME7qrf5xEWWJs-rgAAAgw"]
[Fri Apr 10 23:14:49.311328 2026] [:error] [pid 62769:tid 62773] [client 20.91.189.245:3251] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "adkT6cWsSnfLoB8ifjCumQAAAkI"]
[Fri Apr 10 23:14:49.880268 2026] [:error] [pid 62769:tid 62793] [client 20.91.189.245:3255] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wolf.php"] [unique_id "adkT6cWsSnfLoB8ifjCunwAAAlY"]
[Fri Apr 10 23:14:50.430978 2026] [:error] [pid 62769:tid 62772] [client 20.91.189.245:61931] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wolf.php"] [unique_id "adkT6sWsSnfLoB8ifjCupgAAAkE"]
[Fri Apr 10 23:14:50.967195 2026] [:error] [pid 63134:tid 63147] [client 20.91.189.245:50660] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wolf.php"] [unique_id "adkT6tFALqPDwWi6eJLDOAAAA8o"]
[Fri Apr 10 23:14:51.487078 2026] [:error] [pid 63134:tid 63157] [client 20.91.189.245:62777] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wolf.php"] [unique_id "adkT69FALqPDwWi6eJLDOwAAA9Q"]
[Fri Apr 10 23:14:52.016559 2026] [:error] [pid 13101:tid 13135] [client 20.91.189.245:62766] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ww.php"] [unique_id "adkT7N8Ldw85818pj2oVdgAAAII"]
[Fri Apr 10 23:14:52.540710 2026] [:error] [pid 62651:tid 62658] [client 20.91.189.245:37504] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ww.php"] [unique_id "adkT7DbAH0le57SIaqw2WQAAAcU"]
[Fri Apr 10 23:14:53.076232 2026] [:error] [pid 13189:tid 13214] [client 20.91.189.245:62371] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ww.php"] [unique_id "adkT7ZAxiJKPums3eBD9jwAAAFY"]
[Fri Apr 10 23:14:53.602486 2026] [:error] [pid 62710:tid 62719] [client 20.91.189.245:26639] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ww.php"] [unique_id "adkT7eME7qrf5xEWWJs-ugAAAgY"]
[Fri Apr 10 23:14:54.137835 2026] [:error] [pid 13189:tid 13206] [client 20.91.189.245:3530] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/7.php"] [unique_id "adkT7pAxiJKPums3eBD9lwAAAE4"]
[Fri Apr 10 23:14:54.677545 2026] [:error] [pid 13189:tid 13211] [client 20.91.189.245:55616] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/7.php"] [unique_id "adkT7pAxiJKPums3eBD9nAAAAFM"]
[Fri Apr 10 23:14:55.204415 2026] [:error] [pid 62769:tid 62778] [client 20.91.189.245:45535] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/7.php"] [unique_id "adkT78WsSnfLoB8ifjCuuwAAAkc"]
[Fri Apr 10 23:14:55.720349 2026] [:error] [pid 13189:tid 13201] [client 20.91.189.245:32503] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/7.php"] [unique_id "adkT75AxiJKPums3eBD9pwAAAEk"]
[Fri Apr 10 23:14:56.245411 2026] [:error] [pid 62769:tid 62780] [client 20.91.189.245:62365] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/pxw8hpvyfvvpojjxvnCdefault.php"] [unique_id "adkT8MWsSnfLoB8ifjCuwQAAAkk"]
[Fri Apr 10 23:14:56.769565 2026] [:error] [pid 62769:tid 62788] [client 20.91.189.245:26653] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/pxw8hpvyfvvpojjxvnCdefault.php"] [unique_id "adkT8MWsSnfLoB8ifjCuyAAAAlE"]
[Fri Apr 10 23:14:57.311952 2026] [:error] [pid 62769:tid 62771] [client 20.91.189.245:32508] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/pxw8hpvyfvvpojjxvnCdefault.php"] [unique_id "adkT8cWsSnfLoB8ifjCuzwAAAkA"]
[Fri Apr 10 23:14:57.844897 2026] [:error] [pid 62769:tid 62787] [client 20.91.189.245:47052] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/pxw8hpvyfvvpojjxvnCdefault.php"] [unique_id "adkT8cWsSnfLoB8ifjCu1wAAAlA"]
[Fri Apr 10 23:14:58.365815 2026] [:error] [pid 13101:tid 13137] [client 20.91.189.245:3246] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "adkT8t8Ldw85818pj2oVgwAAAIQ"]
[Fri Apr 10 23:14:58.889057 2026] [:error] [pid 13101:tid 13140] [client 20.91.189.245:37020] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "adkT8t8Ldw85818pj2oViQAAAIc"]
[Fri Apr 10 23:14:59.412262 2026] [:error] [pid 62710:tid 62721] [client 20.91.189.245:50658] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "adkT8-ME7qrf5xEWWJs-ygAAAgg"]
[Fri Apr 10 23:14:59.937295 2026] [:error] [pid 62710:tid 62729] [client 20.91.189.245:45529] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/c6jpzOQvtPyeM9hdefault.php"] [unique_id "adkT8-ME7qrf5xEWWJs-zQAAAhA"]
[Fri Apr 10 23:15:00.466672 2026] [:error] [pid 13101:tid 13143] [client 20.91.189.245:45548] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "adkT9N8Ldw85818pj2oVjAAAAIo"]
[Fri Apr 10 23:15:00.995805 2026] [:error] [pid 62769:tid 62790] [client 20.91.189.245:40180] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "adkT9MWsSnfLoB8ifjCu8AAAAlM"]
[Fri Apr 10 23:15:01.538778 2026] [:error] [pid 62819:tid 62822] [client 20.91.189.245:54630] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "adkT9fU20EyPf7NlsleABwAAAoA"]
[Fri Apr 10 23:15:02.073110 2026] [:error] [pid 62769:tid 62792] [client 20.91.189.245:37049] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mfptbopeeg7v0sezxnbtgcgsCdefault.php"] [unique_id "adkT9sWsSnfLoB8ifjCu_gAAAlU"]
[Fri Apr 10 23:15:02.604341 2026] [:error] [pid 62769:tid 62777] [client 20.91.189.245:37511] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/image.php"] [unique_id "adkT9sWsSnfLoB8ifjCvBgAAAkY"]
[Fri Apr 10 23:15:03.126421 2026] [:error] [pid 13101:tid 13147] [client 20.91.189.245:3228] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/image.php"] [unique_id "adkT998Ldw85818pj2oVjgAAAI4"]
[Fri Apr 10 23:15:03.644462 2026] [:error] [pid 63134:tid 63158] [client 20.91.189.245:32491] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/image.php"] [unique_id "adkT99FALqPDwWi6eJLDRAAAA9U"]
[Fri Apr 10 23:15:04.163230 2026] [:error] [pid 62769:tid 62780] [client 20.91.189.245:25824] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/image.php"] [unique_id "adkT-MWsSnfLoB8ifjCvFwAAAkk"]
[Fri Apr 10 23:15:04.688549 2026] [:error] [pid 62769:tid 62789] [client 20.91.189.245:32509] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adkT-MWsSnfLoB8ifjCvHgAAAlI"]
[Fri Apr 10 23:15:05.211508 2026] [:error] [pid 13189:tid 13209] [client 20.91.189.245:3562] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adkT-ZAxiJKPums3eBD9sQAAAFE"]
[Fri Apr 10 23:15:05.741550 2026] [:error] [pid 62769:tid 62776] [client 20.91.189.245:46044] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adkT-cWsSnfLoB8ifjCvJQAAAkU"]
[Fri Apr 10 23:15:06.270372 2026] [:error] [pid 62769:tid 62777] [client 20.91.189.245:32504] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adkT-sWsSnfLoB8ifjCvKgAAAkY"]
[Fri Apr 10 23:15:06.801366 2026] [:error] [pid 62769:tid 62788] [client 20.91.189.245:54595] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adkT-sWsSnfLoB8ifjCvMAAAAlE"]
[Fri Apr 10 23:15:07.327623 2026] [:error] [pid 62769:tid 62789] [client 20.91.189.245:55621] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adkT-8WsSnfLoB8ifjCvOQAAAlI"]
[Fri Apr 10 23:15:07.859206 2026] [:error] [pid 62769:tid 62792] [client 20.91.189.245:45504] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adkT-8WsSnfLoB8ifjCvQAAAAlU"]
[Fri Apr 10 23:15:08.385709 2026] [:error] [pid 62769:tid 62772] [client 20.91.189.245:60047] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adkT_MWsSnfLoB8ifjCvRwAAAkE"]
[Fri Apr 10 23:15:08.911848 2026] [:error] [pid 63134:tid 63138] [client 20.91.189.245:50678] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adkT_NFALqPDwWi6eJLDSQAAA8E"]
[Fri Apr 10 23:15:09.440724 2026] [:error] [pid 13189:tid 13214] [client 20.91.189.245:62734] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adkT_ZAxiJKPums3eBD9twAAAFY"]
[Fri Apr 10 23:15:09.970947 2026] [:error] [pid 62710:tid 62718] [client 20.91.189.245:62778] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adkT_eME7qrf5xEWWJs-3gAAAgU"]
[Fri Apr 10 23:15:10.505082 2026] [:error] [pid 13189:tid 13207] [client 20.91.189.245:55148] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adkT_pAxiJKPums3eBD9ugAAAE8"]
[Fri Apr 10 23:15:11.031053 2026] [:error] [pid 13189:tid 13206] [client 20.91.189.245:37613] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "adkT_5AxiJKPums3eBD9vAAAAE4"]
[Fri Apr 10 23:15:11.573905 2026] [:error] [pid 13189:tid 13200] [client 20.91.189.245:45560] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "adkT_5AxiJKPums3eBD9yAAAAEg"]
[Fri Apr 10 23:15:12.146578 2026] [:error] [pid 13189:tid 13214] [client 20.91.189.245:39030] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "adkUAJAxiJKPums3eBD92QAAAFY"]
[Fri Apr 10 23:15:12.674482 2026] [:error] [pid 13189:tid 13209] [client 20.91.189.245:3203] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "adkUAJAxiJKPums3eBD93gAAAFE"]
[Fri Apr 10 23:15:13.220993 2026] [:error] [pid 62769:tid 62783] [client 20.91.189.245:3520] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/roksad1.php"] [unique_id "adkUAcWsSnfLoB8ifjCvWAAAAkw"]
[Fri Apr 10 23:15:13.764370 2026] [:error] [pid 62769:tid 62782] [client 20.91.189.245:46005] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/roksad1.php"] [unique_id "adkUAcWsSnfLoB8ifjCvWwAAAks"]
[Fri Apr 10 23:15:14.340032 2026] [:error] [pid 13101:tid 13135] [client 20.91.189.245:34028] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/roksad1.php"] [unique_id "adkUAt8Ldw85818pj2oVnwAAAII"]
[Fri Apr 10 23:15:14.926681 2026] [:error] [pid 63134:tid 63143] [client 20.91.189.245:55577] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/roksad1.php"] [unique_id "adkUAtFALqPDwWi6eJLDWwAAA8Y"]
[Fri Apr 10 23:15:15.488834 2026] [:error] [pid 13101:tid 13149] [client 20.91.189.245:52509] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adkUA98Ldw85818pj2oVowAAAJA"]
[Fri Apr 10 23:15:16.033678 2026] [:error] [pid 13100:tid 13117] [client 20.91.189.245:26739] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adkUBFzg-ZkZ0InWIP3PlwAAAQw"]
[Fri Apr 10 23:15:16.579028 2026] [:error] [pid 13100:tid 13108] [client 20.91.189.245:32959] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adkUBFzg-ZkZ0InWIP3PmQAAAQM"]
[Fri Apr 10 23:15:17.107463 2026] [:error] [pid 13101:tid 13143] [client 20.91.189.245:58071] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adkUBd8Ldw85818pj2oVpgAAAIo"]
[Fri Apr 10 23:15:17.670014 2026] [:error] [pid 63134:tid 63141] [client 20.91.189.245:26747] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adkUBdFALqPDwWi6eJLDYgAAA8Q"]
[Fri Apr 10 23:15:18.343062 2026] [:error] [pid 62651:tid 62653] [client 20.91.189.245:41602] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adkUBjbAH0le57SIaqw2cAAAAcA"]
[Fri Apr 10 23:15:18.941917 2026] [:error] [pid 13189:tid 13195] [client 20.91.189.245:53495] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adkUBpAxiJKPums3eBD-DAAAAEM"]
[Fri Apr 10 23:15:19.534789 2026] [:error] [pid 13189:tid 13205] [client 20.91.189.245:47036] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/oLEzRVqmJJPFSucdefault.php"] [unique_id "adkUB5AxiJKPums3eBD-EQAAAE0"]
[Fri Apr 10 23:15:20.221007 2026] [:error] [pid 13189:tid 13202] [client 20.91.189.245:27447] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1aa.php"] [unique_id "adkUCJAxiJKPums3eBD-GQAAAEo"]
[Fri Apr 10 23:15:20.813502 2026] [:error] [pid 62769:tid 62782] [client 20.91.189.245:46979] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1aa.php"] [unique_id "adkUCMWsSnfLoB8ifjCvYAAAAks"]
[Fri Apr 10 23:15:21.593144 2026] [:error] [pid 62710:tid 62723] [client 20.91.189.245:29513] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1aa.php"] [unique_id "adkUCeME7qrf5xEWWJs--gAAAgo"]
[Fri Apr 10 23:15:22.225254 2026] [:error] [pid 62884:tid 62908] [client 20.91.189.245:35505] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1aa.php"] [unique_id "adkUCuUCK1xrhnnmpo2XmAAAAtE"]
[Fri Apr 10 23:15:22.849371 2026] [:error] [pid 13101:tid 13150] [client 20.91.189.245:44990] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adkUCt8Ldw85818pj2oVrAAAAJE"]
[Fri Apr 10 23:15:23.644028 2026] [:error] [pid 13101:tid 13153] [client 20.91.189.245:35456] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adkUC98Ldw85818pj2oVsAAAAJQ"]
[Fri Apr 10 23:15:24.504416 2026] [:error] [pid 13189:tid 13209] [client 20.91.189.245:35490] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adkUDJAxiJKPums3eBD-NAAAAFE"]
[Fri Apr 10 23:15:25.155400 2026] [:error] [pid 62769:tid 62773] [client 20.91.189.245:3793] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ibcqocdtu3eovdx2hwj7Cdefault.php"] [unique_id "adkUDcWsSnfLoB8ifjCvawAAAkI"]
[Fri Apr 10 23:15:25.765819 2026] [:error] [pid 62710:tid 62720] [client 20.91.189.245:32391] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/12.php"] [unique_id "adkUDeME7qrf5xEWWJs_AgAAAgc"]
[Fri Apr 10 23:15:26.398469 2026] [:error] [pid 62769:tid 62786] [client 20.91.189.245:53463] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/12.php"] [unique_id "adkUDsWsSnfLoB8ifjCvdQAAAk8"]
[Fri Apr 10 23:15:26.969068 2026] [:error] [pid 62710:tid 62724] [client 20.91.189.245:38923] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/12.php"] [unique_id "adkUDuME7qrf5xEWWJs_BQAAAgs"]
[Fri Apr 10 23:15:27.511364 2026] [:error] [pid 62769:tid 62775] [client 20.91.189.245:40548] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/12.php"] [unique_id "adkUD8WsSnfLoB8ifjCvfgAAAkQ"]
[Fri Apr 10 23:15:28.095987 2026] [:error] [pid 13101:tid 13155] [client 20.91.189.245:22271] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adkUEN8Ldw85818pj2oVswAAAJY"]
[Fri Apr 10 23:15:28.639589 2026] [:error] [pid 13101:tid 13138] [client 20.91.189.245:37062] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adkUEN8Ldw85818pj2oVtQAAAIU"]
[Fri Apr 10 23:15:29.299476 2026] [:error] [pid 63134:tid 63161] [client 20.91.189.245:30899] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adkUEdFALqPDwWi6eJLDeQAAA9g"]
[Fri Apr 10 23:15:29.853317 2026] [:error] [pid 13189:tid 13202] [client 20.91.189.245:32401] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "adkUEZAxiJKPums3eBD-XQAAAEo"]
[Fri Apr 10 23:15:30.445399 2026] [:error] [pid 13101:tid 13154] [client 20.91.189.245:24016] [client 20.91.189.245] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lmutxdvyp7u5yksqke8ozbjgCdefault.php"] [unique_id "adkUEt8Ldw85818pj2oVvQAAAJU"]
[Fri Apr 10 23:32:23.335040 2026] [:error] [pid 62769:tid 62776] [client 20.123.11.197:61154] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adkYB8WsSnfLoB8ifjDFwgAAAkU"]
[Fri Apr 10 23:32:23.897362 2026] [:error] [pid 62769:tid 62780] [client 20.123.11.197:13640] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adkYB8WsSnfLoB8ifjDFxwAAAkk"]
[Fri Apr 10 23:32:24.411097 2026] [:error] [pid 13101:tid 13146] [client 20.123.11.197:13641] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adkYCN8Ldw85818pj2oi9AAAAI0"]
[Fri Apr 10 23:32:24.977444 2026] [:error] [pid 62769:tid 62789] [client 20.123.11.197:61148] [client 20.123.11.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adkYCMWsSnfLoB8ifjDF0QAAAlI"]
[Sun Apr 12 01:09:00.245633 2026] [:error] [pid 44700:tid 44759] [client 20.111.60.230:58181] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nwflm.php"] [unique_id "adqALGryPgh_uW4QPClbIQAAAM8"]
[Sun Apr 12 01:09:00.884603 2026] [:error] [pid 45064:tid 45107] [client 20.111.60.230:35305] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nwflm.php"] [unique_id "adqALJcHBvLyJ6EUhUruigAAAU4"]
[Sun Apr 12 01:09:01.384455 2026] [:error] [pid 44701:tid 44779] [client 20.111.60.230:26701] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nwflm.php"] [unique_id "adqALRGZAP4MrlxEPFcrXQAAAEc"]
[Sun Apr 12 01:09:02.012283 2026] [:error] [pid 44701:tid 44787] [client 20.111.60.230:35326] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nwflm.php"] [unique_id "adqALhGZAP4MrlxEPFcrYQAAAE0"]
[Sun Apr 12 01:09:02.608928 2026] [:error] [pid 45064:tid 45105] [client 20.111.60.230:24391] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "adqALpcHBvLyJ6EUhUrulAAAAUw"]
[Sun Apr 12 01:09:03.250188 2026] [:error] [pid 44701:tid 44777] [client 20.111.60.230:52365] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "adqALxGZAP4MrlxEPFcrZAAAAEU"]
[Sun Apr 12 01:09:03.867384 2026] [:error] [pid 44701:tid 44786] [client 20.111.60.230:35267] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "adqALxGZAP4MrlxEPFcrZgAAAEw"]
[Sun Apr 12 01:09:04.531471 2026] [:error] [pid 45064:tid 45115] [client 20.111.60.230:35311] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "adqAMJcHBvLyJ6EUhUrungAAAVY"]
[Sun Apr 12 01:09:05.146547 2026] [:error] [pid 45064:tid 45106] [client 20.111.60.230:26186] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "adqAMZcHBvLyJ6EUhUruowAAAU0"]
[Sun Apr 12 01:09:05.892664 2026] [:error] [pid 44701:tid 44787] [client 20.111.60.230:59577] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "adqAMRGZAP4MrlxEPFcrcgAAAE0"]
[Sun Apr 12 01:09:06.561829 2026] [:error] [pid 45064:tid 45112] [client 20.111.60.230:24403] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "adqAMpcHBvLyJ6EUhUruqQAAAVM"]
[Sun Apr 12 01:09:07.148775 2026] [:error] [pid 44701:tid 44774] [client 20.111.60.230:26202] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "adqAMxGZAP4MrlxEPFcregAAAEI"]
[Sun Apr 12 01:09:08.009941 2026] [:error] [pid 45064:tid 45104] [client 20.111.60.230:23751] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "adqANJcHBvLyJ6EUhUrurwAAAUs"]
[Sun Apr 12 01:09:08.568623 2026] [:error] [pid 45064:tid 45102] [client 20.111.60.230:52355] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "adqANJcHBvLyJ6EUhUrusgAAAUk"]
[Sun Apr 12 01:09:09.100088 2026] [:error] [pid 45064:tid 45115] [client 20.111.60.230:57614] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "adqANZcHBvLyJ6EUhUrutQAAAVY"]
[Sun Apr 12 01:09:09.757953 2026] [:error] [pid 45064:tid 45108] [client 20.111.60.230:51654] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "adqANZcHBvLyJ6EUhUruvAAAAU8"]
[Sun Apr 12 01:09:10.288553 2026] [:error] [pid 45064:tid 45110] [client 20.111.60.230:7720] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "adqANpcHBvLyJ6EUhUruwgAAAVE"]
[Sun Apr 12 01:09:10.838343 2026] [:error] [pid 44698:tid 44717] [client 20.111.60.230:57602] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "adqANhgoH9UWd-U3D55Y0QAAAI4"]
[Sun Apr 12 01:09:11.343154 2026] [:error] [pid 44701:tid 44783] [client 20.111.60.230:58879] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "adqANxGZAP4MrlxEPFcrhQAAAEo"]
[Sun Apr 12 01:09:11.844987 2026] [:error] [pid 44700:tid 44752] [client 20.111.60.230:58855] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "adqAN2ryPgh_uW4QPClbKQAAAMg"]
[Sun Apr 12 01:09:12.446565 2026] [:error] [pid 44698:tid 44711] [client 20.111.60.230:57647] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "adqAOBgoH9UWd-U3D55Y1QAAAIg"]
[Sun Apr 12 01:09:12.952103 2026] [:error] [pid 44701:tid 44773] [client 20.111.60.230:37478] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "adqAOBGZAP4MrlxEPFcrhwAAAEE"]
[Sun Apr 12 01:09:13.629796 2026] [:error] [pid 44701:tid 44775] [client 20.111.60.230:57628] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "adqAORGZAP4MrlxEPFcrigAAAEM"]
[Sun Apr 12 01:09:14.265540 2026] [:error] [pid 44700:tid 44748] [client 20.111.60.230:7739] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "adqAOmryPgh_uW4QPClbMgAAAMQ"]
[Sun Apr 12 01:09:14.997360 2026] [:error] [pid 44700:tid 44760] [client 20.111.60.230:24684] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "adqAOmryPgh_uW4QPClbMwAAANA"]
[Sun Apr 12 01:09:15.629347 2026] [:error] [pid 45064:tid 45094] [client 20.111.60.230:51704] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "adqAO5cHBvLyJ6EUhUru2QAAAUI"]
[Sun Apr 12 01:09:16.120788 2026] [:error] [pid 44701:tid 44785] [client 20.111.60.230:37490] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "adqAPBGZAP4MrlxEPFcrlQAAAEs"]
[Sun Apr 12 01:09:16.601190 2026] [:error] [pid 44698:tid 44719] [client 20.111.60.230:24675] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "adqAPBgoH9UWd-U3D55Y3QAAAJA"]
[Sun Apr 12 01:09:17.294744 2026] [:error] [pid 44698:tid 44707] [client 20.111.60.230:25706] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/water.php"] [unique_id "adqAPRgoH9UWd-U3D55Y3wAAAIQ"]
[Sun Apr 12 01:09:17.868991 2026] [:error] [pid 44700:tid 44756] [client 20.111.60.230:24651] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/water.php"] [unique_id "adqAPWryPgh_uW4QPClbPwAAAMw"]
[Sun Apr 12 01:09:18.410670 2026] [:error] [pid 45064:tid 45107] [client 20.111.60.230:33430] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/water.php"] [unique_id "adqAPpcHBvLyJ6EUhUru6gAAAU4"]
[Sun Apr 12 01:09:18.903829 2026] [:error] [pid 44698:tid 44725] [client 20.111.60.230:57596] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/water.php"] [unique_id "adqAPhgoH9UWd-U3D55Y4QAAAJY"]
[Sun Apr 12 01:09:19.437619 2026] [:error] [pid 44700:tid 44751] [client 20.111.60.230:57545] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "adqAP2ryPgh_uW4QPClbQgAAAMc"]
[Sun Apr 12 01:09:20.069403 2026] [:error] [pid 44701:tid 44777] [client 20.111.60.230:32811] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "adqAQBGZAP4MrlxEPFcrnwAAAEU"]
[Sun Apr 12 01:09:20.853515 2026] [:error] [pid 45064:tid 45099] [client 20.111.60.230:32825] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "adqAQJcHBvLyJ6EUhUru7gAAAUc"]
[Sun Apr 12 01:09:21.537123 2026] [:error] [pid 45064:tid 45110] [client 20.111.60.230:32236] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "adqAQZcHBvLyJ6EUhUru8wAAAVE"]
[Sun Apr 12 01:09:22.193849 2026] [:error] [pid 44698:tid 44727] [client 20.111.60.230:24478] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/13.php"] [unique_id "adqAQhgoH9UWd-U3D55Y6wAAAJg"]
[Sun Apr 12 01:09:22.694789 2026] [:error] [pid 45064:tid 45097] [client 20.111.60.230:32821] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/13.php"] [unique_id "adqAQpcHBvLyJ6EUhUru-wAAAUU"]
[Sun Apr 12 01:09:23.276299 2026] [:error] [pid 44700:tid 44766] [client 20.111.60.230:41942] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/13.php"] [unique_id "adqAQ2ryPgh_uW4QPClbRgAAANY"]
[Sun Apr 12 01:09:23.959971 2026] [:error] [pid 45064:tid 45111] [client 20.111.60.230:35847] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/13.php"] [unique_id "adqAQ5cHBvLyJ6EUhUrvAQAAAVI"]
[Sun Apr 12 01:09:24.625624 2026] [:error] [pid 45064:tid 45113] [client 20.111.60.230:24122] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wert.php"] [unique_id "adqARJcHBvLyJ6EUhUrvBQAAAVQ"]
[Sun Apr 12 01:09:25.264808 2026] [:error] [pid 45064:tid 45101] [client 20.111.60.230:32253] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wert.php"] [unique_id "adqARZcHBvLyJ6EUhUrvCgAAAUg"]
[Sun Apr 12 01:09:25.794941 2026] [:error] [pid 45064:tid 45111] [client 20.111.60.230:57547] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wert.php"] [unique_id "adqARZcHBvLyJ6EUhUrvCwAAAVI"]
[Sun Apr 12 01:09:26.344781 2026] [:error] [pid 44701:tid 44786] [client 20.111.60.230:45862] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wert.php"] [unique_id "adqARhGZAP4MrlxEPFcrqQAAAEw"]
[Sun Apr 12 01:09:26.942140 2026] [:error] [pid 44701:tid 44777] [client 20.111.60.230:24080] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/11.php"] [unique_id "adqARhGZAP4MrlxEPFcrrAAAAEU"]
[Sun Apr 12 01:09:27.458425 2026] [:error] [pid 44700:tid 44761] [client 20.111.60.230:35857] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/11.php"] [unique_id "adqAR2ryPgh_uW4QPClbUgAAANE"]
[Sun Apr 12 01:09:28.049188 2026] [:error] [pid 45064:tid 45113] [client 20.111.60.230:53636] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/11.php"] [unique_id "adqASJcHBvLyJ6EUhUrvEAAAAVQ"]
[Sun Apr 12 01:09:28.741729 2026] [:error] [pid 44700:tid 44768] [client 20.111.60.230:32238] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/11.php"] [unique_id "adqASGryPgh_uW4QPClbWgAAANg"]
[Sun Apr 12 01:09:29.294179 2026] [:error] [pid 44700:tid 44762] [client 20.111.60.230:32253] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/p.php"] [unique_id "adqASWryPgh_uW4QPClbXQAAANI"]
[Sun Apr 12 01:09:29.857397 2026] [:error] [pid 45064:tid 45094] [client 20.111.60.230:53662] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/p.php"] [unique_id "adqASZcHBvLyJ6EUhUrvFgAAAUI"]
[Sun Apr 12 01:09:30.602289 2026] [:error] [pid 44701:tid 44798] [client 20.111.60.230:32193] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/p.php"] [unique_id "adqAShGZAP4MrlxEPFcruwAAAFY"]
[Sun Apr 12 01:09:31.228285 2026] [:error] [pid 44698:tid 44726] [client 20.111.60.230:30685] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/p.php"] [unique_id "adqASxgoH9UWd-U3D55Y8gAAAJc"]
[Sun Apr 12 01:09:31.965879 2026] [:error] [pid 44700:tid 44767] [client 20.111.60.230:26301] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/oij98gy.php"] [unique_id "adqAS2ryPgh_uW4QPClbYgAAANc"]
[Sun Apr 12 01:09:32.723516 2026] [:error] [pid 44700:tid 44745] [client 20.111.60.230:24077] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/oij98gy.php"] [unique_id "adqATGryPgh_uW4QPClbZgAAAME"]
[Sun Apr 12 01:09:33.274107 2026] [:error] [pid 45064:tid 45106] [client 20.111.60.230:7988] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/oij98gy.php"] [unique_id "adqATZcHBvLyJ6EUhUrvJQAAAU0"]
[Sun Apr 12 01:09:33.987959 2026] [:error] [pid 45064:tid 45113] [client 20.111.60.230:40036] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/oij98gy.php"] [unique_id "adqATZcHBvLyJ6EUhUrvKwAAAVQ"]
[Sun Apr 12 01:09:34.476795 2026] [:error] [pid 44701:tid 44783] [client 20.111.60.230:43878] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "adqAThGZAP4MrlxEPFcrvgAAAEo"]
[Sun Apr 12 01:09:35.138448 2026] [:error] [pid 44701:tid 44782] [client 20.111.60.230:30679] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "adqATxGZAP4MrlxEPFcrwQAAAEk"]
[Sun Apr 12 01:09:35.719748 2026] [:error] [pid 44700:tid 44750] [client 20.111.60.230:7959] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "adqAT2ryPgh_uW4QPClbZwAAAMY"]
[Sun Apr 12 01:09:36.539875 2026] [:error] [pid 44700:tid 44751] [client 20.111.60.230:31492] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "adqAUGryPgh_uW4QPClbbQAAAMc"]
[Sun Apr 12 01:09:37.054516 2026] [:error] [pid 44701:tid 44798] [client 20.111.60.230:26270] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/turkshell.php"] [unique_id "adqAURGZAP4MrlxEPFcryQAAAFY"]
[Sun Apr 12 01:09:37.658852 2026] [:error] [pid 44698:tid 44716] [client 20.111.60.230:29194] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/turkshell.php"] [unique_id "adqAURgoH9UWd-U3D55Y-wAAAI0"]
[Sun Apr 12 01:09:38.229812 2026] [:error] [pid 44700:tid 44757] [client 20.111.60.230:40047] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/turkshell.php"] [unique_id "adqAUmryPgh_uW4QPClbdQAAAM0"]
[Sun Apr 12 01:09:38.716805 2026] [:error] [pid 44701:tid 44774] [client 20.111.60.230:43847] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/turkshell.php"] [unique_id "adqAUhGZAP4MrlxEPFcrzgAAAEI"]
[Sun Apr 12 01:09:39.363352 2026] [:error] [pid 45064:tid 45092] [client 20.111.60.230:7391] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tea.php"] [unique_id "adqAU5cHBvLyJ6EUhUrvPgAAAUA"]
[Sun Apr 12 01:09:39.847760 2026] [:error] [pid 44701:tid 44781] [client 20.111.60.230:37026] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tea.php"] [unique_id "adqAUxGZAP4MrlxEPFcr0QAAAEg"]
[Sun Apr 12 01:09:40.642980 2026] [:error] [pid 44701:tid 44793] [client 20.111.60.230:7997] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tea.php"] [unique_id "adqAVBGZAP4MrlxEPFcr1AAAAFI"]
[Sun Apr 12 01:09:41.271515 2026] [:error] [pid 44701:tid 44771] [client 20.111.60.230:29192] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tea.php"] [unique_id "adqAVRGZAP4MrlxEPFcr2AAAAEA"]
[Sun Apr 12 01:09:42.232161 2026] [:error] [pid 44701:tid 44795] [client 20.111.60.230:36993] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/seo.php"] [unique_id "adqAVhGZAP4MrlxEPFcr3wAAAFQ"]
[Sun Apr 12 01:09:42.800244 2026] [:error] [pid 44701:tid 44781] [client 20.111.60.230:24933] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/seo.php"] [unique_id "adqAVhGZAP4MrlxEPFcr4wAAAEg"]
[Sun Apr 12 01:09:43.484393 2026] [:error] [pid 45064:tid 45106] [client 20.111.60.230:36996] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/seo.php"] [unique_id "adqAV5cHBvLyJ6EUhUrvRwAAAU0"]
[Sun Apr 12 01:09:44.008681 2026] [:error] [pid 45064:tid 45098] [client 20.111.60.230:7570] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/seo.php"] [unique_id "adqAWJcHBvLyJ6EUhUrvSgAAAUY"]
[Sun Apr 12 01:09:44.517043 2026] [:error] [pid 45064:tid 45093] [client 20.111.60.230:29203] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/7.php"] [unique_id "adqAWJcHBvLyJ6EUhUrvTgAAAUE"]
[Sun Apr 12 01:09:45.049704 2026] [:error] [pid 45064:tid 45101] [client 20.111.60.230:24927] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/7.php"] [unique_id "adqAWZcHBvLyJ6EUhUrvUwAAAUg"]
[Sun Apr 12 01:09:45.739359 2026] [:error] [pid 44701:tid 44798] [client 20.111.60.230:30695] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/7.php"] [unique_id "adqAWRGZAP4MrlxEPFcr7gAAAFY"]
[Sun Apr 12 01:09:46.261428 2026] [:error] [pid 44698:tid 44704] [client 20.111.60.230:7396] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/7.php"] [unique_id "adqAWhgoH9UWd-U3D55ZAQAAAIE"]
[Sun Apr 12 01:09:46.972142 2026] [:error] [pid 44698:tid 44708] [client 20.111.60.230:7584] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "adqAWhgoH9UWd-U3D55ZCAAAAIU"]
[Sun Apr 12 01:09:47.842332 2026] [:error] [pid 44701:tid 44786] [client 20.111.60.230:40715] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "adqAWxGZAP4MrlxEPFcr9wAAAEw"]
[Sun Apr 12 01:09:48.578402 2026] [:error] [pid 44698:tid 44714] [client 20.111.60.230:47084] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "adqAXBgoH9UWd-U3D55ZCQAAAIs"]
[Sun Apr 12 01:09:49.135493 2026] [:error] [pid 45064:tid 45098] [client 20.111.60.230:34680] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "adqAXZcHBvLyJ6EUhUrvZwAAAUY"]
[Sun Apr 12 01:09:49.766607 2026] [:error] [pid 45064:tid 45095] [client 20.111.60.230:31496] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "adqAXZcHBvLyJ6EUhUrvagAAAUM"]
[Sun Apr 12 01:09:50.330290 2026] [:error] [pid 45064:tid 45103] [client 20.111.60.230:38158] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "adqAXpcHBvLyJ6EUhUrvbwAAAUo"]
[Sun Apr 12 01:09:50.943165 2026] [:error] [pid 45064:tid 45097] [client 20.111.60.230:7405] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "adqAXpcHBvLyJ6EUhUrvcQAAAUU"]
[Sun Apr 12 01:09:51.705737 2026] [:error] [pid 44701:tid 44777] [client 20.111.60.230:45239] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "adqAXxGZAP4MrlxEPFcsDwAAAEU"]
[Sun Apr 12 01:09:52.325487 2026] [:error] [pid 45064:tid 45116] [client 20.111.60.230:34635] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "adqAYJcHBvLyJ6EUhUrvdAAAAVc"]
[Sun Apr 12 01:09:53.014584 2026] [:error] [pid 45064:tid 45096] [client 20.111.60.230:45241] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "adqAYZcHBvLyJ6EUhUrvfAAAAUQ"]
[Sun Apr 12 01:09:53.655638 2026] [:error] [pid 44701:tid 44793] [client 20.111.60.230:47093] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "adqAYRGZAP4MrlxEPFcsFgAAAFI"]
[Sun Apr 12 01:09:54.248334 2026] [:error] [pid 44698:tid 44727] [client 20.111.60.230:34641] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "adqAYhgoH9UWd-U3D55ZEAAAAJg"]
[Sun Apr 12 01:09:54.856168 2026] [:error] [pid 44701:tid 44776] [client 20.111.60.230:38151] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/3.php"] [unique_id "adqAYhGZAP4MrlxEPFcsHgAAAEQ"]
[Sun Apr 12 01:09:55.512610 2026] [:error] [pid 44698:tid 44723] [client 20.111.60.230:34625] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/3.php"] [unique_id "adqAYxgoH9UWd-U3D55ZEgAAAJQ"]
[Sun Apr 12 01:09:56.189445 2026] [:error] [pid 45064:tid 45096] [client 20.111.60.230:58893] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/3.php"] [unique_id "adqAZJcHBvLyJ6EUhUrvhwAAAUQ"]
[Sun Apr 12 01:09:56.767516 2026] [:error] [pid 45064:tid 45110] [client 20.111.60.230:24957] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/3.php"] [unique_id "adqAZJcHBvLyJ6EUhUrviwAAAVE"]
[Sun Apr 12 01:09:57.976493 2026] [:error] [pid 44701:tid 44795] [client 20.111.60.230:45120] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/4.php"] [unique_id "adqAZRGZAP4MrlxEPFcsJAAAAFQ"]
[Sun Apr 12 01:09:58.891671 2026] [:error] [pid 44698:tid 44714] [client 20.111.60.230:45233] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/4.php"] [unique_id "adqAZhgoH9UWd-U3D55ZFQAAAIs"]
[Sun Apr 12 01:10:06.118027 2026] [:error] [pid 44698:tid 44717] [client 20.111.60.230:7773] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp1.php"] [unique_id "adqAbhgoH9UWd-U3D55ZKQAAAI4"]
[Sun Apr 12 01:10:06.844644 2026] [:error] [pid 45064:tid 45108] [client 20.111.60.230:45185] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp1.php"] [unique_id "adqAbpcHBvLyJ6EUhUrvwQAAAU8"]
[Sun Apr 12 01:10:07.517095 2026] [:error] [pid 44700:tid 44746] [client 20.111.60.230:59574] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp1.php"] [unique_id "adqAb2ryPgh_uW4QPClbmwAAAMI"]
[Sun Apr 12 01:10:08.501040 2026] [:error] [pid 44700:tid 44768] [client 20.111.60.230:7604] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp1.php"] [unique_id "adqAcGryPgh_uW4QPClbngAAANg"]
[Sun Apr 12 01:10:09.324127 2026] [:error] [pid 44700:tid 44764] [client 20.111.60.230:28243] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "adqAcWryPgh_uW4QPClboQAAANQ"]
[Sun Apr 12 01:10:10.116064 2026] [:error] [pid 44698:tid 44716] [client 20.111.60.230:7771] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "adqAchgoH9UWd-U3D55ZLgAAAI0"]
[Sun Apr 12 01:10:10.845641 2026] [:error] [pid 44701:tid 44787] [client 20.111.60.230:34674] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "adqAchGZAP4MrlxEPFcsTQAAAE0"]
[Sun Apr 12 01:10:11.625638 2026] [:error] [pid 44701:tid 44771] [client 20.111.60.230:7573] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "adqAcxGZAP4MrlxEPFcsUAAAAEA"]
[Sun Apr 12 01:10:12.493421 2026] [:error] [pid 44701:tid 44789] [client 20.111.60.230:24922] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "adqAdBGZAP4MrlxEPFcsWAAAAE4"]
[Sun Apr 12 01:10:13.440465 2026] [:error] [pid 44701:tid 44779] [client 20.111.60.230:46540] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "adqAdRGZAP4MrlxEPFcsYAAAAEc"]
[Sun Apr 12 01:10:14.131442 2026] [:error] [pid 44701:tid 44790] [client 20.111.60.230:38827] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "adqAdhGZAP4MrlxEPFcsYwAAAE8"]
[Sun Apr 12 01:10:14.908859 2026] [:error] [pid 44701:tid 44787] [client 20.111.60.230:38785] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "adqAdhGZAP4MrlxEPFcsaQAAAE0"]
[Sun Apr 12 01:10:16.642070 2026] [:error] [pid 44700:tid 44763] [client 20.111.60.230:59551] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwpg.php"] [unique_id "adqAeGryPgh_uW4QPClbsQAAANM"]
[Sun Apr 12 01:10:18.283654 2026] [:error] [pid 44700:tid 44759] [client 20.111.60.230:28276] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwpg.php"] [unique_id "adqAemryPgh_uW4QPClbtwAAAM8"]
[Sun Apr 12 01:10:19.464580 2026] [:error] [pid 45064:tid 45108] [client 20.111.60.230:24951] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwpg.php"] [unique_id "adqAe5cHBvLyJ6EUhUrv-gAAAU8"]
[Sun Apr 12 01:10:20.336910 2026] [:error] [pid 45064:tid 45114] [client 20.111.60.230:48369] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwpg.php"] [unique_id "adqAfJcHBvLyJ6EUhUrwAwAAAVU"]
[Sun Apr 12 01:10:21.083441 2026] [:error] [pid 45064:tid 45112] [client 20.111.60.230:59521] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "adqAfZcHBvLyJ6EUhUrwCwAAAVM"]
[Sun Apr 12 01:10:22.050132 2026] [:error] [pid 45064:tid 45113] [client 20.111.60.230:48333] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "adqAfpcHBvLyJ6EUhUrwFQAAAVQ"]
[Sun Apr 12 01:10:22.807533 2026] [:error] [pid 45064:tid 45097] [client 20.111.60.230:38741] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "adqAfpcHBvLyJ6EUhUrwGQAAAUU"]
[Sun Apr 12 01:10:23.479593 2026] [:error] [pid 45064:tid 45112] [client 20.111.60.230:45175] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "adqAf5cHBvLyJ6EUhUrwIQAAAVM"]
[Sun Apr 12 01:10:24.276603 2026] [:error] [pid 45064:tid 45114] [client 20.111.60.230:34651] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "adqAgJcHBvLyJ6EUhUrwJwAAAVU"]
[Sun Apr 12 01:10:25.144384 2026] [:error] [pid 44701:tid 44791] [client 20.111.60.230:59556] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "adqAgRGZAP4MrlxEPFcscwAAAFA"]
[Sun Apr 12 01:10:25.940167 2026] [:error] [pid 45064:tid 45093] [client 20.111.60.230:48354] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "adqAgZcHBvLyJ6EUhUrwNAAAAUE"]
[Sun Apr 12 01:10:26.798209 2026] [:error] [pid 45064:tid 45094] [client 20.111.60.230:34646] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "adqAgpcHBvLyJ6EUhUrwOQAAAUI"]
[Sun Apr 12 01:10:27.606204 2026] [:error] [pid 44701:tid 44798] [client 20.111.60.230:28242] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "adqAgxGZAP4MrlxEPFcsdQAAAFY"]
[Sun Apr 12 01:10:28.458146 2026] [:error] [pid 44701:tid 44775] [client 20.111.60.230:26981] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "adqAhBGZAP4MrlxEPFcsegAAAEM"]
[Sun Apr 12 01:10:29.356346 2026] [:error] [pid 44700:tid 44768] [client 20.111.60.230:38146] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "adqAhWryPgh_uW4QPClbxgAAANg"]
[Sun Apr 12 01:10:30.146341 2026] [:error] [pid 45064:tid 45115] [client 20.111.60.230:26998] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "adqAhpcHBvLyJ6EUhUrwSgAAAVY"]
[Sun Apr 12 01:10:30.771463 2026] [:error] [pid 45064:tid 45112] [client 20.111.60.230:24930] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "adqAhpcHBvLyJ6EUhUrwTgAAAVM"]
[Sun Apr 12 01:10:31.588295 2026] [:error] [pid 44698:tid 44710] [client 20.111.60.230:27004] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "adqAhxgoH9UWd-U3D55ZQgAAAIc"]
[Sun Apr 12 01:10:32.221378 2026] [:error] [pid 44701:tid 44792] [client 20.111.60.230:48375] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "adqAiBGZAP4MrlxEPFcshgAAAFE"]
[Sun Apr 12 01:10:32.876830 2026] [:error] [pid 44701:tid 44790] [client 20.111.60.230:38725] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "adqAiBGZAP4MrlxEPFcsiQAAAE8"]
[Sun Apr 12 01:10:33.580303 2026] [:error] [pid 44701:tid 44786] [client 20.111.60.230:38163] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zample.php"] [unique_id "adqAiRGZAP4MrlxEPFcskAAAAEw"]
[Sun Apr 12 01:10:34.259111 2026] [:error] [pid 44701:tid 44792] [client 20.111.60.230:46535] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zample.php"] [unique_id "adqAihGZAP4MrlxEPFcskwAAAFE"]
[Sun Apr 12 01:10:34.934759 2026] [:error] [pid 44700:tid 44768] [client 20.111.60.230:38724] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zample.php"] [unique_id "adqAimryPgh_uW4QPClb1AAAANg"]
[Sun Apr 12 01:10:36.036338 2026] [:error] [pid 44700:tid 44749] [client 20.111.60.230:7754] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zample.php"] [unique_id "adqAjGryPgh_uW4QPClb1gAAAMU"]
[Sun Apr 12 01:10:36.841855 2026] [:error] [pid 44701:tid 44792] [client 20.111.60.230:45155] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "adqAjBGZAP4MrlxEPFcsoQAAAFE"]
[Sun Apr 12 01:10:37.503438 2026] [:error] [pid 45064:tid 45110] [client 20.111.60.230:45151] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "adqAjZcHBvLyJ6EUhUrwWQAAAVE"]
[Sun Apr 12 01:10:38.455080 2026] [:error] [pid 45064:tid 45106] [client 20.111.60.230:46534] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "adqAjpcHBvLyJ6EUhUrwXAAAAU0"]
[Sun Apr 12 01:10:39.439556 2026] [:error] [pid 44698:tid 44706] [client 20.111.60.230:48381] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "adqAjxgoH9UWd-U3D55ZSAAAAIM"]
[Sun Apr 12 01:10:40.192410 2026] [:error] [pid 45064:tid 45094] [client 20.111.60.230:45174] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "adqAkJcHBvLyJ6EUhUrwYwAAAUI"]
[Sun Apr 12 01:10:41.576171 2026] [:error] [pid 44701:tid 44789] [client 20.111.60.230:28241] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "adqAkRGZAP4MrlxEPFcsswAAAE4"]
[Sun Apr 12 01:10:42.752343 2026] [:error] [pid 45064:tid 45112] [client 20.111.60.230:46623] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "adqAkpcHBvLyJ6EUhUrwagAAAVM"]
[Sun Apr 12 01:10:43.733871 2026] [:error] [pid 44701:tid 44785] [client 20.111.60.230:38813] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "adqAkxGZAP4MrlxEPFcswAAAAEs"]
[Sun Apr 12 01:10:44.542601 2026] [:error] [pid 45064:tid 45104] [client 20.111.60.230:45156] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "adqAlJcHBvLyJ6EUhUrwdQAAAUs"]
[Sun Apr 12 01:10:45.490097 2026] [:error] [pid 45064:tid 45112] [client 20.111.60.230:29421] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "adqAlZcHBvLyJ6EUhUrweQAAAVM"]
[Sun Apr 12 01:10:46.163883 2026] [:error] [pid 44700:tid 44762] [client 20.111.60.230:38153] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "adqAlmryPgh_uW4QPClb6QAAANI"]
[Sun Apr 12 01:10:47.133748 2026] [:error] [pid 45064:tid 45113] [client 20.111.60.230:46632] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "adqAl5cHBvLyJ6EUhUrwgAAAAVQ"]
[Sun Apr 12 01:10:47.817700 2026] [:error] [pid 45064:tid 45103] [client 20.111.60.230:59579] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "adqAl5cHBvLyJ6EUhUrwgQAAAUo"]
[Sun Apr 12 01:10:48.404663 2026] [:error] [pid 44700:tid 44754] [client 20.111.60.230:38193] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "adqAmGryPgh_uW4QPClb8AAAAMo"]
[Sun Apr 12 01:10:49.102313 2026] [:error] [pid 44701:tid 44792] [client 20.111.60.230:7657] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "adqAmRGZAP4MrlxEPFcs0wAAAFE"]
[Sun Apr 12 01:10:49.663369 2026] [:error] [pid 44701:tid 44793] [client 20.111.60.230:7748] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "adqAmRGZAP4MrlxEPFcs1QAAAFI"]
[Sun Apr 12 01:10:50.293202 2026] [:error] [pid 44701:tid 44791] [client 20.111.60.230:59583] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "adqAmhGZAP4MrlxEPFcs1gAAAFA"]
[Sun Apr 12 01:10:50.903519 2026] [:error] [pid 45064:tid 45096] [client 20.111.60.230:38742] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "adqAmpcHBvLyJ6EUhUrwkwAAAUQ"]
[Sun Apr 12 01:10:51.485392 2026] [:error] [pid 45064:tid 45099] [client 20.111.60.230:59543] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "adqAm5cHBvLyJ6EUhUrwlgAAAUc"]
[Sun Apr 12 01:10:52.098446 2026] [:error] [pid 45064:tid 45097] [client 20.111.60.230:48328] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "adqAnJcHBvLyJ6EUhUrwmwAAAUU"]
[Sun Apr 12 01:10:52.748349 2026] [:error] [pid 44698:tid 44710] [client 20.111.60.230:7641] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "adqAnBgoH9UWd-U3D55ZUgAAAIc"]
[Sun Apr 12 01:10:53.505459 2026] [:error] [pid 44701:tid 44779] [client 20.111.60.230:28228] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "adqAnRGZAP4MrlxEPFcs5wAAAEc"]
[Sun Apr 12 01:10:54.178305 2026] [:error] [pid 45064:tid 45108] [client 20.111.60.230:38777] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "adqAnpcHBvLyJ6EUhUrwpwAAAU8"]
[Sun Apr 12 01:10:54.733141 2026] [:error] [pid 45064:tid 45095] [client 20.111.60.230:46547] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "adqAnpcHBvLyJ6EUhUrwqgAAAUM"]
[Sun Apr 12 01:10:55.293273 2026] [:error] [pid 45064:tid 45116] [client 20.111.60.230:46571] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sf.php"] [unique_id "adqAn5cHBvLyJ6EUhUrwrAAAAVc"]
[Sun Apr 12 01:10:55.911587 2026] [:error] [pid 44700:tid 44765] [client 20.111.60.230:38815] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sf.php"] [unique_id "adqAn2ryPgh_uW4QPClb_AAAANU"]
[Sun Apr 12 01:10:56.931450 2026] [:error] [pid 44700:tid 44760] [client 20.111.60.230:25941] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sf.php"] [unique_id "adqAoGryPgh_uW4QPClb_wAAANA"]
[Sun Apr 12 01:10:57.491876 2026] [:error] [pid 44701:tid 44779] [client 20.111.60.230:48327] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sf.php"] [unique_id "adqAoRGZAP4MrlxEPFcs_QAAAEc"]
[Sun Apr 12 01:10:58.053607 2026] [:error] [pid 45064:tid 45099] [client 20.111.60.230:38180] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/no1.php"] [unique_id "adqAopcHBvLyJ6EUhUrwvwAAAUc"]
[Sun Apr 12 01:10:58.576687 2026] [:error] [pid 44700:tid 44761] [client 20.111.60.230:29426] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/no1.php"] [unique_id "adqAomryPgh_uW4QPClcAwAAANE"]
[Sun Apr 12 01:10:59.131688 2026] [:error] [pid 44700:tid 44748] [client 20.111.60.230:25976] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/no1.php"] [unique_id "adqAo2ryPgh_uW4QPClcBQAAAMQ"]
[Sun Apr 12 01:10:59.718075 2026] [:error] [pid 44701:tid 44786] [client 20.111.60.230:7392] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/no1.php"] [unique_id "adqAoxGZAP4MrlxEPFctBwAAAEw"]
[Sun Apr 12 01:11:00.279456 2026] [:error] [pid 45064:tid 45106] [client 20.111.60.230:26953] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/w2025.php"] [unique_id "adqApJcHBvLyJ6EUhUrwyQAAAU0"]
[Sun Apr 12 01:11:00.757311 2026] [:error] [pid 44698:tid 44724] [client 20.111.60.230:45134] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/w2025.php"] [unique_id "adqApBgoH9UWd-U3D55ZbQAAAJU"]
[Sun Apr 12 01:11:01.356499 2026] [:error] [pid 44700:tid 44745] [client 20.111.60.230:7618] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/w2025.php"] [unique_id "adqApWryPgh_uW4QPClcCwAAAME"]
[Sun Apr 12 01:11:02.201187 2026] [:error] [pid 44701:tid 44799] [client 20.111.60.230:46637] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/w2025.php"] [unique_id "adqAphGZAP4MrlxEPFctDgAAAFc"]
[Sun Apr 12 01:11:02.853470 2026] [:error] [pid 44700:tid 44765] [client 20.111.60.230:38803] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fvvff.php"] [unique_id "adqApmryPgh_uW4QPClcDQAAANU"]
[Sun Apr 12 01:11:03.849623 2026] [:error] [pid 45064:tid 45116] [client 20.111.60.230:38809] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fvvff.php"] [unique_id "adqAp5cHBvLyJ6EUhUrw1wAAAVc"]
[Sun Apr 12 01:11:04.608608 2026] [:error] [pid 45064:tid 45097] [client 20.111.60.230:38145] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fvvff.php"] [unique_id "adqAqJcHBvLyJ6EUhUrw2wAAAUU"]
[Sun Apr 12 01:11:12.911782 2026] [:error] [pid 45064:tid 45095] [client 20.111.60.230:59571] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "adqAsJcHBvLyJ6EUhUrxIQAAAUM"]
[Sun Apr 12 01:11:13.512868 2026] [:error] [pid 44700:tid 44754] [client 20.111.60.230:48376] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "adqAsWryPgh_uW4QPClcKAAAAMo"]
[Sun Apr 12 01:11:14.035408 2026] [:error] [pid 45064:tid 45109] [client 20.111.60.230:7626] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "adqAspcHBvLyJ6EUhUrxJAAAAVA"]
[Sun Apr 12 01:11:14.554894 2026] [:error] [pid 45064:tid 45107] [client 20.111.60.230:7636] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "adqAspcHBvLyJ6EUhUrxJgAAAU4"]
[Sun Apr 12 01:11:15.035494 2026] [:error] [pid 45064:tid 45115] [client 20.111.60.230:25272] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/av.php"] [unique_id "adqAs5cHBvLyJ6EUhUrxKgAAAVY"]
[Sun Apr 12 01:11:15.521166 2026] [:error] [pid 45064:tid 45099] [client 20.111.60.230:46641] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/av.php"] [unique_id "adqAs5cHBvLyJ6EUhUrxLgAAAUc"]
[Sun Apr 12 01:11:16.005860 2026] [:error] [pid 45064:tid 45096] [client 20.111.60.230:26984] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/av.php"] [unique_id "adqAtJcHBvLyJ6EUhUrxMQAAAUQ"]
[Sun Apr 12 01:11:16.512276 2026] [:error] [pid 45064:tid 45115] [client 20.111.60.230:25932] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/av.php"] [unique_id "adqAtJcHBvLyJ6EUhUrxOAAAAVY"]
[Sun Apr 12 01:11:17.064798 2026] [:error] [pid 44700:tid 44756] [client 20.111.60.230:38129] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adqAtWryPgh_uW4QPClcMAAAAMw"]
[Sun Apr 12 01:11:17.760472 2026] [:error] [pid 44698:tid 44711] [client 20.111.60.230:25253] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adqAtRgoH9UWd-U3D55ZhQAAAIg"]
[Sun Apr 12 01:11:18.271745 2026] [:error] [pid 44701:tid 44798] [client 20.111.60.230:25234] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adqAthGZAP4MrlxEPFctNQAAAFY"]
[Sun Apr 12 01:11:18.737699 2026] [:error] [pid 45064:tid 45103] [client 20.111.60.230:26475] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adqAtpcHBvLyJ6EUhUrxQwAAAUo"]
[Sun Apr 12 01:11:19.230103 2026] [:error] [pid 45064:tid 45112] [client 20.111.60.230:25264] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bless4.php"] [unique_id "adqAt5cHBvLyJ6EUhUrxRwAAAVM"]
[Sun Apr 12 01:11:19.726830 2026] [:error] [pid 45064:tid 45117] [client 20.111.60.230:48346] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bless4.php"] [unique_id "adqAt5cHBvLyJ6EUhUrxSwAAAVg"]
[Sun Apr 12 01:11:20.238993 2026] [:error] [pid 44698:tid 44724] [client 20.111.60.230:38119] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bless4.php"] [unique_id "adqAuBgoH9UWd-U3D55ZiAAAAJU"]
[Sun Apr 12 01:11:20.721799 2026] [:error] [pid 45064:tid 45099] [client 20.111.60.230:7640] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bless4.php"] [unique_id "adqAuJcHBvLyJ6EUhUrxVAAAAUc"]
[Sun Apr 12 01:11:21.248504 2026] [:error] [pid 45064:tid 45098] [client 20.111.60.230:26983] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "adqAuZcHBvLyJ6EUhUrxWwAAAUY"]
[Sun Apr 12 01:11:21.732584 2026] [:error] [pid 45064:tid 45097] [client 20.111.60.230:38842] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "adqAuZcHBvLyJ6EUhUrxXgAAAUU"]
[Sun Apr 12 01:11:22.225276 2026] [:error] [pid 45064:tid 45112] [client 20.111.60.230:38111] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "adqAupcHBvLyJ6EUhUrxYAAAAVM"]
[Sun Apr 12 01:11:22.699673 2026] [:error] [pid 45064:tid 45103] [client 20.111.60.230:47779] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "adqAupcHBvLyJ6EUhUrxZgAAAUo"]
[Sun Apr 12 01:11:23.315058 2026] [:error] [pid 45064:tid 45107] [client 20.111.60.230:26484] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "adqAu5cHBvLyJ6EUhUrxcAAAAU4"]
[Sun Apr 12 01:11:23.794190 2026] [:error] [pid 45064:tid 45114] [client 20.111.60.230:25273] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "adqAu5cHBvLyJ6EUhUrxcwAAAVU"]
[Sun Apr 12 01:11:24.265835 2026] [:error] [pid 45064:tid 45096] [client 20.111.60.230:26490] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "adqAvJcHBvLyJ6EUhUrxdQAAAUQ"]
[Sun Apr 12 01:11:24.764273 2026] [:error] [pid 45064:tid 45114] [client 20.111.60.230:58256] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "adqAvJcHBvLyJ6EUhUrxfQAAAVU"]
[Sun Apr 12 01:11:25.237720 2026] [:error] [pid 45064:tid 45099] [client 20.111.60.230:43219] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plss3.php"] [unique_id "adqAvZcHBvLyJ6EUhUrxgQAAAUc"]
[Sun Apr 12 01:11:25.730045 2026] [:error] [pid 44701:tid 44791] [client 20.111.60.230:34671] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plss3.php"] [unique_id "adqAvRGZAP4MrlxEPFctPAAAAFA"]
[Sun Apr 12 01:11:26.195497 2026] [:error] [pid 44698:tid 44708] [client 20.111.60.230:43206] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plss3.php"] [unique_id "adqAvhgoH9UWd-U3D55ZjAAAAIU"]
[Sun Apr 12 01:11:26.676951 2026] [:error] [pid 44698:tid 44725] [client 20.111.60.230:29437] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plss3.php"] [unique_id "adqAvhgoH9UWd-U3D55ZjwAAAJY"]
[Sun Apr 12 01:11:27.209665 2026] [:error] [pid 44698:tid 44704] [client 20.111.60.230:26489] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "adqAvxgoH9UWd-U3D55ZkAAAAIE"]
[Sun Apr 12 01:11:27.695331 2026] [:error] [pid 44701:tid 44789] [client 20.111.60.230:43246] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "adqAvxGZAP4MrlxEPFctQAAAAE4"]
[Sun Apr 12 01:11:28.193291 2026] [:error] [pid 44701:tid 44798] [client 20.111.60.230:38080] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "adqAwBGZAP4MrlxEPFctRgAAAFY"]
[Sun Apr 12 01:11:28.665308 2026] [:error] [pid 45064:tid 45115] [client 20.111.60.230:47794] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "adqAwJcHBvLyJ6EUhUrxoQAAAVY"]
[Sun Apr 12 01:11:29.160325 2026] [:error] [pid 45064:tid 45112] [client 20.111.60.230:38134] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "adqAwZcHBvLyJ6EUhUrxqwAAAVM"]
[Sun Apr 12 01:11:29.647409 2026] [:error] [pid 44701:tid 44795] [client 20.111.60.230:26956] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "adqAwRGZAP4MrlxEPFctVAAAAFQ"]
[Sun Apr 12 01:11:30.149310 2026] [:error] [pid 44700:tid 44751] [client 20.111.60.230:27801] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "adqAwmryPgh_uW4QPClcQwAAAMc"]
[Sun Apr 12 01:11:30.619208 2026] [:error] [pid 44698:tid 44721] [client 20.111.60.230:51081] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "adqAwhgoH9UWd-U3D55ZlgAAAJI"]
[Sun Apr 12 01:11:31.132642 2026] [:error] [pid 44700:tid 44758] [client 20.111.60.230:38093] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adqAw2ryPgh_uW4QPClcRQAAAM4"]
[Sun Apr 12 01:11:31.663012 2026] [:error] [pid 45064:tid 45110] [client 20.111.60.230:26449] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adqAw5cHBvLyJ6EUhUrx4wAAAVE"]
[Sun Apr 12 01:11:32.151223 2026] [:error] [pid 45064:tid 45101] [client 20.111.60.230:51126] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adqAxJcHBvLyJ6EUhUrx5wAAAUg"]
[Sun Apr 12 01:11:32.659362 2026] [:error] [pid 45064:tid 45116] [client 20.111.60.230:47765] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "adqAxJcHBvLyJ6EUhUrx9AAAAVc"]
[Sun Apr 12 01:11:33.130428 2026] [:error] [pid 45064:tid 45103] [client 20.111.60.230:25922] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adqAxZcHBvLyJ6EUhUrx-AAAAUo"]
[Sun Apr 12 01:11:33.602439 2026] [:error] [pid 45064:tid 45094] [client 20.111.60.230:7604] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adqAxZcHBvLyJ6EUhUrx_gAAAUI"]
[Sun Apr 12 01:11:34.070992 2026] [:error] [pid 45064:tid 45113] [client 20.111.60.230:43228] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adqAxpcHBvLyJ6EUhUryBAAAAVQ"]
[Sun Apr 12 01:11:34.545608 2026] [:error] [pid 45064:tid 45113] [client 20.111.60.230:38095] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "adqAxpcHBvLyJ6EUhUryCgAAAVQ"]
[Sun Apr 12 01:11:35.028084 2026] [:error] [pid 45064:tid 45094] [client 20.111.60.230:38122] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-update.php"] [unique_id "adqAx5cHBvLyJ6EUhUryDQAAAUI"]
[Sun Apr 12 01:11:35.508730 2026] [:error] [pid 44701:tid 44792] [client 20.111.60.230:58267] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-update.php"] [unique_id "adqAxxGZAP4MrlxEPFctbAAAAFE"]
[Sun Apr 12 01:11:35.976323 2026] [:error] [pid 45064:tid 45105] [client 20.111.60.230:38083] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-update.php"] [unique_id "adqAx5cHBvLyJ6EUhUryFAAAAUw"]
[Sun Apr 12 01:11:36.442791 2026] [:error] [pid 44701:tid 44791] [client 20.111.60.230:47801] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-update.php"] [unique_id "adqAyBGZAP4MrlxEPFctcQAAAFA"]
[Sun Apr 12 01:11:36.924881 2026] [:error] [pid 45064:tid 45095] [client 20.111.60.230:24169] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "adqAyJcHBvLyJ6EUhUryGwAAAUM"]
[Sun Apr 12 01:11:37.409127 2026] [:error] [pid 45064:tid 45112] [client 20.111.60.230:7913] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "adqAyZcHBvLyJ6EUhUryJAAAAVM"]
[Sun Apr 12 01:11:37.897103 2026] [:error] [pid 44701:tid 44790] [client 20.111.60.230:43247] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "adqAyRGZAP4MrlxEPFctdQAAAE8"]
[Sun Apr 12 01:11:38.371154 2026] [:error] [pid 44698:tid 44711] [client 20.111.60.230:58255] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "adqAyhgoH9UWd-U3D55ZpgAAAIg"]
[Sun Apr 12 01:11:38.836601 2026] [:error] [pid 44700:tid 44757] [client 20.111.60.230:7900] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "adqAymryPgh_uW4QPClcVQAAAM0"]
[Sun Apr 12 01:11:39.320526 2026] [:error] [pid 45064:tid 45101] [client 20.111.60.230:58282] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "adqAy5cHBvLyJ6EUhUryLwAAAUg"]
[Sun Apr 12 01:11:39.806292 2026] [:error] [pid 44698:tid 44704] [client 20.111.60.230:43262] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "adqAyxgoH9UWd-U3D55ZsQAAAIE"]
[Sun Apr 12 01:11:40.293967 2026] [:error] [pid 44698:tid 44721] [client 20.111.60.230:27992] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "adqAzBgoH9UWd-U3D55ZtQAAAJI"]
[Sun Apr 12 01:11:40.812229 2026] [:error] [pid 44700:tid 44760] [client 20.111.60.230:51130] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adqAzGryPgh_uW4QPClcWwAAANA"]
[Sun Apr 12 01:11:41.284205 2026] [:error] [pid 45064:tid 45108] [client 20.111.60.230:29412] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adqAzZcHBvLyJ6EUhUryPwAAAU8"]
[Sun Apr 12 01:11:41.774515 2026] [:error] [pid 44698:tid 44706] [client 20.111.60.230:43256] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adqAzRgoH9UWd-U3D55ZxAAAAIM"]
[Sun Apr 12 01:11:42.235515 2026] [:error] [pid 44698:tid 44717] [client 20.111.60.230:38088] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "adqAzhgoH9UWd-U3D55ZyQAAAI4"]
[Sun Apr 12 01:11:42.700051 2026] [:error] [pid 44700:tid 44749] [client 20.111.60.230:56421] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "adqAzmryPgh_uW4QPClcXgAAAMU"]
[Sun Apr 12 01:11:43.189688 2026] [:error] [pid 45064:tid 45109] [client 20.111.60.230:25268] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "adqAz5cHBvLyJ6EUhUryWQAAAVA"]
[Sun Apr 12 01:11:43.696644 2026] [:error] [pid 44701:tid 44791] [client 20.111.60.230:51096] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "adqAzxGZAP4MrlxEPFctlgAAAFA"]
[Sun Apr 12 01:11:44.176741 2026] [:error] [pid 44701:tid 44799] [client 20.111.60.230:7901] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "adqA0BGZAP4MrlxEPFctnQAAAFc"]
[Sun Apr 12 01:11:44.640251 2026] [:error] [pid 44700:tid 44764] [client 20.111.60.230:26500] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "adqA0GryPgh_uW4QPClcYAAAANQ"]
[Sun Apr 12 01:11:45.126015 2026] [:error] [pid 44701:tid 44783] [client 20.111.60.230:38722] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "adqA0RGZAP4MrlxEPFctpwAAAEo"]
[Sun Apr 12 01:11:45.587190 2026] [:error] [pid 44701:tid 44782] [client 20.111.60.230:24165] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "adqA0RGZAP4MrlxEPFctrgAAAEk"]
[Sun Apr 12 01:11:46.056672 2026] [:error] [pid 44700:tid 44767] [client 20.111.60.230:28013] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "adqA0mryPgh_uW4QPClcYwAAANc"]
[Sun Apr 12 01:11:46.521698 2026] [:error] [pid 44698:tid 44704] [client 20.111.60.230:27808] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "adqA0hgoH9UWd-U3D55Z3gAAAIE"]
[Sun Apr 12 01:11:47.002133 2026] [:error] [pid 45064:tid 45099] [client 20.111.60.230:47750] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "adqA05cHBvLyJ6EUhUryggAAAUc"]
[Sun Apr 12 01:11:47.477566 2026] [:error] [pid 45064:tid 45093] [client 20.111.60.230:47767] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "adqA05cHBvLyJ6EUhUryiwAAAUE"]
[Sun Apr 12 01:11:47.966949 2026] [:error] [pid 45064:tid 45113] [client 20.111.60.230:47766] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "adqA05cHBvLyJ6EUhUrykgAAAVQ"]
[Sun Apr 12 01:11:48.444837 2026] [:error] [pid 45064:tid 45117] [client 20.111.60.230:53583] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "adqA1JcHBvLyJ6EUhUrymQAAAVg"]
[Sun Apr 12 01:11:48.948191 2026] [:error] [pid 45064:tid 45111] [client 20.111.60.230:58255] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "adqA1JcHBvLyJ6EUhUryngAAAVI"]
[Sun Apr 12 01:11:49.437540 2026] [:error] [pid 44701:tid 44791] [client 20.111.60.230:26498] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "adqA1RGZAP4MrlxEPFcttwAAAFA"]
[Sun Apr 12 01:11:49.908075 2026] [:error] [pid 45064:tid 45095] [client 20.111.60.230:56434] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "adqA1ZcHBvLyJ6EUhUryogAAAUM"]
[Sun Apr 12 01:11:50.400742 2026] [:error] [pid 45064:tid 45107] [client 20.111.60.230:56387] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "adqA1pcHBvLyJ6EUhUrypQAAAU4"]
[Sun Apr 12 01:11:50.927661 2026] [:error] [pid 45064:tid 45110] [client 20.111.60.230:7906] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "adqA1pcHBvLyJ6EUhUryqQAAAVE"]
[Sun Apr 12 01:11:51.400155 2026] [:error] [pid 44698:tid 44724] [client 20.111.60.230:26550] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "adqA1xgoH9UWd-U3D55Z5gAAAJU"]
[Sun Apr 12 01:11:51.889957 2026] [:error] [pid 45064:tid 45095] [client 20.111.60.230:53626] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "adqA15cHBvLyJ6EUhUrysAAAAUM"]
[Sun Apr 12 01:11:52.364068 2026] [:error] [pid 45064:tid 45094] [client 20.111.60.230:51078] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "adqA2JcHBvLyJ6EUhUrytAAAAUI"]
[Sun Apr 12 01:11:52.936045 2026] [:error] [pid 45064:tid 45103] [client 20.111.60.230:43210] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "adqA2JcHBvLyJ6EUhUryuQAAAUo"]
[Sun Apr 12 01:11:53.415607 2026] [:error] [pid 44698:tid 44712] [client 20.111.60.230:47754] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "adqA2RgoH9UWd-U3D55Z8wAAAIk"]
[Sun Apr 12 01:11:53.917666 2026] [:error] [pid 44698:tid 44711] [client 20.111.60.230:25262] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "adqA2RgoH9UWd-U3D55Z-AAAAIg"]
[Sun Apr 12 01:11:54.394816 2026] [:error] [pid 45064:tid 45101] [client 20.111.60.230:43216] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adqA2pcHBvLyJ6EUhUryvAAAAUg"]
[Sun Apr 12 01:11:54.878316 2026] [:error] [pid 45064:tid 45096] [client 20.111.60.230:38099] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adqA2pcHBvLyJ6EUhUryvwAAAUQ"]
[Sun Apr 12 01:11:55.349250 2026] [:error] [pid 44700:tid 44760] [client 20.111.60.230:28023] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adqA22ryPgh_uW4QPClcZgAAANA"]
[Sun Apr 12 01:11:55.831976 2026] [:error] [pid 44700:tid 44750] [client 20.111.60.230:58251] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "adqA22ryPgh_uW4QPClcawAAAMY"]
[Sun Apr 12 01:11:56.317679 2026] [:error] [pid 45064:tid 45108] [client 20.111.60.230:26499] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "adqA3JcHBvLyJ6EUhUryxwAAAU8"]
[Sun Apr 12 01:11:56.810693 2026] [:error] [pid 45064:tid 45115] [client 20.111.60.230:25225] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "adqA3JcHBvLyJ6EUhUryyQAAAVY"]
[Sun Apr 12 01:11:57.300945 2026] [:error] [pid 45064:tid 45114] [client 20.111.60.230:38117] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "adqA3ZcHBvLyJ6EUhUryywAAAVU"]
[Sun Apr 12 01:11:57.781665 2026] [:error] [pid 45064:tid 45112] [client 20.111.60.230:24141] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "adqA3ZcHBvLyJ6EUhUryzQAAAVM"]
[Sun Apr 12 01:11:58.274287 2026] [:error] [pid 44698:tid 44714] [client 20.111.60.230:46612] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "adqA3hgoH9UWd-U3D55Z_QAAAIs"]
[Sun Apr 12 01:11:58.750998 2026] [:error] [pid 45064:tid 45108] [client 20.111.60.230:28001] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "adqA3pcHBvLyJ6EUhUry0wAAAU8"]
[Sun Apr 12 01:11:59.285024 2026] [:error] [pid 44701:tid 44777] [client 20.111.60.230:43230] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "adqA3xGZAP4MrlxEPFctwAAAAEU"]
[Sun Apr 12 01:11:59.796887 2026] [:error] [pid 44701:tid 44783] [client 20.111.60.230:25273] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "adqA3xGZAP4MrlxEPFctxAAAAEo"]
[Sun Apr 12 01:12:00.274400 2026] [:error] [pid 45064:tid 45109] [client 20.111.60.230:7919] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/we.php"] [unique_id "adqA4JcHBvLyJ6EUhUry1gAAAVA"]
[Sun Apr 12 01:12:00.762328 2026] [:error] [pid 44701:tid 44791] [client 20.111.60.230:65459] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/we.php"] [unique_id "adqA4BGZAP4MrlxEPFctxgAAAFA"]
[Sun Apr 12 01:12:01.255348 2026] [:error] [pid 44700:tid 44758] [client 20.111.60.230:27818] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/we.php"] [unique_id "adqA4WryPgh_uW4QPClcfwAAAM4"]
[Sun Apr 12 01:12:01.738021 2026] [:error] [pid 44701:tid 44787] [client 20.111.60.230:43211] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/we.php"] [unique_id "adqA4RGZAP4MrlxEPFct0QAAAE0"]
[Sun Apr 12 01:12:02.220299 2026] [:error] [pid 44700:tid 44767] [client 20.111.60.230:51063] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "adqA4mryPgh_uW4QPClcgQAAANc"]
[Sun Apr 12 01:12:02.719933 2026] [:error] [pid 45064:tid 45112] [client 20.111.60.230:56426] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "adqA4pcHBvLyJ6EUhUry2wAAAVM"]
[Sun Apr 12 01:12:03.253337 2026] [:error] [pid 44698:tid 44722] [client 20.111.60.230:43200] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "adqA4xgoH9UWd-U3D55aCwAAAJM"]
[Sun Apr 12 01:12:03.740461 2026] [:error] [pid 44698:tid 44714] [client 20.111.60.230:28769] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "adqA4xgoH9UWd-U3D55aDQAAAIs"]
[Sun Apr 12 01:12:04.218019 2026] [:error] [pid 44700:tid 44749] [client 20.111.60.230:65462] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "adqA5GryPgh_uW4QPClcjQAAAMU"]
[Sun Apr 12 01:12:04.685034 2026] [:error] [pid 44701:tid 44800] [client 20.111.60.230:27778] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "adqA5BGZAP4MrlxEPFct5AAAAFg"]
[Sun Apr 12 01:12:05.177081 2026] [:error] [pid 45064:tid 45099] [client 20.111.60.230:26780] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "adqA5ZcHBvLyJ6EUhUry4QAAAUc"]
[Sun Apr 12 01:12:05.751952 2026] [:error] [pid 44698:tid 44717] [client 20.111.60.230:65427] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "adqA5RgoH9UWd-U3D55aEgAAAI4"]
[Sun Apr 12 01:12:06.234710 2026] [:error] [pid 44701:tid 44799] [client 20.111.60.230:27798] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-michan.php"] [unique_id "adqA5hGZAP4MrlxEPFct7AAAAFc"]
[Sun Apr 12 01:12:06.749242 2026] [:error] [pid 44701:tid 44792] [client 20.111.60.230:51064] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-michan.php"] [unique_id "adqA5hGZAP4MrlxEPFct7gAAAFE"]
[Sun Apr 12 01:12:07.223480 2026] [:error] [pid 45064:tid 45114] [client 20.111.60.230:27989] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-michan.php"] [unique_id "adqA55cHBvLyJ6EUhUry6gAAAVU"]
[Sun Apr 12 01:12:07.743809 2026] [:error] [pid 45064:tid 45094] [client 20.111.60.230:51044] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-michan.php"] [unique_id "adqA55cHBvLyJ6EUhUry7gAAAUI"]
[Sun Apr 12 01:12:08.217151 2026] [:error] [pid 44698:tid 44722] [client 20.111.60.230:51070] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "adqA6BgoH9UWd-U3D55aFwAAAJM"]
[Sun Apr 12 01:12:08.719125 2026] [:error] [pid 44701:tid 44774] [client 20.111.60.230:53594] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "adqA6BGZAP4MrlxEPFct8wAAAEI"]
[Sun Apr 12 01:12:09.228819 2026] [:error] [pid 44700:tid 44748] [client 20.111.60.230:27985] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "adqA6WryPgh_uW4QPClcpQAAAMQ"]
[Sun Apr 12 01:12:09.717684 2026] [:error] [pid 44698:tid 44723] [client 20.111.60.230:51104] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "adqA6RgoH9UWd-U3D55aHQAAAJQ"]
[Sun Apr 12 01:12:10.210439 2026] [:error] [pid 45064:tid 45110] [client 20.111.60.230:51020] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adqA6pcHBvLyJ6EUhUry-QAAAVE"]
[Sun Apr 12 01:12:10.699493 2026] [:error] [pid 45064:tid 45105] [client 20.111.60.230:29500] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adqA6pcHBvLyJ6EUhUry_gAAAUw"]
[Sun Apr 12 01:12:11.274563 2026] [:error] [pid 45064:tid 45116] [client 20.111.60.230:49069] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adqA65cHBvLyJ6EUhUrzAwAAAVc"]
[Sun Apr 12 01:12:11.752540 2026] [:error] [pid 44701:tid 44790] [client 20.111.60.230:28777] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "adqA6xGZAP4MrlxEPFct-QAAAE8"]
[Sun Apr 12 01:12:19.568411 2026] [:error] [pid 44700:tid 44754] [client 20.111.60.230:53628] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "adqA82ryPgh_uW4QPClc0AAAAMo"]
[Sun Apr 12 01:12:20.036073 2026] [:error] [pid 44698:tid 44704] [client 20.111.60.230:43314] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "adqA9BgoH9UWd-U3D55aLwAAAIE"]
[Sun Apr 12 01:12:20.510680 2026] [:error] [pid 44701:tid 44798] [client 20.111.60.230:30226] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "adqA9BGZAP4MrlxEPFcuCgAAAFY"]
[Sun Apr 12 01:12:20.998487 2026] [:error] [pid 45064:tid 45103] [client 20.111.60.230:44523] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "adqA9JcHBvLyJ6EUhUrzNAAAAUo"]
[Sun Apr 12 01:12:21.497596 2026] [:error] [pid 44701:tid 44791] [client 20.111.60.230:26798] [client 20.111.60.230] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "adqA9RGZAP4MrlxEPFcuDwAAAFA"]
[Sun Apr 12 01:12:21.983523 2026] [:error] [pid 44698:tid 44727] [client 20.111.60.230:25013] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "adqA9RgoH9UWd-U3D55aNQAAAJg"]
[Sun Apr 12 01:12:22.457874 2026] [:error] [pid 44700:tid 44756] [client 20.111.60.230:43306] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "adqA9mryPgh_uW4QPClc1gAAAMw"]
[Sun Apr 12 01:12:22.981427 2026] [:error] [pid 44698:tid 44703] [client 20.111.60.230:26815] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "adqA9hgoH9UWd-U3D55aOAAAAIA"]
[Sun Apr 12 01:12:23.473887 2026] [:error] [pid 45064:tid 45106] [client 20.111.60.230:41383] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "adqA95cHBvLyJ6EUhUrzQQAAAU0"]
[Sun Apr 12 01:12:23.938979 2026] [:error] [pid 44698:tid 44721] [client 20.111.60.230:29454] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adqA9xgoH9UWd-U3D55aOwAAAJI"]
[Sun Apr 12 01:12:24.416214 2026] [:error] [pid 44701:tid 44798] [client 20.111.60.230:24962] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adqA-BGZAP4MrlxEPFcuFwAAAFY"]
[Sun Apr 12 01:12:24.925284 2026] [:error] [pid 44700:tid 44758] [client 20.111.60.230:43309] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adqA-GryPgh_uW4QPClc3AAAAM4"]
[Sun Apr 12 01:12:25.399733 2026] [:error] [pid 44700:tid 44750] [client 20.111.60.230:52332] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "adqA-WryPgh_uW4QPClc3gAAAMY"]
[Sun Apr 12 01:12:25.893768 2026] [:error] [pid 45064:tid 45097] [client 20.111.60.230:43319] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adqA-ZcHBvLyJ6EUhUrzTAAAAUU"]
[Sun Apr 12 01:12:26.383423 2026] [:error] [pid 44700:tid 44748] [client 20.111.60.230:24960] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adqA-mryPgh_uW4QPClc5gAAAMQ"]
[Sun Apr 12 01:12:26.856102 2026] [:error] [pid 44701:tid 44778] [client 20.111.60.230:41379] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adqA-hGZAP4MrlxEPFcuHgAAAEY"]
[Sun Apr 12 01:12:27.330799 2026] [:error] [pid 44701:tid 44793] [client 20.111.60.230:29827] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "adqA-xGZAP4MrlxEPFcuIAAAAFI"]
[Sun Apr 12 01:12:27.806170 2026] [:error] [pid 44701:tid 44785] [client 20.111.60.230:29877] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/prv8.php"] [unique_id "adqA-xGZAP4MrlxEPFcuJgAAAEs"]
[Sun Apr 12 01:12:28.293560 2026] [:error] [pid 44700:tid 44768] [client 20.111.60.230:29853] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/prv8.php"] [unique_id "adqA_GryPgh_uW4QPClc6wAAANg"]
[Sun Apr 12 01:12:28.763072 2026] [:error] [pid 45064:tid 45108] [client 20.111.60.230:34094] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/prv8.php"] [unique_id "adqA_JcHBvLyJ6EUhUrzVQAAAU8"]
[Sun Apr 12 01:12:29.252869 2026] [:error] [pid 45064:tid 45104] [client 20.111.60.230:30235] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/prv8.php"] [unique_id "adqA_ZcHBvLyJ6EUhUrzWQAAAUs"]
[Sun Apr 12 01:12:29.738015 2026] [:error] [pid 45064:tid 45110] [client 20.111.60.230:24980] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/k.php"] [unique_id "adqA_ZcHBvLyJ6EUhUrzXgAAAVE"]
[Sun Apr 12 01:12:30.214045 2026] [:error] [pid 44698:tid 44713] [client 20.111.60.230:52336] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/k.php"] [unique_id "adqA_hgoH9UWd-U3D55aRAAAAIo"]
[Sun Apr 12 01:12:30.736424 2026] [:error] [pid 44701:tid 44778] [client 20.111.60.230:30221] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/k.php"] [unique_id "adqA_hGZAP4MrlxEPFcuLQAAAEY"]
[Sun Apr 12 01:12:31.211726 2026] [:error] [pid 44701:tid 44776] [client 20.111.60.230:27284] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/k.php"] [unique_id "adqA_xGZAP4MrlxEPFcuMAAAAEQ"]
[Sun Apr 12 01:12:31.705774 2026] [:error] [pid 44701:tid 44785] [client 20.111.60.230:24982] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "adqA_xGZAP4MrlxEPFcuMwAAAEs"]
[Sun Apr 12 01:12:32.188578 2026] [:error] [pid 44700:tid 44747] [client 20.111.60.230:8002] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "adqBAGryPgh_uW4QPClc7wAAAMM"]
[Sun Apr 12 01:12:32.662905 2026] [:error] [pid 44701:tid 44799] [client 20.111.60.230:49083] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "adqBABGZAP4MrlxEPFcuNwAAAFc"]
[Sun Apr 12 01:12:33.143840 2026] [:error] [pid 45064:tid 45104] [client 20.111.60.230:8008] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "adqBAZcHBvLyJ6EUhUrzcwAAAUs"]
[Sun Apr 12 01:12:33.614869 2026] [:error] [pid 45064:tid 45105] [client 20.111.60.230:27317] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "adqBAZcHBvLyJ6EUhUrzdQAAAUw"]
[Sun Apr 12 01:12:34.090178 2026] [:error] [pid 45064:tid 45094] [client 20.111.60.230:30215] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "adqBApcHBvLyJ6EUhUrzewAAAUI"]
[Sun Apr 12 01:12:34.561895 2026] [:error] [pid 44700:tid 44744] [client 20.111.60.230:29855] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "adqBAmryPgh_uW4QPClc8QAAAMA"]
[Sun Apr 12 01:12:35.044492 2026] [:error] [pid 45064:tid 45098] [client 20.111.60.230:25932] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "adqBA5cHBvLyJ6EUhUrzggAAAUY"]
[Sun Apr 12 01:12:35.535107 2026] [:error] [pid 45064:tid 45099] [client 20.111.60.230:43291] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/in.php"] [unique_id "adqBA5cHBvLyJ6EUhUrzgwAAAUc"]
[Sun Apr 12 01:12:36.017011 2026] [:error] [pid 44700:tid 44752] [client 20.111.60.230:41394] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/in.php"] [unique_id "adqBBGryPgh_uW4QPClc8gAAAMg"]
[Sun Apr 12 01:12:36.489114 2026] [:error] [pid 44701:tid 44782] [client 20.111.60.230:41398] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/in.php"] [unique_id "adqBBBGZAP4MrlxEPFcuRAAAAEk"]
[Sun Apr 12 01:12:36.967450 2026] [:error] [pid 44701:tid 44799] [client 20.111.60.230:27305] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/in.php"] [unique_id "adqBBBGZAP4MrlxEPFcuSQAAAFc"]
[Sun Apr 12 01:12:37.443338 2026] [:error] [pid 44701:tid 44771] [client 20.111.60.230:35783] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "adqBBRGZAP4MrlxEPFcuSgAAAEA"]
[Sun Apr 12 01:12:37.933090 2026] [:error] [pid 45064:tid 45117] [client 20.111.60.230:8023] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "adqBBZcHBvLyJ6EUhUrzkgAAAVg"]
[Sun Apr 12 01:12:38.419823 2026] [:error] [pid 45064:tid 45094] [client 20.111.60.230:39476] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "adqBBpcHBvLyJ6EUhUrzlQAAAUI"]
[Sun Apr 12 01:12:38.916113 2026] [:error] [pid 44701:tid 44776] [client 20.111.60.230:43289] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "adqBBhGZAP4MrlxEPFcuTwAAAEQ"]
[Sun Apr 12 01:12:39.435471 2026] [:error] [pid 44701:tid 44785] [client 20.111.60.230:39458] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "adqBBxGZAP4MrlxEPFcuVAAAAEs"]
[Sun Apr 12 01:12:39.912917 2026] [:error] [pid 44701:tid 44799] [client 20.111.60.230:7859] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "adqBBxGZAP4MrlxEPFcuWgAAAFc"]
[Sun Apr 12 01:12:40.406765 2026] [:error] [pid 44701:tid 44792] [client 20.111.60.230:8018] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "adqBCBGZAP4MrlxEPFcuXgAAAFE"]
[Sun Apr 12 01:12:40.874047 2026] [:error] [pid 44701:tid 44793] [client 20.111.60.230:7214] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "adqBCBGZAP4MrlxEPFcuYAAAAFI"]
[Sun Apr 12 01:12:41.352016 2026] [:error] [pid 44698:tid 44704] [client 20.111.60.230:40653] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "adqBCRgoH9UWd-U3D55aVQAAAIE"]
[Sun Apr 12 01:12:41.829208 2026] [:error] [pid 44698:tid 44712] [client 20.111.60.230:39378] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "adqBCRgoH9UWd-U3D55aWAAAAIk"]
[Sun Apr 12 01:12:42.295208 2026] [:error] [pid 44701:tid 44798] [client 20.111.60.230:29835] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "adqBChGZAP4MrlxEPFcuaAAAAFY"]
[Sun Apr 12 01:12:42.786017 2026] [:error] [pid 45064:tid 45099] [client 20.111.60.230:39449] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "adqBCpcHBvLyJ6EUhUrzpQAAAUc"]
[Sun Apr 12 01:12:43.273320 2026] [:error] [pid 44701:tid 44774] [client 20.111.60.230:7203] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bengi.php"] [unique_id "adqBCxGZAP4MrlxEPFcucgAAAEI"]
[Sun Apr 12 01:12:43.754666 2026] [:error] [pid 44698:tid 44716] [client 20.111.60.230:56952] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bengi.php"] [unique_id "adqBCxgoH9UWd-U3D55aWgAAAI0"]
[Sun Apr 12 01:12:44.386434 2026] [:error] [pid 44698:tid 44707] [client 20.111.60.230:37507] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bengi.php"] [unique_id "adqBDBgoH9UWd-U3D55aXAAAAIQ"]
[Sun Apr 12 01:12:44.882103 2026] [:error] [pid 44698:tid 44708] [client 20.111.60.230:7231] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bengi.php"] [unique_id "adqBDBgoH9UWd-U3D55aXgAAAIU"]
[Sun Apr 12 01:12:45.378265 2026] [:error] [pid 44700:tid 44745] [client 20.111.60.230:27218] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adqBDWryPgh_uW4QPClc9gAAAME"]
[Sun Apr 12 01:12:45.878595 2026] [:error] [pid 44700:tid 44749] [client 20.111.60.230:37529] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adqBDWryPgh_uW4QPClc9wAAAMU"]
[Sun Apr 12 01:12:46.354131 2026] [:error] [pid 44698:tid 44718] [client 20.111.60.230:7232] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adqBDhgoH9UWd-U3D55aYgAAAI8"]
[Sun Apr 12 01:12:46.856685 2026] [:error] [pid 44698:tid 44705] [client 20.111.60.230:37526] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "adqBDhgoH9UWd-U3D55aZAAAAII"]
[Sun Apr 12 01:12:47.356729 2026] [:error] [pid 45064:tid 45109] [client 20.111.60.230:39389] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "adqBD5cHBvLyJ6EUhUrztQAAAVA"]
[Sun Apr 12 01:12:47.843352 2026] [:error] [pid 44701:tid 44775] [client 20.111.60.230:27244] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "adqBDxGZAP4MrlxEPFcuhgAAAEM"]
[Sun Apr 12 01:12:48.326477 2026] [:error] [pid 44701:tid 44798] [client 20.111.60.230:37565] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "adqBEBGZAP4MrlxEPFcuhwAAAFY"]
[Sun Apr 12 01:12:48.810751 2026] [:error] [pid 45064:tid 45111] [client 20.111.60.230:26024] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "adqBEJcHBvLyJ6EUhUrzuQAAAVI"]
[Sun Apr 12 01:12:49.306886 2026] [:error] [pid 45064:tid 45110] [client 20.111.60.230:7845] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alfashell.php"] [unique_id "adqBEZcHBvLyJ6EUhUrzuwAAAVE"]
[Sun Apr 12 01:12:49.784061 2026] [:error] [pid 45064:tid 45116] [client 20.111.60.230:7180] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alfashell.php"] [unique_id "adqBEZcHBvLyJ6EUhUrzwAAAAVc"]
[Sun Apr 12 01:12:50.286448 2026] [:error] [pid 44701:tid 44783] [client 20.111.60.230:28541] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alfashell.php"] [unique_id "adqBEhGZAP4MrlxEPFcujQAAAEo"]
[Sun Apr 12 01:12:50.790677 2026] [:error] [pid 44701:tid 44773] [client 20.111.60.230:40666] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alfashell.php"] [unique_id "adqBEhGZAP4MrlxEPFcujgAAAEE"]
[Sun Apr 12 01:12:51.276573 2026] [:error] [pid 44701:tid 44781] [client 20.111.60.230:51728] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "adqBExGZAP4MrlxEPFcukAAAAEg"]
[Sun Apr 12 01:12:51.770805 2026] [:error] [pid 45064:tid 45110] [client 20.111.60.230:56916] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "adqBE5cHBvLyJ6EUhUrzyQAAAVE"]
[Sun Apr 12 01:12:52.245808 2026] [:error] [pid 45064:tid 45106] [client 20.111.60.230:7813] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "adqBFJcHBvLyJ6EUhUrzzAAAAU0"]
[Sun Apr 12 01:12:52.747987 2026] [:error] [pid 44701:tid 44779] [client 20.111.60.230:40699] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "adqBFBGZAP4MrlxEPFcukQAAAEc"]
[Sun Apr 12 01:12:53.238472 2026] [:error] [pid 44701:tid 44778] [client 20.111.60.230:65384] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "adqBFRGZAP4MrlxEPFcukgAAAEY"]
[Sun Apr 12 01:12:53.724847 2026] [:error] [pid 44701:tid 44785] [client 20.111.60.230:65382] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "adqBFRGZAP4MrlxEPFculAAAAEs"]
[Sun Apr 12 01:12:54.206933 2026] [:error] [pid 44698:tid 44707] [client 20.111.60.230:65403] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "adqBFhgoH9UWd-U3D55aeAAAAIQ"]
[Sun Apr 12 01:12:54.694727 2026] [:error] [pid 44700:tid 44764] [client 20.111.60.230:36990] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "adqBFmryPgh_uW4QPCldBAAAANQ"]
[Sun Apr 12 01:12:55.195111 2026] [:error] [pid 44701:tid 44799] [client 20.111.60.230:56915] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "adqBFxGZAP4MrlxEPFcumAAAAFc"]
[Sun Apr 12 01:12:55.695792 2026] [:error] [pid 44698:tid 44711] [client 20.111.60.230:65378] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "adqBFxgoH9UWd-U3D55afAAAAIg"]
[Sun Apr 12 01:12:56.183824 2026] [:error] [pid 44701:tid 44792] [client 20.111.60.230:42022] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "adqBGBGZAP4MrlxEPFcunAAAAFE"]
[Sun Apr 12 01:12:56.663819 2026] [:error] [pid 44701:tid 44773] [client 20.111.60.230:49805] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "adqBGBGZAP4MrlxEPFcungAAAEE"]
[Sun Apr 12 01:12:57.153435 2026] [:error] [pid 44701:tid 44774] [client 20.111.60.230:28290] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/g.php"] [unique_id "adqBGRGZAP4MrlxEPFcuogAAAEI"]
[Sun Apr 12 01:12:57.642020 2026] [:error] [pid 45064:tid 45110] [client 20.111.60.230:28495] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/g.php"] [unique_id "adqBGZcHBvLyJ6EUhUrz1AAAAVE"]
[Sun Apr 12 01:12:58.159469 2026] [:error] [pid 44698:tid 44715] [client 20.111.60.230:45789] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/g.php"] [unique_id "adqBGhgoH9UWd-U3D55agAAAAIw"]
[Sun Apr 12 01:12:58.671364 2026] [:error] [pid 45064:tid 45115] [client 20.111.60.230:43967] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/g.php"] [unique_id "adqBGpcHBvLyJ6EUhUrz2gAAAVY"]
[Sun Apr 12 01:12:59.166906 2026] [:error] [pid 44700:tid 44767] [client 20.111.60.230:28546] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "adqBG2ryPgh_uW4QPCldEQAAANc"]
[Sun Apr 12 01:12:59.656995 2026] [:error] [pid 45064:tid 45097] [client 20.111.60.230:28547] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "adqBG5cHBvLyJ6EUhUrz4wAAAUU"]
[Sun Apr 12 01:13:00.149093 2026] [:error] [pid 45064:tid 45115] [client 20.111.60.230:34736] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "adqBHJcHBvLyJ6EUhUrz6AAAAVY"]
[Sun Apr 12 01:13:00.630239 2026] [:error] [pid 44698:tid 44716] [client 20.111.60.230:25514] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "adqBHBgoH9UWd-U3D55ahQAAAI0"]
[Sun Apr 12 01:13:01.109012 2026] [:error] [pid 44700:tid 44746] [client 20.111.60.230:25473] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "adqBHWryPgh_uW4QPCldFAAAAMI"]
[Sun Apr 12 01:13:01.585446 2026] [:error] [pid 44700:tid 44752] [client 20.111.60.230:42010] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "adqBHWryPgh_uW4QPCldGAAAAMg"]
[Sun Apr 12 01:13:02.080101 2026] [:error] [pid 44700:tid 44751] [client 20.111.60.230:28545] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "adqBHmryPgh_uW4QPCldGgAAAMc"]
[Sun Apr 12 01:13:02.585279 2026] [:error] [pid 44700:tid 44762] [client 20.111.60.230:27729] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "adqBHmryPgh_uW4QPCldHQAAANI"]
[Sun Apr 12 01:13:03.064573 2026] [:error] [pid 44700:tid 44746] [client 20.111.60.230:43925] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ew.php"] [unique_id "adqBH2ryPgh_uW4QPCldIgAAAMI"]
[Sun Apr 12 01:13:03.562537 2026] [:error] [pid 44698:tid 44712] [client 20.111.60.230:49853] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ew.php"] [unique_id "adqBHxgoH9UWd-U3D55aiAAAAIk"]
[Sun Apr 12 01:13:04.064678 2026] [:error] [pid 44698:tid 44725] [client 20.111.60.230:45772] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ew.php"] [unique_id "adqBIBgoH9UWd-U3D55aiQAAAJY"]
[Sun Apr 12 01:13:04.542940 2026] [:error] [pid 44701:tid 44778] [client 20.111.60.230:34724] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ew.php"] [unique_id "adqBIBGZAP4MrlxEPFcusgAAAEY"]
[Sun Apr 12 01:13:05.032441 2026] [:error] [pid 44698:tid 44709] [client 20.111.60.230:49830] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "adqBIRgoH9UWd-U3D55aigAAAIY"]
[Sun Apr 12 01:13:05.533980 2026] [:error] [pid 44698:tid 44718] [client 20.111.60.230:25272] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "adqBIRgoH9UWd-U3D55ajQAAAI8"]
[Sun Apr 12 01:13:06.019688 2026] [:error] [pid 44698:tid 44715] [client 20.111.60.230:53031] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "adqBIhgoH9UWd-U3D55akQAAAIw"]
[Sun Apr 12 01:13:06.504046 2026] [:error] [pid 44700:tid 44744] [client 20.111.60.230:7298] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "adqBImryPgh_uW4QPCldMQAAAMA"]
[Sun Apr 12 01:13:06.995851 2026] [:error] [pid 44698:tid 44716] [client 20.111.60.230:43918] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class19.php"] [unique_id "adqBIhgoH9UWd-U3D55alAAAAI0"]
[Sun Apr 12 01:13:07.491696 2026] [:error] [pid 44700:tid 44756] [client 20.111.60.230:25508] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class19.php"] [unique_id "adqBI2ryPgh_uW4QPCldOAAAAMw"]
[Sun Apr 12 01:13:07.968204 2026] [:error] [pid 44701:tid 44792] [client 20.111.60.230:45791] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class19.php"] [unique_id "adqBIxGZAP4MrlxEPFcuwQAAAFE"]
[Sun Apr 12 01:13:08.451127 2026] [:error] [pid 45064:tid 45095] [client 20.111.60.230:53032] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class19.php"] [unique_id "adqBJJcHBvLyJ6EUhUrz9gAAAUM"]
[Sun Apr 12 01:13:08.939003 2026] [:error] [pid 44700:tid 44753] [client 20.111.60.230:8184] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class20.php"] [unique_id "adqBJGryPgh_uW4QPCldOwAAAMk"]
[Sun Apr 12 01:13:09.428300 2026] [:error] [pid 44698:tid 44707] [client 20.111.60.230:45822] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class20.php"] [unique_id "adqBJRgoH9UWd-U3D55alwAAAIQ"]
[Sun Apr 12 01:13:09.912404 2026] [:error] [pid 44700:tid 44744] [client 20.111.60.230:49774] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class20.php"] [unique_id "adqBJWryPgh_uW4QPCldPwAAAMA"]
[Sun Apr 12 01:13:10.393434 2026] [:error] [pid 44701:tid 44796] [client 20.111.60.230:41329] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class20.php"] [unique_id "adqBJhGZAP4MrlxEPFcuzAAAAFU"]
[Sun Apr 12 01:13:10.877395 2026] [:error] [pid 45064:tid 45094] [client 20.111.60.230:25422] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file18.php"] [unique_id "adqBJpcHBvLyJ6EUhUr0AQAAAUI"]
[Sun Apr 12 01:13:11.372956 2026] [:error] [pid 44700:tid 44761] [client 20.111.60.230:36419] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file18.php"] [unique_id "adqBJ2ryPgh_uW4QPCldQwAAANE"]
[Sun Apr 12 01:13:11.862518 2026] [:error] [pid 45064:tid 45096] [client 20.111.60.230:7315] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file18.php"] [unique_id "adqBJ5cHBvLyJ6EUhUr0CQAAAUQ"]
[Sun Apr 12 01:13:12.351698 2026] [:error] [pid 44700:tid 44749] [client 20.111.60.230:49766] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file18.php"] [unique_id "adqBKGryPgh_uW4QPCldSQAAAMU"]
[Sun Apr 12 01:13:12.834838 2026] [:error] [pid 44701:tid 44786] [client 20.111.60.230:29794] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vee.php"] [unique_id "adqBKBGZAP4MrlxEPFcu0AAAAEw"]
[Sun Apr 12 01:13:13.308465 2026] [:error] [pid 44700:tid 44756] [client 20.111.60.230:7513] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vee.php"] [unique_id "adqBKWryPgh_uW4QPCldUQAAAMw"]
[Sun Apr 12 01:13:13.807677 2026] [:error] [pid 44700:tid 44762] [client 20.111.60.230:30747] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vee.php"] [unique_id "adqBKWryPgh_uW4QPCldVQAAANI"]
[Sun Apr 12 01:13:14.299796 2026] [:error] [pid 44700:tid 44755] [client 20.111.60.230:29760] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vee.php"] [unique_id "adqBKmryPgh_uW4QPCldWQAAAMs"]
[Sun Apr 12 01:13:14.780758 2026] [:error] [pid 44700:tid 44756] [client 20.111.60.230:32284] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cabs.php"] [unique_id "adqBKmryPgh_uW4QPCldWgAAAMw"]
[Sun Apr 12 01:13:15.258373 2026] [:error] [pid 44701:tid 44800] [client 20.111.60.230:58216] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cabs.php"] [unique_id "adqBKxGZAP4MrlxEPFcu0wAAAFg"]
[Sun Apr 12 01:13:15.754070 2026] [:error] [pid 45064:tid 45095] [client 20.111.60.230:57002] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cabs.php"] [unique_id "adqBK5cHBvLyJ6EUhUr0EAAAAUM"]
[Sun Apr 12 01:13:16.258109 2026] [:error] [pid 45064:tid 45110] [client 20.111.60.230:59516] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cabs.php"] [unique_id "adqBLJcHBvLyJ6EUhUr0EQAAAVE"]
[Sun Apr 12 01:13:16.743628 2026] [:error] [pid 44700:tid 44761] [client 20.111.60.230:29809] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "adqBLGryPgh_uW4QPCldYAAAANE"]
[Sun Apr 12 01:13:17.233662 2026] [:error] [pid 44701:tid 44781] [client 20.111.60.230:32286] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "adqBLRGZAP4MrlxEPFcu2AAAAEg"]
[Sun Apr 12 01:13:17.723078 2026] [:error] [pid 44700:tid 44750] [client 20.111.60.230:35379] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "adqBLWryPgh_uW4QPCldZAAAAMY"]
[Sun Apr 12 01:13:18.211817 2026] [:error] [pid 45064:tid 45105] [client 20.111.60.230:52410] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "adqBLpcHBvLyJ6EUhUr0FQAAAUw"]
[Sun Apr 12 01:13:18.701427 2026] [:error] [pid 44701:tid 44775] [client 20.111.60.230:52402] [client 20.111.60.230] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x1da.php"] [unique_id "adqBLhGZAP4MrlxEPFcu2gAAAEM"]
[Sun Apr 12 02:05:26.963242 2026] [:error] [pid 44700:tid 44744] [client 209.38.77.153:51998] [client 209.38.77.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "adqNZmryPgh_uW4QPClvLAAAAMA"]
[Sun Apr 12 02:05:27.036245 2026] [:error] [pid 34152:tid 34161] [client 209.38.77.153:52000] [client 209.38.77.153] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/admin-ajax.php"] [unique_id "adqNZ4FtE4RhFslT1DrJTgAAAAc"]
[Sun Apr 12 05:15:10.070150 2026] [:error] [pid 60280:tid 60285] [client 20.220.11.224:25489] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adq53nBlLnDOYuIykkjTYQAAAcM"]
[Sun Apr 12 05:15:13.095367 2026] [:error] [pid 26600:tid 26648] [client 20.220.11.224:25570] [client 20.220.11.224] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adq54e1YwAZiXhQKLYpv_gAAAZM"]
[Sun Apr 12 10:18:48.490590 2026] [:error] [pid 26567:tid 26593] [client 20.199.184.99:44486] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adsBCHhRpg6ptWFyFx1E9wAAARg"]
[Sun Apr 12 10:18:49.387182 2026] [:error] [pid 25328:tid 25377] [client 20.199.184.99:44540] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adsBCcxUaQZxT-e0YsBPOAAAAEo"]
[Sun Apr 12 10:18:50.064864 2026] [:error] [pid 25328:tid 25383] [client 20.199.184.99:44532] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adsBCsxUaQZxT-e0YsBPOgAAAE0"]
[Sun Apr 12 10:18:51.047679 2026] [:error] [pid 60280:tid 60292] [client 20.199.184.99:8875] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adsBC3BlLnDOYuIykkhiNQAAAco"]
[Sun Apr 12 10:18:52.053247 2026] [:error] [pid 25328:tid 25364] [client 20.199.184.99:50824] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cdn3.php"] [unique_id "adsBDMxUaQZxT-e0YsBPPAAAAEA"]
[Sun Apr 12 10:18:52.910710 2026] [:error] [pid 25328:tid 25370] [client 20.199.184.99:54881] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cdn3.php"] [unique_id "adsBDMxUaQZxT-e0YsBPPwAAAEY"]
[Sun Apr 12 10:18:53.632419 2026] [:error] [pid 26567:tid 26578] [client 20.199.184.99:50830] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cdn3.php"] [unique_id "adsBDXhRpg6ptWFyFx1E_wAAAQk"]
[Sun Apr 12 10:18:54.328629 2026] [:error] [pid 25437:tid 25446] [client 20.199.184.99:61336] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cdn3.php"] [unique_id "adsBDnf97wYZje1ep_OhqQAAAMc"]
[Sun Apr 12 10:18:55.006280 2026] [:error] [pid 25327:tid 25357] [client 20.199.184.99:50865] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adsBDy6h2tZEVJo9JFJ-JAAAABU"]
[Sun Apr 12 10:18:55.737431 2026] [:error] [pid 25327:tid 25347] [client 20.199.184.99:50844] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adsBDy6h2tZEVJo9JFJ-KQAAAAs"]
[Sun Apr 12 10:18:56.568596 2026] [:error] [pid 26600:tid 26630] [client 20.199.184.99:8962] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adsBEO1YwAZiXhQKLYq6-QAAAYE"]
[Sun Apr 12 10:18:57.530713 2026] [:error] [pid 60280:tid 60291] [client 20.199.184.99:54861] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adsBEXBlLnDOYuIykkhiPwAAAck"]
[Sun Apr 12 10:18:58.445990 2026] [:error] [pid 26600:tid 26641] [client 20.199.184.99:61360] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/beerd.php"] [unique_id "adsBEu1YwAZiXhQKLYq6_AAAAYw"]
[Sun Apr 12 10:18:59.190311 2026] [:error] [pid 26599:tid 26621] [client 20.199.184.99:57710] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/beerd.php"] [unique_id "adsBE3G89LXoQbk_rwCD8wAAAVM"]
[Sun Apr 12 10:18:59.974435 2026] [:error] [pid 60280:tid 60284] [client 20.199.184.99:55465] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/beerd.php"] [unique_id "adsBE3BlLnDOYuIykkhiRAAAAcI"]
[Sun Apr 12 10:19:01.102309 2026] [:error] [pid 25329:tid 25412] [client 20.199.184.99:62304] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/beerd.php"] [unique_id "adsBFWdcIYsS8Iyaj11tNQAAAJU"]
[Sun Apr 12 10:19:01.952588 2026] [:error] [pid 25329:tid 25374] [client 20.199.184.99:61331] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hhxc.php"] [unique_id "adsBFWdcIYsS8Iyaj11tOAAAAIA"]
[Sun Apr 12 10:19:02.730307 2026] [:error] [pid 60280:tid 60300] [client 20.199.184.99:61374] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hhxc.php"] [unique_id "adsBFnBlLnDOYuIykkhiTgAAAdI"]
[Sun Apr 12 10:19:03.520355 2026] [:error] [pid 60280:tid 60306] [client 20.199.184.99:62272] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hhxc.php"] [unique_id "adsBF3BlLnDOYuIykkhiTwAAAdg"]
[Sun Apr 12 10:19:04.418127 2026] [:error] [pid 60280:tid 60297] [client 20.199.184.99:54927] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hhxc.php"] [unique_id "adsBGHBlLnDOYuIykkhiUQAAAc8"]
[Sun Apr 12 10:19:05.033202 2026] [:error] [pid 26567:tid 26577] [client 20.199.184.99:55472] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/161dfd072f.php"] [unique_id "adsBGXhRpg6ptWFyFx1FEgAAAQg"]
[Sun Apr 12 10:19:05.930782 2026] [:error] [pid 26599:tid 26616] [client 20.199.184.99:57687] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/161dfd072f.php"] [unique_id "adsBGXG89LXoQbk_rwCD9AAAAU4"]
[Sun Apr 12 10:19:06.562663 2026] [:error] [pid 60280:tid 60291] [client 20.199.184.99:9019] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/161dfd072f.php"] [unique_id "adsBGnBlLnDOYuIykkhiVgAAAck"]
[Sun Apr 12 10:19:07.154804 2026] [:error] [pid 25328:tid 25368] [client 20.199.184.99:9013] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/161dfd072f.php"] [unique_id "adsBG8xUaQZxT-e0YsBPTwAAAEQ"]
[Sun Apr 12 10:19:08.096610 2026] [:error] [pid 25328:tid 25380] [client 20.199.184.99:54210] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "adsBHMxUaQZxT-e0YsBPUwAAAEw"]
[Sun Apr 12 10:19:08.877205 2026] [:error] [pid 26600:tid 26644] [client 20.199.184.99:62331] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "adsBHO1YwAZiXhQKLYq7AAAAAY8"]
[Sun Apr 12 10:19:09.648208 2026] [:error] [pid 26599:tid 26617] [client 20.199.184.99:8967] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "adsBHXG89LXoQbk_rwCD9wAAAU8"]
[Sun Apr 12 10:19:10.427633 2026] [:error] [pid 25328:tid 25370] [client 20.199.184.99:50860] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "adsBHsxUaQZxT-e0YsBPXgAAAEY"]
[Sun Apr 12 10:19:11.339397 2026] [:error] [pid 25328:tid 25408] [client 20.199.184.99:61371] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adsBH8xUaQZxT-e0YsBPYQAAAFg"]
[Sun Apr 12 10:19:13.194884 2026] [:error] [pid 60280:tid 60287] [client 20.199.184.99:50842] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adsBIXBlLnDOYuIykkhiaAAAAcU"]
[Sun Apr 12 10:19:14.509883 2026] [:error] [pid 25328:tid 25405] [client 20.199.184.99:54215] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adsBIsxUaQZxT-e0YsBPaAAAAFc"]
[Sun Apr 12 10:19:15.958820 2026] [:error] [pid 60280:tid 60296] [client 20.199.184.99:61364] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adsBI3BlLnDOYuIykkhidgAAAc4"]
[Sun Apr 12 10:19:17.107762 2026] [:error] [pid 26600:tid 26652] [client 20.199.184.99:55434] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/RIP.php"] [unique_id "adsBJe1YwAZiXhQKLYq7AQAAAZc"]
[Sun Apr 12 10:19:18.751453 2026] [:error] [pid 25437:tid 25446] [client 20.199.184.99:55440] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/RIP.php"] [unique_id "adsBJnf97wYZje1ep_OhwQAAAMc"]
[Sun Apr 12 10:19:19.951882 2026] [:error] [pid 25437:tid 25441] [client 20.199.184.99:8212] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/RIP.php"] [unique_id "adsBJ3f97wYZje1ep_OhxwAAAMI"]
[Sun Apr 12 10:19:20.621436 2026] [:error] [pid 26600:tid 26642] [client 20.199.184.99:62320] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/RIP.php"] [unique_id "adsBKO1YwAZiXhQKLYq7CgAAAY0"]
[Sun Apr 12 10:19:21.577086 2026] [:error] [pid 25328:tid 25398] [client 20.199.184.99:61349] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "adsBKcxUaQZxT-e0YsBPdQAAAFQ"]
[Sun Apr 12 10:19:22.318178 2026] [:error] [pid 25437:tid 25461] [client 20.199.184.99:57711] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "adsBKnf97wYZje1ep_OhzQAAANY"]
[Sun Apr 12 10:19:23.110155 2026] [:error] [pid 25329:tid 25390] [client 20.199.184.99:8245] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "adsBK2dcIYsS8Iyaj11tPAAAAIg"]
[Sun Apr 12 10:19:23.704955 2026] [:error] [pid 26599:tid 26606] [client 20.199.184.99:57716] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "adsBK3G89LXoQbk_rwCD-gAAAUQ"]
[Sun Apr 12 10:19:24.266249 2026] [:error] [pid 60280:tid 60298] [client 20.199.184.99:8250] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/blqjs.php"] [unique_id "adsBLHBlLnDOYuIykkhigwAAAdA"]
[Sun Apr 12 10:19:24.782995 2026] [:error] [pid 25327:tid 25357] [client 20.199.184.99:54226] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/blqjs.php"] [unique_id "adsBLC6h2tZEVJo9JFJ-NwAAABU"]
[Sun Apr 12 10:19:25.424449 2026] [:error] [pid 25437:tid 25463] [client 20.199.184.99:54917] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/blqjs.php"] [unique_id "adsBLXf97wYZje1ep_Oh0gAAANg"]
[Sun Apr 12 10:19:26.028556 2026] [:error] [pid 25328:tid 25365] [client 20.199.184.99:54263] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/blqjs.php"] [unique_id "adsBLsxUaQZxT-e0YsBPhgAAAEE"]
[Sun Apr 12 10:19:26.664224 2026] [:error] [pid 25327:tid 25341] [client 20.199.184.99:62296] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sk25_1.php"] [unique_id "adsBLi6h2tZEVJo9JFJ-OwAAAAU"]
[Sun Apr 12 10:19:27.216612 2026] [:error] [pid 25437:tid 25440] [client 20.199.184.99:62322] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sk25_1.php"] [unique_id "adsBL3f97wYZje1ep_Oh1gAAAME"]
[Sun Apr 12 10:19:27.720375 2026] [:error] [pid 25437:tid 25442] [client 20.199.184.99:54245] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sk25_1.php"] [unique_id "adsBL3f97wYZje1ep_Oh1wAAAMM"]
[Sun Apr 12 10:19:28.192754 2026] [:error] [pid 26567:tid 26578] [client 20.199.184.99:55484] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sk25_1.php"] [unique_id "adsBMHhRpg6ptWFyFx1FIAAAAQk"]
[Sun Apr 12 10:19:28.861066 2026] [:error] [pid 25437:tid 25459] [client 20.199.184.99:50820] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fetch.php"] [unique_id "adsBMHf97wYZje1ep_Oh3AAAANQ"]
[Sun Apr 12 10:19:29.452446 2026] [:error] [pid 60280:tid 60300] [client 20.199.184.99:8237] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fetch.php"] [unique_id "adsBMXBlLnDOYuIykkhimQAAAdI"]
[Sun Apr 12 10:19:29.957465 2026] [:error] [pid 25437:tid 25447] [client 20.199.184.99:54214] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fetch.php"] [unique_id "adsBMXf97wYZje1ep_OiAQAAAMg"]
[Sun Apr 12 10:19:30.471115 2026] [:error] [pid 25328:tid 25403] [client 20.199.184.99:50818] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fetch.php"] [unique_id "adsBMsxUaQZxT-e0YsBPjAAAAFY"]
[Sun Apr 12 10:19:31.058114 2026] [:error] [pid 25328:tid 25405] [client 20.199.184.99:61347] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adsBM8xUaQZxT-e0YsBPlAAAAFc"]
[Sun Apr 12 10:19:31.794504 2026] [:error] [pid 25328:tid 25383] [client 20.199.184.99:54213] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adsBM8xUaQZxT-e0YsBPmAAAAE0"]
[Sun Apr 12 10:19:32.267992 2026] [:error] [pid 26600:tid 26638] [client 20.199.184.99:55458] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adsBNO1YwAZiXhQKLYq7DwAAAYk"]
[Sun Apr 12 10:19:32.891892 2026] [:error] [pid 26567:tid 26582] [client 20.199.184.99:62279] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adsBNHhRpg6ptWFyFx1FIwAAAQ0"]
[Sun Apr 12 10:19:33.370808 2026] [:error] [pid 60280:tid 60301] [client 20.199.184.99:54271] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adsBNXBlLnDOYuIykkhiwwAAAdM"]
[Sun Apr 12 10:19:33.883541 2026] [:error] [pid 60280:tid 60305] [client 20.199.184.99:61315] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adsBNXBlLnDOYuIykkhi0AAAAdc"]
[Sun Apr 12 10:19:34.373132 2026] [:error] [pid 26600:tid 26630] [client 20.199.184.99:8973] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adsBNu1YwAZiXhQKLYq7EgAAAYE"]
[Sun Apr 12 10:19:34.937746 2026] [:error] [pid 25327:tid 25353] [client 20.199.184.99:57682] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2nzyHnOkEg.php"] [unique_id "adsBNi6h2tZEVJo9JFJ-QwAAABE"]
[Sun Apr 12 10:19:35.528724 2026] [:error] [pid 25328:tid 25398] [client 20.199.184.99:8205] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/oircv.php"] [unique_id "adsBN8xUaQZxT-e0YsBPogAAAFQ"]
[Sun Apr 12 10:19:36.065294 2026] [:error] [pid 25328:tid 25383] [client 20.199.184.99:54244] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/oircv.php"] [unique_id "adsBOMxUaQZxT-e0YsBPpQAAAE0"]
[Sun Apr 12 10:19:37.511185 2026] [:error] [pid 60280:tid 60287] [client 20.199.184.99:62334] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/oircv.php"] [unique_id "adsBOXBlLnDOYuIykkhi3AAAAcU"]
[Sun Apr 12 10:19:38.946515 2026] [:error] [pid 60280:tid 60284] [client 20.199.184.99:54223] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/oircv.php"] [unique_id "adsBOnBlLnDOYuIykkhi4wAAAcI"]
[Sun Apr 12 10:19:40.488193 2026] [:error] [pid 25437:tid 25447] [client 20.199.184.99:55466] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/blnux.php"] [unique_id "adsBPHf97wYZje1ep_OiNQAAAMg"]
[Sun Apr 12 10:19:42.767268 2026] [:error] [pid 26599:tid 26621] [client 20.199.184.99:50823] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/blnux.php"] [unique_id "adsBPnG89LXoQbk_rwCEFwAAAVM"]
[Sun Apr 12 10:19:44.409597 2026] [:error] [pid 25328:tid 25387] [client 20.199.184.99:62294] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/blnux.php"] [unique_id "adsBQMxUaQZxT-e0YsBPsgAAAE8"]
[Sun Apr 12 10:19:46.344203 2026] [:error] [pid 25328:tid 25394] [client 20.199.184.99:62329] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/blnux.php"] [unique_id "adsBQsxUaQZxT-e0YsBPtgAAAFI"]
[Sun Apr 12 10:19:56.109250 2026] [:error] [pid 25437:tid 25446] [client 20.199.184.99:8976] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sde.php"] [unique_id "adsBTHf97wYZje1ep_OiUwAAAMc"]
[Sun Apr 12 10:19:57.045758 2026] [:error] [pid 60280:tid 60283] [client 20.199.184.99:61325] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sde.php"] [unique_id "adsBTXBlLnDOYuIykkhjDwAAAcE"]
[Sun Apr 12 10:19:58.157143 2026] [:error] [pid 60280:tid 60301] [client 20.199.184.99:57682] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sde.php"] [unique_id "adsBTnBlLnDOYuIykkhjEwAAAdM"]
[Sun Apr 12 10:19:59.082837 2026] [:error] [pid 25328:tid 25383] [client 20.199.184.99:57685] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sde.php"] [unique_id "adsBT8xUaQZxT-e0YsBPzAAAAE0"]
[Sun Apr 12 10:19:59.914983 2026] [:error] [pid 25328:tid 25391] [client 20.199.184.99:8979] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wpb.php"] [unique_id "adsBT8xUaQZxT-e0YsBPzQAAAFE"]
[Sun Apr 12 10:20:00.471178 2026] [:error] [pid 25328:tid 25401] [client 20.199.184.99:54959] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wpb.php"] [unique_id "adsBUMxUaQZxT-e0YsBP0QAAAFU"]
[Sun Apr 12 10:20:00.944837 2026] [:error] [pid 26567:tid 26581] [client 20.199.184.99:61312] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wpb.php"] [unique_id "adsBUHhRpg6ptWFyFx1FMwAAAQw"]
[Sun Apr 12 10:20:01.597565 2026] [:error] [pid 25329:tid 25414] [client 20.199.184.99:9004] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wpb.php"] [unique_id "adsBUWdcIYsS8Iyaj11tTwAAAJc"]
[Sun Apr 12 10:20:02.169598 2026] [:error] [pid 60280:tid 60285] [client 20.199.184.99:57673] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Geforce.php"] [unique_id "adsBUnBlLnDOYuIykkhjIQAAAcM"]
[Sun Apr 12 10:20:02.681290 2026] [:error] [pid 60280:tid 60296] [client 20.199.184.99:54913] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Geforce.php"] [unique_id "adsBUnBlLnDOYuIykkhjJAAAAc4"]
[Sun Apr 12 10:20:03.507765 2026] [:error] [pid 26567:tid 26586] [client 20.199.184.99:57707] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Geforce.php"] [unique_id "adsBU3hRpg6ptWFyFx1FOQAAARE"]
[Sun Apr 12 10:20:04.230814 2026] [:error] [pid 25329:tid 25390] [client 20.199.184.99:54236] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Geforce.php"] [unique_id "adsBVGdcIYsS8Iyaj11tUgAAAIg"]
[Sun Apr 12 10:20:04.708496 2026] [:error] [pid 26599:tid 26615] [client 20.199.184.99:55444] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "adsBVHG89LXoQbk_rwCEHwAAAU0"]
[Sun Apr 12 10:20:05.205396 2026] [:error] [pid 25437:tid 25439] [client 20.199.184.99:50846] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "adsBVXf97wYZje1ep_OiWwAAAMA"]
[Sun Apr 12 10:20:05.816416 2026] [:error] [pid 25328:tid 25366] [client 20.199.184.99:54243] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "adsBVcxUaQZxT-e0YsBP1wAAAEI"]
[Sun Apr 12 10:20:06.393398 2026] [:error] [pid 25329:tid 25409] [client 20.199.184.99:57713] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/9EaklzMysJ.php"] [unique_id "adsBVmdcIYsS8Iyaj11tVAAAAJM"]
[Sun Apr 12 10:20:07.667420 2026] [:error] [pid 60280:tid 60289] [client 20.199.184.99:9021] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wpxl.php"] [unique_id "adsBV3BlLnDOYuIykkhjKwAAAcc"]
[Sun Apr 12 10:20:08.339028 2026] [:error] [pid 60280:tid 60286] [client 20.199.184.99:62298] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wpxl.php"] [unique_id "adsBWHBlLnDOYuIykkhjMwAAAcQ"]
[Sun Apr 12 10:20:09.512551 2026] [:error] [pid 26600:tid 26632] [client 20.199.184.99:61327] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wpxl.php"] [unique_id "adsBWe1YwAZiXhQKLYq7WAAAAYM"]
[Sun Apr 12 10:20:10.461459 2026] [:error] [pid 26567:tid 26580] [client 20.199.184.99:54952] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wpxl.php"] [unique_id "adsBWnhRpg6ptWFyFx1FQwAAAQs"]
[Sun Apr 12 10:20:11.168257 2026] [:error] [pid 26567:tid 26586] [client 20.199.184.99:8196] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adsBW3hRpg6ptWFyFx1FRgAAARE"]
[Sun Apr 12 10:20:12.384701 2026] [:error] [pid 25329:tid 25407] [client 20.199.184.99:55437] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adsBXGdcIYsS8Iyaj11tVwAAAJI"]
[Sun Apr 12 10:20:13.287986 2026] [:error] [pid 25328:tid 25375] [client 20.199.184.99:57669] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adsBXcxUaQZxT-e0YsBP2AAAAEk"]
[Sun Apr 12 10:20:14.368127 2026] [:error] [pid 25328:tid 25373] [client 20.199.184.99:54263] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/s3FiyJ2WGCnF0p1default.php"] [unique_id "adsBXsxUaQZxT-e0YsBP3QAAAEg"]
[Sun Apr 12 10:20:15.713094 2026] [:error] [pid 25437:tid 25458] [client 20.199.184.99:54878] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bfil.php"] [unique_id "adsBX3f97wYZje1ep_OibgAAANM"]
[Sun Apr 12 10:20:17.741309 2026] [:error] [pid 25437:tid 25440] [client 20.199.184.99:8193] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bfil.php"] [unique_id "adsBYXf97wYZje1ep_OibwAAAME"]
[Sun Apr 12 10:20:19.140717 2026] [:error] [pid 60280:tid 60303] [client 20.199.184.99:8220] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bfil.php"] [unique_id "adsBY3BlLnDOYuIykkhjOQAAAdU"]
[Sun Apr 12 10:20:19.957764 2026] [:error] [pid 26567:tid 26585] [client 20.199.184.99:61326] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bfil.php"] [unique_id "adsBY3hRpg6ptWFyFx1FTQAAARA"]
[Sun Apr 12 10:20:20.561418 2026] [:error] [pid 25328:tid 25365] [client 20.199.184.99:8867] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lb.php"] [unique_id "adsBZMxUaQZxT-e0YsBP7AAAAEE"]
[Sun Apr 12 10:20:21.205562 2026] [:error] [pid 60280:tid 60303] [client 20.199.184.99:62308] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lb.php"] [unique_id "adsBZXBlLnDOYuIykkhjSwAAAdU"]
[Sun Apr 12 10:20:21.900406 2026] [:error] [pid 25437:tid 25452] [client 20.199.184.99:8213] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lb.php"] [unique_id "adsBZXf97wYZje1ep_OidQAAAM0"]
[Sun Apr 12 10:20:22.953894 2026] [:error] [pid 26599:tid 26612] [client 20.199.184.99:8231] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lb.php"] [unique_id "adsBZnG89LXoQbk_rwCEIgAAAUo"]
[Sun Apr 12 10:20:23.721052 2026] [:error] [pid 25437:tid 25446] [client 20.199.184.99:62319] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "adsBZ3f97wYZje1ep_OiewAAAMc"]
[Sun Apr 12 10:20:24.239118 2026] [:error] [pid 26599:tid 26621] [client 20.199.184.99:62299] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "adsBaHG89LXoQbk_rwCEJQAAAVM"]
[Sun Apr 12 10:20:24.910365 2026] [:error] [pid 26600:tid 26648] [client 20.199.184.99:44522] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "adsBaO1YwAZiXhQKLYq7XwAAAZM"]
[Sun Apr 12 10:20:25.530189 2026] [:error] [pid 26600:tid 26642] [client 20.199.184.99:9012] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "adsBae1YwAZiXhQKLYq7YAAAAY0"]
[Sun Apr 12 10:20:26.156318 2026] [:error] [pid 60280:tid 60286] [client 20.199.184.99:8859] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/menu.php"] [unique_id "adsBanBlLnDOYuIykkhjZAAAAcQ"]
[Sun Apr 12 10:20:26.765538 2026] [:error] [pid 25437:tid 25452] [client 20.199.184.99:9009] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/menu.php"] [unique_id "adsBanf97wYZje1ep_OiggAAAM0"]
[Sun Apr 12 10:20:27.342196 2026] [:error] [pid 25437:tid 25457] [client 20.199.184.99:50827] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/menu.php"] [unique_id "adsBa3f97wYZje1ep_OihQAAANI"]
[Sun Apr 12 10:20:27.933593 2026] [:error] [pid 25437:tid 25443] [client 20.199.184.99:61355] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/menu.php"] [unique_id "adsBa3f97wYZje1ep_OihwAAAMQ"]
[Sun Apr 12 10:20:28.409437 2026] [:error] [pid 25437:tid 25459] [client 20.199.184.99:50867] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "adsBbHf97wYZje1ep_OiiwAAANQ"]
[Sun Apr 12 10:20:28.888837 2026] [:error] [pid 26567:tid 26572] [client 20.199.184.99:62318] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "adsBbHhRpg6ptWFyFx1FUwAAAQM"]
[Sun Apr 12 10:20:29.523315 2026] [:error] [pid 25437:tid 25439] [client 20.199.184.99:54262] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "adsBbXf97wYZje1ep_OijwAAAMA"]
[Sun Apr 12 10:20:30.302321 2026] [:error] [pid 25437:tid 25451] [client 20.199.184.99:50873] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/p14rAeWytPdH5hZcscCFdefault.php"] [unique_id "adsBbnf97wYZje1ep_OikQAAAMw"]
[Sun Apr 12 10:20:31.274907 2026] [:error] [pid 25327:tid 25353] [client 20.199.184.99:55462] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/iindv.php"] [unique_id "adsBby6h2tZEVJo9JFJ-ZAAAABE"]
[Sun Apr 12 10:20:32.299955 2026] [:error] [pid 25329:tid 25386] [client 20.199.184.99:57704] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/iindv.php"] [unique_id "adsBcGdcIYsS8Iyaj11tXgAAAIY"]
[Sun Apr 12 10:20:33.663197 2026] [:error] [pid 25437:tid 25446] [client 20.199.184.99:61329] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/iindv.php"] [unique_id "adsBcXf97wYZje1ep_OimwAAAMc"]
[Sun Apr 12 10:20:34.841926 2026] [:error] [pid 26600:tid 26629] [client 20.199.184.99:50840] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/iindv.php"] [unique_id "adsBcu1YwAZiXhQKLYq7dAAAAYA"]
[Sun Apr 12 10:20:35.595806 2026] [:error] [pid 25328:tid 25369] [client 20.199.184.99:62283] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/maintura.php"] [unique_id "adsBc8xUaQZxT-e0YsBP-gAAAEU"]
[Sun Apr 12 10:20:36.185208 2026] [:error] [pid 25328:tid 25365] [client 20.199.184.99:50817] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/maintura.php"] [unique_id "adsBdMxUaQZxT-e0YsBP-wAAAEE"]
[Sun Apr 12 10:20:37.516206 2026] [:error] [pid 26600:tid 26653] [client 20.199.184.99:54864] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/maintura.php"] [unique_id "adsBde1YwAZiXhQKLYq7eAAAAZg"]
[Sun Apr 12 10:20:38.745306 2026] [:error] [pid 25329:tid 25400] [client 20.199.184.99:61359] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/maintura.php"] [unique_id "adsBdmdcIYsS8Iyaj11tYQAAAI4"]
[Sun Apr 12 10:20:39.901056 2026] [:error] [pid 26567:tid 26570] [client 20.199.184.99:54255] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adsBd3hRpg6ptWFyFx1FXAAAAQE"]
[Sun Apr 12 10:20:40.510879 2026] [:error] [pid 26567:tid 26579] [client 20.199.184.99:61316] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adsBeHhRpg6ptWFyFx1FYQAAAQo"]
[Sun Apr 12 10:20:41.149090 2026] [:error] [pid 26567:tid 26583] [client 20.199.184.99:61354] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adsBeXhRpg6ptWFyFx1FYgAAAQ4"]
[Sun Apr 12 10:20:41.756020 2026] [:error] [pid 26600:tid 26637] [client 20.199.184.99:55477] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adsBee1YwAZiXhQKLYq7eQAAAYg"]
[Sun Apr 12 10:20:42.385764 2026] [:error] [pid 25328:tid 25380] [client 20.199.184.99:55469] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adsBesxUaQZxT-e0YsBQGQAAAEw"]
[Sun Apr 12 10:20:43.952525 2026] [:error] [pid 26567:tid 26573] [client 20.199.184.99:62316] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adsBe3hRpg6ptWFyFx1FZgAAAQQ"]
[Sun Apr 12 10:20:47.215312 2026] [:error] [pid 25437:tid 25456] [client 20.199.184.99:54259] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adsBf3f97wYZje1ep_OiqAAAANE"]
[Sun Apr 12 10:20:48.295649 2026] [:error] [pid 26567:tid 26575] [client 20.199.184.99:8232] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adsBgHhRpg6ptWFyFx1FdQAAAQY"]
[Sun Apr 12 10:20:49.911065 2026] [:error] [pid 26567:tid 26579] [client 20.199.184.99:54247] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zc-220.php"] [unique_id "adsBgXhRpg6ptWFyFx1FeAAAAQo"]
[Sun Apr 12 10:20:50.754020 2026] [:error] [pid 25437:tid 25453] [client 20.199.184.99:8423] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zc-220.php"] [unique_id "adsBgnf97wYZje1ep_OiqgAAAM4"]
[Sun Apr 12 10:20:51.891847 2026] [:error] [pid 25437:tid 25441] [client 20.199.184.99:8204] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zc-220.php"] [unique_id "adsBg3f97wYZje1ep_OiqwAAAMI"]
[Sun Apr 12 10:20:53.488581 2026] [:error] [pid 25437:tid 25447] [client 20.199.184.99:61342] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zc-220.php"] [unique_id "adsBhXf97wYZje1ep_OirgAAAMg"]
[Sun Apr 12 10:20:54.489178 2026] [:error] [pid 25328:tid 25403] [client 20.199.184.99:8464] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adsBhsxUaQZxT-e0YsBQHwAAAFY"]
[Sun Apr 12 10:21:02.278402 2026] [:error] [pid 26600:tid 26630] [client 20.199.184.99:55461] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adsBju1YwAZiXhQKLYq7pAAAAYE"]
[Sun Apr 12 10:21:03.747089 2026] [:error] [pid 60280:tid 60305] [client 20.199.184.99:50866] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adsBj3BlLnDOYuIykkhjrwAAAdc"]
[Sun Apr 12 10:21:05.929661 2026] [:error] [pid 25437:tid 25455] [client 20.199.184.99:62275] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adsBkXf97wYZje1ep_OixQAAANA"]
[Sun Apr 12 10:21:06.885724 2026] [:error] [pid 25328:tid 25405] [client 20.199.184.99:57703] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gvg1bvpsgtot1rpklCdefault.php"] [unique_id "adsBksxUaQZxT-e0YsBQLAAAAFc"]
[Sun Apr 12 10:21:11.203940 2026] [:error] [pid 26567:tid 26574] [client 20.199.184.99:57679] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adsBl3hRpg6ptWFyFx1FlQAAAQU"]
[Sun Apr 12 10:21:15.240692 2026] [:error] [pid 25437:tid 25454] [client 20.199.184.99:8491] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adsBm3f97wYZje1ep_Oi1AAAAM8"]
[Sun Apr 12 10:21:18.253336 2026] [:error] [pid 60280:tid 60295] [client 20.199.184.99:8227] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adsBnnBlLnDOYuIykkhjyAAAAc0"]
[Sun Apr 12 10:21:20.506527 2026] [:error] [pid 25328:tid 25385] [client 20.199.184.99:57702] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/6xBAm3vODE05BSzkJZRAws.php"] [unique_id "adsBoMxUaQZxT-e0YsBQOQAAAE4"]
[Sun Apr 12 10:21:22.403655 2026] [:error] [pid 60280:tid 60297] [client 20.199.184.99:63890] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "adsBonBlLnDOYuIykkhj0wAAAc8"]
[Sun Apr 12 10:21:23.722746 2026] [:error] [pid 25328:tid 25375] [client 20.199.184.99:63892] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "adsBo8xUaQZxT-e0YsBQQQAAAEk"]
[Sun Apr 12 10:21:26.551779 2026] [:error] [pid 25328:tid 25369] [client 20.199.184.99:8961] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "adsBpsxUaQZxT-e0YsBQSgAAAEU"]
[Sun Apr 12 10:21:28.698351 2026] [:error] [pid 25437:tid 25448] [client 20.199.184.99:62314] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "adsBqHf97wYZje1ep_Oi3gAAAMk"]
[Sun Apr 12 10:21:29.698617 2026] [:error] [pid 25329:tid 25388] [client 20.199.184.99:50841] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file61.php"] [unique_id "adsBqWdcIYsS8Iyaj11thwAAAIc"]
[Sun Apr 12 10:21:31.056881 2026] [:error] [pid 25328:tid 25405] [client 20.199.184.99:44500] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file61.php"] [unique_id "adsBq8xUaQZxT-e0YsBQbAAAAFc"]
[Sun Apr 12 10:21:32.036726 2026] [:error] [pid 25328:tid 25408] [client 20.199.184.99:63886] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file61.php"] [unique_id "adsBrMxUaQZxT-e0YsBQdgAAAFg"]
[Sun Apr 12 10:21:32.739988 2026] [:error] [pid 60280:tid 60297] [client 20.199.184.99:54211] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file61.php"] [unique_id "adsBrHBlLnDOYuIykkhj5wAAAc8"]
[Sun Apr 12 10:21:33.533624 2026] [:error] [pid 60280:tid 60282] [client 20.199.184.99:50838] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "adsBrXBlLnDOYuIykkhj7AAAAcA"]
[Sun Apr 12 10:21:34.355162 2026] [:error] [pid 25329:tid 25411] [client 20.199.184.99:62310] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "adsBrmdcIYsS8Iyaj11tiQAAAJQ"]
[Sun Apr 12 10:21:35.379074 2026] [:error] [pid 25328:tid 25403] [client 20.199.184.99:54240] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "adsBr8xUaQZxT-e0YsBQigAAAFY"]
[Sun Apr 12 10:21:36.281286 2026] [:error] [pid 60280:tid 60285] [client 20.199.184.99:44512] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "adsBsHBlLnDOYuIykkhj8wAAAcM"]
[Sun Apr 12 10:21:37.410074 2026] [:error] [pid 25437:tid 25439] [client 20.199.184.99:50832] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "adsBsXf97wYZje1ep_Oi5AAAAMA"]
[Sun Apr 12 10:21:38.131796 2026] [:error] [pid 25327:tid 25359] [client 20.199.184.99:8255] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "adsBsi6h2tZEVJo9JFJ-jwAAABc"]
[Sun Apr 12 10:21:39.014260 2026] [:error] [pid 26567:tid 26585] [client 20.199.184.99:63889] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "adsBs3hRpg6ptWFyFx1FpAAAARA"]
[Sun Apr 12 10:21:39.540548 2026] [:error] [pid 26567:tid 26572] [client 20.199.184.99:9018] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "adsBs3hRpg6ptWFyFx1FpgAAAQM"]
[Sun Apr 12 10:21:40.339565 2026] [:error] [pid 26600:tid 26637] [client 20.199.184.99:9016] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/CDX2.php"] [unique_id "adsBtO1YwAZiXhQKLYq7wAAAAYg"]
[Sun Apr 12 10:21:41.062582 2026] [:error] [pid 25328:tid 25405] [client 20.199.184.99:54958] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/CDX2.php"] [unique_id "adsBtcxUaQZxT-e0YsBQlAAAAFc"]
[Sun Apr 12 10:21:41.590847 2026] [:error] [pid 60280:tid 60290] [client 20.199.184.99:62313] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/CDX2.php"] [unique_id "adsBtXBlLnDOYuIykkhj-gAAAcg"]
[Sun Apr 12 10:21:42.227824 2026] [:error] [pid 60280:tid 60293] [client 20.199.184.99:60880] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/CDX2.php"] [unique_id "adsBtnBlLnDOYuIykkhkAAAAAcs"]
[Sun Apr 12 10:21:42.881334 2026] [:error] [pid 60280:tid 60297] [client 20.199.184.99:9023] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "adsBtnBlLnDOYuIykkhkAQAAAc8"]
[Sun Apr 12 10:21:43.375021 2026] [:error] [pid 60280:tid 60299] [client 20.199.184.99:62305] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "adsBt3BlLnDOYuIykkhkBQAAAdE"]
[Sun Apr 12 10:21:43.951717 2026] [:error] [pid 60280:tid 60296] [client 20.199.184.99:8968] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "adsBt3BlLnDOYuIykkhkCQAAAc4"]
[Sun Apr 12 10:21:44.742450 2026] [:error] [pid 26600:tid 26651] [client 20.199.184.99:63923] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "adsBuO1YwAZiXhQKLYq7wwAAAZY"]
[Sun Apr 12 10:21:45.321262 2026] [:error] [pid 60280:tid 60301] [client 20.199.184.99:62332] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wtiiy.php"] [unique_id "adsBuXBlLnDOYuIykkhkCgAAAdM"]
[Sun Apr 12 10:21:45.976994 2026] [:error] [pid 25328:tid 25398] [client 20.199.184.99:62274] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wtiiy.php"] [unique_id "adsBucxUaQZxT-e0YsBQnwAAAFQ"]
[Sun Apr 12 10:21:46.608265 2026] [:error] [pid 60280:tid 60284] [client 20.199.184.99:63919] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wtiiy.php"] [unique_id "adsBunBlLnDOYuIykkhkDgAAAcI"]
[Sun Apr 12 10:21:47.494339 2026] [:error] [pid 25327:tid 25350] [client 20.199.184.99:45126] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wtiiy.php"] [unique_id "adsBuy6h2tZEVJo9JFJ-kQAAAA4"]
[Sun Apr 12 10:21:48.353967 2026] [:error] [pid 25328:tid 25366] [client 20.199.184.99:62324] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Sanskrit.php"] [unique_id "adsBvMxUaQZxT-e0YsBQpQAAAEI"]
[Sun Apr 12 10:21:50.364270 2026] [:error] [pid 60280:tid 60286] [client 20.199.184.99:60866] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Sanskrit.php"] [unique_id "adsBvnBlLnDOYuIykkhkGAAAAcQ"]
[Sun Apr 12 10:21:51.075299 2026] [:error] [pid 26600:tid 26642] [client 20.199.184.99:57677] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Sanskrit.php"] [unique_id "adsBv-1YwAZiXhQKLYq7yQAAAY0"]
[Sun Apr 12 10:21:51.886453 2026] [:error] [pid 25327:tid 25344] [client 20.199.184.99:63877] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Sanskrit.php"] [unique_id "adsBvy6h2tZEVJo9JFJ-nAAAAAg"]
[Sun Apr 12 10:21:52.601294 2026] [:error] [pid 60280:tid 60295] [client 20.199.184.99:60879] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "adsBwHBlLnDOYuIykkhkHgAAAc0"]
[Sun Apr 12 10:21:53.695311 2026] [:error] [pid 60280:tid 60288] [client 20.199.184.99:8244] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "adsBwXBlLnDOYuIykkhkIwAAAcY"]
[Sun Apr 12 10:21:54.313388 2026] [:error] [pid 25327:tid 25349] [client 20.199.184.99:63910] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "adsBwi6h2tZEVJo9JFJ-ngAAAA0"]
[Sun Apr 12 10:21:54.978554 2026] [:error] [pid 25327:tid 25338] [client 20.199.184.99:51356] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "adsBwi6h2tZEVJo9JFJ-ogAAAAI"]
[Sun Apr 12 10:21:55.628296 2026] [:error] [pid 60280:tid 60296] [client 20.199.184.99:44495] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "adsBw3BlLnDOYuIykkhkLgAAAc4"]
[Sun Apr 12 10:21:56.660464 2026] [:error] [pid 60280:tid 60286] [client 20.199.184.99:54261] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "adsBxHBlLnDOYuIykkhkMgAAAcQ"]
[Sun Apr 12 10:21:57.446454 2026] [:error] [pid 60280:tid 60282] [client 20.199.184.99:55467] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "adsBxXBlLnDOYuIykkhkMwAAAcA"]
[Sun Apr 12 10:21:59.786499 2026] [:error] [pid 60280:tid 60283] [client 20.199.184.99:63933] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "adsBx3BlLnDOYuIykkhkPAAAAcE"]
[Sun Apr 12 10:22:18.891007 2026] [:error] [pid 25328:tid 25389] [client 20.199.184.99:60875] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tfm.php"] [unique_id "adsB2sxUaQZxT-e0YsBQ4gAAAFA"]
[Sun Apr 12 10:22:19.453929 2026] [:error] [pid 25328:tid 25373] [client 20.199.184.99:57255] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tfm.php"] [unique_id "adsB28xUaQZxT-e0YsBQ4wAAAEg"]
[Sun Apr 12 10:22:19.960842 2026] [:error] [pid 25328:tid 25365] [client 20.199.184.99:57224] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tfm.php"] [unique_id "adsB28xUaQZxT-e0YsBQ5QAAAEE"]
[Sun Apr 12 10:22:20.616567 2026] [:error] [pid 26567:tid 26592] [client 20.199.184.99:60919] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tfm.php"] [unique_id "adsB3HhRpg6ptWFyFx1FvgAAARc"]
[Sun Apr 12 10:22:21.319587 2026] [:error] [pid 25328:tid 25369] [client 20.199.184.99:60927] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "adsB3cxUaQZxT-e0YsBQ6AAAAEU"]
[Sun Apr 12 10:22:21.826306 2026] [:error] [pid 26567:tid 26585] [client 20.199.184.99:8960] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "adsB3XhRpg6ptWFyFx1FwAAAARA"]
[Sun Apr 12 10:22:22.592714 2026] [:error] [pid 25328:tid 25372] [client 20.199.184.99:44503] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "adsB3sxUaQZxT-e0YsBQ7AAAAEc"]
[Sun Apr 12 10:22:23.504539 2026] [:error] [pid 25328:tid 25403] [client 20.199.184.99:9146] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "adsB38xUaQZxT-e0YsBQ8QAAAFY"]
[Sun Apr 12 10:22:24.307658 2026] [:error] [pid 25328:tid 25379] [client 20.199.184.99:9145] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "adsB4MxUaQZxT-e0YsBQ9AAAAEs"]
[Sun Apr 12 10:22:27.331355 2026] [:error] [pid 26600:tid 26644] [client 20.199.184.99:9067] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "adsB4-1YwAZiXhQKLYq8JQAAAY8"]
[Sun Apr 12 10:22:31.423872 2026] [:error] [pid 25328:tid 25369] [client 20.199.184.99:9057] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "adsB58xUaQZxT-e0YsBRBQAAAEU"]
[Sun Apr 12 10:22:33.227117 2026] [:error] [pid 25328:tid 25396] [client 20.199.184.99:9040] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "adsB6cxUaQZxT-e0YsBRDgAAAFM"]
[Sun Apr 12 10:22:34.525641 2026] [:error] [pid 25328:tid 25383] [client 20.199.184.99:64327] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a7.php"] [unique_id "adsB6sxUaQZxT-e0YsBRFAAAAE0"]
[Sun Apr 12 10:22:35.501199 2026] [:error] [pid 25328:tid 25396] [client 20.199.184.99:64350] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a7.php"] [unique_id "adsB68xUaQZxT-e0YsBRGAAAAFM"]
[Sun Apr 12 10:22:37.016906 2026] [:error] [pid 25328:tid 25372] [client 20.199.184.99:62716] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a7.php"] [unique_id "adsB7cxUaQZxT-e0YsBRJAAAAEc"]
[Sun Apr 12 10:22:38.188918 2026] [:error] [pid 26600:tid 26644] [client 20.199.184.99:45748] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a7.php"] [unique_id "adsB7u1YwAZiXhQKLYq8MQAAAY8"]
[Sun Apr 12 10:22:39.254108 2026] [:error] [pid 60280:tid 60300] [client 20.199.184.99:47818] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "adsB73BlLnDOYuIykkhkawAAAdI"]
[Sun Apr 12 10:22:40.633427 2026] [:error] [pid 26567:tid 26586] [client 20.199.184.99:8785] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "adsB8HhRpg6ptWFyFx1F0QAAARE"]
[Sun Apr 12 10:22:41.661011 2026] [:error] [pid 25437:tid 25444] [client 20.199.184.99:52997] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "adsB8Xf97wYZje1ep_OjFAAAAMU"]
[Sun Apr 12 10:22:42.185854 2026] [:error] [pid 25437:tid 25446] [client 20.199.184.99:64413] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "adsB8nf97wYZje1ep_OjFgAAAMc"]
[Sun Apr 12 10:22:42.992709 2026] [:error] [pid 25328:tid 25405] [client 20.199.184.99:64325] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "adsB8sxUaQZxT-e0YsBRNwAAAFc"]
[Sun Apr 12 10:22:43.610692 2026] [:error] [pid 25328:tid 25364] [client 20.199.184.99:62912] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "adsB88xUaQZxT-e0YsBROQAAAEA"]
[Sun Apr 12 10:22:44.199715 2026] [:error] [pid 26600:tid 26639] [client 20.199.184.99:9049] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "adsB9O1YwAZiXhQKLYq8NQAAAYo"]
[Sun Apr 12 10:22:44.790786 2026] [:error] [pid 25327:tid 25350] [client 20.199.184.99:50225] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "adsB9C6h2tZEVJo9JFJ-zwAAAA4"]
[Sun Apr 12 10:22:45.468726 2026] [:error] [pid 25327:tid 25352] [client 20.199.184.99:46443] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "adsB9S6h2tZEVJo9JFJ-0AAAABA"]
[Sun Apr 12 10:22:46.266302 2026] [:error] [pid 60280:tid 60291] [client 20.199.184.99:8304] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "adsB9nBlLnDOYuIykkhkcAAAAck"]
[Sun Apr 12 10:22:47.204999 2026] [:error] [pid 60280:tid 60298] [client 20.199.184.99:61302] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "adsB93BlLnDOYuIykkhkdQAAAdA"]
[Sun Apr 12 10:22:47.693942 2026] [:error] [pid 26600:tid 26635] [client 20.199.184.99:58205] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "adsB9-1YwAZiXhQKLYq8NwAAAYY"]
[Sun Apr 12 10:22:48.331297 2026] [:error] [pid 60280:tid 60285] [client 20.199.184.99:8766] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file61.php"] [unique_id "adsB-HBlLnDOYuIykkhkegAAAcM"]
[Sun Apr 12 10:22:48.902870 2026] [:error] [pid 26567:tid 26590] [client 20.199.184.99:61303] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file61.php"] [unique_id "adsB-HhRpg6ptWFyFx1F2gAAARU"]
[Sun Apr 12 10:22:49.388186 2026] [:error] [pid 60280:tid 60295] [client 20.199.184.99:61306] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file61.php"] [unique_id "adsB-XBlLnDOYuIykkhkfQAAAc0"]
[Sun Apr 12 10:22:49.934094 2026] [:error] [pid 60280:tid 60297] [client 20.199.184.99:41864] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file61.php"] [unique_id "adsB-XBlLnDOYuIykkhkfgAAAc8"]
[Sun Apr 12 10:22:50.579516 2026] [:error] [pid 60280:tid 60291] [client 20.199.184.99:57259] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "adsB-nBlLnDOYuIykkhkgAAAAck"]
[Sun Apr 12 10:22:51.268065 2026] [:error] [pid 26567:tid 26584] [client 20.199.184.99:41880] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "adsB-3hRpg6ptWFyFx1F4gAAAQ8"]
[Sun Apr 12 10:22:51.795606 2026] [:error] [pid 60280:tid 60294] [client 20.199.184.99:41858] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "adsB-3BlLnDOYuIykkhkiAAAAcw"]
[Sun Apr 12 10:22:52.311678 2026] [:error] [pid 60280:tid 60301] [client 20.199.184.99:58238] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "adsB_HBlLnDOYuIykkhkiwAAAdM"]
[Sun Apr 12 10:22:53.229678 2026] [:error] [pid 60280:tid 60284] [client 20.199.184.99:9110] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "adsB_XBlLnDOYuIykkhkjwAAAcI"]
[Sun Apr 12 10:22:54.193923 2026] [:error] [pid 25327:tid 25340] [client 20.199.184.99:63816] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "adsB_i6h2tZEVJo9JFJ-0wAAAAQ"]
[Sun Apr 12 10:22:55.201125 2026] [:error] [pid 26600:tid 26641] [client 20.199.184.99:50233] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "adsB_-1YwAZiXhQKLYq8PQAAAYw"]
[Sun Apr 12 10:22:56.562055 2026] [:error] [pid 60280:tid 60296] [client 20.199.184.99:63868] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "adsCAHBlLnDOYuIykkhkmAAAAc4"]
[Sun Apr 12 10:22:57.744068 2026] [:error] [pid 60280:tid 60295] [client 20.199.184.99:50257] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adsCAXBlLnDOYuIykkhkmQAAAc0"]
[Sun Apr 12 10:22:59.243992 2026] [:error] [pid 26600:tid 26643] [client 20.199.184.99:61266] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adsCA-1YwAZiXhQKLYq8RAAAAY4"]
[Sun Apr 12 10:23:00.273096 2026] [:error] [pid 60280:tid 60286] [client 20.199.184.99:57247] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adsCBHBlLnDOYuIykkhknwAAAcQ"]
[Sun Apr 12 10:23:01.022031 2026] [:error] [pid 60280:tid 60294] [client 20.199.184.99:61274] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adsCBXBlLnDOYuIykkhkogAAAcw"]
[Sun Apr 12 10:23:02.290473 2026] [:error] [pid 25329:tid 25399] [client 20.199.184.99:50238] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "adsCBmdcIYsS8Iyaj11tpQAAAI0"]
[Sun Apr 12 10:23:04.955886 2026] [:error] [pid 25329:tid 25409] [client 20.199.184.99:50924] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "adsCCGdcIYsS8Iyaj11tqAAAAJM"]
[Sun Apr 12 10:23:07.493489 2026] [:error] [pid 25327:tid 25352] [client 20.199.184.99:50296] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "adsCCy6h2tZEVJo9JFJ-3gAAABA"]
[Sun Apr 12 10:23:09.071778 2026] [:error] [pid 25329:tid 25397] [client 20.199.184.99:57253] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "adsCDWdcIYsS8Iyaj11trAAAAIw"]
[Sun Apr 12 10:23:11.917842 2026] [:error] [pid 60280:tid 60286] [client 20.199.184.99:50264] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adsCD3BlLnDOYuIykkhktAAAAcQ"]
[Sun Apr 12 10:23:13.060955 2026] [:error] [pid 60280:tid 60297] [client 20.199.184.99:57272] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adsCEXBlLnDOYuIykkhktQAAAc8"]
[Sun Apr 12 10:23:15.035846 2026] [:error] [pid 25329:tid 25393] [client 20.199.184.99:8925] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adsCE2dcIYsS8Iyaj11tswAAAIo"]
[Sun Apr 12 10:23:27.616008 2026] [:error] [pid 26600:tid 26642] [client 20.199.184.99:63826] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "adsCH-1YwAZiXhQKLYq8bQAAAY0"]
[Sun Apr 12 10:23:28.548219 2026] [:error] [pid 60280:tid 60293] [client 20.199.184.99:50922] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "adsCIHBlLnDOYuIykkhk2gAAAcs"]
[Sun Apr 12 10:23:29.696517 2026] [:error] [pid 25329:tid 25388] [client 20.199.184.99:8918] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "adsCIWdcIYsS8Iyaj11twQAAAIc"]
[Sun Apr 12 10:23:30.760586 2026] [:error] [pid 25328:tid 25396] [client 20.199.184.99:61308] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "adsCIsxUaQZxT-e0YsBRkwAAAFM"]
[Sun Apr 12 10:23:31.593585 2026] [:error] [pid 25329:tid 25411] [client 20.199.184.99:61250] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "adsCI2dcIYsS8Iyaj11txAAAAJQ"]
[Sun Apr 12 10:23:32.423744 2026] [:error] [pid 26600:tid 26652] [client 20.199.184.99:50214] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "adsCJO1YwAZiXhQKLYq8cwAAAZc"]
[Sun Apr 12 10:23:33.207217 2026] [:error] [pid 60280:tid 60290] [client 20.199.184.99:50300] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "adsCJXBlLnDOYuIykkhk5AAAAcg"]
[Sun Apr 12 10:23:34.113789 2026] [:error] [pid 26600:tid 26650] [client 20.199.184.99:50224] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "adsCJu1YwAZiXhQKLYq8dwAAAZU"]
[Sun Apr 12 10:23:35.178960 2026] [:error] [pid 26600:tid 26642] [client 20.199.184.99:50929] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "adsCJ-1YwAZiXhQKLYq8fQAAAY0"]
[Sun Apr 12 10:23:36.019187 2026] [:error] [pid 60280:tid 60300] [client 20.199.184.99:63812] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "adsCKHBlLnDOYuIykkhk6wAAAdI"]
[Sun Apr 12 10:23:36.768581 2026] [:error] [pid 60280:tid 60283] [client 20.199.184.99:61301] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "adsCKHBlLnDOYuIykkhk7gAAAcE"]
[Sun Apr 12 10:23:37.262784 2026] [:error] [pid 60280:tid 60304] [client 20.199.184.99:63845] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "adsCKXBlLnDOYuIykkhk8AAAAdY"]
[Sun Apr 12 10:23:38.089905 2026] [:error] [pid 25437:tid 25459] [client 20.199.184.99:50927] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "adsCKnf97wYZje1ep_OjLAAAANQ"]
[Sun Apr 12 10:23:38.755152 2026] [:error] [pid 60280:tid 60296] [client 20.199.184.99:63855] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "adsCKnBlLnDOYuIykkhk-AAAAc4"]
[Sun Apr 12 10:23:39.802014 2026] [:error] [pid 25328:tid 25375] [client 20.199.184.99:60940] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "adsCK8xUaQZxT-e0YsBRqQAAAEk"]
[Sun Apr 12 10:23:40.365518 2026] [:error] [pid 25328:tid 25387] [client 20.199.184.99:60929] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "adsCLMxUaQZxT-e0YsBRqgAAAE8"]
[Sun Apr 12 10:23:40.886242 2026] [:error] [pid 25437:tid 25439] [client 20.199.184.99:61309] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jlex.php"] [unique_id "adsCLHf97wYZje1ep_OjMAAAAMA"]
[Sun Apr 12 10:23:41.532080 2026] [:error] [pid 26600:tid 26630] [client 20.199.184.99:61257] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jlex.php"] [unique_id "adsCLe1YwAZiXhQKLYq8hgAAAYE"]
[Sun Apr 12 10:23:42.186036 2026] [:error] [pid 26567:tid 26571] [client 20.199.184.99:57242] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jlex.php"] [unique_id "adsCLnhRpg6ptWFyFx1F7AAAAQI"]
[Sun Apr 12 10:23:42.781334 2026] [:error] [pid 25328:tid 25401] [client 20.199.184.99:8943] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jlex.php"] [unique_id "adsCLsxUaQZxT-e0YsBRsAAAAFU"]
[Sun Apr 12 10:23:43.447595 2026] [:error] [pid 25328:tid 25366] [client 20.199.184.99:50184] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xsas.php"] [unique_id "adsCL8xUaQZxT-e0YsBRtAAAAEI"]
[Sun Apr 12 10:23:44.093290 2026] [:error] [pid 26599:tid 26603] [client 20.199.184.99:61270] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xsas.php"] [unique_id "adsCMHG89LXoQbk_rwCEjwAAAUE"]
[Sun Apr 12 10:23:45.061057 2026] [:error] [pid 60280:tid 60299] [client 20.199.184.99:9030] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xsas.php"] [unique_id "adsCMXBlLnDOYuIykkhlBAAAAdE"]
[Sun Apr 12 10:23:45.613355 2026] [:error] [pid 25327:tid 25353] [client 20.199.184.99:60964] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xsas.php"] [unique_id "adsCMS6h2tZEVJo9JFJ--QAAABE"]
[Sun Apr 12 10:23:46.580606 2026] [:error] [pid 60280:tid 60304] [client 20.199.184.99:50248] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp/jp.php"] [unique_id "adsCMnBlLnDOYuIykkhlCAAAAdY"]
[Sun Apr 12 10:23:47.667227 2026] [:error] [pid 25328:tid 25394] [client 20.199.184.99:60941] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp/jp.php"] [unique_id "adsCM8xUaQZxT-e0YsBRuAAAAFI"]
[Sun Apr 12 10:23:48.736332 2026] [:error] [pid 26600:tid 26639] [client 20.199.184.99:50196] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp/jp.php"] [unique_id "adsCNO1YwAZiXhQKLYq8igAAAYo"]
[Sun Apr 12 10:23:52.239200 2026] [:error] [pid 60280:tid 60293] [client 20.199.184.99:63862] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp/jp.php"] [unique_id "adsCOHBlLnDOYuIykkhlFAAAAcs"]
[Sun Apr 12 10:23:53.021049 2026] [:error] [pid 26567:tid 26580] [client 20.199.184.99:57249] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8573.php"] [unique_id "adsCOXhRpg6ptWFyFx1F8gAAAQs"]
[Sun Apr 12 10:23:54.341232 2026] [:error] [pid 25437:tid 25456] [client 20.199.184.99:8919] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8573.php"] [unique_id "adsCOnf97wYZje1ep_OjPgAAANE"]
[Sun Apr 12 10:23:55.929028 2026] [:error] [pid 60280:tid 60303] [client 20.199.184.99:50237] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8573.php"] [unique_id "adsCO3BlLnDOYuIykkhlHwAAAdU"]
[Sun Apr 12 10:23:57.849460 2026] [:error] [pid 25437:tid 25447] [client 20.199.184.99:55437] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8573.php"] [unique_id "adsCPXf97wYZje1ep_OjRwAAAMg"]
[Sun Apr 12 10:23:59.151214 2026] [:error] [pid 25437:tid 25454] [client 20.199.184.99:50889] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "adsCP3f97wYZje1ep_OjUQAAAM8"]
[Sun Apr 12 10:24:00.834875 2026] [:error] [pid 60280:tid 60287] [client 20.199.184.99:8944] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "adsCQHBlLnDOYuIykkhlKwAAAcU"]
[Sun Apr 12 10:24:03.884929 2026] [:error] [pid 25328:tid 25391] [client 20.199.184.99:63835] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "adsCQ8xUaQZxT-e0YsBR1gAAAFE"]
[Sun Apr 12 10:24:06.249459 2026] [:error] [pid 25329:tid 25392] [client 20.199.184.99:60970] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "adsCRmdcIYsS8Iyaj11tyAAAAIk"]
[Sun Apr 12 10:24:07.129020 2026] [:error] [pid 25328:tid 25366] [client 20.199.184.99:50917] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "adsCR8xUaQZxT-e0YsBR4QAAAEI"]
[Sun Apr 12 10:24:09.413870 2026] [:error] [pid 25437:tid 25444] [client 20.199.184.99:63820] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "adsCSXf97wYZje1ep_OjcwAAAMU"]
[Sun Apr 12 10:24:12.875966 2026] [:error] [pid 60280:tid 60297] [client 20.199.184.99:57230] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "adsCTHBlLnDOYuIykkhlOQAAAc8"]
[Sun Apr 12 10:24:15.197518 2026] [:error] [pid 60280:tid 60300] [client 20.199.184.99:50921] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "adsCT3BlLnDOYuIykkhlQQAAAdI"]
[Sun Apr 12 10:24:18.775158 2026] [:error] [pid 26600:tid 26637] [client 20.199.184.99:57206] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws88.php"] [unique_id "adsCUu1YwAZiXhQKLYq8kwAAAYg"]
[Sun Apr 12 10:24:20.624434 2026] [:error] [pid 25328:tid 25379] [client 20.199.184.99:8936] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws88.php"] [unique_id "adsCVMxUaQZxT-e0YsBR6gAAAEs"]
[Sun Apr 12 10:24:22.243791 2026] [:error] [pid 60280:tid 60300] [client 20.199.184.99:50274] [client 20.199.184.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws88.php"] [unique_id "adsCVnBlLnDOYuIykkhlTwAAAdI"]
[Sun Apr 12 11:01:56.905033 2026] [:error] [pid 60280:tid 60292] [client 158.158.49.99:47357] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/less.php"] [unique_id "adsLJHBlLnDOYuIykkh53gAAAco"]
[Sun Apr 12 11:01:58.256177 2026] [:error] [pid 25327:tid 25345] [client 158.158.49.99:44581] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/less.php"] [unique_id "adsLJi6h2tZEVJo9JFKGewAAAAk"]
[Sun Apr 12 11:01:59.293834 2026] [:error] [pid 25328:tid 25375] [client 158.158.49.99:35366] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/less.php"] [unique_id "adsLJ8xUaQZxT-e0YsBi0QAAAEk"]
[Sun Apr 12 11:02:00.376463 2026] [:error] [pid 26567:tid 26592] [client 158.158.49.99:3898] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/less.php"] [unique_id "adsLKHhRpg6ptWFyFx1OpgAAARc"]
[Sun Apr 12 11:02:00.614094 2026] [:error] [pid 25437:tid 25442] [client 158.158.49.99:42770] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x3x.php"] [unique_id "adsLKHf97wYZje1ep_OwfgAAAMM"]
[Sun Apr 12 11:02:01.526064 2026] [:error] [pid 60280:tid 60298] [client 158.158.49.99:46343] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x3x.php"] [unique_id "adsLKXBlLnDOYuIykkh58gAAAdA"]
[Sun Apr 12 11:02:02.048673 2026] [:error] [pid 26600:tid 26645] [client 158.158.49.99:34469] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x3x.php"] [unique_id "adsLKu1YwAZiXhQKLYrGzQAAAZA"]
[Sun Apr 12 11:02:02.663600 2026] [:error] [pid 26600:tid 26652] [client 158.158.49.99:42790] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x3x.php"] [unique_id "adsLKu1YwAZiXhQKLYrG0AAAAZc"]
[Sun Apr 12 11:02:03.430844 2026] [:error] [pid 25437:tid 25443] [client 158.158.49.99:48042] [client 158.158.49.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Ipv6.php"] [unique_id "adsLK3f97wYZje1ep_OwgAAAAMQ"]
[Sun Apr 12 11:02:03.948964 2026] [:error] [pid 25327:tid 25352] [client 158.158.49.99:34481] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/state.php"] [unique_id "adsLKy6h2tZEVJo9JFKGfgAAABA"]
[Sun Apr 12 11:02:04.849023 2026] [:error] [pid 25329:tid 25388] [client 158.158.49.99:47304] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/state.php"] [unique_id "adsLLGdcIYsS8Iyaj11zQQAAAIc"]
[Sun Apr 12 11:02:05.447384 2026] [:error] [pid 26599:tid 26605] [client 158.158.49.99:38940] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/state.php"] [unique_id "adsLLXG89LXoQbk_rwCLvwAAAUM"]
[Sun Apr 12 11:02:06.012701 2026] [:error] [pid 25328:tid 25367] [client 158.158.49.99:35343] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/state.php"] [unique_id "adsLLsxUaQZxT-e0YsBi2gAAAEM"]
[Sun Apr 12 11:02:06.723718 2026] [:error] [pid 26599:tid 26604] [client 158.158.49.99:46340] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xozx.php"] [unique_id "adsLLnG89LXoQbk_rwCLwwAAAUI"]
[Sun Apr 12 11:02:07.368614 2026] [:error] [pid 25329:tid 25404] [client 158.158.49.99:38967] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xozx.php"] [unique_id "adsLL2dcIYsS8Iyaj11zQwAAAJA"]
[Sun Apr 12 11:02:08.220581 2026] [:error] [pid 25329:tid 25381] [client 158.158.49.99:34446] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xozx.php"] [unique_id "adsLMGdcIYsS8Iyaj11zSAAAAIM"]
[Sun Apr 12 11:02:08.793037 2026] [:error] [pid 26599:tid 26626] [client 158.158.49.99:33111] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xozx.php"] [unique_id "adsLMHG89LXoQbk_rwCLyAAAAVg"]
[Sun Apr 12 11:02:09.712465 2026] [:error] [pid 25437:tid 25450] [client 158.158.49.99:47348] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1100.php"] [unique_id "adsLMXf97wYZje1ep_OwhAAAAMs"]
[Sun Apr 12 11:02:10.455413 2026] [:error] [pid 26599:tid 26617] [client 158.158.49.99:42777] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1100.php"] [unique_id "adsLMnG89LXoQbk_rwCLzAAAAU8"]
[Sun Apr 12 11:02:11.255914 2026] [:error] [pid 25328:tid 25375] [client 158.158.49.99:35331] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1100.php"] [unique_id "adsLM8xUaQZxT-e0YsBi4gAAAEk"]
[Sun Apr 12 11:02:12.087575 2026] [:error] [pid 25328:tid 25401] [client 158.158.49.99:46380] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1100.php"] [unique_id "adsLNMxUaQZxT-e0YsBi5AAAAFU"]
[Sun Apr 12 11:02:13.221810 2026] [:error] [pid 25437:tid 25451] [client 158.158.49.99:38096] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "adsLNXf97wYZje1ep_OwiQAAAMw"]
[Sun Apr 12 11:02:13.895978 2026] [:error] [pid 25327:tid 25350] [client 158.158.49.99:3867] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "adsLNS6h2tZEVJo9JFKGhgAAAA4"]
[Sun Apr 12 11:02:15.170910 2026] [:error] [pid 25328:tid 25377] [client 158.158.49.99:46384] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "adsLN8xUaQZxT-e0YsBi6gAAAEo"]
[Sun Apr 12 11:02:16.255797 2026] [:error] [pid 25328:tid 25370] [client 158.158.49.99:46348] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "adsLOMxUaQZxT-e0YsBi8AAAAEY"]
[Sun Apr 12 11:02:18.530204 2026] [:error] [pid 25328:tid 25405] [client 158.158.49.99:58389] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/97.php"] [unique_id "adsLOsxUaQZxT-e0YsBi8wAAAFc"]
[Sun Apr 12 11:02:19.281777 2026] [:error] [pid 25437:tid 25459] [client 158.158.49.99:46950] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/97.php"] [unique_id "adsLO3f97wYZje1ep_OwkAAAANQ"]
[Sun Apr 12 11:02:20.880396 2026] [:error] [pid 25329:tid 25390] [client 158.158.49.99:54130] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/97.php"] [unique_id "adsLPGdcIYsS8Iyaj11zTgAAAIg"]
[Sun Apr 12 11:02:22.830713 2026] [:error] [pid 26600:tid 26633] [client 158.158.49.99:33633] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/97.php"] [unique_id "adsLPu1YwAZiXhQKLYrG3AAAAYQ"]
[Sun Apr 12 11:02:23.911565 2026] [:error] [pid 25328:tid 25375] [client 158.158.49.99:3849] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file-gertdxz.php"] [unique_id "adsLP8xUaQZxT-e0YsBjAQAAAEk"]
[Sun Apr 12 11:02:26.038808 2026] [:error] [pid 60280:tid 60290] [client 158.158.49.99:50573] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file-gertdxz.php"] [unique_id "adsLQnBlLnDOYuIykkh6EgAAAcg"]
[Sun Apr 12 11:02:26.909826 2026] [:error] [pid 60280:tid 60291] [client 158.158.49.99:58400] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file-gertdxz.php"] [unique_id "adsLQnBlLnDOYuIykkh6FgAAAck"]
[Sun Apr 12 11:02:28.434607 2026] [:error] [pid 25327:tid 25356] [client 158.158.49.99:38924] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file-gertdxz.php"] [unique_id "adsLRC6h2tZEVJo9JFKGjwAAABQ"]
[Sun Apr 12 11:02:29.801287 2026] [:error] [pid 26600:tid 26639] [client 158.158.49.99:50617] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "adsLRe1YwAZiXhQKLYrG5AAAAYo"]
[Sun Apr 12 11:02:30.474304 2026] [:error] [pid 60280:tid 60303] [client 158.158.49.99:3854] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "adsLRnBlLnDOYuIykkh6IAAAAdU"]
[Sun Apr 12 11:02:31.530283 2026] [:error] [pid 26600:tid 26630] [client 158.158.49.99:50571] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "adsLR-1YwAZiXhQKLYrG5wAAAYE"]
[Sun Apr 12 11:02:33.127090 2026] [:error] [pid 26600:tid 26632] [client 158.158.49.99:3778] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "adsLSe1YwAZiXhQKLYrG6gAAAYM"]
[Sun Apr 12 11:02:34.592799 2026] [:error] [pid 60280:tid 60282] [client 158.158.49.99:35339] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "adsLSnBlLnDOYuIykkh6KQAAAcA"]
[Sun Apr 12 11:02:35.230873 2026] [:error] [pid 25437:tid 25444] [client 158.158.49.99:47340] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "adsLS3f97wYZje1ep_OwkwAAAMU"]
[Sun Apr 12 11:02:38.391536 2026] [:error] [pid 60280:tid 60289] [client 158.158.49.99:58391] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "adsLTnBlLnDOYuIykkh6NQAAAcc"]
[Sun Apr 12 11:02:40.027611 2026] [:error] [pid 26600:tid 26646] [client 158.158.49.99:47851] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "adsLUO1YwAZiXhQKLYrG8AAAAZE"]
[Sun Apr 12 11:02:41.120807 2026] [:error] [pid 25327:tid 25345] [client 158.158.49.99:47838] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/config.php"] [unique_id "adsLUS6h2tZEVJo9JFKGmAAAAAk"]
[Sun Apr 12 11:02:42.049652 2026] [:error] [pid 25437:tid 25456] [client 158.158.49.99:46925] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/config.php"] [unique_id "adsLUnf97wYZje1ep_OwnQAAANE"]
[Sun Apr 12 11:02:42.846454 2026] [:error] [pid 26599:tid 26611] [client 158.158.49.99:33635] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/config.php"] [unique_id "adsLUnG89LXoQbk_rwCL4gAAAUk"]
[Sun Apr 12 11:02:43.707541 2026] [:error] [pid 25437:tid 25454] [client 158.158.49.99:57840] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/config.php"] [unique_id "adsLU3f97wYZje1ep_OwoAAAAM8"]
[Sun Apr 12 11:02:44.732747 2026] [:error] [pid 25437:tid 25460] [client 158.158.49.99:35780] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "adsLVHf97wYZje1ep_OwoQAAANU"]
[Sun Apr 12 11:02:45.314607 2026] [:error] [pid 25327:tid 25342] [client 158.158.49.99:58397] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "adsLVS6h2tZEVJo9JFKGnAAAAAY"]
[Sun Apr 12 11:02:46.070059 2026] [:error] [pid 25437:tid 25462] [client 158.158.49.99:3829] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "adsLVnf97wYZje1ep_OwpwAAANc"]
[Sun Apr 12 11:02:46.867088 2026] [:error] [pid 60280:tid 60284] [client 158.158.49.99:33660] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "adsLVnBlLnDOYuIykkh6WQAAAcI"]
[Sun Apr 12 11:02:47.717395 2026] [:error] [pid 26567:tid 26585] [client 158.158.49.99:50053] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/9.php"] [unique_id "adsLV3hRpg6ptWFyFx1OvQAAARA"]
[Sun Apr 12 11:02:48.447764 2026] [:error] [pid 60280:tid 60290] [client 158.158.49.99:32567] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/9.php"] [unique_id "adsLWHBlLnDOYuIykkh6WgAAAcg"]
[Sun Apr 12 11:02:49.150397 2026] [:error] [pid 25328:tid 25385] [client 158.158.49.99:50064] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/9.php"] [unique_id "adsLWcxUaQZxT-e0YsBjMAAAAE4"]
[Sun Apr 12 11:02:49.841848 2026] [:error] [pid 26600:tid 26636] [client 158.158.49.99:3837] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/9.php"] [unique_id "adsLWe1YwAZiXhQKLYrG-AAAAYc"]
[Sun Apr 12 11:02:50.474146 2026] [:error] [pid 26567:tid 26580] [client 158.158.49.99:47830] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "adsLWnhRpg6ptWFyFx1OxAAAAQs"]
[Sun Apr 12 11:02:50.966008 2026] [:error] [pid 25437:tid 25445] [client 158.158.49.99:45484] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "adsLWnf97wYZje1ep_OwrgAAAMY"]
[Sun Apr 12 11:02:51.585376 2026] [:error] [pid 26567:tid 26572] [client 158.158.49.99:48290] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "adsLW3hRpg6ptWFyFx1OxgAAAQM"]
[Sun Apr 12 11:02:52.378164 2026] [:error] [pid 26567:tid 26591] [client 158.158.49.99:45446] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "adsLXHhRpg6ptWFyFx1OyAAAARY"]
[Sun Apr 12 11:02:52.953825 2026] [:error] [pid 26600:tid 26637] [client 158.158.49.99:50604] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "adsLXO1YwAZiXhQKLYrG_AAAAYg"]
[Sun Apr 12 11:02:53.547685 2026] [:error] [pid 25328:tid 25408] [client 158.158.49.99:3810] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "adsLXcxUaQZxT-e0YsBjNAAAAFg"]
[Sun Apr 12 11:02:54.133178 2026] [:error] [pid 25329:tid 25412] [client 158.158.49.99:39948] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "adsLXmdcIYsS8Iyaj11zYQAAAJU"]
[Sun Apr 12 11:02:54.770300 2026] [:error] [pid 25328:tid 25367] [client 158.158.49.99:32535] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "adsLXsxUaQZxT-e0YsBjOAAAAEM"]
[Sun Apr 12 11:02:55.419663 2026] [:error] [pid 26599:tid 26622] [client 158.158.49.99:57159] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wswer1.php"] [unique_id "adsLX3G89LXoQbk_rwCL6gAAAVQ"]
[Sun Apr 12 11:03:04.929562 2026] [:error] [pid 60280:tid 60303] [client 158.158.49.99:54873] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wziar1.php"] [unique_id "adsLaHBlLnDOYuIykkh6kgAAAdU"]
[Sun Apr 12 11:03:05.679233 2026] [:error] [pid 25328:tid 25385] [client 158.158.49.99:37603] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wziar1.php"] [unique_id "adsLacxUaQZxT-e0YsBjPQAAAE4"]
[Sun Apr 12 11:03:06.567071 2026] [:error] [pid 26599:tid 26618] [client 158.158.49.99:31364] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wziar1.php"] [unique_id "adsLanG89LXoQbk_rwCL7wAAAVA"]
[Sun Apr 12 11:03:07.214179 2026] [:error] [pid 25328:tid 25366] [client 158.158.49.99:35621] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wziar1.php"] [unique_id "adsLa8xUaQZxT-e0YsBjPgAAAEI"]
[Sun Apr 12 11:03:08.079281 2026] [:error] [pid 25329:tid 25411] [client 158.158.49.99:31387] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xs.php"] [unique_id "adsLbGdcIYsS8Iyaj11zaAAAAJQ"]
[Sun Apr 12 11:03:09.119148 2026] [:error] [pid 26600:tid 26647] [client 158.158.49.99:42743] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xs.php"] [unique_id "adsLbe1YwAZiXhQKLYrHCgAAAZI"]
[Sun Apr 12 11:03:10.040178 2026] [:error] [pid 26600:tid 26639] [client 158.158.49.99:54848] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xs.php"] [unique_id "adsLbu1YwAZiXhQKLYrHDwAAAYo"]
[Sun Apr 12 11:03:11.136260 2026] [:error] [pid 26600:tid 26631] [client 158.158.49.99:36326] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xs.php"] [unique_id "adsLb-1YwAZiXhQKLYrHEQAAAYI"]
[Sun Apr 12 11:03:12.147337 2026] [:error] [pid 26567:tid 26573] [client 158.158.49.99:39951] [client 158.158.49.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "adsLcHhRpg6ptWFyFx1O1wAAAQQ"]
[Sun Apr 12 11:03:13.271512 2026] [:error] [pid 26600:tid 26635] [client 158.158.49.99:39987] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/pp.php"] [unique_id "adsLce1YwAZiXhQKLYrHFAAAAYY"]
[Sun Apr 12 11:03:13.952348 2026] [:error] [pid 25328:tid 25377] [client 158.158.49.99:31418] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/pp.php"] [unique_id "adsLccxUaQZxT-e0YsBjSwAAAEo"]
[Sun Apr 12 11:03:14.727755 2026] [:error] [pid 26600:tid 26629] [client 158.158.49.99:35855] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/pp.php"] [unique_id "adsLcu1YwAZiXhQKLYrHHAAAAYA"]
[Sun Apr 12 11:03:15.359695 2026] [:error] [pid 25328:tid 25366] [client 158.158.49.99:31372] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/pp.php"] [unique_id "adsLc8xUaQZxT-e0YsBjTgAAAEI"]
[Sun Apr 12 11:03:16.947221 2026] [:error] [pid 26600:tid 26637] [client 158.158.49.99:42737] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/myy.php"] [unique_id "adsLdO1YwAZiXhQKLYrHIgAAAYg"]
[Sun Apr 12 11:03:19.294980 2026] [:error] [pid 26600:tid 26647] [client 158.158.49.99:3706] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/myy.php"] [unique_id "adsLd-1YwAZiXhQKLYrHKQAAAZI"]
[Sun Apr 12 11:03:20.166784 2026] [:error] [pid 25328:tid 25364] [client 158.158.49.99:36295] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/myy.php"] [unique_id "adsLeMxUaQZxT-e0YsBjXgAAAEA"]
[Sun Apr 12 11:03:20.954744 2026] [:error] [pid 26600:tid 26638] [client 158.158.49.99:35854] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/myy.php"] [unique_id "adsLeO1YwAZiXhQKLYrHLgAAAYk"]
[Sun Apr 12 11:03:21.795849 2026] [:error] [pid 26600:tid 26636] [client 158.158.49.99:43611] [client 158.158.49.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "adsLee1YwAZiXhQKLYrHNQAAAYc"]
[Sun Apr 12 11:03:24.378307 2026] [:error] [pid 60280:tid 60289] [client 158.158.49.99:35282] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wdone1.php"] [unique_id "adsLfHBlLnDOYuIykkh6lAAAAcc"]
[Sun Apr 12 11:03:25.538688 2026] [:error] [pid 25327:tid 25356] [client 158.158.49.99:43606] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wdone1.php"] [unique_id "adsLfS6h2tZEVJo9JFKGrwAAABQ"]
[Sun Apr 12 11:03:26.157414 2026] [:error] [pid 26600:tid 26650] [client 158.158.49.99:32460] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wdone1.php"] [unique_id "adsLfu1YwAZiXhQKLYrHNwAAAZU"]
[Sun Apr 12 11:03:27.174888 2026] [:error] [pid 60280:tid 60296] [client 158.158.49.99:35131] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "adsLf3BlLnDOYuIykkh6lgAAAc4"]
[Sun Apr 12 11:03:28.241721 2026] [:error] [pid 26567:tid 26579] [client 158.158.49.99:3751] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "adsLgHhRpg6ptWFyFx1O2gAAAQo"]
[Sun Apr 12 11:03:28.881795 2026] [:error] [pid 26600:tid 26648] [client 158.158.49.99:3170] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "adsLgO1YwAZiXhQKLYrHOgAAAZM"]
[Sun Apr 12 11:03:29.449997 2026] [:error] [pid 26599:tid 26616] [client 158.158.49.99:49032] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "adsLgXG89LXoQbk_rwCMEQAAAU4"]
[Sun Apr 12 11:03:30.081158 2026] [:error] [pid 25329:tid 25392] [client 158.158.49.99:36356] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wsheet1.php"] [unique_id "adsLgmdcIYsS8Iyaj11zdAAAAIk"]
[Sun Apr 12 11:03:30.874003 2026] [:error] [pid 26599:tid 26626] [client 158.158.49.99:35035] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wsheet1.php"] [unique_id "adsLgnG89LXoQbk_rwCMFQAAAVg"]
[Sun Apr 12 11:03:31.636929 2026] [:error] [pid 26600:tid 26649] [client 158.158.49.99:35098] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wsheet1.php"] [unique_id "adsLg-1YwAZiXhQKLYrHPQAAAZQ"]
[Sun Apr 12 11:03:32.460511 2026] [:error] [pid 25437:tid 25441] [client 158.158.49.99:59440] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wsheet1.php"] [unique_id "adsLhHf97wYZje1ep_OwyAAAAMI"]
[Sun Apr 12 11:03:33.086846 2026] [:error] [pid 25327:tid 25348] [client 158.158.49.99:3167] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "adsLhS6h2tZEVJo9JFKGsgAAAAw"]
[Sun Apr 12 11:03:33.886822 2026] [:error] [pid 26599:tid 26608] [client 158.158.49.99:35097] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "adsLhXG89LXoQbk_rwCMGAAAAUY"]
[Sun Apr 12 11:03:35.266173 2026] [:error] [pid 25328:tid 25375] [client 158.158.49.99:56763] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "adsLh8xUaQZxT-e0YsBjdwAAAEk"]
[Sun Apr 12 11:03:36.424939 2026] [:error] [pid 25328:tid 25372] [client 158.158.49.99:3732] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "adsLiMxUaQZxT-e0YsBjgAAAAEc"]
[Sun Apr 12 11:03:37.388245 2026] [:error] [pid 25328:tid 25391] [client 158.158.49.99:49052] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ava.php"] [unique_id "adsLicxUaQZxT-e0YsBjhAAAAFE"]
[Sun Apr 12 11:03:38.117639 2026] [:error] [pid 25328:tid 25396] [client 158.158.49.99:59451] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ava.php"] [unique_id "adsLisxUaQZxT-e0YsBjiQAAAFM"]
[Sun Apr 12 11:03:39.464383 2026] [:error] [pid 60280:tid 60290] [client 158.158.49.99:57402] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ava.php"] [unique_id "adsLi3BlLnDOYuIykkh6qwAAAcg"]
[Sun Apr 12 11:03:40.070835 2026] [:error] [pid 25437:tid 25442] [client 158.158.49.99:32487] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ava.php"] [unique_id "adsLjHf97wYZje1ep_OwzQAAAMM"]
[Sun Apr 12 11:03:40.707569 2026] [:error] [pid 25328:tid 25372] [client 158.158.49.99:3724] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/awh.php"] [unique_id "adsLjMxUaQZxT-e0YsBjkQAAAEc"]
[Sun Apr 12 11:03:41.385905 2026] [:error] [pid 25329:tid 25388] [client 158.158.49.99:59415] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/awh.php"] [unique_id "adsLjWdcIYsS8Iyaj11zfwAAAIc"]
[Sun Apr 12 11:03:42.463111 2026] [:error] [pid 26599:tid 26625] [client 158.158.49.99:49048] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/awh.php"] [unique_id "adsLjnG89LXoQbk_rwCMHAAAAVc"]
[Sun Apr 12 11:03:43.212768 2026] [:error] [pid 60280:tid 60297] [client 158.158.49.99:57348] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/awh.php"] [unique_id "adsLj3BlLnDOYuIykkh6tAAAAc8"]
[Sun Apr 12 11:03:44.167331 2026] [:error] [pid 60280:tid 60294] [client 158.158.49.99:51179] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/r2.php"] [unique_id "adsLkHBlLnDOYuIykkh6twAAAcw"]
[Sun Apr 12 11:03:45.043637 2026] [:error] [pid 26599:tid 26626] [client 158.158.49.99:55156] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/r2.php"] [unique_id "adsLkXG89LXoQbk_rwCMIgAAAVg"]
[Sun Apr 12 11:03:46.582410 2026] [:error] [pid 25328:tid 25383] [client 158.158.49.99:57399] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/r2.php"] [unique_id "adsLksxUaQZxT-e0YsBjmwAAAE0"]
[Sun Apr 12 11:03:48.190767 2026] [:error] [pid 60280:tid 60292] [client 158.158.49.99:36396] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/r2.php"] [unique_id "adsLlHBlLnDOYuIykkh6uwAAAco"]
[Sun Apr 12 11:03:51.128865 2026] [:error] [pid 25328:tid 25377] [client 158.158.49.99:32486] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "adsLl8xUaQZxT-e0YsBjrAAAAEo"]
[Sun Apr 12 11:03:51.768839 2026] [:error] [pid 25329:tid 25374] [client 158.158.49.99:51139] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "adsLl2dcIYsS8Iyaj11ziAAAAIA"]
[Sun Apr 12 11:03:53.215092 2026] [:error] [pid 60280:tid 60296] [client 158.158.49.99:57381] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "adsLmXBlLnDOYuIykkh6wQAAAc4"]
[Sun Apr 12 11:03:55.117404 2026] [:error] [pid 25328:tid 25367] [client 158.158.49.99:43188] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "adsLm8xUaQZxT-e0YsBjsQAAAEM"]
[Sun Apr 12 11:03:56.068446 2026] [:error] [pid 25328:tid 25385] [client 158.158.49.99:58304] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/db.php"] [unique_id "adsLnMxUaQZxT-e0YsBjsgAAAE4"]
[Sun Apr 12 11:03:57.146947 2026] [:error] [pid 25437:tid 25451] [client 158.158.49.99:51169] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/db.php"] [unique_id "adsLnXf97wYZje1ep_Ow1AAAAMw"]
[Sun Apr 12 11:03:58.251650 2026] [:error] [pid 26567:tid 26578] [client 158.158.49.99:35076] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/db.php"] [unique_id "adsLnnhRpg6ptWFyFx1O5QAAAQk"]
[Sun Apr 12 11:03:59.497158 2026] [:error] [pid 25328:tid 25375] [client 158.158.49.99:57397] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/db.php"] [unique_id "adsLn8xUaQZxT-e0YsBjuAAAAEk"]
[Sun Apr 12 11:04:00.526945 2026] [:error] [pid 25328:tid 25368] [client 158.158.49.99:35084] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class-wp-image.php"] [unique_id "adsLoMxUaQZxT-e0YsBjuwAAAEQ"]
[Sun Apr 12 11:04:01.895522 2026] [:error] [pid 25437:tid 25456] [client 158.158.49.99:51183] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class-wp-image.php"] [unique_id "adsLoXf97wYZje1ep_Ow2QAAANE"]
[Sun Apr 12 11:04:03.377794 2026] [:error] [pid 26599:tid 26602] [client 158.158.49.99:36382] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class-wp-image.php"] [unique_id "adsLo3G89LXoQbk_rwCMPQAAAUA"]
[Sun Apr 12 11:04:03.966872 2026] [:error] [pid 26599:tid 26609] [client 158.158.49.99:40701] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class-wp-image.php"] [unique_id "adsLo3G89LXoQbk_rwCMQwAAAUc"]
[Sun Apr 12 11:04:11.600854 2026] [:error] [pid 60280:tid 60300] [client 158.158.49.99:51160] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adsLq3BlLnDOYuIykkh65AAAAdI"]
[Sun Apr 12 11:04:12.617310 2026] [:error] [pid 25328:tid 25379] [client 158.158.49.99:57096] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adsLrMxUaQZxT-e0YsBj3gAAAEs"]
[Sun Apr 12 11:04:13.260061 2026] [:error] [pid 25328:tid 25403] [client 158.158.49.99:59424] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adsLrcxUaQZxT-e0YsBj4AAAAFY"]
[Sun Apr 12 11:04:14.050498 2026] [:error] [pid 25437:tid 25446] [client 158.158.49.99:51152] [client 158.158.49.99] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/eFpU3yHnriNNLtvdefault.php"] [unique_id "adsLrnf97wYZje1ep_Ow6AAAAMc"]
[Sun Apr 12 14:21:30.956458 2026] [autoindex:error] [pid 26567:tid 26590] [client 143.110.240.70:50733] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive, referer: binance.com
[Sun Apr 12 18:01:45.501442 2026] [:error] [pid 25327:tid 25343] [client 143.110.240.70:60604] [client 143.110.240.70] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/"] [unique_id "adttiS6h2tZEVJo9JFLHRgAAAAc"], referer: binance.com
[Sun Apr 12 23:09:25.087336 2026] [:error] [pid 25437:tid 25449] [client 34.83.162.25:61830] [client 34.83.162.25] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.83.162.25, incrementing ddos counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "adu1pXf97wYZje1ep_ONZwAAAMo"]
[Sun Apr 12 23:09:26.516669 2026] [:error] [pid 25437:tid 25454] [client 34.83.162.25:61830] [client 34.83.162.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "adu1pnf97wYZje1ep_ONcAAAAM8"]
[Sun Apr 12 23:09:27.192363 2026] [:error] [pid 25327:tid 25336] [client 34.83.162.25:57661] [client 34.83.162.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "adu1py6h2tZEVJo9JFIVdwAAAAA"]
[Sun Apr 12 23:09:27.932765 2026] [:error] [pid 60280:tid 60292] [client 34.83.162.25:49613] [client 34.83.162.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "adu1p3BlLnDOYuIykkgSkgAAAco"]
[Sun Apr 12 23:09:28.602607 2026] [:error] [pid 25327:tid 25359] [client 34.83.162.25:50272] [client 34.83.162.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "adu1qC6h2tZEVJo9JFIVfAAAABc"]
[Sun Apr 12 23:09:29.355941 2026] [:error] [pid 25329:tid 25381] [client 34.83.162.25:62690] [client 34.83.162.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "adu1qWdcIYsS8Iyaj13d6AAAAIM"]
[Sun Apr 12 23:09:30.107967 2026] [:error] [pid 60280:tid 60284] [client 34.83.162.25:53102] [client 34.83.162.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "adu1qnBlLnDOYuIykkgSnQAAAcI"]
[Sun Apr 12 23:09:30.777959 2026] [:error] [pid 60280:tid 60282] [client 34.83.162.25:59770] [client 34.83.162.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "adu1qnBlLnDOYuIykkgSoAAAAcA"]
[Sun Apr 12 23:09:31.497441 2026] [:error] [pid 25328:tid 25377] [client 34.83.162.25:58053] [client 34.83.162.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "adu1q8xUaQZxT-e0YsCBTAAAAEo"]
[Sun Apr 12 23:09:32.149655 2026] [:error] [pid 25329:tid 25376] [client 34.83.162.25:55140] [client 34.83.162.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "adu1rGdcIYsS8Iyaj13d8AAAAIE"]
[Sun Apr 12 23:09:32.859956 2026] [:error] [pid 60280:tid 60290] [client 34.83.162.25:58984] [client 34.83.162.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "adu1rHBlLnDOYuIykkgSqQAAAcg"]
[Sun Apr 12 23:09:33.531799 2026] [:error] [pid 26567:tid 26585] [client 34.83.162.25:55151] [client 34.83.162.25] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "adu1rXhRpg6ptWFyFx3cPwAAARA"]
[Mon Apr 13 07:31:16.922748 2026] [:error] [pid 11325:tid 11349] [client 20.151.248.149:16372] [client 20.151.248.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "adwrROCGj3EEJtCwa0PZnAAAARY"]
[Mon Apr 13 07:31:17.332816 2026] [:error] [pid 11325:tid 11342] [client 20.151.248.149:16261] [client 20.151.248.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "adwrReCGj3EEJtCwa0PZnQAAAQ8"]
[Mon Apr 13 07:31:17.744082 2026] [:error] [pid 33943:tid 34013] [client 20.151.248.149:16271] [client 20.151.248.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "adwrRayoXuZjocnxM5GclQAAAIc"]
[Mon Apr 13 07:31:18.154685 2026] [:error] [pid 33942:tid 33984] [client 20.151.248.149:16341] [client 20.151.248.149] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/new4.php"] [unique_id "adwrRhNHe8geO_lMeFbC7gAAAEU"]
[Mon Apr 13 15:09:08.477195 2026] [:error] [pid 57183:tid 57191] [client 8.229.162.101:59614] [client 8.229.162.101] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 8.229.162.101, incrementing ddos counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "adyWlDDO3t8R5NaxzYSF6gAAAUY"]
[Mon Apr 13 15:09:08.910446 2026] [:error] [pid 57183:tid 57209] [client 8.229.162.101:59614] [client 8.229.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "adyWlDDO3t8R5NaxzYSF7gAAAVg"]
[Mon Apr 13 15:09:09.577284 2026] [:error] [pid 57183:tid 57205] [client 8.229.162.101:62849] [client 8.229.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "adyWlTDO3t8R5NaxzYSF8QAAAVQ"]
[Mon Apr 13 15:09:10.268517 2026] [:error] [pid 7228:tid 7239] [client 8.229.162.101:63969] [client 8.229.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "adyWlgEnn1dQrOSHHNUjyQAAAQk"]
[Mon Apr 13 15:09:10.984595 2026] [:error] [pid 63406:tid 63422] [client 8.229.162.101:65167] [client 8.229.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "adyWlrHZEIkQ0Zmgp5q-GwAAAMs"]
[Mon Apr 13 15:09:11.653742 2026] [:error] [pid 7228:tid 7236] [client 8.229.162.101:50152] [client 8.229.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "adyWlwEnn1dQrOSHHNUjzwAAAQY"]
[Mon Apr 13 15:09:12.345629 2026] [:error] [pid 63311:tid 63378] [client 8.229.162.101:51622] [client 8.229.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "adyWmKHjrGN1MqBCVFmwsgAAAIc"]
[Mon Apr 13 15:09:13.038047 2026] [:error] [pid 63406:tid 63420] [client 8.229.162.101:53017] [client 8.229.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "adyWmbHZEIkQ0Zmgp5q-IQAAAMk"]
[Mon Apr 13 15:09:13.692386 2026] [:error] [pid 7228:tid 7246] [client 8.229.162.101:54428] [client 8.229.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2019/wp-includes/wlwmanifest.xml"] [unique_id "adyWmQEnn1dQrOSHHNUj1wAAARA"]
[Mon Apr 13 15:09:14.347115 2026] [:error] [pid 7228:tid 7244] [client 8.229.162.101:55342] [client 8.229.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shop/wp-includes/wlwmanifest.xml"] [unique_id "adyWmgEnn1dQrOSHHNUj2wAAAQ4"]
[Mon Apr 13 15:09:15.037979 2026] [:error] [pid 57183:tid 57198] [client 8.229.162.101:56081] [client 8.229.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "adyWmzDO3t8R5NaxzYSF-AAAAU0"]
[Mon Apr 13 15:09:15.741384 2026] [:error] [pid 57183:tid 57207] [client 8.229.162.101:56850] [client 8.229.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "adyWmzDO3t8R5NaxzYSF-QAAAVY"]
[Mon Apr 13 15:09:16.443399 2026] [:error] [pid 7228:tid 7254] [client 8.229.162.101:57960] [client 8.229.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "adyWnAEnn1dQrOSHHNUj5AAAARg"]
[Mon Apr 13 15:09:17.145789 2026] [:error] [pid 57183:tid 57189] [client 8.229.162.101:58983] [client 8.229.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "adyWnTDO3t8R5NaxzYSGAgAAAUQ"]
[Mon Apr 13 15:09:17.848607 2026] [:error] [pid 57183:tid 57205] [client 8.229.162.101:59994] [client 8.229.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "adyWnTDO3t8R5NaxzYSGCgAAAVQ"]
[Mon Apr 13 15:09:18.553494 2026] [:error] [pid 63311:tid 63380] [client 8.229.162.101:61269] [client 8.229.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "adyWnqHjrGN1MqBCVFmw0QAAAIk"]
[Mon Apr 13 15:09:19.271276 2026] [:error] [pid 63406:tid 63411] [client 8.229.162.101:62729] [client 8.229.162.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "adyWn7HZEIkQ0Zmgp5q-MwAAAMA"]
[Mon Apr 13 20:37:31.088940 2026] [:error] [pid 57183:tid 57190] [client 51.103.126.2:49804] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws60.php"] [unique_id "adzjizDO3t8R5NaxzYQ64wAAAUU"]
[Mon Apr 13 20:38:25.118011 2026] [:error] [pid 57183:tid 57198] [client 158.158.1.233:6945] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws60.php"] [unique_id "adzjwTDO3t8R5NaxzYQ7OgAAAU0"]
[Mon Apr 13 20:38:30.124618 2026] [:error] [pid 57183:tid 57202] [client 158.158.1.233:26226] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws60.php"] [unique_id "adzjxjDO3t8R5NaxzYQ7SgAAAVE"]
[Mon Apr 13 20:38:32.685516 2026] [:error] [pid 63309:tid 63336] [client 158.158.1.233:53839] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws60.php"] [unique_id "adzjyEpIKZ10weXpf0Un6gAAABc"]
[Mon Apr 13 20:38:36.602708 2026] [:error] [pid 9314:tid 9321] [client 158.158.1.233:41225] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws60.php"] [unique_id "adzjzG_r4W8fX2GWyGQYCgAAAYU"]
[Mon Apr 13 20:38:38.239982 2026] [:error] [pid 63310:tid 63364] [client 158.158.1.233:52400] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vanda.php"] [unique_id "adzjznoXpRU5ztmwPjJX2AAAAFQ"]
[Mon Apr 13 20:38:39.923079 2026] [:error] [pid 63406:tid 63411] [client 158.158.1.233:39388] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vanda.php"] [unique_id "adzjz7HZEIkQ0Zmgp5qpLgAAAMA"]
[Mon Apr 13 20:38:41.183312 2026] [:error] [pid 63310:tid 63352] [client 158.158.1.233:62349] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vanda.php"] [unique_id "adzj0XoXpRU5ztmwPjJX2QAAAEg"]
[Mon Apr 13 20:38:42.217047 2026] [:error] [pid 9314:tid 9327] [client 158.158.1.233:63642] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vanda.php"] [unique_id "adzj0m_r4W8fX2GWyGQYJAAAAYs"]
[Mon Apr 13 20:38:42.972148 2026] [:error] [pid 63406:tid 63414] [client 158.158.1.233:58774] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/domains.php"] [unique_id "adzj0rHZEIkQ0Zmgp5qpPgAAAMM"]
[Mon Apr 13 20:38:43.820970 2026] [:error] [pid 9314:tid 9319] [client 158.158.1.233:63659] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/domains.php"] [unique_id "adzj02_r4W8fX2GWyGQYLQAAAYM"]
[Mon Apr 13 20:38:44.639802 2026] [:error] [pid 57183:tid 57204] [client 158.158.1.233:41814] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/domains.php"] [unique_id "adzj1DDO3t8R5NaxzYQ7VwAAAVM"]
[Mon Apr 13 20:38:45.299559 2026] [:error] [pid 57183:tid 57193] [client 158.158.1.233:23599] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/domains.php"] [unique_id "adzj1TDO3t8R5NaxzYQ7WwAAAUg"]
[Mon Apr 13 20:38:46.291755 2026] [:error] [pid 57183:tid 57205] [client 158.158.1.233:32478] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/144.php"] [unique_id "adzj1jDO3t8R5NaxzYQ7YgAAAVQ"]
[Mon Apr 13 20:38:46.976152 2026] [:error] [pid 57183:tid 57209] [client 158.158.1.233:53234] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/144.php"] [unique_id "adzj1jDO3t8R5NaxzYQ7YwAAAVg"]
[Mon Apr 13 20:38:48.300720 2026] [:error] [pid 57183:tid 57196] [client 158.158.1.233:25558] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/144.php"] [unique_id "adzj2DDO3t8R5NaxzYQ7ZgAAAUs"]
[Mon Apr 13 20:38:49.011832 2026] [:error] [pid 63406:tid 63412] [client 158.158.1.233:14271] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/144.php"] [unique_id "adzj2bHZEIkQ0Zmgp5qpewAAAME"]
[Mon Apr 13 20:38:50.389624 2026] [:error] [pid 63311:tid 63373] [client 158.158.1.233:23595] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asd.php"] [unique_id "adzj2qHjrGN1MqBCVFkBBwAAAII"]
[Mon Apr 13 20:38:51.245883 2026] [:error] [pid 63310:tid 63358] [client 158.158.1.233:51290] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asd.php"] [unique_id "adzj23oXpRU5ztmwPjJX4AAAAE4"]
[Mon Apr 13 20:38:52.160817 2026] [:error] [pid 9314:tid 9333] [client 158.158.1.233:53188] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asd.php"] [unique_id "adzj3G_r4W8fX2GWyGQYNwAAAZE"]
[Mon Apr 13 20:38:53.278886 2026] [:error] [pid 63406:tid 63430] [client 158.158.1.233:25539] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asd.php"] [unique_id "adzj3bHZEIkQ0Zmgp5qpiQAAANM"]
[Mon Apr 13 20:38:54.441249 2026] [:error] [pid 63311:tid 63392] [client 158.158.1.233:32463] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zc-104.php"] [unique_id "adzj3qHjrGN1MqBCVFkBDAAAAJU"]
[Mon Apr 13 20:38:55.964950 2026] [:error] [pid 9314:tid 9332] [client 158.158.1.233:57391] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zc-104.php"] [unique_id "adzj32_r4W8fX2GWyGQYOgAAAZA"]
[Mon Apr 13 20:38:57.675531 2026] [:error] [pid 9314:tid 9323] [client 158.158.1.233:32391] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zc-104.php"] [unique_id "adzj4W_r4W8fX2GWyGQYPQAAAYc"]
[Mon Apr 13 20:38:58.789484 2026] [:error] [pid 57183:tid 57195] [client 158.158.1.233:57374] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zc-104.php"] [unique_id "adzj4jDO3t8R5NaxzYQ7cQAAAUo"]
[Mon Apr 13 20:39:00.150824 2026] [:error] [pid 63311:tid 63382] [client 158.158.1.233:63692] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rzki.php"] [unique_id "adzj5KHjrGN1MqBCVFkBEQAAAIs"]
[Mon Apr 13 20:39:00.436959 2026] [:error] [pid 63309:tid 63334] [client 51.103.126.2:12395] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hehe.php"] [unique_id "adzj5EpIKZ10weXpf0UoAAAAABU"]
[Mon Apr 13 20:39:01.483056 2026] [:error] [pid 57183:tid 57208] [client 158.158.1.233:15344] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rzki.php"] [unique_id "adzj5TDO3t8R5NaxzYQ7eAAAAVc"]
[Mon Apr 13 20:39:03.183145 2026] [:error] [pid 63406:tid 63411] [client 158.158.1.233:45490] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rzki.php"] [unique_id "adzj57HZEIkQ0Zmgp5qpogAAAMA"]
[Mon Apr 13 20:39:04.004121 2026] [:error] [pid 63310:tid 63354] [client 51.103.126.2:54179] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hehe.php"] [unique_id "adzj6HoXpRU5ztmwPjJX9QAAAEo"]
[Mon Apr 13 20:39:04.507563 2026] [:error] [pid 63310:tid 63347] [client 158.158.1.233:21062] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rzki.php"] [unique_id "adzj6HoXpRU5ztmwPjJX9gAAAEM"]
[Mon Apr 13 20:39:05.327480 2026] [:error] [pid 63406:tid 63419] [client 158.158.1.233:37491] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xsas.php"] [unique_id "adzj6bHZEIkQ0Zmgp5qpqQAAAMg"]
[Mon Apr 13 20:39:05.841321 2026] [:error] [pid 63310:tid 63366] [client 51.103.126.2:63028] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hehe.php"] [unique_id "adzj6XoXpRU5ztmwPjJX9wAAAFY"]
[Mon Apr 13 20:39:06.158110 2026] [:error] [pid 7228:tid 7244] [client 158.158.1.233:21096] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xsas.php"] [unique_id "adzj6gEnn1dQrOSHHNWVQgAAAQ4"]
[Mon Apr 13 20:39:08.169803 2026] [:error] [pid 57183:tid 57206] [client 51.103.126.2:63415] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hehe.php"] [unique_id "adzj7DDO3t8R5NaxzYQ7iQAAAVU"]
[Mon Apr 13 20:39:12.385848 2026] [:error] [pid 63406:tid 63430] [client 51.103.126.2:33729] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "adzj8LHZEIkQ0Zmgp5qpsAAAANM"]
[Mon Apr 13 20:39:17.110347 2026] [:error] [pid 9314:tid 9333] [client 51.103.126.2:55851] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "adzj9W_r4W8fX2GWyGQYTgAAAZE"]
[Mon Apr 13 20:39:18.415488 2026] [:error] [pid 63406:tid 63433] [client 51.103.126.2:40828] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "adzj9rHZEIkQ0Zmgp5qpxQAAANY"]
[Mon Apr 13 20:39:19.295204 2026] [:error] [pid 63406:tid 63432] [client 158.158.1.233:6584] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xsas.php"] [unique_id "adzj97HZEIkQ0Zmgp5qpyQAAANU"]
[Mon Apr 13 20:39:19.321304 2026] [:error] [pid 63406:tid 63429] [client 51.103.126.2:51989] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/6kDPjgFTmvS.php"] [unique_id "adzj97HZEIkQ0Zmgp5qpygAAANI"]
[Mon Apr 13 20:39:20.232353 2026] [:error] [pid 63406:tid 63433] [client 51.103.126.2:54650] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/varb.php"] [unique_id "adzj-LHZEIkQ0Zmgp5qp0AAAANY"]
[Mon Apr 13 20:39:21.040432 2026] [:error] [pid 63406:tid 63420] [client 51.103.126.2:28809] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/varb.php"] [unique_id "adzj-bHZEIkQ0Zmgp5qp1wAAAMk"]
[Mon Apr 13 20:39:21.922403 2026] [:error] [pid 63310:tid 63367] [client 51.103.126.2:5990] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/varb.php"] [unique_id "adzj-XoXpRU5ztmwPjJYBgAAAFc"]
[Mon Apr 13 20:39:22.798619 2026] [:error] [pid 57183:tid 57202] [client 51.103.126.2:40830] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/varb.php"] [unique_id "adzj-jDO3t8R5NaxzYQ7nAAAAVE"]
[Mon Apr 13 20:39:23.612192 2026] [:error] [pid 57183:tid 57199] [client 51.103.126.2:56505] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lm15.php"] [unique_id "adzj-zDO3t8R5NaxzYQ7nwAAAU4"]
[Mon Apr 13 20:39:24.705332 2026] [:error] [pid 63309:tid 63319] [client 51.103.126.2:31610] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lm15.php"] [unique_id "adzj_EpIKZ10weXpf0UoCgAAAAY"]
[Mon Apr 13 20:39:25.920322 2026] [:error] [pid 57183:tid 57205] [client 51.103.126.2:28830] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lm15.php"] [unique_id "adzj_TDO3t8R5NaxzYQ7ogAAAVQ"]
[Mon Apr 13 20:39:27.188352 2026] [:error] [pid 57183:tid 57190] [client 51.103.126.2:6022] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lm15.php"] [unique_id "adzj_zDO3t8R5NaxzYQ7pwAAAUU"]
[Mon Apr 13 20:39:28.150900 2026] [:error] [pid 63406:tid 63424] [client 51.103.126.2:5965] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/clss.php"] [unique_id "adzkALHZEIkQ0Zmgp5qp2wAAAM0"]
[Mon Apr 13 20:39:28.810283 2026] [:error] [pid 63310:tid 63358] [client 51.103.126.2:51975] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/clss.php"] [unique_id "adzkAHoXpRU5ztmwPjJYEQAAAE4"]
[Mon Apr 13 20:39:31.107620 2026] [:error] [pid 9314:tid 9330] [client 51.103.126.2:5963] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/clss.php"] [unique_id "adzkA2_r4W8fX2GWyGQYWAAAAY4"]
[Mon Apr 13 20:39:33.392939 2026] [:error] [pid 63310:tid 63344] [client 51.103.126.2:28845] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/clss.php"] [unique_id "adzkBXoXpRU5ztmwPjJYFgAAAEA"]
[Mon Apr 13 20:39:35.846289 2026] [:error] [pid 63406:tid 63422] [client 51.103.126.2:56451] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/44.php"] [unique_id "adzkB7HZEIkQ0Zmgp5qp5QAAAMs"]
[Mon Apr 13 20:39:43.334417 2026] [:error] [pid 63406:tid 63430] [client 51.103.126.2:16088] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/44.php"] [unique_id "adzkD7HZEIkQ0Zmgp5qp6wAAANM"]
[Mon Apr 13 20:39:45.845526 2026] [:error] [pid 63406:tid 63424] [client 51.103.126.2:23241] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/44.php"] [unique_id "adzkEbHZEIkQ0Zmgp5qqDQAAAM0"]
[Mon Apr 13 20:39:48.161964 2026] [:error] [pid 63310:tid 63364] [client 51.103.126.2:42183] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/44.php"] [unique_id "adzkFHoXpRU5ztmwPjJYMQAAAFQ"]
[Mon Apr 13 20:39:49.109538 2026] [:error] [pid 63406:tid 63418] [client 51.103.126.2:28835] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5e0a.php"] [unique_id "adzkFbHZEIkQ0Zmgp5qqHAAAAMc"]
[Mon Apr 13 20:39:50.469155 2026] [:error] [pid 63406:tid 63427] [client 51.103.126.2:61800] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5e0a.php"] [unique_id "adzkFrHZEIkQ0Zmgp5qqIgAAANA"]
[Mon Apr 13 20:39:51.490127 2026] [:error] [pid 63309:tid 63327] [client 51.103.126.2:42192] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5e0a.php"] [unique_id "adzkF0pIKZ10weXpf0UoFgAAAA4"]
[Mon Apr 13 20:39:52.487749 2026] [:error] [pid 57183:tid 57204] [client 51.103.126.2:31606] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5e0a.php"] [unique_id "adzkGDDO3t8R5NaxzYQ7ywAAAVM"]
[Mon Apr 13 20:39:53.558631 2026] [:error] [pid 63310:tid 63365] [client 51.103.126.2:56484] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bo.php"] [unique_id "adzkGXoXpRU5ztmwPjJYOwAAAFU"]
[Mon Apr 13 20:39:53.686867 2026] [:error] [pid 9314:tid 9327] [client 158.158.1.233:37442] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/44.php"] [unique_id "adzkGW_r4W8fX2GWyGQYegAAAYs"]
[Mon Apr 13 20:39:54.977768 2026] [:error] [pid 63406:tid 63434] [client 51.103.126.2:5975] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bo.php"] [unique_id "adzkGrHZEIkQ0Zmgp5qqKwAAANc"]
[Mon Apr 13 20:39:57.413902 2026] [:error] [pid 63311:tid 63386] [client 51.103.126.2:30163] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bo.php"] [unique_id "adzkHaHjrGN1MqBCVFkBWAAAAI8"]
[Mon Apr 13 20:40:02.579470 2026] [:error] [pid 63310:tid 63354] [client 158.158.1.233:63072] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/44.php"] [unique_id "adzkInoXpRU5ztmwPjJYSAAAAEo"]
[Mon Apr 13 20:40:21.279933 2026] [:error] [pid 57183:tid 57186] [client 51.103.126.2:30193] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/callback.php"] [unique_id "adzkNTDO3t8R5NaxzYQ8FwAAAUE"]
[Mon Apr 13 20:40:23.885423 2026] [:error] [pid 63406:tid 63418] [client 51.103.126.2:14085] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/callback.php"] [unique_id "adzkN7HZEIkQ0Zmgp5qqewAAAMc"]
[Mon Apr 13 20:40:25.503387 2026] [:error] [pid 9314:tid 9340] [client 51.103.126.2:5464] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/callback.php"] [unique_id "adzkOW_r4W8fX2GWyGQYsAAAAZg"]
[Mon Apr 13 20:40:27.121399 2026] [:error] [pid 63310:tid 63360] [client 51.103.126.2:30148] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/callback.php"] [unique_id "adzkO3oXpRU5ztmwPjJYVwAAAFA"]
[Mon Apr 13 20:40:29.645445 2026] [:error] [pid 63406:tid 63419] [client 51.103.126.2:5440] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file.php"] [unique_id "adzkPbHZEIkQ0Zmgp5qqjgAAAMg"]
[Mon Apr 13 20:40:32.520177 2026] [:error] [pid 9314:tid 9316] [client 51.103.126.2:27142] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file.php"] [unique_id "adzkQG_r4W8fX2GWyGQYtgAAAYA"]
[Mon Apr 13 20:40:35.738094 2026] [:error] [pid 63311:tid 63376] [client 51.103.126.2:18507] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file.php"] [unique_id "adzkQ6HjrGN1MqBCVFkBigAAAIU"]
[Mon Apr 13 20:40:39.433599 2026] [:error] [pid 63309:tid 63317] [client 51.103.126.2:27196] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file.php"] [unique_id "adzkR0pIKZ10weXpf0UoQQAAAAQ"]
[Mon Apr 13 20:40:45.255563 2026] [:error] [pid 57183:tid 57207] [client 51.103.126.2:61077] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "adzkTTDO3t8R5NaxzYQ8lAAAAVY"]
[Mon Apr 13 20:40:49.066914 2026] [:error] [pid 63406:tid 63422] [client 51.103.126.2:38405] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "adzkUbHZEIkQ0Zmgp5qqsgAAAMs"]
[Mon Apr 13 20:40:57.154303 2026] [:error] [pid 9314:tid 9327] [client 51.103.126.2:61760] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blogs.php"] [unique_id "adzkWW_r4W8fX2GWyGQYygAAAYs"]
[Mon Apr 13 20:41:39.429700 2026] [:error] [pid 7228:tid 7238] [client 158.158.1.233:55058] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file.php"] [unique_id "adzkgwEnn1dQrOSHHNWWFQAAAQg"]
[Mon Apr 13 20:41:41.971735 2026] [:error] [pid 9314:tid 9323] [client 158.158.1.233:18442] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file.php"] [unique_id "adzkhW_r4W8fX2GWyGQZBwAAAYc"]
[Mon Apr 13 20:41:43.673184 2026] [:error] [pid 9314:tid 9340] [client 158.158.1.233:48092] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file.php"] [unique_id "adzkh2_r4W8fX2GWyGQZCQAAAZg"]
[Mon Apr 13 20:41:48.155995 2026] [:error] [pid 63309:tid 63336] [client 158.158.1.233:27498] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file.php"] [unique_id "adzkjEpIKZ10weXpf0UohQAAABc"]
[Mon Apr 13 20:41:49.515603 2026] [:error] [pid 9314:tid 9323] [client 158.158.1.233:20368] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "adzkjW_r4W8fX2GWyGQZEgAAAYc"]
[Mon Apr 13 20:41:51.090383 2026] [:error] [pid 57183:tid 57200] [client 158.158.1.233:41327] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "adzkjzDO3t8R5NaxzYQ82QAAAU8"]
[Mon Apr 13 20:41:52.812080 2026] [:error] [pid 63309:tid 63329] [client 158.158.1.233:20372] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "adzkkEpIKZ10weXpf0UoigAAABA"]
[Mon Apr 13 20:41:53.868245 2026] [:error] [pid 57183:tid 57185] [client 158.158.1.233:6706] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "adzkkTDO3t8R5NaxzYQ83gAAAUA"]
[Mon Apr 13 20:41:55.770511 2026] [:error] [pid 9314:tid 9322] [client 158.158.1.233:41311] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blogs.php"] [unique_id "adzkk2_r4W8fX2GWyGQZIQAAAYY"]
[Mon Apr 13 20:41:57.099851 2026] [:error] [pid 63406:tid 63420] [client 158.158.1.233:64828] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blogs.php"] [unique_id "adzklbHZEIkQ0Zmgp5qrqAAAAMk"]
[Mon Apr 13 20:41:58.174522 2026] [:error] [pid 9314:tid 9325] [client 158.158.1.233:20399] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blogs.php"] [unique_id "adzklm_r4W8fX2GWyGQZLgAAAYk"]
[Mon Apr 13 20:41:59.408917 2026] [:error] [pid 63406:tid 63419] [client 158.158.1.233:41298] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blogs.php"] [unique_id "adzkl7HZEIkQ0Zmgp5qrqwAAAMg"]
[Mon Apr 13 20:42:00.667300 2026] [:error] [pid 57183:tid 57188] [client 51.103.126.2:62230] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/first.php"] [unique_id "adzkmDDO3t8R5NaxzYQ88gAAAUM"]
[Mon Apr 13 20:42:01.602063 2026] [:error] [pid 57183:tid 57191] [client 158.158.1.233:55761] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zlnckdxn.php"] [unique_id "adzkmTDO3t8R5NaxzYQ89AAAAUY"]
[Mon Apr 13 20:42:05.078322 2026] [:error] [pid 9314:tid 9331] [client 51.103.126.2:60487] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/first.php"] [unique_id "adzknW_r4W8fX2GWyGQZOgAAAY8"]
[Mon Apr 13 20:42:07.453521 2026] [:error] [pid 7228:tid 7232] [client 158.158.1.233:19132] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zlnckdxn.php"] [unique_id "adzknwEnn1dQrOSHHNWWKQAAAQI"]
[Mon Apr 13 20:42:10.352731 2026] [:error] [pid 63309:tid 63335] [client 158.158.1.233:55754] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zlnckdxn.php"] [unique_id "adzkokpIKZ10weXpf0UomwAAABY"]
[Mon Apr 13 20:42:12.941264 2026] [:error] [pid 57183:tid 57186] [client 158.158.1.233:6666] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zlnckdxn.php"] [unique_id "adzkpDDO3t8R5NaxzYQ9DAAAAUE"]
[Mon Apr 13 20:42:14.228456 2026] [:error] [pid 57183:tid 57188] [client 158.158.1.233:7010] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs6.php"] [unique_id "adzkpjDO3t8R5NaxzYQ9EgAAAUM"]
[Mon Apr 13 20:42:15.048477 2026] [:error] [pid 9314:tid 9339] [client 158.158.1.233:6496] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs6.php"] [unique_id "adzkp2_r4W8fX2GWyGQZRwAAAZc"]
[Mon Apr 13 20:42:15.911517 2026] [:error] [pid 63406:tid 63413] [client 158.158.1.233:6511] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs6.php"] [unique_id "adzkp7HZEIkQ0Zmgp5qr0gAAAMI"]
[Mon Apr 13 20:42:16.518406 2026] [:error] [pid 63406:tid 63416] [client 158.158.1.233:44969] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs6.php"] [unique_id "adzkqLHZEIkQ0Zmgp5qr0wAAAMU"]
[Mon Apr 13 20:42:17.678960 2026] [:error] [pid 57183:tid 57197] [client 158.158.1.233:13652] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwzs.php"] [unique_id "adzkqTDO3t8R5NaxzYQ9GwAAAUw"]
[Mon Apr 13 20:42:18.235329 2026] [:error] [pid 63406:tid 63421] [client 158.158.1.233:55780] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwzs.php"] [unique_id "adzkqrHZEIkQ0Zmgp5qr1AAAAMo"]
[Mon Apr 13 20:42:18.772415 2026] [:error] [pid 63406:tid 63433] [client 158.158.1.233:40700] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwzs.php"] [unique_id "adzkqrHZEIkQ0Zmgp5qr1gAAANY"]
[Mon Apr 13 20:42:19.782216 2026] [:error] [pid 63406:tid 63426] [client 158.158.1.233:19085] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwzs.php"] [unique_id "adzkq7HZEIkQ0Zmgp5qr2AAAAM8"]
[Mon Apr 13 20:42:20.416002 2026] [:error] [pid 57183:tid 57207] [client 158.158.1.233:6998] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "adzkrDDO3t8R5NaxzYQ9HwAAAVY"]
[Mon Apr 13 20:42:20.470999 2026] [:error] [pid 63406:tid 63427] [client 51.103.126.2:62265] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/redixsx.php"] [unique_id "adzkrLHZEIkQ0Zmgp5qr2QAAANA"]
[Mon Apr 13 20:42:21.107959 2026] [:error] [pid 57183:tid 57196] [client 158.158.1.233:40043] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "adzkrTDO3t8R5NaxzYQ9IgAAAUs"]
[Mon Apr 13 20:42:22.202305 2026] [:error] [pid 63406:tid 63435] [client 158.158.1.233:13691] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "adzkrrHZEIkQ0Zmgp5qr2wAAANg"]
[Mon Apr 13 20:42:22.203588 2026] [:error] [pid 63406:tid 63411] [client 51.103.126.2:19167] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/redixsx.php"] [unique_id "adzkrrHZEIkQ0Zmgp5qr3AAAAMA"]
[Mon Apr 13 20:42:22.847466 2026] [:error] [pid 63309:tid 63335] [client 51.103.126.2:28840] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/redixsx.php"] [unique_id "adzkrkpIKZ10weXpf0UonwAAABY"]
[Mon Apr 13 20:42:22.876837 2026] [:error] [pid 63309:tid 63319] [client 158.158.1.233:6468] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "adzkrkpIKZ10weXpf0UooAAAAAY"]
[Mon Apr 13 20:42:23.407909 2026] [:error] [pid 57183:tid 57199] [client 51.103.126.2:62267] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/redixsx.php"] [unique_id "adzkrzDO3t8R5NaxzYQ9JwAAAU4"]
[Mon Apr 13 20:42:23.626997 2026] [:error] [pid 57183:tid 57188] [client 158.158.1.233:31831] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws66.php"] [unique_id "adzkrzDO3t8R5NaxzYQ9KAAAAUM"]
[Mon Apr 13 20:42:23.997845 2026] [:error] [pid 63406:tid 63413] [client 51.103.126.2:23770] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cpp2.php"] [unique_id "adzkr7HZEIkQ0Zmgp5qr3QAAAMI"]
[Mon Apr 13 20:42:24.302796 2026] [:error] [pid 9314:tid 9329] [client 158.158.1.233:40661] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws66.php"] [unique_id "adzksG_r4W8fX2GWyGQZVgAAAY0"]
[Mon Apr 13 20:42:24.643184 2026] [:error] [pid 9314:tid 9317] [client 51.103.126.2:14730] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cpp2.php"] [unique_id "adzksG_r4W8fX2GWyGQZWAAAAYE"]
[Mon Apr 13 20:42:25.240942 2026] [:error] [pid 63311:tid 63381] [client 158.158.1.233:19134] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws66.php"] [unique_id "adzksaHjrGN1MqBCVFkB3QAAAIo"]
[Mon Apr 13 20:42:25.309824 2026] [:error] [pid 63406:tid 63416] [client 51.103.126.2:49092] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cpp2.php"] [unique_id "adzksbHZEIkQ0Zmgp5qr5AAAAMU"]
[Mon Apr 13 20:42:25.880132 2026] [:error] [pid 63406:tid 63429] [client 158.158.1.233:58707] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws66.php"] [unique_id "adzksbHZEIkQ0Zmgp5qr5wAAANI"]
[Mon Apr 13 20:42:26.683780 2026] [:error] [pid 63406:tid 63415] [client 51.103.126.2:5281] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cpp2.php"] [unique_id "adzksrHZEIkQ0Zmgp5qr6wAAAMQ"]
[Mon Apr 13 20:42:26.752703 2026] [:error] [pid 63406:tid 63435] [client 158.158.1.233:52460] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ewe.php"] [unique_id "adzksrHZEIkQ0Zmgp5qr7AAAANg"]
[Mon Apr 13 20:42:27.592427 2026] [:error] [pid 63406:tid 63413] [client 158.158.1.233:6492] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ewe.php"] [unique_id "adzks7HZEIkQ0Zmgp5qr7gAAAMI"]
[Mon Apr 13 20:42:27.604961 2026] [:error] [pid 63406:tid 63430] [client 51.103.126.2:17182] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admlo.php"] [unique_id "adzks7HZEIkQ0Zmgp5qr7wAAANM"]
[Mon Apr 13 20:42:28.164359 2026] [:error] [pid 57183:tid 57193] [client 158.158.1.233:15287] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ewe.php"] [unique_id "adzktDDO3t8R5NaxzYQ9KwAAAUg"]
[Mon Apr 13 20:42:28.384862 2026] [:error] [pid 57183:tid 57186] [client 51.103.126.2:50583] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admlo.php"] [unique_id "adzktDDO3t8R5NaxzYQ9LAAAAUE"]
[Mon Apr 13 20:42:28.939843 2026] [:error] [pid 63406:tid 63419] [client 158.158.1.233:26792] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ewe.php"] [unique_id "adzktLHZEIkQ0Zmgp5qr9gAAAMg"]
[Mon Apr 13 20:42:29.298924 2026] [:error] [pid 63311:tid 63387] [client 51.103.126.2:14759] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admlo.php"] [unique_id "adzktaHjrGN1MqBCVFkB3gAAAJA"]
[Mon Apr 13 20:42:29.606834 2026] [:error] [pid 9314:tid 9340] [client 158.158.1.233:31306] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "adzktW_r4W8fX2GWyGQZXAAAAZg"]
[Mon Apr 13 20:42:29.871555 2026] [:error] [pid 63406:tid 63412] [client 51.103.126.2:55895] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admlo.php"] [unique_id "adzktbHZEIkQ0Zmgp5qr-gAAAME"]
[Mon Apr 13 20:42:30.246251 2026] [:error] [pid 57183:tid 57190] [client 158.158.1.233:51954] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "adzktjDO3t8R5NaxzYQ9MQAAAUU"]
[Mon Apr 13 20:42:30.485954 2026] [:error] [pid 57183:tid 57204] [client 51.103.126.2:13270] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin-ajax.php"] [unique_id "adzktjDO3t8R5NaxzYQ9MgAAAVM"]
[Mon Apr 13 20:42:31.253135 2026] [:error] [pid 9314:tid 9318] [client 158.158.1.233:52474] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "adzkt2_r4W8fX2GWyGQZXwAAAYI"]
[Mon Apr 13 20:42:31.261852 2026] [:error] [pid 63311:tid 63395] [client 51.103.126.2:50595] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin-ajax.php"] [unique_id "adzkt6HjrGN1MqBCVFkB4gAAAJg"]
[Mon Apr 13 20:42:32.011475 2026] [:error] [pid 63309:tid 63332] [client 51.103.126.2:30102] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin-ajax.php"] [unique_id "adzkuEpIKZ10weXpf0UopwAAABM"]
[Mon Apr 13 20:42:32.232164 2026] [:error] [pid 63310:tid 63355] [client 158.158.1.233:31355] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "adzkuHoXpRU5ztmwPjJYpgAAAEs"]
[Mon Apr 13 20:42:32.788300 2026] [:error] [pid 9314:tid 9333] [client 158.158.1.233:40691] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x9.php"] [unique_id "adzkuG_r4W8fX2GWyGQZYwAAAZE"]
[Mon Apr 13 20:42:32.816166 2026] [:error] [pid 9314:tid 9317] [client 51.103.126.2:17179] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin-ajax.php"] [unique_id "adzkuG_r4W8fX2GWyGQZZAAAAYE"]
[Mon Apr 13 20:42:33.472670 2026] [:error] [pid 63311:tid 63383] [client 158.158.1.233:58020] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x9.php"] [unique_id "adzkuaHjrGN1MqBCVFkB5AAAAIw"]
[Mon Apr 13 20:42:33.540141 2026] [:error] [pid 57183:tid 57194] [client 51.103.126.2:61150] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amthd.php"] [unique_id "adzkuTDO3t8R5NaxzYQ9NQAAAUk"]
[Mon Apr 13 20:42:34.205549 2026] [:error] [pid 63311:tid 63389] [client 51.103.126.2:64672] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amthd.php"] [unique_id "adzkuqHjrGN1MqBCVFkB5QAAAJI"]
[Mon Apr 13 20:42:34.290939 2026] [:error] [pid 9314:tid 9325] [client 158.158.1.233:55166] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x9.php"] [unique_id "adzkum_r4W8fX2GWyGQZagAAAYk"]
[Mon Apr 13 20:42:34.848918 2026] [:error] [pid 7228:tid 7250] [client 51.103.126.2:5945] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amthd.php"] [unique_id "adzkugEnn1dQrOSHHNWWOgAAARQ"]
[Mon Apr 13 20:42:35.499823 2026] [:error] [pid 9314:tid 9321] [client 158.158.1.233:6422] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x9.php"] [unique_id "adzku2_r4W8fX2GWyGQZcwAAAYU"]
[Mon Apr 13 20:42:35.545956 2026] [:error] [pid 9314:tid 9326] [client 51.103.126.2:5923] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amthd.php"] [unique_id "adzku2_r4W8fX2GWyGQZdAAAAYo"]
[Mon Apr 13 20:42:36.203760 2026] [:error] [pid 9314:tid 9331] [client 51.103.126.2:25773] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8xyz.php"] [unique_id "adzkvG_r4W8fX2GWyGQZdQAAAY8"]
[Mon Apr 13 20:42:36.426708 2026] [:error] [pid 7228:tid 7248] [client 158.158.1.233:35467] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/an.php"] [unique_id "adzkvAEnn1dQrOSHHNWWQAAAARI"]
[Mon Apr 13 20:42:36.862792 2026] [:error] [pid 9314:tid 9325] [client 51.103.126.2:25740] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8xyz.php"] [unique_id "adzkvG_r4W8fX2GWyGQZeQAAAYk"]
[Mon Apr 13 20:42:37.431411 2026] [:error] [pid 7228:tid 7232] [client 158.158.1.233:45004] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/an.php"] [unique_id "adzkvQEnn1dQrOSHHNWWQgAAAQI"]
[Mon Apr 13 20:42:37.594794 2026] [:error] [pid 7228:tid 7241] [client 51.103.126.2:54541] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8xyz.php"] [unique_id "adzkvQEnn1dQrOSHHNWWQwAAAQs"]
[Mon Apr 13 20:42:38.085791 2026] [:error] [pid 57183:tid 57193] [client 158.158.1.233:45036] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/an.php"] [unique_id "adzkvjDO3t8R5NaxzYQ9OQAAAUg"]
[Mon Apr 13 20:42:38.237687 2026] [:error] [pid 9314:tid 9338] [client 51.103.126.2:5425] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8xyz.php"] [unique_id "adzkvm_r4W8fX2GWyGQZfwAAAZY"]
[Mon Apr 13 20:42:39.144824 2026] [:error] [pid 63310:tid 63368] [client 51.103.126.2:37855] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "adzkv3oXpRU5ztmwPjJYrwAAAFg"]
[Mon Apr 13 20:42:39.765723 2026] [:error] [pid 63406:tid 63416] [client 51.103.126.2:25777] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "adzkv7HZEIkQ0Zmgp5qsBgAAAMU"]
[Mon Apr 13 20:42:40.684471 2026] [:error] [pid 63310:tid 63363] [client 51.103.126.2:50595] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "adzkwHoXpRU5ztmwPjJYsAAAAFM"]
[Mon Apr 13 20:42:41.940507 2026] [:error] [pid 63406:tid 63422] [client 51.103.126.2:43462] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "adzkwbHZEIkQ0Zmgp5qsCQAAAMs"]
[Mon Apr 13 20:42:42.809565 2026] [:error] [pid 9314:tid 9334] [client 51.103.126.2:65455] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws68.php"] [unique_id "adzkwm_r4W8fX2GWyGQZgwAAAZI"]
[Mon Apr 13 20:42:43.901661 2026] [:error] [pid 63406:tid 63425] [client 51.103.126.2:55177] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws68.php"] [unique_id "adzkw7HZEIkQ0Zmgp5qsCwAAAM4"]
[Mon Apr 13 20:42:44.626963 2026] [:error] [pid 63406:tid 63428] [client 51.103.126.2:49486] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws68.php"] [unique_id "adzkxLHZEIkQ0Zmgp5qsDAAAANE"]
[Mon Apr 13 20:42:45.828792 2026] [:error] [pid 63310:tid 63362] [client 158.158.1.233:21682] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws68.php"] [unique_id "adzkxXoXpRU5ztmwPjJYvQAAAFI"]
[Mon Apr 13 20:42:45.945571 2026] [:error] [pid 57183:tid 57202] [client 51.103.126.2:63098] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws68.php"] [unique_id "adzkxTDO3t8R5NaxzYQ9TgAAAVE"]
[Mon Apr 13 20:42:46.595088 2026] [:error] [pid 57183:tid 57204] [client 51.103.126.2:49475] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "adzkxjDO3t8R5NaxzYQ9UQAAAVM"]
[Mon Apr 13 20:42:46.606250 2026] [:error] [pid 63311:tid 63374] [client 158.158.1.233:17238] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws68.php"] [unique_id "adzkxqHjrGN1MqBCVFkB5wAAAIM"]
[Mon Apr 13 20:42:47.664116 2026] [:error] [pid 63310:tid 63346] [client 158.158.1.233:41237] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws68.php"] [unique_id "adzkx3oXpRU5ztmwPjJYvgAAAEI"]
[Mon Apr 13 20:42:47.919403 2026] [:error] [pid 63311:tid 63386] [client 51.103.126.2:25806] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "adzkx6HjrGN1MqBCVFkB6QAAAI8"]
[Mon Apr 13 20:42:48.374969 2026] [:error] [pid 57183:tid 57208] [client 158.158.1.233:6374] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws68.php"] [unique_id "adzkyDDO3t8R5NaxzYQ9WAAAAVc"]
[Mon Apr 13 20:42:49.132911 2026] [:error] [pid 9314:tid 9339] [client 51.103.126.2:65508] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "adzkyW_r4W8fX2GWyGQZhwAAAZc"]
[Mon Apr 13 20:42:49.219865 2026] [:error] [pid 63311:tid 63378] [client 158.158.1.233:53814] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "adzkyaHjrGN1MqBCVFkB8gAAAIc"]
[Mon Apr 13 20:42:49.998347 2026] [:error] [pid 63309:tid 63329] [client 158.158.1.233:56250] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "adzkyUpIKZ10weXpf0UosgAAABA"]
[Mon Apr 13 20:42:50.364941 2026] [:error] [pid 63309:tid 63330] [client 51.103.126.2:55175] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "adzkykpIKZ10weXpf0UoswAAABE"]
[Mon Apr 13 20:42:51.310160 2026] [:error] [pid 63309:tid 63321] [client 158.158.1.233:41734] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "adzky0pIKZ10weXpf0UotAAAAAg"]
[Mon Apr 13 20:42:52.002339 2026] [:error] [pid 57183:tid 57201] [client 158.158.1.233:62374] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "adzkzDDO3t8R5NaxzYQ9YwAAAVA"]
[Mon Apr 13 20:42:52.244888 2026] [:error] [pid 63406:tid 63414] [client 51.103.126.2:65470] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/njxjtooj.php"] [unique_id "adzkzLHZEIkQ0Zmgp5qsFAAAAMM"]
[Mon Apr 13 20:42:52.876532 2026] [:error] [pid 7228:tid 7244] [client 158.158.1.233:23676] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/njxjtooj.php"] [unique_id "adzkzAEnn1dQrOSHHNWWRwAAAQ4"]
[Mon Apr 13 20:42:53.512959 2026] [:error] [pid 7228:tid 7237] [client 158.158.1.233:52353] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/njxjtooj.php"] [unique_id "adzkzQEnn1dQrOSHHNWWSgAAAQc"]
[Mon Apr 13 20:42:54.388442 2026] [:error] [pid 9314:tid 9332] [client 158.158.1.233:41827] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/njxjtooj.php"] [unique_id "adzkzm_r4W8fX2GWyGQZkgAAAZA"]
[Mon Apr 13 20:42:54.554179 2026] [:error] [pid 9314:tid 9324] [client 51.103.126.2:40726] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/njxjtooj.php"] [unique_id "adzkzm_r4W8fX2GWyGQZkwAAAYg"]
[Mon Apr 13 20:42:56.408134 2026] [:error] [pid 63406:tid 63423] [client 158.158.1.233:58773] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/njxjtooj.php"] [unique_id "adzk0LHZEIkQ0Zmgp5qsHQAAAMw"]
[Mon Apr 13 20:42:57.317178 2026] [:error] [pid 63406:tid 63427] [client 158.158.1.233:53772] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "adzk0bHZEIkQ0Zmgp5qsIAAAANA"]
[Mon Apr 13 20:42:58.568603 2026] [:error] [pid 63406:tid 63414] [client 51.103.126.2:57003] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/njxjtooj.php"] [unique_id "adzk0rHZEIkQ0Zmgp5qsIwAAAMM"]
[Mon Apr 13 20:42:58.794506 2026] [:error] [pid 63406:tid 63413] [client 158.158.1.233:52385] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "adzk0rHZEIkQ0Zmgp5qsJgAAAMI"]
[Mon Apr 13 20:42:59.621967 2026] [:error] [pid 7228:tid 7249] [client 51.103.126.2:63481] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/njxjtooj.php"] [unique_id "adzk0wEnn1dQrOSHHNWWWAAAARM"]
[Mon Apr 13 20:42:59.714652 2026] [:error] [pid 63311:tid 63375] [client 158.158.1.233:15773] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "adzk06HjrGN1MqBCVFkB-QAAAIQ"]
[Mon Apr 13 20:43:01.045729 2026] [:error] [pid 57183:tid 57188] [client 158.158.1.233:14226] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "adzk1TDO3t8R5NaxzYQ9agAAAUM"]
[Mon Apr 13 20:43:02.287540 2026] [:error] [pid 63406:tid 63427] [client 158.158.1.233:6310] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws61.php"] [unique_id "adzk1rHZEIkQ0Zmgp5qsLAAAANA"]
[Mon Apr 13 20:43:03.696341 2026] [:error] [pid 63310:tid 63356] [client 158.158.1.233:15781] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws61.php"] [unique_id "adzk13oXpRU5ztmwPjJY0AAAAEw"]
[Mon Apr 13 20:43:04.905789 2026] [:error] [pid 7228:tid 7249] [client 158.158.1.233:13575] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws61.php"] [unique_id "adzk2AEnn1dQrOSHHNWWZwAAARM"]
[Mon Apr 13 20:43:07.459478 2026] [:error] [pid 63406:tid 63416] [client 158.158.1.233:6286] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws61.php"] [unique_id "adzk27HZEIkQ0Zmgp5qsPwAAAMU"]
[Mon Apr 13 20:43:08.251445 2026] [:error] [pid 7228:tid 7241] [client 158.158.1.233:17871] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/iyy.php"] [unique_id "adzk3AEnn1dQrOSHHNWWbQAAAQs"]
[Mon Apr 13 20:43:09.763795 2026] [:error] [pid 63406:tid 63421] [client 158.158.1.233:23642] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/iyy.php"] [unique_id "adzk3bHZEIkQ0Zmgp5qsSgAAAMo"]
[Mon Apr 13 20:43:10.944565 2026] [:error] [pid 63406:tid 63432] [client 51.103.126.2:33713] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/CDX1.php"] [unique_id "adzk3rHZEIkQ0Zmgp5qsUwAAANU"]
[Mon Apr 13 20:43:11.659748 2026] [:error] [pid 63406:tid 63435] [client 51.103.126.2:52842] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/CDX1.php"] [unique_id "adzk37HZEIkQ0Zmgp5qsWwAAANg"]
[Mon Apr 13 20:43:12.686246 2026] [:error] [pid 9314:tid 9330] [client 51.103.126.2:58462] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/CDX1.php"] [unique_id "adzk4G_r4W8fX2GWyGQZrQAAAY4"]
[Mon Apr 13 20:43:13.708455 2026] [:error] [pid 57183:tid 57203] [client 51.103.126.2:27235] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/CDX1.php"] [unique_id "adzk4TDO3t8R5NaxzYQ9bQAAAVI"]
[Mon Apr 13 20:43:13.937050 2026] [:error] [pid 57183:tid 57187] [client 158.158.1.233:47397] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/iyy.php"] [unique_id "adzk4TDO3t8R5NaxzYQ9bgAAAUI"]
[Mon Apr 13 20:43:14.830122 2026] [:error] [pid 63311:tid 63393] [client 51.103.126.2:40751] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/clasa99.php"] [unique_id "adzk4qHjrGN1MqBCVFkCBAAAAJY"]
[Mon Apr 13 20:43:16.030153 2026] [:error] [pid 7228:tid 7248] [client 51.103.126.2:40746] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/clasa99.php"] [unique_id "adzk5AEnn1dQrOSHHNWWdwAAARI"]
[Mon Apr 13 20:43:17.240734 2026] [:error] [pid 63406:tid 63424] [client 51.103.126.2:5580] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/clasa99.php"] [unique_id "adzk5bHZEIkQ0Zmgp5qsYAAAAM0"]
[Mon Apr 13 20:43:17.397372 2026] [:error] [pid 9314:tid 9322] [client 158.158.1.233:23663] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/iyy.php"] [unique_id "adzk5W_r4W8fX2GWyGQZtwAAAYY"]
[Mon Apr 13 20:43:17.962044 2026] [:error] [pid 57183:tid 57201] [client 158.158.1.233:58985] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adzk5TDO3t8R5NaxzYQ9dwAAAVA"]
[Mon Apr 13 20:43:18.303153 2026] [:error] [pid 9314:tid 9320] [client 51.103.126.2:52812] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/clasa99.php"] [unique_id "adzk5m_r4W8fX2GWyGQZugAAAYQ"]
[Mon Apr 13 20:43:19.263870 2026] [:error] [pid 63311:tid 63386] [client 51.103.126.2:43985] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/myfilexxx.php"] [unique_id "adzk56HjrGN1MqBCVFkCCQAAAI8"]
[Mon Apr 13 20:43:19.558002 2026] [:error] [pid 9314:tid 9331] [client 158.158.1.233:53217] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/900.php"] [unique_id "adzk52_r4W8fX2GWyGQZvQAAAY8"]
[Mon Apr 13 20:43:19.909852 2026] [:error] [pid 63309:tid 63330] [client 51.103.126.2:5583] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/myfilexxx.php"] [unique_id "adzk50pIKZ10weXpf0UozAAAABE"]
[Mon Apr 13 20:43:20.808852 2026] [:error] [pid 57183:tid 57192] [client 51.103.126.2:13270] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/myfilexxx.php"] [unique_id "adzk6DDO3t8R5NaxzYQ9gQAAAUc"]
[Mon Apr 13 20:43:21.367558 2026] [:error] [pid 63311:tid 63376] [client 51.103.126.2:44017] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/myfilexxx.php"] [unique_id "adzk6aHjrGN1MqBCVFkCDQAAAIU"]
[Mon Apr 13 20:43:21.485984 2026] [:error] [pid 9314:tid 9335] [client 158.158.1.233:32402] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/900.php"] [unique_id "adzk6W_r4W8fX2GWyGQZwQAAAZM"]
[Mon Apr 13 20:43:23.152078 2026] [:error] [pid 63311:tid 63387] [client 158.158.1.233:32403] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/900.php"] [unique_id "adzk66HjrGN1MqBCVFkCEQAAAJA"]
[Mon Apr 13 20:43:23.353149 2026] [:error] [pid 7228:tid 7231] [client 51.103.126.2:27242] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/karma_144a.php"] [unique_id "adzk6wEnn1dQrOSHHNWWewAAAQE"]
[Mon Apr 13 20:43:24.233253 2026] [:error] [pid 7228:tid 7239] [client 158.158.1.233:13569] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/900.php"] [unique_id "adzk7AEnn1dQrOSHHNWWfwAAAQk"]
[Mon Apr 13 20:43:25.335349 2026] [:error] [pid 57183:tid 57187] [client 51.103.126.2:60436] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/karma_144a.php"] [unique_id "adzk7TDO3t8R5NaxzYQ9hgAAAUI"]
[Mon Apr 13 20:43:25.421365 2026] [:error] [pid 57183:tid 57191] [client 158.158.1.233:15763] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/blsvgeyaza.php"] [unique_id "adzk7TDO3t8R5NaxzYQ9hwAAAUY"]
[Mon Apr 13 20:43:26.854108 2026] [:error] [pid 63309:tid 63317] [client 158.158.1.233:25574] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/blsvgeyaza.php"] [unique_id "adzk7kpIKZ10weXpf0Uo0AAAAAQ"]
[Mon Apr 13 20:43:27.146320 2026] [:error] [pid 63309:tid 63326] [client 158.158.1.233:43644] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "adzk70pIKZ10weXpf0Uo0gAAAA0"]
[Mon Apr 13 20:43:27.325972 2026] [:error] [pid 63309:tid 63314] [client 51.103.126.2:57010] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/karma_144a.php"] [unique_id "adzk70pIKZ10weXpf0Uo1gAAAAE"]
[Mon Apr 13 20:43:28.201973 2026] [:error] [pid 63309:tid 63327] [client 158.158.1.233:45460] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/blsvgeyaza.php"] [unique_id "adzk8EpIKZ10weXpf0Uo1wAAAA4"]
[Mon Apr 13 20:43:29.246798 2026] [:error] [pid 9314:tid 9317] [client 158.158.1.233:47366] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/blsvgeyaza.php"] [unique_id "adzk8W_r4W8fX2GWyGQZyQAAAYE"]
[Mon Apr 13 20:43:30.012959 2026] [:error] [pid 9314:tid 9326] [client 158.158.1.233:32393] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gqhyti.php"] [unique_id "adzk8m_r4W8fX2GWyGQZywAAAYo"]
[Mon Apr 13 20:43:31.037641 2026] [:error] [pid 63311:tid 63371] [client 158.158.1.233:53197] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gqhyti.php"] [unique_id "adzk86HjrGN1MqBCVFkCIQAAAIA"]
[Mon Apr 13 20:43:32.020595 2026] [:error] [pid 9314:tid 9332] [client 158.158.1.233:51282] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gqhyti.php"] [unique_id "adzk9G_r4W8fX2GWyGQZ1gAAAZA"]
[Mon Apr 13 20:43:32.794212 2026] [:error] [pid 63311:tid 63373] [client 158.158.1.233:42386] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gqhyti.php"] [unique_id "adzk9KHjrGN1MqBCVFkCJQAAAII"]
[Mon Apr 13 20:43:33.547597 2026] [:error] [pid 63311:tid 63384] [client 158.158.1.233:23600] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/autoxxi.php"] [unique_id "adzk9aHjrGN1MqBCVFkCKAAAAI0"]
[Mon Apr 13 20:43:34.197854 2026] [:error] [pid 63311:tid 63392] [client 158.158.1.233:13595] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/autoxxi.php"] [unique_id "adzk9qHjrGN1MqBCVFkCKwAAAJU"]
[Mon Apr 13 20:43:35.258426 2026] [:error] [pid 63406:tid 63418] [client 158.158.1.233:23578] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/autoxxi.php"] [unique_id "adzk97HZEIkQ0Zmgp5qsaQAAAMc"]
[Mon Apr 13 20:43:36.207127 2026] [:error] [pid 7228:tid 7251] [client 158.158.1.233:42429] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/autoxxi.php"] [unique_id "adzk-AEnn1dQrOSHHNWWggAAARU"]
[Mon Apr 13 20:43:37.216190 2026] [:error] [pid 63406:tid 63426] [client 158.158.1.233:51302] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1144452145_error_log.php"] [unique_id "adzk-bHZEIkQ0Zmgp5qsagAAAM8"]
[Mon Apr 13 20:43:38.236762 2026] [:error] [pid 57183:tid 57207] [client 158.158.1.233:45449] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1144452145_error_log.php"] [unique_id "adzk-jDO3t8R5NaxzYQ9kwAAAVY"]
[Mon Apr 13 20:43:39.606381 2026] [:error] [pid 57183:tid 57198] [client 158.158.1.233:62987] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1144452145_error_log.php"] [unique_id "adzk-zDO3t8R5NaxzYQ9mQAAAU0"]
[Mon Apr 13 20:43:41.681524 2026] [:error] [pid 57183:tid 57204] [client 158.158.1.233:53236] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1144452145_error_log.php"] [unique_id "adzk_TDO3t8R5NaxzYQ9pgAAAVM"]
[Mon Apr 13 20:43:43.742332 2026] [:error] [pid 63310:tid 63356] [client 158.158.1.233:13626] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws48.php"] [unique_id "adzk_3oXpRU5ztmwPjJY6AAAAEw"]
[Mon Apr 13 20:43:48.808150 2026] [:error] [pid 9314:tid 9334] [client 51.103.126.2:52850] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/3586%20b64.php"] [unique_id "adzlBG_r4W8fX2GWyGQZ6wAAAZI"]
[Mon Apr 13 20:43:51.136230 2026] [:error] [pid 7228:tid 7236] [client 51.103.126.2:17815] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/3586%20b64.php"] [unique_id "adzlBwEnn1dQrOSHHNWWiwAAAQY"]
[Mon Apr 13 20:43:54.548059 2026] [:error] [pid 63311:tid 63393] [client 51.103.126.2:17795] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws.php"] [unique_id "adzlCqHjrGN1MqBCVFkCVwAAAJY"]
[Mon Apr 13 20:43:55.986456 2026] [:error] [pid 7228:tid 7233] [client 51.103.126.2:63426] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws.php"] [unique_id "adzlCwEnn1dQrOSHHNWWkwAAAQM"]
[Mon Apr 13 20:43:56.894937 2026] [:error] [pid 63311:tid 63375] [client 51.103.126.2:56517] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws.php"] [unique_id "adzlDKHjrGN1MqBCVFkCWwAAAIQ"]
[Mon Apr 13 20:44:01.019651 2026] [:error] [pid 63406:tid 63419] [client 51.103.126.2:6116] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws.php"] [unique_id "adzlEbHZEIkQ0Zmgp5qshwAAAMg"]
[Mon Apr 13 20:44:01.779509 2026] [:error] [pid 57183:tid 57193] [client 158.158.1.233:32496] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "adzlETDO3t8R5NaxzYQ9zwAAAUg"]
[Mon Apr 13 20:44:02.681143 2026] [:error] [pid 7228:tid 7234] [client 158.158.1.233:15298] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "adzlEgEnn1dQrOSHHNWWqgAAAQQ"]
[Mon Apr 13 20:44:03.942179 2026] [:error] [pid 57183:tid 57189] [client 158.158.1.233:14814] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "adzlEzDO3t8R5NaxzYQ93AAAAUQ"]
[Mon Apr 13 20:44:06.039304 2026] [:error] [pid 63406:tid 63414] [client 158.158.1.233:39948] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "adzlFrHZEIkQ0Zmgp5qsjAAAAMM"]
[Mon Apr 13 20:44:10.299648 2026] [:error] [pid 63406:tid 63427] [client 158.158.1.233:42372] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "adzlGrHZEIkQ0Zmgp5qslgAAANA"]
[Mon Apr 13 20:44:14.630227 2026] [:error] [pid 7228:tid 7243] [client 158.158.1.233:51325] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "adzlHgEnn1dQrOSHHNWWsQAAAQ0"]
[Mon Apr 13 20:44:16.633658 2026] [:error] [pid 63310:tid 63356] [client 158.158.1.233:47373] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "adzlIHoXpRU5ztmwPjJZCwAAAEw"]
[Mon Apr 13 20:44:18.724668 2026] [:error] [pid 7228:tid 7233] [client 158.158.1.233:23623] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "adzlIgEnn1dQrOSHHNWWtQAAAQM"]
[Mon Apr 13 20:44:19.691632 2026] [:error] [pid 9314:tid 9326] [client 158.158.1.233:6322] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "adzlI2_r4W8fX2GWyGQaCgAAAYo"]
[Mon Apr 13 20:44:20.825909 2026] [:error] [pid 7228:tid 7234] [client 158.158.1.233:6309] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "adzlJAEnn1dQrOSHHNWWtwAAAQQ"]
[Mon Apr 13 20:44:21.746770 2026] [:error] [pid 57183:tid 57208] [client 158.158.1.233:41232] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "adzlJTDO3t8R5NaxzYQ-CQAAAVc"]
[Mon Apr 13 20:44:22.959708 2026] [:error] [pid 7228:tid 7236] [client 158.158.1.233:6944] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "adzlJgEnn1dQrOSHHNWWvAAAAQY"]
[Mon Apr 13 20:44:23.997052 2026] [:error] [pid 63406:tid 63420] [client 158.158.1.233:23115] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "adzlJ7HZEIkQ0Zmgp5qsuAAAAMk"]
[Mon Apr 13 20:44:27.379435 2026] [:error] [pid 7228:tid 7234] [client 158.158.1.233:29970] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "adzlKwEnn1dQrOSHHNWWxgAAAQQ"]
[Mon Apr 13 20:44:47.120813 2026] [:error] [pid 57183:tid 57202] [client 158.158.1.233:63071] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/new.php"] [unique_id "adzlPzDO3t8R5NaxzYQ-MQAAAVE"]
[Mon Apr 13 20:44:52.193440 2026] [:error] [pid 63310:tid 63366] [client 158.158.1.233:56834] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/new.php"] [unique_id "adzlRHoXpRU5ztmwPjJZMgAAAFY"]
[Mon Apr 13 20:44:54.324102 2026] [:error] [pid 63310:tid 63349] [client 158.158.1.233:6338] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/new.php"] [unique_id "adzlRnoXpRU5ztmwPjJZNQAAAEU"]
[Mon Apr 13 20:44:58.965842 2026] [:error] [pid 57183:tid 57204] [client 158.158.1.233:63042] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/press.php"] [unique_id "adzlSjDO3t8R5NaxzYQ-UAAAAVM"]
[Mon Apr 13 20:45:15.564882 2026] [:error] [pid 57183:tid 57188] [client 158.158.1.233:63087] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "adzlWzDO3t8R5NaxzYQ-fgAAAUM"]
[Mon Apr 13 20:45:18.135133 2026] [:error] [pid 63406:tid 63422] [client 158.158.1.233:6361] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "adzlXrHZEIkQ0Zmgp5qtKwAAAMs"]
[Mon Apr 13 20:45:41.647385 2026] [:error] [pid 63406:tid 63432] [client 158.158.1.233:29424] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "adzldbHZEIkQ0Zmgp5qtUwAAANU"]
[Mon Apr 13 20:45:52.537270 2026] [:error] [pid 63406:tid 63411] [client 158.158.1.233:22387] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "adzlgLHZEIkQ0Zmgp5qtcwAAAMA"]
[Mon Apr 13 20:46:19.552195 2026] [:error] [pid 9314:tid 9337] [client 51.103.126.2:12556] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "adzlm2_r4W8fX2GWyGQaigAAAZU"]
[Mon Apr 13 20:46:33.414505 2026] [:error] [pid 7228:tid 7234] [client 158.158.1.233:38800] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/t.php"] [unique_id "adzlqQEnn1dQrOSHHNWXigAAAQQ"]
[Mon Apr 13 20:46:35.860651 2026] [:error] [pid 57183:tid 57207] [client 158.158.1.233:64286] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/t.php"] [unique_id "adzlqzDO3t8R5NaxzYQ_RQAAAVY"]
[Mon Apr 13 20:46:37.543874 2026] [:error] [pid 7228:tid 7242] [client 158.158.1.233:45506] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/t.php"] [unique_id "adzlrQEnn1dQrOSHHNWXjwAAAQw"]
[Mon Apr 13 20:46:37.909009 2026] [:error] [pid 7228:tid 7241] [client 51.103.126.2:60493] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "adzlrQEnn1dQrOSHHNWXkQAAAQs"]
[Mon Apr 13 20:46:39.604867 2026] [:error] [pid 63310:tid 63354] [client 51.103.126.2:64146] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "adzlr3oXpRU5ztmwPjJZlAAAAEo"]
[Mon Apr 13 20:46:39.848853 2026] [:error] [pid 7228:tid 7254] [client 158.158.1.233:46764] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/t.php"] [unique_id "adzlrwEnn1dQrOSHHNWXkwAAARg"]
[Mon Apr 13 20:46:41.334593 2026] [:error] [pid 63310:tid 63352] [client 51.103.126.2:43427] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "adzlsXoXpRU5ztmwPjJZmgAAAEg"]
[Mon Apr 13 20:46:41.853490 2026] [:error] [pid 63406:tid 63434] [client 158.158.1.233:6312] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "adzlsbHZEIkQ0Zmgp5qt8AAAANc"]
[Mon Apr 13 20:46:43.228974 2026] [:error] [pid 57183:tid 57199] [client 158.158.1.233:31358] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "adzlszDO3t8R5NaxzYQ_WQAAAU4"]
[Mon Apr 13 20:46:44.703375 2026] [:error] [pid 63311:tid 63392] [client 158.158.1.233:40646] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "adzltKHjrGN1MqBCVFkC-wAAAJU"]
[Mon Apr 13 20:46:44.827053 2026] [:error] [pid 9314:tid 9328] [client 51.103.126.2:23209] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "adzltG_r4W8fX2GWyGQarQAAAYw"]
[Mon Apr 13 20:46:46.102859 2026] [:error] [pid 57183:tid 57203] [client 158.158.1.233:36120] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "adzltjDO3t8R5NaxzYQ_YwAAAVI"]
[Mon Apr 13 20:46:47.075067 2026] [:error] [pid 9314:tid 9326] [client 158.158.1.233:58732] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/ws49.php"] [unique_id "adzlt2_r4W8fX2GWyGQasgAAAYo"]
[Mon Apr 13 20:46:47.897919 2026] [:error] [pid 57183:tid 57205] [client 51.103.126.2:5391] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "adzltzDO3t8R5NaxzYQ_bAAAAVQ"]
[Mon Apr 13 20:46:48.148052 2026] [:error] [pid 63311:tid 63374] [client 158.158.1.233:52440] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/ws49.php"] [unique_id "adzluKHjrGN1MqBCVFkDAwAAAIM"]
[Mon Apr 13 20:46:48.798486 2026] [:error] [pid 7228:tid 7254] [client 158.158.1.233:25480] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/ws49.php"] [unique_id "adzluAEnn1dQrOSHHNWXnQAAARg"]
[Mon Apr 13 20:46:49.199636 2026] [:error] [pid 63311:tid 63375] [client 51.103.126.2:5908] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "adzluaHjrGN1MqBCVFkDCAAAAIQ"]
[Mon Apr 13 20:46:49.766043 2026] [:error] [pid 63311:tid 63384] [client 158.158.1.233:14781] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/ws49.php"] [unique_id "adzluaHjrGN1MqBCVFkDCwAAAI0"]
[Mon Apr 13 20:46:50.145914 2026] [:error] [pid 7228:tid 7244] [client 51.103.126.2:63370] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "adzlugEnn1dQrOSHHNWXoAAAAQ4"]
[Mon Apr 13 20:46:51.405066 2026] [:error] [pid 63406:tid 63421] [client 158.158.1.233:35542] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "adzlu7HZEIkQ0Zmgp5qt-AAAAMo"]
[Mon Apr 13 20:46:51.526446 2026] [:error] [pid 63310:tid 63346] [client 51.103.126.2:37869] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "adzlu3oXpRU5ztmwPjJZowAAAEI"]
[Mon Apr 13 20:46:52.517989 2026] [:error] [pid 63406:tid 63414] [client 158.158.1.233:14743] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "adzlvLHZEIkQ0Zmgp5qt_AAAAMM"]
[Mon Apr 13 20:46:52.842398 2026] [:error] [pid 63309:tid 63318] [client 51.103.126.2:5509] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "adzlvEpIKZ10weXpf0UpUQAAAAU"]
[Mon Apr 13 20:46:53.509558 2026] [:error] [pid 7228:tid 7232] [client 158.158.1.233:52458] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "adzlvQEnn1dQrOSHHNWXogAAAQI"]
[Mon Apr 13 20:46:54.416129 2026] [:error] [pid 63309:tid 63313] [client 51.103.126.2:5562] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "adzlvkpIKZ10weXpf0UpVgAAAAA"]
[Mon Apr 13 20:46:54.922619 2026] [:error] [pid 63406:tid 63411] [client 158.158.1.233:52464] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "adzlvrHZEIkQ0Zmgp5quBAAAAMA"]
[Mon Apr 13 20:46:56.380859 2026] [:error] [pid 7228:tid 7251] [client 158.158.1.233:36132] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sa.php7"] [unique_id "adzlwAEnn1dQrOSHHNWXpgAAARU"]
[Mon Apr 13 20:46:56.507915 2026] [:error] [pid 63310:tid 63349] [client 51.103.126.2:23807] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "adzlwHoXpRU5ztmwPjJZswAAAEU"]
[Mon Apr 13 20:46:57.790099 2026] [:error] [pid 63311:tid 63395] [client 51.103.126.2:37761] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "adzlwaHjrGN1MqBCVFkDGwAAAJg"]
[Mon Apr 13 20:46:58.856284 2026] [:error] [pid 63406:tid 63429] [client 158.158.1.233:52445] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sa.php7"] [unique_id "adzlwrHZEIkQ0Zmgp5quDQAAANI"]
[Mon Apr 13 20:46:59.091405 2026] [:error] [pid 63311:tid 63371] [client 51.103.126.2:14738] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "adzlw6HjrGN1MqBCVFkDHAAAAIA"]
[Mon Apr 13 20:47:00.036700 2026] [:error] [pid 9314:tid 9337] [client 51.103.126.2:57683] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "adzlxG_r4W8fX2GWyGQaxgAAAZU"]
[Mon Apr 13 20:47:00.973392 2026] [:error] [pid 7228:tid 7249] [client 51.103.126.2:5278] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "adzlxAEnn1dQrOSHHNWX6gAAARM"]
[Mon Apr 13 20:47:01.788869 2026] [:error] [pid 63310:tid 63349] [client 158.158.1.233:40690] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sa.php7"] [unique_id "adzlxXoXpRU5ztmwPjJaAgAAAEU"]
[Mon Apr 13 20:47:02.151941 2026] [:error] [pid 63310:tid 63353] [client 51.103.126.2:19148] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "adzlxnoXpRU5ztmwPjJaCwAAAEk"]
[Mon Apr 13 20:47:03.350532 2026] [:error] [pid 57183:tid 57209] [client 51.103.126.2:57673] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/vx.php"] [unique_id "adzlxzDO3t8R5NaxzYQ_ewAAAVg"]
[Mon Apr 13 20:47:04.356284 2026] [:error] [pid 9314:tid 9320] [client 51.103.126.2:5208] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/vx.php"] [unique_id "adzlyG_r4W8fX2GWyGQa0QAAAYQ"]
[Mon Apr 13 20:47:05.026282 2026] [:error] [pid 63310:tid 63362] [client 158.158.1.233:6842] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sa.php7"] [unique_id "adzlyXoXpRU5ztmwPjJaMAAAAFI"]
[Mon Apr 13 20:47:06.018060 2026] [:error] [pid 63406:tid 63427] [client 51.103.126.2:36327] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/vx.php"] [unique_id "adzlyrHZEIkQ0Zmgp5quQAAAANA"]
[Mon Apr 13 20:47:07.916594 2026] [:error] [pid 63406:tid 63427] [client 158.158.1.233:17232] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "adzly7HZEIkQ0Zmgp5quTwAAANA"]
[Mon Apr 13 20:47:08.040866 2026] [:error] [pid 63406:tid 63415] [client 51.103.126.2:36307] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/vx.php"] [unique_id "adzlzLHZEIkQ0Zmgp5quUAAAAMQ"]
[Mon Apr 13 20:47:11.014504 2026] [:error] [pid 7228:tid 7233] [client 51.103.126.2:16060] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "adzlzwEnn1dQrOSHHNWX8AAAAQM"]
[Mon Apr 13 20:47:11.108454 2026] [:error] [pid 63406:tid 63419] [client 158.158.1.233:36100] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "adzlz7HZEIkQ0Zmgp5quVwAAAMg"]
[Mon Apr 13 20:47:13.081278 2026] [:error] [pid 9314:tid 9319] [client 51.103.126.2:62249] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "adzl0W_r4W8fX2GWyGQa5QAAAYM"]
[Mon Apr 13 20:47:13.592887 2026] [:error] [pid 57183:tid 57199] [client 158.158.1.233:39315] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "adzl0TDO3t8R5NaxzYQ_hAAAAU4"]
[Mon Apr 13 20:47:15.089780 2026] [:error] [pid 9314:tid 9326] [client 51.103.126.2:19196] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "adzl02_r4W8fX2GWyGQa6AAAAYo"]
[Mon Apr 13 20:47:15.289506 2026] [:error] [pid 63406:tid 63415] [client 158.158.1.233:26757] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "adzl07HZEIkQ0Zmgp5quZwAAAMQ"]
[Mon Apr 13 20:47:16.917934 2026] [:error] [pid 63310:tid 63356] [client 158.158.1.233:17221] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "adzl1HoXpRU5ztmwPjJaOwAAAEw"]
[Mon Apr 13 20:47:17.117662 2026] [:error] [pid 57183:tid 57204] [client 51.103.126.2:19170] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "adzl1TDO3t8R5NaxzYQ_kwAAAVM"]
[Mon Apr 13 20:47:18.459572 2026] [:error] [pid 57183:tid 57209] [client 158.158.1.233:13859] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "adzl1jDO3t8R5NaxzYQ_mQAAAVg"]
[Mon Apr 13 20:47:19.597477 2026] [:error] [pid 63406:tid 63419] [client 158.158.1.233:39320] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "adzl17HZEIkQ0Zmgp5quewAAAMg"]
[Mon Apr 13 20:47:20.421887 2026] [:error] [pid 63406:tid 63427] [client 158.158.1.233:36817] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "adzl2LHZEIkQ0Zmgp5qugAAAANA"]
[Mon Apr 13 20:47:22.194323 2026] [:error] [pid 57183:tid 57189] [client 158.158.1.233:40003] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "adzl2jDO3t8R5NaxzYQ_pQAAAUQ"]
[Mon Apr 13 20:47:24.819950 2026] [:error] [pid 63311:tid 63379] [client 158.158.1.233:24943] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "adzl3KHjrGN1MqBCVFkDKwAAAIg"]
[Mon Apr 13 20:47:26.380550 2026] [:error] [pid 63406:tid 63415] [client 158.158.1.233:36822] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "adzl3rHZEIkQ0Zmgp5qujAAAAMQ"]
[Mon Apr 13 20:47:27.120683 2026] [:error] [pid 57183:tid 57204] [client 158.158.1.233:13856] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "adzl3zDO3t8R5NaxzYQ_vQAAAVM"]
[Mon Apr 13 20:47:28.055126 2026] [:error] [pid 63406:tid 63426] [client 158.158.1.233:13677] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amp.php"] [unique_id "adzl4LHZEIkQ0Zmgp5qujwAAAM8"]
[Mon Apr 13 20:47:30.242331 2026] [:error] [pid 63406:tid 63413] [client 158.158.1.233:40054] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amp.php"] [unique_id "adzl4rHZEIkQ0Zmgp5qumgAAAMI"]
[Mon Apr 13 20:47:30.588421 2026] [:error] [pid 7228:tid 7254] [client 51.103.126.2:62266] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/init.php"] [unique_id "adzl4gEnn1dQrOSHHNWYDQAAARg"]
[Mon Apr 13 20:47:31.768298 2026] [:error] [pid 63310:tid 63355] [client 158.158.1.233:55107] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amp.php"] [unique_id "adzl43oXpRU5ztmwPjJaQgAAAEs"]
[Mon Apr 13 20:47:33.054723 2026] [:error] [pid 63406:tid 63428] [client 51.103.126.2:36319] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/init.php"] [unique_id "adzl5bHZEIkQ0Zmgp5quowAAANE"]
[Mon Apr 13 20:47:34.600453 2026] [:error] [pid 63310:tid 63347] [client 51.103.126.2:22300] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/init.php"] [unique_id "adzl5noXpRU5ztmwPjJaRQAAAEM"]
[Mon Apr 13 20:47:35.751842 2026] [:error] [pid 63310:tid 63356] [client 51.103.126.2:13609] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/init.php"] [unique_id "adzl53oXpRU5ztmwPjJaSwAAAEw"]
[Mon Apr 13 20:47:36.673731 2026] [:error] [pid 57183:tid 57204] [client 51.103.126.2:62229] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "adzl6DDO3t8R5NaxzYQ_2gAAAVM"]
[Mon Apr 13 20:47:38.000443 2026] [:error] [pid 9314:tid 9325] [client 51.103.126.2:19145] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "adzl6W_r4W8fX2GWyGQbBQAAAYk"]
[Mon Apr 13 20:47:39.801351 2026] [:error] [pid 9314:tid 9322] [client 51.103.126.2:51430] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "adzl62_r4W8fX2GWyGQbCQAAAYY"]
[Mon Apr 13 20:47:41.159900 2026] [:error] [pid 9314:tid 9326] [client 51.103.126.2:28808] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "adzl7W_r4W8fX2GWyGQbCwAAAYo"]
[Mon Apr 13 20:47:42.619308 2026] [:error] [pid 57183:tid 57208] [client 51.103.126.2:22274] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/myfile.php"] [unique_id "adzl7jDO3t8R5NaxzYQ_7wAAAVc"]
[Mon Apr 13 20:47:42.863646 2026] [:error] [pid 63406:tid 63412] [client 158.158.1.233:26781] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adzl7rHZEIkQ0Zmgp5quxAAAAME"]
[Mon Apr 13 20:47:43.891390 2026] [:error] [pid 63311:tid 63373] [client 51.103.126.2:55171] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/myfile.php"] [unique_id "adzl76HjrGN1MqBCVFkDQwAAAII"]
[Mon Apr 13 20:47:44.595963 2026] [:error] [pid 57183:tid 57204] [client 51.103.126.2:42825] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/myfile.php"] [unique_id "adzl8DDO3t8R5NaxzYQ_-gAAAVM"]
[Mon Apr 13 20:47:45.207550 2026] [:error] [pid 63406:tid 63429] [client 158.158.1.233:45016] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adzl8bHZEIkQ0Zmgp5qu1AAAANI"]
[Mon Apr 13 20:47:45.665908 2026] [:error] [pid 7228:tid 7245] [client 51.103.126.2:25767] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/myfile.php"] [unique_id "adzl8QEnn1dQrOSHHNWYKQAAAQ8"]
[Mon Apr 13 20:47:47.539589 2026] [:error] [pid 63311:tid 63382] [client 158.158.1.233:6988] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adzl86HjrGN1MqBCVFkDWQAAAIs"]
[Mon Apr 13 20:47:48.959675 2026] [:error] [pid 7228:tid 7239] [client 51.103.126.2:43494] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "adzl9AEnn1dQrOSHHNWYLgAAAQk"]
[Mon Apr 13 20:47:49.599615 2026] [:error] [pid 63311:tid 63389] [client 51.103.126.2:65460] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "adzl9aHjrGN1MqBCVFkDXAAAAJI"]
[Mon Apr 13 20:47:51.156910 2026] [:error] [pid 7228:tid 7244] [client 158.158.1.233:6456] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adzl9wEnn1dQrOSHHNWYMwAAAQ4"]
[Mon Apr 13 20:47:54.299044 2026] [:error] [pid 57183:tid 57201] [client 51.103.126.2:51371] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "adzl-jDO3t8R5NaxzYRAPQAAAVA"]
[Mon Apr 13 20:47:54.585418 2026] [:error] [pid 63406:tid 63435] [client 158.158.1.233:55163] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "adzl-rHZEIkQ0Zmgp5qvBwAAANg"]
[Mon Apr 13 20:47:57.261839 2026] [:error] [pid 57183:tid 57208] [client 158.158.1.233:19157] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "adzl_TDO3t8R5NaxzYRARAAAAVc"]
[Mon Apr 13 20:48:11.705323 2026] [:error] [pid 9314:tid 9329] [client 158.158.1.233:19805] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "adzmC2_r4W8fX2GWyGQbSwAAAY0"]
[Mon Apr 13 20:48:17.055785 2026] [:error] [pid 63406:tid 63412] [client 158.158.1.233:31282] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "adzmEbHZEIkQ0Zmgp5qvJAAAAME"]
[Mon Apr 13 20:48:19.113390 2026] [:error] [pid 63406:tid 63414] [client 158.158.1.233:19828] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "adzmE7HZEIkQ0Zmgp5qvNAAAAMM"]
[Mon Apr 13 20:48:22.928094 2026] [:error] [pid 63311:tid 63381] [client 158.158.1.233:47463] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "adzmFqHjrGN1MqBCVFkDeQAAAIo"]
[Mon Apr 13 20:48:24.934624 2026] [:error] [pid 63311:tid 63392] [client 51.103.126.2:25795] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xxw.php"] [unique_id "adzmGKHjrGN1MqBCVFkDgwAAAJU"]
[Mon Apr 13 20:48:28.300905 2026] [:error] [pid 63406:tid 63431] [client 51.103.126.2:52826] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xxw.php"] [unique_id "adzmHLHZEIkQ0Zmgp5qvUAAAANQ"]
[Mon Apr 13 20:48:33.505177 2026] [:error] [pid 63311:tid 63384] [client 158.158.1.233:41756] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "adzmIaHjrGN1MqBCVFkDkAAAAI0"]
[Mon Apr 13 20:48:41.396079 2026] [:error] [pid 7228:tid 7249] [client 51.103.126.2:65522] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "adzmKQEnn1dQrOSHHNWYbwAAARM"]
[Mon Apr 13 20:48:42.960902 2026] [:error] [pid 63406:tid 63414] [client 51.103.126.2:14816] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "adzmKrHZEIkQ0Zmgp5qvgAAAAMM"]
[Mon Apr 13 20:48:45.310887 2026] [:error] [pid 9314:tid 9323] [client 51.103.126.2:28925] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "adzmLW_r4W8fX2GWyGQbbgAAAYc"]
[Mon Apr 13 20:48:49.088141 2026] [:error] [pid 63406:tid 63432] [client 51.103.126.2:44009] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "adzmMbHZEIkQ0Zmgp5qvhAAAANU"]
[Mon Apr 13 20:48:54.913403 2026] [:error] [pid 63406:tid 63417] [client 51.103.126.2:57006] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "adzmNrHZEIkQ0Zmgp5qvjwAAAMY"]
[Mon Apr 13 20:48:59.578983 2026] [:error] [pid 63311:tid 63394] [client 51.103.126.2:5373] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "adzmO6HjrGN1MqBCVFkDoQAAAJc"]
[Mon Apr 13 20:49:01.396185 2026] [:error] [pid 9314:tid 9319] [client 51.103.126.2:5341] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "adzmPW_r4W8fX2GWyGQbggAAAYM"]
[Mon Apr 13 20:49:02.562019 2026] [:error] [pid 63310:tid 63368] [client 51.103.126.2:57658] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "adzmPnoXpRU5ztmwPjJamAAAAFg"]
[Mon Apr 13 20:49:03.260904 2026] [:error] [pid 9314:tid 9338] [client 51.103.126.2:57640] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/drhunthq.php"] [unique_id "adzmP2_r4W8fX2GWyGQbhAAAAZY"]
[Mon Apr 13 20:49:04.091152 2026] [:error] [pid 9314:tid 9329] [client 51.103.126.2:57070] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/drhunthq.php"] [unique_id "adzmQG_r4W8fX2GWyGQbhQAAAY0"]
[Mon Apr 13 20:49:05.141926 2026] [:error] [pid 9314:tid 9326] [client 51.103.126.2:61814] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/drhunthq.php"] [unique_id "adzmQW_r4W8fX2GWyGQbiwAAAYo"]
[Mon Apr 13 20:49:05.904911 2026] [:error] [pid 7228:tid 7233] [client 51.103.126.2:5485] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/drhunthq.php"] [unique_id "adzmQQEnn1dQrOSHHNWYiwAAAQM"]
[Mon Apr 13 20:49:06.906035 2026] [:error] [pid 9314:tid 9339] [client 51.103.126.2:61768] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin/index.php"] [unique_id "adzmQm_r4W8fX2GWyGQbkAAAAZc"]
[Mon Apr 13 20:49:07.539815 2026] [:error] [pid 57183:tid 57204] [client 51.103.126.2:42763] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin/index.php"] [unique_id "adzmQzDO3t8R5NaxzYRA2AAAAVM"]
[Mon Apr 13 20:49:08.348357 2026] [:error] [pid 9314:tid 9324] [client 51.103.126.2:42139] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin/index.php"] [unique_id "adzmRG_r4W8fX2GWyGQbkwAAAYg"]
[Mon Apr 13 20:49:09.345012 2026] [:error] [pid 63406:tid 63422] [client 51.103.126.2:12655] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin/index.php"] [unique_id "adzmRbHZEIkQ0Zmgp5qvpwAAAMs"]
[Mon Apr 13 20:49:10.224551 2026] [:error] [pid 9314:tid 9338] [client 51.103.126.2:36637] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tfm.php"] [unique_id "adzmRm_r4W8fX2GWyGQblAAAAZY"]
[Mon Apr 13 20:49:11.716652 2026] [:error] [pid 63406:tid 63413] [client 51.103.126.2:49033] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tfm.php"] [unique_id "adzmR7HZEIkQ0Zmgp5qvtAAAAMI"]
[Mon Apr 13 20:49:12.657152 2026] [:error] [pid 7228:tid 7251] [client 51.103.126.2:36643] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tfm.php"] [unique_id "adzmSAEnn1dQrOSHHNWYjgAAARU"]
[Mon Apr 13 20:49:13.869457 2026] [:error] [pid 63309:tid 63322] [client 51.103.126.2:49062] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tfm.php"] [unique_id "adzmSUpIKZ10weXpf0UqAQAAAAk"]
[Mon Apr 13 20:49:15.626313 2026] [:error] [pid 63309:tid 63333] [client 51.103.126.2:37212] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "adzmS0pIKZ10weXpf0UqBgAAABQ"]
[Mon Apr 13 20:49:17.153624 2026] [:error] [pid 63406:tid 63435] [client 51.103.126.2:36658] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "adzmTbHZEIkQ0Zmgp5qvxQAAANg"]
[Mon Apr 13 20:49:18.358570 2026] [:error] [pid 63406:tid 63415] [client 51.103.126.2:49063] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "adzmTrHZEIkQ0Zmgp5qvzQAAAMQ"]
[Mon Apr 13 20:49:19.152649 2026] [:error] [pid 63406:tid 63426] [client 51.103.126.2:33119] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "adzmT7HZEIkQ0Zmgp5qv0QAAAM8"]
[Mon Apr 13 20:49:19.942484 2026] [:error] [pid 63309:tid 63315] [client 51.103.126.2:35031] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "adzmT0pIKZ10weXpf0UqDAAAAAI"]
[Mon Apr 13 20:49:20.684837 2026] [:error] [pid 63406:tid 63415] [client 51.103.126.2:33109] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "adzmULHZEIkQ0Zmgp5qv1gAAAMQ"]
[Mon Apr 13 20:49:21.299919 2026] [:error] [pid 63406:tid 63418] [client 51.103.126.2:38505] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "adzmUbHZEIkQ0Zmgp5qv2gAAAMc"]
[Mon Apr 13 20:49:22.075088 2026] [:error] [pid 57183:tid 57186] [client 51.103.126.2:38411] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "adzmUjDO3t8R5NaxzYRA6QAAAUE"]
[Mon Apr 13 20:49:22.831884 2026] [:error] [pid 7228:tid 7242] [client 51.103.126.2:59796] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "adzmUgEnn1dQrOSHHNWYngAAAQw"]
[Mon Apr 13 20:49:23.618680 2026] [:error] [pid 9314:tid 9336] [client 51.103.126.2:39523] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "adzmU2_r4W8fX2GWyGQbrgAAAZQ"]
[Mon Apr 13 20:49:24.549034 2026] [:error] [pid 9314:tid 9329] [client 51.103.126.2:33090] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "adzmVG_r4W8fX2GWyGQbtQAAAY0"]
[Mon Apr 13 20:49:26.339424 2026] [:error] [pid 57183:tid 57208] [client 51.103.126.2:36653] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "adzmVjDO3t8R5NaxzYRA9AAAAVc"]
[Mon Apr 13 20:49:27.791081 2026] [:error] [pid 63406:tid 63425] [client 51.103.126.2:39493] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "adzmV7HZEIkQ0Zmgp5qv6wAAAM4"]
[Mon Apr 13 20:49:28.753078 2026] [:error] [pid 9314:tid 9319] [client 158.158.1.233:56908] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8573.php"] [unique_id "adzmWG_r4W8fX2GWyGQbxgAAAYM"]
[Mon Apr 13 20:49:30.072275 2026] [:error] [pid 57183:tid 57202] [client 158.158.1.233:48101] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8573.php"] [unique_id "adzmWjDO3t8R5NaxzYRBCQAAAVE"]
[Mon Apr 13 20:49:31.159897 2026] [:error] [pid 63406:tid 63417] [client 158.158.1.233:55763] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8573.php"] [unique_id "adzmW7HZEIkQ0Zmgp5qv8QAAAMY"]
[Mon Apr 13 20:49:31.531184 2026] [:error] [pid 57183:tid 57195] [client 20.215.210.138:60788] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws60.php"] [unique_id "adzmWzDO3t8R5NaxzYRBJAAAAUo"]
[Mon Apr 13 20:49:31.834680 2026] [:error] [pid 63311:tid 63381] [client 158.158.1.233:20372] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8573.php"] [unique_id "adzmW6HjrGN1MqBCVFkDxgAAAIo"]
[Mon Apr 13 20:49:32.008289 2026] [:error] [pid 9314:tid 9320] [client 51.103.126.2:58377] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "adzmXG_r4W8fX2GWyGQbxwAAAYQ"]
[Mon Apr 13 20:49:32.617884 2026] [:error] [pid 63406:tid 63434] [client 158.158.1.233:15291] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "adzmXLHZEIkQ0Zmgp5qv9wAAANc"]
[Mon Apr 13 20:49:33.692400 2026] [:error] [pid 7228:tid 7241] [client 158.158.1.233:41295] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "adzmXQEnn1dQrOSHHNWYzwAAAQs"]
[Mon Apr 13 20:49:35.134718 2026] [:error] [pid 63309:tid 63318] [client 20.215.210.138:60751] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws60.php"] [unique_id "adzmX0pIKZ10weXpf0UqEwAAAAU"]
[Mon Apr 13 20:49:35.327753 2026] [:error] [pid 7228:tid 7253] [client 158.158.1.233:31857] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "adzmXwEnn1dQrOSHHNWY0gAAARc"]
[Mon Apr 13 20:49:36.122584 2026] [:error] [pid 63406:tid 63418] [client 51.103.126.2:38461] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "adzmYLHZEIkQ0Zmgp5qwAwAAAMc"]
[Mon Apr 13 20:49:36.956450 2026] [:error] [pid 63311:tid 63371] [client 158.158.1.233:55709] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "adzmYKHjrGN1MqBCVFkD1gAAAIA"]
[Mon Apr 13 20:49:37.197016 2026] [:error] [pid 63406:tid 63413] [client 20.215.210.138:49257] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws60.php"] [unique_id "adzmYbHZEIkQ0Zmgp5qwCAAAAMI"]
[Mon Apr 13 20:49:38.470800 2026] [:error] [pid 63406:tid 63418] [client 158.158.1.233:55752] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/term.php"] [unique_id "adzmYrHZEIkQ0Zmgp5qwDwAAAMc"]
[Mon Apr 13 20:49:38.739429 2026] [:error] [pid 63406:tid 63423] [client 51.103.126.2:59782] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "adzmYrHZEIkQ0Zmgp5qwEQAAAMw"]
[Mon Apr 13 20:49:39.392822 2026] [:error] [pid 63311:tid 63387] [client 20.215.210.138:40921] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws60.php"] [unique_id "adzmY6HjrGN1MqBCVFkD2wAAAJA"]
[Mon Apr 13 20:49:39.427278 2026] [:error] [pid 63310:tid 63365] [client 158.158.1.233:41342] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/term.php"] [unique_id "adzmY3oXpRU5ztmwPjJatwAAAFU"]
[Mon Apr 13 20:49:39.871400 2026] [:error] [pid 57183:tid 57194] [client 51.103.126.2:37196] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tfm.php"] [unique_id "adzmYzDO3t8R5NaxzYRBSgAAAUk"]
[Mon Apr 13 20:49:40.331576 2026] [:error] [pid 9314:tid 9331] [client 158.158.1.233:6973] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/term.php"] [unique_id "adzmZG_r4W8fX2GWyGQbzwAAAY8"]
[Mon Apr 13 20:49:41.648867 2026] [:error] [pid 63406:tid 63430] [client 158.158.1.233:31822] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/term.php"] [unique_id "adzmZbHZEIkQ0Zmgp5qwGgAAANM"]
[Mon Apr 13 20:49:42.383365 2026] [:error] [pid 7228:tid 7244] [client 158.158.1.233:29957] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "adzmZgEnn1dQrOSHHNWY2wAAAQ4"]
[Mon Apr 13 20:49:44.060512 2026] [:error] [pid 9314:tid 9334] [client 158.158.1.233:22283] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "adzmaG_r4W8fX2GWyGQb2AAAAZI"]
[Mon Apr 13 20:49:44.734085 2026] [:error] [pid 63310:tid 63366] [client 20.215.210.138:37661] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vanda.php"] [unique_id "adzmaHoXpRU5ztmwPjJauwAAAFY"]
[Mon Apr 13 20:49:46.636033 2026] [:error] [pid 9314:tid 9339] [client 158.158.1.233:17162] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "adzmam_r4W8fX2GWyGQb2wAAAZc"]
[Mon Apr 13 20:49:48.368813 2026] [:error] [pid 63311:tid 63384] [client 20.215.210.138:38982] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vanda.php"] [unique_id "adzmbKHjrGN1MqBCVFkD7gAAAI0"]
[Mon Apr 13 20:49:49.366137 2026] [:error] [pid 9314:tid 9325] [client 20.215.210.138:40911] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vanda.php"] [unique_id "adzmbW_r4W8fX2GWyGQb4gAAAYk"]
[Mon Apr 13 20:49:50.311342 2026] [:error] [pid 9314:tid 9322] [client 20.215.210.138:37677] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vanda.php"] [unique_id "adzmbm_r4W8fX2GWyGQb6AAAAYY"]
[Mon Apr 13 20:49:50.592313 2026] [:error] [pid 57183:tid 57200] [client 158.158.1.233:31866] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "adzmbjDO3t8R5NaxzYRBWAAAAU8"]
[Mon Apr 13 20:49:51.598673 2026] [:error] [pid 7228:tid 7247] [client 20.215.210.138:49229] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/domains.php"] [unique_id "adzmbwEnn1dQrOSHHNWY5wAAARE"]
[Mon Apr 13 20:49:53.337296 2026] [:error] [pid 9314:tid 9326] [client 20.215.210.138:35682] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/domains.php"] [unique_id "adzmcW_r4W8fX2GWyGQb7wAAAYo"]
[Mon Apr 13 20:49:54.597481 2026] [:error] [pid 63406:tid 63418] [client 51.103.126.2:38505] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "adzmcrHZEIkQ0Zmgp5qwSAAAAMc"]
[Mon Apr 13 20:49:54.796708 2026] [:error] [pid 63309:tid 63334] [client 20.215.210.138:5036] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/domains.php"] [unique_id "adzmckpIKZ10weXpf0UqJwAAABU"]
[Mon Apr 13 20:49:55.562502 2026] [:error] [pid 9314:tid 9321] [client 158.158.1.233:56214] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/155.php"] [unique_id "adzmc2_r4W8fX2GWyGQb_wAAAYU"]
[Mon Apr 13 20:49:55.828752 2026] [:error] [pid 63310:tid 63358] [client 20.215.210.138:37653] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/domains.php"] [unique_id "adzmc3oXpRU5ztmwPjJawAAAAE4"]
[Mon Apr 13 20:49:56.527295 2026] [:error] [pid 9314:tid 9331] [client 51.103.126.2:39491] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "adzmdG_r4W8fX2GWyGQcAwAAAY8"]
[Mon Apr 13 20:49:57.033701 2026] [:error] [pid 9314:tid 9333] [client 20.215.210.138:40944] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/144.php"] [unique_id "adzmdW_r4W8fX2GWyGQcBgAAAZE"]
[Mon Apr 13 20:49:57.780457 2026] [:error] [pid 63406:tid 63432] [client 51.103.126.2:38460] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "adzmdbHZEIkQ0Zmgp5qwTAAAANU"]
[Mon Apr 13 20:49:57.895791 2026] [:error] [pid 63406:tid 63411] [client 158.158.1.233:45453] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/155.php"] [unique_id "adzmdbHZEIkQ0Zmgp5qwTQAAAMA"]
[Mon Apr 13 20:49:58.585559 2026] [:error] [pid 63406:tid 63427] [client 20.215.210.138:14260] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/144.php"] [unique_id "adzmdrHZEIkQ0Zmgp5qwUAAAANA"]
[Mon Apr 13 20:49:58.736010 2026] [:error] [pid 57183:tid 57197] [client 51.103.126.2:54611] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "adzmdjDO3t8R5NaxzYRBXAAAAUw"]
[Mon Apr 13 20:49:59.511021 2026] [:error] [pid 63406:tid 63424] [client 158.158.1.233:37482] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/155.php"] [unique_id "adzmd7HZEIkQ0Zmgp5qwVwAAAM0"]
[Mon Apr 13 20:50:00.303884 2026] [:error] [pid 63406:tid 63430] [client 51.103.126.2:22373] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "adzmeLHZEIkQ0Zmgp5qwXQAAANM"]
[Mon Apr 13 20:50:00.354976 2026] [:error] [pid 63406:tid 63427] [client 20.215.210.138:49224] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/144.php"] [unique_id "adzmeLHZEIkQ0Zmgp5qwXwAAANA"]
[Mon Apr 13 20:50:01.441865 2026] [:error] [pid 57183:tid 57190] [client 158.158.1.233:54465] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/155.php"] [unique_id "adzmeTDO3t8R5NaxzYRBYAAAAUU"]
[Mon Apr 13 20:50:01.679217 2026] [:error] [pid 57183:tid 57195] [client 51.103.126.2:56467] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "adzmeTDO3t8R5NaxzYRBYQAAAUo"]
[Mon Apr 13 20:50:02.624413 2026] [:error] [pid 63406:tid 63419] [client 20.215.210.138:38994] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/144.php"] [unique_id "adzmerHZEIkQ0Zmgp5qwaAAAAMg"]
[Mon Apr 13 20:50:03.046541 2026] [:error] [pid 63406:tid 63427] [client 51.103.126.2:22346] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "adzme7HZEIkQ0Zmgp5qwagAAANA"]
[Mon Apr 13 20:50:04.456509 2026] [:error] [pid 63406:tid 63429] [client 20.215.210.138:60761] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asd.php"] [unique_id "adzmfLHZEIkQ0Zmgp5qwcgAAANI"]
[Mon Apr 13 20:50:05.747442 2026] [:error] [pid 63311:tid 63373] [client 51.103.126.2:16087] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "adzmfaHjrGN1MqBCVFkEBAAAAII"]
[Mon Apr 13 20:50:07.308954 2026] [:error] [pid 57183:tid 57189] [client 20.215.210.138:4383] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asd.php"] [unique_id "adzmfzDO3t8R5NaxzYRBeQAAAUQ"]
[Mon Apr 13 20:50:08.381623 2026] [:error] [pid 63310:tid 63365] [client 20.215.210.138:35699] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asd.php"] [unique_id "adzmgHoXpRU5ztmwPjJaxAAAAFU"]
[Mon Apr 13 20:50:08.950165 2026] [:error] [pid 63310:tid 63360] [client 51.103.126.2:36275] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "adzmgHoXpRU5ztmwPjJaxQAAAFA"]
[Mon Apr 13 20:50:09.737655 2026] [:error] [pid 7228:tid 7246] [client 20.215.210.138:35648] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asd.php"] [unique_id "adzmgQEnn1dQrOSHHNWY9AAAARA"]
[Mon Apr 13 20:50:10.368119 2026] [:error] [pid 7228:tid 7230] [client 158.158.1.233:40681] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "adzmggEnn1dQrOSHHNWY-AAAAQA"]
[Mon Apr 13 20:50:10.728302 2026] [:error] [pid 63309:tid 63329] [client 20.215.210.138:54822] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zc-104.php"] [unique_id "adzmgkpIKZ10weXpf0UqLwAAABA"]
[Mon Apr 13 20:50:12.279039 2026] [:error] [pid 63311:tid 63395] [client 20.215.210.138:38986] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zc-104.php"] [unique_id "adzmhKHjrGN1MqBCVFkECgAAAJg"]
[Mon Apr 13 20:50:12.493631 2026] [:error] [pid 63406:tid 63435] [client 51.103.126.2:39448] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "adzmhLHZEIkQ0Zmgp5qweAAAANg"]
[Mon Apr 13 20:50:13.047301 2026] [:error] [pid 63309:tid 63314] [client 20.215.210.138:60756] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zc-104.php"] [unique_id "adzmhUpIKZ10weXpf0UqMQAAAAE"]
[Mon Apr 13 20:50:13.669782 2026] [:error] [pid 9314:tid 9327] [client 51.103.126.2:22366] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "adzmhW_r4W8fX2GWyGQcGAAAAYs"]
[Mon Apr 13 20:50:13.893319 2026] [:error] [pid 63310:tid 63368] [client 20.215.210.138:5026] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zc-104.php"] [unique_id "adzmhXoXpRU5ztmwPjJa0AAAAFg"]
[Mon Apr 13 20:50:15.547373 2026] [:error] [pid 63406:tid 63433] [client 20.215.210.138:54831] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rzki.php"] [unique_id "adzmh7HZEIkQ0Zmgp5qwewAAANY"]
[Mon Apr 13 20:50:17.216879 2026] [:error] [pid 63406:tid 63419] [client 158.158.1.233:40640] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "adzmibHZEIkQ0Zmgp5qwhAAAAMg"]
[Mon Apr 13 20:50:17.222904 2026] [:error] [pid 63406:tid 63424] [client 20.215.210.138:49221] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rzki.php"] [unique_id "adzmibHZEIkQ0Zmgp5qwhQAAAM0"]
[Mon Apr 13 20:50:18.355534 2026] [:error] [pid 9314:tid 9329] [client 20.215.210.138:60790] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rzki.php"] [unique_id "adzmim_r4W8fX2GWyGQcIQAAAY0"]
[Mon Apr 13 20:50:19.826900 2026] [:error] [pid 63309:tid 63313] [client 158.158.1.233:31308] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "adzmi0pIKZ10weXpf0UqPwAAAAA"]
[Mon Apr 13 20:50:19.936165 2026] [:error] [pid 9314:tid 9326] [client 51.103.126.2:33746] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "adzmi2_r4W8fX2GWyGQcKQAAAYo"]
[Mon Apr 13 20:50:20.247197 2026] [:error] [pid 9314:tid 9316] [client 20.215.210.138:14262] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rzki.php"] [unique_id "adzmjG_r4W8fX2GWyGQcLAAAAYA"]
[Mon Apr 13 20:50:20.777612 2026] [:error] [pid 9314:tid 9332] [client 158.158.1.233:25474] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "adzmjG_r4W8fX2GWyGQcMQAAAZA"]
[Mon Apr 13 20:50:21.438057 2026] [:error] [pid 9314:tid 9336] [client 20.215.210.138:38990] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xsas.php"] [unique_id "adzmjW_r4W8fX2GWyGQcNgAAAZQ"]
[Mon Apr 13 20:50:23.379422 2026] [:error] [pid 9314:tid 9332] [client 20.215.210.138:35668] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xsas.php"] [unique_id "adzmj2_r4W8fX2GWyGQcPwAAAZA"]
[Mon Apr 13 20:50:23.968487 2026] [:error] [pid 9314:tid 9320] [client 158.158.1.233:6799] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "adzmj2_r4W8fX2GWyGQcRQAAAYQ"]
[Mon Apr 13 20:50:23.985153 2026] [:error] [pid 63406:tid 63421] [client 20.215.210.138:60788] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xsas.php"] [unique_id "adzmj7HZEIkQ0Zmgp5qwjgAAAMo"]
[Mon Apr 13 20:50:24.720275 2026] [:error] [pid 63406:tid 63423] [client 20.215.210.138:42886] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xsas.php"] [unique_id "adzmkLHZEIkQ0Zmgp5qwkQAAAMw"]
[Mon Apr 13 20:50:25.122828 2026] [:error] [pid 63310:tid 63360] [client 158.158.1.233:64265] [client 158.158.1.233] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "adzmkXoXpRU5ztmwPjJa0gAAAFA"]
[Mon Apr 13 20:50:25.621640 2026] [:error] [pid 9314:tid 9324] [client 20.215.210.138:4397] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/d12.php"] [unique_id "adzmkW_r4W8fX2GWyGQcTQAAAYg"]
[Mon Apr 13 20:50:27.018873 2026] [:error] [pid 63406:tid 63427] [client 20.215.210.138:60770] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/d12.php"] [unique_id "adzmk7HZEIkQ0Zmgp5qwmAAAANA"]
[Mon Apr 13 20:50:28.347910 2026] [:error] [pid 57183:tid 57191] [client 20.215.210.138:5015] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/d12.php"] [unique_id "adzmlDDO3t8R5NaxzYRBkwAAAUY"]
[Mon Apr 13 20:50:29.453329 2026] [:error] [pid 63406:tid 63428] [client 20.215.210.138:60774] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/d12.php"] [unique_id "adzmlbHZEIkQ0Zmgp5qwnwAAANE"]
[Mon Apr 13 20:50:30.306530 2026] [:error] [pid 63311:tid 63372] [client 51.103.126.2:56490] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "adzmlqHjrGN1MqBCVFkEGQAAAIE"]
[Mon Apr 13 20:50:30.484320 2026] [:error] [pid 63311:tid 63385] [client 20.215.210.138:58837] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/okxh.php"] [unique_id "adzmlqHjrGN1MqBCVFkEGgAAAI4"]
[Mon Apr 13 20:50:32.553959 2026] [:error] [pid 63406:tid 63415] [client 51.103.126.2:40810] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "adzmmLHZEIkQ0Zmgp5qwrQAAAMQ"]
[Mon Apr 13 20:50:35.421790 2026] [:error] [pid 63406:tid 63424] [client 51.103.126.2:33750] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "adzmm7HZEIkQ0Zmgp5qwvQAAAM0"]
[Mon Apr 13 20:50:36.820618 2026] [:error] [pid 57183:tid 57190] [client 51.103.126.2:37150] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/file.php"] [unique_id "adzmnDDO3t8R5NaxzYRBtQAAAUU"]
[Mon Apr 13 20:50:39.209587 2026] [:error] [pid 63310:tid 63363] [client 51.103.126.2:40788] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/file.php"] [unique_id "adzmn3oXpRU5ztmwPjJa3AAAAFM"]
[Mon Apr 13 20:50:40.801499 2026] [:error] [pid 63310:tid 63365] [client 51.103.126.2:40818] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/file.php"] [unique_id "adzmoHoXpRU5ztmwPjJa5AAAAFU"]
[Mon Apr 13 20:50:42.599444 2026] [:error] [pid 63406:tid 63425] [client 20.215.210.138:60766] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/44.php"] [unique_id "adzmorHZEIkQ0Zmgp5qw0gAAAM4"]
[Mon Apr 13 20:50:42.672465 2026] [:error] [pid 63311:tid 63376] [client 51.103.126.2:19110] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/file.php"] [unique_id "adzmoqHjrGN1MqBCVFkELwAAAIU"]
[Mon Apr 13 20:50:44.669273 2026] [:error] [pid 63311:tid 63371] [client 51.103.126.2:16622] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "adzmpKHjrGN1MqBCVFkEMgAAAIA"]
[Mon Apr 13 20:50:47.178476 2026] [:error] [pid 57183:tid 57190] [client 51.103.126.2:31548] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "adzmpzDO3t8R5NaxzYRBzAAAAUU"]
[Mon Apr 13 20:50:51.710602 2026] [:error] [pid 7228:tid 7246] [client 20.215.210.138:39558] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/44.php"] [unique_id "adzmqwEnn1dQrOSHHNWZFwAAARA"]
[Mon Apr 13 20:50:52.327027 2026] [:error] [pid 9314:tid 9326] [client 51.103.126.2:31613] [client 51.103.126.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "adzmrG_r4W8fX2GWyGQcWwAAAYo"]
[Mon Apr 13 20:50:52.882139 2026] [:error] [pid 7228:tid 7247] [client 20.215.210.138:39592] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/44.php"] [unique_id "adzmrAEnn1dQrOSHHNWZGwAAARE"]
[Mon Apr 13 20:50:54.204113 2026] [:error] [pid 7228:tid 7238] [client 20.215.210.138:19974] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/44.php"] [unique_id "adzmrgEnn1dQrOSHHNWZHwAAAQg"]
[Mon Apr 13 20:50:55.631031 2026] [:error] [pid 63406:tid 63432] [client 20.215.210.138:47450] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5e0a.php"] [unique_id "adzmr7HZEIkQ0Zmgp5qw3QAAANU"]
[Mon Apr 13 20:50:57.232159 2026] [:error] [pid 57183:tid 57208] [client 20.215.210.138:4779] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5e0a.php"] [unique_id "adzmsTDO3t8R5NaxzYRB4wAAAVc"]
[Mon Apr 13 20:50:58.199164 2026] [:error] [pid 57183:tid 57185] [client 20.215.210.138:4876] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5e0a.php"] [unique_id "adzmsjDO3t8R5NaxzYRB6QAAAUA"]
[Mon Apr 13 20:50:59.477946 2026] [:error] [pid 9314:tid 9340] [client 20.215.210.138:13205] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5e0a.php"] [unique_id "adzms2_r4W8fX2GWyGQcZQAAAZg"]
[Mon Apr 13 20:51:00.223064 2026] [:error] [pid 63310:tid 63344] [client 20.215.210.138:25831] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bo.php"] [unique_id "adzmtHoXpRU5ztmwPjJbAwAAAEA"]
[Mon Apr 13 20:51:01.749660 2026] [:error] [pid 63311:tid 63381] [client 20.215.210.138:5064] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bo.php"] [unique_id "adzmtaHjrGN1MqBCVFkESwAAAIo"]
[Mon Apr 13 20:51:03.046188 2026] [:error] [pid 63406:tid 63426] [client 20.215.210.138:4924] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bo.php"] [unique_id "adzmt7HZEIkQ0Zmgp5qw6AAAAM8"]
[Mon Apr 13 20:51:05.208775 2026] [:error] [pid 63311:tid 63388] [client 20.215.210.138:4895] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bo.php"] [unique_id "adzmuaHjrGN1MqBCVFkEVQAAAJE"]
[Mon Apr 13 20:51:07.586166 2026] [:error] [pid 63309:tid 63331] [client 20.215.210.138:48766] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/56c53.php"] [unique_id "adzmu0pIKZ10weXpf0UqfQAAABI"]
[Mon Apr 13 20:51:11.860282 2026] [:error] [pid 57183:tid 57192] [client 20.215.210.138:14325] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/56c53.php"] [unique_id "adzmvzDO3t8R5NaxzYRCHwAAAUc"]
[Mon Apr 13 20:51:14.593435 2026] [:error] [pid 63311:tid 63387] [client 20.215.210.138:51140] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/56c53.php"] [unique_id "adzmwqHjrGN1MqBCVFkEXAAAAJA"]
[Mon Apr 13 20:51:15.550272 2026] [:error] [pid 7228:tid 7236] [client 20.215.210.138:4804] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/56c53.php"] [unique_id "adzmwwEnn1dQrOSHHNWZRgAAAQY"]
[Mon Apr 13 20:51:16.663793 2026] [:error] [pid 7228:tid 7238] [client 20.215.210.138:51188] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx78.php"] [unique_id "adzmxAEnn1dQrOSHHNWZTAAAAQg"]
[Mon Apr 13 20:51:17.446292 2026] [:error] [pid 7228:tid 7253] [client 20.215.210.138:54901] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx78.php"] [unique_id "adzmxQEnn1dQrOSHHNWZUwAAARc"]
[Mon Apr 13 20:51:18.791900 2026] [:error] [pid 7228:tid 7251] [client 20.215.210.138:59995] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx78.php"] [unique_id "adzmxgEnn1dQrOSHHNWZWAAAARU"]
[Mon Apr 13 20:51:20.833572 2026] [:error] [pid 63310:tid 63346] [client 20.215.210.138:55421] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx78.php"] [unique_id "adzmyHoXpRU5ztmwPjJbHQAAAEI"]
[Mon Apr 13 20:51:21.853496 2026] [:error] [pid 57183:tid 57195] [client 20.215.210.138:61398] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "adzmyTDO3t8R5NaxzYRCIwAAAUo"]
[Mon Apr 13 20:51:23.635503 2026] [:error] [pid 63311:tid 63392] [client 20.215.210.138:23152] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "adzmy6HjrGN1MqBCVFkEZQAAAJU"]
[Mon Apr 13 20:51:29.163325 2026] [:error] [pid 7228:tid 7249] [client 20.215.210.138:59906] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "adzm0QEnn1dQrOSHHNWZYwAAARM"]
[Mon Apr 13 20:52:12.300646 2026] [:error] [pid 57183:tid 57186] [client 20.215.210.138:12519] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blogs.php"] [unique_id "adzm_DDO3t8R5NaxzYRCkwAAAUE"]
[Mon Apr 13 20:52:13.758142 2026] [:error] [pid 63310:tid 63348] [client 20.215.210.138:36465] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blogs.php"] [unique_id "adzm_XoXpRU5ztmwPjJbNQAAAEQ"]
[Mon Apr 13 20:52:14.915084 2026] [:error] [pid 9314:tid 9328] [client 20.215.210.138:50541] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blogs.php"] [unique_id "adzm_m_r4W8fX2GWyGQcywAAAYw"]
[Mon Apr 13 20:52:15.835460 2026] [:error] [pid 57183:tid 57191] [client 20.215.210.138:39659] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blogs.php"] [unique_id "adzm_zDO3t8R5NaxzYRCmAAAAUY"]
[Mon Apr 13 20:52:16.985883 2026] [:error] [pid 9314:tid 9331] [client 20.215.210.138:24416] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zlnckdxn.php"] [unique_id "adznAG_r4W8fX2GWyGQczgAAAY8"]
[Mon Apr 13 20:52:18.325699 2026] [:error] [pid 63311:tid 63385] [client 20.215.210.138:33186] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zlnckdxn.php"] [unique_id "adznAqHjrGN1MqBCVFkEmQAAAI4"]
[Mon Apr 13 20:52:19.081234 2026] [:error] [pid 9314:tid 9339] [client 20.215.210.138:32736] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zlnckdxn.php"] [unique_id "adznA2_r4W8fX2GWyGQc1AAAAZc"]
[Mon Apr 13 20:52:20.004039 2026] [:error] [pid 7228:tid 7235] [client 20.215.210.138:50549] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zlnckdxn.php"] [unique_id "adznBAEnn1dQrOSHHNWZnQAAAQU"]
[Mon Apr 13 20:52:21.107461 2026] [:error] [pid 63406:tid 63432] [client 20.215.210.138:4543] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs6.php"] [unique_id "adznBbHZEIkQ0Zmgp5qxXAAAANU"]
[Mon Apr 13 20:52:22.415242 2026] [:error] [pid 63406:tid 63416] [client 20.215.210.138:36461] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs6.php"] [unique_id "adznBrHZEIkQ0Zmgp5qxXQAAAMU"]
[Mon Apr 13 20:52:28.302221 2026] [:error] [pid 63310:tid 63357] [client 20.215.210.138:36444] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs6.php"] [unique_id "adznDHoXpRU5ztmwPjJbRQAAAE0"]
[Mon Apr 13 20:52:32.260390 2026] [:error] [pid 63406:tid 63425] [client 20.215.210.138:50460] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs6.php"] [unique_id "adznELHZEIkQ0Zmgp5qxcwAAAM4"]
[Mon Apr 13 20:52:35.992012 2026] [:error] [pid 57183:tid 57205] [client 20.215.210.138:39651] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwzs.php"] [unique_id "adznEzDO3t8R5NaxzYRC4AAAAVQ"]
[Mon Apr 13 20:52:37.127534 2026] [:error] [pid 9314:tid 9317] [client 20.215.210.138:47915] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwzs.php"] [unique_id "adznFW_r4W8fX2GWyGQc5gAAAYE"]
[Mon Apr 13 20:52:38.200195 2026] [:error] [pid 9314:tid 9326] [client 20.215.210.138:13505] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwzs.php"] [unique_id "adznFm_r4W8fX2GWyGQc7AAAAYo"]
[Mon Apr 13 20:52:39.262073 2026] [:error] [pid 63406:tid 63426] [client 20.215.210.138:13490] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwzs.php"] [unique_id "adznF7HZEIkQ0Zmgp5qxhgAAAM8"]
[Mon Apr 13 20:52:40.009499 2026] [:error] [pid 63406:tid 63421] [client 20.215.210.138:20082] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "adznGLHZEIkQ0Zmgp5qxiQAAAMo"]
[Mon Apr 13 20:52:41.031748 2026] [:error] [pid 63406:tid 63415] [client 20.215.210.138:18340] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "adznGbHZEIkQ0Zmgp5qxjgAAAMQ"]
[Mon Apr 13 20:52:41.900150 2026] [:error] [pid 63406:tid 63411] [client 20.215.210.138:15670] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "adznGbHZEIkQ0Zmgp5qxlAAAAMA"]
[Mon Apr 13 20:52:42.785591 2026] [:error] [pid 57183:tid 57202] [client 20.215.210.138:38177] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "adznGjDO3t8R5NaxzYRC7gAAAVE"]
[Mon Apr 13 20:52:43.726597 2026] [:error] [pid 63311:tid 63389] [client 20.215.210.138:46850] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws66.php"] [unique_id "adznG6HjrGN1MqBCVFkEtQAAAJI"]
[Mon Apr 13 20:52:45.178506 2026] [:error] [pid 63309:tid 63317] [client 20.215.210.138:50457] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws66.php"] [unique_id "adznHUpIKZ10weXpf0UquAAAAAQ"]
[Mon Apr 13 20:52:46.065182 2026] [:error] [pid 63406:tid 63414] [client 20.215.210.138:46883] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws66.php"] [unique_id "adznHrHZEIkQ0Zmgp5qxnAAAAMM"]
[Mon Apr 13 20:52:46.794025 2026] [:error] [pid 7228:tid 7237] [client 20.215.210.138:13475] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws66.php"] [unique_id "adznHgEnn1dQrOSHHNWZ0wAAAQc"]
[Mon Apr 13 20:52:48.286526 2026] [:error] [pid 63406:tid 63429] [client 20.215.210.138:47392] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ewe.php"] [unique_id "adznILHZEIkQ0Zmgp5qxpgAAANI"]
[Mon Apr 13 20:52:49.488722 2026] [:error] [pid 57183:tid 57197] [client 20.215.210.138:18329] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ewe.php"] [unique_id "adznITDO3t8R5NaxzYRC-QAAAUw"]
[Mon Apr 13 20:52:50.498165 2026] [:error] [pid 7228:tid 7244] [client 20.215.210.138:34498] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ewe.php"] [unique_id "adznIgEnn1dQrOSHHNWZ3gAAAQ4"]
[Mon Apr 13 20:52:51.201736 2026] [:error] [pid 9314:tid 9327] [client 20.215.210.138:34544] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ewe.php"] [unique_id "adznI2_r4W8fX2GWyGQc-wAAAYs"]
[Mon Apr 13 20:52:52.156544 2026] [:error] [pid 7228:tid 7253] [client 20.215.210.138:18357] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "adznJAEnn1dQrOSHHNWZ5wAAARc"]
[Mon Apr 13 20:52:53.007307 2026] [:error] [pid 7228:tid 7244] [client 20.215.210.138:47414] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "adznJQEnn1dQrOSHHNWZ7wAAAQ4"]
[Mon Apr 13 20:52:53.967610 2026] [:error] [pid 63309:tid 63327] [client 20.215.210.138:20041] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "adznJUpIKZ10weXpf0UqwAAAAA4"]
[Mon Apr 13 20:52:54.741851 2026] [:error] [pid 63309:tid 63325] [client 20.215.210.138:50493] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "adznJkpIKZ10weXpf0UqwQAAAAw"]
[Mon Apr 13 20:52:55.633071 2026] [:error] [pid 9314:tid 9332] [client 20.215.210.138:15644] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x9.php"] [unique_id "adznJ2_r4W8fX2GWyGQdBQAAAZA"]
[Mon Apr 13 20:52:56.478638 2026] [:error] [pid 9314:tid 9324] [client 20.215.210.138:34521] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x9.php"] [unique_id "adznKG_r4W8fX2GWyGQdCgAAAYg"]
[Mon Apr 13 20:52:57.350475 2026] [:error] [pid 9314:tid 9337] [client 20.215.210.138:13480] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x9.php"] [unique_id "adznKW_r4W8fX2GWyGQdDAAAAZU"]
[Mon Apr 13 20:52:58.234458 2026] [:error] [pid 7228:tid 7254] [client 20.215.210.138:13493] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x9.php"] [unique_id "adznKgEnn1dQrOSHHNWZ9gAAARg"]
[Mon Apr 13 20:52:59.311710 2026] [:error] [pid 7228:tid 7249] [client 20.215.210.138:55343] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/an.php"] [unique_id "adznKwEnn1dQrOSHHNWZ_AAAARM"]
[Mon Apr 13 20:53:00.629384 2026] [:error] [pid 63406:tid 63433] [client 20.215.210.138:34523] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/an.php"] [unique_id "adznLLHZEIkQ0Zmgp5qxyAAAANY"]
[Mon Apr 13 20:53:01.785767 2026] [:error] [pid 63406:tid 63412] [client 20.215.210.138:20043] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/an.php"] [unique_id "adznLbHZEIkQ0Zmgp5qx0QAAAME"]
[Mon Apr 13 20:53:02.706143 2026] [:error] [pid 63310:tid 63368] [client 20.215.210.138:13485] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/an.php"] [unique_id "adznLnoXpRU5ztmwPjJbVAAAAFg"]
[Mon Apr 13 20:53:03.640666 2026] [:error] [pid 57183:tid 57205] [client 20.215.210.138:20042] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aboutc.php"] [unique_id "adznLzDO3t8R5NaxzYRDEwAAAVQ"]
[Mon Apr 13 20:53:05.510733 2026] [:error] [pid 63406:tid 63427] [client 20.215.210.138:34500] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aboutc.php"] [unique_id "adznMbHZEIkQ0Zmgp5qx2gAAANA"]
[Mon Apr 13 20:53:07.047922 2026] [:error] [pid 7228:tid 7236] [client 20.215.210.138:20049] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aboutc.php"] [unique_id "adznMwEnn1dQrOSHHNWaBwAAAQY"]
[Mon Apr 13 20:53:07.937628 2026] [:error] [pid 63406:tid 63433] [client 20.215.210.138:13483] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aboutc.php"] [unique_id "adznM7HZEIkQ0Zmgp5qx6gAAANY"]
[Mon Apr 13 20:53:09.590105 2026] [:error] [pid 9314:tid 9336] [client 20.215.210.138:13448] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gdn.php"] [unique_id "adznNW_r4W8fX2GWyGQdGAAAAZQ"]
[Mon Apr 13 20:53:10.982710 2026] [:error] [pid 57183:tid 57204] [client 20.215.210.138:47388] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gdn.php"] [unique_id "adznNjDO3t8R5NaxzYRDGgAAAVM"]
[Mon Apr 13 20:53:19.220377 2026] [:error] [pid 63310:tid 63362] [client 20.215.210.138:15645] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/njxjtooj.php"] [unique_id "adznP3oXpRU5ztmwPjJbaAAAAFI"]
[Mon Apr 13 20:53:20.012061 2026] [:error] [pid 63406:tid 63429] [client 20.215.210.138:20038] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/njxjtooj.php"] [unique_id "adznQLHZEIkQ0Zmgp5qyBAAAANI"]
[Mon Apr 13 20:53:20.645459 2026] [:error] [pid 63406:tid 63433] [client 20.215.210.138:18330] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/njxjtooj.php"] [unique_id "adznQLHZEIkQ0Zmgp5qyBgAAANY"]
[Mon Apr 13 20:53:21.636388 2026] [:error] [pid 57183:tid 57206] [client 20.215.210.138:18320] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/njxjtooj.php"] [unique_id "adznQTDO3t8R5NaxzYRDMwAAAVU"]
[Mon Apr 13 20:53:22.332609 2026] [:error] [pid 57183:tid 57188] [client 20.215.210.138:4215] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "adznQjDO3t8R5NaxzYRDOQAAAUM"]
[Mon Apr 13 20:53:23.275845 2026] [:error] [pid 9314:tid 9338] [client 20.215.210.138:13493] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "adznQ2_r4W8fX2GWyGQdMQAAAZY"]
[Mon Apr 13 20:53:24.335998 2026] [:error] [pid 57183:tid 57190] [client 20.215.210.138:15656] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "adznRDDO3t8R5NaxzYRDQAAAAUU"]
[Mon Apr 13 20:53:25.095162 2026] [:error] [pid 63309:tid 63328] [client 20.215.210.138:55306] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "adznRUpIKZ10weXpf0Uq0QAAAA8"]
[Mon Apr 13 20:53:26.600970 2026] [:error] [pid 63406:tid 63418] [client 20.215.210.138:24398] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws61.php"] [unique_id "adznRrHZEIkQ0Zmgp5qyEwAAAMc"]
[Mon Apr 13 20:53:27.876872 2026] [:error] [pid 57183:tid 57207] [client 20.215.210.138:12900] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws61.php"] [unique_id "adznRzDO3t8R5NaxzYRDRwAAAVY"]
[Mon Apr 13 20:53:29.675728 2026] [:error] [pid 57183:tid 57185] [client 20.215.210.138:34525] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws61.php"] [unique_id "adznSTDO3t8R5NaxzYRDTAAAAUA"]
[Mon Apr 13 20:53:30.731999 2026] [:error] [pid 7228:tid 7247] [client 20.215.210.138:18404] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws61.php"] [unique_id "adznSgEnn1dQrOSHHNWaLgAAARE"]
[Mon Apr 13 20:53:32.399930 2026] [:error] [pid 63310:tid 63347] [client 20.215.210.138:18417] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/iyy.php"] [unique_id "adznTHoXpRU5ztmwPjJbdwAAAEM"]
[Mon Apr 13 20:53:36.026728 2026] [:error] [pid 9314:tid 9338] [client 20.215.210.138:38196] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/iyy.php"] [unique_id "adznUG_r4W8fX2GWyGQdRgAAAZY"]
[Mon Apr 13 20:53:37.584468 2026] [:error] [pid 7228:tid 7241] [client 20.215.210.138:12917] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/iyy.php"] [unique_id "adznUQEnn1dQrOSHHNWaNgAAAQs"]
[Mon Apr 13 20:53:38.575956 2026] [:error] [pid 63310:tid 63344] [client 20.215.210.138:48691] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/iyy.php"] [unique_id "adznUnoXpRU5ztmwPjJbgwAAAEA"]
[Mon Apr 13 20:53:43.558130 2026] [:error] [pid 57183:tid 57203] [client 20.215.210.138:34524] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/900.php"] [unique_id "adznVzDO3t8R5NaxzYRDfgAAAVI"]
[Mon Apr 13 20:53:44.594797 2026] [:error] [pid 9314:tid 9320] [client 20.215.210.138:18415] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/900.php"] [unique_id "adznWG_r4W8fX2GWyGQdUQAAAYQ"]
[Mon Apr 13 20:53:46.298663 2026] [:error] [pid 57183:tid 57195] [client 20.215.210.138:53616] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/900.php"] [unique_id "adznWjDO3t8R5NaxzYRDigAAAUo"]
[Mon Apr 13 20:53:47.407510 2026] [:error] [pid 7228:tid 7238] [client 20.215.210.138:4177] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/900.php"] [unique_id "adznWwEnn1dQrOSHHNWaPwAAAQg"]
[Mon Apr 13 20:53:48.642303 2026] [:error] [pid 63406:tid 63424] [client 20.215.210.138:15727] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/blsvgeyaza.php"] [unique_id "adznXLHZEIkQ0Zmgp5qySwAAAM0"]
[Mon Apr 13 20:53:49.590601 2026] [:error] [pid 63406:tid 63430] [client 20.215.210.138:18402] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/blsvgeyaza.php"] [unique_id "adznXbHZEIkQ0Zmgp5qyUQAAANM"]
[Mon Apr 13 20:53:50.838483 2026] [:error] [pid 63309:tid 63333] [client 20.215.210.138:18414] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/blsvgeyaza.php"] [unique_id "adznXkpIKZ10weXpf0Uq4gAAABQ"]
[Mon Apr 13 20:53:51.756866 2026] [:error] [pid 9314:tid 9317] [client 20.215.210.138:35634] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/blsvgeyaza.php"] [unique_id "adznX2_r4W8fX2GWyGQdZgAAAYE"]
[Mon Apr 13 20:53:52.768970 2026] [:error] [pid 63311:tid 63378] [client 20.215.210.138:53576] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gqhyti.php"] [unique_id "adznYKHjrGN1MqBCVFkE8AAAAIc"]
[Mon Apr 13 20:53:54.042090 2026] [:error] [pid 63406:tid 63412] [client 20.215.210.138:4451] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gqhyti.php"] [unique_id "adznYrHZEIkQ0Zmgp5qyZQAAAME"]
[Mon Apr 13 20:53:54.964839 2026] [:error] [pid 63406:tid 63416] [client 20.215.210.138:4332] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gqhyti.php"] [unique_id "adznYrHZEIkQ0Zmgp5qyawAAAMU"]
[Mon Apr 13 20:53:55.758075 2026] [:error] [pid 63406:tid 63425] [client 20.215.210.138:4299] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gqhyti.php"] [unique_id "adznY7HZEIkQ0Zmgp5qycwAAAM4"]
[Mon Apr 13 20:53:56.883333 2026] [:error] [pid 63406:tid 63415] [client 20.215.210.138:4440] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/autoxxi.php"] [unique_id "adznZLHZEIkQ0Zmgp5qyfwAAAMQ"]
[Mon Apr 13 20:53:57.475056 2026] [:error] [pid 7228:tid 7249] [client 20.215.210.138:4331] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/autoxxi.php"] [unique_id "adznZQEnn1dQrOSHHNWaRQAAARM"]
[Mon Apr 13 20:53:58.267158 2026] [:error] [pid 9314:tid 9321] [client 20.215.210.138:49184] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/autoxxi.php"] [unique_id "adznZm_r4W8fX2GWyGQdagAAAYU"]
[Mon Apr 13 20:53:59.714385 2026] [:error] [pid 63311:tid 63386] [client 20.215.210.138:60790] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/autoxxi.php"] [unique_id "adznZ6HjrGN1MqBCVFkE9gAAAI8"]
[Mon Apr 13 20:54:02.309433 2026] [:error] [pid 63310:tid 63358] [client 20.215.210.138:23585] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1144452145_error_log.php"] [unique_id "adznanoXpRU5ztmwPjJbiwAAAE4"]
[Mon Apr 13 20:54:06.253822 2026] [:error] [pid 7228:tid 7236] [client 20.215.210.138:4300] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1144452145_error_log.php"] [unique_id "adznbgEnn1dQrOSHHNWaTAAAAQY"]
[Mon Apr 13 20:54:10.508958 2026] [:error] [pid 57183:tid 57196] [client 20.215.210.138:4308] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1144452145_error_log.php"] [unique_id "adzncjDO3t8R5NaxzYRD0AAAAUs"]
[Mon Apr 13 20:54:14.010312 2026] [:error] [pid 63311:tid 63394] [client 20.215.210.138:4237] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1144452145_error_log.php"] [unique_id "adzndqHjrGN1MqBCVFkFFwAAAJc"]
[Mon Apr 13 20:54:32.789139 2026] [:error] [pid 9314:tid 9324] [client 20.215.210.138:58782] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "adzniG_r4W8fX2GWyGQdmwAAAYg"]
[Mon Apr 13 20:54:36.897249 2026] [:error] [pid 63406:tid 63418] [client 20.215.210.138:4662] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "adznjLHZEIkQ0Zmgp5qy8gAAAMc"]
[Mon Apr 13 20:54:40.822133 2026] [:error] [pid 57183:tid 57191] [client 20.215.210.138:40075] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "adznkDDO3t8R5NaxzYRD_gAAAUY"]
[Mon Apr 13 20:54:42.699125 2026] [:error] [pid 63311:tid 63385] [client 20.215.210.138:4620] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "adznkqHjrGN1MqBCVFkFMgAAAI4"]
[Mon Apr 13 20:54:43.449969 2026] [:error] [pid 63406:tid 63421] [client 20.215.210.138:4225] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "adznk7HZEIkQ0Zmgp5qzAQAAAMo"]
[Mon Apr 13 20:54:44.361342 2026] [:error] [pid 57183:tid 57198] [client 20.215.210.138:60705] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "adznlDDO3t8R5NaxzYRECgAAAU0"]
[Mon Apr 13 20:54:45.357727 2026] [:error] [pid 7228:tid 7235] [client 20.215.210.138:49155] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "adznlQEnn1dQrOSHHNWabQAAAQU"]
[Mon Apr 13 20:54:47.128261 2026] [:error] [pid 57183:tid 57208] [client 20.215.210.138:23606] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "adznlzDO3t8R5NaxzYREGQAAAVc"]
[Mon Apr 13 20:54:48.320985 2026] [:error] [pid 9314:tid 9328] [client 20.215.210.138:55325] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "adznmG_r4W8fX2GWyGQdygAAAYw"]
[Mon Apr 13 20:54:49.364896 2026] [:error] [pid 63310:tid 63368] [client 20.215.210.138:55337] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "adznmXoXpRU5ztmwPjJbuQAAAFg"]
[Mon Apr 13 20:54:50.643292 2026] [:error] [pid 7228:tid 7249] [client 20.215.210.138:12870] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "adznmgEnn1dQrOSHHNWadgAAARM"]
[Mon Apr 13 20:54:51.411093 2026] [:error] [pid 63311:tid 63372] [client 20.215.210.138:15701] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "adznm6HjrGN1MqBCVFkFPAAAAIE"]
[Mon Apr 13 20:54:52.597608 2026] [:error] [pid 63406:tid 63417] [client 20.215.210.138:55305] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "adznnLHZEIkQ0Zmgp5qzBAAAAMY"]
[Mon Apr 13 20:54:53.967139 2026] [:error] [pid 7228:tid 7243] [client 20.215.210.138:48644] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "adznnQEnn1dQrOSHHNWafgAAAQ0"]
[Mon Apr 13 20:55:01.216108 2026] [:error] [pid 57183:tid 57185] [client 20.215.210.138:33262] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "adznpTDO3t8R5NaxzYREOgAAAUA"]
[Mon Apr 13 20:55:15.379772 2026] [:error] [pid 57183:tid 57189] [client 20.215.210.138:4416] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/new.php"] [unique_id "adznszDO3t8R5NaxzYREWAAAAUQ"]
[Mon Apr 13 20:55:20.167410 2026] [:error] [pid 7228:tid 7230] [client 20.215.210.138:18379] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/new.php"] [unique_id "adznuAEnn1dQrOSHHNWaogAAAQA"]
[Mon Apr 13 20:55:24.122282 2026] [:error] [pid 57183:tid 57209] [client 20.215.210.138:55302] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/new.php"] [unique_id "adznvDDO3t8R5NaxzYREdQAAAVg"]
[Mon Apr 13 20:55:30.703659 2026] [:error] [pid 63311:tid 63393] [client 20.215.210.138:17103] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/press.php"] [unique_id "adznwqHjrGN1MqBCVFkFYQAAAJY"]
[Mon Apr 13 20:55:50.860204 2026] [:error] [pid 9314:tid 9323] [client 20.215.210.138:5379] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "adzn1m_r4W8fX2GWyGQeLwAAAYc"]
[Mon Apr 13 20:55:51.280850 2026] [:error] [pid 63311:tid 63388] [client 20.215.210.138:18393] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.qiodetme.php"] [unique_id "adzn16HjrGN1MqBCVFkFdQAAAJE"]
[Mon Apr 13 20:55:57.155721 2026] [:error] [pid 63406:tid 63419] [client 20.215.210.138:40930] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.qiodetme.php"] [unique_id "adzn3bHZEIkQ0Zmgp5qzogAAAMg"]
[Mon Apr 13 20:55:58.204670 2026] [:error] [pid 63406:tid 63413] [client 20.215.210.138:43596] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "adzn3rHZEIkQ0Zmgp5qzpgAAAMI"]
[Mon Apr 13 20:56:00.495652 2026] [:error] [pid 63406:tid 63425] [client 20.215.210.138:5991] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "adzn4LHZEIkQ0Zmgp5qzyAAAAM4"]
[Mon Apr 13 20:56:11.771116 2026] [:error] [pid 9314:tid 9323] [client 20.215.210.138:5723] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "adzn62_r4W8fX2GWyGQeVAAAAYc"]
[Mon Apr 13 20:56:18.934370 2026] [:error] [pid 63406:tid 63433] [client 20.215.210.138:61057] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "adzn8rHZEIkQ0Zmgp5qz3gAAANY"]
[Mon Apr 13 20:56:22.312721 2026] [:error] [pid 57183:tid 57201] [client 20.215.210.138:5621] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "adzn9jDO3t8R5NaxzYRE9gAAAVA"]
[Mon Apr 13 20:56:23.857403 2026] [:error] [pid 63406:tid 63421] [client 20.215.210.138:18398] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sodas.php"] [unique_id "adzn97HZEIkQ0Zmgp5qz8QAAAMo"]
[Mon Apr 13 20:56:24.122463 2026] [:error] [pid 7228:tid 7254] [client 20.215.210.138:5823] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "adzn-AEnn1dQrOSHHNWa9gAAARg"]
[Mon Apr 13 20:56:29.502885 2026] [:error] [pid 63311:tid 63393] [client 20.215.210.138:27781] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "adzn_aHjrGN1MqBCVFkFiQAAAJY"]
[Mon Apr 13 20:56:31.223371 2026] [:error] [pid 7228:tid 7236] [client 20.215.210.138:18387] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yw5bi63u.php"] [unique_id "adzn_wEnn1dQrOSHHNWa-wAAAQY"]
[Mon Apr 13 20:56:34.725122 2026] [:error] [pid 9314:tid 9334] [client 20.215.210.138:12587] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "adzoAm_r4W8fX2GWyGQefQAAAZI"]
[Mon Apr 13 20:56:35.816496 2026] [:error] [pid 9314:tid 9325] [client 20.215.210.138:18377] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yw5bi63u.php"] [unique_id "adzoA2_r4W8fX2GWyGQegQAAAYk"]
[Mon Apr 13 20:56:37.437169 2026] [:error] [pid 63309:tid 63331] [client 20.215.210.138:42794] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "adzoBUpIKZ10weXpf0UrfAAAABI"]
[Mon Apr 13 20:56:41.973094 2026] [:error] [pid 63406:tid 63419] [client 20.215.210.138:40919] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yw5bi63u.php"] [unique_id "adzoCbHZEIkQ0Zmgp5q0IAAAAMg"]
[Mon Apr 13 20:57:01.973534 2026] [:error] [pid 63406:tid 63433] [client 20.215.210.138:48678] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws83.php"] [unique_id "adzoHbHZEIkQ0Zmgp5q0XQAAANY"]
[Mon Apr 13 20:57:02.087882 2026] [:error] [pid 63406:tid 63428] [client 20.215.210.138:45103] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/144.php"] [unique_id "adzoHrHZEIkQ0Zmgp5q0YAAAANE"]
[Mon Apr 13 20:57:03.907171 2026] [:error] [pid 63310:tid 63349] [client 20.215.210.138:12650] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/144.php"] [unique_id "adzoH3oXpRU5ztmwPjJcOQAAAEU"]
[Mon Apr 13 20:57:05.175107 2026] [:error] [pid 63406:tid 63434] [client 20.215.210.138:38217] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws83.php"] [unique_id "adzoIbHZEIkQ0Zmgp5q0aAAAANc"]
[Mon Apr 13 20:57:05.490624 2026] [:error] [pid 63406:tid 63417] [client 20.215.210.138:5896] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/144.php"] [unique_id "adzoIbHZEIkQ0Zmgp5q0aQAAAMY"]
[Mon Apr 13 20:57:06.863784 2026] [:error] [pid 63406:tid 63432] [client 20.215.210.138:45090] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/144.php"] [unique_id "adzoIrHZEIkQ0Zmgp5q0bwAAANU"]
[Mon Apr 13 20:57:09.339921 2026] [:error] [pid 7228:tid 7239] [client 20.215.210.138:37751] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws83.php"] [unique_id "adzoJQEnn1dQrOSHHNWbLQAAAQk"]
[Mon Apr 13 20:57:09.463860 2026] [:error] [pid 63311:tid 63395] [client 20.215.210.138:40480] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asd.php"] [unique_id "adzoJaHjrGN1MqBCVFkFqQAAAJg"]
[Mon Apr 13 20:57:14.021268 2026] [:error] [pid 63311:tid 63389] [client 20.215.210.138:32677] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws83.php"] [unique_id "adzoKqHjrGN1MqBCVFkFrQAAAJI"]
[Mon Apr 13 20:57:14.746512 2026] [:error] [pid 63406:tid 63413] [client 20.215.210.138:30994] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asd.php"] [unique_id "adzoKrHZEIkQ0Zmgp5q0hwAAAMI"]
[Mon Apr 13 20:57:17.705065 2026] [:error] [pid 63406:tid 63435] [client 20.215.210.138:30092] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asd.php"] [unique_id "adzoLbHZEIkQ0Zmgp5q0jQAAANg"]
[Mon Apr 13 20:57:18.113383 2026] [:error] [pid 63310:tid 63354] [client 20.215.210.138:25748] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws75.php"] [unique_id "adzoLnoXpRU5ztmwPjJcPAAAAEo"]
[Mon Apr 13 20:57:19.805847 2026] [:error] [pid 57183:tid 57206] [client 20.215.210.138:12393] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asd.php"] [unique_id "adzoLzDO3t8R5NaxzYRFNQAAAVU"]
[Mon Apr 13 20:57:28.077713 2026] [:error] [pid 63311:tid 63374] [client 20.215.210.138:33825] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws75.php"] [unique_id "adzoOKHjrGN1MqBCVFkFuwAAAIM"]
[Mon Apr 13 20:57:29.261348 2026] [:error] [pid 9314:tid 9328] [client 20.215.210.138:16948] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zc-104.php"] [unique_id "adzoOW_r4W8fX2GWyGQeuAAAAYw"]
[Mon Apr 13 20:57:31.538451 2026] [:error] [pid 57183:tid 57193] [client 20.215.210.138:4712] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "adzoOzDO3t8R5NaxzYRFaAAAAUg"]
[Mon Apr 13 20:57:33.937417 2026] [:error] [pid 9314:tid 9333] [client 20.215.210.138:35093] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "adzoPW_r4W8fX2GWyGQe5wAAAZE"]
[Mon Apr 13 20:57:35.189723 2026] [:error] [pid 7228:tid 7253] [client 20.215.210.138:46821] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zc-104.php"] [unique_id "adzoPwEnn1dQrOSHHNWbYQAAARc"]
[Mon Apr 13 20:57:38.077307 2026] [:error] [pid 9314:tid 9327] [client 20.215.210.138:24426] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "adzoQm_r4W8fX2GWyGQfGwAAAYs"]
[Mon Apr 13 20:57:38.541094 2026] [:error] [pid 63311:tid 63383] [client 20.215.210.138:29546] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rzki.php"] [unique_id "adzoQqHjrGN1MqBCVFkFwQAAAIw"]
[Mon Apr 13 20:57:39.950662 2026] [:error] [pid 63310:tid 63364] [client 20.215.210.138:47504] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rzki.php"] [unique_id "adzoQ3oXpRU5ztmwPjJcVQAAAFQ"]
[Mon Apr 13 20:57:40.806671 2026] [:error] [pid 63406:tid 63412] [client 20.215.210.138:4733] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "adzoRLHZEIkQ0Zmgp5q0sgAAAME"]
[Mon Apr 13 20:57:43.301244 2026] [:error] [pid 57183:tid 57194] [client 20.215.210.138:29505] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rzki.php"] [unique_id "adzoRzDO3t8R5NaxzYRFsQAAAUk"]
[Mon Apr 13 20:57:43.500446 2026] [:error] [pid 63406:tid 63421] [client 20.215.210.138:47465] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "adzoR7HZEIkQ0Zmgp5q0uwAAAMo"]
[Mon Apr 13 20:57:44.835430 2026] [:error] [pid 63310:tid 63361] [client 20.215.210.138:29520] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rzki.php"] [unique_id "adzoSHoXpRU5ztmwPjJcXAAAAFE"]
[Mon Apr 13 20:57:46.394821 2026] [:error] [pid 63406:tid 63431] [client 20.215.210.138:36913] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "adzoSrHZEIkQ0Zmgp5q0xAAAANQ"]
[Mon Apr 13 20:57:47.280034 2026] [:error] [pid 63406:tid 63428] [client 20.215.210.138:12650] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xsas.php"] [unique_id "adzoS7HZEIkQ0Zmgp5q0xgAAANE"]
[Mon Apr 13 20:57:48.668753 2026] [:error] [pid 9314:tid 9319] [client 20.215.210.138:27069] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xsas.php"] [unique_id "adzoTG_r4W8fX2GWyGQfTgAAAYM"]
[Mon Apr 13 20:57:50.161028 2026] [:error] [pid 63311:tid 63378] [client 20.215.210.138:5296] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xsas.php"] [unique_id "adzoTqHjrGN1MqBCVFkFywAAAIc"]
[Mon Apr 13 20:57:50.177632 2026] [:error] [pid 63311:tid 63371] [client 20.215.210.138:5059] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "adzoTqHjrGN1MqBCVFkFzAAAAIA"]
[Mon Apr 13 20:57:51.145185 2026] [:error] [pid 9314:tid 9330] [client 20.215.210.138:29558] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xsas.php"] [unique_id "adzoT2_r4W8fX2GWyGQfXgAAAY4"]
[Mon Apr 13 20:57:52.349029 2026] [:error] [pid 9314:tid 9332] [client 20.215.210.138:52445] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "adzoUG_r4W8fX2GWyGQfZwAAAZA"]
[Mon Apr 13 20:57:52.536789 2026] [:error] [pid 9314:tid 9333] [client 20.215.210.138:12311] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/d12.php"] [unique_id "adzoUG_r4W8fX2GWyGQfaQAAAZE"]
[Mon Apr 13 20:57:53.398853 2026] [:error] [pid 9314:tid 9338] [client 20.215.210.138:35021] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/d12.php"] [unique_id "adzoUW_r4W8fX2GWyGQfcwAAAZY"]
[Mon Apr 13 20:57:53.948270 2026] [:error] [pid 63406:tid 63419] [client 20.215.210.138:52449] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "adzoUbHZEIkQ0Zmgp5q01QAAAMg"]
[Mon Apr 13 20:57:54.666374 2026] [:error] [pid 63406:tid 63430] [client 20.215.210.138:20089] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "adzoUrHZEIkQ0Zmgp5q02QAAANM"]
[Mon Apr 13 20:57:54.771274 2026] [:error] [pid 63406:tid 63425] [client 20.215.210.138:35055] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/d12.php"] [unique_id "adzoUrHZEIkQ0Zmgp5q02gAAAM4"]
[Mon Apr 13 20:57:57.019197 2026] [:error] [pid 63406:tid 63430] [client 20.215.210.138:46901] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "adzoVbHZEIkQ0Zmgp5q04gAAANM"]
[Mon Apr 13 20:57:58.512052 2026] [:error] [pid 7228:tid 7244] [client 20.215.210.138:42897] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "adzoVgEnn1dQrOSHHNWbcgAAAQ4"]
[Mon Apr 13 20:57:59.255394 2026] [:error] [pid 63310:tid 63356] [client 20.215.210.138:46014] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/d12.php"] [unique_id "adzoV3oXpRU5ztmwPjJcaQAAAEw"]
[Mon Apr 13 20:58:00.133455 2026] [:error] [pid 63406:tid 63428] [client 20.215.210.138:53561] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "adzoWLHZEIkQ0Zmgp5q05wAAANE"]
[Mon Apr 13 20:58:33.936202 2026] [:error] [pid 63311:tid 63385] [client 20.215.210.138:45993] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lm15.php"] [unique_id "adzoeaHjrGN1MqBCVFkF_QAAAI4"]
[Mon Apr 13 20:58:36.203723 2026] [:error] [pid 7228:tid 7236] [client 20.215.210.138:20467] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lm15.php"] [unique_id "adzofAEnn1dQrOSHHNWboAAAAQY"]
[Mon Apr 13 20:58:40.781586 2026] [:error] [pid 63311:tid 63384] [client 20.215.210.138:43521] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lm15.php"] [unique_id "adzogKHjrGN1MqBCVFkGAwAAAI0"]
[Mon Apr 13 20:58:51.163142 2026] [:error] [pid 57183:tid 57199] [client 20.215.210.138:40450] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lm15.php"] [unique_id "adzoizDO3t8R5NaxzYRGPgAAAU4"]
[Mon Apr 13 20:58:56.694491 2026] [:error] [pid 63406:tid 63434] [client 20.215.210.138:52885] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/clss.php"] [unique_id "adzokLHZEIkQ0Zmgp5q1eAAAANc"]
[Mon Apr 13 20:59:01.891056 2026] [:error] [pid 57183:tid 57190] [client 20.215.210.138:6123] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/clss.php"] [unique_id "adzolTDO3t8R5NaxzYRGUwAAAUU"]
[Mon Apr 13 20:59:03.357997 2026] [:error] [pid 63406:tid 63420] [client 20.215.210.138:54425] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/clss.php"] [unique_id "adzol7HZEIkQ0Zmgp5q1kgAAAMk"]
[Mon Apr 13 20:59:15.954784 2026] [:error] [pid 7228:tid 7254] [client 20.215.210.138:52916] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/44.php"] [unique_id "adzoowEnn1dQrOSHHNWbywAAARg"]
[Mon Apr 13 20:59:17.949579 2026] [:error] [pid 63311:tid 63378] [client 20.215.210.138:36986] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "adzopaHjrGN1MqBCVFkGIQAAAIc"]
[Mon Apr 13 20:59:25.078282 2026] [:error] [pid 63309:tid 63328] [client 20.215.210.138:18814] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/44.php"] [unique_id "adzorUpIKZ10weXpf0UsBwAAAA8"]
[Mon Apr 13 20:59:49.907847 2026] [:error] [pid 9314:tid 9333] [client 20.215.210.138:38983] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "adzoxW_r4W8fX2GWyGQgIQAAAZE"]
[Mon Apr 13 20:59:49.961711 2026] [:error] [pid 63310:tid 63364] [client 20.215.210.138:32532] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx78.php"] [unique_id "adzoxXoXpRU5ztmwPjJc0QAAAFQ"]
[Mon Apr 13 20:59:55.215053 2026] [:error] [pid 63406:tid 63415] [client 20.215.210.138:52895] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx78.php"] [unique_id "adzoy7HZEIkQ0Zmgp5q2HAAAAMQ"]
[Mon Apr 13 20:59:55.913880 2026] [:error] [pid 63309:tid 63336] [client 20.215.210.138:56052] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "adzoy0pIKZ10weXpf0UsDAAAABc"]
[Mon Apr 13 20:59:57.353307 2026] [:error] [pid 63406:tid 63413] [client 20.215.210.138:6126] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx78.php"] [unique_id "adzozbHZEIkQ0Zmgp5q2JwAAAMI"]
[Mon Apr 13 20:59:58.012973 2026] [:error] [pid 63406:tid 63418] [client 20.215.210.138:33872] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "adzozrHZEIkQ0Zmgp5q2KwAAAMc"]
[Mon Apr 13 20:59:59.100595 2026] [:error] [pid 63309:tid 63332] [client 20.215.210.138:6125] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx78.php"] [unique_id "adzoz0pIKZ10weXpf0UsDQAAABM"]
[Mon Apr 13 20:59:59.742215 2026] [:error] [pid 7228:tid 7247] [client 20.215.210.138:54825] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "adzozwEnn1dQrOSHHNWb-wAAARE"]
[Mon Apr 13 21:00:01.145225 2026] [:error] [pid 63406:tid 63433] [client 20.215.210.138:13096] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "adzo0bHZEIkQ0Zmgp5q2OQAAANY"]
[Mon Apr 13 21:00:01.289560 2026] [:error] [pid 63406:tid 63426] [client 20.215.210.138:33914] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amp.php"] [unique_id "adzo0bHZEIkQ0Zmgp5q2OgAAAM8"]
[Mon Apr 13 21:00:06.526115 2026] [:error] [pid 63406:tid 63413] [client 20.215.210.138:13090] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "adzo1rHZEIkQ0Zmgp5q2UAAAAMI"]
[Mon Apr 13 21:00:06.804946 2026] [:error] [pid 63406:tid 63420] [client 20.215.210.138:20074] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amp.php"] [unique_id "adzo1rHZEIkQ0Zmgp5q2UgAAAMk"]
[Mon Apr 13 21:00:09.136861 2026] [:error] [pid 63309:tid 63333] [client 20.215.210.138:12806] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amp.php"] [unique_id "adzo2UpIKZ10weXpf0UsFAAAABQ"]
[Mon Apr 13 21:00:10.192865 2026] [:error] [pid 7228:tid 7236] [client 20.215.210.138:50030] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "adzo2gEnn1dQrOSHHNWcDQAAAQY"]
[Mon Apr 13 21:00:10.840442 2026] [:error] [pid 63311:tid 63387] [client 20.215.210.138:20069] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amp.php"] [unique_id "adzo2qHjrGN1MqBCVFkGOgAAAJA"]
[Mon Apr 13 21:00:13.437587 2026] [:error] [pid 63309:tid 63336] [client 20.215.210.138:42893] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abrand.php"] [unique_id "adzo3UpIKZ10weXpf0UsGgAAABc"]
[Mon Apr 13 21:00:13.697865 2026] [:error] [pid 63406:tid 63426] [client 20.215.210.138:13118] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "adzo3bHZEIkQ0Zmgp5q2XAAAAM8"]
[Mon Apr 13 21:00:14.779746 2026] [:error] [pid 57183:tid 57200] [client 20.215.210.138:50046] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "adzo3jDO3t8R5NaxzYRG3wAAAU8"]
[Mon Apr 13 21:00:16.020277 2026] [:error] [pid 63310:tid 63349] [client 20.215.210.138:50639] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "adzo4HoXpRU5ztmwPjJc5wAAAEU"]
[Mon Apr 13 21:00:18.092141 2026] [:error] [pid 63310:tid 63358] [client 20.215.210.138:32566] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "adzo4noXpRU5ztmwPjJc6wAAAE4"]
[Mon Apr 13 21:00:18.880839 2026] [:error] [pid 57183:tid 57190] [client 20.215.210.138:40872] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abrand.php"] [unique_id "adzo4jDO3t8R5NaxzYRG6QAAAUU"]
[Mon Apr 13 21:00:19.256290 2026] [:error] [pid 63406:tid 63431] [client 20.215.210.138:13183] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "adzo47HZEIkQ0Zmgp5q2ZQAAANQ"]
[Mon Apr 13 21:00:20.351565 2026] [:error] [pid 63310:tid 63360] [client 20.215.210.138:13101] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "adzo5HoXpRU5ztmwPjJc7QAAAFA"]
[Mon Apr 13 21:00:21.551455 2026] [:error] [pid 63406:tid 63424] [client 20.215.210.138:6022] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "adzo5bHZEIkQ0Zmgp5q2dAAAAM0"]
[Mon Apr 13 21:00:21.916085 2026] [:error] [pid 63311:tid 63392] [client 20.215.210.138:14264] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abrand.php"] [unique_id "adzo5aHjrGN1MqBCVFkGQAAAAJU"]
[Mon Apr 13 21:00:22.968144 2026] [:error] [pid 63311:tid 63380] [client 20.215.210.138:50668] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "adzo5qHjrGN1MqBCVFkGRAAAAIk"]
[Mon Apr 13 21:00:22.980873 2026] [:error] [pid 7228:tid 7231] [client 20.215.210.138:40894] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abrand.php"] [unique_id "adzo5gEnn1dQrOSHHNWcFwAAAQE"]
[Mon Apr 13 21:00:23.743905 2026] [:error] [pid 9314:tid 9332] [client 20.215.210.138:50019] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "adzo52_r4W8fX2GWyGQgXAAAAZA"]
[Mon Apr 13 21:00:24.091894 2026] [:error] [pid 9314:tid 9323] [client 20.215.210.138:12824] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/init.php"] [unique_id "adzo6G_r4W8fX2GWyGQgXwAAAYc"]
[Mon Apr 13 21:00:24.890342 2026] [:error] [pid 9314:tid 9319] [client 20.215.210.138:18777] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "adzo6G_r4W8fX2GWyGQgYwAAAYM"]
[Mon Apr 13 21:00:25.239475 2026] [:error] [pid 7228:tid 7235] [client 20.215.210.138:56015] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/init.php"] [unique_id "adzo6QEnn1dQrOSHHNWcGAAAAQU"]
[Mon Apr 13 21:00:26.425005 2026] [:error] [pid 63309:tid 63329] [client 20.215.210.138:40834] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/init.php"] [unique_id "adzo6kpIKZ10weXpf0UsIwAAABA"]
[Mon Apr 13 21:00:26.425007 2026] [:error] [pid 63309:tid 63334] [client 20.215.210.138:52913] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "adzo6kpIKZ10weXpf0UsIgAAABU"]
[Mon Apr 13 21:00:27.327200 2026] [:error] [pid 9314:tid 9336] [client 20.215.210.138:52884] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "adzo62_r4W8fX2GWyGQgbQAAAZQ"]
[Mon Apr 13 21:00:27.394113 2026] [:error] [pid 63310:tid 63361] [client 20.215.210.138:40888] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/init.php"] [unique_id "adzo63oXpRU5ztmwPjJc9AAAAFE"]
[Mon Apr 13 21:00:28.685991 2026] [:error] [pid 57183:tid 57205] [client 20.215.210.138:6036] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "adzo7DDO3t8R5NaxzYRG7gAAAVQ"]
[Mon Apr 13 21:00:29.845654 2026] [:error] [pid 63309:tid 63316] [client 20.215.210.138:50641] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/b.php"] [unique_id "adzo7UpIKZ10weXpf0UsJQAAAAM"]
[Mon Apr 13 21:00:30.254921 2026] [:error] [pid 63310:tid 63350] [client 20.215.210.138:40858] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "adzo7noXpRU5ztmwPjJc-AAAAEY"]
[Mon Apr 13 21:00:30.580579 2026] [:error] [pid 63310:tid 63358] [client 20.215.210.138:54439] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/b.php"] [unique_id "adzo7noXpRU5ztmwPjJc-gAAAE4"]
[Mon Apr 13 21:00:31.415099 2026] [:error] [pid 57183:tid 57208] [client 20.215.210.138:54417] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/b.php"] [unique_id "adzo7zDO3t8R5NaxzYRG9QAAAVc"]
[Mon Apr 13 21:00:31.576775 2026] [:error] [pid 63309:tid 63315] [client 20.215.210.138:14241] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "adzo70pIKZ10weXpf0UsJwAAAAI"]
[Mon Apr 13 21:00:33.513816 2026] [:error] [pid 63310:tid 63347] [client 20.215.210.138:50686] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/b.php"] [unique_id "adzo8XoXpRU5ztmwPjJc_QAAAEM"]
[Mon Apr 13 21:00:33.737954 2026] [:error] [pid 57183:tid 57208] [client 20.215.210.138:33896] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "adzo8TDO3t8R5NaxzYRHBQAAAVc"]
[Mon Apr 13 21:00:34.613584 2026] [:error] [pid 63406:tid 63424] [client 20.215.210.138:54403] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws49.php"] [unique_id "adzo8rHZEIkQ0Zmgp5q2gAAAAM0"]
[Mon Apr 13 21:00:35.321747 2026] [:error] [pid 57183:tid 57187] [client 20.215.210.138:13079] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws49.php"] [unique_id "adzo8zDO3t8R5NaxzYRHFgAAAUI"]
[Mon Apr 13 21:00:36.282164 2026] [:error] [pid 9314:tid 9325] [client 20.215.210.138:54429] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws49.php"] [unique_id "adzo9G_r4W8fX2GWyGQgdgAAAYk"]
[Mon Apr 13 21:00:37.119561 2026] [:error] [pid 63406:tid 63421] [client 20.215.210.138:5662] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws49.php"] [unique_id "adzo9bHZEIkQ0Zmgp5q2igAAAMo"]
[Mon Apr 13 21:00:37.597712 2026] [:error] [pid 57183:tid 57201] [client 20.215.210.138:53550] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "adzo9TDO3t8R5NaxzYRHIwAAAVA"]
[Mon Apr 13 21:00:37.686104 2026] [:error] [pid 63406:tid 63434] [client 20.215.210.138:32557] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog-header.php"] [unique_id "adzo9bHZEIkQ0Zmgp5q2jQAAANc"]
[Mon Apr 13 21:00:38.551752 2026] [:error] [pid 63406:tid 63423] [client 20.215.210.138:50020] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog-header.php"] [unique_id "adzo9rHZEIkQ0Zmgp5q2kAAAAMw"]
[Mon Apr 13 21:00:39.170926 2026] [:error] [pid 63406:tid 63418] [client 20.215.210.138:53528] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/myfile.php"] [unique_id "adzo97HZEIkQ0Zmgp5q2lgAAAMc"]
[Mon Apr 13 21:00:39.530091 2026] [:error] [pid 7228:tid 7232] [client 20.215.210.138:50026] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog-header.php"] [unique_id "adzo9wEnn1dQrOSHHNWcGwAAAQI"]
[Mon Apr 13 21:00:41.268718 2026] [:error] [pid 63310:tid 63356] [client 20.215.210.138:13156] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog-header.php"] [unique_id "adzo-XoXpRU5ztmwPjJdAgAAAEw"]
[Mon Apr 13 21:00:41.423652 2026] [:error] [pid 9314:tid 9329] [client 20.215.210.138:40867] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/myfile.php"] [unique_id "adzo-W_r4W8fX2GWyGQgewAAAY0"]
[Mon Apr 13 21:00:42.538568 2026] [:error] [pid 7228:tid 7241] [client 20.215.210.138:60787] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/myfile.php"] [unique_id "adzo-gEnn1dQrOSHHNWcIgAAAQs"]
[Mon Apr 13 21:00:42.808088 2026] [:error] [pid 63406:tid 63427] [client 20.215.210.138:50674] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "adzo-rHZEIkQ0Zmgp5q2oQAAANA"]
[Mon Apr 13 21:00:43.759580 2026] [:error] [pid 63406:tid 63428] [client 20.215.210.138:58530] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "adzo-7HZEIkQ0Zmgp5q2qAAAANE"]
[Mon Apr 13 21:00:45.086940 2026] [:error] [pid 63311:tid 63375] [client 20.215.210.138:13145] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "adzo_aHjrGN1MqBCVFkGZgAAAIQ"]
[Mon Apr 13 21:00:45.654581 2026] [:error] [pid 57183:tid 57208] [client 20.215.210.138:51118] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/myfile.php"] [unique_id "adzo_TDO3t8R5NaxzYRHMAAAAVc"]
[Mon Apr 13 21:00:46.147575 2026] [:error] [pid 63406:tid 63430] [client 20.215.210.138:6085] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "adzo_rHZEIkQ0Zmgp5q2sAAAANM"]
[Mon Apr 13 21:00:47.038308 2026] [:error] [pid 63406:tid 63411] [client 20.215.210.138:49987] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gfd.php"] [unique_id "adzo_7HZEIkQ0Zmgp5q2sgAAAMA"]
[Mon Apr 13 21:00:48.519174 2026] [:error] [pid 57183:tid 57191] [client 20.215.210.138:50032] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gfd.php"] [unique_id "adzpADDO3t8R5NaxzYRHNgAAAUY"]
[Mon Apr 13 21:00:57.038047 2026] [:error] [pid 57183:tid 57200] [client 20.215.210.138:18766] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "adzpCTDO3t8R5NaxzYRHVAAAAU8"]
[Mon Apr 13 21:00:58.940060 2026] [:error] [pid 63406:tid 63412] [client 20.215.210.138:52302] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "adzpCrHZEIkQ0Zmgp5q22AAAAME"]
[Mon Apr 13 21:00:59.076007 2026] [:error] [pid 63406:tid 63421] [client 20.215.210.138:53563] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "adzpC7HZEIkQ0Zmgp5q22gAAAMo"]
[Mon Apr 13 21:01:00.275651 2026] [:error] [pid 63406:tid 63425] [client 20.215.210.138:58588] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "adzpDLHZEIkQ0Zmgp5q23AAAAM4"]
[Mon Apr 13 21:01:01.093167 2026] [:error] [pid 63309:tid 63313] [client 20.215.210.138:41350] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "adzpDUpIKZ10weXpf0UsQwAAAAA"]
[Mon Apr 13 21:01:01.955185 2026] [:error] [pid 63406:tid 63430] [client 20.215.210.138:12546] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x9.php"] [unique_id "adzpDbHZEIkQ0Zmgp5q25gAAANM"]
[Mon Apr 13 21:01:02.958272 2026] [:error] [pid 63311:tid 63380] [client 20.215.210.138:56008] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "adzpDqHjrGN1MqBCVFkGbAAAAIk"]
[Mon Apr 13 21:01:02.976351 2026] [:error] [pid 63310:tid 63365] [client 20.215.210.138:5814] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x9.php"] [unique_id "adzpDnoXpRU5ztmwPjJdCgAAAFU"]
[Mon Apr 13 21:01:04.604262 2026] [:error] [pid 9314:tid 9317] [client 20.215.210.138:41393] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x9.php"] [unique_id "adzpEG_r4W8fX2GWyGQgsQAAAYE"]
[Mon Apr 13 21:01:05.568476 2026] [:error] [pid 63406:tid 63432] [client 20.215.210.138:5809] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x9.php"] [unique_id "adzpEbHZEIkQ0Zmgp5q26gAAANU"]
[Mon Apr 13 21:01:06.419023 2026] [:error] [pid 63406:tid 63414] [client 20.215.210.138:34331] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/an.php"] [unique_id "adzpErHZEIkQ0Zmgp5q28AAAAMM"]
[Mon Apr 13 21:01:07.669189 2026] [:error] [pid 63310:tid 63344] [client 20.215.210.138:42895] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "adzpE3oXpRU5ztmwPjJdEQAAAEA"]
[Mon Apr 13 21:01:07.904933 2026] [:error] [pid 63310:tid 63356] [client 20.215.210.138:5586] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/an.php"] [unique_id "adzpE3oXpRU5ztmwPjJdEgAAAEw"]
[Mon Apr 13 21:01:09.045665 2026] [:error] [pid 63310:tid 63355] [client 20.215.210.138:12552] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/an.php"] [unique_id "adzpFXoXpRU5ztmwPjJdFQAAAEs"]
[Mon Apr 13 21:01:10.275216 2026] [:error] [pid 63406:tid 63433] [client 20.215.210.138:34308] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/an.php"] [unique_id "adzpFrHZEIkQ0Zmgp5q3CwAAANY"]
[Mon Apr 13 21:01:11.083709 2026] [:error] [pid 57183:tid 57199] [client 20.215.210.138:58612] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aboutc.php"] [unique_id "adzpFzDO3t8R5NaxzYRHZQAAAU4"]
[Mon Apr 13 21:01:12.288993 2026] [:error] [pid 63406:tid 63429] [client 20.215.210.138:42939] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "adzpGLHZEIkQ0Zmgp5q3FAAAANI"]
[Mon Apr 13 21:01:12.631683 2026] [:error] [pid 63406:tid 63418] [client 20.215.210.138:47612] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aboutc.php"] [unique_id "adzpGLHZEIkQ0Zmgp5q3GQAAAMc"]
[Mon Apr 13 21:01:13.968312 2026] [:error] [pid 63311:tid 63388] [client 20.215.210.138:47584] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aboutc.php"] [unique_id "adzpGaHjrGN1MqBCVFkGgQAAAJE"]
[Mon Apr 13 21:01:16.230995 2026] [:error] [pid 9314:tid 9334] [client 20.215.210.138:58604] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aboutc.php"] [unique_id "adzpHG_r4W8fX2GWyGQg2QAAAZI"]
[Mon Apr 13 21:01:17.709346 2026] [:error] [pid 7228:tid 7231] [client 20.215.210.138:39558] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "adzpHQEnn1dQrOSHHNWcPwAAAQE"]
[Mon Apr 13 21:01:18.703741 2026] [:error] [pid 7228:tid 7248] [client 20.215.210.138:25455] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gdn.php"] [unique_id "adzpHgEnn1dQrOSHHNWcQwAAARI"]
[Mon Apr 13 21:01:20.187522 2026] [:error] [pid 63310:tid 63352] [client 20.215.210.138:14227] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xxw.php"] [unique_id "adzpIHoXpRU5ztmwPjJdLgAAAEg"]
[Mon Apr 13 21:01:22.988994 2026] [:error] [pid 63406:tid 63415] [client 20.215.210.138:37479] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gdn.php"] [unique_id "adzpIrHZEIkQ0Zmgp5q3MwAAAMQ"]
[Mon Apr 13 21:01:28.375053 2026] [:error] [pid 63310:tid 63361] [client 20.215.210.138:53711] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gdn.php"] [unique_id "adzpKHoXpRU5ztmwPjJdNQAAAFE"]
[Mon Apr 13 21:01:28.616991 2026] [:error] [pid 63310:tid 63355] [client 20.215.210.138:14212] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xxw.php"] [unique_id "adzpKHoXpRU5ztmwPjJdNwAAAEs"]
[Mon Apr 13 21:01:32.006932 2026] [:error] [pid 57183:tid 57196] [client 20.215.210.138:39576] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xxw.php"] [unique_id "adzpLDDO3t8R5NaxzYRHlAAAAUs"]
[Mon Apr 13 21:01:35.175372 2026] [:error] [pid 57183:tid 57203] [client 20.215.210.138:42896] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "adzpLzDO3t8R5NaxzYRHpQAAAVI"]
[Mon Apr 13 21:01:38.828428 2026] [:error] [pid 57183:tid 57198] [client 20.215.210.138:18701] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/first.php"] [unique_id "adzpMjDO3t8R5NaxzYRHuwAAAU0"]
[Mon Apr 13 21:01:42.067201 2026] [:error] [pid 63311:tid 63372] [client 20.215.210.138:5563] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/first.php"] [unique_id "adzpNqHjrGN1MqBCVFkGlgAAAIE"]
[Mon Apr 13 21:01:45.540534 2026] [:error] [pid 9314:tid 9332] [client 20.215.210.138:33913] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "adzpOW_r4W8fX2GWyGQhAwAAAZA"]
[Mon Apr 13 21:01:47.445316 2026] [:error] [pid 63406:tid 63429] [client 20.215.210.138:40543] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/first.php"] [unique_id "adzpO7HZEIkQ0Zmgp5q3hgAAANI"]
[Mon Apr 13 21:01:53.595124 2026] [:error] [pid 63309:tid 63318] [client 20.215.210.138:20088] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "adzpQUpIKZ10weXpf0UsWwAAAAU"]
[Mon Apr 13 21:01:54.686521 2026] [:error] [pid 9314:tid 9337] [client 20.215.210.138:40838] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "adzpQm_r4W8fX2GWyGQhEAAAAZU"]
[Mon Apr 13 21:01:55.798369 2026] [:error] [pid 57183:tid 57191] [client 20.215.210.138:53531] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "adzpQzDO3t8R5NaxzYRH2AAAAUY"]
[Mon Apr 13 21:02:05.606662 2026] [:error] [pid 63310:tid 63351] [client 20.215.210.138:56054] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/drhunthq.php"] [unique_id "adzpTXoXpRU5ztmwPjJdYgAAAEc"]
[Mon Apr 13 21:02:08.075975 2026] [:error] [pid 63311:tid 63379] [client 20.215.210.138:52436] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/drhunthq.php"] [unique_id "adzpUKHjrGN1MqBCVFkGpwAAAIg"]
[Mon Apr 13 21:02:10.560398 2026] [:error] [pid 7228:tid 7238] [client 4.235.78.22:33631] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vanda.php"] [unique_id "adzpUgEnn1dQrOSHHNWciAAAAQg"]
[Mon Apr 13 21:02:12.048989 2026] [:error] [pid 7228:tid 7253] [client 20.215.210.138:4812] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/drhunthq.php"] [unique_id "adzpVAEnn1dQrOSHHNWcjAAAARc"]
[Mon Apr 13 21:02:14.952617 2026] [:error] [pid 63309:tid 63323] [client 20.215.210.138:4849] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/drhunthq.php"] [unique_id "adzpVkpIKZ10weXpf0UsfgAAAAo"]
[Mon Apr 13 21:02:17.589278 2026] [:error] [pid 9314:tid 9336] [client 20.215.210.138:54064] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin/index.php"] [unique_id "adzpWW_r4W8fX2GWyGQhLgAAAZQ"]
[Mon Apr 13 21:02:20.061314 2026] [:error] [pid 63310:tid 63348] [client 20.215.210.138:47890] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin/index.php"] [unique_id "adzpXHoXpRU5ztmwPjJdbwAAAEQ"]
[Mon Apr 13 21:02:20.387962 2026] [:error] [pid 63309:tid 63332] [client 4.235.78.22:19737] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vanda.php"] [unique_id "adzpXEpIKZ10weXpf0UshgAAABM"]
[Mon Apr 13 21:02:21.585023 2026] [:error] [pid 63406:tid 63420] [client 4.235.78.22:22929] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vanda.php"] [unique_id "adzpXbHZEIkQ0Zmgp5q36QAAAMk"]
[Mon Apr 13 21:02:22.354734 2026] [:error] [pid 63311:tid 63395] [client 20.215.210.138:34453] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin/index.php"] [unique_id "adzpXqHjrGN1MqBCVFkGvwAAAJg"]
[Mon Apr 13 21:02:22.801776 2026] [:error] [pid 63406:tid 63424] [client 4.235.78.22:6122] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vanda.php"] [unique_id "adzpXrHZEIkQ0Zmgp5q39gAAAM0"]
[Mon Apr 13 21:02:23.803692 2026] [:error] [pid 63310:tid 63362] [client 4.235.78.22:51034] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/domains.php"] [unique_id "adzpX3oXpRU5ztmwPjJdggAAAFI"]
[Mon Apr 13 21:02:24.103595 2026] [:error] [pid 63406:tid 63432] [client 20.215.210.138:25730] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin/index.php"] [unique_id "adzpYLHZEIkQ0Zmgp5q3_gAAANU"]
[Mon Apr 13 21:02:24.841360 2026] [:error] [pid 57183:tid 57185] [client 4.235.78.22:23029] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/domains.php"] [unique_id "adzpYDDO3t8R5NaxzYRIEAAAAUA"]
[Mon Apr 13 21:02:25.396884 2026] [:error] [pid 63406:tid 63413] [client 20.215.210.138:61357] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tfm.php"] [unique_id "adzpYbHZEIkQ0Zmgp5q4AQAAAMI"]
[Mon Apr 13 21:02:25.705979 2026] [:error] [pid 63406:tid 63434] [client 20.215.210.138:43623] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cpp2.php"] [unique_id "adzpYbHZEIkQ0Zmgp5q4BAAAANc"]
[Mon Apr 13 21:02:25.865014 2026] [:error] [pid 57183:tid 57196] [client 4.235.78.22:13233] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/domains.php"] [unique_id "adzpYTDO3t8R5NaxzYRIFQAAAUs"]
[Mon Apr 13 21:02:26.839613 2026] [:error] [pid 63311:tid 63374] [client 20.215.210.138:12925] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tfm.php"] [unique_id "adzpYqHjrGN1MqBCVFkGyQAAAIM"]
[Mon Apr 13 21:02:27.495950 2026] [:error] [pid 57183:tid 57204] [client 4.235.78.22:14834] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/domains.php"] [unique_id "adzpYzDO3t8R5NaxzYRIGAAAAVM"]
[Mon Apr 13 21:02:28.647034 2026] [:error] [pid 63311:tid 63388] [client 20.215.210.138:47909] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tfm.php"] [unique_id "adzpZKHjrGN1MqBCVFkG0AAAAJE"]
[Mon Apr 13 21:02:28.685374 2026] [:error] [pid 63311:tid 63393] [client 4.235.78.22:16682] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/144.php"] [unique_id "adzpZKHjrGN1MqBCVFkG0QAAAJY"]
[Mon Apr 13 21:02:30.183838 2026] [:error] [pid 7228:tid 7250] [client 20.215.210.138:28439] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admlo.php"] [unique_id "adzpZgEnn1dQrOSHHNWcqgAAARQ"]
[Mon Apr 13 21:02:30.183847 2026] [:error] [pid 63310:tid 63368] [client 20.215.210.138:49839] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tfm.php"] [unique_id "adzpZnoXpRU5ztmwPjJdgwAAAFg"]
[Mon Apr 13 21:02:30.311864 2026] [:error] [pid 7228:tid 7236] [client 4.235.78.22:14786] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/144.php"] [unique_id "adzpZgEnn1dQrOSHHNWcqwAAAQY"]
[Mon Apr 13 21:02:31.324340 2026] [:error] [pid 63311:tid 63391] [client 4.235.78.22:34840] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/144.php"] [unique_id "adzpZ6HjrGN1MqBCVFkG1AAAAJQ"]
[Mon Apr 13 21:02:31.761584 2026] [:error] [pid 63310:tid 63348] [client 20.215.210.138:33205] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "adzpZ3oXpRU5ztmwPjJdiQAAAEQ"]
[Mon Apr 13 21:02:32.420581 2026] [:error] [pid 63406:tid 63432] [client 20.215.210.138:27082] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admlo.php"] [unique_id "adzpaLHZEIkQ0Zmgp5q4FgAAANU"]
[Mon Apr 13 21:02:32.478774 2026] [:error] [pid 63311:tid 63377] [client 4.235.78.22:14791] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/144.php"] [unique_id "adzpaKHjrGN1MqBCVFkG1QAAAIY"]
[Mon Apr 13 21:02:33.884603 2026] [:error] [pid 63311:tid 63395] [client 4.235.78.22:22991] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asd.php"] [unique_id "adzpaaHjrGN1MqBCVFkG2wAAAJg"]
[Mon Apr 13 21:02:34.190511 2026] [:error] [pid 63310:tid 63355] [client 20.215.210.138:60012] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "adzpanoXpRU5ztmwPjJdiwAAAEs"]
[Mon Apr 13 21:02:34.845567 2026] [:error] [pid 63406:tid 63418] [client 4.235.78.22:16006] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asd.php"] [unique_id "adzparHZEIkQ0Zmgp5q4IQAAAMc"]
[Mon Apr 13 21:02:35.534679 2026] [:error] [pid 7228:tid 7242] [client 20.215.210.138:28429] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admlo.php"] [unique_id "adzpawEnn1dQrOSHHNWcsAAAAQw"]
[Mon Apr 13 21:02:35.945913 2026] [:error] [pid 63406:tid 63432] [client 4.235.78.22:24988] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asd.php"] [unique_id "adzpa7HZEIkQ0Zmgp5q4JAAAANU"]
[Mon Apr 13 21:02:36.682008 2026] [:error] [pid 57183:tid 57196] [client 20.215.210.138:60123] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admlo.php"] [unique_id "adzpbDDO3t8R5NaxzYRIGgAAAUs"]
[Mon Apr 13 21:02:37.433361 2026] [:error] [pid 63406:tid 63427] [client 20.215.210.138:33208] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "adzpbbHZEIkQ0Zmgp5q4KgAAANA"]
[Mon Apr 13 21:02:37.459326 2026] [:error] [pid 63406:tid 63429] [client 4.235.78.22:15463] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asd.php"] [unique_id "adzpbbHZEIkQ0Zmgp5q4KwAAANI"]
[Mon Apr 13 21:02:38.891473 2026] [:error] [pid 57183:tid 57206] [client 4.235.78.22:22949] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zc-104.php"] [unique_id "adzpbjDO3t8R5NaxzYRIHQAAAVU"]
[Mon Apr 13 21:02:39.824076 2026] [:error] [pid 63406:tid 63433] [client 20.215.210.138:52760] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "adzpb7HZEIkQ0Zmgp5q4NwAAANY"]
[Mon Apr 13 21:02:40.343345 2026] [:error] [pid 63406:tid 63424] [client 4.235.78.22:34234] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zc-104.php"] [unique_id "adzpcLHZEIkQ0Zmgp5q4OwAAAM0"]
[Mon Apr 13 21:02:41.209188 2026] [:error] [pid 9314:tid 9320] [client 20.215.210.138:56920] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin-ajax.php"] [unique_id "adzpcW_r4W8fX2GWyGQhTQAAAYQ"]
[Mon Apr 13 21:02:42.781054 2026] [:error] [pid 9314:tid 9317] [client 20.215.210.138:55948] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "adzpcm_r4W8fX2GWyGQhTgAAAYE"]
[Mon Apr 13 21:02:43.151572 2026] [:error] [pid 9314:tid 9319] [client 20.215.210.138:28468] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin-ajax.php"] [unique_id "adzpc2_r4W8fX2GWyGQhUAAAAYM"]
[Mon Apr 13 21:02:43.406916 2026] [:error] [pid 57183:tid 57201] [client 4.235.78.22:22938] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zc-104.php"] [unique_id "adzpczDO3t8R5NaxzYRIIgAAAVA"]
[Mon Apr 13 21:02:43.918614 2026] [:error] [pid 57183:tid 57185] [client 20.215.210.138:55962] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "adzpczDO3t8R5NaxzYRIJQAAAUA"]
[Mon Apr 13 21:02:45.468135 2026] [:error] [pid 7228:tid 7254] [client 20.215.210.138:61870] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin-ajax.php"] [unique_id "adzpdQEnn1dQrOSHHNWcuAAAARg"]
[Mon Apr 13 21:02:45.713724 2026] [:error] [pid 9314:tid 9335] [client 20.215.210.138:4907] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "adzpdW_r4W8fX2GWyGQhVAAAAZM"]
[Mon Apr 13 21:02:46.688253 2026] [:error] [pid 63406:tid 63422] [client 4.235.78.22:23723] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zc-104.php"] [unique_id "adzpdrHZEIkQ0Zmgp5q4VQAAAMs"]
[Mon Apr 13 21:02:47.298720 2026] [:error] [pid 7228:tid 7241] [client 20.215.210.138:52738] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "adzpdwEnn1dQrOSHHNWcugAAAQs"]
[Mon Apr 13 21:02:48.534490 2026] [:error] [pid 57183:tid 57190] [client 4.235.78.22:28564] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rzki.php"] [unique_id "adzpeDDO3t8R5NaxzYRINAAAAUU"]
[Mon Apr 13 21:02:48.593631 2026] [:error] [pid 9314:tid 9324] [client 20.215.210.138:59976] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "adzpeG_r4W8fX2GWyGQhWAAAAYg"]
[Mon Apr 13 21:02:50.096314 2026] [:error] [pid 9314:tid 9319] [client 4.235.78.22:56794] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rzki.php"] [unique_id "adzpem_r4W8fX2GWyGQhXAAAAYM"]
[Mon Apr 13 21:02:50.733558 2026] [:error] [pid 63406:tid 63423] [client 20.215.210.138:12505] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "adzperHZEIkQ0Zmgp5q4YAAAAMw"]
[Mon Apr 13 21:02:52.009726 2026] [:error] [pid 9314:tid 9321] [client 4.235.78.22:23712] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rzki.php"] [unique_id "adzpfG_r4W8fX2GWyGQhXgAAAYU"]
[Mon Apr 13 21:02:52.228280 2026] [:error] [pid 7228:tid 7249] [client 20.215.210.138:46099] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "adzpfAEnn1dQrOSHHNWcvAAAARM"]
[Mon Apr 13 21:02:53.321726 2026] [:error] [pid 7228:tid 7253] [client 4.235.78.22:33622] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rzki.php"] [unique_id "adzpfQEnn1dQrOSHHNWcwAAAARc"]
[Mon Apr 13 21:02:53.443368 2026] [:error] [pid 9314:tid 9320] [client 20.215.210.138:12499] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "adzpfW_r4W8fX2GWyGQhYAAAAYQ"]
[Mon Apr 13 21:02:54.530366 2026] [:error] [pid 9314:tid 9324] [client 4.235.78.22:53902] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xsas.php"] [unique_id "adzpfm_r4W8fX2GWyGQhZAAAAYg"]
[Mon Apr 13 21:02:54.532120 2026] [:error] [pid 9314:tid 9337] [client 20.215.210.138:18401] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "adzpfm_r4W8fX2GWyGQhZgAAAZU"]
[Mon Apr 13 21:02:55.383283 2026] [:error] [pid 57183:tid 57191] [client 4.235.78.22:19255] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xsas.php"] [unique_id "adzpfzDO3t8R5NaxzYRITgAAAUY"]
[Mon Apr 13 21:02:55.860340 2026] [:error] [pid 7228:tid 7233] [client 20.215.210.138:18427] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "adzpfwEnn1dQrOSHHNWcxAAAAQM"]
[Mon Apr 13 21:02:56.722142 2026] [:error] [pid 9314:tid 9340] [client 4.235.78.22:59936] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xsas.php"] [unique_id "adzpgG_r4W8fX2GWyGQhbQAAAZg"]
[Mon Apr 13 21:02:57.140507 2026] [:error] [pid 63406:tid 63432] [client 20.215.210.138:17004] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amthd.php"] [unique_id "adzpgbHZEIkQ0Zmgp5q4ZQAAANU"]
[Mon Apr 13 21:02:57.399003 2026] [:error] [pid 63406:tid 63423] [client 4.235.78.22:20992] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xsas.php"] [unique_id "adzpgbHZEIkQ0Zmgp5q4ZgAAAMw"]
[Mon Apr 13 21:02:58.935631 2026] [:error] [pid 63406:tid 63425] [client 20.215.210.138:32724] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "adzpgrHZEIkQ0Zmgp5q4cAAAAM4"]
[Mon Apr 13 21:02:59.167045 2026] [:error] [pid 63406:tid 63417] [client 20.215.210.138:52941] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amthd.php"] [unique_id "adzpg7HZEIkQ0Zmgp5q4cQAAAMY"]
[Mon Apr 13 21:02:59.333403 2026] [:error] [pid 7228:tid 7244] [client 4.235.78.22:49832] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/d12.php"] [unique_id "adzpgwEnn1dQrOSHHNWcyAAAAQ4"]
[Mon Apr 13 21:03:00.084306 2026] [:error] [pid 63310:tid 63355] [client 20.215.210.138:16967] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amthd.php"] [unique_id "adzphHoXpRU5ztmwPjJdngAAAEs"]
[Mon Apr 13 21:03:01.244223 2026] [:error] [pid 63406:tid 63423] [client 20.215.210.138:31080] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amthd.php"] [unique_id "adzphbHZEIkQ0Zmgp5q4dwAAAMw"]
[Mon Apr 13 21:03:02.242912 2026] [:error] [pid 63311:tid 63390] [client 20.215.210.138:31103] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8xyz.php"] [unique_id "adzphqHjrGN1MqBCVFkG8gAAAJM"]
[Mon Apr 13 21:03:02.492673 2026] [:error] [pid 63311:tid 63375] [client 4.235.78.22:46404] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/d12.php"] [unique_id "adzphqHjrGN1MqBCVFkG9AAAAIQ"]
[Mon Apr 13 21:03:03.169007 2026] [:error] [pid 57183:tid 57201] [client 20.215.210.138:38492] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8xyz.php"] [unique_id "adzphzDO3t8R5NaxzYRIUwAAAVA"]
[Mon Apr 13 21:03:04.182537 2026] [:error] [pid 57183:tid 57206] [client 20.215.210.138:21023] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8xyz.php"] [unique_id "adzpiDDO3t8R5NaxzYRIVwAAAVU"]
[Mon Apr 13 21:03:04.886317 2026] [:error] [pid 57183:tid 57208] [client 4.235.78.22:55959] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/d12.php"] [unique_id "adzpiDDO3t8R5NaxzYRIXQAAAVc"]
[Mon Apr 13 21:03:04.983609 2026] [:error] [pid 57183:tid 57198] [client 20.215.210.138:29565] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8xyz.php"] [unique_id "adzpiDDO3t8R5NaxzYRIXgAAAU0"]
[Mon Apr 13 21:03:06.846754 2026] [:error] [pid 57183:tid 57195] [client 4.235.78.22:49892] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/d12.php"] [unique_id "adzpijDO3t8R5NaxzYRIYQAAAUo"]
[Mon Apr 13 21:03:12.059629 2026] [:error] [pid 57183:tid 57198] [client 20.215.210.138:4327] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/term.php"] [unique_id "adzpkDDO3t8R5NaxzYRIewAAAU0"]
[Mon Apr 13 21:03:12.323753 2026] [:error] [pid 9314:tid 9316] [client 20.215.210.138:38524] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/blsvgeyaza.php"] [unique_id "adzpkG_r4W8fX2GWyGQhmAAAAYA"]
[Mon Apr 13 21:03:15.300611 2026] [:error] [pid 7228:tid 7247] [client 20.215.210.138:23563] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/term.php"] [unique_id "adzpkwEnn1dQrOSHHNWc2AAAARE"]
[Mon Apr 13 21:03:18.621655 2026] [:error] [pid 63309:tid 63335] [client 20.215.210.138:16950] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/blsvgeyaza.php"] [unique_id "adzplkpIKZ10weXpf0UsqAAAABY"]
[Mon Apr 13 21:03:20.479751 2026] [:error] [pid 63309:tid 63323] [client 20.215.210.138:33226] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/term.php"] [unique_id "adzpmEpIKZ10weXpf0UsrQAAAAo"]
[Mon Apr 13 21:03:25.891734 2026] [:error] [pid 63406:tid 63415] [client 20.215.210.138:4168] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/term.php"] [unique_id "adzpnbHZEIkQ0Zmgp5q4oAAAAMQ"]
[Mon Apr 13 21:03:28.261782 2026] [:error] [pid 57183:tid 57198] [client 20.215.210.138:4550] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "adzpoDDO3t8R5NaxzYRIqgAAAU0"]
[Mon Apr 13 21:03:30.576077 2026] [:error] [pid 63406:tid 63430] [client 20.215.210.138:4614] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "adzporHZEIkQ0Zmgp5q4tQAAANM"]
[Mon Apr 13 21:03:31.538515 2026] [:error] [pid 63310:tid 63364] [client 4.235.78.22:19304] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/44.php"] [unique_id "adzpo3oXpRU5ztmwPjJd3AAAAFQ"]
[Mon Apr 13 21:03:32.495872 2026] [:error] [pid 9314:tid 9325] [client 4.235.78.22:30539] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/44.php"] [unique_id "adzppG_r4W8fX2GWyGQiAAAAAYk"]
[Mon Apr 13 21:03:33.179472 2026] [:error] [pid 7228:tid 7233] [client 20.215.210.138:4248] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "adzppQEnn1dQrOSHHNWc6QAAAQM"]
[Mon Apr 13 21:03:33.505616 2026] [:error] [pid 63311:tid 63392] [client 4.235.78.22:30546] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/44.php"] [unique_id "adzppaHjrGN1MqBCVFkHBQAAAJU"]
[Mon Apr 13 21:03:34.736976 2026] [:error] [pid 63406:tid 63419] [client 20.215.210.138:4658] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "adzpprHZEIkQ0Zmgp5q4wwAAAMg"]
[Mon Apr 13 21:03:34.882810 2026] [:error] [pid 57183:tid 57203] [client 4.235.78.22:12303] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/44.php"] [unique_id "adzppjDO3t8R5NaxzYRIvgAAAVI"]
[Mon Apr 13 21:03:35.491165 2026] [:error] [pid 63311:tid 63376] [client 20.215.210.138:38514] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gqhyti.php"] [unique_id "adzpp6HjrGN1MqBCVFkHCQAAAIU"]
[Mon Apr 13 21:03:35.940811 2026] [:error] [pid 63311:tid 63385] [client 4.235.78.22:29201] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5e0a.php"] [unique_id "adzpp6HjrGN1MqBCVFkHCwAAAI4"]
[Mon Apr 13 21:03:37.587497 2026] [:error] [pid 63406:tid 63421] [client 20.215.210.138:4546] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/155.php"] [unique_id "adzpqbHZEIkQ0Zmgp5q4ygAAAMo"]
[Mon Apr 13 21:03:37.885517 2026] [:error] [pid 57183:tid 57194] [client 4.235.78.22:38483] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5e0a.php"] [unique_id "adzpqTDO3t8R5NaxzYRIxQAAAUk"]
[Mon Apr 13 21:03:38.825287 2026] [:error] [pid 7228:tid 7251] [client 20.215.210.138:20454] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gqhyti.php"] [unique_id "adzpqgEnn1dQrOSHHNWc7QAAARU"]
[Mon Apr 13 21:03:39.733859 2026] [:error] [pid 63406:tid 63415] [client 4.235.78.22:38516] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5e0a.php"] [unique_id "adzpq7HZEIkQ0Zmgp5q41gAAAMQ"]
[Mon Apr 13 21:03:40.476664 2026] [:error] [pid 63406:tid 63426] [client 20.215.210.138:47526] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gqhyti.php"] [unique_id "adzprLHZEIkQ0Zmgp5q43AAAAM8"]
[Mon Apr 13 21:03:40.534363 2026] [:error] [pid 9314:tid 9327] [client 20.215.210.138:4596] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/155.php"] [unique_id "adzprG_r4W8fX2GWyGQiDwAAAYs"]
[Mon Apr 13 21:03:42.388655 2026] [:error] [pid 63310:tid 63346] [client 4.235.78.22:12588] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5e0a.php"] [unique_id "adzprnoXpRU5ztmwPjJd4gAAAEI"]
[Mon Apr 13 21:03:42.746047 2026] [:error] [pid 63311:tid 63372] [client 20.215.210.138:38468] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gqhyti.php"] [unique_id "adzprqHjrGN1MqBCVFkHHwAAAIE"]
[Mon Apr 13 21:03:44.871714 2026] [:error] [pid 63406:tid 63429] [client 20.215.210.138:56860] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/autoxxi.php"] [unique_id "adzpsLHZEIkQ0Zmgp5q47AAAANI"]
[Mon Apr 13 21:03:45.079691 2026] [:error] [pid 63406:tid 63416] [client 20.215.210.138:60677] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/155.php"] [unique_id "adzpsbHZEIkQ0Zmgp5q47gAAAMU"]
[Mon Apr 13 21:03:46.875065 2026] [:error] [pid 63406:tid 63414] [client 20.215.210.138:21002] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/autoxxi.php"] [unique_id "adzpsrHZEIkQ0Zmgp5q49AAAAMM"]
[Mon Apr 13 21:03:47.106582 2026] [:error] [pid 63406:tid 63420] [client 4.235.78.22:29697] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bo.php"] [unique_id "adzps7HZEIkQ0Zmgp5q49QAAAMk"]
[Mon Apr 13 21:03:48.451856 2026] [:error] [pid 63406:tid 63429] [client 20.215.210.138:15687] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/155.php"] [unique_id "adzptLHZEIkQ0Zmgp5q4-gAAANI"]
[Mon Apr 13 21:03:50.175393 2026] [:error] [pid 7228:tid 7233] [client 20.215.210.138:24895] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "adzptgEnn1dQrOSHHNWdBgAAAQM"]
[Mon Apr 13 21:03:51.678098 2026] [:error] [pid 63406:tid 63430] [client 4.235.78.22:42997] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bo.php"] [unique_id "adzpt7HZEIkQ0Zmgp5q5BAAAANM"]
[Mon Apr 13 21:03:52.134162 2026] [:error] [pid 63311:tid 63371] [client 20.215.210.138:13303] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "adzpuKHjrGN1MqBCVFkHJwAAAIA"]
[Mon Apr 13 21:03:53.306329 2026] [:error] [pid 63406:tid 63426] [client 4.235.78.22:29258] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bo.php"] [unique_id "adzpubHZEIkQ0Zmgp5q5DwAAAM8"]
[Mon Apr 13 21:03:54.888193 2026] [:error] [pid 7228:tid 7235] [client 4.235.78.22:53863] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bo.php"] [unique_id "adzpugEnn1dQrOSHHNWdDAAAAQU"]
[Mon Apr 13 21:03:55.459979 2026] [:error] [pid 63310:tid 63368] [client 20.215.210.138:60683] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "adzpu3oXpRU5ztmwPjJd7gAAAFg"]
[Mon Apr 13 21:03:55.575329 2026] [:error] [pid 63406:tid 63434] [client 20.215.210.138:33410] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/autoxxi.php"] [unique_id "adzpu7HZEIkQ0Zmgp5q5HAAAANc"]
[Mon Apr 13 21:03:56.081726 2026] [:error] [pid 63311:tid 63372] [client 4.235.78.22:16708] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/56c53.php"] [unique_id "adzpvKHjrGN1MqBCVFkHLQAAAIE"]
[Mon Apr 13 21:03:57.497282 2026] [:error] [pid 7228:tid 7249] [client 4.235.78.22:31031] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/56c53.php"] [unique_id "adzpvQEnn1dQrOSHHNWdDwAAARM"]
[Mon Apr 13 21:03:59.929604 2026] [:error] [pid 57183:tid 57192] [client 4.235.78.22:30468] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/56c53.php"] [unique_id "adzpvzDO3t8R5NaxzYRI-AAAAUc"]
[Mon Apr 13 21:04:00.974395 2026] [:error] [pid 63406:tid 63422] [client 20.215.210.138:4656] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "adzpwLHZEIkQ0Zmgp5q5MwAAAMs"]
[Mon Apr 13 21:04:01.739704 2026] [:error] [pid 57183:tid 57206] [client 4.235.78.22:43004] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/56c53.php"] [unique_id "adzpwTDO3t8R5NaxzYRI-wAAAVU"]
[Mon Apr 13 21:04:03.948025 2026] [:error] [pid 7228:tid 7242] [client 4.235.78.22:25622] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx78.php"] [unique_id "adzpwwEnn1dQrOSHHNWdEQAAAQw"]
[Mon Apr 13 21:04:04.058154 2026] [:error] [pid 63310:tid 63362] [client 20.215.210.138:13776] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1144452145_error_log.php"] [unique_id "adzpxHoXpRU5ztmwPjJd9AAAAFI"]
[Mon Apr 13 21:04:05.817955 2026] [:error] [pid 57183:tid 57193] [client 20.215.210.138:15700] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "adzpxTDO3t8R5NaxzYRJAQAAAUg"]
[Mon Apr 13 21:04:06.304518 2026] [:error] [pid 7228:tid 7243] [client 4.235.78.22:53824] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx78.php"] [unique_id "adzpxgEnn1dQrOSHHNWdEwAAAQ0"]
[Mon Apr 13 21:04:10.957012 2026] [:error] [pid 9314:tid 9324] [client 4.235.78.22:54532] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx78.php"] [unique_id "adzpym_r4W8fX2GWyGQiOQAAAYg"]
[Mon Apr 13 21:04:19.766297 2026] [:error] [pid 63406:tid 63421] [client 4.235.78.22:29293] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx78.php"] [unique_id "adzp07HZEIkQ0Zmgp5q5ZwAAAMo"]
[Mon Apr 13 21:04:30.585972 2026] [:error] [pid 9314:tid 9334] [client 4.235.78.22:52566] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "adzp3m_r4W8fX2GWyGQiaAAAAZI"]
[Mon Apr 13 21:04:31.034730 2026] [:error] [pid 57183:tid 57186] [client 20.215.210.138:22788] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "adzp3zDO3t8R5NaxzYRJPAAAAUE"]
[Mon Apr 13 21:04:34.811336 2026] [:error] [pid 7228:tid 7248] [client 20.215.210.138:60719] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "adzp4gEnn1dQrOSHHNWdRQAAARI"]
[Mon Apr 13 21:04:36.963706 2026] [:error] [pid 57183:tid 57189] [client 20.215.210.138:52800] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hots.php"] [unique_id "adzp5DDO3t8R5NaxzYRJQAAAAUQ"]
[Mon Apr 13 21:04:40.066669 2026] [:error] [pid 57183:tid 57206] [client 20.215.210.138:24941] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hots.php"] [unique_id "adzp6DDO3t8R5NaxzYRJRgAAAVU"]
[Mon Apr 13 21:04:46.055956 2026] [:error] [pid 63309:tid 63331] [client 20.215.210.138:52825] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hots.php"] [unique_id "adzp7kpIKZ10weXpf0Us6gAAABI"]
[Mon Apr 13 21:04:50.862173 2026] [:error] [pid 63406:tid 63433] [client 20.215.210.138:24388] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hots.php"] [unique_id "adzp8rHZEIkQ0Zmgp5q5uQAAANY"]
[Mon Apr 13 21:04:51.981413 2026] [:error] [pid 57183:tid 57196] [client 4.235.78.22:33016] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blogs.php"] [unique_id "adzp8zDO3t8R5NaxzYRJZgAAAUs"]
[Mon Apr 13 21:04:52.370786 2026] [:error] [pid 63311:tid 63376] [client 20.215.210.138:13220] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin-footer.php"] [unique_id "adzp9KHjrGN1MqBCVFkHiQAAAIU"]
[Mon Apr 13 21:04:53.996801 2026] [:error] [pid 7228:tid 7243] [client 20.215.210.138:5445] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "adzp9QEnn1dQrOSHHNWdggAAAQ0"]
[Mon Apr 13 21:04:54.017479 2026] [:error] [pid 7228:tid 7234] [client 4.235.78.22:33019] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blogs.php"] [unique_id "adzp9gEnn1dQrOSHHNWdgwAAAQQ"]
[Mon Apr 13 21:04:54.551772 2026] [:error] [pid 63406:tid 63418] [client 20.215.210.138:24419] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin-footer.php"] [unique_id "adzp9rHZEIkQ0Zmgp5q5xQAAAMc"]
[Mon Apr 13 21:04:54.979519 2026] [:error] [pid 9314:tid 9333] [client 4.235.78.22:55492] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blogs.php"] [unique_id "adzp9m_r4W8fX2GWyGQiqwAAAZE"]
[Mon Apr 13 21:04:56.371932 2026] [:error] [pid 63311:tid 63383] [client 4.235.78.22:25627] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blogs.php"] [unique_id "adzp-KHjrGN1MqBCVFkHkwAAAIw"]
[Mon Apr 13 21:04:56.861962 2026] [:error] [pid 9314:tid 9322] [client 20.215.210.138:36902] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin-footer.php"] [unique_id "adzp-G_r4W8fX2GWyGQisgAAAYY"]
[Mon Apr 13 21:04:57.689522 2026] [:error] [pid 63406:tid 63430] [client 20.215.210.138:13775] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "adzp-bHZEIkQ0Zmgp5q50gAAANM"]
[Mon Apr 13 21:05:00.198081 2026] [:error] [pid 9314:tid 9319] [client 4.235.78.22:58650] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zlnckdxn.php"] [unique_id "adzp_G_r4W8fX2GWyGQivQAAAYM"]
[Mon Apr 13 21:05:00.921482 2026] [:error] [pid 63406:tid 63421] [client 20.215.210.138:52828] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin-footer.php"] [unique_id "adzp_LHZEIkQ0Zmgp5q55wAAAMo"]
[Mon Apr 13 21:05:02.284781 2026] [:error] [pid 63406:tid 63411] [client 20.215.210.138:34982] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "adzp_rHZEIkQ0Zmgp5q58QAAAMA"]
[Mon Apr 13 21:05:03.054191 2026] [:error] [pid 9314:tid 9333] [client 4.235.78.22:61049] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zlnckdxn.php"] [unique_id "adzp_2_r4W8fX2GWyGQiwQAAAZE"]
[Mon Apr 13 21:05:03.248067 2026] [:error] [pid 9314:tid 9335] [client 20.215.210.138:4624] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "adzp_2_r4W8fX2GWyGQiwgAAAZM"]
[Mon Apr 13 21:05:04.898762 2026] [:error] [pid 63310:tid 63346] [client 4.235.78.22:25661] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zlnckdxn.php"] [unique_id "adzqAHoXpRU5ztmwPjJeLwAAAEI"]
[Mon Apr 13 21:05:05.202528 2026] [:error] [pid 63406:tid 63416] [client 20.215.210.138:24928] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "adzqAbHZEIkQ0Zmgp5q5_QAAAMU"]
[Mon Apr 13 21:05:06.365790 2026] [:error] [pid 63406:tid 63428] [client 20.215.210.138:24931] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "adzqArHZEIkQ0Zmgp5q6CQAAANE"]
[Mon Apr 13 21:05:07.929040 2026] [:error] [pid 9314:tid 9336] [client 20.215.210.138:13241] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "adzqA2_r4W8fX2GWyGQiywAAAZQ"]
[Mon Apr 13 21:05:08.694515 2026] [:error] [pid 57183:tid 57191] [client 4.235.78.22:13186] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zlnckdxn.php"] [unique_id "adzqBDDO3t8R5NaxzYRJagAAAUY"]
[Mon Apr 13 21:05:09.007789 2026] [:error] [pid 7228:tid 7230] [client 20.215.210.138:52840] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "adzqBQEnn1dQrOSHHNWdiAAAAQA"]
[Mon Apr 13 21:05:10.281129 2026] [:error] [pid 63406:tid 63413] [client 20.215.210.138:24884] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "adzqBrHZEIkQ0Zmgp5q6GAAAAMI"]
[Mon Apr 13 21:05:12.084762 2026] [:error] [pid 9314:tid 9335] [client 20.215.210.138:5468] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "adzqCG_r4W8fX2GWyGQizgAAAZM"]
[Mon Apr 13 21:05:12.315254 2026] [:error] [pid 63311:tid 63372] [client 20.215.210.138:47459] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "adzqCKHjrGN1MqBCVFkHogAAAIE"]
[Mon Apr 13 21:05:13.407145 2026] [:error] [pid 57183:tid 57199] [client 20.215.210.138:36923] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "adzqCTDO3t8R5NaxzYRJcgAAAU4"]
[Mon Apr 13 21:05:13.536157 2026] [:error] [pid 63310:tid 63364] [client 4.235.78.22:13675] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs6.php"] [unique_id "adzqCXoXpRU5ztmwPjJeNAAAAFQ"]
[Mon Apr 13 21:05:15.557283 2026] [:error] [pid 63406:tid 63419] [client 20.215.210.138:24918] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "adzqC7HZEIkQ0Zmgp5q6IQAAAMg"]
[Mon Apr 13 21:05:17.601987 2026] [:error] [pid 63406:tid 63429] [client 20.215.210.138:4545] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "adzqDbHZEIkQ0Zmgp5q6MwAAANI"]
[Mon Apr 13 21:05:18.206842 2026] [:error] [pid 57183:tid 57201] [client 4.235.78.22:55530] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs6.php"] [unique_id "adzqDjDO3t8R5NaxzYRJfAAAAVA"]
[Mon Apr 13 21:05:19.285975 2026] [:error] [pid 63309:tid 63315] [client 20.215.210.138:29540] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "adzqD0pIKZ10weXpf0UtCQAAAAI"]
[Mon Apr 13 21:05:20.182811 2026] [:error] [pid 9314:tid 9326] [client 4.235.78.22:13204] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs6.php"] [unique_id "adzqEG_r4W8fX2GWyGQi2QAAAYo"]
[Mon Apr 13 21:05:20.249570 2026] [:error] [pid 63406:tid 63417] [client 20.215.210.138:52835] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "adzqELHZEIkQ0Zmgp5q6QQAAAMY"]
[Mon Apr 13 21:05:20.708013 2026] [:error] [pid 9314:tid 9323] [client 20.215.210.138:13800] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "adzqEG_r4W8fX2GWyGQi2wAAAYc"]
[Mon Apr 13 21:05:21.820769 2026] [:error] [pid 63406:tid 63422] [client 4.235.78.22:61017] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs6.php"] [unique_id "adzqEbHZEIkQ0Zmgp5q6TAAAAMs"]
[Mon Apr 13 21:05:22.229570 2026] [:error] [pid 9314:tid 9334] [client 20.215.210.138:47425] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "adzqEm_r4W8fX2GWyGQi3AAAAZI"]
[Mon Apr 13 21:05:23.512658 2026] [:error] [pid 63406:tid 63422] [client 20.215.210.138:50560] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "adzqE7HZEIkQ0Zmgp5q6VAAAAMs"]
[Mon Apr 13 21:05:25.424899 2026] [:error] [pid 63311:tid 63382] [client 4.235.78.22:58659] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwzs.php"] [unique_id "adzqFaHjrGN1MqBCVFkHqAAAAIs"]
[Mon Apr 13 21:05:25.797680 2026] [:error] [pid 63406:tid 63419] [client 20.215.210.138:34993] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "adzqFbHZEIkQ0Zmgp5q6ZgAAAMg"]
[Mon Apr 13 21:05:26.014433 2026] [:error] [pid 7228:tid 7254] [client 4.235.78.22:13633] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwzs.php"] [unique_id "adzqFgEnn1dQrOSHHNWdsgAAARg"]
[Mon Apr 13 21:05:27.028397 2026] [:error] [pid 9314:tid 9326] [client 20.215.210.138:24880] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "adzqF2_r4W8fX2GWyGQi4AAAAYo"]
[Mon Apr 13 21:05:27.277251 2026] [:error] [pid 57183:tid 57209] [client 4.235.78.22:54551] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwzs.php"] [unique_id "adzqFzDO3t8R5NaxzYRJjQAAAVg"]
[Mon Apr 13 21:05:27.438900 2026] [:error] [pid 57183:tid 57196] [client 20.215.210.138:46046] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "adzqFzDO3t8R5NaxzYRJjgAAAUs"]
[Mon Apr 13 21:05:29.174186 2026] [:error] [pid 57183:tid 57189] [client 4.235.78.22:58666] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwzs.php"] [unique_id "adzqGTDO3t8R5NaxzYRJlQAAAUQ"]
[Mon Apr 13 21:05:30.689663 2026] [:error] [pid 63311:tid 63380] [client 4.235.78.22:48852] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "adzqGqHjrGN1MqBCVFkHqwAAAIk"]
[Mon Apr 13 21:05:31.767353 2026] [:error] [pid 9314:tid 9328] [client 4.235.78.22:32973] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "adzqG2_r4W8fX2GWyGQi_QAAAYw"]
[Mon Apr 13 21:05:33.117540 2026] [:error] [pid 9314:tid 9338] [client 4.235.78.22:55494] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "adzqHW_r4W8fX2GWyGQjBAAAAZY"]
[Mon Apr 13 21:05:34.048424 2026] [:error] [pid 63406:tid 63423] [client 4.235.78.22:32336] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "adzqHrHZEIkQ0Zmgp5q6bgAAAMw"]
[Mon Apr 13 21:05:35.846665 2026] [:error] [pid 63310:tid 63367] [client 4.235.78.22:32975] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws66.php"] [unique_id "adzqH3oXpRU5ztmwPjJeOwAAAFc"]
[Mon Apr 13 21:05:37.723066 2026] [:error] [pid 63406:tid 63430] [client 4.235.78.22:32899] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws66.php"] [unique_id "adzqIbHZEIkQ0Zmgp5q6iQAAANM"]
[Mon Apr 13 21:05:38.432210 2026] [:error] [pid 7228:tid 7234] [client 4.235.78.22:55550] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws66.php"] [unique_id "adzqIgEnn1dQrOSHHNWd4AAAAQQ"]
[Mon Apr 13 21:05:39.163417 2026] [:error] [pid 63309:tid 63330] [client 4.235.78.22:54561] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws66.php"] [unique_id "adzqI0pIKZ10weXpf0UtGgAAABE"]
[Mon Apr 13 21:05:39.828747 2026] [:error] [pid 63406:tid 63414] [client 4.235.78.22:32956] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ewe.php"] [unique_id "adzqI7HZEIkQ0Zmgp5q6kQAAAMM"]
[Mon Apr 13 21:05:39.860416 2026] [:error] [pid 7228:tid 7246] [client 20.215.210.138:33505] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws88.php"] [unique_id "adzqIwEnn1dQrOSHHNWd6AAAARA"]
[Mon Apr 13 21:05:40.907958 2026] [:error] [pid 63406:tid 63423] [client 20.215.210.138:13202] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/file.php"] [unique_id "adzqJLHZEIkQ0Zmgp5q6lwAAAMw"]
[Mon Apr 13 21:05:40.963804 2026] [:error] [pid 7228:tid 7232] [client 4.235.78.22:12394] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ewe.php"] [unique_id "adzqJAEnn1dQrOSHHNWd6QAAAQI"]
[Mon Apr 13 21:05:41.973769 2026] [:error] [pid 63406:tid 63416] [client 4.235.78.22:32943] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ewe.php"] [unique_id "adzqJbHZEIkQ0Zmgp5q6mgAAAMU"]
[Mon Apr 13 21:05:42.848505 2026] [:error] [pid 57183:tid 57199] [client 20.215.210.138:24849] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/file.php"] [unique_id "adzqJjDO3t8R5NaxzYRJpwAAAU4"]
[Mon Apr 13 21:05:43.067492 2026] [:error] [pid 63406:tid 63433] [client 4.235.78.22:32351] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ewe.php"] [unique_id "adzqJ7HZEIkQ0Zmgp5q6nwAAANY"]
[Mon Apr 13 21:05:44.042312 2026] [:error] [pid 63309:tid 63331] [client 20.215.210.138:34985] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws88.php"] [unique_id "adzqKEpIKZ10weXpf0UtHgAAABI"]
[Mon Apr 13 21:05:44.326972 2026] [:error] [pid 9314:tid 9317] [client 4.235.78.22:25624] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "adzqKG_r4W8fX2GWyGQjDgAAAYE"]
[Mon Apr 13 21:05:45.307386 2026] [:error] [pid 57183:tid 57198] [client 4.235.78.22:12374] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "adzqKTDO3t8R5NaxzYRJqgAAAU0"]
[Mon Apr 13 21:05:45.388463 2026] [:error] [pid 63406:tid 63423] [client 20.215.210.138:4591] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/file.php"] [unique_id "adzqKbHZEIkQ0Zmgp5q6oQAAAMw"]
[Mon Apr 13 21:05:45.992197 2026] [:error] [pid 63311:tid 63377] [client 4.235.78.22:13664] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "adzqKaHjrGN1MqBCVFkHswAAAIY"]
[Mon Apr 13 21:05:46.127064 2026] [:error] [pid 63406:tid 63429] [client 20.215.210.138:34964] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws88.php"] [unique_id "adzqKrHZEIkQ0Zmgp5q6owAAANI"]
[Mon Apr 13 21:05:46.742610 2026] [:error] [pid 9314:tid 9333] [client 4.235.78.22:32969] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "adzqKm_r4W8fX2GWyGQjEQAAAZE"]
[Mon Apr 13 21:05:47.640728 2026] [:error] [pid 63311:tid 63381] [client 20.215.210.138:36927] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/file.php"] [unique_id "adzqK6HjrGN1MqBCVFkHuQAAAIo"]
[Mon Apr 13 21:05:47.838869 2026] [:error] [pid 57183:tid 57204] [client 4.235.78.22:61028] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x9.php"] [unique_id "adzqKzDO3t8R5NaxzYRJswAAAVM"]
[Mon Apr 13 21:05:48.170037 2026] [:error] [pid 9314:tid 9337] [client 20.215.210.138:33535] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws88.php"] [unique_id "adzqLG_r4W8fX2GWyGQjFQAAAZU"]
[Mon Apr 13 21:05:48.793133 2026] [:error] [pid 9314:tid 9322] [client 4.235.78.22:13218] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x9.php"] [unique_id "adzqLG_r4W8fX2GWyGQjGQAAAYY"]
[Mon Apr 13 21:05:49.569594 2026] [:error] [pid 7228:tid 7248] [client 4.235.78.22:55518] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x9.php"] [unique_id "adzqLQEnn1dQrOSHHNWd7gAAARI"]
[Mon Apr 13 21:05:50.133343 2026] [:error] [pid 63309:tid 63326] [client 20.215.210.138:13774] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "adzqLkpIKZ10weXpf0UtIwAAAA0"]
[Mon Apr 13 21:05:50.794177 2026] [:error] [pid 63406:tid 63420] [client 20.215.210.138:24855] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "adzqLrHZEIkQ0Zmgp5q6qAAAAMk"]
[Mon Apr 13 21:05:51.149332 2026] [:error] [pid 63311:tid 63389] [client 20.215.210.138:5428] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "adzqL6HjrGN1MqBCVFkHvQAAAJI"]
[Mon Apr 13 21:05:53.421777 2026] [:error] [pid 63406:tid 63414] [client 20.215.210.138:24424] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "adzqMbHZEIkQ0Zmgp5q6sgAAAMM"]
[Mon Apr 13 21:05:54.827951 2026] [:error] [pid 9314:tid 9327] [client 20.215.210.138:65396] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "adzqMm_r4W8fX2GWyGQjKwAAAYs"]
[Mon Apr 13 21:05:55.590640 2026] [:error] [pid 57183:tid 57191] [client 20.215.210.138:52801] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "adzqMzDO3t8R5NaxzYRJvQAAAUY"]
[Mon Apr 13 21:05:57.327201 2026] [:error] [pid 63311:tid 63373] [client 20.215.210.138:53712] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "adzqNaHjrGN1MqBCVFkHwwAAAII"]
[Mon Apr 13 21:05:57.719290 2026] [:error] [pid 7228:tid 7236] [client 20.215.210.138:24836] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "adzqNQEnn1dQrOSHHNWd_QAAAQY"]
[Mon Apr 13 21:05:59.739687 2026] [:error] [pid 9314:tid 9331] [client 20.215.210.138:19981] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws77.php"] [unique_id "adzqN2_r4W8fX2GWyGQjTQAAAY8"]
[Mon Apr 13 21:06:00.717701 2026] [:error] [pid 9314:tid 9328] [client 4.235.78.22:32951] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "adzqOG_r4W8fX2GWyGQjUwAAAYw"]
[Mon Apr 13 21:06:00.873305 2026] [:error] [pid 57183:tid 57201] [client 20.215.210.138:53717] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "adzqODDO3t8R5NaxzYRJ1AAAAVA"]
[Mon Apr 13 21:06:01.458372 2026] [:error] [pid 57183:tid 57186] [client 20.215.210.138:50454] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws77.php"] [unique_id "adzqOTDO3t8R5NaxzYRJ2QAAAUE"]
[Mon Apr 13 21:06:02.138215 2026] [:error] [pid 57183:tid 57206] [client 4.235.78.22:32925] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "adzqOjDO3t8R5NaxzYRJ4AAAAVU"]
[Mon Apr 13 21:06:02.419363 2026] [:error] [pid 63406:tid 63434] [client 20.215.210.138:34350] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "adzqOrHZEIkQ0Zmgp5q6xQAAANc"]
[Mon Apr 13 21:06:02.761944 2026] [:error] [pid 57183:tid 57187] [client 20.215.210.138:36931] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws77.php"] [unique_id "adzqOjDO3t8R5NaxzYRJ5AAAAUI"]
[Mon Apr 13 21:06:03.838334 2026] [:error] [pid 63406:tid 63423] [client 4.235.78.22:29249] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "adzqO7HZEIkQ0Zmgp5q6yQAAAMw"]
[Mon Apr 13 21:06:04.523293 2026] [:error] [pid 7228:tid 7233] [client 20.215.210.138:52854] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws77.php"] [unique_id "adzqPAEnn1dQrOSHHNWeAgAAAQM"]
[Mon Apr 13 21:06:04.925974 2026] [:error] [pid 7228:tid 7240] [client 4.235.78.22:32974] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "adzqPAEnn1dQrOSHHNWeBQAAAQo"]
[Mon Apr 13 21:06:05.674191 2026] [:error] [pid 63406:tid 63420] [client 20.215.210.138:13734] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "adzqPbHZEIkQ0Zmgp5q60AAAAMk"]
[Mon Apr 13 21:06:05.800908 2026] [:error] [pid 63406:tid 63412] [client 4.235.78.22:55525] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws68.php"] [unique_id "adzqPbHZEIkQ0Zmgp5q60QAAAME"]
[Mon Apr 13 21:06:06.756183 2026] [:error] [pid 57183:tid 57193] [client 4.235.78.22:48859] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws68.php"] [unique_id "adzqPjDO3t8R5NaxzYRJ9gAAAUg"]
[Mon Apr 13 21:06:08.504804 2026] [:error] [pid 57183:tid 57202] [client 20.215.210.138:18743] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "adzqQDDO3t8R5NaxzYRKBgAAAVE"]
[Mon Apr 13 21:06:08.708215 2026] [:error] [pid 63310:tid 63355] [client 4.235.78.22:48840] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws68.php"] [unique_id "adzqQHoXpRU5ztmwPjJeUwAAAEs"]
[Mon Apr 13 21:06:09.825386 2026] [:error] [pid 7228:tid 7244] [client 20.215.210.138:28513] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "adzqQQEnn1dQrOSHHNWeDwAAAQ4"]
[Mon Apr 13 21:06:10.036771 2026] [:error] [pid 63310:tid 63356] [client 4.235.78.22:48834] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws68.php"] [unique_id "adzqQnoXpRU5ztmwPjJeVQAAAEw"]
[Mon Apr 13 21:06:11.201263 2026] [:error] [pid 57183:tid 57205] [client 4.235.78.22:55496] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "adzqQzDO3t8R5NaxzYRKDAAAAVQ"]
[Mon Apr 13 21:06:11.809417 2026] [:error] [pid 63309:tid 63315] [client 20.215.210.138:47589] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "adzqQ0pIKZ10weXpf0UtLQAAAAI"]
[Mon Apr 13 21:06:12.212853 2026] [:error] [pid 63309:tid 63325] [client 4.235.78.22:21668] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "adzqREpIKZ10weXpf0UtLwAAAAw"]
[Mon Apr 13 21:06:13.136861 2026] [:error] [pid 63309:tid 63337] [client 4.235.78.22:48876] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "adzqRUpIKZ10weXpf0UtMQAAABg"]
[Mon Apr 13 21:06:14.203894 2026] [:error] [pid 63310:tid 63352] [client 4.235.78.22:58676] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "adzqRnoXpRU5ztmwPjJeYgAAAEg"]
[Mon Apr 13 21:06:15.146044 2026] [:error] [pid 63309:tid 63326] [client 4.235.78.22:32927] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/njxjtooj.php"] [unique_id "adzqR0pIKZ10weXpf0UtOwAAAA0"]
[Mon Apr 13 21:06:15.906550 2026] [:error] [pid 63406:tid 63435] [client 4.235.78.22:58658] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/njxjtooj.php"] [unique_id "adzqR7HZEIkQ0Zmgp5q62gAAANg"]
[Mon Apr 13 21:06:16.617385 2026] [:error] [pid 63406:tid 63419] [client 4.235.78.22:13230] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/njxjtooj.php"] [unique_id "adzqSLHZEIkQ0Zmgp5q64QAAAMg"]
[Mon Apr 13 21:06:17.069013 2026] [:error] [pid 63406:tid 63432] [client 20.215.210.138:42817] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "adzqSbHZEIkQ0Zmgp5q65QAAANU"]
[Mon Apr 13 21:06:17.606083 2026] [:error] [pid 63406:tid 63411] [client 4.235.78.22:12393] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/njxjtooj.php"] [unique_id "adzqSbHZEIkQ0Zmgp5q66wAAAMA"]
[Mon Apr 13 21:06:18.756077 2026] [:error] [pid 63310:tid 63368] [client 4.235.78.22:55532] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "adzqSnoXpRU5ztmwPjJeZgAAAFg"]
[Mon Apr 13 21:06:19.679372 2026] [:error] [pid 63311:tid 63394] [client 4.235.78.22:25634] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "adzqS6HjrGN1MqBCVFkHxQAAAJc"]
[Mon Apr 13 21:06:20.943566 2026] [:error] [pid 9314:tid 9322] [client 4.235.78.22:13638] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "adzqTG_r4W8fX2GWyGQjcgAAAYY"]
[Mon Apr 13 21:06:21.651381 2026] [:error] [pid 63406:tid 63426] [client 20.215.210.138:6124] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "adzqTbHZEIkQ0Zmgp5q6-QAAAM8"]
[Mon Apr 13 21:06:22.892165 2026] [:error] [pid 7228:tid 7246] [client 4.235.78.22:58664] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "adzqTgEnn1dQrOSHHNWeHgAAARA"]
[Mon Apr 13 21:06:24.094018 2026] [:error] [pid 63406:tid 63411] [client 4.235.78.22:48858] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws61.php"] [unique_id "adzqULHZEIkQ0Zmgp5q7AwAAAMA"]
[Mon Apr 13 21:06:25.101184 2026] [:error] [pid 63309:tid 63335] [client 20.215.210.138:29463] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/s.php"] [unique_id "adzqUUpIKZ10weXpf0UtSAAAABY"]
[Mon Apr 13 21:06:25.191118 2026] [:error] [pid 63406:tid 63417] [client 4.235.78.22:33011] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws61.php"] [unique_id "adzqUbHZEIkQ0Zmgp5q7DQAAAMY"]
[Mon Apr 13 21:06:27.862571 2026] [:error] [pid 63309:tid 63336] [client 4.235.78.22:12372] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws61.php"] [unique_id "adzqU0pIKZ10weXpf0UtSgAAABc"]
[Mon Apr 13 21:06:29.412024 2026] [:error] [pid 63311:tid 63374] [client 4.235.78.22:32934] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws61.php"] [unique_id "adzqVaHjrGN1MqBCVFkH1gAAAIM"]
[Mon Apr 13 21:06:30.836405 2026] [:error] [pid 63406:tid 63412] [client 4.235.78.22:53826] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/iyy.php"] [unique_id "adzqVrHZEIkQ0Zmgp5q7JAAAAME"]
[Mon Apr 13 21:06:31.020650 2026] [:error] [pid 57183:tid 57198] [client 20.215.210.138:42820] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/s.php"] [unique_id "adzqVzDO3t8R5NaxzYRKEwAAAU0"]
[Mon Apr 13 21:06:32.089691 2026] [:error] [pid 57183:tid 57201] [client 4.235.78.22:13654] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/iyy.php"] [unique_id "adzqWDDO3t8R5NaxzYRKGQAAAVA"]
[Mon Apr 13 21:06:33.514161 2026] [:error] [pid 63406:tid 63415] [client 4.235.78.22:61039] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/iyy.php"] [unique_id "adzqWbHZEIkQ0Zmgp5q7NgAAAMQ"]
[Mon Apr 13 21:06:34.668131 2026] [:error] [pid 9314:tid 9316] [client 20.215.210.138:41405] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/s.php"] [unique_id "adzqWm_r4W8fX2GWyGQjkAAAAYA"]
[Mon Apr 13 21:06:35.144284 2026] [:error] [pid 63311:tid 63372] [client 4.235.78.22:55531] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/iyy.php"] [unique_id "adzqW6HjrGN1MqBCVFkH2wAAAIE"]
[Mon Apr 13 21:06:36.866294 2026] [:error] [pid 9314:tid 9326] [client 4.235.78.22:55503] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/900.php"] [unique_id "adzqXG_r4W8fX2GWyGQjkwAAAYo"]
[Mon Apr 13 21:06:38.880453 2026] [:error] [pid 7228:tid 7246] [client 4.235.78.22:54536] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/900.php"] [unique_id "adzqXgEnn1dQrOSHHNWeOwAAARA"]
[Mon Apr 13 21:06:40.026586 2026] [:error] [pid 9314:tid 9329] [client 4.235.78.22:32966] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/900.php"] [unique_id "adzqYG_r4W8fX2GWyGQjmQAAAY0"]
[Mon Apr 13 21:06:41.805873 2026] [:error] [pid 9314:tid 9339] [client 4.235.78.22:20404] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/900.php"] [unique_id "adzqYW_r4W8fX2GWyGQjowAAAZc"]
[Mon Apr 13 21:06:43.416622 2026] [:error] [pid 7228:tid 7239] [client 4.235.78.22:56889] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/blsvgeyaza.php"] [unique_id "adzqYwEnn1dQrOSHHNWeTQAAAQk"]
[Mon Apr 13 21:06:44.844028 2026] [:error] [pid 7228:tid 7234] [client 4.235.78.22:61005] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/blsvgeyaza.php"] [unique_id "adzqZAEnn1dQrOSHHNWeVgAAAQQ"]
[Mon Apr 13 21:06:47.834255 2026] [:error] [pid 9314:tid 9328] [client 4.235.78.22:51010] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/blsvgeyaza.php"] [unique_id "adzqZ2_r4W8fX2GWyGQjsAAAAYw"]
[Mon Apr 13 21:06:49.643037 2026] [:error] [pid 57183:tid 57203] [client 4.235.78.22:15464] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/blsvgeyaza.php"] [unique_id "adzqaTDO3t8R5NaxzYRKNQAAAVI"]
[Mon Apr 13 21:06:50.314558 2026] [:error] [pid 63310:tid 63360] [client 4.235.78.22:52635] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gqhyti.php"] [unique_id "adzqanoXpRU5ztmwPjJefAAAAFA"]
[Mon Apr 13 21:06:51.060311 2026] [:error] [pid 63406:tid 63418] [client 4.235.78.22:34210] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gqhyti.php"] [unique_id "adzqa7HZEIkQ0Zmgp5q7cAAAAMc"]
[Mon Apr 13 21:06:51.659269 2026] [:error] [pid 9314:tid 9332] [client 4.235.78.22:22949] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gqhyti.php"] [unique_id "adzqa2_r4W8fX2GWyGQjuwAAAZA"]
[Mon Apr 13 21:06:53.085374 2026] [:error] [pid 57183:tid 57209] [client 4.235.78.22:53295] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gqhyti.php"] [unique_id "adzqbTDO3t8R5NaxzYRKQQAAAVg"]
[Mon Apr 13 21:06:54.385748 2026] [:error] [pid 9314:tid 9336] [client 4.235.78.22:19731] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/autoxxi.php"] [unique_id "adzqbm_r4W8fX2GWyGQjygAAAZQ"]
[Mon Apr 13 21:06:56.344050 2026] [:error] [pid 57183:tid 57206] [client 4.235.78.22:34193] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/autoxxi.php"] [unique_id "adzqcDDO3t8R5NaxzYRKUQAAAVU"]
[Mon Apr 13 21:06:58.445322 2026] [:error] [pid 57183:tid 57194] [client 4.235.78.22:53226] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/autoxxi.php"] [unique_id "adzqcjDO3t8R5NaxzYRKVgAAAUk"]
[Mon Apr 13 21:07:23.100505 2026] [:error] [pid 57183:tid 57200] [client 20.215.210.138:49996] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "adzqizDO3t8R5NaxzYRKpAAAAU8"]
[Mon Apr 13 21:07:24.817626 2026] [:error] [pid 63406:tid 63420] [client 4.235.78.22:28654] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bypltspd.php"] [unique_id "adzqjLHZEIkQ0Zmgp5q8CAAAAMk"]
[Mon Apr 13 21:07:25.766800 2026] [:error] [pid 7228:tid 7245] [client 4.235.78.22:28667] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bypltspd.php"] [unique_id "adzqjQEnn1dQrOSHHNWevQAAAQ8"]
[Mon Apr 13 21:07:28.030630 2026] [:error] [pid 63406:tid 63428] [client 20.215.210.138:50006] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "adzqkLHZEIkQ0Zmgp5q8DwAAANE"]
[Mon Apr 13 21:07:30.394535 2026] [:error] [pid 63406:tid 63415] [client 4.235.78.22:5437] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bypltspd.php"] [unique_id "adzqkrHZEIkQ0Zmgp5q8IQAAAMQ"]
[Mon Apr 13 21:07:33.244536 2026] [:error] [pid 9314:tid 9337] [client 20.215.210.138:51441] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "adzqlW_r4W8fX2GWyGQkFAAAAZU"]
[Mon Apr 13 21:07:36.755153 2026] [:error] [pid 9314:tid 9324] [client 20.215.210.138:38461] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "adzqmG_r4W8fX2GWyGQkHAAAAYg"]
[Mon Apr 13 21:07:38.379523 2026] [:error] [pid 63309:tid 63321] [client 20.215.210.138:58532] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/ws49.php"] [unique_id "adzqmkpIKZ10weXpf0UtdwAAAAg"]
[Mon Apr 13 21:07:38.718204 2026] [:error] [pid 63309:tid 63323] [client 4.235.78.22:33584] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bypltspd.php"] [unique_id "adzqmkpIKZ10weXpf0UteAAAAAo"]
[Mon Apr 13 21:07:40.557736 2026] [:error] [pid 7228:tid 7234] [client 20.215.210.138:44517] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/ws49.php"] [unique_id "adzqnAEnn1dQrOSHHNWe5QAAAQQ"]
[Mon Apr 13 21:07:42.492793 2026] [:error] [pid 57183:tid 57190] [client 4.235.78.22:34223] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "adzqnjDO3t8R5NaxzYRK0AAAAUU"]
[Mon Apr 13 21:07:43.411622 2026] [:error] [pid 9314:tid 9322] [client 4.235.78.22:44440] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "adzqn2_r4W8fX2GWyGQkJgAAAYY"]
[Mon Apr 13 21:07:44.036201 2026] [:error] [pid 63406:tid 63422] [client 4.235.78.22:15441] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "adzqoLHZEIkQ0Zmgp5q8cAAAAMs"]
[Mon Apr 13 21:07:45.305324 2026] [:error] [pid 9314:tid 9338] [client 4.235.78.22:56851] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "adzqoW_r4W8fX2GWyGQkKwAAAZY"]
[Mon Apr 13 21:07:46.085720 2026] [:error] [pid 63406:tid 63429] [client 4.235.78.22:5741] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "adzqorHZEIkQ0Zmgp5q8egAAANI"]
[Mon Apr 13 21:07:47.099891 2026] [:error] [pid 57183:tid 57186] [client 4.235.78.22:12404] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "adzqozDO3t8R5NaxzYRK4AAAAUE"]
[Mon Apr 13 21:07:48.134703 2026] [:error] [pid 57183:tid 57206] [client 20.215.210.138:51426] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/ws49.php"] [unique_id "adzqpDDO3t8R5NaxzYRK4wAAAVU"]
[Mon Apr 13 21:07:48.478648 2026] [:error] [pid 7228:tid 7240] [client 4.235.78.22:32333] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "adzqpAEnn1dQrOSHHNWe8wAAAQo"]
[Mon Apr 13 21:07:49.333555 2026] [:error] [pid 9314:tid 9333] [client 4.235.78.22:58634] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "adzqpW_r4W8fX2GWyGQkPgAAAZE"]
[Mon Apr 13 21:07:50.127337 2026] [:error] [pid 57183:tid 57192] [client 4.235.78.22:53842] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "adzqpjDO3t8R5NaxzYRK7wAAAUc"]
[Mon Apr 13 21:07:50.437763 2026] [:error] [pid 7228:tid 7236] [client 20.215.210.138:44514] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/ws49.php"] [unique_id "adzqpgEnn1dQrOSHHNWe-wAAAQY"]
[Mon Apr 13 21:07:51.132985 2026] [:error] [pid 57183:tid 57200] [client 4.235.78.22:16686] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "adzqpzDO3t8R5NaxzYRK-AAAAU8"]
[Mon Apr 13 21:07:51.863708 2026] [:error] [pid 63309:tid 63337] [client 20.215.210.138:30106] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "adzqp0pIKZ10weXpf0UthgAAABg"]
[Mon Apr 13 21:07:52.384048 2026] [:error] [pid 7228:tid 7249] [client 4.235.78.22:32377] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "adzqqAEnn1dQrOSHHNWfAwAAARM"]
[Mon Apr 13 21:07:53.261934 2026] [:error] [pid 9314:tid 9323] [client 20.215.210.138:30204] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "adzqqW_r4W8fX2GWyGQkRAAAAYc"]
[Mon Apr 13 21:07:54.723330 2026] [:error] [pid 9314:tid 9339] [client 20.215.210.138:27008] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "adzqqm_r4W8fX2GWyGQkRwAAAZc"]
[Mon Apr 13 21:07:55.496409 2026] [:error] [pid 63311:tid 63374] [client 20.215.210.138:52973] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "adzqq6HjrGN1MqBCVFkIOQAAAIM"]
[Mon Apr 13 21:07:56.998289 2026] [:error] [pid 57183:tid 57195] [client 20.215.210.138:52962] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sa.php7"] [unique_id "adzqrDDO3t8R5NaxzYRLBgAAAUo"]
[Mon Apr 13 21:07:58.116073 2026] [:error] [pid 9314:tid 9340] [client 20.215.210.138:41469] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sa.php7"] [unique_id "adzqrm_r4W8fX2GWyGQkTwAAAZg"]
[Mon Apr 13 21:07:58.838566 2026] [:error] [pid 63406:tid 63423] [client 20.215.210.138:21074] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sa.php7"] [unique_id "adzqrrHZEIkQ0Zmgp5q8rgAAAMw"]
[Mon Apr 13 21:08:00.342559 2026] [:error] [pid 63406:tid 63430] [client 20.215.210.138:52980] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sa.php7"] [unique_id "adzqsLHZEIkQ0Zmgp5q8tgAAANM"]
[Mon Apr 13 21:08:01.604300 2026] [:error] [pid 63311:tid 63391] [client 20.215.210.138:46812] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "adzqsaHjrGN1MqBCVFkISQAAAJQ"]
[Mon Apr 13 21:08:03.963287 2026] [:error] [pid 63311:tid 63383] [client 20.215.210.138:17010] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "adzqs6HjrGN1MqBCVFkIUAAAAIw"]
[Mon Apr 13 21:08:06.312103 2026] [:error] [pid 7228:tid 7245] [client 20.215.210.138:46795] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "adzqtgEnn1dQrOSHHNWfFQAAAQ8"]
[Mon Apr 13 21:08:07.820124 2026] [:error] [pid 7228:tid 7234] [client 20.215.210.138:21104] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "adzqtwEnn1dQrOSHHNWfFgAAAQQ"]
[Mon Apr 13 21:08:10.646888 2026] [:error] [pid 63311:tid 63389] [client 20.215.210.138:37377] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "adzquqHjrGN1MqBCVFkIZAAAAJI"]
[Mon Apr 13 21:08:16.933002 2026] [:error] [pid 7228:tid 7249] [client 20.215.210.138:46798] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "adzqwAEnn1dQrOSHHNWfKQAAARM"]
[Mon Apr 13 21:08:21.620586 2026] [:error] [pid 7228:tid 7248] [client 20.215.210.138:46838] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "adzqxQEnn1dQrOSHHNWfLwAAARI"]
[Mon Apr 13 21:08:23.729344 2026] [:error] [pid 57183:tid 57196] [client 4.235.78.22:29306] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "adzqxzDO3t8R5NaxzYRLggAAAUs"]
[Mon Apr 13 21:08:35.890965 2026] [:error] [pid 63310:tid 63364] [client 20.215.210.138:52964] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "adzq03oXpRU5ztmwPjJfWQAAAFQ"]
[Mon Apr 13 21:08:41.957089 2026] [:error] [pid 63309:tid 63325] [client 20.215.210.138:46794] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "adzq2UpIKZ10weXpf0UtqQAAAAw"]
[Mon Apr 13 21:08:44.355514 2026] [:error] [pid 57183:tid 57198] [client 20.215.210.138:40490] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "adzq3DDO3t8R5NaxzYRLtgAAAU0"]
[Mon Apr 13 21:08:47.247939 2026] [:error] [pid 63406:tid 63413] [client 20.215.210.138:54407] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "adzq37HZEIkQ0Zmgp5q9KwAAAMI"]
[Mon Apr 13 21:08:49.053132 2026] [:error] [pid 9314:tid 9317] [client 20.215.210.138:13112] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adzq4W_r4W8fX2GWyGQkyAAAAYE"]
[Mon Apr 13 21:08:54.754648 2026] [:error] [pid 7228:tid 7239] [client 20.215.210.138:52317] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adzq5gEnn1dQrOSHHNWfXwAAAQk"]
[Mon Apr 13 21:08:57.573177 2026] [:error] [pid 63406:tid 63426] [client 20.215.210.138:27095] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adzq6bHZEIkQ0Zmgp5q9aAAAAM8"]
[Mon Apr 13 21:08:59.138908 2026] [:error] [pid 7228:tid 7230] [client 4.235.78.22:34913] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "adzq6wEnn1dQrOSHHNWfbQAAAQA"]
[Mon Apr 13 21:08:59.652617 2026] [:error] [pid 63406:tid 63414] [client 20.215.210.138:60127] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adzq67HZEIkQ0Zmgp5q9eAAAAMM"]
[Mon Apr 13 21:09:01.607645 2026] [:error] [pid 63310:tid 63352] [client 20.215.210.138:13177] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "adzq7XoXpRU5ztmwPjJffwAAAEg"]
[Mon Apr 13 21:09:03.402518 2026] [:error] [pid 63406:tid 63418] [client 20.215.210.138:13173] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "adzq77HZEIkQ0Zmgp5q9iQAAAMc"]
[Mon Apr 13 21:09:03.759412 2026] [:error] [pid 63310:tid 63345] [client 4.235.78.22:24331] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "adzq73oXpRU5ztmwPjJfgQAAAEE"]
[Mon Apr 13 21:09:06.148797 2026] [:error] [pid 63310:tid 63360] [client 20.215.210.138:13061] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "adzq8noXpRU5ztmwPjJfggAAAFA"]
[Mon Apr 13 21:09:10.411377 2026] [:error] [pid 63406:tid 63422] [client 4.235.78.22:42936] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "adzq9rHZEIkQ0Zmgp5q9lQAAAMs"]
[Mon Apr 13 21:09:12.872748 2026] [:error] [pid 7228:tid 7231] [client 20.215.210.138:60100] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "adzq-AEnn1dQrOSHHNWfgQAAAQE"]
[Mon Apr 13 21:09:16.245672 2026] [:error] [pid 63406:tid 63432] [client 20.215.210.138:27072] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "adzq_LHZEIkQ0Zmgp5q9pQAAANU"]
[Mon Apr 13 21:09:24.279904 2026] [:error] [pid 63311:tid 63371] [client 20.215.210.138:13122] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "adzrBKHjrGN1MqBCVFkJAQAAAIA"]
[Mon Apr 13 21:09:28.102207 2026] [:error] [pid 63406:tid 63414] [client 4.235.78.22:57930] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "adzrCLHZEIkQ0Zmgp5q97gAAAMM"]
[Mon Apr 13 21:09:34.915179 2026] [:error] [pid 63406:tid 63416] [client 4.235.78.22:36974] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "adzrDrHZEIkQ0Zmgp5q-CQAAAMU"]
[Mon Apr 13 21:09:41.837128 2026] [:error] [pid 9314:tid 9337] [client 4.235.78.22:31852] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "adzrFW_r4W8fX2GWyGQlPwAAAZU"]
[Mon Apr 13 21:10:12.733644 2026] [:error] [pid 63309:tid 63321] [client 4.235.78.22:29701] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "adzrNEpIKZ10weXpf0UtzQAAAAg"]
[Mon Apr 13 21:10:14.719850 2026] [:error] [pid 9314:tid 9316] [client 4.235.78.22:21110] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "adzrNm_r4W8fX2GWyGQljAAAAYA"]
[Mon Apr 13 21:10:16.766127 2026] [:error] [pid 63406:tid 63429] [client 4.235.78.22:29740] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "adzrOLHZEIkQ0Zmgp5q-oAAAANI"]
[Mon Apr 13 21:10:18.830273 2026] [:error] [pid 57183:tid 57187] [client 4.235.78.22:31756] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nw.php"] [unique_id "adzrOjDO3t8R5NaxzYRNBQAAAUI"]
[Mon Apr 13 21:10:22.013899 2026] [:error] [pid 63406:tid 63424] [client 20.215.210.138:45148] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "adzrPrHZEIkQ0Zmgp5q-uAAAAM0"]
[Mon Apr 13 21:10:22.101361 2026] [:error] [pid 9314:tid 9326] [client 4.235.78.22:21069] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/t.php"] [unique_id "adzrPm_r4W8fX2GWyGQlkwAAAYo"]
[Mon Apr 13 21:10:23.430490 2026] [:error] [pid 63406:tid 63430] [client 20.215.210.138:60097] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "adzrP7HZEIkQ0Zmgp5q-xwAAANM"]
[Mon Apr 13 21:10:23.979391 2026] [:error] [pid 63406:tid 63426] [client 4.235.78.22:61117] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/t.php"] [unique_id "adzrP7HZEIkQ0Zmgp5q-zAAAAM8"]
[Mon Apr 13 21:10:26.385783 2026] [:error] [pid 57183:tid 57186] [client 4.235.78.22:6020] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/t.php"] [unique_id "adzrQjDO3t8R5NaxzYRNJQAAAUE"]
[Mon Apr 13 21:10:26.914683 2026] [:error] [pid 9314:tid 9317] [client 20.215.210.138:60135] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "adzrQm_r4W8fX2GWyGQlmgAAAYE"]
[Mon Apr 13 21:10:29.187146 2026] [:error] [pid 63406:tid 63427] [client 4.235.78.22:5673] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/t.php"] [unique_id "adzrRbHZEIkQ0Zmgp5q-3gAAANA"]
[Mon Apr 13 21:10:30.044471 2026] [:error] [pid 63406:tid 63426] [client 20.215.210.138:27135] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "adzrRrHZEIkQ0Zmgp5q-4QAAAM8"]
[Mon Apr 13 21:10:30.945944 2026] [:error] [pid 63310:tid 63357] [client 20.215.210.138:45151] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tfm.php"] [unique_id "adzrRnoXpRU5ztmwPjJf1QAAAE0"]
[Mon Apr 13 21:10:31.419572 2026] [:error] [pid 63406:tid 63433] [client 4.235.78.22:62211] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "adzrR7HZEIkQ0Zmgp5q-5QAAANY"]
[Mon Apr 13 21:10:33.383911 2026] [:error] [pid 57183:tid 57191] [client 20.215.210.138:38500] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tfm.php"] [unique_id "adzrSTDO3t8R5NaxzYRNSgAAAUY"]
[Mon Apr 13 21:10:33.574805 2026] [:error] [pid 63311:tid 63379] [client 4.235.78.22:29698] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "adzrSaHjrGN1MqBCVFkJSQAAAIg"]
[Mon Apr 13 21:10:36.249478 2026] [:error] [pid 57183:tid 57199] [client 20.215.210.138:13142] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tfm.php"] [unique_id "adzrTDDO3t8R5NaxzYRNXAAAAU4"]
[Mon Apr 13 21:10:37.877519 2026] [:error] [pid 9314:tid 9331] [client 4.235.78.22:30588] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "adzrTW_r4W8fX2GWyGQlsAAAAY8"]
[Mon Apr 13 21:10:42.241442 2026] [:error] [pid 57183:tid 57196] [client 20.215.210.138:52867] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tfm.php"] [unique_id "adzrUjDO3t8R5NaxzYRNaQAAAUs"]
[Mon Apr 13 21:10:43.257101 2026] [:error] [pid 9314:tid 9334] [client 4.235.78.22:5936] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "adzrU2_r4W8fX2GWyGQlvwAAAZI"]
[Mon Apr 13 21:10:45.862028 2026] [:error] [pid 63310:tid 63350] [client 20.215.210.138:52346] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8573.php"] [unique_id "adzrVXoXpRU5ztmwPjJf4QAAAEY"]
[Mon Apr 13 21:10:46.428977 2026] [:error] [pid 63310:tid 63366] [client 4.235.78.22:49876] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/ws49.php"] [unique_id "adzrVnoXpRU5ztmwPjJf6AAAAFY"]
[Mon Apr 13 21:10:47.751128 2026] [:error] [pid 63406:tid 63425] [client 4.235.78.22:5905] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/ws49.php"] [unique_id "adzrV7HZEIkQ0Zmgp5q_GwAAAM4"]
[Mon Apr 13 21:10:49.198088 2026] [:error] [pid 63406:tid 63426] [client 20.215.210.138:43551] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8573.php"] [unique_id "adzrWbHZEIkQ0Zmgp5q_KAAAAM8"]
[Mon Apr 13 21:10:49.628062 2026] [:error] [pid 63309:tid 63316] [client 4.235.78.22:5929] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/ws49.php"] [unique_id "adzrWUpIKZ10weXpf0UuAQAAAAM"]
[Mon Apr 13 21:10:50.507153 2026] [:error] [pid 63406:tid 63435] [client 20.215.210.138:60158] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8573.php"] [unique_id "adzrWrHZEIkQ0Zmgp5q_MgAAANg"]
[Mon Apr 13 21:10:50.913039 2026] [:error] [pid 63309:tid 63334] [client 4.235.78.22:22374] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/ws49.php"] [unique_id "adzrWkpIKZ10weXpf0UuBgAAABU"]
[Mon Apr 13 21:10:53.340698 2026] [:error] [pid 63310:tid 63366] [client 4.235.78.22:49878] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "adzrXXoXpRU5ztmwPjJf9gAAAFY"]
[Mon Apr 13 21:10:56.426719 2026] [:error] [pid 63311:tid 63388] [client 4.235.78.22:55976] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "adzrYKHjrGN1MqBCVFkJgAAAAJE"]
[Mon Apr 13 21:10:59.264451 2026] [:error] [pid 63311:tid 63386] [client 4.235.78.22:5370] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "adzrY6HjrGN1MqBCVFkJhwAAAI8"]
[Mon Apr 13 21:11:02.198668 2026] [:error] [pid 63311:tid 63394] [client 4.235.78.22:62257] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "adzrZqHjrGN1MqBCVFkJjAAAAJc"]
[Mon Apr 13 21:11:04.126942 2026] [:error] [pid 9314:tid 9318] [client 4.235.78.22:16764] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sa.php7"] [unique_id "adzraG_r4W8fX2GWyGQl3QAAAYI"]
[Mon Apr 13 21:11:05.928778 2026] [:error] [pid 63406:tid 63429] [client 4.235.78.22:5320] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sa.php7"] [unique_id "adzrabHZEIkQ0Zmgp5q_eQAAANI"]
[Mon Apr 13 21:11:08.926623 2026] [:error] [pid 9314:tid 9330] [client 4.235.78.22:29753] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sa.php7"] [unique_id "adzrbG_r4W8fX2GWyGQl6AAAAY4"]
[Mon Apr 13 21:11:09.193734 2026] [:error] [pid 63406:tid 63416] [client 20.215.210.138:5373] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "adzrbbHZEIkQ0Zmgp5q_gwAAAMU"]
[Mon Apr 13 21:11:11.034013 2026] [:error] [pid 63310:tid 63364] [client 4.235.78.22:55992] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sa.php7"] [unique_id "adzrb3oXpRU5ztmwPjJgBQAAAFQ"]
[Mon Apr 13 21:11:17.383092 2026] [:error] [pid 63309:tid 63314] [client 20.215.210.138:65370] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "adzrdUpIKZ10weXpf0UuFQAAAAE"]
[Mon Apr 13 21:11:26.965023 2026] [:error] [pid 63406:tid 63426] [client 4.235.78.22:55975] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "adzrfrHZEIkQ0Zmgp5q_wAAAAM8"]
[Mon Apr 13 21:11:29.195108 2026] [:error] [pid 63309:tid 63324] [client 4.235.78.22:5453] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "adzrgUpIKZ10weXpf0UuIQAAAAs"]
[Mon Apr 13 21:11:33.272821 2026] [:error] [pid 57183:tid 57190] [client 4.235.78.22:5335] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "adzrhTDO3t8R5NaxzYROLAAAAUU"]
[Mon Apr 13 21:11:36.383140 2026] [:error] [pid 63406:tid 63431] [client 4.235.78.22:55997] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "adzriLHZEIkQ0Zmgp5q_9AAAANQ"]
[Mon Apr 13 21:11:37.763672 2026] [:error] [pid 63406:tid 63429] [client 4.235.78.22:33600] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "adzribHZEIkQ0Zmgp5rAAgAAANI"]
[Mon Apr 13 21:11:39.238637 2026] [:error] [pid 7228:tid 7246] [client 4.235.78.22:25069] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "adzriwEnn1dQrOSHHNWgUgAAARA"]
[Mon Apr 13 21:11:41.861472 2026] [:error] [pid 7228:tid 7254] [client 4.235.78.22:28546] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "adzrjQEnn1dQrOSHHNWgWAAAARg"]
[Mon Apr 13 21:11:43.888419 2026] [:error] [pid 63406:tid 63421] [client 20.215.210.138:32552] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "adzrj7HZEIkQ0Zmgp5rANwAAAMo"]
[Mon Apr 13 21:11:45.170398 2026] [:error] [pid 63406:tid 63433] [client 4.235.78.22:32289] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "adzrkbHZEIkQ0Zmgp5rAPwAAANY"]
[Mon Apr 13 21:11:51.442335 2026] [:error] [pid 7228:tid 7234] [client 4.235.78.22:19835] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "adzrlwEnn1dQrOSHHNWgZwAAAQQ"]
[Mon Apr 13 21:11:57.409754 2026] [:error] [pid 9314:tid 9331] [client 20.215.210.138:46029] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "adzrnW_r4W8fX2GWyGQmpgAAAY8"]
[Mon Apr 13 21:11:59.843390 2026] [:error] [pid 7228:tid 7235] [client 20.215.210.138:43605] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "adzrnwEnn1dQrOSHHNWgcwAAAQU"]
[Mon Apr 13 21:12:00.108879 2026] [:error] [pid 7228:tid 7242] [client 4.235.78.22:14818] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "adzroAEnn1dQrOSHHNWgdAAAAQw"]
[Mon Apr 13 21:12:00.961172 2026] [:error] [pid 57183:tid 57185] [client 4.235.78.22:19251] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adzroDDO3t8R5NaxzYROcwAAAUA"]
[Mon Apr 13 21:12:02.586220 2026] [:error] [pid 63311:tid 63381] [client 4.235.78.22:22919] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adzroqHjrGN1MqBCVFkJ4QAAAIo"]
[Mon Apr 13 21:12:04.640137 2026] [:error] [pid 63406:tid 63416] [client 4.235.78.22:51063] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adzrpLHZEIkQ0Zmgp5rAuAAAAMU"]
[Mon Apr 13 21:12:07.306015 2026] [:error] [pid 63311:tid 63381] [client 4.235.78.22:53250] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "adzrp6HjrGN1MqBCVFkJ6gAAAIo"]
[Mon Apr 13 21:12:08.915052 2026] [:error] [pid 63309:tid 63314] [client 20.215.210.138:61899] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/file.php"] [unique_id "adzrqEpIKZ10weXpf0UuZgAAAAE"]
[Mon Apr 13 21:12:09.630476 2026] [:error] [pid 63311:tid 63385] [client 4.235.78.22:51049] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "adzrqaHjrGN1MqBCVFkJ7wAAAI4"]
[Mon Apr 13 21:12:10.259983 2026] [:error] [pid 63309:tid 63332] [client 4.235.78.22:29762] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "adzrqkpIKZ10weXpf0UuagAAABM"]
[Mon Apr 13 21:12:10.674421 2026] [:error] [pid 7228:tid 7237] [client 20.215.210.138:58599] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/file.php"] [unique_id "adzrqgEnn1dQrOSHHNWgjQAAAQc"]
[Mon Apr 13 21:12:11.613035 2026] [:error] [pid 9314:tid 9326] [client 4.235.78.22:5604] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "adzrq2_r4W8fX2GWyGQmyQAAAYo"]
[Mon Apr 13 21:12:13.628459 2026] [:error] [pid 9314:tid 9339] [client 4.235.78.22:13570] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "adzrrW_r4W8fX2GWyGQm0AAAAZc"]
[Mon Apr 13 21:12:15.331397 2026] [:error] [pid 63310:tid 63365] [client 4.235.78.22:17954] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "adzrr3oXpRU5ztmwPjJgNwAAAFU"]
[Mon Apr 13 21:12:17.077222 2026] [:error] [pid 9314:tid 9325] [client 4.235.78.22:55872] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "adzrsW_r4W8fX2GWyGQm2AAAAYk"]
[Mon Apr 13 21:12:18.084434 2026] [:error] [pid 63406:tid 63428] [client 4.235.78.22:28644] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "adzrsrHZEIkQ0Zmgp5rA4QAAANE"]
[Mon Apr 13 21:12:19.026500 2026] [:error] [pid 63311:tid 63391] [client 20.215.210.138:33425] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "adzrs6HjrGN1MqBCVFkKBAAAAJQ"]
[Mon Apr 13 21:12:19.539053 2026] [:error] [pid 9314:tid 9333] [client 4.235.78.22:15376] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "adzrs2_r4W8fX2GWyGQm3QAAAZE"]
[Mon Apr 13 21:12:21.513989 2026] [:error] [pid 63406:tid 63427] [client 4.235.78.22:51061] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "adzrtbHZEIkQ0Zmgp5rA7wAAANA"]
[Mon Apr 13 21:12:23.540003 2026] [:error] [pid 63311:tid 63394] [client 20.215.210.138:44432] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "adzrt6HjrGN1MqBCVFkKCwAAAJc"]
[Mon Apr 13 21:12:23.904218 2026] [:error] [pid 9314:tid 9336] [client 4.235.78.22:17926] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "adzrt2_r4W8fX2GWyGQm6gAAAZQ"]
[Mon Apr 13 21:12:32.590865 2026] [:error] [pid 63406:tid 63435] [client 20.215.210.138:61825] [client 20.215.210.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "adzrwLHZEIkQ0Zmgp5rBHAAAANg"]
[Mon Apr 13 21:12:36.737783 2026] [:error] [pid 63311:tid 63395] [client 4.235.78.22:15390] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "adzrxKHjrGN1MqBCVFkKJQAAAJg"]
[Mon Apr 13 21:12:37.624202 2026] [:error] [pid 9314:tid 9335] [client 4.235.78.22:25663] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "adzrxW_r4W8fX2GWyGQnEAAAAZM"]
[Mon Apr 13 21:12:38.862141 2026] [:error] [pid 63406:tid 63432] [client 4.235.78.22:32962] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "adzrxrHZEIkQ0Zmgp5rBRQAAANU"]
[Mon Apr 13 21:12:40.623647 2026] [:error] [pid 7228:tid 7242] [client 4.235.78.22:45820] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "adzryAEnn1dQrOSHHNWgtwAAAQw"]
[Mon Apr 13 21:12:44.054900 2026] [:error] [pid 63406:tid 63417] [client 4.235.78.22:32932] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "adzrzLHZEIkQ0Zmgp5rBbQAAAMY"]
[Mon Apr 13 21:12:49.532185 2026] [:error] [pid 63406:tid 63434] [client 4.235.78.22:45773] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "adzr0bHZEIkQ0Zmgp5rBnAAAANc"]
[Mon Apr 13 21:12:52.259853 2026] [:error] [pid 7228:tid 7242] [client 4.235.78.22:20377] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "adzr1AEnn1dQrOSHHNWg2AAAAQw"]
[Mon Apr 13 21:12:53.707623 2026] [:error] [pid 63406:tid 63419] [client 4.235.78.22:13216] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "adzr1bHZEIkQ0Zmgp5rBtwAAAMg"]
[Mon Apr 13 21:12:54.595026 2026] [:error] [pid 63406:tid 63423] [client 4.235.78.22:56347] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tfm.php"] [unique_id "adzr1rHZEIkQ0Zmgp5rBvQAAAMw"]
[Mon Apr 13 21:12:56.128322 2026] [:error] [pid 57183:tid 57199] [client 4.235.78.22:32367] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tfm.php"] [unique_id "adzr2DDO3t8R5NaxzYRPRQAAAU4"]
[Mon Apr 13 21:12:57.100201 2026] [:error] [pid 9314:tid 9332] [client 4.235.78.22:32367] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tfm.php"] [unique_id "adzr2W_r4W8fX2GWyGQnLgAAAZA"]
[Mon Apr 13 21:12:58.216902 2026] [:error] [pid 57183:tid 57185] [client 4.235.78.22:12606] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tfm.php"] [unique_id "adzr2jDO3t8R5NaxzYRPTQAAAUA"]
[Mon Apr 13 21:12:58.964106 2026] [:error] [pid 63311:tid 63384] [client 4.235.78.22:39716] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8573.php"] [unique_id "adzr2qHjrGN1MqBCVFkKQwAAAI0"]
[Mon Apr 13 21:13:00.569393 2026] [:error] [pid 9314:tid 9317] [client 4.235.78.22:51480] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8573.php"] [unique_id "adzr3G_r4W8fX2GWyGQnOQAAAYE"]
[Mon Apr 13 21:13:01.960760 2026] [:error] [pid 9314:tid 9319] [client 4.235.78.22:39731] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8573.php"] [unique_id "adzr3W_r4W8fX2GWyGQnPwAAAYM"]
[Mon Apr 13 21:13:03.793525 2026] [:error] [pid 63310:tid 63355] [client 4.235.78.22:39721] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8573.php"] [unique_id "adzr33oXpRU5ztmwPjJgbwAAAEs"]
[Mon Apr 13 21:13:04.840894 2026] [:error] [pid 63406:tid 63422] [client 4.235.78.22:12554] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "adzr4LHZEIkQ0Zmgp5rB0QAAAMs"]
[Mon Apr 13 21:13:06.646923 2026] [:error] [pid 63310:tid 63368] [client 4.235.78.22:18572] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "adzr4noXpRU5ztmwPjJgeAAAAFg"]
[Mon Apr 13 21:13:08.186172 2026] [:error] [pid 63406:tid 63434] [client 4.235.78.22:12575] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "adzr5LHZEIkQ0Zmgp5rB1QAAANc"]
[Mon Apr 13 21:13:08.983584 2026] [:error] [pid 7228:tid 7242] [client 4.235.78.22:5297] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "adzr5AEnn1dQrOSHHNWg5AAAAQw"]
[Mon Apr 13 21:13:10.639930 2026] [:error] [pid 7228:tid 7249] [client 4.235.78.22:34907] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/term.php"] [unique_id "adzr5gEnn1dQrOSHHNWg7QAAARM"]
[Mon Apr 13 21:13:15.770665 2026] [:error] [pid 63309:tid 63318] [client 4.235.78.22:51963] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/term.php"] [unique_id "adzr60pIKZ10weXpf0UuzgAAAAU"]
[Mon Apr 13 21:13:22.633808 2026] [:error] [pid 9314:tid 9325] [client 4.235.78.22:16661] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/term.php"] [unique_id "adzr8m_r4W8fX2GWyGQnWAAAAYk"]
[Mon Apr 13 21:13:25.879963 2026] [:error] [pid 57183:tid 57197] [client 4.235.78.22:59870] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "adzr9TDO3t8R5NaxzYRPlQAAAUw"]
[Mon Apr 13 21:13:26.770392 2026] [:error] [pid 63309:tid 63320] [client 4.235.78.22:47192] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "adzr9kpIKZ10weXpf0Uu2QAAAAc"]
[Mon Apr 13 21:13:28.498932 2026] [:error] [pid 57183:tid 57204] [client 4.235.78.22:19270] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "adzr-DDO3t8R5NaxzYRPlgAAAVM"]
[Mon Apr 13 21:13:30.811851 2026] [:error] [pid 63406:tid 63425] [client 4.235.78.22:38468] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "adzr-rHZEIkQ0Zmgp5rB7gAAAM4"]
[Mon Apr 13 21:13:33.304435 2026] [:error] [pid 63310:tid 63365] [client 4.235.78.22:30991] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/155.php"] [unique_id "adzr_XoXpRU5ztmwPjJgsQAAAFU"]
[Mon Apr 13 21:13:34.699041 2026] [:error] [pid 9314:tid 9321] [client 4.235.78.22:16700] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/155.php"] [unique_id "adzr_m_r4W8fX2GWyGQnbwAAAYU"]
[Mon Apr 13 21:13:50.524290 2026] [:error] [pid 9314:tid 9322] [client 4.235.78.22:59880] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "adzsDm_r4W8fX2GWyGQnogAAAYY"]
[Mon Apr 13 21:13:51.897226 2026] [:error] [pid 63309:tid 63336] [client 4.235.78.22:52003] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "adzsD0pIKZ10weXpf0Uu6wAAABc"]
[Mon Apr 13 21:13:54.008590 2026] [:error] [pid 63309:tid 63325] [client 4.235.78.22:52023] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "adzsEkpIKZ10weXpf0Uu8wAAAAw"]
[Mon Apr 13 21:13:55.412181 2026] [:error] [pid 63310:tid 63352] [client 4.235.78.22:44490] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "adzsE3oXpRU5ztmwPjJgwQAAAEg"]
[Mon Apr 13 21:13:57.050137 2026] [:error] [pid 7228:tid 7239] [client 4.235.78.22:47158] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws77.php"] [unique_id "adzsFQEnn1dQrOSHHNWhIQAAAQk"]
[Mon Apr 13 21:13:58.818445 2026] [:error] [pid 63406:tid 63424] [client 4.235.78.22:57932] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws77.php"] [unique_id "adzsFrHZEIkQ0Zmgp5rCQQAAAM0"]
[Mon Apr 13 21:14:00.748529 2026] [:error] [pid 57183:tid 57192] [client 4.235.78.22:42930] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws77.php"] [unique_id "adzsGDDO3t8R5NaxzYRPswAAAUc"]
[Mon Apr 13 21:14:04.335114 2026] [:error] [pid 57183:tid 57187] [client 4.235.78.22:50313] [client 4.235.78.22] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws77.php"] [unique_id "adzsHDDO3t8R5NaxzYRPxgAAAUI"]
[Mon Apr 13 21:53:18.327726 2026] [:error] [pid 63309:tid 63328] [client 158.158.40.237:13620] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adz1TkpIKZ10weXpf0U2rgAAAA8"]
[Mon Apr 13 21:53:19.183420 2026] [:error] [pid 63310:tid 63363] [client 158.158.40.237:13582] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adz1T3oXpRU5ztmwPjJqcwAAAFM"]
[Mon Apr 13 21:53:20.203786 2026] [:error] [pid 63311:tid 63392] [client 158.158.40.237:13617] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adz1UKHjrGN1MqBCVFkWhAAAAJU"]
[Mon Apr 13 21:53:20.892480 2026] [:error] [pid 63406:tid 63435] [client 158.158.40.237:13828] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/BhqKs28Cw94.php"] [unique_id "adz1ULHZEIkQ0Zmgp5rhJAAAANg"]
[Mon Apr 13 21:53:21.517691 2026] [:error] [pid 7228:tid 7234] [client 158.158.40.237:13827] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cdn3.php"] [unique_id "adz1UQEnn1dQrOSHHNWuTgAAAQQ"]
[Mon Apr 13 21:53:22.144810 2026] [:error] [pid 7228:tid 7241] [client 158.158.40.237:13590] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cdn3.php"] [unique_id "adz1UgEnn1dQrOSHHNWuUwAAAQs"]
[Mon Apr 13 21:53:22.800337 2026] [:error] [pid 57183:tid 57193] [client 158.158.40.237:13843] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cdn3.php"] [unique_id "adz1UjDO3t8R5NaxzYRlcwAAAUg"]
[Mon Apr 13 21:53:23.379857 2026] [:error] [pid 57183:tid 57191] [client 158.158.40.237:13603] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cdn3.php"] [unique_id "adz1UzDO3t8R5NaxzYRldgAAAUY"]
[Mon Apr 13 21:53:24.061132 2026] [:error] [pid 9314:tid 9323] [client 158.158.40.237:13839] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adz1VG_r4W8fX2GWyGQ6cAAAAYc"]
[Mon Apr 13 21:53:24.846081 2026] [:error] [pid 57183:tid 57194] [client 158.158.40.237:13601] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adz1VDDO3t8R5NaxzYRlfAAAAUk"]
[Mon Apr 13 21:53:25.759155 2026] [:error] [pid 63406:tid 63414] [client 158.158.40.237:13577] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adz1VbHZEIkQ0Zmgp5rhMQAAAMM"]
[Mon Apr 13 21:53:27.252828 2026] [:error] [pid 63406:tid 63421] [client 158.158.40.237:13831] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/3Cr1w6dfjTK.php"] [unique_id "adz1V7HZEIkQ0Zmgp5rhMwAAAMo"]
[Mon Apr 13 21:53:30.081438 2026] [:error] [pid 9314:tid 9337] [client 158.158.40.237:13618] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/beerd.php"] [unique_id "adz1Wm_r4W8fX2GWyGQ6fQAAAZU"]
[Mon Apr 13 21:53:31.914760 2026] [:error] [pid 7228:tid 7254] [client 158.158.40.237:13624] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/beerd.php"] [unique_id "adz1WwEnn1dQrOSHHNWuXgAAARg"]
[Mon Apr 13 21:53:33.264312 2026] [:error] [pid 57183:tid 57200] [client 158.158.40.237:13841] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/beerd.php"] [unique_id "adz1XTDO3t8R5NaxzYRllgAAAU8"]
[Mon Apr 13 21:53:34.798593 2026] [:error] [pid 63309:tid 63327] [client 158.158.40.237:13621] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/beerd.php"] [unique_id "adz1XkpIKZ10weXpf0U2tAAAAA4"]
[Mon Apr 13 21:53:35.933644 2026] [:error] [pid 63406:tid 63432] [client 158.158.40.237:13584] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hhxc.php"] [unique_id "adz1X7HZEIkQ0Zmgp5rhUQAAANU"]
[Mon Apr 13 21:53:36.931418 2026] [:error] [pid 9314:tid 9335] [client 158.158.40.237:13606] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hhxc.php"] [unique_id "adz1YG_r4W8fX2GWyGQ6hQAAAZM"]
[Mon Apr 13 21:53:37.697245 2026] [:error] [pid 63406:tid 63435] [client 158.158.40.237:13851] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hhxc.php"] [unique_id "adz1YbHZEIkQ0Zmgp5rhWwAAANg"]
[Mon Apr 13 21:53:38.951362 2026] [:error] [pid 63406:tid 63424] [client 158.158.40.237:13591] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hhxc.php"] [unique_id "adz1YrHZEIkQ0Zmgp5rhYQAAAM0"]
[Mon Apr 13 21:53:41.525221 2026] [:error] [pid 63406:tid 63421] [client 158.158.40.237:13569] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/161dfd072f.php"] [unique_id "adz1ZbHZEIkQ0Zmgp5rhbwAAAMo"]
[Mon Apr 13 21:53:42.438147 2026] [:error] [pid 63406:tid 63419] [client 158.158.40.237:13626] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/161dfd072f.php"] [unique_id "adz1ZrHZEIkQ0Zmgp5rhdgAAAMg"]
[Mon Apr 13 21:53:44.329707 2026] [:error] [pid 9314:tid 9334] [client 158.158.40.237:13588] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/161dfd072f.php"] [unique_id "adz1aG_r4W8fX2GWyGQ6lQAAAZI"]
[Mon Apr 13 21:53:47.053962 2026] [:error] [pid 9314:tid 9329] [client 158.158.40.237:13824] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/161dfd072f.php"] [unique_id "adz1a2_r4W8fX2GWyGQ6ngAAAY0"]
[Mon Apr 13 21:53:50.004003 2026] [:error] [pid 63311:tid 63386] [client 158.158.40.237:13609] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "adz1bqHjrGN1MqBCVFkWqwAAAI8"]
[Mon Apr 13 21:53:52.722443 2026] [:error] [pid 57183:tid 57186] [client 158.158.40.237:13628] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "adz1cDDO3t8R5NaxzYRlpQAAAUE"]
[Mon Apr 13 21:53:55.795274 2026] [:error] [pid 57183:tid 57202] [client 158.158.40.237:13583] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "adz1czDO3t8R5NaxzYRlrQAAAVE"]
[Mon Apr 13 21:53:57.953925 2026] [:error] [pid 63310:tid 63348] [client 158.158.40.237:13570] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "adz1dXoXpRU5ztmwPjJqrgAAAEQ"]
[Mon Apr 13 21:53:59.088773 2026] [:error] [pid 7228:tid 7251] [client 158.158.40.237:13607] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adz1dwEnn1dQrOSHHNWueQAAARU"]
[Mon Apr 13 21:53:59.788611 2026] [:error] [pid 7228:tid 7234] [client 158.158.40.237:13844] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adz1dwEnn1dQrOSHHNWufQAAAQQ"]
[Mon Apr 13 21:54:01.487080 2026] [:error] [pid 7228:tid 7240] [client 158.158.40.237:13594] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adz1eQEnn1dQrOSHHNWuggAAAQo"]
[Mon Apr 13 21:54:03.847529 2026] [:error] [pid 63406:tid 63418] [client 158.158.40.237:13623] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ylzed0twj8l9drdbchc1oocfCdefault.php"] [unique_id "adz1e7HZEIkQ0Zmgp5rhhgAAAMc"]
[Mon Apr 13 21:54:51.753062 2026] [:error] [pid 63406:tid 63423] [client 158.158.40.237:13602] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xxivicLhot.php"] [unique_id "adz1q7HZEIkQ0Zmgp5rhxwAAAMw"]
[Mon Apr 13 21:54:54.252645 2026] [:error] [pid 7228:tid 7250] [client 158.158.40.237:13840] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xxivicLhot.php"] [unique_id "adz1rgEnn1dQrOSHHNWu3AAAARQ"]
[Mon Apr 13 21:54:57.865580 2026] [:error] [pid 57183:tid 57203] [client 158.158.40.237:13832] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xxivicLhot.php"] [unique_id "adz1sTDO3t8R5NaxzYRmJQAAAVI"]
[Mon Apr 13 21:55:00.145068 2026] [:error] [pid 63310:tid 63364] [client 158.158.40.237:13599] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xxivicLhot.php"] [unique_id "adz1tHoXpRU5ztmwPjJq3AAAAFQ"]
[Mon Apr 13 21:55:02.875922 2026] [:error] [pid 63311:tid 63388] [client 158.158.40.237:13604] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/7logs.php"] [unique_id "adz1tqHjrGN1MqBCVFkW5gAAAJE"]
[Mon Apr 13 21:55:05.779226 2026] [:error] [pid 63309:tid 63333] [client 158.158.40.237:13573] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/7logs.php"] [unique_id "adz1uUpIKZ10weXpf0U28AAAABQ"]
[Mon Apr 13 21:55:08.006210 2026] [:error] [pid 63309:tid 63322] [client 158.158.40.237:13859] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/7logs.php"] [unique_id "adz1vEpIKZ10weXpf0U29QAAAAk"]
[Mon Apr 13 21:55:10.251919 2026] [:error] [pid 57183:tid 57190] [client 158.158.40.237:13825] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/7logs.php"] [unique_id "adz1vjDO3t8R5NaxzYRmNQAAAUU"]
[Mon Apr 13 21:55:12.503728 2026] [:error] [pid 57183:tid 57187] [client 158.158.40.237:13625] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/acc.php"] [unique_id "adz1wDDO3t8R5NaxzYRmOQAAAUI"]
[Mon Apr 13 21:55:14.620571 2026] [:error] [pid 9314:tid 9326] [client 158.158.40.237:13574] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/acc.php"] [unique_id "adz1wm_r4W8fX2GWyGQ7CgAAAYo"]
[Mon Apr 13 21:55:15.319208 2026] [:error] [pid 9314:tid 9331] [client 158.158.40.237:13613] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/acc.php"] [unique_id "adz1w2_r4W8fX2GWyGQ7DQAAAY8"]
[Mon Apr 13 21:55:16.278901 2026] [:error] [pid 63310:tid 63358] [client 158.158.40.237:13571] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/acc.php"] [unique_id "adz1xHoXpRU5ztmwPjJq-AAAAE4"]
[Mon Apr 13 21:55:17.038113 2026] [:error] [pid 9314:tid 9325] [client 158.158.40.237:13849] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wxeyc.php"] [unique_id "adz1xW_r4W8fX2GWyGQ7FQAAAYk"]
[Mon Apr 13 21:55:17.930087 2026] [:error] [pid 63311:tid 63389] [client 158.158.40.237:13835] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wxeyc.php"] [unique_id "adz1xaHjrGN1MqBCVFkW-QAAAJI"]
[Mon Apr 13 21:55:20.011852 2026] [:error] [pid 63406:tid 63418] [client 158.158.40.237:13619] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wxeyc.php"] [unique_id "adz1yLHZEIkQ0Zmgp5rh_gAAAMc"]
[Mon Apr 13 21:55:21.536507 2026] [:error] [pid 63311:tid 63386] [client 158.158.40.237:13886] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wxeyc.php"] [unique_id "adz1yaHjrGN1MqBCVFkW-wAAAI8"]
[Mon Apr 13 21:55:22.896821 2026] [:error] [pid 7228:tid 7232] [client 158.158.40.237:13597] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xltt.php"] [unique_id "adz1ygEnn1dQrOSHHNWu8wAAAQI"]
[Mon Apr 13 21:55:24.117004 2026] [:error] [pid 63309:tid 63314] [client 158.158.40.237:13908] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xltt.php"] [unique_id "adz1zEpIKZ10weXpf0U3DwAAAAE"]
[Mon Apr 13 21:55:25.156624 2026] [:error] [pid 57183:tid 57203] [client 158.158.40.237:13854] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xltt.php"] [unique_id "adz1zTDO3t8R5NaxzYRmRAAAAVI"]
[Mon Apr 13 21:55:30.069084 2026] [:error] [pid 57183:tid 57207] [client 158.158.40.237:13951] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xltt.php"] [unique_id "adz10jDO3t8R5NaxzYRmTAAAAVY"]
[Mon Apr 13 21:55:32.822951 2026] [:error] [pid 57183:tid 57190] [client 158.158.40.237:13865] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "adz11DDO3t8R5NaxzYRmVwAAAUU"]
[Mon Apr 13 21:55:35.731803 2026] [:error] [pid 57183:tid 57200] [client 158.158.40.237:13902] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "adz11zDO3t8R5NaxzYRmYQAAAU8"]
[Mon Apr 13 21:55:36.793833 2026] [:error] [pid 57183:tid 57187] [client 158.158.40.237:13858] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "adz12DDO3t8R5NaxzYRmawAAAUI"]
[Mon Apr 13 21:55:37.918746 2026] [:error] [pid 57183:tid 57196] [client 158.158.40.237:13612] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "adz12TDO3t8R5NaxzYRmcAAAAUs"]
[Mon Apr 13 21:55:40.035037 2026] [:error] [pid 63309:tid 63327] [client 158.158.40.237:13587] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fyflv.php"] [unique_id "adz13EpIKZ10weXpf0U3EgAAAA4"]
[Mon Apr 13 21:55:41.100729 2026] [:error] [pid 63310:tid 63366] [client 158.158.40.237:13864] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fyflv.php"] [unique_id "adz13XoXpRU5ztmwPjJrFwAAAFY"]
[Mon Apr 13 21:55:41.721335 2026] [:error] [pid 57183:tid 57208] [client 158.158.40.237:13837] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fyflv.php"] [unique_id "adz13TDO3t8R5NaxzYRmgQAAAVc"]
[Mon Apr 13 21:55:42.443524 2026] [:error] [pid 9314:tid 9334] [client 158.158.40.237:13847] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fyflv.php"] [unique_id "adz13m_r4W8fX2GWyGQ7RAAAAZI"]
[Mon Apr 13 21:55:43.336861 2026] [:error] [pid 57183:tid 57194] [client 158.158.40.237:13600] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zc-942.php"] [unique_id "adz13zDO3t8R5NaxzYRmgwAAAUk"]
[Mon Apr 13 21:55:44.241999 2026] [:error] [pid 63311:tid 63379] [client 158.158.40.237:13906] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zc-942.php"] [unique_id "adz14KHjrGN1MqBCVFkXDwAAAIg"]
[Mon Apr 13 21:55:44.860724 2026] [:error] [pid 9314:tid 9329] [client 158.158.40.237:13880] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zc-942.php"] [unique_id "adz14G_r4W8fX2GWyGQ7SgAAAY0"]
[Mon Apr 13 21:55:45.873746 2026] [:error] [pid 63309:tid 63337] [client 158.158.40.237:13611] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zc-942.php"] [unique_id "adz14UpIKZ10weXpf0U3GAAAABg"]
[Mon Apr 13 21:55:46.930954 2026] [:error] [pid 63309:tid 63331] [client 158.158.40.237:13884] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sde.php"] [unique_id "adz14kpIKZ10weXpf0U3GQAAABI"]
[Mon Apr 13 21:55:48.783159 2026] [:error] [pid 7228:tid 7239] [client 158.158.40.237:13575] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sde.php"] [unique_id "adz15AEnn1dQrOSHHNWvHgAAAQk"]
[Mon Apr 13 21:55:56.741314 2026] [:error] [pid 9314:tid 9340] [client 158.158.40.237:13860] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/iindv.php"] [unique_id "adz17G_r4W8fX2GWyGQ7ZwAAAZg"]
[Mon Apr 13 21:55:57.409082 2026] [:error] [pid 63406:tid 63431] [client 158.158.40.237:13866] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/iindv.php"] [unique_id "adz17bHZEIkQ0Zmgp5riOgAAANQ"]
[Mon Apr 13 21:55:58.497955 2026] [:error] [pid 63406:tid 63420] [client 158.158.40.237:13826] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/iindv.php"] [unique_id "adz17rHZEIkQ0Zmgp5riRAAAAMk"]
[Mon Apr 13 21:55:59.122986 2026] [:error] [pid 63309:tid 63326] [client 158.158.40.237:13610] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/iindv.php"] [unique_id "adz170pIKZ10weXpf0U3GwAAAA0"]
[Mon Apr 13 21:55:59.634876 2026] [:error] [pid 63310:tid 63355] [client 158.158.40.237:13856] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/maintura.php"] [unique_id "adz173oXpRU5ztmwPjJrNwAAAEs"]
[Mon Apr 13 21:56:00.661559 2026] [:error] [pid 63310:tid 63346] [client 158.158.40.237:13869] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/maintura.php"] [unique_id "adz18HoXpRU5ztmwPjJrOQAAAEI"]
[Mon Apr 13 21:56:02.336811 2026] [:error] [pid 63310:tid 63345] [client 158.158.40.237:13900] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/maintura.php"] [unique_id "adz18noXpRU5ztmwPjJrPQAAAEE"]
[Mon Apr 13 21:56:03.293893 2026] [:error] [pid 63310:tid 63348] [client 158.158.40.237:13918] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/maintura.php"] [unique_id "adz183oXpRU5ztmwPjJrQQAAAEQ"]
[Mon Apr 13 21:56:04.413203 2026] [:error] [pid 63310:tid 63357] [client 158.158.40.237:13894] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adz19HoXpRU5ztmwPjJrQwAAAE0"]
[Mon Apr 13 21:56:05.671876 2026] [:error] [pid 63406:tid 63428] [client 158.158.40.237:13846] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adz19bHZEIkQ0Zmgp5riTQAAANE"]
[Mon Apr 13 21:56:06.410786 2026] [:error] [pid 63310:tid 63354] [client 158.158.40.237:13863] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adz19noXpRU5ztmwPjJrRQAAAEo"]
[Mon Apr 13 21:56:07.189214 2026] [:error] [pid 9314:tid 9329] [client 158.158.40.237:13834] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/iee52ruz0s81ndrdefault.php"] [unique_id "adz192_r4W8fX2GWyGQ7egAAAY0"]
[Mon Apr 13 21:56:08.592519 2026] [:error] [pid 7228:tid 7248] [client 158.158.40.237:13910] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adz1-AEnn1dQrOSHHNWvPwAAARI"]
[Mon Apr 13 21:56:09.727675 2026] [:error] [pid 63406:tid 63424] [client 158.158.40.237:13614] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adz1-bHZEIkQ0Zmgp5riUgAAAM0"]
[Mon Apr 13 21:56:10.514523 2026] [:error] [pid 57183:tid 57194] [client 158.158.40.237:13572] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adz1-jDO3t8R5NaxzYRmxgAAAUk"]
[Mon Apr 13 21:56:11.361186 2026] [:error] [pid 7228:tid 7239] [client 158.158.40.237:13903] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nvwf4svpvqohxdjtbjCdefault.php"] [unique_id "adz1-wEnn1dQrOSHHNWvQgAAAQk"]
[Mon Apr 13 21:56:12.007939 2026] [:error] [pid 63406:tid 63417] [client 158.158.40.237:13836] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zc-220.php"] [unique_id "adz1_LHZEIkQ0Zmgp5riVgAAAMY"]
[Mon Apr 13 21:56:12.739760 2026] [:error] [pid 63311:tid 63379] [client 158.158.40.237:13868] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zc-220.php"] [unique_id "adz1_KHjrGN1MqBCVFkXMQAAAIg"]
[Mon Apr 13 21:56:13.425031 2026] [:error] [pid 9314:tid 9320] [client 158.158.40.237:13586] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zc-220.php"] [unique_id "adz1_W_r4W8fX2GWyGQ7hwAAAYQ"]
[Mon Apr 13 21:56:14.043571 2026] [:error] [pid 63310:tid 63365] [client 158.158.40.237:13627] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zc-220.php"] [unique_id "adz1_noXpRU5ztmwPjJrSgAAAFU"]
[Mon Apr 13 21:56:14.630516 2026] [:error] [pid 57183:tid 57190] [client 158.158.40.237:12134] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adz1_jDO3t8R5NaxzYRm0AAAAUU"]
[Mon Apr 13 21:56:15.259252 2026] [:error] [pid 9314:tid 9339] [client 158.158.40.237:13881] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adz1_2_r4W8fX2GWyGQ7kAAAAZc"]
[Mon Apr 13 21:56:15.809750 2026] [:error] [pid 63311:tid 63386] [client 158.158.40.237:13629] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adz1_6HjrGN1MqBCVFkXOAAAAI8"]
[Mon Apr 13 21:56:16.545579 2026] [:error] [pid 63406:tid 63434] [client 158.158.40.237:13876] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/r9pbhistk1lifhnjadpCdefault.php"] [unique_id "adz2ALHZEIkQ0Zmgp5riawAAANc"]
[Mon Apr 13 21:56:17.122615 2026] [:error] [pid 7228:tid 7240] [client 158.158.40.237:13905] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fone1.php"] [unique_id "adz2AQEnn1dQrOSHHNWvSAAAAQo"]
[Mon Apr 13 21:56:17.692313 2026] [:error] [pid 57183:tid 57187] [client 158.158.40.237:13578] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fone1.php"] [unique_id "adz2ATDO3t8R5NaxzYRm3AAAAUI"]
[Mon Apr 13 21:56:18.499812 2026] [:error] [pid 9314:tid 9330] [client 158.158.40.237:13842] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fone1.php"] [unique_id "adz2Am_r4W8fX2GWyGQ7nAAAAY4"]
[Mon Apr 13 21:56:19.374059 2026] [:error] [pid 7228:tid 7239] [client 158.158.40.237:13897] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fone1.php"] [unique_id "adz2AwEnn1dQrOSHHNWvTwAAAQk"]
[Mon Apr 13 21:56:20.112594 2026] [:error] [pid 57183:tid 57185] [client 158.158.40.237:13934] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adz2BDDO3t8R5NaxzYRm5gAAAUA"]
[Mon Apr 13 21:56:20.753404 2026] [:error] [pid 57183:tid 57189] [client 158.158.40.237:13830] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adz2BDDO3t8R5NaxzYRm5wAAAUQ"]
[Mon Apr 13 21:56:21.583140 2026] [:error] [pid 57183:tid 57193] [client 158.158.40.237:13873] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adz2BTDO3t8R5NaxzYRm7QAAAUg"]
[Mon Apr 13 21:56:23.171103 2026] [:error] [pid 9314:tid 9318] [client 158.158.40.237:13920] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xxiviLDIot.php"] [unique_id "adz2B2_r4W8fX2GWyGQ7qQAAAYI"]
[Mon Apr 13 21:56:24.454757 2026] [:error] [pid 9314:tid 9329] [client 158.158.40.237:13893] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adz2CG_r4W8fX2GWyGQ7sQAAAY0"]
[Mon Apr 13 21:56:25.099173 2026] [:error] [pid 9314:tid 9328] [client 158.158.40.237:13890] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adz2CW_r4W8fX2GWyGQ7tgAAAYw"]
[Mon Apr 13 21:56:25.966580 2026] [:error] [pid 63310:tid 63360] [client 158.158.40.237:13581] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adz2CXoXpRU5ztmwPjJrVAAAAFA"]
[Mon Apr 13 21:56:26.771705 2026] [:error] [pid 7228:tid 7234] [client 158.158.40.237:13901] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hanyatersenyum.php"] [unique_id "adz2CgEnn1dQrOSHHNWvUgAAAQQ"]
[Mon Apr 13 21:56:28.234745 2026] [:error] [pid 7228:tid 7230] [client 158.158.40.237:13838] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adz2DAEnn1dQrOSHHNWvVgAAAQA"]
[Mon Apr 13 21:56:29.349622 2026] [:error] [pid 7228:tid 7239] [client 158.158.40.237:13580] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adz2DQEnn1dQrOSHHNWvWwAAAQk"]
[Mon Apr 13 21:56:30.432804 2026] [:error] [pid 63311:tid 63371] [client 158.158.40.237:13879] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adz2DqHjrGN1MqBCVFkXTQAAAIA"]
[Mon Apr 13 21:56:31.396689 2026] [:error] [pid 57183:tid 57189] [client 158.158.40.237:12098] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/5tdwvyWnTbRiMS8f18HXNBbALHKB5t4j.php"] [unique_id "adz2DzDO3t8R5NaxzYRm-wAAAUQ"]
[Mon Apr 13 21:56:32.398841 2026] [:error] [pid 57183:tid 57208] [client 158.158.40.237:13867] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/upll22.php"] [unique_id "adz2EDDO3t8R5NaxzYRnAAAAAVc"]
[Mon Apr 13 21:56:33.162843 2026] [:error] [pid 9314:tid 9336] [client 158.158.40.237:12106] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/upll22.php"] [unique_id "adz2EW_r4W8fX2GWyGQ7zAAAAZQ"]
[Mon Apr 13 21:56:34.609143 2026] [:error] [pid 7228:tid 7249] [client 158.158.40.237:13852] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/upll22.php"] [unique_id "adz2EgEnn1dQrOSHHNWvagAAARM"]
[Mon Apr 13 21:56:35.741069 2026] [:error] [pid 63311:tid 63391] [client 158.158.40.237:13855] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/upll22.php"] [unique_id "adz2E6HjrGN1MqBCVFkXVQAAAJQ"]
[Mon Apr 13 21:56:36.956370 2026] [:error] [pid 9314:tid 9330] [client 158.158.40.237:13946] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/100.php"] [unique_id "adz2FG_r4W8fX2GWyGQ72gAAAY4"]
[Mon Apr 13 21:56:39.243560 2026] [:error] [pid 7228:tid 7246] [client 158.158.40.237:13888] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/100.php"] [unique_id "adz2FwEnn1dQrOSHHNWvewAAARA"]
[Mon Apr 13 21:56:39.793358 2026] [:error] [pid 63406:tid 63431] [client 158.158.40.237:13631] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/100.php"] [unique_id "adz2F7HZEIkQ0Zmgp5rieAAAANQ"]
[Mon Apr 13 21:56:41.125248 2026] [:error] [pid 63406:tid 63435] [client 158.158.40.237:13875] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/100.php"] [unique_id "adz2GbHZEIkQ0Zmgp5rihgAAANg"]
[Mon Apr 13 21:56:41.857692 2026] [:error] [pid 63406:tid 63431] [client 158.158.40.237:13892] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "adz2GbHZEIkQ0Zmgp5riiwAAANQ"]
[Mon Apr 13 21:56:42.627591 2026] [:error] [pid 57183:tid 57202] [client 158.158.40.237:12118] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "adz2GjDO3t8R5NaxzYRnDAAAAVE"]
[Mon Apr 13 21:56:43.394796 2026] [:error] [pid 57183:tid 57194] [client 158.158.40.237:13850] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "adz2GzDO3t8R5NaxzYRnDwAAAUk"]
[Mon Apr 13 21:56:43.971732 2026] [:error] [pid 57183:tid 57185] [client 158.158.40.237:13598] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "adz2GzDO3t8R5NaxzYRnEwAAAUA"]
[Mon Apr 13 21:56:45.224393 2026] [:error] [pid 63309:tid 63333] [client 158.158.40.237:13944] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zc-243.php"] [unique_id "adz2HUpIKZ10weXpf0U3LwAAABQ"]
[Mon Apr 13 21:56:45.862747 2026] [:error] [pid 9314:tid 9329] [client 158.158.40.237:13898] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zc-243.php"] [unique_id "adz2HW_r4W8fX2GWyGQ76gAAAY0"]
[Mon Apr 13 21:56:46.932151 2026] [:error] [pid 63311:tid 63375] [client 158.158.40.237:13596] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zc-243.php"] [unique_id "adz2HqHjrGN1MqBCVFkXYAAAAIQ"]
[Mon Apr 13 21:56:47.597489 2026] [:error] [pid 63309:tid 63325] [client 158.158.40.237:13926] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zc-243.php"] [unique_id "adz2H0pIKZ10weXpf0U3OAAAAAw"]
[Mon Apr 13 21:56:48.988264 2026] [:error] [pid 63309:tid 63336] [client 158.158.40.237:12130] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adz2IEpIKZ10weXpf0U3PwAAABc"]
[Mon Apr 13 21:56:49.688514 2026] [:error] [pid 9314:tid 9327] [client 158.158.40.237:13616] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adz2IW_r4W8fX2GWyGQ78AAAAYs"]
[Mon Apr 13 21:56:50.630551 2026] [:error] [pid 63309:tid 63337] [client 158.158.40.237:13923] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adz2IkpIKZ10weXpf0U3QwAAABg"]
[Mon Apr 13 21:56:51.918988 2026] [:error] [pid 63311:tid 63384] [client 158.158.40.237:13848] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/pm90apbv3v5fvgkbguyiCdefault.php"] [unique_id "adz2I6HjrGN1MqBCVFkXaQAAAI0"]
[Mon Apr 13 21:56:54.612146 2026] [:error] [pid 63406:tid 63423] [client 158.158.40.237:13915] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/CDX1.php"] [unique_id "adz2JrHZEIkQ0Zmgp5rilAAAAMw"]
[Mon Apr 13 21:57:11.950024 2026] [:error] [pid 9314:tid 9316] [client 158.158.40.237:13909] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "adz2N2_r4W8fX2GWyGQ8LgAAAYA"]
[Mon Apr 13 21:57:13.604140 2026] [:error] [pid 63311:tid 63380] [client 158.158.40.237:13861] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "adz2OaHjrGN1MqBCVFkXewAAAIk"]
[Mon Apr 13 21:57:16.718942 2026] [:error] [pid 63311:tid 63386] [client 158.158.40.237:13593] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "adz2PKHjrGN1MqBCVFkXfAAAAI8"]
[Mon Apr 13 21:57:19.998695 2026] [:error] [pid 63309:tid 63333] [client 158.158.40.237:13882] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "adz2P0pIKZ10weXpf0U3TgAAABQ"]
[Mon Apr 13 21:57:22.978364 2026] [:error] [pid 63311:tid 63385] [client 158.158.40.237:13935] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "adz2QqHjrGN1MqBCVFkXgwAAAI4"]
[Mon Apr 13 21:57:25.903198 2026] [:error] [pid 63406:tid 63418] [client 158.158.40.237:13947] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "adz2RbHZEIkQ0Zmgp5riuwAAAMc"]
[Mon Apr 13 21:57:27.539867 2026] [:error] [pid 63311:tid 63392] [client 158.158.40.237:13617] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "adz2R6HjrGN1MqBCVFkXhwAAAJU"]
[Mon Apr 13 21:57:28.702036 2026] [:error] [pid 63406:tid 63428] [client 158.158.40.237:12100] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "adz2SLHZEIkQ0Zmgp5ri1AAAANE"]
[Mon Apr 13 21:57:29.555573 2026] [:error] [pid 7228:tid 7252] [client 158.158.40.237:13608] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adz2SQEnn1dQrOSHHNWvwwAAARY"]
[Mon Apr 13 21:57:30.117819 2026] [:error] [pid 63406:tid 63414] [client 158.158.40.237:13833] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adz2SrHZEIkQ0Zmgp5ri2wAAAMM"]
[Mon Apr 13 21:57:30.933514 2026] [:error] [pid 9314:tid 9330] [client 158.158.40.237:12127] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adz2Sm_r4W8fX2GWyGQ8RAAAAY4"]
[Mon Apr 13 21:57:31.690303 2026] [:error] [pid 63406:tid 63428] [client 158.158.40.237:13843] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adz2S7HZEIkQ0Zmgp5ri3wAAANE"]
[Mon Apr 13 21:57:34.005336 2026] [:error] [pid 9314:tid 9329] [client 158.158.40.237:13916] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "adz2Tm_r4W8fX2GWyGQ8VQAAAY0"]
[Mon Apr 13 21:57:36.575137 2026] [:error] [pid 63310:tid 63360] [client 158.158.40.237:12113] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "adz2UHoXpRU5ztmwPjJrbwAAAFA"]
[Mon Apr 13 21:57:55.678355 2026] [:error] [pid 7228:tid 7238] [client 158.158.40.237:13870] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "adz2YwEnn1dQrOSHHNWv9AAAAQg"]
[Mon Apr 13 21:57:56.837476 2026] [:error] [pid 7228:tid 7246] [client 158.158.40.237:13887] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "adz2ZAEnn1dQrOSHHNWv_AAAARA"]
[Mon Apr 13 21:58:00.598083 2026] [:error] [pid 9314:tid 9316] [client 158.158.40.237:13941] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "adz2aG_r4W8fX2GWyGQ8xgAAAYA"]
[Mon Apr 13 21:59:22.056495 2026] [:error] [pid 63310:tid 63357] [client 158.158.40.237:13615] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "adz2unoXpRU5ztmwPjJr4QAAAE0"]
[Mon Apr 13 21:59:23.274134 2026] [:error] [pid 63311:tid 63373] [client 158.158.40.237:13589] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "adz2u6HjrGN1MqBCVFkYEAAAAII"]
[Mon Apr 13 21:59:24.033462 2026] [:error] [pid 63406:tid 63433] [client 158.158.40.237:13862] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "adz2vLHZEIkQ0Zmgp5rkYgAAANY"]
[Mon Apr 13 21:59:24.676877 2026] [:error] [pid 57183:tid 57204] [client 158.158.40.237:13932] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "adz2vDDO3t8R5NaxzYRoGgAAAVM"]
[Mon Apr 13 21:59:25.549857 2026] [:error] [pid 63406:tid 63434] [client 158.158.40.237:13605] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file61.php"] [unique_id "adz2vbHZEIkQ0Zmgp5rkagAAANc"]
[Mon Apr 13 21:59:26.364025 2026] [:error] [pid 9314:tid 9330] [client 158.158.40.237:13907] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file61.php"] [unique_id "adz2vm_r4W8fX2GWyGQ9SwAAAY4"]
[Mon Apr 13 21:59:27.120275 2026] [:error] [pid 9314:tid 9332] [client 158.158.40.237:13622] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file61.php"] [unique_id "adz2v2_r4W8fX2GWyGQ9UAAAAZA"]
[Mon Apr 13 21:59:29.026523 2026] [:error] [pid 63406:tid 63423] [client 158.158.40.237:13568] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file61.php"] [unique_id "adz2wbHZEIkQ0Zmgp5rkdQAAAMw"]
[Mon Apr 13 21:59:30.341941 2026] [:error] [pid 63406:tid 63411] [client 158.158.40.237:13896] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "adz2wrHZEIkQ0Zmgp5rkfwAAAMA"]
[Mon Apr 13 21:59:31.902536 2026] [:error] [pid 7228:tid 7232] [client 158.158.40.237:13886] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "adz2wwEnn1dQrOSHHNWwdgAAAQI"]
[Mon Apr 13 21:59:32.921095 2026] [:error] [pid 63309:tid 63317] [client 158.158.40.237:12129] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "adz2xEpIKZ10weXpf0U3ugAAAAQ"]
[Mon Apr 13 21:59:34.992249 2026] [:error] [pid 9314:tid 9332] [client 158.158.40.237:13594] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "adz2xm_r4W8fX2GWyGQ9XAAAAZA"]
[Mon Apr 13 21:59:36.660431 2026] [:error] [pid 63406:tid 63417] [client 158.158.40.237:13624] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "adz2yLHZEIkQ0Zmgp5rkjwAAAMY"]
[Mon Apr 13 21:59:38.423935 2026] [:error] [pid 7228:tid 7242] [client 158.158.40.237:13942] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "adz2ygEnn1dQrOSHHNWwfwAAAQw"]
[Mon Apr 13 21:59:40.387190 2026] [:error] [pid 57183:tid 57200] [client 158.158.40.237:13839] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "adz2zDDO3t8R5NaxzYRoMAAAAU8"]
[Mon Apr 13 21:59:42.645648 2026] [:error] [pid 63309:tid 63330] [client 158.158.40.237:13827] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "adz2zkpIKZ10weXpf0U3vQAAABE"]
[Mon Apr 13 21:59:47.332873 2026] [:error] [pid 63311:tid 63387] [client 158.158.40.237:13883] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adz206HjrGN1MqBCVFkYIAAAAJA"]
[Mon Apr 13 21:59:49.491690 2026] [:error] [pid 7228:tid 7248] [client 158.158.40.237:13841] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adz21QEnn1dQrOSHHNWwjwAAARI"]
[Mon Apr 13 21:59:52.906146 2026] [:error] [pid 63311:tid 63384] [client 158.158.40.237:13824] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adz22KHjrGN1MqBCVFkYLAAAAI0"]
[Mon Apr 13 21:59:56.001870 2026] [:error] [pid 57183:tid 57206] [client 158.158.40.237:13835] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "adz23DDO3t8R5NaxzYRoUQAAAVU"]
[Mon Apr 13 21:59:57.912571 2026] [:error] [pid 63406:tid 63427] [client 158.158.40.237:14147] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "adz23bHZEIkQ0Zmgp5rkzwAAANA"]
[Mon Apr 13 22:00:00.295470 2026] [:error] [pid 63406:tid 63428] [client 158.158.40.237:13618] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "adz24LHZEIkQ0Zmgp5rk0QAAANE"]
[Mon Apr 13 22:00:02.833551 2026] [:error] [pid 9314:tid 9340] [client 158.158.40.237:13831] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "adz24m_r4W8fX2GWyGQ9gQAAAZg"]
[Mon Apr 13 22:00:04.879889 2026] [:error] [pid 57183:tid 57199] [client 158.158.40.237:13849] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "adz25DDO3t8R5NaxzYRoYAAAAU4"]
[Mon Apr 13 22:00:07.548280 2026] [:error] [pid 57183:tid 57187] [client 158.158.40.237:13619] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adz25zDO3t8R5NaxzYRoYgAAAUI"]
[Mon Apr 13 22:00:09.179561 2026] [:error] [pid 63311:tid 63384] [client 158.158.40.237:13904] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adz26aHjrGN1MqBCVFkYOgAAAI0"]
[Mon Apr 13 22:00:11.999466 2026] [:error] [pid 63311:tid 63379] [client 158.158.40.237:13623] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adz266HjrGN1MqBCVFkYPwAAAIg"]
[Mon Apr 13 22:00:15.197102 2026] [:error] [pid 63311:tid 63392] [client 158.158.40.237:13577] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ogifomnzqnlvwh5womfjirvaCdefault.php"] [unique_id "adz276HjrGN1MqBCVFkYQgAAAJU"]
[Mon Apr 13 22:00:17.472046 2026] [:error] [pid 57183:tid 57192] [client 158.158.40.237:13579] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Cap.php"] [unique_id "adz28TDO3t8R5NaxzYRocgAAAUc"]
[Mon Apr 13 22:00:18.899727 2026] [:error] [pid 57183:tid 57191] [client 158.158.40.237:13828] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Cap.php"] [unique_id "adz28jDO3t8R5NaxzYRodgAAAUY"]
[Mon Apr 13 22:00:20.257414 2026] [:error] [pid 63406:tid 63424] [client 158.158.40.237:12099] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Cap.php"] [unique_id "adz29LHZEIkQ0Zmgp5rlDAAAAM0"]
[Mon Apr 13 22:00:30.207126 2026] [:error] [pid 63406:tid 63414] [client 158.158.40.237:13587] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "adz2_rHZEIkQ0Zmgp5rlSwAAAMM"]
[Mon Apr 13 22:00:35.833827 2026] [:error] [pid 63406:tid 63413] [client 158.158.40.237:13851] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "adz3A7HZEIkQ0Zmgp5rlYgAAAMI"]
[Mon Apr 13 22:00:53.171025 2026] [:error] [pid 63406:tid 63420] [client 158.158.40.237:13569] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "adz3FbHZEIkQ0Zmgp5rlhAAAAMk"]
[Mon Apr 13 22:00:57.983859 2026] [:error] [pid 63406:tid 63415] [client 158.158.40.237:13602] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "adz3GbHZEIkQ0Zmgp5rljAAAAMQ"]
[Mon Apr 13 22:00:59.391290 2026] [:error] [pid 63309:tid 63320] [client 158.158.40.237:13581] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "adz3G0pIKZ10weXpf0U32gAAAAc"]
[Mon Apr 13 22:01:00.902076 2026] [:error] [pid 9314:tid 9328] [client 158.158.40.237:13610] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "adz3HG_r4W8fX2GWyGQ9twAAAYw"]
[Mon Apr 13 22:01:02.714764 2026] [:error] [pid 63406:tid 63421] [client 158.158.40.237:13626] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jlex.php"] [unique_id "adz3HrHZEIkQ0Zmgp5rlywAAAMo"]
[Mon Apr 13 22:01:08.026771 2026] [:error] [pid 57183:tid 57204] [client 158.158.40.237:13578] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jlex.php"] [unique_id "adz3JDDO3t8R5NaxzYRpMwAAAVM"]
[Mon Apr 13 22:01:09.749873 2026] [:error] [pid 63406:tid 63413] [client 158.158.40.237:13599] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jlex.php"] [unique_id "adz3JbHZEIkQ0Zmgp5rl5gAAAMI"]
[Mon Apr 13 22:01:11.202958 2026] [:error] [pid 57183:tid 57193] [client 158.158.40.237:13601] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jlex.php"] [unique_id "adz3JzDO3t8R5NaxzYRpQgAAAUg"]
[Mon Apr 13 22:01:12.919672 2026] [:error] [pid 7228:tid 7241] [client 158.158.40.237:13616] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xsas.php"] [unique_id "adz3KAEnn1dQrOSHHNWw9AAAAQs"]
[Mon Apr 13 22:01:14.385790 2026] [:error] [pid 9314:tid 9319] [client 158.158.40.237:13596] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xsas.php"] [unique_id "adz3Km_r4W8fX2GWyGQ9wAAAAYM"]
[Mon Apr 13 22:01:16.920620 2026] [:error] [pid 63310:tid 63360] [client 158.158.40.237:13576] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xsas.php"] [unique_id "adz3LHoXpRU5ztmwPjJsXQAAAFA"]
[Mon Apr 13 22:01:19.374318 2026] [:error] [pid 63311:tid 63395] [client 158.158.40.237:13848] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xsas.php"] [unique_id "adz3L6HjrGN1MqBCVFkYXwAAAJg"]
[Mon Apr 13 22:01:27.909176 2026] [:error] [pid 63311:tid 63373] [client 158.158.40.237:13859] [client 158.158.40.237] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp/jp.php"] [unique_id "adz3N6HjrGN1MqBCVFkYZAAAAII"]
[Tue Apr 14 02:09:58.096190 2026] [:error] [pid 59915:tid 59993] [client 20.104.109.252:6086] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/options-reading.php"] [unique_id "ad0xdoeTNdEemByf99hJdQAAAJY"]
[Tue Apr 14 02:09:58.519894 2026] [:error] [pid 60317:tid 60346] [client 20.104.109.252:6134] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/options-reading.php"] [unique_id "ad0xdrBo7Bc8I7P_P--pLgAAAMY"]
[Tue Apr 14 02:09:58.983505 2026] [:error] [pid 59915:tid 59972] [client 20.104.109.252:6036] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/options-reading.php"] [unique_id "ad0xdoeTNdEemByf99hJdgAAAIE"]
[Tue Apr 14 02:09:59.421065 2026] [:error] [pid 60317:tid 60363] [client 20.104.109.252:6032] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/options-reading.php"] [unique_id "ad0xd7Bo7Bc8I7P_P--pMQAAANc"]
[Tue Apr 14 02:09:59.856236 2026] [:error] [pid 60317:tid 60352] [client 20.104.109.252:6018] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-sites.php"] [unique_id "ad0xd7Bo7Bc8I7P_P--pNAAAAMw"]
[Tue Apr 14 02:10:00.319779 2026] [:error] [pid 60317:tid 60354] [client 20.104.109.252:6019] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-sites.php"] [unique_id "ad0xeLBo7Bc8I7P_P--pNgAAAM4"]
[Tue Apr 14 02:10:00.766338 2026] [:error] [pid 59914:tid 59945] [client 20.104.109.252:6083] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-sites.php"] [unique_id "ad0xeOq0YMmB3OWbbUlXgAAAAEE"]
[Tue Apr 14 02:10:01.204323 2026] [:error] [pid 59915:tid 59976] [client 20.104.109.252:6034] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-sites.php"] [unique_id "ad0xeYeTNdEemByf99hJeQAAAIU"]
[Tue Apr 14 02:10:01.642233 2026] [:error] [pid 59915:tid 59991] [client 20.104.109.252:6094] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yasnu.php"] [unique_id "ad0xeYeTNdEemByf99hJegAAAJQ"]
[Tue Apr 14 02:10:02.070478 2026] [:error] [pid 59915:tid 59983] [client 20.104.109.252:6123] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yasnu.php"] [unique_id "ad0xeoeTNdEemByf99hJfQAAAIw"]
[Tue Apr 14 02:10:02.494126 2026] [:error] [pid 60317:tid 60358] [client 20.104.109.252:6017] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yasnu.php"] [unique_id "ad0xerBo7Bc8I7P_P--pPAAAANI"]
[Tue Apr 14 02:10:02.920742 2026] [:error] [pid 59914:tid 59950] [client 20.104.109.252:6131] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yasnu.php"] [unique_id "ad0xeuq0YMmB3OWbbUlXhAAAAEY"]
[Tue Apr 14 02:10:03.435929 2026] [:error] [pid 60317:tid 60340] [client 20.104.109.252:6110] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/assets/theme_app.php"] [unique_id "ad0xe7Bo7Bc8I7P_P--pPgAAAMA"]
[Tue Apr 14 02:10:03.913512 2026] [:error] [pid 60317:tid 60357] [client 20.104.109.252:6105] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/assets/theme_app.php"] [unique_id "ad0xe7Bo7Bc8I7P_P--pQAAAANE"]
[Tue Apr 14 02:10:04.393082 2026] [:error] [pid 59915:tid 59973] [client 20.104.109.252:6126] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/assets/theme_app.php"] [unique_id "ad0xfIeTNdEemByf99hJfwAAAII"]
[Tue Apr 14 02:10:04.871229 2026] [:error] [pid 60317:tid 60355] [client 20.104.109.252:6027] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/assets/theme_app.php"] [unique_id "ad0xfLBo7Bc8I7P_P--pRAAAAM8"]
[Tue Apr 14 02:10:05.328048 2026] [:error] [pid 60317:tid 60347] [client 20.104.109.252:6033] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ova-wso.php"] [unique_id "ad0xfbBo7Bc8I7P_P--pRwAAAMc"]
[Tue Apr 14 02:10:05.767395 2026] [:error] [pid 60317:tid 60344] [client 20.104.109.252:6111] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ova-wso.php"] [unique_id "ad0xfbBo7Bc8I7P_P--pSgAAAMQ"]
[Tue Apr 14 02:10:06.194850 2026] [:error] [pid 59914:tid 59953] [client 20.104.109.252:6127] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ova-wso.php"] [unique_id "ad0xfuq0YMmB3OWbbUlXhgAAAEk"]
[Tue Apr 14 02:10:06.653949 2026] [:error] [pid 60317:tid 60347] [client 20.104.109.252:6090] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ova-wso.php"] [unique_id "ad0xfrBo7Bc8I7P_P--pTQAAAMc"]
[Tue Apr 14 02:10:07.138148 2026] [:error] [pid 60317:tid 60340] [client 20.104.109.252:6029] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/atomlib.php"] [unique_id "ad0xf7Bo7Bc8I7P_P--pTgAAAMA"]
[Tue Apr 14 02:10:07.637000 2026] [:error] [pid 59915:tid 59987] [client 20.104.109.252:6092] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/atomlib.php"] [unique_id "ad0xf4eTNdEemByf99hJgAAAAJA"]
[Tue Apr 14 02:10:08.076277 2026] [:error] [pid 60317:tid 60348] [client 20.104.109.252:6031] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/atomlib.php"] [unique_id "ad0xgLBo7Bc8I7P_P--pUQAAAMg"]
[Tue Apr 14 02:10:08.547010 2026] [:error] [pid 60317:tid 60342] [client 20.104.109.252:6100] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/atomlib.php"] [unique_id "ad0xgLBo7Bc8I7P_P--pUwAAAMI"]
[Tue Apr 14 02:10:09.045965 2026] [:error] [pid 59915:tid 59972] [client 20.104.109.252:6087] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gbl.php"] [unique_id "ad0xgYeTNdEemByf99hJggAAAIE"]
[Tue Apr 14 02:10:09.546621 2026] [:error] [pid 59915:tid 59974] [client 20.104.109.252:6116] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gbl.php"] [unique_id "ad0xgYeTNdEemByf99hJhQAAAIM"]
[Tue Apr 14 02:10:10.001368 2026] [:error] [pid 60317:tid 60345] [client 20.104.109.252:6030] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gbl.php"] [unique_id "ad0xgrBo7Bc8I7P_P--pWQAAAMU"]
[Tue Apr 14 02:10:10.557973 2026] [:error] [pid 60317:tid 60340] [client 20.104.109.252:6043] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gbl.php"] [unique_id "ad0xgrBo7Bc8I7P_P--pXAAAAMA"]
[Tue Apr 14 02:10:11.099113 2026] [:error] [pid 59915:tid 59989] [client 20.104.109.252:6128] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.ufc/ss.php"] [unique_id "ad0xg4eTNdEemByf99hJiQAAAJI"]
[Tue Apr 14 02:10:11.599763 2026] [:error] [pid 59914:tid 59945] [client 20.104.109.252:6069] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.ufc/ss.php"] [unique_id "ad0xg-q0YMmB3OWbbUlXiQAAAEE"]
[Tue Apr 14 02:10:12.144762 2026] [:error] [pid 60317:tid 60341] [client 20.104.109.252:6139] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.ufc/ss.php"] [unique_id "ad0xhLBo7Bc8I7P_P--pYQAAAME"]
[Tue Apr 14 02:10:12.573054 2026] [:error] [pid 60317:tid 60350] [client 20.104.109.252:6135] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.ufc/ss.php"] [unique_id "ad0xhLBo7Bc8I7P_P--pYgAAAMo"]
[Tue Apr 14 02:10:13.202217 2026] [:error] [pid 60317:tid 60347] [client 20.104.109.252:5968] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tester.php"] [unique_id "ad0xhbBo7Bc8I7P_P--pYwAAAMc"]
[Tue Apr 14 02:10:13.880202 2026] [:error] [pid 59913:tid 59922] [client 20.104.109.252:6037] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tester.php"] [unique_id "ad0xha5XvQ9C-gZtr2y09AAAAAU"]
[Tue Apr 14 02:10:14.443704 2026] [:error] [pid 59913:tid 59917] [client 20.104.109.252:6130] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tester.php"] [unique_id "ad0xhq5XvQ9C-gZtr2y09QAAAAA"]
[Tue Apr 14 02:10:15.333933 2026] [:error] [pid 59913:tid 59921] [client 20.104.109.252:6080] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tester.php"] [unique_id "ad0xh65XvQ9C-gZtr2y09gAAAAQ"]
[Tue Apr 14 02:10:16.013205 2026] [:error] [pid 59914:tid 59958] [client 20.104.109.252:6046] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/okaay.php"] [unique_id "ad0xiOq0YMmB3OWbbUlXjgAAAE4"]
[Tue Apr 14 02:10:16.552445 2026] [:error] [pid 59914:tid 59956] [client 20.104.109.252:6114] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/okaay.php"] [unique_id "ad0xiOq0YMmB3OWbbUlXkAAAAEw"]
[Tue Apr 14 02:10:17.060887 2026] [:error] [pid 59914:tid 59954] [client 20.104.109.252:6133] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/okaay.php"] [unique_id "ad0xieq0YMmB3OWbbUlXkQAAAEo"]
[Tue Apr 14 02:10:17.495751 2026] [:error] [pid 59913:tid 59930] [client 20.104.109.252:6113] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/okaay.php"] [unique_id "ad0xia5XvQ9C-gZtr2y0-gAAAA0"]
[Tue Apr 14 02:10:17.926291 2026] [:error] [pid 59914:tid 59960] [client 20.104.109.252:6124] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/page_m.php"] [unique_id "ad0xieq0YMmB3OWbbUlXlAAAAFA"]
[Tue Apr 14 02:10:18.339746 2026] [:error] [pid 60317:tid 60351] [client 20.104.109.252:5952] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/page_m.php"] [unique_id "ad0xirBo7Bc8I7P_P--pZwAAAMs"]
[Tue Apr 14 02:10:18.761071 2026] [:error] [pid 60317:tid 60363] [client 20.104.109.252:6056] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/page_m.php"] [unique_id "ad0xirBo7Bc8I7P_P--paAAAANc"]
[Tue Apr 14 02:10:19.281716 2026] [:error] [pid 60317:tid 60340] [client 20.104.109.252:6042] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/page_m.php"] [unique_id "ad0xi7Bo7Bc8I7P_P--pagAAAMA"]
[Tue Apr 14 02:10:19.778266 2026] [:error] [pid 60317:tid 60361] [client 20.104.109.252:6082] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bb.php"] [unique_id "ad0xi7Bo7Bc8I7P_P--pbQAAANU"]
[Tue Apr 14 02:10:20.252050 2026] [:error] [pid 60317:tid 60354] [client 20.104.109.252:6060] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bb.php"] [unique_id "ad0xjLBo7Bc8I7P_P--pbwAAAM4"]
[Tue Apr 14 02:10:20.694978 2026] [:error] [pid 60317:tid 60356] [client 20.104.109.252:6099] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bb.php"] [unique_id "ad0xjLBo7Bc8I7P_P--pcwAAANA"]
[Tue Apr 14 02:10:21.117635 2026] [:error] [pid 60317:tid 60349] [client 20.104.109.252:6093] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bb.php"] [unique_id "ad0xjbBo7Bc8I7P_P--pdgAAAMk"]
[Tue Apr 14 02:10:21.547686 2026] [:error] [pid 60317:tid 60350] [client 20.104.109.252:6095] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/c4.php"] [unique_id "ad0xjbBo7Bc8I7P_P--peAAAAMo"]
[Tue Apr 14 02:10:21.977927 2026] [:error] [pid 60317:tid 60340] [client 20.104.109.252:6044] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/c4.php"] [unique_id "ad0xjbBo7Bc8I7P_P--pegAAAMA"]
[Tue Apr 14 02:10:22.402320 2026] [:error] [pid 59913:tid 59941] [client 20.104.109.252:5959] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/c4.php"] [unique_id "ad0xjq5XvQ9C-gZtr2y0_gAAABg"]
[Tue Apr 14 02:10:22.839753 2026] [:error] [pid 60317:tid 60347] [client 20.104.109.252:6097] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/c4.php"] [unique_id "ad0xjrBo7Bc8I7P_P--pfAAAAMc"]
[Tue Apr 14 02:10:23.253652 2026] [:error] [pid 60317:tid 60360] [client 20.104.109.252:6021] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-themes.php7"] [unique_id "ad0xj7Bo7Bc8I7P_P--pfgAAANQ"]
[Tue Apr 14 02:10:23.675831 2026] [:error] [pid 59914:tid 59946] [client 20.104.109.252:6118] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-themes.php7"] [unique_id "ad0xj-q0YMmB3OWbbUlXlwAAAEI"]
[Tue Apr 14 02:10:24.114546 2026] [:error] [pid 59914:tid 59956] [client 20.104.109.252:6084] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-themes.php7"] [unique_id "ad0xkOq0YMmB3OWbbUlXmAAAAEw"]
[Tue Apr 14 02:10:24.542779 2026] [:error] [pid 59914:tid 59961] [client 20.104.109.252:6112] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-themes.php7"] [unique_id "ad0xkOq0YMmB3OWbbUlXmgAAAFE"]
[Tue Apr 14 02:10:24.963564 2026] [:error] [pid 59914:tid 59953] [client 20.104.109.252:6101] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wong.php"] [unique_id "ad0xkOq0YMmB3OWbbUlXmwAAAEk"]
[Tue Apr 14 02:10:25.424249 2026] [:error] [pid 59914:tid 59968] [client 20.104.109.252:6141] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wong.php"] [unique_id "ad0xkeq0YMmB3OWbbUlXnQAAAFg"]
[Tue Apr 14 02:10:25.850285 2026] [:error] [pid 59914:tid 59967] [client 20.104.109.252:6054] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wong.php"] [unique_id "ad0xkeq0YMmB3OWbbUlXogAAAFc"]
[Tue Apr 14 02:10:26.302033 2026] [:error] [pid 60317:tid 60348] [client 20.104.109.252:6104] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wong.php"] [unique_id "ad0xkrBo7Bc8I7P_P--phAAAAMg"]
[Tue Apr 14 02:10:26.938202 2026] [:error] [pid 60317:tid 60347] [client 20.104.109.252:6039] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/up.php"] [unique_id "ad0xkrBo7Bc8I7P_P--phwAAAMc"]
[Tue Apr 14 02:10:27.362389 2026] [:error] [pid 60317:tid 60355] [client 20.104.109.252:6051] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/up.php"] [unique_id "ad0xk7Bo7Bc8I7P_P--pigAAAM8"]
[Tue Apr 14 02:10:27.920956 2026] [:error] [pid 59915:tid 59980] [client 20.104.109.252:6016] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/up.php"] [unique_id "ad0xk4eTNdEemByf99hJlAAAAIk"]
[Tue Apr 14 02:10:28.351021 2026] [:error] [pid 59913:tid 59936] [client 20.104.109.252:6068] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/up.php"] [unique_id "ad0xlK5XvQ9C-gZtr2y1AQAAABM"]
[Tue Apr 14 02:10:28.806511 2026] [:error] [pid 59913:tid 59923] [client 20.104.109.252:6142] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/upfile.php"] [unique_id "ad0xlK5XvQ9C-gZtr2y1AgAAAAY"]
[Tue Apr 14 02:10:29.303918 2026] [:error] [pid 59913:tid 59932] [client 20.104.109.252:6122] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/upfile.php"] [unique_id "ad0xla5XvQ9C-gZtr2y1BAAAAA8"]
[Tue Apr 14 02:10:29.812865 2026] [:error] [pid 59915:tid 59991] [client 20.104.109.252:6022] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/upfile.php"] [unique_id "ad0xlYeTNdEemByf99hJmgAAAJQ"]
[Tue Apr 14 02:10:30.234142 2026] [:error] [pid 59915:tid 59971] [client 20.104.109.252:5972] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/upfile.php"] [unique_id "ad0xloeTNdEemByf99hJnAAAAIA"]
[Tue Apr 14 02:10:30.775027 2026] [:error] [pid 59915:tid 59987] [client 20.104.109.252:6045] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ALFA_DATA/alfacgiapi/upfile.php"] [unique_id "ad0xloeTNdEemByf99hJngAAAJA"]
[Tue Apr 14 02:10:31.216050 2026] [:error] [pid 59913:tid 59922] [client 20.104.109.252:6129] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ALFA_DATA/alfacgiapi/upfile.php"] [unique_id "ad0xl65XvQ9C-gZtr2y1DAAAAAU"]
[Tue Apr 14 02:10:31.682420 2026] [:error] [pid 59915:tid 59976] [client 20.104.109.252:5984] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ALFA_DATA/alfacgiapi/upfile.php"] [unique_id "ad0xl4eTNdEemByf99hJoAAAAIU"]
[Tue Apr 14 02:10:32.114692 2026] [:error] [pid 60317:tid 60362] [client 20.104.109.252:6072] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ALFA_DATA/alfacgiapi/upfile.php"] [unique_id "ad0xmLBo7Bc8I7P_P--pkgAAANY"]
[Tue Apr 14 02:10:32.535998 2026] [:error] [pid 59913:tid 59926] [client 20.104.109.252:6132] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/smtp.php"] [unique_id "ad0xmK5XvQ9C-gZtr2y1DgAAAAk"]
[Tue Apr 14 02:10:32.951703 2026] [:error] [pid 59915:tid 59994] [client 20.104.109.252:6074] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/smtp.php"] [unique_id "ad0xmIeTNdEemByf99hJrQAAAJc"]
[Tue Apr 14 02:10:33.370022 2026] [:error] [pid 60317:tid 60363] [client 20.104.109.252:6059] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/smtp.php"] [unique_id "ad0xmbBo7Bc8I7P_P--plQAAANc"]
[Tue Apr 14 02:10:33.789768 2026] [:error] [pid 59915:tid 59976] [client 20.104.109.252:5985] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/smtp.php"] [unique_id "ad0xmYeTNdEemByf99hJrwAAAIU"]
[Tue Apr 14 02:10:34.241065 2026] [:error] [pid 59914:tid 59951] [client 20.104.109.252:6020] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-hoard.php"] [unique_id "ad0xmuq0YMmB3OWbbUlXrwAAAEc"]
[Tue Apr 14 02:10:34.710754 2026] [:error] [pid 59915:tid 59983] [client 20.104.109.252:6014] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-hoard.php"] [unique_id "ad0xmoeTNdEemByf99hJtAAAAIw"]
[Tue Apr 14 02:10:35.134172 2026] [:error] [pid 59915:tid 59986] [client 20.104.109.252:6035] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-hoard.php"] [unique_id "ad0xm4eTNdEemByf99hJtQAAAI8"]
[Tue Apr 14 02:10:35.578686 2026] [:error] [pid 59913:tid 59929] [client 20.104.109.252:6048] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-hoard.php"] [unique_id "ad0xm65XvQ9C-gZtr2y1EQAAAAw"]
[Tue Apr 14 02:10:36.030198 2026] [:error] [pid 59913:tid 59921] [client 20.104.109.252:6076] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.tmb/users.php"] [unique_id "ad0xnK5XvQ9C-gZtr2y1EgAAAAQ"]
[Tue Apr 14 02:10:36.472941 2026] [:error] [pid 59913:tid 59918] [client 20.104.109.252:6137] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.tmb/users.php"] [unique_id "ad0xnK5XvQ9C-gZtr2y1EwAAAAE"]
[Tue Apr 14 02:10:37.019607 2026] [:error] [pid 59913:tid 59926] [client 20.104.109.252:6125] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.tmb/users.php"] [unique_id "ad0xna5XvQ9C-gZtr2y1FgAAAAk"]
[Tue Apr 14 02:10:37.490589 2026] [:error] [pid 59915:tid 59979] [client 20.104.109.252:6088] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.tmb/users.php"] [unique_id "ad0xnYeTNdEemByf99hJuwAAAIg"]
[Tue Apr 14 02:10:37.953482 2026] [:error] [pid 59913:tid 59924] [client 20.104.109.252:6028] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ALFA_DATA/alfacgiapi/menu.php"] [unique_id "ad0xna5XvQ9C-gZtr2y1GAAAAAc"]
[Tue Apr 14 02:10:38.543154 2026] [:error] [pid 59913:tid 59940] [client 20.104.109.252:5960] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ALFA_DATA/alfacgiapi/menu.php"] [unique_id "ad0xnq5XvQ9C-gZtr2y1GgAAABc"]
[Tue Apr 14 02:10:39.079906 2026] [:error] [pid 59915:tid 59992] [client 20.104.109.252:6004] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ALFA_DATA/alfacgiapi/menu.php"] [unique_id "ad0xn4eTNdEemByf99hJvAAAAJU"]
[Tue Apr 14 02:10:39.575890 2026] [:error] [pid 59915:tid 59983] [client 20.104.109.252:6023] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ALFA_DATA/alfacgiapi/menu.php"] [unique_id "ad0xn4eTNdEemByf99hJvQAAAIw"]
[Tue Apr 14 02:10:40.127146 2026] [:error] [pid 60317:tid 60340] [client 20.104.109.252:5974] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wsa.php"] [unique_id "ad0xoLBo7Bc8I7P_P--poAAAAMA"]
[Tue Apr 14 02:10:40.650512 2026] [:error] [pid 59915:tid 59988] [client 20.104.109.252:6065] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wsa.php"] [unique_id "ad0xoIeTNdEemByf99hJvgAAAJE"]
[Tue Apr 14 02:10:41.143253 2026] [:error] [pid 60317:tid 60360] [client 20.104.109.252:6062] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wsa.php"] [unique_id "ad0xobBo7Bc8I7P_P--ppAAAANQ"]
[Tue Apr 14 02:10:41.593378 2026] [:error] [pid 60317:tid 60361] [client 20.104.109.252:6073] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wsa.php"] [unique_id "ad0xobBo7Bc8I7P_P--ppgAAANU"]
[Tue Apr 14 02:10:42.059195 2026] [:error] [pid 60317:tid 60350] [client 20.104.109.252:6115] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-seo.php"] [unique_id "ad0xorBo7Bc8I7P_P--pqAAAAMo"]
[Tue Apr 14 02:10:42.517370 2026] [:error] [pid 59914:tid 59944] [client 20.104.109.252:6075] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-seo.php"] [unique_id "ad0xouq0YMmB3OWbbUlXuAAAAEA"]
[Tue Apr 14 02:10:43.025769 2026] [:error] [pid 59913:tid 59917] [client 20.104.109.252:5975] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-seo.php"] [unique_id "ad0xo65XvQ9C-gZtr2y1HQAAAAA"]
[Tue Apr 14 02:10:43.441290 2026] [:error] [pid 60317:tid 60362] [client 20.104.109.252:5961] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-seo.php"] [unique_id "ad0xo7Bo7Bc8I7P_P--pqwAAANY"]
[Tue Apr 14 02:10:43.964416 2026] [:error] [pid 59913:tid 59927] [client 20.104.109.252:6041] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-rex.php"] [unique_id "ad0xo65XvQ9C-gZtr2y1HwAAAAo"]
[Tue Apr 14 02:10:44.386730 2026] [:error] [pid 60317:tid 60345] [client 20.104.109.252:6024] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-rex.php"] [unique_id "ad0xpLBo7Bc8I7P_P--prAAAAMU"]
[Tue Apr 14 02:10:44.851474 2026] [:error] [pid 59915:tid 59982] [client 20.104.109.252:6102] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-rex.php"] [unique_id "ad0xpIeTNdEemByf99hJwAAAAIs"]
[Tue Apr 14 02:10:45.287904 2026] [:error] [pid 59915:tid 59985] [client 20.104.109.252:5981] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-rex.php"] [unique_id "ad0xpYeTNdEemByf99hJxQAAAI4"]
[Tue Apr 14 02:10:45.708125 2026] [:error] [pid 60317:tid 60354] [client 20.104.109.252:6040] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/warm.PhP7"] [unique_id "ad0xpbBo7Bc8I7P_P--puQAAAM4"]
[Tue Apr 14 02:10:46.130438 2026] [:error] [pid 59915:tid 59972] [client 20.104.109.252:6140] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/warm.PhP7"] [unique_id "ad0xpoeTNdEemByf99hJ1AAAAIE"]
[Tue Apr 14 02:10:46.642593 2026] [:error] [pid 59914:tid 59958] [client 20.104.109.252:5893] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/warm.PhP7"] [unique_id "ad0xpuq0YMmB3OWbbUlXwwAAAE4"]
[Tue Apr 14 02:10:47.116131 2026] [:error] [pid 60317:tid 60342] [client 20.104.109.252:6058] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/warm.PhP7"] [unique_id "ad0xp7Bo7Bc8I7P_P--pzAAAAMI"]
[Tue Apr 14 02:10:47.567626 2026] [:error] [pid 60317:tid 60351] [client 20.104.109.252:6025] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.tmb/warm.PhP7"] [unique_id "ad0xp7Bo7Bc8I7P_P--p0QAAAMs"]
[Tue Apr 14 02:10:48.000058 2026] [:error] [pid 60317:tid 60346] [client 20.104.109.252:6120] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.tmb/warm.PhP7"] [unique_id "ad0xp7Bo7Bc8I7P_P--p2QAAAMY"]
[Tue Apr 14 02:10:48.497699 2026] [:error] [pid 59913:tid 59923] [client 20.104.109.252:5999] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.tmb/warm.PhP7"] [unique_id "ad0xqK5XvQ9C-gZtr2y1JAAAAAY"]
[Tue Apr 14 02:10:48.997756 2026] [:error] [pid 59913:tid 59938] [client 20.104.109.252:6138] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.tmb/warm.PhP7"] [unique_id "ad0xqK5XvQ9C-gZtr2y1JQAAABU"]
[Tue Apr 14 02:10:49.445346 2026] [:error] [pid 59914:tid 59959] [client 20.104.109.252:6106] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alfa2.php"] [unique_id "ad0xqeq0YMmB3OWbbUlX0wAAAE8"]
[Tue Apr 14 02:10:49.915158 2026] [:error] [pid 59915:tid 59989] [client 20.104.109.252:6107] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alfa2.php"] [unique_id "ad0xqYeTNdEemByf99hKDQAAAJI"]
[Tue Apr 14 02:10:50.356937 2026] [:error] [pid 59914:tid 59946] [client 20.104.109.252:6071] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alfa2.php"] [unique_id "ad0xquq0YMmB3OWbbUlX1wAAAEI"]
[Tue Apr 14 02:10:50.824695 2026] [:error] [pid 59915:tid 59983] [client 20.104.109.252:5992] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alfa2.php"] [unique_id "ad0xqoeTNdEemByf99hKGQAAAIw"]
[Tue Apr 14 02:10:51.333524 2026] [:error] [pid 59914:tid 59953] [client 20.104.109.252:5909] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alfa-priv.php"] [unique_id "ad0xq-q0YMmB3OWbbUlX2wAAAEk"]
[Tue Apr 14 02:10:51.767092 2026] [:error] [pid 59914:tid 59961] [client 20.104.109.252:5987] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alfa-priv.php"] [unique_id "ad0xq-q0YMmB3OWbbUlX3AAAAFE"]
[Tue Apr 14 02:10:52.191616 2026] [:error] [pid 59914:tid 59951] [client 20.104.109.252:6117] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alfa-priv.php"] [unique_id "ad0xrOq0YMmB3OWbbUlX3QAAAEc"]
[Tue Apr 14 02:10:52.632740 2026] [:error] [pid 60317:tid 60346] [client 20.104.109.252:6070] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alfa-priv.php"] [unique_id "ad0xrLBo7Bc8I7P_P--p8gAAAMY"]
[Tue Apr 14 02:10:53.073518 2026] [:error] [pid 60317:tid 60362] [client 20.104.109.252:6066] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/alfa.php"] [unique_id "ad0xrbBo7Bc8I7P_P--p8wAAANY"]
[Tue Apr 14 02:10:53.530345 2026] [:error] [pid 59913:tid 59919] [client 20.104.109.252:5890] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/alfa.php"] [unique_id "ad0xra5XvQ9C-gZtr2y1KgAAAAI"]
[Tue Apr 14 02:10:54.013179 2026] [:error] [pid 59915:tid 59987] [client 20.104.109.252:6026] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/alfa.php"] [unique_id "ad0xroeTNdEemByf99hKHAAAAJA"]
[Tue Apr 14 02:10:54.435580 2026] [:error] [pid 60317:tid 60349] [client 20.104.109.252:5907] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/alfa.php"] [unique_id "ad0xrrBo7Bc8I7P_P--p9wAAAMk"]
[Tue Apr 14 02:10:54.881392 2026] [:error] [pid 60317:tid 60351] [client 20.104.109.252:6015] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/alfa.php"] [unique_id "ad0xrrBo7Bc8I7P_P--p-AAAAMs"]
[Tue Apr 14 02:10:55.317253 2026] [:error] [pid 60317:tid 60359] [client 20.104.109.252:6001] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/alfa.php"] [unique_id "ad0xr7Bo7Bc8I7P_P--p_AAAANM"]
[Tue Apr 14 02:10:55.730686 2026] [:error] [pid 59913:tid 59931] [client 20.104.109.252:6119] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/alfa.php"] [unique_id "ad0xr65XvQ9C-gZtr2y1LQAAAA4"]
[Tue Apr 14 02:10:56.158382 2026] [:error] [pid 60317:tid 60361] [client 20.104.109.252:5993] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/alfa.php"] [unique_id "ad0xsLBo7Bc8I7P_P--qAgAAANU"]
[Tue Apr 14 02:10:56.621342 2026] [:error] [pid 59915:tid 59978] [client 20.104.109.252:6077] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-include/alfa.php"] [unique_id "ad0xsIeTNdEemByf99hKIgAAAIc"]
[Tue Apr 14 02:11:02.726022 2026] [:error] [pid 60317:tid 60359] [client 20.104.109.252:6050] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ajax-actions.php"] [unique_id "ad0xtrBo7Bc8I7P_P--qHwAAANM"]
[Tue Apr 14 02:11:03.258622 2026] [:error] [pid 59913:tid 59919] [client 20.104.109.252:5955] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ajax-actions.php"] [unique_id "ad0xt65XvQ9C-gZtr2y1QgAAAAI"]
[Tue Apr 14 02:11:03.732370 2026] [:error] [pid 59913:tid 59921] [client 20.104.109.252:5976] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ajax-actions.php"] [unique_id "ad0xt65XvQ9C-gZtr2y1QwAAAAQ"]
[Tue Apr 14 02:11:04.158386 2026] [:error] [pid 60317:tid 60362] [client 20.104.109.252:5965] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ajax-actions.php"] [unique_id "ad0xuLBo7Bc8I7P_P--qIgAAANY"]
[Tue Apr 14 02:11:04.696864 2026] [:error] [pid 60317:tid 60352] [client 20.104.109.252:5970] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-p.php7"] [unique_id "ad0xuLBo7Bc8I7P_P--qJQAAAMw"]
[Tue Apr 14 02:11:05.205344 2026] [:error] [pid 60317:tid 60344] [client 20.104.109.252:5978] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-p.php7"] [unique_id "ad0xubBo7Bc8I7P_P--qKAAAAMQ"]
[Tue Apr 14 02:11:05.762947 2026] [:error] [pid 59914:tid 59960] [client 20.104.109.252:6002] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-p.php7"] [unique_id "ad0xueq0YMmB3OWbbUlX5wAAAFA"]
[Tue Apr 14 02:11:06.248800 2026] [:error] [pid 59915:tid 59983] [client 20.104.109.252:6061] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-p.php7"] [unique_id "ad0xuoeTNdEemByf99hKMAAAAIw"]
[Tue Apr 14 02:11:07.038371 2026] [:error] [pid 60317:tid 60362] [client 20.104.109.252:5988] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/user/cloud.php"] [unique_id "ad0xu7Bo7Bc8I7P_P--qLAAAANY"]
[Tue Apr 14 02:11:07.450805 2026] [:error] [pid 59915:tid 59981] [client 20.104.109.252:5990] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/user/cloud.php"] [unique_id "ad0xu4eTNdEemByf99hKMwAAAIo"]
[Tue Apr 14 02:11:07.874499 2026] [:error] [pid 60317:tid 60343] [client 20.104.109.252:6053] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/user/cloud.php"] [unique_id "ad0xu7Bo7Bc8I7P_P--qLgAAAMM"]
[Tue Apr 14 02:11:08.301491 2026] [:error] [pid 60317:tid 60358] [client 20.104.109.252:6081] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/user/cloud.php"] [unique_id "ad0xvLBo7Bc8I7P_P--qMQAAANI"]
[Tue Apr 14 02:11:08.728937 2026] [:error] [pid 60317:tid 60344] [client 20.104.109.252:5915] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ebs.php7"] [unique_id "ad0xvLBo7Bc8I7P_P--qMwAAAMQ"]
[Tue Apr 14 02:11:09.159664 2026] [:error] [pid 60317:tid 60360] [client 20.104.109.252:6064] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ebs.php7"] [unique_id "ad0xvbBo7Bc8I7P_P--qNgAAANQ"]
[Tue Apr 14 02:11:09.578139 2026] [:error] [pid 60317:tid 60350] [client 20.104.109.252:5986] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ebs.php7"] [unique_id "ad0xvbBo7Bc8I7P_P--qOQAAAMo"]
[Tue Apr 14 02:11:09.996593 2026] [:error] [pid 59915:tid 59980] [client 20.104.109.252:5840] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ebs.php7"] [unique_id "ad0xvYeTNdEemByf99hKNQAAAIk"]
[Tue Apr 14 02:11:10.408793 2026] [:error] [pid 60317:tid 60354] [client 20.104.109.252:5964] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fileman/php/upload.php"] [unique_id "ad0xvrBo7Bc8I7P_P--qPAAAAM4"]
[Tue Apr 14 02:11:10.866733 2026] [:error] [pid 59913:tid 59938] [client 20.104.109.252:5997] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fileman/php/upload.php"] [unique_id "ad0xvq5XvQ9C-gZtr2y1RQAAABU"]
[Tue Apr 14 02:11:11.309036 2026] [:error] [pid 59915:tid 59976] [client 20.104.109.252:6143] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fileman/php/upload.php"] [unique_id "ad0xv4eTNdEemByf99hKNgAAAIU"]
[Tue Apr 14 02:11:11.748368 2026] [:error] [pid 59915:tid 59995] [client 20.104.109.252:6103] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fileman/php/upload.php"] [unique_id "ad0xv4eTNdEemByf99hKNwAAAJg"]
[Tue Apr 14 02:11:12.902494 2026] [:error] [pid 60317:tid 60358] [client 20.104.109.252:5979] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-aa.php"] [unique_id "ad0xwLBo7Bc8I7P_P--qQwAAANI"]
[Tue Apr 14 02:11:14.043510 2026] [:error] [pid 60317:tid 60355] [client 20.104.109.252:5963] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-aa.php"] [unique_id "ad0xwrBo7Bc8I7P_P--qSAAAAM8"]
[Tue Apr 14 02:11:14.728858 2026] [:error] [pid 60317:tid 60347] [client 20.104.109.252:5957] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-aa.php"] [unique_id "ad0xwrBo7Bc8I7P_P--qSQAAAMc"]
[Tue Apr 14 02:11:15.504065 2026] [:error] [pid 59913:tid 59922] [client 20.104.109.252:5901] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-aa.php"] [unique_id "ad0xw65XvQ9C-gZtr2y1RwAAAAU"]
[Tue Apr 14 02:11:15.972294 2026] [:error] [pid 59915:tid 59972] [client 20.104.109.252:6098] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/WSO.php"] [unique_id "ad0xw4eTNdEemByf99hKOgAAAIE"]
[Tue Apr 14 02:11:16.480815 2026] [:error] [pid 59915:tid 59985] [client 20.104.109.252:6091] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/WSO.php"] [unique_id "ad0xxIeTNdEemByf99hKPAAAAI4"]
[Tue Apr 14 02:11:16.913312 2026] [:error] [pid 59914:tid 59958] [client 20.104.109.252:5888] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/WSO.php"] [unique_id "ad0xxOq0YMmB3OWbbUlX7wAAAE4"]
[Tue Apr 14 02:11:17.395213 2026] [:error] [pid 60317:tid 60360] [client 20.104.109.252:5991] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/WSO.php"] [unique_id "ad0xxbBo7Bc8I7P_P--qTAAAANQ"]
[Tue Apr 14 02:11:17.841249 2026] [:error] [pid 59913:tid 59917] [client 20.104.109.252:5962] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "ad0xxa5XvQ9C-gZtr2y1SAAAAAA"]
[Tue Apr 14 02:11:18.273096 2026] [:error] [pid 59913:tid 59919] [client 20.104.109.252:6013] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "ad0xxq5XvQ9C-gZtr2y1SQAAAAI"]
[Tue Apr 14 02:11:18.700003 2026] [:error] [pid 59915:tid 59980] [client 20.104.109.252:5921] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "ad0xxoeTNdEemByf99hKQQAAAIk"]
[Tue Apr 14 02:11:19.167217 2026] [:error] [pid 59914:tid 59949] [client 20.104.109.252:6006] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "ad0xx-q0YMmB3OWbbUlX8gAAAEU"]
[Tue Apr 14 02:11:19.607451 2026] [:error] [pid 59914:tid 59965] [client 20.104.109.252:5924] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ab.php"] [unique_id "ad0xx-q0YMmB3OWbbUlX9QAAAFU"]
[Tue Apr 14 02:11:20.053006 2026] [:error] [pid 59914:tid 59961] [client 20.104.109.252:5846] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ab.php"] [unique_id "ad0xyOq0YMmB3OWbbUlX9wAAAFE"]
[Tue Apr 14 02:11:20.500615 2026] [:error] [pid 59914:tid 59945] [client 20.104.109.252:5902] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ab.php"] [unique_id "ad0xyOq0YMmB3OWbbUlX-gAAAEE"]
[Tue Apr 14 02:11:20.920009 2026] [:error] [pid 59915:tid 59973] [client 20.104.109.252:5891] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ab.php"] [unique_id "ad0xyIeTNdEemByf99hKQwAAAII"]
[Tue Apr 14 02:11:21.483435 2026] [:error] [pid 59913:tid 59918] [client 20.104.109.252:5943] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/anonse/lock360.php"] [unique_id "ad0xya5XvQ9C-gZtr2y1SwAAAAE"]
[Tue Apr 14 02:11:21.951923 2026] [:error] [pid 59914:tid 59958] [client 20.104.109.252:5998] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/anonse/lock360.php"] [unique_id "ad0xyeq0YMmB3OWbbUlX_wAAAE4"]
[Tue Apr 14 02:11:22.487840 2026] [:error] [pid 59914:tid 59944] [client 20.104.109.252:6007] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/anonse/lock360.php"] [unique_id "ad0xyuq0YMmB3OWbbUlYAgAAAEA"]
[Tue Apr 14 02:11:22.941866 2026] [:error] [pid 59914:tid 59965] [client 20.104.109.252:5995] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/anonse/lock360.php"] [unique_id "ad0xyuq0YMmB3OWbbUlYAwAAAFU"]
[Tue Apr 14 02:11:23.364731 2026] [:error] [pid 59914:tid 59961] [client 20.104.109.252:6136] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file5.php"] [unique_id "ad0xy-q0YMmB3OWbbUlYBAAAAFE"]
[Tue Apr 14 02:11:23.814538 2026] [:error] [pid 59914:tid 59953] [client 20.104.109.252:5951] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file5.php"] [unique_id "ad0xy-q0YMmB3OWbbUlYBwAAAEk"]
[Tue Apr 14 02:11:24.319414 2026] [:error] [pid 59914:tid 59960] [client 20.104.109.252:5903] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file5.php"] [unique_id "ad0xzOq0YMmB3OWbbUlYCwAAAFA"]
[Tue Apr 14 02:11:24.791395 2026] [:error] [pid 59914:tid 59954] [client 20.104.109.252:6049] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file5.php"] [unique_id "ad0xzOq0YMmB3OWbbUlYDQAAAEo"]
[Tue Apr 14 02:11:25.287037 2026] [:error] [pid 59914:tid 59968] [client 20.104.109.252:5914] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sitemaps.php"] [unique_id "ad0xzeq0YMmB3OWbbUlYEAAAAFg"]
[Tue Apr 14 02:11:25.698860 2026] [:error] [pid 59914:tid 59961] [client 20.104.109.252:5933] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sitemaps.php"] [unique_id "ad0xzeq0YMmB3OWbbUlYEwAAAFE"]
[Tue Apr 14 02:11:26.227080 2026] [:error] [pid 59914:tid 59963] [client 20.104.109.252:5954] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sitemaps.php"] [unique_id "ad0xzuq0YMmB3OWbbUlYFgAAAFM"]
[Tue Apr 14 02:11:26.755246 2026] [:error] [pid 60317:tid 60357] [client 20.104.109.252:5884] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sitemaps.php"] [unique_id "ad0xzrBo7Bc8I7P_P--qVAAAANE"]
[Tue Apr 14 02:11:27.169209 2026] [:error] [pid 59914:tid 59968] [client 20.104.109.252:5982] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "ad0xz-q0YMmB3OWbbUlYGQAAAFg"]
[Tue Apr 14 02:11:27.597481 2026] [:error] [pid 59914:tid 59967] [client 20.104.109.252:6109] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "ad0xz-q0YMmB3OWbbUlYGwAAAFc"]
[Tue Apr 14 02:11:28.124713 2026] [:error] [pid 59914:tid 59951] [client 20.104.109.252:5930] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "ad0x0Oq0YMmB3OWbbUlYHAAAAEc"]
[Tue Apr 14 02:11:28.547814 2026] [:error] [pid 59914:tid 59955] [client 20.104.109.252:5945] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "ad0x0Oq0YMmB3OWbbUlYHgAAAEs"]
[Tue Apr 14 02:11:29.013268 2026] [:error] [pid 59914:tid 59968] [client 20.104.109.252:6047] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/load.php"] [unique_id "ad0x0eq0YMmB3OWbbUlYIQAAAFg"]
[Tue Apr 14 02:11:29.476172 2026] [:error] [pid 59915:tid 59976] [client 20.104.109.252:6063] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/load.php"] [unique_id "ad0x0YeTNdEemByf99hKSwAAAIU"]
[Tue Apr 14 02:11:30.044145 2026] [:error] [pid 59914:tid 59948] [client 20.104.109.252:5983] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/load.php"] [unique_id "ad0x0uq0YMmB3OWbbUlYJwAAAEQ"]
[Tue Apr 14 02:11:30.667383 2026] [:error] [pid 59915:tid 59985] [client 20.104.109.252:5967] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/load.php"] [unique_id "ad0x0oeTNdEemByf99hKTAAAAI4"]
[Tue Apr 14 02:11:31.114737 2026] [:error] [pid 59915:tid 59993] [client 20.104.109.252:5927] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/man.php"] [unique_id "ad0x04eTNdEemByf99hKTgAAAJY"]
[Tue Apr 14 02:11:31.556685 2026] [:error] [pid 59915:tid 59988] [client 20.104.109.252:5894] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/man.php"] [unique_id "ad0x04eTNdEemByf99hKUAAAAJE"]
[Tue Apr 14 02:11:32.162171 2026] [:error] [pid 59915:tid 59989] [client 20.104.109.252:6055] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/man.php"] [unique_id "ad0x1IeTNdEemByf99hKUwAAAJI"]
[Tue Apr 14 02:11:32.615318 2026] [:error] [pid 60317:tid 60361] [client 20.104.109.252:5912] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/man.php"] [unique_id "ad0x1LBo7Bc8I7P_P--qVwAAANU"]
[Tue Apr 14 02:11:33.091436 2026] [:error] [pid 59913:tid 59923] [client 20.104.109.252:5832] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "ad0x1a5XvQ9C-gZtr2y1UgAAAAY"]
[Tue Apr 14 02:11:33.526692 2026] [:error] [pid 59915:tid 59974] [client 20.104.109.252:5844] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "ad0x1YeTNdEemByf99hKXgAAAIM"]
[Tue Apr 14 02:11:33.963062 2026] [:error] [pid 59913:tid 59922] [client 20.104.109.252:5958] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "ad0x1a5XvQ9C-gZtr2y1UwAAAAU"]
[Tue Apr 14 02:11:34.399094 2026] [:error] [pid 59914:tid 59944] [client 20.104.109.252:5857] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/flower.php"] [unique_id "ad0x1uq0YMmB3OWbbUlYKwAAAEA"]
[Tue Apr 14 02:11:34.861577 2026] [:error] [pid 59914:tid 59956] [client 20.104.109.252:5956] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Api/api.php"] [unique_id "ad0x1uq0YMmB3OWbbUlYLAAAAEw"]
[Tue Apr 14 02:11:35.402141 2026] [:error] [pid 60317:tid 60351] [client 20.104.109.252:5919] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Api/api.php"] [unique_id "ad0x17Bo7Bc8I7P_P--qWwAAAMs"]
[Tue Apr 14 02:11:35.914219 2026] [:error] [pid 60317:tid 60343] [client 20.104.109.252:5916] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Api/api.php"] [unique_id "ad0x17Bo7Bc8I7P_P--qXAAAAMM"]
[Tue Apr 14 02:11:36.358772 2026] [:error] [pid 59913:tid 59918] [client 20.104.109.252:5980] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Api/api.php"] [unique_id "ad0x2K5XvQ9C-gZtr2y1VwAAAAE"]
[Tue Apr 14 02:11:36.781884 2026] [:error] [pid 59914:tid 59946] [client 20.104.109.252:5989] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/FileMgrFiles/hui0uh.php"] [unique_id "ad0x2Oq0YMmB3OWbbUlYLwAAAEI"]
[Tue Apr 14 02:11:37.238248 2026] [:error] [pid 60317:tid 60340] [client 20.104.109.252:5845] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/FileMgrFiles/hui0uh.php"] [unique_id "ad0x2bBo7Bc8I7P_P--qXwAAAMA"]
[Tue Apr 14 02:11:37.679271 2026] [:error] [pid 59913:tid 59932] [client 20.104.109.252:5839] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/FileMgrFiles/hui0uh.php"] [unique_id "ad0x2a5XvQ9C-gZtr2y1WQAAAA8"]
[Tue Apr 14 02:11:38.142706 2026] [:error] [pid 60317:tid 60354] [client 20.104.109.252:6000] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/FileMgrFiles/hui0uh.php"] [unique_id "ad0x2rBo7Bc8I7P_P--qYgAAAM4"]
[Tue Apr 14 02:11:38.603175 2026] [:error] [pid 59913:tid 59936] [client 20.104.109.252:5969] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Yanzmini.php"] [unique_id "ad0x2q5XvQ9C-gZtr2y1WwAAABM"]
[Tue Apr 14 02:11:39.246071 2026] [:error] [pid 59915:tid 59981] [client 20.104.109.252:5996] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Yanzmini.php"] [unique_id "ad0x24eTNdEemByf99hKYwAAAIo"]
[Tue Apr 14 02:11:39.716488 2026] [:error] [pid 59915:tid 59978] [client 20.104.109.252:6108] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Yanzmini.php"] [unique_id "ad0x24eTNdEemByf99hKZQAAAIc"]
[Tue Apr 14 02:11:40.328032 2026] [:error] [pid 59915:tid 59972] [client 20.104.109.252:5837] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Yanzmini.php"] [unique_id "ad0x3IeTNdEemByf99hKaQAAAIE"]
[Tue Apr 14 02:11:40.903325 2026] [:error] [pid 60317:tid 60341] [client 20.104.109.252:5899] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aff.php"] [unique_id "ad0x3LBo7Bc8I7P_P--qaAAAAME"]
[Tue Apr 14 02:11:41.330316 2026] [:error] [pid 59914:tid 59960] [client 20.104.109.252:5940] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aff.php"] [unique_id "ad0x3eq0YMmB3OWbbUlYMwAAAFA"]
[Tue Apr 14 02:11:41.803120 2026] [:error] [pid 59915:tid 59974] [client 20.104.109.252:5947] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aff.php"] [unique_id "ad0x3YeTNdEemByf99hKawAAAIM"]
[Tue Apr 14 02:11:42.310765 2026] [:error] [pid 60317:tid 60363] [client 20.104.109.252:6011] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aff.php"] [unique_id "ad0x3rBo7Bc8I7P_P--qagAAANc"]
[Tue Apr 14 02:11:42.887808 2026] [:error] [pid 59915:tid 59979] [client 20.104.109.252:5853] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asasx.php"] [unique_id "ad0x3oeTNdEemByf99hKbAAAAIg"]
[Tue Apr 14 02:11:43.324955 2026] [:error] [pid 59914:tid 59944] [client 20.104.109.252:5911] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asasx.php"] [unique_id "ad0x3-q0YMmB3OWbbUlYNQAAAEA"]
[Tue Apr 14 02:11:43.909900 2026] [:error] [pid 59914:tid 59957] [client 20.104.109.252:5922] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asasx.php"] [unique_id "ad0x3-q0YMmB3OWbbUlYNwAAAE0"]
[Tue Apr 14 02:11:44.330228 2026] [:error] [pid 59914:tid 59953] [client 20.104.109.252:5904] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asasx.php"] [unique_id "ad0x4Oq0YMmB3OWbbUlYOQAAAEk"]
[Tue Apr 14 02:11:44.795475 2026] [:error] [pid 59913:tid 59932] [client 20.104.109.252:6057] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/auth.php"] [unique_id "ad0x4K5XvQ9C-gZtr2y1YwAAAA8"]
[Tue Apr 14 02:11:45.229349 2026] [:error] [pid 59915:tid 59981] [client 20.104.109.252:5908] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/auth.php"] [unique_id "ad0x4YeTNdEemByf99hKcAAAAIo"]
[Tue Apr 14 02:11:45.643666 2026] [:error] [pid 60317:tid 60341] [client 20.104.109.252:5936] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/auth.php"] [unique_id "ad0x4bBo7Bc8I7P_P--qcAAAAME"]
[Tue Apr 14 02:11:46.122960 2026] [:error] [pid 59915:tid 59980] [client 20.104.109.252:5900] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/auth.php"] [unique_id "ad0x4oeTNdEemByf99hKcgAAAIk"]
[Tue Apr 14 02:11:46.592936 2026] [:error] [pid 60317:tid 60359] [client 20.104.109.252:6085] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/backup/index.php"] [unique_id "ad0x4rBo7Bc8I7P_P--qcwAAANM"]
[Tue Apr 14 02:11:47.015438 2026] [:error] [pid 59913:tid 59920] [client 20.104.109.252:5973] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/backup/index.php"] [unique_id "ad0x465XvQ9C-gZtr2y1ZwAAAAM"]
[Tue Apr 14 02:11:47.438494 2026] [:error] [pid 60317:tid 60360] [client 20.104.109.252:5920] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/backup/index.php"] [unique_id "ad0x47Bo7Bc8I7P_P--qdQAAANQ"]
[Tue Apr 14 02:11:47.921664 2026] [:error] [pid 60317:tid 60340] [client 20.104.109.252:5833] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/backup/index.php"] [unique_id "ad0x47Bo7Bc8I7P_P--qdgAAAMA"]
[Tue Apr 14 02:11:48.405378 2026] [:error] [pid 59913:tid 59917] [client 20.104.109.252:5898] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cache.php"] [unique_id "ad0x5K5XvQ9C-gZtr2y1agAAAAA"]
[Tue Apr 14 02:11:48.871382 2026] [:error] [pid 60317:tid 60357] [client 20.104.109.252:5913] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cache.php"] [unique_id "ad0x5LBo7Bc8I7P_P--qeQAAANE"]
[Tue Apr 14 02:11:49.326827 2026] [:error] [pid 59913:tid 59918] [client 20.104.109.252:5966] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cache.php"] [unique_id "ad0x5a5XvQ9C-gZtr2y1bAAAAAE"]
[Tue Apr 14 02:11:49.809766 2026] [:error] [pid 60317:tid 60359] [client 20.104.109.252:5935] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cache.php"] [unique_id "ad0x5bBo7Bc8I7P_P--qfQAAANM"]
[Tue Apr 14 02:11:50.330854 2026] [:error] [pid 59913:tid 59932] [client 20.104.109.252:5892] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class-wp.php"] [unique_id "ad0x5q5XvQ9C-gZtr2y1bQAAAA8"]
[Tue Apr 14 02:11:50.774957 2026] [:error] [pid 59914:tid 59955] [client 20.104.109.252:5847] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class-wp.php"] [unique_id "ad0x5uq0YMmB3OWbbUlYPQAAAEs"]
[Tue Apr 14 02:11:51.216934 2026] [:error] [pid 59914:tid 59959] [client 20.104.109.252:6005] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class-wp.php"] [unique_id "ad0x5-q0YMmB3OWbbUlYPgAAAE8"]
[Tue Apr 14 02:11:51.653933 2026] [:error] [pid 59915:tid 59987] [client 20.104.109.252:5948] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class-wp.php"] [unique_id "ad0x54eTNdEemByf99hKegAAAJA"]
[Tue Apr 14 02:11:52.165596 2026] [:error] [pid 60317:tid 60358] [client 20.104.109.252:5867] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/date.php"] [unique_id "ad0x6LBo7Bc8I7P_P--qggAAANI"]
[Tue Apr 14 02:11:52.765046 2026] [:error] [pid 60317:tid 60347] [client 20.104.109.252:5953] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/date.php"] [unique_id "ad0x6LBo7Bc8I7P_P--qgwAAAMc"]
[Tue Apr 14 02:11:53.199561 2026] [:error] [pid 59915:tid 59978] [client 20.104.109.252:5917] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/date.php"] [unique_id "ad0x6YeTNdEemByf99hKewAAAIc"]
[Tue Apr 14 02:11:53.661039 2026] [:error] [pid 59915:tid 59989] [client 20.104.109.252:5830] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/date.php"] [unique_id "ad0x6YeTNdEemByf99hKfQAAAJI"]
[Tue Apr 14 02:11:54.107849 2026] [:error] [pid 59913:tid 59930] [client 20.104.109.252:5994] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/delpaths.php"] [unique_id "ad0x6q5XvQ9C-gZtr2y1cQAAAA0"]
[Tue Apr 14 02:11:54.570249 2026] [:error] [pid 59915:tid 59995] [client 20.104.109.252:5865] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/delpaths.php"] [unique_id "ad0x6oeTNdEemByf99hKgAAAAJg"]
[Tue Apr 14 02:11:54.994722 2026] [:error] [pid 60317:tid 60341] [client 20.104.109.252:5897] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/delpaths.php"] [unique_id "ad0x6rBo7Bc8I7P_P--qiQAAAME"]
[Tue Apr 14 02:11:55.409642 2026] [:error] [pid 60317:tid 60348] [client 20.104.109.252:5866] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/delpaths.php"] [unique_id "ad0x67Bo7Bc8I7P_P--qigAAAMg"]
[Tue Apr 14 02:11:55.843265 2026] [:error] [pid 59914:tid 59948] [client 20.104.109.252:5906] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/engine.php"] [unique_id "ad0x6-q0YMmB3OWbbUlYRAAAAEQ"]
[Tue Apr 14 02:11:56.270845 2026] [:error] [pid 59915:tid 59984] [client 20.104.109.252:6008] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/engine.php"] [unique_id "ad0x7IeTNdEemByf99hKgwAAAI0"]
[Tue Apr 14 02:11:56.726718 2026] [:error] [pid 60317:tid 60361] [client 20.104.109.252:5761] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/engine.php"] [unique_id "ad0x7LBo7Bc8I7P_P--qkAAAANU"]
[Tue Apr 14 02:11:57.170534 2026] [:error] [pid 60317:tid 60359] [client 20.104.109.252:5836] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/engine.php"] [unique_id "ad0x7bBo7Bc8I7P_P--qkgAAANM"]
[Tue Apr 14 02:11:57.594821 2026] [:error] [pid 60317:tid 60341] [client 20.104.109.252:5877] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fix.php"] [unique_id "ad0x7bBo7Bc8I7P_P--qkwAAAME"]
[Tue Apr 14 02:11:58.122648 2026] [:error] [pid 60317:tid 60345] [client 20.104.109.252:5826] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fix.php"] [unique_id "ad0x7rBo7Bc8I7P_P--qlgAAAMU"]
[Tue Apr 14 02:11:58.578197 2026] [:error] [pid 60317:tid 60346] [client 20.104.109.252:5977] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fix.php"] [unique_id "ad0x7rBo7Bc8I7P_P--qmwAAAMY"]
[Tue Apr 14 02:11:59.004445 2026] [:error] [pid 59913:tid 59924] [client 20.104.109.252:6038] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fix.php"] [unique_id "ad0x765XvQ9C-gZtr2y1cwAAAAc"]
[Tue Apr 14 02:11:59.447125 2026] [:error] [pid 60317:tid 60348] [client 20.104.109.252:5852] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fonts.php"] [unique_id "ad0x77Bo7Bc8I7P_P--qngAAAMg"]
[Tue Apr 14 02:11:59.891824 2026] [:error] [pid 60317:tid 60355] [client 20.104.109.252:6008] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fonts.php"] [unique_id "ad0x77Bo7Bc8I7P_P--qogAAAM8"]
[Tue Apr 14 02:12:00.390881 2026] [:error] [pid 59915:tid 59976] [client 20.104.109.252:5949] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fonts.php"] [unique_id "ad0x8IeTNdEemByf99hKhwAAAIU"]
[Tue Apr 14 02:12:00.894000 2026] [:error] [pid 60317:tid 60358] [client 20.104.109.252:5848] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fonts.php"] [unique_id "ad0x8LBo7Bc8I7P_P--qpAAAANI"]
[Tue Apr 14 02:12:01.364993 2026] [:error] [pid 60317:tid 60359] [client 20.104.109.252:5937] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/item.php"] [unique_id "ad0x8bBo7Bc8I7P_P--qpgAAANM"]
[Tue Apr 14 02:12:01.785780 2026] [:error] [pid 59915:tid 59984] [client 20.104.109.252:5859] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/item.php"] [unique_id "ad0x8YeTNdEemByf99hKigAAAI0"]
[Tue Apr 14 02:12:07.632522 2026] [:error] [pid 60317:tid 60346] [client 20.104.109.252:5880] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-comments-pos.php"] [unique_id "ad0x97Bo7Bc8I7P_P--qxAAAAMY"]
[Tue Apr 14 02:12:08.047687 2026] [:error] [pid 59914:tid 59946] [client 20.104.109.252:5878] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-comments-pos.php"] [unique_id "ad0x-Oq0YMmB3OWbbUlYSQAAAEI"]
[Tue Apr 14 02:12:08.483174 2026] [:error] [pid 60317:tid 60359] [client 20.104.109.252:5807] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-comments-pos.php"] [unique_id "ad0x-LBo7Bc8I7P_P--qxgAAANM"]
[Tue Apr 14 02:12:08.923417 2026] [:error] [pid 60317:tid 60344] [client 20.104.109.252:5856] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-comments-pos.php"] [unique_id "ad0x-LBo7Bc8I7P_P--qxwAAAMQ"]
[Tue Apr 14 02:12:09.340287 2026] [:error] [pid 60317:tid 60354] [client 20.104.109.252:5883] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-link.php"] [unique_id "ad0x-bBo7Bc8I7P_P--qyQAAAM4"]
[Tue Apr 14 02:12:09.775917 2026] [:error] [pid 60317:tid 60346] [client 20.104.109.252:5707] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-link.php"] [unique_id "ad0x-bBo7Bc8I7P_P--qzQAAAMY"]
[Tue Apr 14 02:12:10.201602 2026] [:error] [pid 59914:tid 59945] [client 20.104.109.252:6078] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-link.php"] [unique_id "ad0x-uq0YMmB3OWbbUlYSwAAAEE"]
[Tue Apr 14 02:12:10.622970 2026] [:error] [pid 59914:tid 59967] [client 20.104.109.252:6003] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-link.php"] [unique_id "ad0x-uq0YMmB3OWbbUlYTAAAAFc"]
[Tue Apr 14 02:12:11.055462 2026] [:error] [pid 60317:tid 60345] [client 20.104.109.252:5838] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-cro.php"] [unique_id "ad0x-7Bo7Bc8I7P_P--q0QAAAMU"]
[Tue Apr 14 02:12:11.515651 2026] [:error] [pid 59914:tid 59964] [client 20.104.109.252:5813] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-cro.php"] [unique_id "ad0x--q0YMmB3OWbbUlYTgAAAFQ"]
[Tue Apr 14 02:12:11.970438 2026] [:error] [pid 59913:tid 59925] [client 20.104.109.252:5944] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-cro.php"] [unique_id "ad0x-65XvQ9C-gZtr2y1eAAAAAg"]
[Tue Apr 14 02:12:12.402630 2026] [:error] [pid 59913:tid 59934] [client 20.104.109.252:5766] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-cro.php"] [unique_id "ad0x_K5XvQ9C-gZtr2y1eQAAABE"]
[Tue Apr 14 02:12:12.825378 2026] [:error] [pid 59914:tid 59961] [client 20.104.109.252:6009] [client 20.104.109.252] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/abou.php"] [unique_id "ad0x_Oq0YMmB3OWbbUlYUAAAAFE"]
[Tue Apr 14 02:12:13.279709 2026] [:error] [pid 59913:tid 59932] [client 20.104.109.252:5918] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/map.php"] [unique_id "ad0x_a5XvQ9C-gZtr2y1ewAAAA8"]
[Tue Apr 14 02:12:13.691290 2026] [:error] [pid 60317:tid 60360] [client 20.104.109.252:5791] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/map.php"] [unique_id "ad0x_bBo7Bc8I7P_P--q1QAAANQ"]
[Tue Apr 14 02:12:14.109032 2026] [:error] [pid 60317:tid 60359] [client 20.104.109.252:5825] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/map.php"] [unique_id "ad0x_rBo7Bc8I7P_P--q1wAAANM"]
[Tue Apr 14 02:12:14.523028 2026] [:error] [pid 59914:tid 59944] [client 20.104.109.252:5925] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/map.php"] [unique_id "ad0x_uq0YMmB3OWbbUlYUgAAAEA"]
[Tue Apr 14 02:12:14.983808 2026] [:error] [pid 60317:tid 60343] [client 20.104.109.252:5786] [client 20.104.109.252] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ioxi-o.php"] [unique_id "ad0x_rBo7Bc8I7P_P--q2QAAAMM"]
[Tue Apr 14 02:12:15.412313 2026] [:error] [pid 59913:tid 59927] [client 20.104.109.252:5869] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-mai.php"] [unique_id "ad0x_65XvQ9C-gZtr2y1fwAAAAo"]
[Tue Apr 14 02:12:15.827328 2026] [:error] [pid 60317:tid 60356] [client 20.104.109.252:5872] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-mai.php"] [unique_id "ad0x_7Bo7Bc8I7P_P--q3QAAANA"]
[Tue Apr 14 02:12:16.276303 2026] [:error] [pid 59913:tid 59940] [client 20.104.109.252:6079] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-mai.php"] [unique_id "ad0yAK5XvQ9C-gZtr2y1gQAAABc"]
[Tue Apr 14 02:12:16.696142 2026] [:error] [pid 59913:tid 59928] [client 20.104.109.252:5849] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-mai.php"] [unique_id "ad0yAK5XvQ9C-gZtr2y1ggAAAAs"]
[Tue Apr 14 02:12:17.123898 2026] [:error] [pid 59914:tid 59958] [client 20.104.109.252:5780] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-taglin.php"] [unique_id "ad0yAeq0YMmB3OWbbUlYUwAAAE4"]
[Tue Apr 14 02:12:17.538340 2026] [:error] [pid 59913:tid 59941] [client 20.104.109.252:5931] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-taglin.php"] [unique_id "ad0yAa5XvQ9C-gZtr2y1hQAAABg"]
[Tue Apr 14 02:12:17.966443 2026] [:error] [pid 59913:tid 59917] [client 20.104.109.252:5796] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-taglin.php"] [unique_id "ad0yAa5XvQ9C-gZtr2y1hwAAAAA"]
[Tue Apr 14 02:12:18.390684 2026] [:error] [pid 59914:tid 59947] [client 20.104.109.252:5773] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-taglin.php"] [unique_id "ad0yAuq0YMmB3OWbbUlYVQAAAEM"]
[Tue Apr 14 02:12:18.802012 2026] [:error] [pid 59915:tid 59995] [client 20.104.109.252:5932] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-editor.php"] [unique_id "ad0yAoeTNdEemByf99hKrAAAAJg"]
[Tue Apr 14 02:12:19.222203 2026] [:error] [pid 60317:tid 60350] [client 20.104.109.252:5941] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-editor.php"] [unique_id "ad0yA7Bo7Bc8I7P_P--q4QAAAMo"]
[Tue Apr 14 02:12:19.647782 2026] [:error] [pid 60317:tid 60349] [client 20.104.109.252:6121] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-editor.php"] [unique_id "ad0yA7Bo7Bc8I7P_P--q5gAAAMk"]
[Tue Apr 14 02:12:20.065778 2026] [:error] [pid 59913:tid 59924] [client 20.104.109.252:6052] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-editor.php"] [unique_id "ad0yBK5XvQ9C-gZtr2y1jAAAAAc"]
[Tue Apr 14 02:12:20.511398 2026] [:error] [pid 59913:tid 59927] [client 20.104.109.252:6089] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-activat.php"] [unique_id "ad0yBK5XvQ9C-gZtr2y1jQAAAAo"]
[Tue Apr 14 02:12:20.938875 2026] [:error] [pid 59915:tid 59994] [client 20.104.109.252:5928] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-activat.php"] [unique_id "ad0yBIeTNdEemByf99hKtAAAAJc"]
[Tue Apr 14 02:12:21.371327 2026] [:error] [pid 59915:tid 59973] [client 20.104.109.252:5797] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-activat.php"] [unique_id "ad0yBYeTNdEemByf99hKtgAAAII"]
[Tue Apr 14 02:12:21.844853 2026] [:error] [pid 60317:tid 60350] [client 20.104.109.252:5950] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-activat.php"] [unique_id "ad0yBbBo7Bc8I7P_P--q7gAAAMo"]
[Tue Apr 14 02:12:22.266219 2026] [:error] [pid 59914:tid 59948] [client 20.104.109.252:5971] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/c.php"] [unique_id "ad0yBuq0YMmB3OWbbUlYWQAAAEQ"]
[Tue Apr 14 02:12:22.688957 2026] [:error] [pid 59914:tid 59960] [client 20.104.109.252:5886] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/c.php"] [unique_id "ad0yBuq0YMmB3OWbbUlYWwAAAFA"]
[Tue Apr 14 02:12:23.122383 2026] [:error] [pid 59914:tid 59954] [client 20.104.109.252:5870] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/c.php"] [unique_id "ad0yB-q0YMmB3OWbbUlYXAAAAEo"]
[Tue Apr 14 02:12:23.635394 2026] [:error] [pid 59915:tid 59977] [client 20.104.109.252:5843] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/c.php"] [unique_id "ad0yB4eTNdEemByf99hKuQAAAIY"]
[Tue Apr 14 02:12:24.061395 2026] [:error] [pid 59915:tid 59978] [client 20.104.109.252:5879] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/c99.php"] [unique_id "ad0yCIeTNdEemByf99hKugAAAIc"]
[Tue Apr 14 02:12:24.475081 2026] [:error] [pid 59914:tid 59955] [client 20.104.109.252:5772] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/c99.php"] [unique_id "ad0yCOq0YMmB3OWbbUlYXgAAAEs"]
[Tue Apr 14 02:12:24.893720 2026] [:error] [pid 59914:tid 59958] [client 20.104.109.252:5829] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/c99.php"] [unique_id "ad0yCOq0YMmB3OWbbUlYYAAAAE4"]
[Tue Apr 14 02:12:25.312191 2026] [:error] [pid 59914:tid 59965] [client 20.104.109.252:5923] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/c99.php"] [unique_id "ad0yCeq0YMmB3OWbbUlYYgAAAFU"]
[Tue Apr 14 02:12:25.738419 2026] [:error] [pid 60317:tid 60354] [client 20.104.109.252:5858] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/comfunctions.php"] [unique_id "ad0yCbBo7Bc8I7P_P--q_AAAAM4"]
[Tue Apr 14 02:12:26.167016 2026] [:error] [pid 59914:tid 59957] [client 20.104.109.252:5934] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/comfunctions.php"] [unique_id "ad0yCuq0YMmB3OWbbUlYZgAAAE0"]
[Tue Apr 14 02:12:26.644596 2026] [:error] [pid 59914:tid 59946] [client 20.104.109.252:5783] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/comfunctions.php"] [unique_id "ad0yCuq0YMmB3OWbbUlYZwAAAEI"]
[Tue Apr 14 02:12:27.068490 2026] [:error] [pid 59914:tid 59967] [client 20.104.109.252:5942] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/comfunctions.php"] [unique_id "ad0yC-q0YMmB3OWbbUlYaQAAAFc"]
[Tue Apr 14 02:12:27.486132 2026] [:error] [pid 59914:tid 59964] [client 20.104.109.252:5704] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/contact.php"] [unique_id "ad0yC-q0YMmB3OWbbUlYawAAAFQ"]
[Tue Apr 14 02:12:27.980301 2026] [:error] [pid 59915:tid 59973] [client 20.104.109.252:5788] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/contact.php"] [unique_id "ad0yC4eTNdEemByf99hKvwAAAII"]
[Tue Apr 14 02:12:28.393557 2026] [:error] [pid 59915:tid 59984] [client 20.104.109.252:6012] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/contact.php"] [unique_id "ad0yDIeTNdEemByf99hKwAAAAI0"]
[Tue Apr 14 02:12:28.843446 2026] [:error] [pid 59915:tid 59977] [client 20.104.109.252:5752] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/contact.php"] [unique_id "ad0yDIeTNdEemByf99hKwwAAAIY"]
[Tue Apr 14 02:12:29.269101 2026] [:error] [pid 60317:tid 60361] [client 20.104.109.252:5882] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/credits.php"] [unique_id "ad0yDbBo7Bc8I7P_P--rBAAAANU"]
[Tue Apr 14 02:12:29.703370 2026] [:error] [pid 59914:tid 59962] [client 20.104.109.252:5793] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/credits.php"] [unique_id "ad0yDeq0YMmB3OWbbUlYbgAAAFI"]
[Tue Apr 14 02:12:30.124764 2026] [:error] [pid 59915:tid 59985] [client 20.104.109.252:5784] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/credits.php"] [unique_id "ad0yDoeTNdEemByf99hKxwAAAI4"]
[Tue Apr 14 02:12:30.607960 2026] [:error] [pid 59915:tid 59972] [client 20.104.109.252:5896] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/credits.php"] [unique_id "ad0yDoeTNdEemByf99hKyQAAAIE"]
[Tue Apr 14 02:12:31.020737 2026] [:error] [pid 59915:tid 59989] [client 20.104.109.252:5819] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/error.php"] [unique_id "ad0yD4eTNdEemByf99hKzAAAAJI"]
[Tue Apr 14 02:12:31.433078 2026] [:error] [pid 60317:tid 60351] [client 20.104.109.252:5850] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/error.php"] [unique_id "ad0yD7Bo7Bc8I7P_P--rDQAAAMs"]
[Tue Apr 14 02:12:31.855583 2026] [:error] [pid 59915:tid 59974] [client 20.104.109.252:5821] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/error.php"] [unique_id "ad0yD4eTNdEemByf99hKzwAAAIM"]
[Tue Apr 14 02:12:32.287748 2026] [:error] [pid 59914:tid 59953] [client 20.104.109.252:5816] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/error.php"] [unique_id "ad0yEOq0YMmB3OWbbUlYbwAAAEk"]
[Tue Apr 14 02:12:32.701421 2026] [:error] [pid 60317:tid 60344] [client 20.104.109.252:5828] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/favicon.php"] [unique_id "ad0yELBo7Bc8I7P_P--rEgAAAMQ"]
[Tue Apr 14 02:12:33.141362 2026] [:error] [pid 59913:tid 59932] [client 20.104.109.252:5822] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/favicon.php"] [unique_id "ad0yEa5XvQ9C-gZtr2y1kQAAAA8"]
[Tue Apr 14 02:12:33.666213 2026] [:error] [pid 60317:tid 60342] [client 20.104.109.252:5895] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/favicon.php"] [unique_id "ad0yEbBo7Bc8I7P_P--rFwAAAMI"]
[Tue Apr 14 02:12:34.147689 2026] [:error] [pid 59913:tid 59921] [client 20.104.109.252:5717] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/favicon.php"] [unique_id "ad0yEq5XvQ9C-gZtr2y1kwAAAAQ"]
[Tue Apr 14 02:12:34.576846 2026] [:error] [pid 60317:tid 60345] [client 20.104.109.252:5885] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/header.php"] [unique_id "ad0yErBo7Bc8I7P_P--rGgAAAMU"]
[Tue Apr 14 02:12:35.033491 2026] [:error] [pid 60317:tid 60363] [client 20.104.109.252:5764] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/header.php"] [unique_id "ad0yE7Bo7Bc8I7P_P--rGwAAANc"]
[Tue Apr 14 02:12:35.462486 2026] [:error] [pid 59915:tid 59988] [client 20.104.109.252:5782] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/header.php"] [unique_id "ad0yE4eTNdEemByf99hK0wAAAJE"]
[Tue Apr 14 02:12:35.911192 2026] [:error] [pid 59915:tid 59979] [client 20.104.109.252:5889] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/header.php"] [unique_id "ad0yE4eTNdEemByf99hK1AAAAIg"]
[Tue Apr 14 02:12:36.394564 2026] [:error] [pid 60317:tid 60350] [client 20.104.109.252:5835] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/home.php"] [unique_id "ad0yFLBo7Bc8I7P_P--rIQAAAMo"]
[Tue Apr 14 02:12:36.817216 2026] [:error] [pid 59915:tid 59995] [client 20.104.109.252:5910] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/home.php"] [unique_id "ad0yFIeTNdEemByf99hK1wAAAJg"]
[Tue Apr 14 02:12:37.278808 2026] [:error] [pid 59913:tid 59924] [client 20.104.109.252:5779] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/home.php"] [unique_id "ad0yFa5XvQ9C-gZtr2y1lQAAAAc"]
[Tue Apr 14 02:12:37.763043 2026] [:error] [pid 60317:tid 60364] [client 20.104.109.252:5803] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/home.php"] [unique_id "ad0yFbBo7Bc8I7P_P--rIgAAANg"]
[Tue Apr 14 02:12:38.212568 2026] [:error] [pid 59915:tid 59982] [client 20.104.109.252:5827] [client 20.104.109.252] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "ad0yFoeTNdEemByf99hK2gAAAIs"]
[Tue Apr 14 02:12:38.643219 2026] [:error] [pid 59913:tid 59927] [client 20.104.109.252:5779] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "ad0yFq5XvQ9C-gZtr2y1mAAAAAo"]
[Tue Apr 14 02:12:39.119609 2026] [:error] [pid 59915:tid 59989] [client 20.104.109.252:5842] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "ad0yF4eTNdEemByf99hK2wAAAJI"]
[Tue Apr 14 02:12:39.550997 2026] [:error] [pid 59915:tid 59992] [client 20.104.109.252:5824] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "ad0yF4eTNdEemByf99hK3QAAAJU"]
[Tue Apr 14 02:12:40.022149 2026] [:error] [pid 59915:tid 59973] [client 20.104.109.252:5767] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "ad0yGIeTNdEemByf99hK3wAAAII"]
[Tue Apr 14 02:12:40.456832 2026] [:error] [pid 59914:tid 59949] [client 20.104.109.252:5873] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "ad0yGOq0YMmB3OWbbUlYcwAAAEU"]
[Tue Apr 14 02:12:40.930799 2026] [:error] [pid 59914:tid 59968] [client 20.104.109.252:5794] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "ad0yGOq0YMmB3OWbbUlYdQAAAFg"]
[Tue Apr 14 02:12:41.634812 2026] [:error] [pid 59913:tid 59941] [client 20.104.109.252:5855] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "ad0yGa5XvQ9C-gZtr2y1mQAAABg"]
[Tue Apr 14 02:12:42.072028 2026] [:error] [pid 59915:tid 59983] [client 20.104.109.252:5799] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "ad0yGoeTNdEemByf99hK4QAAAIw"]
[Tue Apr 14 02:12:42.499361 2026] [:error] [pid 60317:tid 60346] [client 20.104.109.252:5861] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "ad0yGrBo7Bc8I7P_P--rLQAAAMY"]
[Tue Apr 14 02:12:42.944117 2026] [:error] [pid 60317:tid 60349] [client 20.104.109.252:5777] [client 20.104.109.252] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "ad0yGrBo7Bc8I7P_P--rMAAAAMk"]
[Tue Apr 14 02:12:43.566551 2026] [:error] [pid 59915:tid 59983] [client 20.104.109.252:5799] [client 20.104.109.252] ModSecurity: collections_remove_stale: Failed deleting collection (name "ip", key "188.233.116.159_f6cdea45f547c23f1d9b8fa7656745356f2090f0"): Internal error (specific information not available) [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "ad0yGoeTNdEemByf99hK4QAAAIw"]
[Tue Apr 14 02:28:58.934386 2026] [:error] [pid 59913:tid 59937] [client 40.89.166.87:38898] [client 40.89.166.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "ad016q5XvQ9C-gZtr2y5hQAAABQ"]
[Tue Apr 14 02:29:01.545836 2026] [:error] [pid 60317:tid 60354] [client 40.89.166.87:63855] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "ad017bBo7Bc8I7P_P--3KwAAAM4"]
[Tue Apr 14 02:29:05.472566 2026] [:error] [pid 59915:tid 59977] [client 40.89.166.87:29445] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "ad018YeTNdEemByf99hTIQAAAIY"]
[Tue Apr 14 02:29:06.459348 2026] [:error] [pid 59915:tid 59978] [client 40.89.166.87:45061] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "ad018oeTNdEemByf99hTJwAAAIc"]
[Tue Apr 14 02:29:07.526337 2026] [:error] [pid 59915:tid 59980] [client 40.89.166.87:29471] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "ad0184eTNdEemByf99hTKQAAAIk"]
[Tue Apr 14 02:29:08.434530 2026] [:error] [pid 59913:tid 59935] [client 40.89.166.87:29483] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tiny2.php"] [unique_id "ad019K5XvQ9C-gZtr2y5lgAAABI"]
[Tue Apr 14 02:29:12.796016 2026] [:error] [pid 60317:tid 60352] [client 40.89.166.87:2503] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tiny2.php"] [unique_id "ad01-LBo7Bc8I7P_P--3QQAAAMw"]
[Tue Apr 14 02:29:14.031782 2026] [:error] [pid 60317:tid 60349] [client 40.89.166.87:65071] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tiny2.php"] [unique_id "ad01-rBo7Bc8I7P_P--3SAAAAMk"]
[Tue Apr 14 02:29:14.965461 2026] [:error] [pid 60317:tid 60348] [client 40.89.166.87:2511] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tiny2.php"] [unique_id "ad01-rBo7Bc8I7P_P--3VAAAAMg"]
[Tue Apr 14 02:29:16.912465 2026] [:error] [pid 59913:tid 59926] [client 40.89.166.87:28025] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/state.php"] [unique_id "ad01_K5XvQ9C-gZtr2y5mgAAAAk"]
[Tue Apr 14 02:29:17.924210 2026] [:error] [pid 59915:tid 59988] [client 40.89.166.87:45074] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/state.php"] [unique_id "ad01_YeTNdEemByf99hTOAAAAJE"]
[Tue Apr 14 02:29:18.733422 2026] [:error] [pid 60317:tid 60348] [client 40.89.166.87:42014] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/state.php"] [unique_id "ad01_rBo7Bc8I7P_P--3hAAAAMg"]
[Tue Apr 14 02:29:19.721088 2026] [:error] [pid 60317:tid 60349] [client 40.89.166.87:2553] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/state.php"] [unique_id "ad01_7Bo7Bc8I7P_P--3iwAAAMk"]
[Tue Apr 14 02:29:21.295384 2026] [:error] [pid 60317:tid 60353] [client 40.89.166.87:38855] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "ad02AbBo7Bc8I7P_P--3mAAAAM0"]
[Tue Apr 14 02:29:23.131716 2026] [:error] [pid 59914:tid 59967] [client 40.89.166.87:45066] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "ad02A-q0YMmB3OWbbUlfRQAAAFc"]
[Tue Apr 14 02:29:29.108527 2026] [:error] [pid 60317:tid 60353] [client 40.89.166.87:42026] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "ad02CbBo7Bc8I7P_P--3qgAAAM0"]
[Tue Apr 14 02:29:30.940192 2026] [:error] [pid 59915:tid 59982] [client 40.89.166.87:29447] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "ad02CoeTNdEemByf99hTSAAAAIs"]
[Tue Apr 14 02:29:34.397876 2026] [:error] [pid 60317:tid 60341] [client 40.89.166.87:29411] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "ad02DrBo7Bc8I7P_P--3vAAAAME"]
[Tue Apr 14 02:29:37.391933 2026] [:error] [pid 60317:tid 60350] [client 40.89.166.87:27968] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "ad02EbBo7Bc8I7P_P--3wgAAAMo"]
[Tue Apr 14 02:29:39.740848 2026] [:error] [pid 59913:tid 59940] [client 40.89.166.87:41004] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "ad02E65XvQ9C-gZtr2y5rgAAABc"]
[Tue Apr 14 02:29:40.789842 2026] [:error] [pid 60317:tid 60340] [client 40.89.166.87:51251] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "ad02FLBo7Bc8I7P_P--3yQAAAMA"]
[Tue Apr 14 02:29:41.597145 2026] [:error] [pid 59915:tid 59984] [client 40.89.166.87:42010] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "ad02FYeTNdEemByf99hTUQAAAI0"]
[Tue Apr 14 02:29:42.613838 2026] [:error] [pid 60317:tid 60342] [client 40.89.166.87:37111] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "ad02FrBo7Bc8I7P_P--3zQAAAMI"]
[Tue Apr 14 02:29:43.648066 2026] [:error] [pid 59915:tid 59986] [client 40.89.166.87:42027] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "ad02F4eTNdEemByf99hTVQAAAI8"]
[Tue Apr 14 02:29:44.879884 2026] [:error] [pid 59913:tid 59929] [client 40.89.166.87:42015] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "ad02GK5XvQ9C-gZtr2y5sQAAAAw"]
[Tue Apr 14 02:29:45.835056 2026] [:error] [pid 60317:tid 60357] [client 40.89.166.87:65065] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "ad02GbBo7Bc8I7P_P--31QAAANE"]
[Tue Apr 14 02:29:46.675087 2026] [:error] [pid 60317:tid 60360] [client 40.89.166.87:41000] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "ad02GrBo7Bc8I7P_P--32QAAANQ"]
[Tue Apr 14 02:29:47.762745 2026] [:error] [pid 59915:tid 59993] [client 40.89.166.87:45020] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "ad02G4eTNdEemByf99hTWgAAAJY"]
[Tue Apr 14 02:29:49.232837 2026] [:error] [pid 59914:tid 59964] [client 40.89.166.87:46058] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "ad02Heq0YMmB3OWbbUlfVAAAAFQ"]
[Tue Apr 14 02:29:50.396358 2026] [:error] [pid 59913:tid 59924] [client 40.89.166.87:43242] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ss.php"] [unique_id "ad02Hq5XvQ9C-gZtr2y5uAAAAAc"]
[Tue Apr 14 02:29:51.922082 2026] [:error] [pid 60317:tid 60344] [client 40.89.166.87:37818] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ss.php"] [unique_id "ad02H7Bo7Bc8I7P_P--33gAAAMQ"]
[Tue Apr 14 02:29:52.895281 2026] [:error] [pid 60317:tid 60363] [client 40.89.166.87:43310] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ss.php"] [unique_id "ad02ILBo7Bc8I7P_P--33wAAANc"]
[Tue Apr 14 02:29:53.948907 2026] [:error] [pid 60317:tid 60349] [client 40.89.166.87:63182] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ss.php"] [unique_id "ad02IbBo7Bc8I7P_P--34gAAAMk"]
[Tue Apr 14 02:29:55.709696 2026] [:error] [pid 59913:tid 59926] [client 40.89.166.87:38524] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "ad02I65XvQ9C-gZtr2y5wQAAAAk"]
[Tue Apr 14 02:29:57.022343 2026] [:error] [pid 59914:tid 59950] [client 40.89.166.87:24215] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "ad02Jeq0YMmB3OWbbUlfXgAAAEY"]
[Tue Apr 14 02:29:57.853913 2026] [:error] [pid 59914:tid 59958] [client 40.89.166.87:38508] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "ad02Jeq0YMmB3OWbbUlfYQAAAE4"]
[Tue Apr 14 02:30:00.348471 2026] [:error] [pid 60317:tid 60348] [client 40.89.166.87:24238] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "ad02KLBo7Bc8I7P_P--38AAAAMg"]
[Tue Apr 14 02:30:06.073830 2026] [:error] [pid 60317:tid 60353] [client 40.89.166.87:36331] [client 40.89.166.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "ad02LrBo7Bc8I7P_P--4AAAAAM0"]
[Tue Apr 14 02:30:30.551153 2026] [:error] [pid 59914:tid 59953] [client 40.89.166.87:32209] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "ad02Ruq0YMmB3OWbbUlfngAAAEk"]
[Tue Apr 14 02:30:31.681781 2026] [:error] [pid 60317:tid 60344] [client 40.89.166.87:24239] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "ad02R7Bo7Bc8I7P_P--4QAAAAMQ"]
[Tue Apr 14 02:30:33.519498 2026] [:error] [pid 59915:tid 59992] [client 40.89.166.87:43226] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "ad02SYeTNdEemByf99hTigAAAJU"]
[Tue Apr 14 02:30:34.456015 2026] [:error] [pid 59915:tid 59988] [client 40.89.166.87:36798] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "ad02SoeTNdEemByf99hTkQAAAJE"]
[Tue Apr 14 02:30:35.686543 2026] [:error] [pid 59915:tid 59976] [client 40.89.166.87:36749] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "ad02S4eTNdEemByf99hTlwAAAIU"]
[Tue Apr 14 02:30:36.575845 2026] [:error] [pid 59914:tid 59960] [client 40.89.166.87:37513] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "ad02TOq0YMmB3OWbbUlfpQAAAFA"]
[Tue Apr 14 02:30:37.615982 2026] [:error] [pid 59914:tid 59948] [client 40.89.166.87:37161] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "ad02Teq0YMmB3OWbbUlfqAAAAEQ"]
[Tue Apr 14 02:30:38.895290 2026] [:error] [pid 60317:tid 60343] [client 40.89.166.87:65049] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "ad02TrBo7Bc8I7P_P--4RwAAAMM"]
[Tue Apr 14 02:30:39.628656 2026] [:error] [pid 60317:tid 60346] [client 40.89.166.87:37797] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "ad02T7Bo7Bc8I7P_P--4SAAAAMY"]
[Tue Apr 14 02:30:40.256161 2026] [:error] [pid 59914:tid 59961] [client 40.89.166.87:65050] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "ad02UOq0YMmB3OWbbUlfsQAAAFE"]
[Tue Apr 14 02:30:41.319764 2026] [:error] [pid 60317:tid 60360] [client 40.89.166.87:29398] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "ad02UbBo7Bc8I7P_P--4SwAAANQ"]
[Tue Apr 14 02:30:42.207313 2026] [:error] [pid 59913:tid 59936] [client 40.89.166.87:51238] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "ad02Uq5XvQ9C-gZtr2y53wAAABM"]
[Tue Apr 14 02:30:44.384382 2026] [:error] [pid 60317:tid 60346] [client 40.89.166.87:2540] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/roksad1.php"] [unique_id "ad02VLBo7Bc8I7P_P--4VwAAAMY"]
[Tue Apr 14 02:30:47.377471 2026] [:error] [pid 60317:tid 60352] [client 40.89.166.87:22380] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/roksad1.php"] [unique_id "ad02V7Bo7Bc8I7P_P--4XwAAAMw"]
[Tue Apr 14 02:30:50.187021 2026] [:error] [pid 59914:tid 59967] [client 40.89.166.87:28494] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/roksad1.php"] [unique_id "ad02Wuq0YMmB3OWbbUlfvQAAAFc"]
[Tue Apr 14 02:30:56.134708 2026] [:error] [pid 59915:tid 59978] [client 40.89.166.87:38155] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/roksad1.php"] [unique_id "ad02YIeTNdEemByf99hT1AAAAIc"]
[Tue Apr 14 02:31:01.753575 2026] [:error] [pid 59914:tid 59956] [client 40.89.166.87:32264] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "ad02Zeq0YMmB3OWbbUlf4gAAAEw"]
[Tue Apr 14 02:31:03.670327 2026] [:error] [pid 59913:tid 59929] [client 40.89.166.87:38184] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "ad02Z65XvQ9C-gZtr2y6BwAAAAw"]
[Tue Apr 14 02:31:04.650728 2026] [:error] [pid 59914:tid 59944] [client 40.89.166.87:30651] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "ad02aOq0YMmB3OWbbUlf6gAAAEA"]
[Tue Apr 14 02:31:05.945807 2026] [:error] [pid 59914:tid 59965] [client 40.89.166.87:34094] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "ad02aeq0YMmB3OWbbUlf7gAAAFU"]
[Tue Apr 14 02:31:06.566464 2026] [:error] [pid 60317:tid 60347] [client 40.89.166.87:38081] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "ad02arBo7Bc8I7P_P--4wgAAAMc"]
[Tue Apr 14 02:31:08.476811 2026] [:error] [pid 60317:tid 60355] [client 40.89.166.87:33662] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "ad02bLBo7Bc8I7P_P--40gAAAM8"]
[Tue Apr 14 02:31:10.088825 2026] [:error] [pid 59915:tid 59995] [client 40.89.166.87:2622] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "ad02boeTNdEemByf99hT7QAAAJg"]
[Tue Apr 14 02:31:10.965993 2026] [:error] [pid 59913:tid 59939] [client 40.89.166.87:38138] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "ad02bq5XvQ9C-gZtr2y6GQAAABY"]
[Tue Apr 14 02:31:12.980276 2026] [:error] [pid 60317:tid 60342] [client 40.89.166.87:23098] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "ad02cLBo7Bc8I7P_P--44AAAAMI"]
[Tue Apr 14 02:31:20.911969 2026] [:error] [pid 60317:tid 60340] [client 40.89.166.87:2942] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "ad02eLBo7Bc8I7P_P--5EgAAAMA"]
[Tue Apr 14 02:31:21.865327 2026] [:error] [pid 60317:tid 60347] [client 40.89.166.87:37465] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "ad02ebBo7Bc8I7P_P--5FwAAAMc"]
[Tue Apr 14 02:31:23.340168 2026] [:error] [pid 59915:tid 59983] [client 40.89.166.87:62783] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "ad02e4eTNdEemByf99hT_AAAAIw"]
[Tue Apr 14 02:31:26.598368 2026] [:error] [pid 59913:tid 59922] [client 40.89.166.87:46657] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "ad02fq5XvQ9C-gZtr2y6JQAAAAU"]
[Tue Apr 14 02:31:29.264567 2026] [:error] [pid 60317:tid 60349] [client 40.89.166.87:63778] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "ad02gbBo7Bc8I7P_P--5LgAAAMk"]
[Tue Apr 14 02:31:39.269967 2026] [:error] [pid 59914:tid 59945] [client 40.89.166.87:2644] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/layout.php"] [unique_id "ad02i-q0YMmB3OWbbUlgLgAAAEE"]
[Tue Apr 14 02:31:43.186173 2026] [:error] [pid 60317:tid 60355] [client 40.89.166.87:34818] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/layout.php"] [unique_id "ad02j7Bo7Bc8I7P_P--5UQAAAM8"]
[Tue Apr 14 02:31:44.905860 2026] [:error] [pid 59913:tid 59924] [client 40.89.166.87:46136] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/layout.php"] [unique_id "ad02kK5XvQ9C-gZtr2y6ZgAAAAc"]
[Tue Apr 14 02:31:53.323006 2026] [:error] [pid 59913:tid 59925] [client 40.89.166.87:31807] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/layout.php"] [unique_id "ad02ma5XvQ9C-gZtr2y6jQAAAAg"]
[Tue Apr 14 02:31:54.115882 2026] [:error] [pid 60317:tid 60364] [client 40.89.166.87:42678] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/r2.php"] [unique_id "ad02mrBo7Bc8I7P_P--5YwAAANg"]
[Tue Apr 14 02:31:55.013931 2026] [:error] [pid 59915:tid 59984] [client 40.89.166.87:31751] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/r2.php"] [unique_id "ad02m4eTNdEemByf99hULQAAAI0"]
[Tue Apr 14 02:31:57.359558 2026] [:error] [pid 59914:tid 59960] [client 40.89.166.87:62797] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/r2.php"] [unique_id "ad02neq0YMmB3OWbbUlgTwAAAFA"]
[Tue Apr 14 02:31:59.069519 2026] [:error] [pid 59914:tid 59954] [client 40.89.166.87:23843] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/r2.php"] [unique_id "ad02n-q0YMmB3OWbbUlgUwAAAEo"]
[Tue Apr 14 02:32:02.089032 2026] [:error] [pid 59914:tid 59967] [client 40.89.166.87:62804] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "ad02ouq0YMmB3OWbbUlgYQAAAFc"]
[Tue Apr 14 02:32:03.625526 2026] [:error] [pid 59915:tid 59995] [client 40.89.166.87:27456] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "ad02o4eTNdEemByf99hUOQAAAJg"]
[Tue Apr 14 02:32:04.676086 2026] [:error] [pid 59914:tid 59953] [client 40.89.166.87:62803] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "ad02pOq0YMmB3OWbbUlgYwAAAEk"]
[Tue Apr 14 02:32:06.401883 2026] [:error] [pid 60317:tid 60347] [client 40.89.166.87:31767] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "ad02prBo7Bc8I7P_P--5fQAAAMc"]
[Tue Apr 14 02:32:24.948448 2026] [:error] [pid 60317:tid 60362] [client 40.89.166.87:51136] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/samll.php"] [unique_id "ad02uLBo7Bc8I7P_P--5wAAAANY"]
[Tue Apr 14 02:32:28.058213 2026] [:error] [pid 59913:tid 59931] [client 40.89.166.87:40954] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/samll.php"] [unique_id "ad02vK5XvQ9C-gZtr2y6yAAAAA4"]
[Tue Apr 14 02:32:30.224988 2026] [:error] [pid 59913:tid 59921] [client 40.89.166.87:3065] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/samll.php"] [unique_id "ad02vq5XvQ9C-gZtr2y6yQAAAAQ"]
[Tue Apr 14 02:32:31.238036 2026] [:error] [pid 59915:tid 59993] [client 40.89.166.87:46782] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/samll.php"] [unique_id "ad02v4eTNdEemByf99hUgAAAAJY"]
[Tue Apr 14 02:32:32.187956 2026] [:error] [pid 59915:tid 59988] [client 40.89.166.87:2471] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zogy1.php"] [unique_id "ad02wIeTNdEemByf99hUhAAAAJE"]
[Tue Apr 14 02:32:33.272486 2026] [:error] [pid 60317:tid 60341] [client 40.89.166.87:50641] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zogy1.php"] [unique_id "ad02wbBo7Bc8I7P_P--50QAAAME"]
[Tue Apr 14 02:32:34.147584 2026] [:error] [pid 59913:tid 59924] [client 40.89.166.87:58011] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zogy1.php"] [unique_id "ad02wq5XvQ9C-gZtr2y6ywAAAAc"]
[Tue Apr 14 02:32:48.254283 2026] [:error] [pid 59914:tid 59953] [client 40.89.166.87:40635] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/press.php"] [unique_id "ad020Oq0YMmB3OWbbUlgsAAAAEk"]
[Tue Apr 14 02:32:50.172587 2026] [:error] [pid 59913:tid 59919] [client 40.89.166.87:59898] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/press.php"] [unique_id "ad020q5XvQ9C-gZtr2y61wAAAAI"]
[Tue Apr 14 02:32:50.934747 2026] [:error] [pid 60317:tid 60344] [client 40.89.166.87:36352] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/press.php"] [unique_id "ad020rBo7Bc8I7P_P--6AwAAAMQ"]
[Tue Apr 14 02:32:52.792840 2026] [:error] [pid 59914:tid 59955] [client 40.89.166.87:38965] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/press.php"] [unique_id "ad021Oq0YMmB3OWbbUlgtwAAAEs"]
[Tue Apr 14 02:32:53.862297 2026] [:error] [pid 59913:tid 59933] [client 40.89.166.87:33695] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "ad021a5XvQ9C-gZtr2y64gAAABA"]
[Tue Apr 14 02:32:55.484911 2026] [:error] [pid 60317:tid 60360] [client 40.89.166.87:38958] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "ad0217Bo7Bc8I7P_P--6EAAAANQ"]
[Tue Apr 14 02:32:56.453660 2026] [:error] [pid 59914:tid 59951] [client 40.89.166.87:59884] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "ad022Oq0YMmB3OWbbUlgvAAAAEc"]
[Tue Apr 14 02:32:58.878135 2026] [:error] [pid 59915:tid 59995] [client 40.89.166.87:35174] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "ad022oeTNdEemByf99hUwQAAAJg"]
[Tue Apr 14 02:33:00.981329 2026] [:error] [pid 59915:tid 59988] [client 40.89.166.87:3046] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-kz.php"] [unique_id "ad023IeTNdEemByf99hUyAAAAJE"]
[Tue Apr 14 02:33:02.814412 2026] [:error] [pid 59913:tid 59921] [client 40.89.166.87:58904] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-kz.php"] [unique_id "ad023q5XvQ9C-gZtr2y67wAAAAQ"]
[Tue Apr 14 02:33:04.480548 2026] [:error] [pid 60317:tid 60345] [client 40.89.166.87:50682] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-kz.php"] [unique_id "ad024LBo7Bc8I7P_P--6NgAAAMU"]
[Tue Apr 14 02:33:05.362454 2026] [:error] [pid 60317:tid 60346] [client 40.89.166.87:50662] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-kz.php"] [unique_id "ad024bBo7Bc8I7P_P--6PQAAAMY"]
[Tue Apr 14 02:33:06.613223 2026] [:error] [pid 59913:tid 59931] [client 40.89.166.87:36361] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-lo.php"] [unique_id "ad024q5XvQ9C-gZtr2y68wAAAA4"]
[Tue Apr 14 02:33:07.412827 2026] [:error] [pid 59915:tid 59980] [client 40.89.166.87:41968] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-lo.php"] [unique_id "ad0244eTNdEemByf99hU0wAAAIk"]
[Tue Apr 14 02:33:08.471556 2026] [:error] [pid 59914:tid 59960] [client 40.89.166.87:2428] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-lo.php"] [unique_id "ad025Oq0YMmB3OWbbUlgwwAAAFA"]
[Tue Apr 14 02:33:11.335734 2026] [:error] [pid 59915:tid 59978] [client 40.89.166.87:21317] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-lo.php"] [unique_id "ad0254eTNdEemByf99hU4AAAAIc"]
[Tue Apr 14 02:33:12.662765 2026] [:error] [pid 59913:tid 59937] [client 40.89.166.87:29081] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fone1.php"] [unique_id "ad026K5XvQ9C-gZtr2y6-QAAABQ"]
[Tue Apr 14 02:33:14.769446 2026] [:error] [pid 60317:tid 60353] [client 40.89.166.87:2409] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fone1.php"] [unique_id "ad026rBo7Bc8I7P_P--6TwAAAM0"]
[Tue Apr 14 02:33:15.822512 2026] [:error] [pid 60317:tid 60348] [client 40.89.166.87:46737] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fone1.php"] [unique_id "ad0267Bo7Bc8I7P_P--6VwAAAMg"]
[Tue Apr 14 02:33:18.865323 2026] [:error] [pid 59915:tid 59982] [client 40.89.166.87:21986] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fone1.php"] [unique_id "ad027oeTNdEemByf99hU9AAAAIs"]
[Tue Apr 14 02:33:19.809973 2026] [:error] [pid 59913:tid 59923] [client 40.89.166.87:29057] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Ipv6.php"] [unique_id "ad02765XvQ9C-gZtr2y6_QAAAAY"]
[Tue Apr 14 02:33:23.892592 2026] [:error] [pid 59915:tid 59975] [client 40.89.166.87:39355] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Ipv6.php"] [unique_id "ad0284eTNdEemByf99hVDAAAAIQ"]
[Tue Apr 14 02:33:26.021041 2026] [:error] [pid 59913:tid 59941] [client 40.89.166.87:35139] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Ipv6.php"] [unique_id "ad029q5XvQ9C-gZtr2y7DAAAABg"]
[Tue Apr 14 02:33:27.396817 2026] [:error] [pid 59914:tid 59952] [client 40.89.166.87:41954] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Ipv6.php"] [unique_id "ad029-q0YMmB3OWbbUlg4QAAAEg"]
[Tue Apr 14 02:33:29.255937 2026] [:error] [pid 60317:tid 60345] [client 40.89.166.87:26407] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file-gertdxz.php"] [unique_id "ad02-bBo7Bc8I7P_P--6eAAAAMU"]
[Tue Apr 14 02:33:32.203967 2026] [:error] [pid 59915:tid 59990] [client 40.89.166.87:35154] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file-gertdxz.php"] [unique_id "ad02_IeTNdEemByf99hVHgAAAJM"]
[Tue Apr 14 02:33:40.472529 2026] [:error] [pid 60317:tid 60346] [client 40.89.166.87:41465] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file-gertdxz.php"] [unique_id "ad03BLBo7Bc8I7P_P--6uwAAAMY"]
[Tue Apr 14 02:33:42.465168 2026] [:error] [pid 60317:tid 60360] [client 40.89.166.87:2875] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file-gertdxz.php"] [unique_id "ad03BrBo7Bc8I7P_P--6xwAAANQ"]
[Tue Apr 14 02:33:55.180376 2026] [:error] [pid 60317:tid 60363] [client 40.89.166.87:24906] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "ad03E7Bo7Bc8I7P_P--7DAAAANc"]
[Tue Apr 14 02:33:58.406851 2026] [:error] [pid 60317:tid 60342] [client 40.89.166.87:45101] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "ad03FrBo7Bc8I7P_P--7MQAAAMI"]
[Tue Apr 14 02:34:02.531340 2026] [:error] [pid 59913:tid 59931] [client 40.89.166.87:58667] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "ad03Gq5XvQ9C-gZtr2y7VAAAAA4"]
[Tue Apr 14 02:34:04.640675 2026] [:error] [pid 59915:tid 59975] [client 40.89.166.87:41471] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "ad03HIeTNdEemByf99hVeAAAAIQ"]
[Tue Apr 14 02:34:07.230806 2026] [:error] [pid 60317:tid 60358] [client 40.89.166.87:63835] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/link.php"] [unique_id "ad03H7Bo7Bc8I7P_P--7VAAAANI"]
[Tue Apr 14 02:34:07.936165 2026] [:error] [pid 60317:tid 60360] [client 40.89.166.87:45110] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/link.php"] [unique_id "ad03H7Bo7Bc8I7P_P--7VgAAANQ"]
[Tue Apr 14 02:34:10.628097 2026] [:error] [pid 59913:tid 59925] [client 40.89.166.87:27130] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/link.php"] [unique_id "ad03Iq5XvQ9C-gZtr2y7YgAAAAg"]
[Tue Apr 14 02:34:15.957406 2026] [:error] [pid 59913:tid 59924] [client 40.89.166.87:29460] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/link.php"] [unique_id "ad03J65XvQ9C-gZtr2y7awAAAAc"]
[Tue Apr 14 02:34:17.011527 2026] [:error] [pid 59914:tid 59954] [client 40.89.166.87:27142] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ortasekerli1.php"] [unique_id "ad03Keq0YMmB3OWbbUlhRgAAAEo"]
[Tue Apr 14 02:34:23.236462 2026] [:error] [pid 59913:tid 59927] [client 40.89.166.87:58982] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ortasekerli1.php"] [unique_id "ad03L65XvQ9C-gZtr2y7dAAAAAo"]
[Tue Apr 14 02:34:35.538681 2026] [:error] [pid 59913:tid 59933] [client 40.89.166.87:60370] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-block.php"] [unique_id "ad03O65XvQ9C-gZtr2y7fgAAABA"]
[Tue Apr 14 02:34:36.381260 2026] [:error] [pid 59915:tid 59974] [client 40.89.166.87:59490] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-block.php"] [unique_id "ad03PIeTNdEemByf99hVmQAAAIM"]
[Tue Apr 14 02:34:37.339285 2026] [:error] [pid 59914:tid 59961] [client 40.89.166.87:49703] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-block.php"] [unique_id "ad03Peq0YMmB3OWbbUlhawAAAFE"]
[Tue Apr 14 02:34:38.268088 2026] [:error] [pid 59914:tid 59952] [client 40.89.166.87:33248] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-block.php"] [unique_id "ad03Puq0YMmB3OWbbUlhbQAAAEg"]
[Tue Apr 14 02:34:40.258955 2026] [:error] [pid 59915:tid 59987] [client 40.89.166.87:63215] [client 40.89.166.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/wincust.php"] [unique_id "ad03QIeTNdEemByf99hVowAAAJA"]
[Tue Apr 14 02:34:45.206591 2026] [:error] [pid 59915:tid 59982] [client 40.89.166.87:36741] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "ad03RYeTNdEemByf99hVsQAAAIs"]
[Tue Apr 14 02:34:51.239593 2026] [:error] [pid 59913:tid 59921] [client 40.89.166.87:29812] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "ad03S65XvQ9C-gZtr2y7mQAAAAQ"]
[Tue Apr 14 02:34:52.486817 2026] [:error] [pid 60317:tid 60342] [client 40.89.166.87:2551] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "ad03TLBo7Bc8I7P_P--7uwAAAMI"]
[Tue Apr 14 02:35:10.457124 2026] [:error] [pid 59914:tid 59949] [client 40.89.166.87:21304] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "ad03Xuq0YMmB3OWbbUlhowAAAEU"]
[Tue Apr 14 02:35:17.861945 2026] [:error] [pid 59914:tid 59967] [client 40.89.166.87:22337] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "ad03Zeq0YMmB3OWbbUlhsAAAAFc"]
[Tue Apr 14 02:35:23.680336 2026] [:error] [pid 59914:tid 59944] [client 40.89.166.87:2949] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "ad03a-q0YMmB3OWbbUlhtwAAAEA"]
[Tue Apr 14 02:35:29.295290 2026] [:error] [pid 59915:tid 59971] [client 40.89.166.87:33325] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-class.php"] [unique_id "ad03cYeTNdEemByf99hWJQAAAIA"]
[Tue Apr 14 02:35:31.090083 2026] [:error] [pid 59913:tid 59927] [client 40.89.166.87:60549] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-class.php"] [unique_id "ad03c65XvQ9C-gZtr2y77gAAAAo"]
[Tue Apr 14 02:35:33.245036 2026] [:error] [pid 60317:tid 60343] [client 40.89.166.87:39290] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-class.php"] [unique_id "ad03dbBo7Bc8I7P_P--8JAAAAMM"]
[Tue Apr 14 02:35:37.562690 2026] [:error] [pid 60317:tid 60343] [client 40.89.166.87:28480] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-class.php"] [unique_id "ad03ebBo7Bc8I7P_P--8NgAAAMM"]
[Tue Apr 14 02:35:42.465965 2026] [:error] [pid 59913:tid 59932] [client 40.89.166.87:29861] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cilus.php"] [unique_id "ad03fq5XvQ9C-gZtr2y7-AAAAA8"]
[Tue Apr 14 02:35:44.050359 2026] [:error] [pid 59913:tid 59934] [client 40.89.166.87:29437] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cilus.php"] [unique_id "ad03gK5XvQ9C-gZtr2y7-gAAABE"]
[Tue Apr 14 02:35:45.167018 2026] [:error] [pid 59913:tid 59933] [client 40.89.166.87:29830] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cilus.php"] [unique_id "ad03ga5XvQ9C-gZtr2y7_QAAABA"]
[Tue Apr 14 02:35:46.847672 2026] [:error] [pid 59915:tid 59978] [client 40.89.166.87:51236] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cilus.php"] [unique_id "ad03goeTNdEemByf99hWQQAAAIc"]
[Tue Apr 14 02:35:48.886647 2026] [:error] [pid 59913:tid 59931] [client 40.89.166.87:35215] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/d.php"] [unique_id "ad03hK5XvQ9C-gZtr2y8CAAAAA4"]
[Tue Apr 14 02:35:50.434685 2026] [:error] [pid 59913:tid 59938] [client 40.89.166.87:41009] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/d.php"] [unique_id "ad03hq5XvQ9C-gZtr2y8DwAAABU"]
[Tue Apr 14 02:35:51.167215 2026] [:error] [pid 59915:tid 59995] [client 40.89.166.87:27988] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/d.php"] [unique_id "ad03h4eTNdEemByf99hWUAAAAJg"]
[Tue Apr 14 02:35:51.831082 2026] [:error] [pid 59914:tid 59967] [client 40.89.166.87:26772] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/d.php"] [unique_id "ad03h-q0YMmB3OWbbUlh3QAAAFc"]
[Tue Apr 14 02:35:53.205821 2026] [:error] [pid 59915:tid 59986] [client 40.89.166.87:29426] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/error_log.php"] [unique_id "ad03iYeTNdEemByf99hWVAAAAI8"]
[Tue Apr 14 02:35:54.897122 2026] [:error] [pid 59915:tid 59973] [client 40.89.166.87:41015] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/error_log.php"] [unique_id "ad03ioeTNdEemByf99hWXgAAAII"]
[Tue Apr 14 02:35:56.925511 2026] [:error] [pid 59915:tid 59978] [client 40.89.166.87:40972] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/error_log.php"] [unique_id "ad03jIeTNdEemByf99hWYwAAAIc"]
[Tue Apr 14 02:36:00.797790 2026] [:error] [pid 59914:tid 59952] [client 40.89.166.87:28020] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/error_log.php"] [unique_id "ad03kOq0YMmB3OWbbUlh8gAAAEg"]
[Tue Apr 14 02:36:02.049172 2026] [:error] [pid 60317:tid 60352] [client 40.89.166.87:35626] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Ov-Simple1.php"] [unique_id "ad03krBo7Bc8I7P_P--8awAAAMw"]
[Tue Apr 14 02:36:03.684947 2026] [:error] [pid 59914:tid 59946] [client 40.89.166.87:36345] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Ov-Simple1.php"] [unique_id "ad03k-q0YMmB3OWbbUlh-wAAAEI"]
[Tue Apr 14 02:36:06.075210 2026] [:error] [pid 60317:tid 60354] [client 40.89.166.87:24262] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Ov-Simple1.php"] [unique_id "ad03lrBo7Bc8I7P_P--8ewAAAM4"]
[Tue Apr 14 02:36:07.223883 2026] [:error] [pid 59915:tid 59982] [client 40.89.166.87:44376] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Ov-Simple1.php"] [unique_id "ad03l4eTNdEemByf99hWeQAAAIs"]
[Tue Apr 14 02:36:08.019907 2026] [:error] [pid 59914:tid 59948] [client 40.89.166.87:44406] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/curl.php"] [unique_id "ad03mOq0YMmB3OWbbUliCwAAAEQ"]
[Tue Apr 14 02:36:09.709019 2026] [:error] [pid 59913:tid 59938] [client 40.89.166.87:36791] [client 40.89.166.87] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/curl.php"] [unique_id "ad03ma5XvQ9C-gZtr2y8KQAAABU"]
[Tue Apr 14 08:49:19.103381 2026] [:error] [pid 37048:tid 37064] [client 216.73.216.86:6418] [client 216.73.216.86] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||measureyourcause.measureyourbrand.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/robots.txt"] [unique_id "ad2PD552Bo1OyzeXo_yYRQAAAQ4"]
[Tue Apr 14 11:25:50.641262 2026] [:error] [pid 37226:tid 37240] [client 20.212.200.71:12789] [client 20.212.200.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "ad2zvpOA5-IQ0IVmQCoB3QAAAUw"]
[Tue Apr 14 11:25:51.055941 2026] [:error] [pid 4902:tid 4915] [client 20.212.200.71:12741] [client 20.212.200.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "ad2zv4v8vJvl9lGy39hF_gAAAYs"]
[Tue Apr 14 11:25:51.418503 2026] [:error] [pid 4902:tid 4917] [client 20.212.200.71:12749] [client 20.212.200.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "ad2zv4v8vJvl9lGy39hF_wAAAY0"]
[Tue Apr 14 11:25:51.784731 2026] [:error] [pid 35630:tid 35697] [client 20.212.200.71:3113] [client 20.212.200.71] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "ad2zvzer0pVFxOiOauXhAQAAAIs"]
[Wed Apr 15 00:08:27.476872 2026] [:error] [pid 59986:tid 60044] [client 20.251.219.158:23544] [client 20.251.219.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "ad5me56axKeW6bX4H7fdgAAAAFg"]
[Wed Apr 15 00:08:29.697917 2026] [:error] [pid 59986:tid 60022] [client 20.251.219.158:45401] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "ad5mfZ6axKeW6bX4H7fdiQAAAEI"]
[Wed Apr 15 00:08:31.025972 2026] [:error] [pid 60074:tid 60089] [client 20.251.219.158:2262] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "ad5mf-tqnEmNU9vpHCniRwAAAM0"]
[Wed Apr 15 00:08:32.007803 2026] [:error] [pid 3810:tid 3819] [client 20.251.219.158:14593] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "ad5mgMqc5XaYZhFXVGfwaQAAAYY"]
[Wed Apr 15 00:08:34.487312 2026] [:error] [pid 3778:tid 3781] [client 20.251.219.158:26079] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "ad5mghx5DfpNmYF_PaEbzgAAAUE"]
[Wed Apr 15 00:08:36.294333 2026] [:error] [pid 3778:tid 3800] [client 20.251.219.158:2255] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tiny2.php"] [unique_id "ad5mhBx5DfpNmYF_PaEb2QAAAVQ"]
[Wed Apr 15 00:08:37.106709 2026] [:error] [pid 59986:tid 60044] [client 20.251.219.158:41124] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tiny2.php"] [unique_id "ad5mhZ6axKeW6bX4H7fdmQAAAFg"]
[Wed Apr 15 00:08:38.333425 2026] [:error] [pid 59987:tid 60063] [client 20.251.219.158:21408] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tiny2.php"] [unique_id "ad5mhlWpk-Tfi6_vLKpghwAAAJA"]
[Wed Apr 15 00:08:42.459681 2026] [:error] [pid 59986:tid 60026] [client 20.251.219.158:2241] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tiny2.php"] [unique_id "ad5mip6axKeW6bX4H7fduQAAAEY"]
[Wed Apr 15 00:08:45.565400 2026] [:error] [pid 59987:tid 60065] [client 20.251.219.158:21416] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/state.php"] [unique_id "ad5mjVWpk-Tfi6_vLKpgjQAAAJI"]
[Wed Apr 15 00:08:46.543461 2026] [:error] [pid 60074:tid 60082] [client 20.251.219.158:2323] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/state.php"] [unique_id "ad5mjutqnEmNU9vpHCniawAAAMY"]
[Wed Apr 15 00:08:47.967194 2026] [:error] [pid 60074:tid 60077] [client 20.251.219.158:41147] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/state.php"] [unique_id "ad5mj-tqnEmNU9vpHCnibAAAAME"]
[Wed Apr 15 00:08:49.336856 2026] [:error] [pid 22177:tid 22195] [client 20.251.219.158:35775] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/state.php"] [unique_id "ad5mkYTVeJSXHDIlEDusagAAARA"]
[Wed Apr 15 00:08:50.421319 2026] [:error] [pid 22177:tid 22193] [client 20.251.219.158:26510] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "ad5mkoTVeJSXHDIlEDusbAAAAQ4"]
[Wed Apr 15 00:08:51.988625 2026] [:error] [pid 3810:tid 3826] [client 20.251.219.158:19026] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "ad5mk8qc5XaYZhFXVGfwhQAAAY0"]
[Wed Apr 15 00:08:53.129461 2026] [:error] [pid 3810:tid 3829] [client 20.251.219.158:21414] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "ad5mlcqc5XaYZhFXVGfwjgAAAZA"]
[Wed Apr 15 00:08:53.740758 2026] [:error] [pid 3810:tid 3826] [client 20.251.219.158:20172] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "ad5mlcqc5XaYZhFXVGfwkQAAAY0"]
[Wed Apr 15 00:08:55.031182 2026] [:error] [pid 3810:tid 3837] [client 20.251.219.158:14650] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "ad5ml8qc5XaYZhFXVGfwlQAAAZg"]
[Wed Apr 15 00:08:56.242272 2026] [:error] [pid 3778:tid 3795] [client 20.251.219.158:45400] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "ad5mmBx5DfpNmYF_PaEb9QAAAU8"]
[Wed Apr 15 00:09:00.211918 2026] [:error] [pid 3810:tid 3833] [client 20.251.219.158:14677] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "ad5mnMqc5XaYZhFXVGfwnAAAAZQ"]
[Wed Apr 15 00:09:01.565455 2026] [:error] [pid 59985:tid 59998] [client 20.251.219.158:21382] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "ad5mnegHaxkvLE6V1kmDygAAAAU"]
[Wed Apr 15 00:09:06.247495 2026] [:error] [pid 59986:tid 60023] [client 20.251.219.158:2306] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "ad5mop6axKeW6bX4H7feNAAAAEM"]
[Wed Apr 15 00:09:09.049594 2026] [:error] [pid 59986:tid 60040] [client 20.251.219.158:34785] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "ad5mpZ6axKeW6bX4H7fePAAAAFQ"]
[Wed Apr 15 00:09:11.186685 2026] [:error] [pid 59985:tid 60011] [client 20.251.219.158:21392] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "ad5mp-gHaxkvLE6V1kmD2wAAABI"]
[Wed Apr 15 00:09:12.023367 2026] [:error] [pid 60074:tid 60099] [client 20.251.219.158:21403] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "ad5mqOtqnEmNU9vpHCnilAAAANc"]
[Wed Apr 15 00:09:13.354615 2026] [:error] [pid 60074:tid 60088] [client 20.251.219.158:34783] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "ad5mqetqnEmNU9vpHCninAAAAMw"]
[Wed Apr 15 00:09:16.499518 2026] [:error] [pid 22177:tid 22185] [client 20.251.219.158:41094] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "ad5mrITVeJSXHDIlEDusfwAAAQY"]
[Wed Apr 15 00:09:17.383548 2026] [:error] [pid 60074:tid 60082] [client 20.251.219.158:28092] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "ad5mretqnEmNU9vpHCnipwAAAMY"]
[Wed Apr 15 00:09:36.298578 2026] [:error] [pid 22177:tid 22202] [client 20.251.219.158:48472] [client 20.251.219.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "ad5mwITVeJSXHDIlEDusrQAAARc"]
[Wed Apr 15 00:09:40.729605 2026] [:error] [pid 22177:tid 22202] [client 20.251.219.158:45417] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/footer.php"] [unique_id "ad5mxITVeJSXHDIlEDustwAAARc"]
[Wed Apr 15 00:09:49.023107 2026] [:error] [pid 3810:tid 3820] [client 20.251.219.158:2271] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/footer.php"] [unique_id "ad5mzcqc5XaYZhFXVGfw-gAAAYc"]
[Wed Apr 15 00:09:51.252886 2026] [:error] [pid 3778:tid 3790] [client 20.251.219.158:37978] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/footer.php"] [unique_id "ad5mzxx5DfpNmYF_PaEcMAAAAUo"]
[Wed Apr 15 00:10:05.299171 2026] [:error] [pid 3810:tid 3824] [client 20.251.219.158:37980] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/img.php"] [unique_id "ad5m3cqc5XaYZhFXVGfxHQAAAYs"]
[Wed Apr 15 00:10:06.809233 2026] [:error] [pid 59985:tid 60001] [client 20.251.219.158:24989] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/img.php"] [unique_id "ad5m3ugHaxkvLE6V1kmEHQAAAAg"]
[Wed Apr 15 00:10:09.213836 2026] [:error] [pid 60074:tid 60099] [client 20.251.219.158:20199] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/img.php"] [unique_id "ad5m4etqnEmNU9vpHCni5gAAANc"]
[Wed Apr 15 00:10:23.356592 2026] [:error] [pid 3810:tid 3837] [client 20.251.219.158:30737] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/12.php"] [unique_id "ad5m78qc5XaYZhFXVGfxPAAAAZg"]
[Wed Apr 15 00:10:39.379475 2026] [:error] [pid 22177:tid 22186] [client 20.251.219.158:16950] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "ad5m_4TVeJSXHDIlEDus1gAAAQc"]
[Wed Apr 15 00:10:48.167391 2026] [:error] [pid 3810:tid 3837] [client 20.251.219.158:35162] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/maxro.php"] [unique_id "ad5nCMqc5XaYZhFXVGfxcAAAAZg"]
[Wed Apr 15 00:10:49.368049 2026] [:error] [pid 3810:tid 3818] [client 20.251.219.158:15434] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/maxro.php"] [unique_id "ad5nCcqc5XaYZhFXVGfxcwAAAYU"]
[Wed Apr 15 00:10:50.597873 2026] [:error] [pid 22177:tid 22180] [client 20.251.219.158:16950] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/maxro.php"] [unique_id "ad5nCoTVeJSXHDIlEDus6gAAAQE"]
[Wed Apr 15 00:10:51.938174 2026] [:error] [pid 3810:tid 3818] [client 20.251.219.158:15427] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/maxro.php"] [unique_id "ad5nC8qc5XaYZhFXVGfxgQAAAYU"]
[Wed Apr 15 00:10:53.166259 2026] [:error] [pid 3778:tid 3782] [client 20.251.219.158:14064] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "ad5nDRx5DfpNmYF_PaEciQAAAUI"]
[Wed Apr 15 00:10:54.840840 2026] [:error] [pid 60074:tid 60080] [client 20.251.219.158:18457] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "ad5nDutqnEmNU9vpHCnjCgAAAMQ"]
[Wed Apr 15 00:10:55.854925 2026] [:error] [pid 3810:tid 3832] [client 20.251.219.158:35087] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "ad5nD8qc5XaYZhFXVGfxjwAAAZM"]
[Wed Apr 15 00:10:58.964381 2026] [:error] [pid 3810:tid 3827] [client 20.251.219.158:14076] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "ad5nEsqc5XaYZhFXVGfxmQAAAY4"]
[Wed Apr 15 00:11:00.931016 2026] [:error] [pid 59986:tid 60036] [client 20.251.219.158:33517] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "ad5nFJ6axKeW6bX4H7ffCgAAAFA"]
[Wed Apr 15 00:11:03.316961 2026] [:error] [pid 22177:tid 22181] [client 20.251.219.158:2468] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "ad5nF4TVeJSXHDIlEDus-QAAAQI"]
[Wed Apr 15 00:11:04.631959 2026] [:error] [pid 22177:tid 22188] [client 20.251.219.158:25057] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "ad5nGITVeJSXHDIlEDus_wAAAQk"]
[Wed Apr 15 00:11:05.588630 2026] [:error] [pid 3810:tid 3818] [client 20.251.219.158:39303] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1s7y8wt9dz.php"] [unique_id "ad5nGcqc5XaYZhFXVGfxqAAAAYU"]
[Wed Apr 15 00:11:07.164603 2026] [:error] [pid 59986:tid 60035] [client 20.251.219.158:39302] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bdktk.php"] [unique_id "ad5nG56axKeW6bX4H7ffEwAAAE8"]
[Wed Apr 15 00:11:08.008688 2026] [:error] [pid 59986:tid 60031] [client 20.251.219.158:16443] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bdktk.php"] [unique_id "ad5nHJ6axKeW6bX4H7ffFwAAAEs"]
[Wed Apr 15 00:11:09.227550 2026] [:error] [pid 59986:tid 60026] [client 20.251.219.158:21465] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bdktk.php"] [unique_id "ad5nHZ6axKeW6bX4H7ffHgAAAEY"]
[Wed Apr 15 00:11:10.216711 2026] [:error] [pid 59986:tid 60037] [client 20.251.219.158:47983] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bdktk.php"] [unique_id "ad5nHp6axKeW6bX4H7ffIwAAAFE"]
[Wed Apr 15 00:11:11.889884 2026] [:error] [pid 3810:tid 3829] [client 20.251.219.158:17701] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/v5.php"] [unique_id "ad5nH8qc5XaYZhFXVGfxtQAAAZA"]
[Wed Apr 15 00:11:13.122894 2026] [:error] [pid 3778:tid 3791] [client 20.251.219.158:30252] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/v5.php"] [unique_id "ad5nIRx5DfpNmYF_PaEcnwAAAUs"]
[Wed Apr 15 00:11:14.218534 2026] [:error] [pid 59986:tid 60022] [client 20.251.219.158:25485] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/v5.php"] [unique_id "ad5nIp6axKeW6bX4H7ffKgAAAEI"]
[Wed Apr 15 00:11:15.461151 2026] [:error] [pid 59987:tid 60055] [client 20.251.219.158:39738] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/v5.php"] [unique_id "ad5nI1Wpk-Tfi6_vLKphOAAAAIg"]
[Wed Apr 15 00:11:16.451725 2026] [:error] [pid 22177:tid 22201] [client 20.251.219.158:29705] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "ad5nJITVeJSXHDIlEDutDAAAARY"]
[Wed Apr 15 00:11:17.379853 2026] [:error] [pid 59986:tid 60040] [client 20.251.219.158:31307] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "ad5nJZ6axKeW6bX4H7ffLgAAAFQ"]
[Wed Apr 15 00:11:20.080631 2026] [:error] [pid 59986:tid 60022] [client 20.251.219.158:30846] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "ad5nKJ6axKeW6bX4H7ffLwAAAEI"]
[Wed Apr 15 00:11:20.901217 2026] [:error] [pid 59986:tid 60038] [client 20.251.219.158:18978] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws85.php"] [unique_id "ad5nKJ6axKeW6bX4H7ffNQAAAFI"]
[Wed Apr 15 00:11:22.306169 2026] [:error] [pid 59986:tid 60028] [client 20.251.219.158:29735] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws87.php"] [unique_id "ad5nKp6axKeW6bX4H7ffOgAAAEg"]
[Wed Apr 15 00:11:23.870071 2026] [:error] [pid 3778:tid 3794] [client 20.251.219.158:28113] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws87.php"] [unique_id "ad5nKxx5DfpNmYF_PaEcrwAAAU4"]
[Wed Apr 15 00:11:25.374462 2026] [:error] [pid 59986:tid 60032] [client 20.251.219.158:24100] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws87.php"] [unique_id "ad5nLZ6axKeW6bX4H7ffRQAAAEw"]
[Wed Apr 15 00:11:27.618366 2026] [:error] [pid 59985:tid 59999] [client 20.251.219.158:29284] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws87.php"] [unique_id "ad5nL-gHaxkvLE6V1kmEQgAAAAY"]
[Wed Apr 15 00:11:28.432178 2026] [:error] [pid 59986:tid 60026] [client 20.251.219.158:18112] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/layout.php"] [unique_id "ad5nMJ6axKeW6bX4H7ffUQAAAEY"]
[Wed Apr 15 00:11:30.890694 2026] [:error] [pid 59986:tid 60034] [client 20.251.219.158:15381] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/layout.php"] [unique_id "ad5nMp6axKeW6bX4H7ffWgAAAE4"]
[Wed Apr 15 00:11:32.116027 2026] [:error] [pid 59986:tid 60025] [client 20.251.219.158:2602] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/layout.php"] [unique_id "ad5nNJ6axKeW6bX4H7ffXwAAAEU"]
[Wed Apr 15 00:11:32.774359 2026] [:error] [pid 59986:tid 60031] [client 20.251.219.158:48561] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/layout.php"] [unique_id "ad5nNJ6axKeW6bX4H7ffYQAAAEs"]
[Wed Apr 15 00:11:34.006676 2026] [:error] [pid 59986:tid 60039] [client 20.251.219.158:2405] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/r2.php"] [unique_id "ad5nNp6axKeW6bX4H7ffaAAAAFM"]
[Wed Apr 15 00:11:35.510037 2026] [:error] [pid 59986:tid 60021] [client 20.251.219.158:27643] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/r2.php"] [unique_id "ad5nN56axKeW6bX4H7ffbgAAAEE"]
[Wed Apr 15 00:11:39.758840 2026] [:error] [pid 59986:tid 60044] [client 20.251.219.158:38981] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/r2.php"] [unique_id "ad5nO56axKeW6bX4H7fffAAAAFg"]
[Wed Apr 15 00:11:41.282446 2026] [:error] [pid 59986:tid 60021] [client 20.251.219.158:37025] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/r2.php"] [unique_id "ad5nPZ6axKeW6bX4H7ffggAAAEE"]
[Wed Apr 15 00:11:42.115820 2026] [:error] [pid 3778:tid 3780] [client 20.251.219.158:2377] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "ad5nPhx5DfpNmYF_PaEcuQAAAUA"]
[Wed Apr 15 00:11:45.315219 2026] [:error] [pid 3810:tid 3817] [client 20.251.219.158:17297] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "ad5nQcqc5XaYZhFXVGfxzgAAAYQ"]
[Wed Apr 15 00:11:56.543279 2026] [:error] [pid 22177:tid 22193] [client 20.251.219.158:27626] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ga.php"] [unique_id "ad5nTITVeJSXHDIlEDutNgAAAQ4"]
[Wed Apr 15 00:11:58.179615 2026] [:error] [pid 3810:tid 3831] [client 20.251.219.158:29808] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ga.php"] [unique_id "ad5nTsqc5XaYZhFXVGfx7gAAAZI"]
[Wed Apr 15 00:11:59.040714 2026] [:error] [pid 59986:tid 60038] [client 20.251.219.158:37583] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ga.php"] [unique_id "ad5nT56axKeW6bX4H7ffvwAAAFI"]
[Wed Apr 15 00:11:59.791018 2026] [:error] [pid 59987:tid 60052] [client 20.251.219.158:27604] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ga.php"] [unique_id "ad5nT1Wpk-Tfi6_vLKphWwAAAIU"]
[Wed Apr 15 00:12:00.901728 2026] [:error] [pid 59985:tid 59997] [client 20.251.219.158:21978] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xozx.php"] [unique_id "ad5nUOgHaxkvLE6V1kmEWQAAAAQ"]
[Wed Apr 15 00:12:02.983830 2026] [:error] [pid 59987:tid 60059] [client 20.251.219.158:36545] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xozx.php"] [unique_id "ad5nUlWpk-Tfi6_vLKphXgAAAIw"]
[Wed Apr 15 00:12:04.299553 2026] [:error] [pid 59986:tid 60041] [client 20.251.219.158:37620] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xozx.php"] [unique_id "ad5nVJ6axKeW6bX4H7ffyQAAAFU"]
[Wed Apr 15 00:12:05.400030 2026] [:error] [pid 59987:tid 60058] [client 20.251.219.158:27589] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xozx.php"] [unique_id "ad5nVVWpk-Tfi6_vLKphYQAAAIs"]
[Wed Apr 15 00:12:21.273575 2026] [:error] [pid 59987:tid 60052] [client 20.251.219.158:17300] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/press.php"] [unique_id "ad5nZVWpk-Tfi6_vLKphZQAAAIU"]
[Wed Apr 15 00:12:24.208191 2026] [:error] [pid 3810:tid 3826] [client 20.251.219.158:26032] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/press.php"] [unique_id "ad5naMqc5XaYZhFXVGfyDQAAAY0"]
[Wed Apr 15 00:12:28.339369 2026] [:error] [pid 60074:tid 60086] [client 20.251.219.158:26022] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/press.php"] [unique_id "ad5nbOtqnEmNU9vpHCnjnwAAAMo"]
[Wed Apr 15 00:12:29.995641 2026] [:error] [pid 59985:tid 60017] [client 20.251.219.158:34405] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/press.php"] [unique_id "ad5nbegHaxkvLE6V1kmEcQAAABg"]
[Wed Apr 15 00:12:35.258365 2026] [:error] [pid 59985:tid 60011] [client 20.251.219.158:37578] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "ad5nc-gHaxkvLE6V1kmEcgAAABI"]
[Wed Apr 15 00:12:40.214097 2026] [:error] [pid 59985:tid 59999] [client 20.251.219.158:18532] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "ad5neOgHaxkvLE6V1kmEdgAAAAY"]
[Wed Apr 15 00:12:46.739647 2026] [:error] [pid 59986:tid 60028] [client 20.251.219.158:21976] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-kz.php"] [unique_id "ad5nfp6axKeW6bX4H7ff9QAAAEg"]
[Wed Apr 15 00:12:47.702970 2026] [:error] [pid 59986:tid 60037] [client 20.251.219.158:2423] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-kz.php"] [unique_id "ad5nf56axKeW6bX4H7ff-QAAAFE"]
[Wed Apr 15 00:12:50.385278 2026] [:error] [pid 59986:tid 60023] [client 20.251.219.158:36579] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-kz.php"] [unique_id "ad5ngp6axKeW6bX4H7fgAwAAAEM"]
[Wed Apr 15 00:13:26.764373 2026] [:error] [pid 3778:tid 3802] [client 20.251.219.158:26548] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/config.php"] [unique_id "ad5nphx5DfpNmYF_PaEdeQAAAVY"]
[Wed Apr 15 00:13:28.095649 2026] [:error] [pid 59986:tid 60031] [client 20.251.219.158:17353] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/config.php"] [unique_id "ad5nqJ6axKeW6bX4H7fg0AAAAEs"]
[Wed Apr 15 00:13:29.363373 2026] [:error] [pid 3810:tid 3819] [client 20.251.219.158:24427] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/config.php"] [unique_id "ad5nqcqc5XaYZhFXVGfycAAAAYY"]
[Wed Apr 15 00:13:32.349596 2026] [:error] [pid 3810:tid 3823] [client 20.251.219.158:36527] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/config.php"] [unique_id "ad5nrMqc5XaYZhFXVGfydAAAAYo"]
[Wed Apr 15 00:13:36.013651 2026] [:error] [pid 60074:tid 60076] [client 20.251.219.158:24406] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x3x.php"] [unique_id "ad5nsOtqnEmNU9vpHCnkAgAAAMA"]
[Wed Apr 15 00:13:41.972529 2026] [:error] [pid 3810:tid 3827] [client 20.251.219.158:42294] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x3x.php"] [unique_id "ad5ntcqc5XaYZhFXVGfyeQAAAY4"]
[Wed Apr 15 00:13:46.099156 2026] [:error] [pid 59986:tid 60026] [client 20.251.219.158:15670] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x3x.php"] [unique_id "ad5nup6axKeW6bX4H7fhRQAAAEY"]
[Wed Apr 15 00:13:48.926572 2026] [:error] [pid 59986:tid 60040] [client 20.251.219.158:45342] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xy.php"] [unique_id "ad5nvJ6axKeW6bX4H7fhRwAAAFQ"]
[Wed Apr 15 00:13:54.399536 2026] [:error] [pid 3810:tid 3829] [client 20.251.219.158:2342] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xy.php"] [unique_id "ad5nwsqc5XaYZhFXVGfyngAAAZA"]
[Wed Apr 15 00:13:55.743433 2026] [:error] [pid 59986:tid 60029] [client 20.251.219.158:36213] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xy.php"] [unique_id "ad5nw56axKeW6bX4H7fhUgAAAEk"]
[Wed Apr 15 00:13:57.115055 2026] [:error] [pid 59986:tid 60023] [client 20.251.219.158:2363] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xy.php"] [unique_id "ad5nxZ6axKeW6bX4H7fhVwAAAEM"]
[Wed Apr 15 00:14:04.302302 2026] [:error] [pid 22177:tid 22187] [client 20.251.219.158:26573] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/global.php"] [unique_id "ad5nzITVeJSXHDIlEDutlwAAAQg"]
[Wed Apr 15 00:14:16.544424 2026] [:error] [pid 3778:tid 3787] [client 20.251.219.158:36541] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "ad5n2Bx5DfpNmYF_PaEdyAAAAUc"]
[Wed Apr 15 00:14:19.018299 2026] [:error] [pid 59986:tid 60029] [client 20.251.219.158:45355] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "ad5n256axKeW6bX4H7fh7AAAAEk"]
[Wed Apr 15 00:14:21.655287 2026] [:error] [pid 59986:tid 60035] [client 20.251.219.158:45314] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "ad5n3Z6axKeW6bX4H7fh_QAAAE8"]
[Wed Apr 15 00:14:48.483776 2026] [:error] [pid 59987:tid 60069] [client 20.251.219.158:37606] [client 20.251.219.158] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/wincust.php"] [unique_id "ad5n-FWpk-Tfi6_vLKphxwAAAJY"]
[Wed Apr 15 00:14:55.750006 2026] [:error] [pid 3778:tid 3803] [client 20.251.219.158:34398] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-01ul.php"] [unique_id "ad5n_xx5DfpNmYF_PaEd9wAAAVc"]
[Wed Apr 15 00:14:56.768861 2026] [:error] [pid 3810:tid 3815] [client 20.251.219.158:26019] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-01ul.php"] [unique_id "ad5oAMqc5XaYZhFXVGfzXAAAAYI"]
[Wed Apr 15 00:14:58.570044 2026] [:error] [pid 59986:tid 60032] [client 20.251.219.158:30303] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-01ul.php"] [unique_id "ad5oAp6axKeW6bX4H7fiaQAAAEw"]
[Wed Apr 15 00:14:59.770303 2026] [:error] [pid 59985:tid 60002] [client 20.251.219.158:20928] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-01ul.php"] [unique_id "ad5oA-gHaxkvLE6V1kmFMAAAAAk"]
[Wed Apr 15 00:15:01.968819 2026] [:error] [pid 59987:tid 60064] [client 20.251.219.158:37585] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/e7.php"] [unique_id "ad5oBVWpk-Tfi6_vLKphzgAAAJE"]
[Wed Apr 15 00:15:02.740610 2026] [:error] [pid 59987:tid 60052] [client 20.251.219.158:21229] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/e7.php"] [unique_id "ad5oBlWpk-Tfi6_vLKphzwAAAIU"]
[Wed Apr 15 00:15:04.325766 2026] [:error] [pid 3810:tid 3820] [client 20.251.219.158:19329] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/e7.php"] [unique_id "ad5oCMqc5XaYZhFXVGfzZAAAAYc"]
[Wed Apr 15 00:15:05.872310 2026] [:error] [pid 60074:tid 60078] [client 20.251.219.158:21234] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/e7.php"] [unique_id "ad5oCetqnEmNU9vpHCnlLQAAAMI"]
[Wed Apr 15 00:15:09.126950 2026] [:error] [pid 59986:tid 60040] [client 20.251.219.158:15471] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/e3.php"] [unique_id "ad5oDZ6axKeW6bX4H7fieQAAAFQ"]
[Wed Apr 15 00:15:11.151812 2026] [:error] [pid 3810:tid 3836] [client 20.251.219.158:20955] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/e3.php"] [unique_id "ad5oD8qc5XaYZhFXVGfzZgAAAZc"]
[Wed Apr 15 00:15:13.621972 2026] [:error] [pid 60074:tid 60098] [client 20.251.219.158:14051] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/e3.php"] [unique_id "ad5oEetqnEmNU9vpHCnlNQAAANY"]
[Wed Apr 15 00:15:16.129455 2026] [:error] [pid 3810:tid 3821] [client 20.251.219.158:19348] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/e3.php"] [unique_id "ad5oFMqc5XaYZhFXVGfzcgAAAYg"]
[Wed Apr 15 00:15:16.846943 2026] [:error] [pid 22177:tid 22190] [client 20.251.219.158:14028] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aevly.php"] [unique_id "ad5oFITVeJSXHDIlEDut1wAAAQs"]
[Wed Apr 15 00:15:19.294273 2026] [:error] [pid 59986:tid 60020] [client 20.251.219.158:25070] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aevly.php"] [unique_id "ad5oF56axKeW6bX4H7figwAAAEA"]
[Wed Apr 15 00:15:23.557319 2026] [:error] [pid 60074:tid 60095] [client 20.251.219.158:2835] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aevly.php"] [unique_id "ad5oG-tqnEmNU9vpHCnlPAAAANM"]
[Wed Apr 15 00:15:24.658943 2026] [:error] [pid 3778:tid 3803] [client 20.251.219.158:17726] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aevly.php"] [unique_id "ad5oHBx5DfpNmYF_PaEeEgAAAVc"]
[Wed Apr 15 00:15:29.336725 2026] [:error] [pid 22177:tid 22188] [client 20.251.219.158:2841] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "ad5oIYTVeJSXHDIlEDut3AAAAQk"]
[Wed Apr 15 00:15:31.379880 2026] [:error] [pid 3778:tid 3795] [client 20.251.219.158:2148] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "ad5oIxx5DfpNmYF_PaEeFgAAAU8"]
[Wed Apr 15 00:15:32.314294 2026] [:error] [pid 59987:tid 60049] [client 20.251.219.158:24331] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "ad5oJFWpk-Tfi6_vLKph4wAAAII"]
[Wed Apr 15 00:15:35.032182 2026] [:error] [pid 3810:tid 3827] [client 20.251.219.158:27118] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "ad5oJ8qc5XaYZhFXVGfzgwAAAY4"]
[Wed Apr 15 00:15:51.981837 2026] [:error] [pid 59987:tid 60070] [client 20.251.219.158:18978] [client 20.251.219.158] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cilus.php"] [unique_id "ad5oN1Wpk-Tfi6_vLKph8wAAAJc"]
[Wed Apr 15 16:31:21.655689 2026] [:error] [pid 65412:tid 65432] [client 216.73.216.211:14764] [client 216.73.216.211] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||www.measureyourcause.measureyourbrand.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/robots.txt"] [unique_id "ad9M2fEYT61VHfhVE5ft1QAAAZI"]
[Wed Apr 15 20:33:56.633745 2026] [:error] [pid 31053:tid 31060] [client 216.73.216.211:22665] [client 216.73.216.211] ModSecurity: Warning. Pattern match "^$" at REQUEST_HEADERS:user-agent. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "120"] [id "217240"] [rev "3"] [msg "COMODO WAF: Empty User Agent Header||www.measureyourcause.measureyourbrand.com.au|F|5"] [data "REQUEST_HEADERS:user-agent="] [severity "NOTICE"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/robots.txt"] [unique_id "ad-FtBcEkLCmvF0fjDfSIwAAAIQ"]
[Thu Apr 16 01:13:14.328163 2026] [authz_core:error] [pid 37370:tid 37373] [client 209.97.180.8:33224] AH01630: client denied by server configuration: /home/measureyourbrand/public_html/measureyourcause.com.au/server-status
[Thu Apr 16 01:13:19.562349 2026] [:error] [pid 37370:tid 37396] [client 209.97.180.8:35554] [client 209.97.180.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env"] [unique_id "ad_HL3g-gnM2Ga0cGADInQAAARg"]
[Thu Apr 16 01:13:23.554574 2026] [:error] [pid 37370:tid 37392] [client 209.97.180.8:35574] [client 209.97.180.8] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "ad_HM3g-gnM2Ga0cGADIvgAAARQ"]
[Thu Apr 16 01:13:44.535332 2026] [:error] [pid 30956:tid 30975] [client 209.97.180.8:35528] [client 209.97.180.8] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourcause.measureyourbrand.com.au|F|2"] [data ".axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/trace.axd"] [unique_id "ad_HSEBGUpjaWntNYq26WwAAAA8"]
[Thu Apr 16 02:43:15.229757 2026] [:error] [pid 34542:tid 34553] [client 91.200.101.138:52079] [client 91.200.101.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/graphql"] [unique_id "ad_cQwdF4OGi-asleB6gagAAAUk"]
[Thu Apr 16 02:43:15.343390 2026] [:error] [pid 20548:tid 20562] [client 91.200.101.138:53118] [client 91.200.101.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/graphql"] [unique_id "ad_cQ6kpqgnqCHq6bJbKpQAAAIs"]
[Thu Apr 16 07:50:38.606985 2026] [:error] [pid 57639:tid 57655] [client 65.52.70.248:7702] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/t.php"] [unique_id "aeAkTqMCQoTw7TsxWunmwgAAAMk"]
[Thu Apr 16 07:50:39.140833 2026] [:error] [pid 29603:tid 29624] [client 65.52.70.248:7796] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/t.php"] [unique_id "aeAkT1fGOR6fpTWUAzrptQAAARM"]
[Thu Apr 16 07:50:39.641357 2026] [:error] [pid 57639:tid 57660] [client 65.52.70.248:7753] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/t.php"] [unique_id "aeAkT6MCQoTw7TsxWunmxQAAAM4"]
[Thu Apr 16 07:50:40.141871 2026] [:error] [pid 57536:tid 57572] [client 65.52.70.248:7791] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/t.php"] [unique_id "aeAkUCQU4faGja6jpDuPQAAAABg"]
[Thu Apr 16 07:50:40.670107 2026] [:error] [pid 29603:tid 29610] [client 65.52.70.248:7682] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aeAkUFfGOR6fpTWUAzrptgAAAQU"]
[Thu Apr 16 07:50:41.169973 2026] [:error] [pid 57639:tid 57646] [client 65.52.70.248:7762] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aeAkUaMCQoTw7TsxWunmxgAAAMA"]
[Thu Apr 16 07:50:41.668776 2026] [:error] [pid 57536:tid 57549] [client 65.52.70.248:7684] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aeAkUSQU4faGja6jpDuPQgAAAAE"]
[Thu Apr 16 07:50:42.170038 2026] [:error] [pid 57538:tid 57617] [client 65.52.70.248:7136] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aeAkUsuMaiEF5SVR2BdRAQAAAI8"]
[Thu Apr 16 07:50:42.673596 2026] [:error] [pid 49094:tid 49113] [client 65.52.70.248:7760] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aeAkUjbDwvcXorHR_MzAQQAAAVE"]
[Thu Apr 16 07:50:43.230520 2026] [:error] [pid 57537:tid 57597] [client 65.52.70.248:7688] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aeAkU1VQRS8nm73ENAlEPAAAAFY"]
[Thu Apr 16 07:50:43.731341 2026] [:error] [pid 49094:tid 49102] [client 65.52.70.248:7709] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aeAkUzbDwvcXorHR_MzARQAAAUY"]
[Thu Apr 16 07:50:44.373040 2026] [:error] [pid 57537:tid 57576] [client 65.52.70.248:7782] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aeAkVFVQRS8nm73ENAlEPgAAAEE"]
[Thu Apr 16 07:50:44.874980 2026] [:error] [pid 57537:tid 57595] [client 65.52.70.248:7770] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/new.php"] [unique_id "aeAkVFVQRS8nm73ENAlEPwAAAFQ"]
[Thu Apr 16 07:50:46.111055 2026] [:error] [pid 57538:tid 57616] [client 65.52.70.248:7681] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/new.php"] [unique_id "aeAkVsuMaiEF5SVR2BdRBgAAAI4"]
[Thu Apr 16 07:50:46.615919 2026] [:error] [pid 57538:tid 57608] [client 65.52.70.248:7798] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/new.php"] [unique_id "aeAkVsuMaiEF5SVR2BdRCQAAAIY"]
[Thu Apr 16 07:50:47.117980 2026] [:error] [pid 49094:tid 49117] [client 65.52.70.248:7761] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/new.php"] [unique_id "aeAkVzbDwvcXorHR_MzASAAAAVU"]
[Thu Apr 16 07:50:48.635816 2026] [:error] [pid 57536:tid 57566] [client 65.52.70.248:7706] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aeAkWCQU4faGja6jpDuPSAAAABI"]
[Thu Apr 16 07:50:49.134294 2026] [:error] [pid 49094:tid 49105] [client 65.52.70.248:7767] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aeAkWTbDwvcXorHR_MzATgAAAUk"]
[Thu Apr 16 07:50:49.660829 2026] [:error] [pid 57538:tid 57622] [client 65.52.70.248:7797] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aeAkWcuMaiEF5SVR2BdRDgAAAJQ"]
[Thu Apr 16 07:50:50.162018 2026] [:error] [pid 57537:tid 57577] [client 65.52.70.248:7701] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aeAkWlVQRS8nm73ENAlEQwAAAEI"]
[Thu Apr 16 07:50:50.662466 2026] [:error] [pid 57538:tid 57626] [client 65.52.70.248:7699] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aeAkWsuMaiEF5SVR2BdRDwAAAJg"]
[Thu Apr 16 07:50:51.236162 2026] [:error] [pid 29603:tid 29619] [client 65.52.70.248:7692] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aeAkW1fGOR6fpTWUAzrpuAAAAQ4"]
[Thu Apr 16 07:50:51.738457 2026] [:error] [pid 49094:tid 49102] [client 65.52.70.248:7713] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aeAkWzbDwvcXorHR_MzAVAAAAUY"]
[Thu Apr 16 07:50:52.240871 2026] [:error] [pid 57537:tid 57586] [client 65.52.70.248:7786] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aeAkXFVQRS8nm73ENAlERAAAAEs"]
[Thu Apr 16 07:50:52.744162 2026] [:error] [pid 57538:tid 57616] [client 65.52.70.248:7747] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aeAkXMuMaiEF5SVR2BdRFgAAAI4"]
[Thu Apr 16 07:50:53.244944 2026] [:error] [pid 57639:tid 57653] [client 65.52.70.248:7694] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aeAkXaMCQoTw7TsxWunm0QAAAMc"]
[Thu Apr 16 07:50:53.745744 2026] [:error] [pid 57639:tid 57648] [client 65.52.70.248:7711] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aeAkXaMCQoTw7TsxWunm1QAAAMI"]
[Thu Apr 16 07:50:55.256525 2026] [:error] [pid 57639:tid 57667] [client 65.52.70.248:7688] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aeAkX6MCQoTw7TsxWunm4QAAANU"]
[Thu Apr 16 07:50:55.787724 2026] [:error] [pid 49094:tid 49112] [client 65.52.70.248:7800] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "aeAkXzbDwvcXorHR_MzAVgAAAVA"]
[Thu Apr 16 07:50:56.290741 2026] [:error] [pid 57639:tid 57651] [client 65.52.70.248:7700] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "aeAkYKMCQoTw7TsxWunm6AAAAMU"]
[Thu Apr 16 07:50:56.795615 2026] [:error] [pid 57639:tid 57655] [client 65.52.70.248:7165] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "aeAkYKMCQoTw7TsxWunm7QAAAMk"]
[Thu Apr 16 07:50:57.297665 2026] [:error] [pid 57538:tid 57604] [client 65.52.70.248:7784] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "aeAkYcuMaiEF5SVR2BdRHwAAAII"]
[Thu Apr 16 07:50:58.378341 2026] [:error] [pid 57639:tid 57658] [client 65.52.70.248:7131] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-blogs.php"] [unique_id "aeAkYqMCQoTw7TsxWunm9QAAAMw"]
[Thu Apr 16 07:50:59.960668 2026] [:error] [pid 57639:tid 57668] [client 65.52.70.248:7750] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-blogs.php"] [unique_id "aeAkY6MCQoTw7TsxWunm-QAAANY"]
[Thu Apr 16 07:51:00.460977 2026] [:error] [pid 49094:tid 49114] [client 65.52.70.248:7133] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-blogs.php"] [unique_id "aeAkZDbDwvcXorHR_MzAVwAAAVI"]
[Thu Apr 16 07:51:00.960116 2026] [:error] [pid 49094:tid 49109] [client 65.52.70.248:7776] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-blogs.php"] [unique_id "aeAkZDbDwvcXorHR_MzAWAAAAU0"]
[Thu Apr 16 07:51:01.460608 2026] [:error] [pid 49094:tid 49110] [client 65.52.70.248:7708] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aeAkZTbDwvcXorHR_MzAWQAAAU4"]
[Thu Apr 16 07:51:02.967797 2026] [:error] [pid 49094:tid 49105] [client 65.52.70.248:7696] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aeAkZjbDwvcXorHR_MzAXAAAAUk"]
[Thu Apr 16 07:51:03.486453 2026] [:error] [pid 57639:tid 57669] [client 65.52.70.248:7773] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aeAkZ6MCQoTw7TsxWunnAwAAANc"]
[Thu Apr 16 07:51:04.020101 2026] [:error] [pid 57537:tid 57594] [client 65.52.70.248:7716] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aeAkaFVQRS8nm73ENAlESgAAAFM"]
[Thu Apr 16 07:51:04.518762 2026] [:error] [pid 57537:tid 57595] [client 65.52.70.248:7802] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "aeAkaFVQRS8nm73ENAlESwAAAFQ"]
[Thu Apr 16 07:51:05.017473 2026] [:error] [pid 57537:tid 57587] [client 65.52.70.248:7730] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "aeAkaVVQRS8nm73ENAlETQAAAEw"]
[Thu Apr 16 07:51:06.614703 2026] [:error] [pid 57538:tid 57615] [client 65.52.70.248:7779] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "aeAkasuMaiEF5SVR2BdRKgAAAI0"]
[Thu Apr 16 07:51:07.114262 2026] [:error] [pid 57537:tid 57586] [client 65.52.70.248:7698] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "aeAka1VQRS8nm73ENAlEUQAAAEs"]
[Thu Apr 16 07:51:07.616619 2026] [:error] [pid 57536:tid 57556] [client 65.52.70.248:7801] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "aeAkayQU4faGja6jpDuPTQAAAAg"]
[Thu Apr 16 07:51:08.118302 2026] [:error] [pid 49094:tid 49119] [client 65.52.70.248:7686] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "aeAkbDbDwvcXorHR_MzAYgAAAVc"]
[Thu Apr 16 07:51:09.619288 2026] [:error] [pid 57639:tid 57667] [client 65.52.70.248:7799] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "aeAkbaMCQoTw7TsxWunnCwAAANU"]
[Thu Apr 16 07:51:10.149338 2026] [:error] [pid 49094:tid 49106] [client 65.52.70.248:7117] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "aeAkbjbDwvcXorHR_MzAZQAAAUo"]
[Thu Apr 16 07:51:10.667957 2026] [:error] [pid 49094:tid 49108] [client 65.52.70.248:7775] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/mh.php"] [unique_id "aeAkbjbDwvcXorHR_MzAZgAAAUw"]
[Thu Apr 16 07:51:11.181438 2026] [:error] [pid 57537:tid 57579] [client 65.52.70.248:7752] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/mh.php"] [unique_id "aeAkb1VQRS8nm73ENAlEUwAAAEQ"]
[Thu Apr 16 07:51:11.678539 2026] [:error] [pid 57538:tid 57605] [client 65.52.70.248:7704] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/mh.php"] [unique_id "aeAkb8uMaiEF5SVR2BdRMQAAAIM"]
[Thu Apr 16 07:51:12.234776 2026] [:error] [pid 57538:tid 57622] [client 65.52.70.248:7727] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/mh.php"] [unique_id "aeAkcMuMaiEF5SVR2BdRMwAAAJQ"]
[Thu Apr 16 07:51:12.736987 2026] [:error] [pid 57538:tid 57618] [client 65.52.70.248:7705] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aeAkcMuMaiEF5SVR2BdRNQAAAJA"]
[Thu Apr 16 07:51:13.318297 2026] [:error] [pid 57536:tid 57558] [client 65.52.70.248:7777] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aeAkcSQU4faGja6jpDuPTwAAAAo"]
[Thu Apr 16 07:51:13.820948 2026] [:error] [pid 57639:tid 57666] [client 65.52.70.248:7757] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aeAkcaMCQoTw7TsxWunnDAAAANQ"]
[Thu Apr 16 07:51:14.334872 2026] [:error] [pid 57639:tid 57654] [client 65.52.70.248:7789] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aeAkcqMCQoTw7TsxWunnDQAAAMg"]
[Thu Apr 16 07:51:14.834540 2026] [:error] [pid 57536:tid 57568] [client 65.52.70.248:7707] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aeAkciQU4faGja6jpDuPUAAAABQ"]
[Thu Apr 16 07:51:15.339689 2026] [:error] [pid 29603:tid 29607] [client 65.52.70.248:7728] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aeAkc1fGOR6fpTWUAzrpvQAAAQI"]
[Thu Apr 16 07:51:15.847582 2026] [:error] [pid 49094:tid 49105] [client 65.52.70.248:7691] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aeAkczbDwvcXorHR_MzAbgAAAUk"]
[Thu Apr 16 07:51:17.351114 2026] [:error] [pid 29603:tid 29621] [client 65.52.70.248:7743] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aeAkdVfGOR6fpTWUAzrpvwAAARA"]
[Thu Apr 16 07:51:17.852006 2026] [:error] [pid 57537:tid 57575] [client 65.52.70.248:7687] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bmi.php"] [unique_id "aeAkdVVQRS8nm73ENAlEVAAAAEA"]
[Thu Apr 16 07:51:18.353788 2026] [:error] [pid 49094:tid 49107] [client 65.52.70.248:7744] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bmi.php"] [unique_id "aeAkdjbDwvcXorHR_MzAcQAAAUs"]
[Thu Apr 16 07:51:18.853668 2026] [:error] [pid 57536:tid 57552] [client 65.52.70.248:7720] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bmi.php"] [unique_id "aeAkdiQU4faGja6jpDuPUQAAAAQ"]
[Thu Apr 16 07:51:19.365734 2026] [:error] [pid 49094:tid 49102] [client 65.52.70.248:7804] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bmi.php"] [unique_id "aeAkdzbDwvcXorHR_MzAcwAAAUY"]
[Thu Apr 16 07:51:19.927866 2026] [:error] [pid 57639:tid 57668] [client 65.52.70.248:7751] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aeAkd6MCQoTw7TsxWunnEAAAANY"]
[Thu Apr 16 07:51:20.429436 2026] [:error] [pid 29603:tid 29615] [client 65.52.70.248:7104] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aeAkeFfGOR6fpTWUAzrpxAAAAQo"]
[Thu Apr 16 07:51:20.929973 2026] [:error] [pid 57537:tid 57578] [client 65.52.70.248:7107] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aeAkeFVQRS8nm73ENAlEVgAAAEM"]
[Thu Apr 16 07:51:21.430144 2026] [:error] [pid 57639:tid 57646] [client 65.52.70.248:7764] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aeAkeaMCQoTw7TsxWunnEwAAAMA"]
[Thu Apr 16 07:51:21.963860 2026] [:error] [pid 57639:tid 57663] [client 65.52.70.248:7690] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aeAkeaMCQoTw7TsxWunnFgAAANE"]
[Thu Apr 16 07:51:22.470996 2026] [:error] [pid 57538:tid 57620] [client 65.52.70.248:7768] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aeAkesuMaiEF5SVR2BdRRgAAAJI"]
[Thu Apr 16 07:51:24.350858 2026] [:error] [pid 57639:tid 57648] [client 65.52.70.248:7765] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aeAkfKMCQoTw7TsxWunnGwAAAMI"]
[Thu Apr 16 07:51:24.852735 2026] [:error] [pid 57538:tid 57622] [client 65.52.70.248:7759] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aeAkfMuMaiEF5SVR2BdRSQAAAJQ"]
[Thu Apr 16 07:51:25.929003 2026] [:error] [pid 57639:tid 57653] [client 65.52.70.248:7772] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "aeAkfaMCQoTw7TsxWunnIgAAAMc"]
[Thu Apr 16 07:51:27.003914 2026] [:error] [pid 57639:tid 57663] [client 65.52.70.248:7113] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "aeAkf6MCQoTw7TsxWunnJAAAANE"]
[Thu Apr 16 07:51:28.504358 2026] [:error] [pid 49094:tid 49109] [client 65.52.70.248:7738] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "aeAkgDbDwvcXorHR_MzAfAAAAU0"]
[Thu Apr 16 07:51:29.043471 2026] [:error] [pid 57639:tid 57662] [client 65.52.70.248:7683] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "aeAkgaMCQoTw7TsxWunnMAAAANA"]
[Thu Apr 16 07:51:29.571501 2026] [:error] [pid 29603:tid 29612] [client 65.52.70.248:7115] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "aeAkgVfGOR6fpTWUAzrpxQAAAQc"]
[Thu Apr 16 07:51:30.079732 2026] [:error] [pid 57537:tid 57580] [client 65.52.70.248:7725] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "aeAkglVQRS8nm73ENAlEXwAAAEU"]
[Thu Apr 16 07:51:30.633001 2026] [:error] [pid 57639:tid 57665] [client 65.52.70.248:7785] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "aeAkgqMCQoTw7TsxWunnMgAAANM"]
[Thu Apr 16 07:51:31.160735 2026] [:error] [pid 57639:tid 57663] [client 65.52.70.248:7127] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "aeAkg6MCQoTw7TsxWunnMwAAANE"]
[Thu Apr 16 07:51:31.680195 2026] [:error] [pid 29603:tid 29623] [client 65.52.70.248:7785] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/press.php"] [unique_id "aeAkg1fGOR6fpTWUAzrpxgAAARI"]
[Thu Apr 16 07:51:32.207292 2026] [:error] [pid 57537:tid 57599] [client 65.52.70.248:7742] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/press.php"] [unique_id "aeAkhFVQRS8nm73ENAlEYQAAAFg"]
[Thu Apr 16 07:51:32.745362 2026] [:error] [pid 57536:tid 57553] [client 65.52.70.248:7065] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/press.php"] [unique_id "aeAkhCQU4faGja6jpDuPWAAAAAU"]
[Thu Apr 16 07:51:33.250317 2026] [:error] [pid 57538:tid 57624] [client 65.52.70.248:7756] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/press.php"] [unique_id "aeAkhcuMaiEF5SVR2BdRTgAAAJY"]
[Thu Apr 16 07:51:33.761466 2026] [:error] [pid 57639:tid 57662] [client 65.52.70.248:7729] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "aeAkhaMCQoTw7TsxWunnNwAAANA"]
[Thu Apr 16 07:51:34.261061 2026] [:error] [pid 57538:tid 57616] [client 65.52.70.248:7685] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "aeAkhsuMaiEF5SVR2BdRTwAAAI4"]
[Thu Apr 16 07:51:34.758288 2026] [:error] [pid 57639:tid 57649] [client 65.52.70.248:7732] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "aeAkhqMCQoTw7TsxWunnOQAAAMM"]
[Thu Apr 16 07:51:35.260573 2026] [:error] [pid 29603:tid 29622] [client 65.52.70.248:7794] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "aeAkh1fGOR6fpTWUAzrpyAAAARE"]
[Thu Apr 16 07:51:35.759816 2026] [:error] [pid 29603:tid 29616] [client 65.52.70.248:7712] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/s.php"] [unique_id "aeAkh1fGOR6fpTWUAzrpygAAAQs"]
[Thu Apr 16 07:51:36.314834 2026] [:error] [pid 49094:tid 49103] [client 65.52.70.248:7748] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/s.php"] [unique_id "aeAkiDbDwvcXorHR_MzAfwAAAUc"]
[Thu Apr 16 07:51:36.844110 2026] [:error] [pid 57536:tid 57559] [client 65.52.70.248:7160] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/s.php"] [unique_id "aeAkiCQU4faGja6jpDuPWgAAAAs"]
[Thu Apr 16 07:51:37.348830 2026] [:error] [pid 29603:tid 29621] [client 65.52.70.248:7745] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/s.php"] [unique_id "aeAkiVfGOR6fpTWUAzrpzgAAARA"]
[Thu Apr 16 07:51:37.854673 2026] [:error] [pid 57639:tid 57661] [client 65.52.70.248:7807] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/first.php"] [unique_id "aeAkiaMCQoTw7TsxWunnPAAAAM8"]
[Thu Apr 16 07:51:44.899190 2026] [:error] [pid 57639:tid 57650] [client 65.52.70.248:7703] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "aeAkkKMCQoTw7TsxWunnVAAAAMQ"]
[Thu Apr 16 07:51:45.411546 2026] [:error] [pid 49094:tid 49115] [client 65.52.70.248:7710] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "aeAkkTbDwvcXorHR_MzAiAAAAVM"]
[Thu Apr 16 07:51:45.934961 2026] [:error] [pid 49094:tid 49097] [client 65.52.70.248:7082] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "aeAkkTbDwvcXorHR_MzAiwAAAUE"]
[Thu Apr 16 07:51:46.436212 2026] [:error] [pid 49094:tid 49100] [client 65.52.70.248:7680] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "aeAkkjbDwvcXorHR_MzAjQAAAUQ"]
[Thu Apr 16 07:51:46.940414 2026] [:error] [pid 57538:tid 57625] [client 65.52.70.248:7695] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/term.php"] [unique_id "aeAkksuMaiEF5SVR2BdRUwAAAJc"]
[Thu Apr 16 07:51:47.445738 2026] [:error] [pid 49094:tid 49113] [client 65.52.70.248:7121] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/term.php"] [unique_id "aeAkkzbDwvcXorHR_MzAkwAAAVE"]
[Thu Apr 16 07:51:47.960396 2026] [:error] [pid 57639:tid 57661] [client 65.52.70.248:7144] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/term.php"] [unique_id "aeAkk6MCQoTw7TsxWunnWwAAAM8"]
[Thu Apr 16 07:51:48.463449 2026] [:error] [pid 29603:tid 29628] [client 65.52.70.248:7106] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/term.php"] [unique_id "aeAklFfGOR6fpTWUAzrp3wAAARc"]
[Thu Apr 16 07:51:50.011536 2026] [:error] [pid 57639:tid 57659] [client 65.52.70.248:6982] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/b.php"] [unique_id "aeAklqMCQoTw7TsxWunnYwAAAM0"]
[Thu Apr 16 07:51:50.545064 2026] [:error] [pid 49094:tid 49112] [client 65.52.70.248:7141] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/b.php"] [unique_id "aeAkljbDwvcXorHR_MzAoQAAAVA"]
[Thu Apr 16 07:51:51.047609 2026] [:error] [pid 49094:tid 49109] [client 65.52.70.248:7147] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/b.php"] [unique_id "aeAklzbDwvcXorHR_MzAogAAAU0"]
[Thu Apr 16 07:51:51.633652 2026] [:error] [pid 57639:tid 57646] [client 65.52.70.248:7763] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/b.php"] [unique_id "aeAkl6MCQoTw7TsxWunnaAAAAMA"]
[Thu Apr 16 07:51:52.149715 2026] [:error] [pid 57639:tid 57667] [client 65.52.70.248:7793] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aeAkmKMCQoTw7TsxWunnaQAAANU"]
[Thu Apr 16 07:51:52.657576 2026] [:error] [pid 57639:tid 57655] [client 65.52.70.248:7139] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aeAkmKMCQoTw7TsxWunnbgAAAMk"]
[Thu Apr 16 07:51:53.264208 2026] [:error] [pid 29603:tid 29618] [client 65.52.70.248:7140] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aeAkmVfGOR6fpTWUAzrp4QAAAQ0"]
[Thu Apr 16 07:51:53.787924 2026] [:error] [pid 49094:tid 49117] [client 65.52.70.248:7783] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aeAkmTbDwvcXorHR_MzAqAAAAVU"]
[Thu Apr 16 07:51:54.296913 2026] [:error] [pid 29603:tid 29614] [client 65.52.70.248:7758] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ccs.php"] [unique_id "aeAkmlfGOR6fpTWUAzrp4wAAAQk"]
[Thu Apr 16 07:51:54.797273 2026] [:error] [pid 29603:tid 29619] [client 65.52.70.248:7111] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ccs.php"] [unique_id "aeAkmlfGOR6fpTWUAzrp5gAAAQ4"]
[Thu Apr 16 07:51:55.299564 2026] [:error] [pid 57537:tid 57578] [client 65.52.70.248:7123] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ccs.php"] [unique_id "aeAkm1VQRS8nm73ENAlEaQAAAEM"]
[Thu Apr 16 07:51:55.806824 2026] [:error] [pid 57537:tid 57589] [client 65.52.70.248:7126] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ccs.php"] [unique_id "aeAkm1VQRS8nm73ENAlEagAAAE4"]
[Thu Apr 16 07:51:56.309071 2026] [:error] [pid 57537:tid 57591] [client 65.52.70.248:7053] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/aboutc.php"] [unique_id "aeAknFVQRS8nm73ENAlEawAAAFA"]
[Thu Apr 16 07:51:56.844046 2026] [:error] [pid 29603:tid 29616] [client 65.52.70.248:7778] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/aboutc.php"] [unique_id "aeAknFfGOR6fpTWUAzrp6QAAAQs"]
[Thu Apr 16 07:51:57.348674 2026] [:error] [pid 29603:tid 29626] [client 65.52.70.248:7047] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/aboutc.php"] [unique_id "aeAknVfGOR6fpTWUAzrp7QAAARU"]
[Thu Apr 16 07:51:57.886977 2026] [:error] [pid 57639:tid 57654] [client 65.52.70.248:7735] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/aboutc.php"] [unique_id "aeAknaMCQoTw7TsxWunncgAAAMg"]
[Thu Apr 16 07:51:58.398118 2026] [:error] [pid 57639:tid 57646] [client 65.52.70.248:7734] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aeAknqMCQoTw7TsxWunncwAAAMA"]
[Thu Apr 16 07:51:58.899742 2026] [:error] [pid 57639:tid 57656] [client 65.52.70.248:7723] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aeAknqMCQoTw7TsxWunndQAAAMo"]
[Thu Apr 16 07:51:59.406313 2026] [:error] [pid 57639:tid 57655] [client 65.52.70.248:7795] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aeAkn6MCQoTw7TsxWunndwAAAMk"]
[Thu Apr 16 07:52:00.928273 2026] [:error] [pid 49094:tid 49107] [client 65.52.70.248:7145] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aeAkoDbDwvcXorHR_MzAtAAAAUs"]
[Thu Apr 16 07:52:01.431082 2026] [:error] [pid 49094:tid 49118] [client 65.52.70.248:7091] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "aeAkoTbDwvcXorHR_MzAtQAAAVY"]
[Thu Apr 16 07:52:01.938801 2026] [:error] [pid 57639:tid 57663] [client 65.52.70.248:7737] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "aeAkoaMCQoTw7TsxWunnegAAANE"]
[Thu Apr 16 07:52:02.447994 2026] [:error] [pid 57639:tid 57647] [client 65.52.70.248:7128] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "aeAkoqMCQoTw7TsxWunnewAAAME"]
[Thu Apr 16 07:52:02.995120 2026] [:error] [pid 57537:tid 57577] [client 65.52.70.248:7108] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "aeAkolVQRS8nm73ENAlEcQAAAEI"]
[Thu Apr 16 07:52:03.495357 2026] [:error] [pid 57639:tid 57653] [client 65.52.70.248:7062] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeAko6MCQoTw7TsxWunnkAAAAMc"]
[Thu Apr 16 07:52:04.013365 2026] [:error] [pid 57639:tid 57652] [client 65.52.70.248:7151] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeAkpKMCQoTw7TsxWunnmQAAAMY"]
[Thu Apr 16 07:52:04.520923 2026] [:error] [pid 57639:tid 57657] [client 65.52.70.248:7109] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeAkpKMCQoTw7TsxWunnmwAAAMs"]
[Thu Apr 16 07:52:05.049736 2026] [:error] [pid 29603:tid 29614] [client 65.52.70.248:7134] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeAkpVfGOR6fpTWUAzrp8QAAAQk"]
[Thu Apr 16 07:52:05.572634 2026] [:error] [pid 57639:tid 57653] [client 65.52.70.248:7109] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws48.php"] [unique_id "aeAkpaMCQoTw7TsxWunnpAAAAMc"]
[Thu Apr 16 07:52:06.073871 2026] [:error] [pid 57639:tid 57660] [client 65.52.70.248:7124] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws48.php"] [unique_id "aeAkpqMCQoTw7TsxWunnqAAAAM4"]
[Thu Apr 16 07:52:07.610783 2026] [:error] [pid 57538:tid 57604] [client 65.52.70.248:7051] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws48.php"] [unique_id "aeAkp8uMaiEF5SVR2BdRYQAAAII"]
[Thu Apr 16 07:52:08.113782 2026] [:error] [pid 57639:tid 57657] [client 65.52.70.248:7746] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws48.php"] [unique_id "aeAkqKMCQoTw7TsxWunnqwAAAMs"]
[Thu Apr 16 07:52:08.622880 2026] [:error] [pid 57536:tid 57549] [client 65.52.70.248:7740] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aeAkqCQU4faGja6jpDuPXQAAAAE"]
[Thu Apr 16 07:52:09.127375 2026] [:error] [pid 57537:tid 57587] [client 65.52.70.248:7156] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aeAkqVVQRS8nm73ENAlEhQAAAEw"]
[Thu Apr 16 07:52:10.633047 2026] [:error] [pid 57538:tid 57609] [client 65.52.70.248:7766] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aeAkqsuMaiEF5SVR2BdRYgAAAIc"]
[Thu Apr 16 07:52:11.133854 2026] [:error] [pid 29603:tid 29608] [client 65.52.70.248:7094] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aeAkq1fGOR6fpTWUAzrp9QAAAQM"]
[Thu Apr 16 07:52:11.666001 2026] [:error] [pid 57639:tid 57655] [client 65.52.70.248:7130] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "aeAkq6MCQoTw7TsxWunnsAAAAMk"]
[Thu Apr 16 07:52:12.176005 2026] [:error] [pid 29603:tid 29609] [client 65.52.70.248:7149] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "aeAkrFfGOR6fpTWUAzrp9gAAAQQ"]
[Thu Apr 16 07:52:12.702994 2026] [:error] [pid 29603:tid 29611] [client 65.52.70.248:7153] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "aeAkrFfGOR6fpTWUAzrp-QAAAQY"]
[Thu Apr 16 07:52:13.240294 2026] [:error] [pid 29603:tid 29621] [client 65.52.70.248:7122] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "aeAkrVfGOR6fpTWUAzrp_AAAARA"]
[Thu Apr 16 07:52:13.753491 2026] [:error] [pid 49094:tid 49099] [client 65.52.70.248:7803] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "aeAkrTbDwvcXorHR_MzA_gAAAUM"]
[Thu Apr 16 07:52:14.258542 2026] [:error] [pid 57536:tid 57551] [client 65.52.70.248:7099] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "aeAkriQU4faGja6jpDuPYQAAAAM"]
[Thu Apr 16 07:52:14.765706 2026] [:error] [pid 57639:tid 57650] [client 65.52.70.248:7722] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "aeAkrqMCQoTw7TsxWunntAAAAMQ"]
[Thu Apr 16 07:52:15.269389 2026] [:error] [pid 57537:tid 57598] [client 65.52.70.248:7001] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "aeAkr1VQRS8nm73ENAlEjwAAAFc"]
[Thu Apr 16 07:52:15.785908 2026] [:error] [pid 57538:tid 57608] [client 65.52.70.248:7046] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "aeAkr8uMaiEF5SVR2BdRZQAAAIY"]
[Thu Apr 16 07:52:16.308765 2026] [:error] [pid 57537:tid 57589] [client 65.52.70.248:7050] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "aeAksFVQRS8nm73ENAlEkAAAAE4"]
[Thu Apr 16 07:52:16.847753 2026] [:error] [pid 57639:tid 57666] [client 65.52.70.248:7724] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "aeAksKMCQoTw7TsxWunntwAAANQ"]
[Thu Apr 16 07:52:18.066085 2026] [:error] [pid 57639:tid 57670] [client 65.52.70.248:7739] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "aeAksqMCQoTw7TsxWunnugAAANg"]
[Thu Apr 16 07:52:18.571785 2026] [:error] [pid 57639:tid 57658] [client 65.52.70.248:7769] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "aeAksqMCQoTw7TsxWunnuwAAAMw"]
[Thu Apr 16 07:52:19.081460 2026] [:error] [pid 57639:tid 57646] [client 65.52.70.248:7806] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "aeAks6MCQoTw7TsxWunnvQAAAMA"]
[Thu Apr 16 07:52:19.606874 2026] [:error] [pid 57639:tid 57656] [client 65.52.70.248:6985] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "aeAks6MCQoTw7TsxWunnvgAAAMo"]
[Thu Apr 16 07:52:20.105809 2026] [:error] [pid 57639:tid 57661] [client 65.52.70.248:7787] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "aeAktKMCQoTw7TsxWunnwAAAAM8"]
[Thu Apr 16 07:52:21.616882 2026] [:error] [pid 57639:tid 57662] [client 65.52.70.248:7075] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeAktaMCQoTw7TsxWunnwwAAANA"]
[Thu Apr 16 07:52:22.124357 2026] [:error] [pid 57639:tid 57651] [client 65.52.70.248:7057] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeAktqMCQoTw7TsxWunnxAAAAMU"]
[Thu Apr 16 07:52:22.655277 2026] [:error] [pid 29603:tid 29618] [client 65.52.70.248:7731] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeAktlfGOR6fpTWUAzrp_wAAAQ0"]
[Thu Apr 16 07:52:23.158126 2026] [:error] [pid 29603:tid 29614] [client 65.52.70.248:7142] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeAkt1fGOR6fpTWUAzrqAgAAAQk"]
[Thu Apr 16 07:52:23.662843 2026] [:error] [pid 57639:tid 57653] [client 65.52.70.248:7143] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "aeAkt6MCQoTw7TsxWunnxgAAAMc"]
[Thu Apr 16 07:52:24.163854 2026] [:error] [pid 49094:tid 49107] [client 65.52.70.248:7068] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "aeAkuDbDwvcXorHR_MzBCwAAAUs"]
[Thu Apr 16 07:52:24.677695 2026] [:error] [pid 29603:tid 29609] [client 65.52.70.248:7135] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "aeAkuFfGOR6fpTWUAzrqCAAAAQQ"]
[Thu Apr 16 07:52:25.202359 2026] [:error] [pid 57639:tid 57657] [client 65.52.70.248:7697] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "aeAkuaMCQoTw7TsxWunnzwAAAMs"]
[Thu Apr 16 07:52:25.705610 2026] [:error] [pid 29603:tid 29622] [client 65.52.70.248:7733] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aeAkuVfGOR6fpTWUAzrqDQAAARE"]
[Thu Apr 16 07:52:26.261027 2026] [:error] [pid 57538:tid 57615] [client 65.52.70.248:7788] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aeAkusuMaiEF5SVR2BdRawAAAI0"]
[Thu Apr 16 07:52:26.790171 2026] [:error] [pid 29603:tid 29606] [client 65.52.70.248:7116] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aeAkulfGOR6fpTWUAzrqEgAAAQE"]
[Thu Apr 16 07:52:27.331571 2026] [:error] [pid 29603:tid 29610] [client 65.52.70.248:7077] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aeAku1fGOR6fpTWUAzrqFAAAAQU"]
[Thu Apr 16 07:52:27.855570 2026] [:error] [pid 29603:tid 29618] [client 65.52.70.248:7125] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aeAku1fGOR6fpTWUAzrqFQAAAQ0"]
[Thu Apr 16 07:52:28.389019 2026] [:error] [pid 57538:tid 57616] [client 65.52.70.248:7771] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aeAkvMuMaiEF5SVR2BdRbQAAAI4"]
[Thu Apr 16 07:52:28.921359 2026] [:error] [pid 49094:tid 49119] [client 65.52.70.248:7110] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aeAkvDbDwvcXorHR_MzBEQAAAVc"]
[Thu Apr 16 07:52:29.430834 2026] [:error] [pid 29603:tid 29617] [client 65.52.70.248:7084] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aeAkvVfGOR6fpTWUAzrqFwAAAQw"]
[Thu Apr 16 07:52:29.950558 2026] [:error] [pid 57639:tid 57659] [client 65.52.70.248:7067] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aeAkvaMCQoTw7TsxWunn0QAAAM0"]
[Thu Apr 16 07:52:30.464431 2026] [:error] [pid 57537:tid 57586] [client 65.52.70.248:7076] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aeAkvlVQRS8nm73ENAlEmAAAAEs"]
[Thu Apr 16 07:52:30.968796 2026] [:error] [pid 57538:tid 57609] [client 65.52.70.248:7161] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aeAkvsuMaiEF5SVR2BdRbwAAAIc"]
[Thu Apr 16 07:52:31.490548 2026] [:error] [pid 29603:tid 29614] [client 65.52.70.248:7079] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aeAkv1fGOR6fpTWUAzrqGAAAAQk"]
[Thu Apr 16 07:52:32.013953 2026] [:error] [pid 29603:tid 29627] [client 65.52.70.248:7780] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "aeAkwFfGOR6fpTWUAzrqGQAAARY"]
[Thu Apr 16 07:52:32.524276 2026] [:error] [pid 57639:tid 57658] [client 65.52.70.248:7069] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "aeAkwKMCQoTw7TsxWunn2AAAAMw"]
[Thu Apr 16 07:52:33.100783 2026] [:error] [pid 57538:tid 57608] [client 65.52.70.248:7055] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "aeAkwcuMaiEF5SVR2BdRcQAAAIY"]
[Thu Apr 16 07:52:33.625567 2026] [:error] [pid 57536:tid 57569] [client 65.52.70.248:7148] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "aeAkwSQU4faGja6jpDuPZwAAABU"]
[Thu Apr 16 07:52:34.164181 2026] [:error] [pid 57639:tid 57660] [client 65.52.70.248:7152] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/domains.php"] [unique_id "aeAkwqMCQoTw7TsxWunn2gAAAM4"]
[Thu Apr 16 07:52:34.722014 2026] [:error] [pid 29603:tid 29620] [client 65.52.70.248:7090] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/domains.php"] [unique_id "aeAkwlfGOR6fpTWUAzrqGwAAAQ8"]
[Thu Apr 16 07:52:35.259317 2026] [:error] [pid 57537:tid 57598] [client 65.52.70.248:7120] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/domains.php"] [unique_id "aeAkw1VQRS8nm73ENAlEmgAAAFc"]
[Thu Apr 16 07:52:36.782683 2026] [:error] [pid 29603:tid 29609] [client 65.52.70.248:6995] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/domains.php"] [unique_id "aeAkxFfGOR6fpTWUAzrqHQAAAQQ"]
[Thu Apr 16 07:52:37.323877 2026] [:error] [pid 57537:tid 57589] [client 65.52.70.248:7693] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "aeAkxVVQRS8nm73ENAlEnAAAAE4"]
[Thu Apr 16 07:52:37.829487 2026] [:error] [pid 57536:tid 57548] [client 65.52.70.248:7715] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "aeAkxSQU4faGja6jpDuPaAAAAAA"]
[Thu Apr 16 07:52:38.345195 2026] [:error] [pid 29603:tid 29616] [client 65.52.70.248:7138] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "aeAkxlfGOR6fpTWUAzrqHwAAAQs"]
[Thu Apr 16 07:52:38.861247 2026] [:error] [pid 29603:tid 29611] [client 65.52.70.248:7119] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "aeAkxlfGOR6fpTWUAzrqIAAAAQY"]
[Thu Apr 16 07:52:39.398663 2026] [:error] [pid 29603:tid 29622] [client 65.52.70.248:7098] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aeAkx1fGOR6fpTWUAzrqIgAAARE"]
[Thu Apr 16 07:52:39.900041 2026] [:error] [pid 57536:tid 57554] [client 65.52.70.248:7166] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aeAkxyQU4faGja6jpDuPawAAAAY"]
[Thu Apr 16 07:52:40.413768 2026] [:error] [pid 29603:tid 29606] [client 65.52.70.248:7718] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aeAkyFfGOR6fpTWUAzrqJwAAAQE"]
[Thu Apr 16 07:52:40.914937 2026] [:error] [pid 57639:tid 57662] [client 65.52.70.248:7040] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aeAkyKMCQoTw7TsxWunn3gAAANA"]
[Thu Apr 16 07:52:41.415321 2026] [:error] [pid 57639:tid 57651] [client 65.52.70.248:7087] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeAkyaMCQoTw7TsxWunn3wAAAMU"]
[Thu Apr 16 07:52:41.943171 2026] [:error] [pid 57639:tid 57649] [client 65.52.70.248:6979] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeAkyaMCQoTw7TsxWunn4QAAAMM"]
[Thu Apr 16 07:52:43.455419 2026] [:error] [pid 49094:tid 49096] [client 65.52.70.248:7164] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeAkyzbDwvcXorHR_MzBGwAAAUA"]
[Thu Apr 16 07:52:43.959176 2026] [:error] [pid 49094:tid 49100] [client 65.52.70.248:7137] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeAkyzbDwvcXorHR_MzBHQAAAUQ"]
[Thu Apr 16 07:52:51.289892 2026] [:error] [pid 49094:tid 49100] [client 65.52.70.248:6990] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/zoo.php"] [unique_id "aeAk0zbDwvcXorHR_MzBNQAAAUQ"]
[Thu Apr 16 07:52:51.799556 2026] [:error] [pid 29603:tid 29609] [client 65.52.70.248:7064] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/zoo.php"] [unique_id "aeAk01fGOR6fpTWUAzrqKwAAAQQ"]
[Thu Apr 16 07:52:52.301071 2026] [:error] [pid 29603:tid 29623] [client 65.52.70.248:6994] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/zoo.php"] [unique_id "aeAk1FfGOR6fpTWUAzrqLAAAARI"]
[Thu Apr 16 07:52:52.822697 2026] [:error] [pid 29603:tid 29629] [client 65.52.70.248:7114] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/zoo.php"] [unique_id "aeAk1FfGOR6fpTWUAzrqLgAAARg"]
[Thu Apr 16 07:52:53.366868 2026] [:error] [pid 57538:tid 57626] [client 65.52.70.248:7726] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gaza.php"] [unique_id "aeAk1cuMaiEF5SVR2BdRdwAAAJg"]
[Thu Apr 16 07:52:53.870937 2026] [:error] [pid 29603:tid 29607] [client 65.52.70.248:7080] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gaza.php"] [unique_id "aeAk1VfGOR6fpTWUAzrqMAAAAQI"]
[Thu Apr 16 07:52:54.375595 2026] [:error] [pid 29603:tid 29608] [client 65.52.70.248:7132] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gaza.php"] [unique_id "aeAk1lfGOR6fpTWUAzrqMgAAAQM"]
[Thu Apr 16 07:52:54.884694 2026] [:error] [pid 57538:tid 57612] [client 65.52.70.248:7774] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gaza.php"] [unique_id "aeAk1suMaiEF5SVR2BdReQAAAIo"]
[Thu Apr 16 07:52:55.394086 2026] [:error] [pid 57639:tid 57670] [client 65.52.70.248:7752] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/retu11.PhP7"] [unique_id "aeAk16MCQoTw7TsxWunoCgAAANg"]
[Thu Apr 16 07:52:55.970515 2026] [:error] [pid 57639:tid 57646] [client 65.52.70.248:7689] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/retu11.PhP7"] [unique_id "aeAk16MCQoTw7TsxWunoDAAAAMA"]
[Thu Apr 16 07:52:56.473871 2026] [:error] [pid 57639:tid 57669] [client 65.52.70.248:6978] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/retu11.PhP7"] [unique_id "aeAk2KMCQoTw7TsxWunoDwAAANc"]
[Thu Apr 16 07:52:56.975701 2026] [:error] [pid 57639:tid 57655] [client 65.52.70.248:7083] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/retu11.PhP7"] [unique_id "aeAk2KMCQoTw7TsxWunoEgAAAMk"]
[Thu Apr 16 07:52:57.477664 2026] [:error] [pid 29603:tid 29615] [client 65.52.70.248:7158] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeAk2VfGOR6fpTWUAzrqOQAAAQo"]
[Thu Apr 16 07:52:57.979258 2026] [:error] [pid 49094:tid 49115] [client 65.52.70.248:7021] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeAk2TbDwvcXorHR_MzBPgAAAVM"]
[Thu Apr 16 07:52:58.482417 2026] [:error] [pid 49094:tid 49111] [client 65.52.70.248:7019] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeAk2jbDwvcXorHR_MzBQQAAAU8"]
[Thu Apr 16 07:52:59.983910 2026] [:error] [pid 57537:tid 57575] [client 65.52.70.248:7721] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeAk21VQRS8nm73ENAlErAAAAEA"]
[Thu Apr 16 07:53:00.489805 2026] [:error] [pid 49094:tid 49110] [client 65.52.70.248:7147] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/mk.php"] [unique_id "aeAk3DbDwvcXorHR_MzBRgAAAU4"]
[Thu Apr 16 07:53:01.008334 2026] [:error] [pid 57639:tid 57666] [client 65.52.70.248:7035] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/mk.php"] [unique_id "aeAk3aMCQoTw7TsxWunoIwAAANQ"]
[Thu Apr 16 07:53:01.523776 2026] [:error] [pid 29603:tid 29626] [client 65.52.70.248:7041] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/mk.php"] [unique_id "aeAk3VfGOR6fpTWUAzrqRgAAARU"]
[Thu Apr 16 07:53:02.021947 2026] [:error] [pid 57538:tid 57610] [client 65.52.70.248:6992] [client 65.52.70.248] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/mk.php"] [unique_id "aeAk3suMaiEF5SVR2BdRfQAAAIg"]
[Thu Apr 16 07:53:03.290409 2026] [:error] [pid 57639:tid 57670] [client 65.52.70.248:7150] [client 65.52.70.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aeAk36MCQoTw7TsxWunoKgAAANg"]
[Thu Apr 16 08:56:16.119783 2026] [:error] [pid 49094:tid 49112] [client 40.83.91.255:2169] [client 40.83.91.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aeAzsDbDwvcXorHR_MzfCAAAAVA"]
[Thu Apr 16 08:56:16.603730 2026] [:error] [pid 57639:tid 57654] [client 40.83.91.255:4067] [client 40.83.91.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aeAzsKMCQoTw7TsxWukR2QAAAMg"]
[Thu Apr 16 08:56:17.102137 2026] [:error] [pid 57639:tid 57667] [client 40.83.91.255:1112] [client 40.83.91.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aeAzsaMCQoTw7TsxWukR2gAAANU"]
[Thu Apr 16 08:56:17.626349 2026] [:error] [pid 49094:tid 49119] [client 40.83.91.255:1816] [client 40.83.91.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aeAzsTbDwvcXorHR_MzfCwAAAVc"]
[Thu Apr 16 09:49:39.540623 2026] [:error] [pid 57639:tid 57654] [client 98.93.160.221:35576] [client 98.93.160.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aeBAM6MCQoTw7TsxWukrGAAAAMg"]
[Thu Apr 16 11:14:22.830998 2026] [:error] [pid 49094:tid 49117] [client 98.93.160.221:60946] [client 98.93.160.221] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aeBUDjbDwvcXorHR_MwMAAAAAVU"]
[Thu Apr 16 23:11:36.825363 2026] [:error] [pid 57639:tid 57662] [client 35.197.38.167:51552] [client 35.197.38.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "aeD8KKMCQoTw7TsxWukJuwAAANA"]
[Thu Apr 16 23:11:42.209013 2026] [:error] [pid 7880:tid 7893] [client 35.197.38.167:50666] [client 35.197.38.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.production"] [unique_id "aeD8Lqaezm4fSGc0yULT-QAAAYg"]
[Thu Apr 16 23:12:15.923783 2026] [:error] [pid 57639:tid 57647] [client 35.197.38.167:34344] [client 35.197.38.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.bak"] [unique_id "aeD8T6MCQoTw7TsxWukKHwAAAME"]
[Thu Apr 16 23:12:46.050747 2026] [:error] [pid 57639:tid 57650] [client 35.197.38.167:40842] [client 35.197.38.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.save"] [unique_id "aeD8bqMCQoTw7TsxWukKnQAAAMQ"]
[Thu Apr 16 23:12:49.949846 2026] [:error] [pid 57639:tid 57650] [client 35.197.38.167:40914] [client 35.197.38.167] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/core/.env"] [unique_id "aeD8caMCQoTw7TsxWukKvgAAAMQ"]
[Thu Apr 16 23:42:23.486341 2026] [:error] [pid 29603:tid 29623] [client 45.130.203.173:50237] [client 45.130.203.173] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.git/HEAD"] [unique_id "aeEDX1fGOR6fpTWUAzq-HAAAARI"]
[Thu Apr 16 23:42:24.247573 2026] [:error] [pid 57639:tid 57648] [client 45.130.203.131:34073] [client 45.130.203.131] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.git/HEAD"] [unique_id "aeEDYKMCQoTw7TsxWukcswAAAMI"]
[Fri Apr 17 01:48:08.417388 2026] [:error] [pid 43387:tid 43462] [client 4.232.179.255:49407] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeEg2CBNsONqHxWTakVA0wAAAIs"]
[Fri Apr 17 01:48:09.846296 2026] [:error] [pid 43386:tid 43436] [client 4.232.179.255:59610] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeEg2e91GAVgUfhPVDHQNwAAAFA"]
[Fri Apr 17 01:48:22.931300 2026] [:error] [pid 43385:tid 43401] [client 4.232.179.255:49374] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/t.php"] [unique_id "aeEg5snIxkJaUI8KNs4pRwAAAAw"]
[Fri Apr 17 01:48:24.228560 2026] [:error] [pid 11854:tid 11869] [client 4.232.179.255:54831] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/t.php"] [unique_id "aeEg6NxJCSIaqP1XSdaeAwAAAkw"]
[Fri Apr 17 01:48:26.779572 2026] [:error] [pid 43482:tid 43484] [client 4.232.179.255:56574] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/t.php"] [unique_id "aeEg6j9SZnuKxlHrct2oogAAAMA"]
[Fri Apr 17 01:48:28.564973 2026] [:error] [pid 43482:tid 43491] [client 4.232.179.255:54802] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/t.php"] [unique_id "aeEg7D9SZnuKxlHrct2opgAAAMc"]
[Fri Apr 17 01:48:36.933164 2026] [:error] [pid 43482:tid 43506] [client 4.232.179.255:59642] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aeEg9D9SZnuKxlHrct2ovQAAANY"]
[Fri Apr 17 01:48:39.764739 2026] [:error] [pid 11692:tid 11700] [client 4.232.179.255:54801] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aeEg981AYuhm4BZwKNoepAAAAgM"]
[Fri Apr 17 01:48:41.811873 2026] [:error] [pid 26480:tid 26488] [client 4.232.179.255:65349] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aeEg-QwLDJKTQNfarA2ChwAAAcY"]
[Fri Apr 17 01:48:44.136867 2026] [:error] [pid 43386:tid 43424] [client 4.232.179.255:59625] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aeEg_O91GAVgUfhPVDHQcQAAAEQ"]
[Fri Apr 17 01:48:46.134060 2026] [:error] [pid 43482:tid 43508] [client 4.232.179.255:54331] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aeEg_j9SZnuKxlHrct2o0AAAANg"]
[Fri Apr 17 01:48:47.738119 2026] [:error] [pid 3245:tid 3281] [client 4.232.179.255:54825] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aeEg_6ESOMTHVLs-uFDZTgAAARM"]
[Fri Apr 17 01:48:48.590020 2026] [:error] [pid 43482:tid 43486] [client 4.232.179.255:65399] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aeEhAD9SZnuKxlHrct2o3AAAAMI"]
[Fri Apr 17 01:48:50.123437 2026] [:error] [pid 43482:tid 43504] [client 4.232.179.255:65346] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aeEhAj9SZnuKxlHrct2o4AAAANQ"]
[Fri Apr 17 01:48:51.764925 2026] [:error] [pid 43482:tid 43500] [client 4.232.179.255:54329] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/new.php"] [unique_id "aeEhAz9SZnuKxlHrct2o6AAAANA"]
[Fri Apr 17 01:49:02.010852 2026] [:error] [pid 43387:tid 43470] [client 4.232.179.255:54845] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/new.php"] [unique_id "aeEhDiBNsONqHxWTakVBFAAAAJE"]
[Fri Apr 17 01:49:03.598495 2026] [:error] [pid 43386:tid 43428] [client 4.232.179.255:56562] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/new.php"] [unique_id "aeEhD-91GAVgUfhPVDHQkQAAAEg"]
[Fri Apr 17 01:49:05.300270 2026] [:error] [pid 43387:tid 43460] [client 4.232.179.255:59614] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/new.php"] [unique_id "aeEhESBNsONqHxWTakVBHAAAAIk"]
[Fri Apr 17 01:49:07.111119 2026] [:error] [pid 43482:tid 43498] [client 4.232.179.255:54310] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aeEhEz9SZnuKxlHrct2pCQAAAM4"]
[Fri Apr 17 01:49:08.836563 2026] [:error] [pid 43386:tid 43427] [client 4.232.179.255:54816] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aeEhFO91GAVgUfhPVDHQnAAAAEc"]
[Fri Apr 17 01:49:09.898950 2026] [:error] [pid 43482:tid 43496] [client 4.232.179.255:65393] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aeEhFT9SZnuKxlHrct2pEwAAAMw"]
[Fri Apr 17 01:49:10.750597 2026] [:error] [pid 43386:tid 43438] [client 4.232.179.255:65381] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aeEhFu91GAVgUfhPVDHQpQAAAFI"]
[Fri Apr 17 01:49:12.178118 2026] [:error] [pid 43482:tid 43489] [client 4.232.179.255:52302] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aeEhGD9SZnuKxlHrct2pHgAAAMU"]
[Fri Apr 17 01:49:12.923545 2026] [:error] [pid 43387:tid 43476] [client 4.232.179.255:56526] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aeEhGCBNsONqHxWTakVBLAAAAJc"]
[Fri Apr 17 01:49:14.462589 2026] [:error] [pid 43482:tid 43503] [client 4.232.179.255:49378] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aeEhGj9SZnuKxlHrct2pJQAAANM"]
[Fri Apr 17 01:49:15.620433 2026] [:error] [pid 43387:tid 43477] [client 4.232.179.255:59594] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aeEhGyBNsONqHxWTakVBQAAAAJg"]
[Fri Apr 17 01:49:16.599434 2026] [:error] [pid 43387:tid 43471] [client 4.232.179.255:49388] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aeEhHCBNsONqHxWTakVBRwAAAJI"]
[Fri Apr 17 01:49:17.445060 2026] [:error] [pid 43482:tid 43497] [client 4.232.179.255:56541] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aeEhHT9SZnuKxlHrct2pKQAAAM0"]
[Fri Apr 17 01:49:18.368290 2026] [:error] [pid 43386:tid 43429] [client 4.232.179.255:58880] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aeEhHu91GAVgUfhPVDHQqwAAAEk"]
[Fri Apr 17 01:49:30.919061 2026] [:error] [pid 43386:tid 43425] [client 4.232.179.255:59596] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aeEhKu91GAVgUfhPVDHQ7QAAAEU"]
[Fri Apr 17 01:49:32.618606 2026] [:error] [pid 43386:tid 43429] [client 4.232.179.255:49358] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aeEhLO91GAVgUfhPVDHQ-gAAAEk"]
[Fri Apr 17 01:49:34.998101 2026] [:error] [pid 43386:tid 43430] [client 4.232.179.255:54293] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aeEhLu91GAVgUfhPVDHRCgAAAEo"]
[Fri Apr 17 01:49:35.763521 2026] [:error] [pid 26102:tid 26121] [client 4.232.179.255:65403] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aeEhL_127aFqw6ALdnga4QAAAZA"]
[Fri Apr 17 01:49:37.218253 2026] [:error] [pid 43482:tid 43504] [client 4.232.179.255:58896] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "aeEhMT9SZnuKxlHrct2pXgAAANQ"]
[Fri Apr 17 01:49:38.175971 2026] [:error] [pid 4086:tid 4107] [client 4.232.179.255:54806] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "aeEhMllz7gxl_exM0FpL5wAAAVM"]
[Fri Apr 17 01:49:39.147843 2026] [:error] [pid 43385:tid 43411] [client 4.232.179.255:54312] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "aeEhM8nIxkJaUI8KNs4pngAAABU"]
[Fri Apr 17 01:49:40.689456 2026] [:error] [pid 43482:tid 43503] [client 4.232.179.255:58894] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "aeEhND9SZnuKxlHrct2pdgAAANM"]
[Fri Apr 17 01:49:43.150551 2026] [:error] [pid 43386:tid 43439] [client 4.232.179.255:54277] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "aeEhN-91GAVgUfhPVDHRkQAAAFM"]
[Fri Apr 17 01:49:48.089432 2026] [:error] [pid 43386:tid 43443] [client 4.232.179.255:56552] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "aeEhPO91GAVgUfhPVDHRqQAAAFY"]
[Fri Apr 17 01:49:51.484638 2026] [:error] [pid 43482:tid 43489] [client 4.232.179.255:49361] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "aeEhPz9SZnuKxlHrct2ptQAAAMU"]
[Fri Apr 17 01:49:52.878990 2026] [:error] [pid 43385:tid 43389] [client 4.232.179.255:54821] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "aeEhQMnIxkJaUI8KNs4prQAAAAA"]
[Fri Apr 17 01:49:55.896081 2026] [:error] [pid 26480:tid 26491] [client 4.232.179.255:65366] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/press.php"] [unique_id "aeEhQwwLDJKTQNfarA2DBwAAAck"]
[Fri Apr 17 01:49:58.809381 2026] [:error] [pid 43386:tid 43431] [client 4.232.179.255:59589] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/press.php"] [unique_id "aeEhRu91GAVgUfhPVDHRuwAAAEs"]
[Fri Apr 17 01:50:05.764912 2026] [:error] [pid 11692:tid 11718] [client 4.232.179.255:49370] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/press.php"] [unique_id "aeEhTc1AYuhm4BZwKNoe2QAAAhU"]
[Fri Apr 17 01:50:07.553797 2026] [:error] [pid 11692:tid 11706] [client 4.232.179.255:54785] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/press.php"] [unique_id "aeEhT81AYuhm4BZwKNoe2gAAAgk"]
[Fri Apr 17 01:50:08.526887 2026] [:error] [pid 11692:tid 11708] [client 4.232.179.255:65373] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "aeEhUM1AYuhm4BZwKNoe3gAAAgs"]
[Fri Apr 17 01:50:09.337557 2026] [:error] [pid 43482:tid 43486] [client 4.232.179.255:54288] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "aeEhUT9SZnuKxlHrct2p9AAAAMI"]
[Fri Apr 17 01:50:11.205778 2026] [:error] [pid 11854:tid 11867] [client 4.232.179.255:59637] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "aeEhU9xJCSIaqP1XSdaeMAAAAko"]
[Fri Apr 17 01:50:13.024714 2026] [:error] [pid 43385:tid 43408] [client 4.232.179.255:49362] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "aeEhVcnIxkJaUI8KNs4pvwAAABM"]
[Fri Apr 17 01:50:17.119105 2026] [:error] [pid 43385:tid 43399] [client 4.232.179.255:58943] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/s.php"] [unique_id "aeEhWcnIxkJaUI8KNs4pwQAAAAo"]
[Fri Apr 17 01:50:22.666004 2026] [:error] [pid 43387:tid 43461] [client 4.232.179.255:54786] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/s.php"] [unique_id "aeEhXiBNsONqHxWTakVBnAAAAIo"]
[Fri Apr 17 01:50:27.811657 2026] [:error] [pid 43386:tid 43430] [client 4.232.179.255:59633] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/s.php"] [unique_id "aeEhY-91GAVgUfhPVDHSCAAAAEo"]
[Fri Apr 17 01:50:41.088610 2026] [:error] [pid 43482:tid 43497] [client 4.232.179.255:59639] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "aeEhcT9SZnuKxlHrct2qWgAAAM0"]
[Fri Apr 17 01:50:50.343648 2026] [:error] [pid 11692:tid 11706] [client 4.232.179.255:54814] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "aeEhes1AYuhm4BZwKNoe_wAAAgk"]
[Fri Apr 17 01:50:53.512599 2026] [:error] [pid 11854:tid 11867] [client 4.232.179.255:65372] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "aeEhfdxJCSIaqP1XSdaeQgAAAko"]
[Fri Apr 17 01:50:58.314476 2026] [:error] [pid 11854:tid 11863] [client 4.232.179.255:65407] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/term.php"] [unique_id "aeEhgtxJCSIaqP1XSdaeRQAAAkY"]
[Fri Apr 17 01:51:00.318451 2026] [:error] [pid 43482:tid 43500] [client 4.232.179.255:49399] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/term.php"] [unique_id "aeEhhD9SZnuKxlHrct2qiQAAANA"]
[Fri Apr 17 01:51:03.422503 2026] [:error] [pid 11692:tid 11716] [client 4.232.179.255:54308] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/term.php"] [unique_id "aeEhh81AYuhm4BZwKNofHAAAAhM"]
[Fri Apr 17 01:51:06.745512 2026] [:error] [pid 43482:tid 43494] [client 4.232.179.255:56575] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/term.php"] [unique_id "aeEhij9SZnuKxlHrct2qnQAAAMo"]
[Fri Apr 17 01:51:08.049631 2026] [:error] [pid 43482:tid 43491] [client 4.232.179.255:54315] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/b.php"] [unique_id "aeEhjD9SZnuKxlHrct2qpQAAAMc"]
[Fri Apr 17 01:51:09.401093 2026] [:error] [pid 43387:tid 43469] [client 4.232.179.255:54300] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/b.php"] [unique_id "aeEhjSBNsONqHxWTakVB5gAAAJA"]
[Fri Apr 17 01:51:10.461179 2026] [:error] [pid 3245:tid 3279] [client 4.232.179.255:58889] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/b.php"] [unique_id "aeEhjqESOMTHVLs-uFDZoAAAARE"]
[Fri Apr 17 01:51:14.070243 2026] [:error] [pid 43385:tid 43395] [client 4.232.179.255:65395] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/b.php"] [unique_id "aeEhksnIxkJaUI8KNs4qPgAAAAY"]
[Fri Apr 17 01:51:16.174365 2026] [:error] [pid 11854:tid 11860] [client 4.232.179.255:49384] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aeEhlNxJCSIaqP1XSdaeVgAAAkM"]
[Fri Apr 17 01:51:17.069578 2026] [:error] [pid 43387:tid 43474] [client 4.232.179.255:54815] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aeEhlSBNsONqHxWTakVB7gAAAJU"]
[Fri Apr 17 01:51:18.387356 2026] [:error] [pid 11854:tid 11857] [client 4.232.179.255:50567] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aeEhltxJCSIaqP1XSdaeWAAAAkA"]
[Fri Apr 17 01:51:19.517845 2026] [:error] [pid 11692:tid 11719] [client 4.232.179.255:56564] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aeEhl81AYuhm4BZwKNofKwAAAhY"]
[Fri Apr 17 01:51:20.368458 2026] [:error] [pid 43387:tid 43460] [client 4.232.179.255:54307] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ccs.php"] [unique_id "aeEhmCBNsONqHxWTakVB8gAAAIk"]
[Fri Apr 17 01:51:21.188649 2026] [:error] [pid 43482:tid 43501] [client 4.232.179.255:56572] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ccs.php"] [unique_id "aeEhmT9SZnuKxlHrct2qxQAAANE"]
[Fri Apr 17 01:51:22.691963 2026] [:error] [pid 43482:tid 43498] [client 4.232.179.255:59631] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ccs.php"] [unique_id "aeEhmj9SZnuKxlHrct2qzQAAAM4"]
[Fri Apr 17 01:51:23.615723 2026] [:error] [pid 43386:tid 43425] [client 4.232.179.255:54328] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ccs.php"] [unique_id "aeEhm-91GAVgUfhPVDHShQAAAEU"]
[Fri Apr 17 01:51:25.011412 2026] [:error] [pid 11854:tid 11876] [client 4.232.179.255:49368] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aboutc.php"] [unique_id "aeEhndxJCSIaqP1XSdaeXAAAAlM"]
[Fri Apr 17 01:51:25.640616 2026] [:error] [pid 43385:tid 43397] [client 4.232.179.255:57699] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aboutc.php"] [unique_id "aeEhncnIxkJaUI8KNs4qSgAAAAg"]
[Fri Apr 17 01:51:26.538853 2026] [:error] [pid 11692:tid 11700] [client 4.232.179.255:49398] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aboutc.php"] [unique_id "aeEhns1AYuhm4BZwKNofLwAAAgM"]
[Fri Apr 17 01:51:27.361802 2026] [:error] [pid 43386:tid 43420] [client 4.232.179.255:57705] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aboutc.php"] [unique_id "aeEhn-91GAVgUfhPVDHSlgAAAEA"]
[Fri Apr 17 01:51:28.000940 2026] [:error] [pid 43387:tid 43469] [client 4.232.179.255:54845] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aeEhnyBNsONqHxWTakVB-AAAAJA"]
[Fri Apr 17 01:51:28.696585 2026] [:error] [pid 43386:tid 43425] [client 4.232.179.255:56569] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aeEhoO91GAVgUfhPVDHSmgAAAEU"]
[Fri Apr 17 01:51:29.575532 2026] [:error] [pid 43385:tid 43399] [client 4.232.179.255:54286] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aeEhocnIxkJaUI8KNs4qWAAAAAo"]
[Fri Apr 17 01:51:30.399844 2026] [:error] [pid 4086:tid 4108] [client 4.232.179.255:52324] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aeEhollz7gxl_exM0FpMGAAAAVQ"]
[Fri Apr 17 01:51:31.024969 2026] [:error] [pid 26102:tid 26117] [client 4.232.179.255:49381] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "aeEho_127aFqw6ALdngbJwAAAYw"]
[Fri Apr 17 01:51:31.797118 2026] [:error] [pid 43385:tid 43415] [client 4.232.179.255:49391] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "aeEho8nIxkJaUI8KNs4qWwAAABg"]
[Fri Apr 17 01:51:32.347813 2026] [:error] [pid 3245:tid 3276] [client 4.232.179.255:58899] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "aeEhpKESOMTHVLs-uFDZqQAAAQ4"]
[Fri Apr 17 01:51:33.144172 2026] [:error] [pid 26480:tid 26498] [client 4.232.179.255:49387] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "aeEhpQwLDJKTQNfarA2DWwAAAdA"]
[Fri Apr 17 01:51:34.087265 2026] [:error] [pid 26480:tid 26491] [client 4.232.179.255:50560] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeEhpgwLDJKTQNfarA2DXQAAAck"]
[Fri Apr 17 01:51:34.785479 2026] [:error] [pid 11854:tid 11858] [client 4.232.179.255:56556] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeEhptxJCSIaqP1XSdaeYQAAAkE"]
[Fri Apr 17 01:51:35.517578 2026] [:error] [pid 11854:tid 11863] [client 4.232.179.255:56546] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeEhp9xJCSIaqP1XSdaeZAAAAkY"]
[Fri Apr 17 01:51:36.150849 2026] [:error] [pid 43387:tid 43456] [client 4.232.179.255:54847] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeEhqCBNsONqHxWTakVCBAAAAIU"]
[Fri Apr 17 01:51:36.810250 2026] [:error] [pid 43386:tid 43445] [client 4.232.179.255:54832] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws48.php"] [unique_id "aeEhqO91GAVgUfhPVDHSogAAAFg"]
[Fri Apr 17 01:51:37.701081 2026] [:error] [pid 43385:tid 43391] [client 4.232.179.255:54292] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws48.php"] [unique_id "aeEhqcnIxkJaUI8KNs4qXgAAAAI"]
[Fri Apr 17 01:51:38.266842 2026] [:error] [pid 43385:tid 43397] [client 4.232.179.255:59613] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws48.php"] [unique_id "aeEhqsnIxkJaUI8KNs4qXwAAAAg"]
[Fri Apr 17 01:51:38.898214 2026] [:error] [pid 26102:tid 26107] [client 4.232.179.255:54280] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws48.php"] [unique_id "aeEhqv127aFqw6ALdngbKwAAAYI"]
[Fri Apr 17 01:51:39.596329 2026] [:error] [pid 4086:tid 4092] [client 4.232.179.255:56521] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aeEhq1lz7gxl_exM0FpMHQAAAUQ"]
[Fri Apr 17 01:51:48.296286 2026] [:error] [pid 43482:tid 43494] [client 4.232.179.255:49382] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/domains.php"] [unique_id "aeEhtD9SZnuKxlHrct2q9gAAAMo"]
[Fri Apr 17 01:51:48.854663 2026] [:error] [pid 4086:tid 4105] [client 4.232.179.255:54836] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/domains.php"] [unique_id "aeEhtFlz7gxl_exM0FpMIgAAAVE"]
[Fri Apr 17 01:51:49.414451 2026] [:error] [pid 4086:tid 4103] [client 4.232.179.255:59616] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/domains.php"] [unique_id "aeEhtVlz7gxl_exM0FpMIwAAAU8"]
[Fri Apr 17 01:51:50.482399 2026] [:error] [pid 43387:tid 43476] [client 4.232.179.255:59584] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/domains.php"] [unique_id "aeEhtiBNsONqHxWTakVCJQAAAJc"]
[Fri Apr 17 01:51:51.025130 2026] [:error] [pid 43387:tid 43473] [client 4.232.179.255:54830] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "aeEhtyBNsONqHxWTakVCJwAAAJQ"]
[Fri Apr 17 01:51:51.540399 2026] [:error] [pid 43482:tid 43501] [client 4.232.179.255:54275] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "aeEhtz9SZnuKxlHrct2q-AAAANE"]
[Fri Apr 17 01:51:52.142538 2026] [:error] [pid 43387:tid 43470] [client 4.232.179.255:59602] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "aeEhuCBNsONqHxWTakVCLwAAAJE"]
[Fri Apr 17 01:51:52.626151 2026] [:error] [pid 43387:tid 43460] [client 4.232.179.255:59636] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "aeEhuCBNsONqHxWTakVCNQAAAIk"]
[Fri Apr 17 01:51:53.110058 2026] [:error] [pid 43387:tid 43476] [client 4.232.179.255:65384] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aeEhuSBNsONqHxWTakVCOAAAAJc"]
[Fri Apr 17 01:51:53.588721 2026] [:error] [pid 43387:tid 43454] [client 4.232.179.255:58897] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aeEhuSBNsONqHxWTakVCOgAAAIQ"]
[Fri Apr 17 01:51:54.072511 2026] [:error] [pid 43385:tid 43394] [client 4.232.179.255:59645] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aeEhusnIxkJaUI8KNs4qZgAAAAU"]
[Fri Apr 17 01:51:54.571523 2026] [:error] [pid 43482:tid 43486] [client 4.232.179.255:59548] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aeEhuj9SZnuKxlHrct2q-QAAAMI"]
[Fri Apr 17 01:51:55.073250 2026] [:error] [pid 43387:tid 43462] [client 4.232.179.255:52331] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeEhuyBNsONqHxWTakVCPgAAAIs"]
[Fri Apr 17 01:51:55.590277 2026] [:error] [pid 26102:tid 26121] [client 4.232.179.255:54317] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeEhu_127aFqw6ALdngbUAAAAZA"]
[Fri Apr 17 01:51:56.117109 2026] [:error] [pid 11692:tid 11698] [client 4.232.179.255:59531] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeEhvM1AYuhm4BZwKNofZgAAAgE"]
[Fri Apr 17 01:51:56.633015 2026] [:error] [pid 26480:tid 26504] [client 4.232.179.255:59619] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeEhvAwLDJKTQNfarA2DegAAAdY"]
[Fri Apr 17 01:51:57.164857 2026] [:error] [pid 43386:tid 43428] [client 4.232.179.255:49376] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aeEhve91GAVgUfhPVDHSrAAAAEg"]
[Fri Apr 17 01:51:57.666198 2026] [:error] [pid 43386:tid 43427] [client 4.232.179.255:59634] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aeEhve91GAVgUfhPVDHSsAAAAEc"]
[Fri Apr 17 01:51:58.209718 2026] [:error] [pid 43386:tid 43424] [client 4.232.179.255:49397] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aeEhvu91GAVgUfhPVDHStQAAAEQ"]
[Fri Apr 17 01:51:58.749800 2026] [:error] [pid 26102:tid 26112] [client 4.232.179.255:54282] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aeEhvv127aFqw6ALdngbVQAAAYc"]
[Fri Apr 17 01:51:59.273989 2026] [:error] [pid 43386:tid 43436] [client 4.232.179.255:56570] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws57.php"] [unique_id "aeEhv-91GAVgUfhPVDHSvAAAAFA"]
[Fri Apr 17 01:51:59.823283 2026] [:error] [pid 11692:tid 11703] [client 4.232.179.255:59586] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws57.php"] [unique_id "aeEhv81AYuhm4BZwKNofbgAAAgY"]
[Fri Apr 17 01:52:00.386187 2026] [:error] [pid 43482:tid 43491] [client 4.232.179.255:58903] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws57.php"] [unique_id "aeEhwD9SZnuKxlHrct2rCAAAAMc"]
[Fri Apr 17 01:52:00.925164 2026] [:error] [pid 11854:tid 11880] [client 4.232.179.255:65361] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws57.php"] [unique_id "aeEhwNxJCSIaqP1XSdaedgAAAlc"]
[Fri Apr 17 01:52:01.495186 2026] [:error] [pid 43385:tid 43411] [client 4.232.179.255:18253] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8573.php"] [unique_id "aeEhwcnIxkJaUI8KNs4qaQAAABU"]
[Fri Apr 17 01:52:02.051369 2026] [:error] [pid 26480:tid 26504] [client 4.232.179.255:54327] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8573.php"] [unique_id "aeEhwgwLDJKTQNfarA2DiQAAAdY"]
[Fri Apr 17 01:52:02.623207 2026] [:error] [pid 26102:tid 26120] [client 4.232.179.255:59622] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8573.php"] [unique_id "aeEhwv127aFqw6ALdngbXQAAAY8"]
[Fri Apr 17 01:52:03.099229 2026] [:error] [pid 43385:tid 43396] [client 4.232.179.255:54303] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8573.php"] [unique_id "aeEhw8nIxkJaUI8KNs4qagAAAAc"]
[Fri Apr 17 01:52:03.678724 2026] [:error] [pid 43385:tid 43397] [client 4.232.179.255:65376] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws66.php"] [unique_id "aeEhw8nIxkJaUI8KNs4qbQAAAAg"]
[Fri Apr 17 01:52:04.254062 2026] [:error] [pid 11854:tid 11866] [client 4.232.179.255:56550] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws66.php"] [unique_id "aeEhxNxJCSIaqP1XSdaeewAAAkk"]
[Fri Apr 17 01:52:04.829178 2026] [:error] [pid 26480:tid 26504] [client 4.232.179.255:56555] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws66.php"] [unique_id "aeEhxAwLDJKTQNfarA2DmQAAAdY"]
[Fri Apr 17 01:52:05.327749 2026] [:error] [pid 26480:tid 26488] [client 4.232.179.255:54272] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws66.php"] [unique_id "aeEhxQwLDJKTQNfarA2DnAAAAcY"]
[Fri Apr 17 01:52:05.943884 2026] [:error] [pid 43385:tid 43393] [client 4.232.179.255:54291] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aeEhxcnIxkJaUI8KNs4qdAAAAAQ"]
[Fri Apr 17 01:52:06.431603 2026] [:error] [pid 26480:tid 26492] [client 4.232.179.255:56530] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aeEhxgwLDJKTQNfarA2DnwAAAco"]
[Fri Apr 17 01:52:06.911343 2026] [:error] [pid 11692:tid 11707] [client 4.232.179.255:56533] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aeEhxs1AYuhm4BZwKNofdwAAAgo"]
[Fri Apr 17 01:52:07.467833 2026] [:error] [pid 43387:tid 43461] [client 4.232.179.255:54792] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aeEhxyBNsONqHxWTakVCSQAAAIo"]
[Fri Apr 17 01:52:08.017817 2026] [:error] [pid 43387:tid 43465] [client 4.232.179.255:56529] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeEhyCBNsONqHxWTakVCTQAAAIw"]
[Fri Apr 17 01:52:08.600579 2026] [:error] [pid 43387:tid 43458] [client 4.232.179.255:54827] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeEhyCBNsONqHxWTakVCUAAAAIc"]
[Fri Apr 17 01:52:09.134041 2026] [:error] [pid 43387:tid 43470] [client 4.232.179.255:56528] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeEhySBNsONqHxWTakVCUgAAAJE"]
[Fri Apr 17 01:52:09.795631 2026] [:error] [pid 11692:tid 11713] [client 4.232.179.255:57675] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aeEhyc1AYuhm4BZwKNofeQAAAhA"]
[Fri Apr 17 01:52:10.289471 2026] [:error] [pid 26102:tid 26106] [client 4.232.179.255:65354] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws88.php"] [unique_id "aeEhyv127aFqw6ALdngbaQAAAYE"]
[Fri Apr 17 01:52:10.892741 2026] [:error] [pid 3245:tid 3280] [client 4.232.179.255:57721] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws88.php"] [unique_id "aeEhyqESOMTHVLs-uFDZuAAAARI"]
[Fri Apr 17 01:52:11.492573 2026] [:error] [pid 43387:tid 43454] [client 4.232.179.255:59630] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws88.php"] [unique_id "aeEhyyBNsONqHxWTakVCVAAAAIQ"]
[Fri Apr 17 01:52:12.000565 2026] [:error] [pid 43387:tid 43475] [client 4.232.179.255:65388] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws88.php"] [unique_id "aeEhyyBNsONqHxWTakVCVwAAAJY"]
[Fri Apr 17 01:52:12.507910 2026] [:error] [pid 43387:tid 43466] [client 4.232.179.255:54314] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mode.php"] [unique_id "aeEhzCBNsONqHxWTakVCXAAAAI0"]
[Fri Apr 17 01:52:13.078037 2026] [:error] [pid 43385:tid 43396] [client 4.232.179.255:54335] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mode.php"] [unique_id "aeEhzcnIxkJaUI8KNs4qhwAAAAc"]
[Fri Apr 17 01:52:13.592790 2026] [:error] [pid 4086:tid 4094] [client 4.232.179.255:54842] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mode.php"] [unique_id "aeEhzVlz7gxl_exM0FpMMwAAAUY"]
[Fri Apr 17 01:52:14.162091 2026] [:error] [pid 4086:tid 4107] [client 4.232.179.255:58892] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mode.php"] [unique_id "aeEhzllz7gxl_exM0FpMNQAAAVM"]
[Fri Apr 17 01:52:14.731642 2026] [:error] [pid 3245:tid 3274] [client 4.232.179.255:49380] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/set.php"] [unique_id "aeEhzqESOMTHVLs-uFDZuwAAAQw"]
[Fri Apr 17 01:52:15.246555 2026] [:error] [pid 43387:tid 43470] [client 4.232.179.255:49392] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/set.php"] [unique_id "aeEhzyBNsONqHxWTakVCXgAAAJE"]
[Fri Apr 17 01:52:15.735359 2026] [:error] [pid 4086:tid 4110] [client 4.232.179.255:54817] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/set.php"] [unique_id "aeEhz1lz7gxl_exM0FpMOQAAAVY"]
[Fri Apr 17 01:52:16.231313 2026] [:error] [pid 43385:tid 43403] [client 4.232.179.255:65360] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/set.php"] [unique_id "aeEh0MnIxkJaUI8KNs4qiwAAAA4"]
[Fri Apr 17 01:52:16.802795 2026] [:error] [pid 43385:tid 43393] [client 4.232.179.255:56560] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hroxw.php"] [unique_id "aeEh0MnIxkJaUI8KNs4qjwAAAAQ"]
[Fri Apr 17 01:52:17.309667 2026] [:error] [pid 43387:tid 43459] [client 4.232.179.255:54843] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hroxw.php"] [unique_id "aeEh0SBNsONqHxWTakVCYAAAAIg"]
[Fri Apr 17 01:52:17.878283 2026] [:error] [pid 43387:tid 43453] [client 4.232.179.255:58898] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hroxw.php"] [unique_id "aeEh0SBNsONqHxWTakVCYwAAAIM"]
[Fri Apr 17 01:52:18.446595 2026] [:error] [pid 3245:tid 3264] [client 4.232.179.255:56512] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hroxw.php"] [unique_id "aeEh0qESOMTHVLs-uFDZwAAAAQI"]
[Fri Apr 17 01:52:19.005356 2026] [:error] [pid 43386:tid 43442] [client 4.232.179.255:57669] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aeEh0-91GAVgUfhPVDHS0gAAAFU"]
[Fri Apr 17 01:52:19.586083 2026] [:error] [pid 43386:tid 43431] [client 4.232.179.255:50564] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aeEh0-91GAVgUfhPVDHS1AAAAEs"]
[Fri Apr 17 01:52:20.138570 2026] [:error] [pid 11692:tid 11706] [client 4.232.179.255:49346] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aeEh1M1AYuhm4BZwKNoffAAAAgk"]
[Fri Apr 17 01:52:20.643727 2026] [:error] [pid 43387:tid 43448] [client 4.232.179.255:49344] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aeEh1CBNsONqHxWTakVCaQAAAIA"]
[Fri Apr 17 01:52:21.147857 2026] [:error] [pid 43386:tid 43421] [client 4.232.179.255:49405] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zoo.php"] [unique_id "aeEh1e91GAVgUfhPVDHS2AAAAEE"]
[Fri Apr 17 01:52:21.721156 2026] [:error] [pid 43386:tid 43422] [client 4.232.179.255:54828] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zoo.php"] [unique_id "aeEh1e91GAVgUfhPVDHS2QAAAEI"]
[Fri Apr 17 01:52:22.207721 2026] [:error] [pid 43386:tid 43436] [client 4.232.179.255:54274] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zoo.php"] [unique_id "aeEh1u91GAVgUfhPVDHS3AAAAFA"]
[Fri Apr 17 01:52:22.725189 2026] [:error] [pid 3245:tid 3272] [client 4.232.179.255:58891] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zoo.php"] [unique_id "aeEh1qESOMTHVLs-uFDZwQAAAQo"]
[Fri Apr 17 01:52:23.228674 2026] [:error] [pid 43386:tid 43422] [client 4.232.179.255:54304] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gaza.php"] [unique_id "aeEh1-91GAVgUfhPVDHS5wAAAEI"]
[Fri Apr 17 01:52:23.748448 2026] [:error] [pid 43386:tid 43435] [client 4.232.179.255:59591] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gaza.php"] [unique_id "aeEh1-91GAVgUfhPVDHS6AAAAE8"]
[Fri Apr 17 01:52:24.256592 2026] [:error] [pid 43386:tid 43420] [client 4.232.179.255:58921] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gaza.php"] [unique_id "aeEh2O91GAVgUfhPVDHS9wAAAEA"]
[Fri Apr 17 01:52:24.793383 2026] [:error] [pid 43386:tid 43436] [client 4.232.179.255:59600] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gaza.php"] [unique_id "aeEh2O91GAVgUfhPVDHS_wAAAFA"]
[Fri Apr 17 01:52:25.301775 2026] [:error] [pid 43386:tid 43430] [client 4.232.179.255:54791] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/retu11.PhP7"] [unique_id "aeEh2e91GAVgUfhPVDHTBwAAAEo"]
[Fri Apr 17 01:52:25.794802 2026] [:error] [pid 43386:tid 43444] [client 4.232.179.255:56520] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/retu11.PhP7"] [unique_id "aeEh2e91GAVgUfhPVDHTDQAAAFc"]
[Fri Apr 17 01:52:26.381386 2026] [:error] [pid 43386:tid 43433] [client 4.232.179.255:59626] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/retu11.PhP7"] [unique_id "aeEh2u91GAVgUfhPVDHTEAAAAE0"]
[Fri Apr 17 01:52:26.956843 2026] [:error] [pid 43482:tid 43492] [client 4.232.179.255:59632] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/retu11.PhP7"] [unique_id "aeEh2j9SZnuKxlHrct2rJgAAAMg"]
[Fri Apr 17 01:52:27.535374 2026] [:error] [pid 43482:tid 43494] [client 4.232.179.255:54333] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeEh2z9SZnuKxlHrct2rKwAAAMo"]
[Fri Apr 17 01:52:28.073157 2026] [:error] [pid 43387:tid 43475] [client 4.232.179.255:56534] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeEh3CBNsONqHxWTakVCbwAAAJY"]
[Fri Apr 17 01:52:28.654685 2026] [:error] [pid 43387:tid 43468] [client 4.232.179.255:54313] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeEh3CBNsONqHxWTakVCcQAAAI8"]
[Fri Apr 17 01:52:29.170455 2026] [:error] [pid 43387:tid 43456] [client 4.232.179.255:54276] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeEh3SBNsONqHxWTakVCegAAAIU"]
[Fri Apr 17 01:52:29.681773 2026] [:error] [pid 26102:tid 26118] [client 4.232.179.255:58906] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mk.php"] [unique_id "aeEh3f127aFqw6ALdngbigAAAY0"]
[Fri Apr 17 01:52:30.188664 2026] [:error] [pid 26102:tid 26121] [client 4.232.179.255:59624] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mk.php"] [unique_id "aeEh3v127aFqw6ALdngbjgAAAZA"]
[Fri Apr 17 01:52:30.710973 2026] [:error] [pid 43386:tid 43422] [client 4.232.179.255:59603] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mk.php"] [unique_id "aeEh3u91GAVgUfhPVDHTIAAAAEI"]
[Fri Apr 17 01:52:31.216018 2026] [:error] [pid 43386:tid 43425] [client 4.232.179.255:54302] [client 4.232.179.255] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mk.php"] [unique_id "aeEh3-91GAVgUfhPVDHTIwAAAEU"]
[Fri Apr 17 01:52:31.734052 2026] [:error] [pid 43386:tid 43426] [client 4.232.179.255:58885] [client 4.232.179.255] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aeEh3-91GAVgUfhPVDHTJwAAAEY"]
[Fri Apr 17 05:17:10.805694 2026] [:error] [pid 9263:tid 9285] [client 34.168.100.28:44536] [client 34.168.100.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/.env"] [unique_id "aeFR1hP68VyHNvj1e57nwgAAANQ"]
[Fri Apr 17 05:17:16.351548 2026] [:error] [pid 9263:tid 9283] [client 34.168.100.28:46530] [client 34.168.100.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.vercel/.env.production.local"] [unique_id "aeFR3BP68VyHNvj1e57oBAAAANI"]
[Fri Apr 17 09:53:51.736881 2026] [:error] [pid 9152:tid 9212] [client 172.69.151.67:10490] [client 172.69.151.67] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/"] [unique_id "aeGSr5JYca8I3TNCwIelbQAAAFY"]
[Sat Apr 18 04:21:37.943872 2026] [:error] [pid 9864:tid 9917] [client 172.213.226.43:7162] [client 172.213.226.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aeKWUYCFeowknfXHM7kQYwAAAEs"]
[Sat Apr 18 04:21:40.453840 2026] [:error] [pid 9970:tid 9995] [client 172.213.226.43:7157] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "aeKWVCYdRLRhVmaIMx2DsgAAANU"]
[Sat Apr 18 04:21:41.595627 2026] [:error] [pid 9970:tid 9997] [client 172.213.226.43:7043] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "aeKWVSYdRLRhVmaIMx2DtQAAANc"]
[Sat Apr 18 04:21:42.597203 2026] [:error] [pid 9970:tid 9991] [client 172.213.226.43:7049] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "aeKWViYdRLRhVmaIMx2DtwAAANE"]
[Sat Apr 18 04:21:43.773200 2026] [:error] [pid 9970:tid 9992] [client 172.213.226.43:7113] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "aeKWVyYdRLRhVmaIMx2DuwAAANI"]
[Sat Apr 18 04:21:45.541660 2026] [:error] [pid 9864:tid 9929] [client 172.213.226.43:7143] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tiny2.php"] [unique_id "aeKWWYCFeowknfXHM7kQbwAAAFc"]
[Sat Apr 18 04:21:46.459897 2026] [:error] [pid 9970:tid 9976] [client 172.213.226.43:7122] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tiny2.php"] [unique_id "aeKWWiYdRLRhVmaIMx2DwAAAAMI"]
[Sat Apr 18 04:21:47.451870 2026] [:error] [pid 9865:tid 9948] [client 172.213.226.43:7116] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tiny2.php"] [unique_id "aeKWW6zb5knECIY-C-h3egAAAIs"]
[Sat Apr 18 04:21:48.064530 2026] [:error] [pid 9970:tid 9983] [client 172.213.226.43:7111] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tiny2.php"] [unique_id "aeKWXCYdRLRhVmaIMx2DwwAAAMk"]
[Sat Apr 18 04:21:48.675735 2026] [:error] [pid 9865:tid 9956] [client 172.213.226.43:7053] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/state.php"] [unique_id "aeKWXKzb5knECIY-C-h3fgAAAJM"]
[Sat Apr 18 04:21:52.061133 2026] [:error] [pid 9864:tid 9909] [client 172.213.226.43:7120] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/state.php"] [unique_id "aeKWYICFeowknfXHM7kQfQAAAEQ"]
[Sat Apr 18 04:21:58.628824 2026] [:error] [pid 9970:tid 9987] [client 172.213.226.43:7119] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/state.php"] [unique_id "aeKWZiYdRLRhVmaIMx2D1wAAAM0"]
[Sat Apr 18 04:21:59.475044 2026] [:error] [pid 9970:tid 9974] [client 172.213.226.43:7140] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/state.php"] [unique_id "aeKWZyYdRLRhVmaIMx2D3gAAAMA"]
[Sat Apr 18 04:22:00.446434 2026] [:error] [pid 9865:tid 9954] [client 172.213.226.43:7129] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "aeKWaKzb5knECIY-C-h3iwAAAJE"]
[Sat Apr 18 04:22:01.525559 2026] [:error] [pid 9970:tid 9992] [client 172.213.226.43:7133] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "aeKWaSYdRLRhVmaIMx2D5gAAANI"]
[Sat Apr 18 04:22:02.545667 2026] [:error] [pid 9865:tid 9939] [client 172.213.226.43:7142] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "aeKWaqzb5knECIY-C-h3jQAAAII"]
[Sat Apr 18 04:22:03.730149 2026] [:error] [pid 9864:tid 9929] [client 172.213.226.43:7108] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "aeKWa4CFeowknfXHM7kQjwAAAFc"]
[Sat Apr 18 04:22:05.686266 2026] [:error] [pid 9864:tid 9906] [client 172.213.226.43:7041] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "aeKWbYCFeowknfXHM7kQkQAAAEE"]
[Sat Apr 18 04:22:07.125960 2026] [:error] [pid 9865:tid 9958] [client 172.213.226.43:7073] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "aeKWb6zb5knECIY-C-h3lAAAAJU"]
[Sat Apr 18 04:22:08.170603 2026] [:error] [pid 9863:tid 9891] [client 172.213.226.43:7152] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "aeKWcDjjiypiFrTucbLuYAAAABI"]
[Sat Apr 18 04:22:09.636779 2026] [:error] [pid 9864:tid 9924] [client 172.213.226.43:7154] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "aeKWcYCFeowknfXHM7kQmAAAAFI"]
[Sat Apr 18 04:22:10.419747 2026] [:error] [pid 9864:tid 9914] [client 172.213.226.43:7128] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "aeKWcoCFeowknfXHM7kQmgAAAEg"]
[Sat Apr 18 04:22:12.563424 2026] [:error] [pid 9865:tid 9957] [client 172.213.226.43:7050] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "aeKWdKzb5knECIY-C-h3nQAAAJQ"]
[Sat Apr 18 04:22:18.910175 2026] [:error] [pid 9970:tid 9992] [client 172.213.226.43:7158] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "aeKWeiYdRLRhVmaIMx2EBgAAANI"]
[Sat Apr 18 04:22:20.441494 2026] [:error] [pid 9863:tid 9884] [client 172.213.226.43:7160] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "aeKWfDjjiypiFrTucbLufQAAAAs"]
[Sat Apr 18 04:22:22.899462 2026] [:error] [pid 9863:tid 9877] [client 172.213.226.43:7159] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "aeKWfjjjiypiFrTucbLujgAAAAQ"]
[Sat Apr 18 04:22:24.363771 2026] [:error] [pid 9865:tid 9949] [client 172.213.226.43:7147] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "aeKWgKzb5knECIY-C-h3sAAAAIw"]
[Sat Apr 18 04:22:25.648279 2026] [:error] [pid 9864:tid 9929] [client 172.213.226.43:7085] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "aeKWgYCFeowknfXHM7kQ3QAAAFc"]
[Sat Apr 18 04:22:27.322139 2026] [:error] [pid 9865:tid 9946] [client 172.213.226.43:7151] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "aeKWg6zb5knECIY-C-h3vAAAAIk"]
[Sat Apr 18 04:22:29.440081 2026] [:error] [pid 9970:tid 9988] [client 172.213.226.43:7106] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ss.php"] [unique_id "aeKWhSYdRLRhVmaIMx2EUgAAAM4"]
[Sat Apr 18 04:22:30.471078 2026] [:error] [pid 9970:tid 9985] [client 172.213.226.43:7104] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ss.php"] [unique_id "aeKWhiYdRLRhVmaIMx2EVgAAAMs"]
[Sat Apr 18 04:22:31.846693 2026] [:error] [pid 9970:tid 9993] [client 172.213.226.43:7057] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ss.php"] [unique_id "aeKWhyYdRLRhVmaIMx2EWgAAANM"]
[Sat Apr 18 04:22:32.676197 2026] [:error] [pid 9865:tid 9945] [client 172.213.226.43:7118] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ss.php"] [unique_id "aeKWiKzb5knECIY-C-h3yQAAAIg"]
[Sat Apr 18 04:22:33.524291 2026] [:error] [pid 9863:tid 9894] [client 172.213.226.43:7145] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "aeKWiTjjiypiFrTucbLuowAAABU"]
[Sat Apr 18 04:22:34.911486 2026] [:error] [pid 9970:tid 9985] [client 172.213.226.43:7167] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "aeKWiiYdRLRhVmaIMx2EYgAAAMs"]
[Sat Apr 18 04:22:36.470892 2026] [:error] [pid 9970:tid 9977] [client 172.213.226.43:6990] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "aeKWjCYdRLRhVmaIMx2EZgAAAMM"]
[Sat Apr 18 04:22:37.185663 2026] [:error] [pid 9865:tid 9953] [client 172.213.226.43:7131] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "aeKWjazb5knECIY-C-h30wAAAJA"]
[Sat Apr 18 04:22:37.959915 2026] [:error] [pid 9970:tid 9980] [client 172.213.226.43:7051] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/7.php"] [unique_id "aeKWjSYdRLRhVmaIMx2EbAAAAMY"]
[Sat Apr 18 04:22:38.684864 2026] [:error] [pid 9970:tid 9982] [client 172.213.226.43:7045] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/7.php"] [unique_id "aeKWjiYdRLRhVmaIMx2EbwAAAMg"]
[Sat Apr 18 04:22:39.861060 2026] [:error] [pid 9863:tid 9897] [client 172.213.226.43:7126] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/7.php"] [unique_id "aeKWjzjjiypiFrTucbLupwAAABg"]
[Sat Apr 18 04:22:44.213441 2026] [:error] [pid 9863:tid 9894] [client 172.213.226.43:7065] [client 172.213.226.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "aeKWlDjjiypiFrTucbLusAAAABU"]
[Sat Apr 18 04:22:48.129780 2026] [:error] [pid 9863:tid 9878] [client 172.213.226.43:7115] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/12.php"] [unique_id "aeKWmDjjiypiFrTucbLuuAAAAAU"]
[Sat Apr 18 04:22:48.864285 2026] [:error] [pid 9864:tid 9915] [client 172.213.226.43:7112] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/12.php"] [unique_id "aeKWmICFeowknfXHM7kQ_AAAAEk"]
[Sat Apr 18 04:22:50.238372 2026] [:error] [pid 9970:tid 9975] [client 172.213.226.43:7099] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/12.php"] [unique_id "aeKWmiYdRLRhVmaIMx2EewAAAME"]
[Sat Apr 18 04:22:52.047610 2026] [:error] [pid 9864:tid 9912] [client 172.213.226.43:7074] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/12.php"] [unique_id "aeKWnICFeowknfXHM7kRAgAAAEY"]
[Sat Apr 18 04:22:53.533340 2026] [:error] [pid 9865:tid 9947] [client 172.213.226.43:7059] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "aeKWnazb5knECIY-C-h3-AAAAIo"]
[Sat Apr 18 04:22:55.176764 2026] [:error] [pid 9970:tid 9974] [client 172.213.226.43:6993] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "aeKWnyYdRLRhVmaIMx2EgQAAAMA"]
[Sat Apr 18 04:22:55.847963 2026] [:error] [pid 9865:tid 9961] [client 172.213.226.43:7165] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "aeKWn6zb5knECIY-C-h3_gAAAJg"]
[Sat Apr 18 04:22:56.977434 2026] [:error] [pid 9970:tid 9995] [client 172.213.226.43:6983] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "aeKWoCYdRLRhVmaIMx2EiwAAANU"]
[Sat Apr 18 04:22:57.775659 2026] [:error] [pid 9863:tid 9895] [client 172.213.226.43:7079] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "aeKWoTjjiypiFrTucbLuwAAAABY"]
[Sat Apr 18 04:22:59.951405 2026] [:error] [pid 9970:tid 9980] [client 172.213.226.43:7055] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "aeKWoyYdRLRhVmaIMx2EjwAAAMY"]
[Sat Apr 18 04:23:01.576443 2026] [:error] [pid 9970:tid 9977] [client 172.213.226.43:7138] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "aeKWpSYdRLRhVmaIMx2ElAAAAMM"]
[Sat Apr 18 04:23:02.922622 2026] [:error] [pid 9970:tid 9974] [client 172.213.226.43:7075] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "aeKWpiYdRLRhVmaIMx2EmQAAAMA"]
[Sat Apr 18 04:23:03.885788 2026] [:error] [pid 9865:tid 9939] [client 172.213.226.43:7124] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aeKWp6zb5knECIY-C-h4DgAAAII"]
[Sat Apr 18 04:23:11.145568 2026] [:error] [pid 9865:tid 9942] [client 172.213.226.43:7040] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aeKWr6zb5knECIY-C-h4FAAAAIU"]
[Sat Apr 18 04:23:18.005328 2026] [:error] [pid 9970:tid 9997] [client 172.213.226.43:7153] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aeKWtiYdRLRhVmaIMx2EtgAAANc"]
[Sat Apr 18 04:23:19.085338 2026] [:error] [pid 9863:tid 9884] [client 172.213.226.43:7052] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/roksad1.php"] [unique_id "aeKWtzjjiypiFrTucbLu1gAAAAs"]
[Sat Apr 18 04:23:20.044958 2026] [:error] [pid 9863:tid 9878] [client 172.213.226.43:7166] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/roksad1.php"] [unique_id "aeKWuDjjiypiFrTucbLu1wAAAAU"]
[Sat Apr 18 04:23:21.231073 2026] [:error] [pid 9970:tid 9988] [client 172.213.226.43:6995] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/roksad1.php"] [unique_id "aeKWuSYdRLRhVmaIMx2EuwAAAM4"]
[Sat Apr 18 04:23:22.220795 2026] [:error] [pid 9864:tid 9928] [client 172.213.226.43:7107] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/roksad1.php"] [unique_id "aeKWuoCFeowknfXHM7kRGQAAAFY"]
[Sat Apr 18 04:23:22.884844 2026] [:error] [pid 9970:tid 9982] [client 172.213.226.43:7033] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "aeKWuiYdRLRhVmaIMx2EvgAAAMg"]
[Sat Apr 18 04:23:23.487903 2026] [:error] [pid 9970:tid 9981] [client 172.213.226.43:7000] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "aeKWuyYdRLRhVmaIMx2EwQAAAMc"]
[Sat Apr 18 04:23:24.178329 2026] [:error] [pid 9865:tid 9945] [client 172.213.226.43:7092] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "aeKWvKzb5knECIY-C-h4LgAAAIg"]
[Sat Apr 18 04:23:24.930610 2026] [:error] [pid 9865:tid 9950] [client 172.213.226.43:7130] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "aeKWvKzb5knECIY-C-h4MQAAAI0"]
[Sat Apr 18 04:23:25.826382 2026] [:error] [pid 9863:tid 9873] [client 172.213.226.43:7098] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aeKWvTjjiypiFrTucbLu3gAAAAA"]
[Sat Apr 18 04:23:26.505447 2026] [:error] [pid 9865:tid 9937] [client 172.213.226.43:7082] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aeKWvqzb5knECIY-C-h4NgAAAIA"]
[Sat Apr 18 04:23:27.070359 2026] [:error] [pid 9970:tid 9985] [client 172.213.226.43:6979] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aeKWvyYdRLRhVmaIMx2ExAAAAMs"]
[Sat Apr 18 04:23:27.708562 2026] [:error] [pid 9863:tid 9876] [client 172.213.226.43:7042] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aeKWvzjjiypiFrTucbLu4gAAAAM"]
[Sat Apr 18 04:23:29.126140 2026] [:error] [pid 9864:tid 9906] [client 172.213.226.43:7139] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aeKWwYCFeowknfXHM7kRGgAAAEE"]
[Sat Apr 18 04:23:30.369904 2026] [:error] [pid 9970:tid 9991] [client 172.213.226.43:7091] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aeKWwiYdRLRhVmaIMx2EyQAAANE"]
[Sat Apr 18 04:23:31.219299 2026] [:error] [pid 9970:tid 9980] [client 172.213.226.43:7156] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aeKWwyYdRLRhVmaIMx2EzQAAAMY"]
[Sat Apr 18 04:23:32.946956 2026] [:error] [pid 9865:tid 9954] [client 172.213.226.43:7136] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aeKWxKzb5knECIY-C-h4QQAAAJE"]
[Sat Apr 18 04:23:33.994634 2026] [:error] [pid 9863:tid 9878] [client 172.213.226.43:7097] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "aeKWxTjjiypiFrTucbLu5gAAAAU"]
[Sat Apr 18 04:23:35.038269 2026] [:error] [pid 9863:tid 9876] [client 172.213.226.43:7013] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "aeKWxzjjiypiFrTucbLu6gAAAAM"]
[Sat Apr 18 04:23:36.538696 2026] [:error] [pid 9864:tid 9910] [client 172.213.226.43:7063] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "aeKWyICFeowknfXHM7kRIQAAAEU"]
[Sat Apr 18 04:23:37.857641 2026] [:error] [pid 9864:tid 9928] [client 172.213.226.43:7146] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "aeKWyYCFeowknfXHM7kRIgAAAFY"]
[Sat Apr 18 04:23:38.910637 2026] [:error] [pid 9970:tid 9998] [client 172.213.226.43:7058] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/db.php"] [unique_id "aeKWyiYdRLRhVmaIMx2E1wAAANg"]
[Sat Apr 18 04:23:40.349903 2026] [:error] [pid 9970:tid 9977] [client 172.213.226.43:7006] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/db.php"] [unique_id "aeKWzCYdRLRhVmaIMx2E3gAAAMM"]
[Sat Apr 18 04:23:41.200516 2026] [:error] [pid 9970:tid 9978] [client 172.213.226.43:6976] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/db.php"] [unique_id "aeKWzSYdRLRhVmaIMx2E4wAAAMQ"]
[Sat Apr 18 04:23:42.621105 2026] [:error] [pid 9970:tid 9975] [client 172.213.226.43:7123] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/db.php"] [unique_id "aeKWziYdRLRhVmaIMx2E6gAAAME"]
[Sat Apr 18 04:23:44.048039 2026] [:error] [pid 9863:tid 9884] [client 172.213.226.43:7102] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/less.php"] [unique_id "aeKW0DjjiypiFrTucbLu_QAAAAs"]
[Sat Apr 18 04:23:45.871832 2026] [:error] [pid 9865:tid 9961] [client 172.213.226.43:7088] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/less.php"] [unique_id "aeKW0azb5knECIY-C-h4SwAAAJg"]
[Sat Apr 18 04:23:54.527999 2026] [:error] [pid 9863:tid 9887] [client 172.213.226.43:7008] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "aeKW2jjjiypiFrTucbLvHwAAAA4"]
[Sat Apr 18 04:23:55.427084 2026] [:error] [pid 9864:tid 9919] [client 172.213.226.43:6978] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "aeKW24CFeowknfXHM7kROgAAAE0"]
[Sat Apr 18 04:23:56.293351 2026] [:error] [pid 9863:tid 9889] [client 172.213.226.43:7114] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "aeKW3DjjiypiFrTucbLvIwAAABA"]
[Sat Apr 18 04:23:56.947933 2026] [:error] [pid 9864:tid 9916] [client 172.213.226.43:7044] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "aeKW3ICFeowknfXHM7kROwAAAEo"]
[Sat Apr 18 04:23:58.903947 2026] [:error] [pid 9864:tid 9914] [client 172.213.226.43:7001] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/006.php"] [unique_id "aeKW3oCFeowknfXHM7kRPQAAAEg"]
[Sat Apr 18 04:24:00.394722 2026] [:error] [pid 9863:tid 9878] [client 172.213.226.43:7155] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/006.php"] [unique_id "aeKW4DjjiypiFrTucbLvLAAAAAU"]
[Sat Apr 18 04:24:01.523592 2026] [:error] [pid 9863:tid 9881] [client 172.213.226.43:7002] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/006.php"] [unique_id "aeKW4TjjiypiFrTucbLvLwAAAAg"]
[Sat Apr 18 04:24:02.378483 2026] [:error] [pid 9863:tid 9877] [client 172.213.226.43:7064] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/006.php"] [unique_id "aeKW4jjjiypiFrTucbLvMwAAAAQ"]
[Sat Apr 18 04:24:03.605987 2026] [:error] [pid 9863:tid 9884] [client 172.213.226.43:7095] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/samll.php"] [unique_id "aeKW4zjjiypiFrTucbLvNQAAAAs"]
[Sat Apr 18 04:24:04.380698 2026] [:error] [pid 9863:tid 9883] [client 172.213.226.43:7127] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/samll.php"] [unique_id "aeKW5DjjiypiFrTucbLvOQAAAAo"]
[Sat Apr 18 04:24:05.638295 2026] [:error] [pid 9970:tid 9992] [client 172.213.226.43:7076] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/samll.php"] [unique_id "aeKW5SYdRLRhVmaIMx2FDAAAANI"]
[Sat Apr 18 04:24:07.728556 2026] [:error] [pid 9970:tid 9996] [client 172.213.226.43:6915] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/samll.php"] [unique_id "aeKW5yYdRLRhVmaIMx2FEAAAANY"]
[Sat Apr 18 04:24:08.755980 2026] [:error] [pid 9970:tid 9993] [client 172.213.226.43:6923] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zogy1.php"] [unique_id "aeKW6CYdRLRhVmaIMx2FEQAAANM"]
[Sat Apr 18 04:24:09.517855 2026] [:error] [pid 9970:tid 9976] [client 172.213.226.43:7062] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zogy1.php"] [unique_id "aeKW6SYdRLRhVmaIMx2FFAAAAMI"]
[Sat Apr 18 04:24:10.319749 2026] [:error] [pid 9865:tid 9958] [client 172.213.226.43:7024] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zogy1.php"] [unique_id "aeKW6qzb5knECIY-C-h4fQAAAJU"]
[Sat Apr 18 04:24:11.239037 2026] [:error] [pid 9970:tid 9981] [client 172.213.226.43:6985] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zogy1.php"] [unique_id "aeKW6yYdRLRhVmaIMx2FHQAAAMc"]
[Sat Apr 18 04:24:11.970673 2026] [:error] [pid 9970:tid 9995] [client 172.213.226.43:7003] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeKW6yYdRLRhVmaIMx2FHwAAANU"]
[Sat Apr 18 04:24:12.532614 2026] [:error] [pid 9970:tid 9976] [client 172.213.226.43:6984] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeKW7CYdRLRhVmaIMx2FIgAAAMI"]
[Sat Apr 18 04:24:13.280115 2026] [:error] [pid 9970:tid 9997] [client 172.213.226.43:6999] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeKW7SYdRLRhVmaIMx2FJAAAANc"]
[Sat Apr 18 04:24:13.945194 2026] [:error] [pid 9865:tid 9959] [client 172.213.226.43:7100] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeKW7azb5knECIY-C-h4ggAAAJY"]
[Sat Apr 18 04:24:14.934937 2026] [:error] [pid 9970:tid 9995] [client 172.213.226.43:7150] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rh.php"] [unique_id "aeKW7iYdRLRhVmaIMx2FKAAAANU"]
[Sat Apr 18 04:24:15.940864 2026] [:error] [pid 9863:tid 9897] [client 172.213.226.43:7094] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rh.php"] [unique_id "aeKW7zjjiypiFrTucbLvTAAAABg"]
[Sat Apr 18 04:24:16.943450 2026] [:error] [pid 9970:tid 9985] [client 172.213.226.43:6991] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rh.php"] [unique_id "aeKW8CYdRLRhVmaIMx2FMQAAAMs"]
[Sat Apr 18 04:24:17.712206 2026] [:error] [pid 9864:tid 9928] [client 172.213.226.43:7125] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rh.php"] [unique_id "aeKW8YCFeowknfXHM7kRYwAAAFY"]
[Sat Apr 18 04:24:19.427865 2026] [:error] [pid 9865:tid 9952] [client 172.213.226.43:7164] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gz.php"] [unique_id "aeKW86zb5knECIY-C-h4hQAAAI8"]
[Sat Apr 18 04:24:20.291774 2026] [:error] [pid 9970:tid 9988] [client 172.213.226.43:7163] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gz.php"] [unique_id "aeKW9CYdRLRhVmaIMx2FQQAAAM4"]
[Sat Apr 18 04:24:21.136828 2026] [:error] [pid 9865:tid 9948] [client 172.213.226.43:7161] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gz.php"] [unique_id "aeKW9azb5knECIY-C-h4igAAAIs"]
[Sat Apr 18 04:24:22.170882 2026] [:error] [pid 9970:tid 9994] [client 172.213.226.43:7141] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gz.php"] [unique_id "aeKW9iYdRLRhVmaIMx2FRQAAANQ"]
[Sat Apr 18 04:24:22.944321 2026] [:error] [pid 9864:tid 9920] [client 172.213.226.43:7025] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gelio1.php"] [unique_id "aeKW9oCFeowknfXHM7kRZgAAAE4"]
[Sat Apr 18 04:24:23.746991 2026] [:error] [pid 9865:tid 9955] [client 172.213.226.43:6925] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gelio1.php"] [unique_id "aeKW96zb5knECIY-C-h4kAAAAJI"]
[Sat Apr 18 04:24:24.671964 2026] [:error] [pid 9865:tid 9960] [client 172.213.226.43:6980] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gelio1.php"] [unique_id "aeKW-Kzb5knECIY-C-h4mgAAAJc"]
[Sat Apr 18 04:24:25.785954 2026] [:error] [pid 9863:tid 9887] [client 172.213.226.43:6920] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gelio1.php"] [unique_id "aeKW-TjjiypiFrTucbLvUgAAAA4"]
[Sat Apr 18 04:24:26.537477 2026] [:error] [pid 9864:tid 9914] [client 172.213.226.43:7007] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/areak1.php"] [unique_id "aeKW-oCFeowknfXHM7kRbAAAAEg"]
[Sat Apr 18 04:24:28.100459 2026] [:error] [pid 9865:tid 9946] [client 172.213.226.43:7083] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/areak1.php"] [unique_id "aeKW_Kzb5knECIY-C-h4vQAAAIk"]
[Sat Apr 18 04:24:28.979837 2026] [:error] [pid 9970:tid 9991] [client 172.213.226.43:7134] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/areak1.php"] [unique_id "aeKW_CYdRLRhVmaIMx2FXAAAANE"]
[Sat Apr 18 04:24:29.531318 2026] [:error] [pid 9970:tid 9978] [client 172.213.226.43:7068] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/areak1.php"] [unique_id "aeKW_SYdRLRhVmaIMx2FYAAAAMQ"]
[Sat Apr 18 04:24:30.248148 2026] [:error] [pid 9970:tid 9980] [client 172.213.226.43:7089] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/qqa.php"] [unique_id "aeKW_iYdRLRhVmaIMx2FYwAAAMY"]
[Sat Apr 18 04:24:30.821372 2026] [:error] [pid 9970:tid 9989] [client 172.213.226.43:6938] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/qqa.php"] [unique_id "aeKW_iYdRLRhVmaIMx2FZgAAAM8"]
[Sat Apr 18 04:24:31.401078 2026] [:error] [pid 9863:tid 9895] [client 172.213.226.43:7087] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/qqa.php"] [unique_id "aeKW_zjjiypiFrTucbLvYAAAABY"]
[Sat Apr 18 04:24:32.135698 2026] [:error] [pid 9865:tid 9959] [client 172.213.226.43:7105] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/qqa.php"] [unique_id "aeKXAKzb5knECIY-C-h4xQAAAJY"]
[Sat Apr 18 04:24:32.825949 2026] [:error] [pid 9864:tid 9905] [client 172.213.226.43:7084] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aeKXAICFeowknfXHM7kReQAAAEA"]
[Sat Apr 18 04:24:33.495113 2026] [:error] [pid 9865:tid 9939] [client 172.213.226.43:7072] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aeKXAazb5knECIY-C-h4zgAAAII"]
[Sat Apr 18 04:24:35.744500 2026] [:error] [pid 9865:tid 9939] [client 172.213.226.43:7005] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aeKXA6zb5knECIY-C-h43AAAAII"]
[Sat Apr 18 04:24:37.685037 2026] [:error] [pid 9864:tid 9909] [client 172.213.226.43:7047] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aeKXBYCFeowknfXHM7kRhAAAAEQ"]
[Sat Apr 18 04:24:39.147169 2026] [:error] [pid 9864:tid 9920] [client 172.213.226.43:7078] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ga.php"] [unique_id "aeKXB4CFeowknfXHM7kRhgAAAE4"]
[Sat Apr 18 04:24:39.927086 2026] [:error] [pid 9863:tid 9883] [client 172.213.226.43:6916] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ga.php"] [unique_id "aeKXBzjjiypiFrTucbLvZQAAAAo"]
[Sat Apr 18 04:24:41.844924 2026] [:error] [pid 9863:tid 9875] [client 172.213.226.43:6918] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ga.php"] [unique_id "aeKXCTjjiypiFrTucbLvZgAAAAI"]
[Sat Apr 18 04:24:43.431773 2026] [:error] [pid 9864:tid 9912] [client 172.213.226.43:7060] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ga.php"] [unique_id "aeKXC4CFeowknfXHM7kRlwAAAEY"]
[Sat Apr 18 04:24:44.365352 2026] [:error] [pid 9864:tid 9907] [client 172.213.226.43:6966] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xozx.php"] [unique_id "aeKXDICFeowknfXHM7kRmQAAAEI"]
[Sat Apr 18 04:24:44.980123 2026] [:error] [pid 9970:tid 9987] [client 172.213.226.43:6941] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xozx.php"] [unique_id "aeKXDCYdRLRhVmaIMx2FhwAAAM0"]
[Sat Apr 18 04:24:45.593506 2026] [:error] [pid 9865:tid 9960] [client 172.213.226.43:7015] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xozx.php"] [unique_id "aeKXDazb5knECIY-C-h5AwAAAJc"]
[Sat Apr 18 04:24:46.385768 2026] [:error] [pid 9865:tid 9958] [client 172.213.226.43:7080] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xozx.php"] [unique_id "aeKXDqzb5knECIY-C-h5CgAAAJU"]
[Sat Apr 18 04:24:47.234382 2026] [:error] [pid 9863:tid 9891] [client 172.213.226.43:7067] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1100.php"] [unique_id "aeKXDzjjiypiFrTucbLvZwAAABI"]
[Sat Apr 18 04:24:47.958171 2026] [:error] [pid 9864:tid 9909] [client 172.213.226.43:7077] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1100.php"] [unique_id "aeKXD4CFeowknfXHM7kRnwAAAEQ"]
[Sat Apr 18 04:24:48.713688 2026] [:error] [pid 9970:tid 9990] [client 172.213.226.43:7061] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1100.php"] [unique_id "aeKXECYdRLRhVmaIMx2FkAAAANA"]
[Sat Apr 18 04:24:49.574072 2026] [:error] [pid 9864:tid 9913] [client 172.213.226.43:7046] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1100.php"] [unique_id "aeKXEYCFeowknfXHM7kRogAAAEc"]
[Sat Apr 18 04:24:50.472450 2026] [:error] [pid 9864:tid 9912] [client 172.213.226.43:6935] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/press.php"] [unique_id "aeKXEoCFeowknfXHM7kRowAAAEY"]
[Sat Apr 18 04:24:51.429178 2026] [:error] [pid 9864:tid 9910] [client 172.213.226.43:7137] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/press.php"] [unique_id "aeKXE4CFeowknfXHM7kRpQAAAEU"]
[Sat Apr 18 04:24:52.160333 2026] [:error] [pid 9864:tid 9920] [client 172.213.226.43:7086] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/press.php"] [unique_id "aeKXFICFeowknfXHM7kRpwAAAE4"]
[Sat Apr 18 04:24:52.849718 2026] [:error] [pid 9865:tid 9961] [client 172.213.226.43:7021] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/press.php"] [unique_id "aeKXFKzb5knECIY-C-h5LQAAAJg"]
[Sat Apr 18 04:24:53.523825 2026] [:error] [pid 9970:tid 9979] [client 172.213.226.43:7110] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aeKXFSYdRLRhVmaIMx2FmAAAAMU"]
[Sat Apr 18 04:25:01.885941 2026] [:error] [pid 9864:tid 9929] [client 172.213.226.43:6924] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wxpass.php"] [unique_id "aeKXHYCFeowknfXHM7kRugAAAFc"]
[Sat Apr 18 04:25:02.893637 2026] [:error] [pid 9970:tid 9998] [client 172.213.226.43:6996] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wxpass.php"] [unique_id "aeKXHiYdRLRhVmaIMx2FxgAAANg"]
[Sat Apr 18 04:25:03.743197 2026] [:error] [pid 9970:tid 9978] [client 172.213.226.43:6961] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wxpass.php"] [unique_id "aeKXHyYdRLRhVmaIMx2FzgAAAMQ"]
[Sat Apr 18 04:25:04.422331 2026] [:error] [pid 9970:tid 9995] [client 172.213.226.43:7048] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wxpass.php"] [unique_id "aeKXICYdRLRhVmaIMx2F1gAAANU"]
[Sat Apr 18 04:25:05.160320 2026] [:error] [pid 9970:tid 9983] [client 172.213.226.43:7071] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/000.php"] [unique_id "aeKXISYdRLRhVmaIMx2F2gAAAMk"]
[Sat Apr 18 04:25:05.904898 2026] [:error] [pid 9864:tid 9914] [client 172.213.226.43:6994] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/000.php"] [unique_id "aeKXIYCFeowknfXHM7kRvAAAAEg"]
[Sat Apr 18 04:25:07.243032 2026] [:error] [pid 9865:tid 9957] [client 172.213.226.43:6986] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/000.php"] [unique_id "aeKXI6zb5knECIY-C-h5WwAAAJQ"]
[Sat Apr 18 04:25:08.252017 2026] [:error] [pid 9970:tid 9979] [client 172.213.226.43:7069] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/000.php"] [unique_id "aeKXJCYdRLRhVmaIMx2F3wAAAMU"]
[Sat Apr 18 04:25:09.557698 2026] [:error] [pid 9970:tid 9985] [client 172.213.226.43:7020] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/config.php"] [unique_id "aeKXJSYdRLRhVmaIMx2F5AAAAMs"]
[Sat Apr 18 04:25:10.587157 2026] [:error] [pid 9970:tid 9983] [client 172.213.226.43:6951] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/config.php"] [unique_id "aeKXJiYdRLRhVmaIMx2F6AAAAMk"]
[Sat Apr 18 04:25:11.414418 2026] [:error] [pid 9863:tid 9879] [client 172.213.226.43:7016] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/config.php"] [unique_id "aeKXJzjjiypiFrTucbLvcAAAAAY"]
[Sat Apr 18 04:25:12.319271 2026] [:error] [pid 9864:tid 9928] [client 172.213.226.43:6913] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/config.php"] [unique_id "aeKXKICFeowknfXHM7kRwAAAAFY"]
[Sat Apr 18 04:25:12.964072 2026] [:error] [pid 9865:tid 9955] [client 172.213.226.43:6975] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x3x.php"] [unique_id "aeKXKKzb5knECIY-C-h5ZAAAAJI"]
[Sat Apr 18 04:25:13.645353 2026] [:error] [pid 9970:tid 9989] [client 172.213.226.43:7096] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x3x.php"] [unique_id "aeKXKSYdRLRhVmaIMx2F8AAAAM8"]
[Sat Apr 18 04:25:14.555512 2026] [:error] [pid 9970:tid 9974] [client 172.213.226.43:6987] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x3x.php"] [unique_id "aeKXKiYdRLRhVmaIMx2F9gAAAMA"]
[Sat Apr 18 04:25:15.632271 2026] [:error] [pid 9863:tid 9897] [client 172.213.226.43:7101] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x3x.php"] [unique_id "aeKXKzjjiypiFrTucbLvcwAAABg"]
[Sat Apr 18 04:25:16.244498 2026] [:error] [pid 9970:tid 9985] [client 172.213.226.43:7109] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xy.php"] [unique_id "aeKXLCYdRLRhVmaIMx2F-QAAAMs"]
[Sat Apr 18 04:25:17.021229 2026] [:error] [pid 9970:tid 9974] [client 172.213.226.43:7037] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xy.php"] [unique_id "aeKXLSYdRLRhVmaIMx2F_QAAAMA"]
[Sat Apr 18 04:25:18.123928 2026] [:error] [pid 9970:tid 9990] [client 172.213.226.43:6912] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xy.php"] [unique_id "aeKXLiYdRLRhVmaIMx2GBAAAANA"]
[Sat Apr 18 04:25:19.025573 2026] [:error] [pid 9865:tid 9937] [client 172.213.226.43:7035] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xy.php"] [unique_id "aeKXL6zb5knECIY-C-h5cAAAAIA"]
[Sat Apr 18 04:25:20.854063 2026] [:error] [pid 9863:tid 9886] [client 172.213.226.43:6936] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/global.php"] [unique_id "aeKXMDjjiypiFrTucbLvdQAAAA0"]
[Sat Apr 18 04:25:23.078495 2026] [:error] [pid 9970:tid 9991] [client 172.213.226.43:7149] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/global.php"] [unique_id "aeKXMyYdRLRhVmaIMx2GDgAAANE"]
[Sat Apr 18 04:25:25.124142 2026] [:error] [pid 9970:tid 9980] [client 172.213.226.43:6917] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/global.php"] [unique_id "aeKXNSYdRLRhVmaIMx2GFwAAAMY"]
[Sat Apr 18 04:25:26.297263 2026] [:error] [pid 9970:tid 9998] [client 172.213.226.43:7022] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/global.php"] [unique_id "aeKXNiYdRLRhVmaIMx2GGgAAANg"]
[Sat Apr 18 04:25:27.877392 2026] [:error] [pid 9970:tid 9978] [client 172.213.226.43:7148] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aeKXNyYdRLRhVmaIMx2GHwAAAMQ"]
[Sat Apr 18 04:25:29.296934 2026] [:error] [pid 9970:tid 9981] [client 172.213.226.43:6952] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aeKXOSYdRLRhVmaIMx2GJQAAAMc"]
[Sat Apr 18 04:25:30.617104 2026] [:error] [pid 9970:tid 9985] [client 172.213.226.43:6953] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aeKXOiYdRLRhVmaIMx2GKgAAAMs"]
[Sat Apr 18 04:25:34.170028 2026] [:error] [pid 9970:tid 9993] [client 172.213.226.43:6977] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aeKXPiYdRLRhVmaIMx2GLgAAANM"]
[Sat Apr 18 04:25:36.740369 2026] [:error] [pid 9970:tid 9996] [client 172.213.226.43:7004] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/link.php"] [unique_id "aeKXQCYdRLRhVmaIMx2GNgAAANY"]
[Sat Apr 18 04:25:37.663782 2026] [:error] [pid 9864:tid 9912] [client 172.213.226.43:6940] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/link.php"] [unique_id "aeKXQYCFeowknfXHM7kR1wAAAEY"]
[Sat Apr 18 04:25:39.662462 2026] [:error] [pid 9970:tid 9996] [client 172.213.226.43:7031] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/link.php"] [unique_id "aeKXQyYdRLRhVmaIMx2GRAAAANY"]
[Sat Apr 18 04:25:40.655881 2026] [:error] [pid 9863:tid 9880] [client 172.213.226.43:6982] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/link.php"] [unique_id "aeKXRDjjiypiFrTucbLvgQAAAAc"]
[Sat Apr 18 04:25:42.407638 2026] [:error] [pid 9864:tid 9929] [client 172.213.226.43:6989] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeKXRoCFeowknfXHM7kR2gAAAFc"]
[Sat Apr 18 04:25:43.561718 2026] [:error] [pid 9864:tid 9922] [client 172.213.226.43:6962] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeKXR4CFeowknfXHM7kR2wAAAFA"]
[Sat Apr 18 04:25:44.604717 2026] [:error] [pid 9865:tid 9947] [client 172.213.226.43:6849] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeKXSKzb5knECIY-C-h5kAAAAIo"]
[Sat Apr 18 04:25:45.650495 2026] [:error] [pid 9863:tid 9886] [client 172.213.226.43:6998] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeKXSTjjiypiFrTucbLviAAAAA0"]
[Sat Apr 18 04:25:46.591879 2026] [:error] [pid 9864:tid 9914] [client 172.213.226.43:6997] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-block.php"] [unique_id "aeKXSoCFeowknfXHM7kR3wAAAEg"]
[Sat Apr 18 04:25:47.286751 2026] [:error] [pid 9863:tid 9874] [client 172.213.226.43:6958] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-block.php"] [unique_id "aeKXSzjjiypiFrTucbLviwAAAAE"]
[Sat Apr 18 04:25:48.785156 2026] [:error] [pid 9865:tid 9958] [client 172.213.226.43:7029] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-block.php"] [unique_id "aeKXTKzb5knECIY-C-h5mAAAAJU"]
[Sat Apr 18 04:25:49.679262 2026] [:error] [pid 9865:tid 9950] [client 172.213.226.43:7070] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-block.php"] [unique_id "aeKXTazb5knECIY-C-h5mwAAAI0"]
[Sat Apr 18 04:25:50.551850 2026] [:error] [pid 9865:tid 9944] [client 172.213.226.43:6992] [client 172.213.226.43] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/wincust.php"] [unique_id "aeKXTqzb5knECIY-C-h5nwAAAIc"]
[Sat Apr 18 04:25:51.492511 2026] [:error] [pid 9863:tid 9873] [client 172.213.226.43:7113] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aeKXTzjjiypiFrTucbLvlgAAAAA"]
[Sat Apr 18 04:25:52.276905 2026] [:error] [pid 9970:tid 9985] [client 172.213.226.43:7014] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aeKXUCYdRLRhVmaIMx2GWgAAAMs"]
[Sat Apr 18 04:25:53.010129 2026] [:error] [pid 9865:tid 9958] [client 172.213.226.43:6933] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aeKXUazb5knECIY-C-h5pgAAAJU"]
[Sat Apr 18 04:25:53.858158 2026] [:error] [pid 9970:tid 9975] [client 172.213.226.43:7035] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aeKXUSYdRLRhVmaIMx2GXwAAAME"]
[Sat Apr 18 04:25:55.372577 2026] [:error] [pid 9970:tid 9985] [client 172.213.226.43:6962] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aeKXUyYdRLRhVmaIMx2GZQAAAMs"]
[Sat Apr 18 04:25:56.475806 2026] [:error] [pid 9970:tid 9984] [client 172.213.226.43:7053] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aeKXVCYdRLRhVmaIMx2GZwAAAMo"]
[Sat Apr 18 04:25:58.856920 2026] [:error] [pid 9865:tid 9958] [client 172.213.226.43:6942] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aeKXVqzb5knECIY-C-h5rgAAAJU"]
[Sat Apr 18 04:26:00.469325 2026] [:error] [pid 9865:tid 9942] [client 172.213.226.43:7081] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aeKXWKzb5knECIY-C-h5swAAAIU"]
[Sat Apr 18 04:26:10.324698 2026] [:error] [pid 9970:tid 9986] [client 172.213.226.43:7117] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-class.php"] [unique_id "aeKXYiYdRLRhVmaIMx2GkAAAAMw"]
[Sat Apr 18 04:26:11.375095 2026] [:error] [pid 9970:tid 9995] [client 172.213.226.43:7133] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-class.php"] [unique_id "aeKXYyYdRLRhVmaIMx2GlgAAANU"]
[Sat Apr 18 04:26:12.130323 2026] [:error] [pid 9865:tid 9941] [client 172.213.226.43:7054] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-class.php"] [unique_id "aeKXZKzb5knECIY-C-h5wgAAAIQ"]
[Sat Apr 18 04:26:13.612169 2026] [:error] [pid 9863:tid 9895] [client 172.213.226.43:7027] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-class.php"] [unique_id "aeKXZTjjiypiFrTucbLvrAAAABY"]
[Sat Apr 18 04:26:14.457207 2026] [:error] [pid 9863:tid 9880] [client 172.213.226.43:7030] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cilus.php"] [unique_id "aeKXZjjjiypiFrTucbLvrwAAAAc"]
[Sat Apr 18 04:26:15.006590 2026] [:error] [pid 9865:tid 9945] [client 172.213.226.43:7144] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cilus.php"] [unique_id "aeKXZ6zb5knECIY-C-h5xAAAAIg"]
[Sat Apr 18 04:26:15.557325 2026] [:error] [pid 9865:tid 9947] [client 172.213.226.43:7129] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cilus.php"] [unique_id "aeKXZ6zb5knECIY-C-h5xwAAAIo"]
[Sat Apr 18 04:26:16.459872 2026] [:error] [pid 9863:tid 9891] [client 172.213.226.43:7056] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cilus.php"] [unique_id "aeKXaDjjiypiFrTucbLvtgAAABI"]
[Sat Apr 18 04:26:17.173667 2026] [:error] [pid 9863:tid 9887] [client 172.213.226.43:6926] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/d.php"] [unique_id "aeKXaTjjiypiFrTucbLvuQAAAA4"]
[Sat Apr 18 04:26:18.154081 2026] [:error] [pid 9865:tid 9942] [client 172.213.226.43:6922] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/d.php"] [unique_id "aeKXaqzb5knECIY-C-h5zQAAAIU"]
[Sat Apr 18 04:26:19.203253 2026] [:error] [pid 9864:tid 9905] [client 172.213.226.43:7073] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/d.php"] [unique_id "aeKXa4CFeowknfXHM7kR8gAAAEA"]
[Sat Apr 18 04:26:20.956632 2026] [:error] [pid 9970:tid 9978] [client 172.213.226.43:7103] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/d.php"] [unique_id "aeKXbCYdRLRhVmaIMx2GmQAAAMQ"]
[Sat Apr 18 04:26:21.792277 2026] [:error] [pid 9863:tid 9881] [client 172.213.226.43:7142] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/error_log.php"] [unique_id "aeKXbTjjiypiFrTucbLvxAAAAAg"]
[Sat Apr 18 04:26:22.467214 2026] [:error] [pid 9865:tid 9940] [client 172.213.226.43:6854] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/error_log.php"] [unique_id "aeKXbqzb5knECIY-C-h52gAAAIM"]
[Sat Apr 18 04:26:23.123382 2026] [:error] [pid 9865:tid 9955] [client 172.213.226.43:6929] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/error_log.php"] [unique_id "aeKXb6zb5knECIY-C-h53wAAAJI"]
[Sat Apr 18 04:26:24.029596 2026] [:error] [pid 9865:tid 9958] [client 172.213.226.43:7026] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/error_log.php"] [unique_id "aeKXcKzb5knECIY-C-h54QAAAJU"]
[Sat Apr 18 04:26:24.912629 2026] [:error] [pid 9864:tid 9913] [client 172.213.226.43:7050] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeKXcICFeowknfXHM7kR9wAAAEc"]
[Sat Apr 18 04:26:25.790029 2026] [:error] [pid 9863:tid 9892] [client 172.213.226.43:6930] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeKXcTjjiypiFrTucbLvywAAABM"]
[Sat Apr 18 04:26:27.134504 2026] [:error] [pid 9865:tid 9954] [client 172.213.226.43:7039] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeKXc6zb5knECIY-C-h56wAAAJE"]
[Sat Apr 18 04:26:28.692979 2026] [:error] [pid 9864:tid 9920] [client 172.213.226.43:7011] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Ov-Simple1.php"] [unique_id "aeKXdICFeowknfXHM7kR-gAAAE4"]
[Sat Apr 18 04:26:29.834368 2026] [:error] [pid 9970:tid 9982] [client 172.213.226.43:7036] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/curl.php"] [unique_id "aeKXdSYdRLRhVmaIMx2GnQAAAMg"]
[Sat Apr 18 04:26:31.075320 2026] [:error] [pid 9865:tid 9941] [client 172.213.226.43:6805] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/curl.php"] [unique_id "aeKXd6zb5knECIY-C-h5-gAAAIQ"]
[Sat Apr 18 04:26:32.503757 2026] [:error] [pid 9865:tid 9950] [client 172.213.226.43:7034] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/curl.php"] [unique_id "aeKXeKzb5knECIY-C-h5_QAAAI0"]
[Sat Apr 18 04:26:34.913521 2026] [:error] [pid 9863:tid 9893] [client 172.213.226.43:7041] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/curl.php"] [unique_id "aeKXejjjiypiFrTucbLv2gAAABQ"]
[Sat Apr 18 04:26:35.915097 2026] [:error] [pid 9864:tid 9913] [client 172.213.226.43:7122] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sallu.php"] [unique_id "aeKXe4CFeowknfXHM7kSDQAAAEc"]
[Sat Apr 18 04:26:37.154092 2026] [:error] [pid 9970:tid 9990] [client 172.213.226.43:6959] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sallu.php"] [unique_id "aeKXfSYdRLRhVmaIMx2GtQAAANA"]
[Sat Apr 18 04:26:37.798162 2026] [:error] [pid 9970:tid 9997] [client 172.213.226.43:6963] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sallu.php"] [unique_id "aeKXfSYdRLRhVmaIMx2GuwAAANc"]
[Sat Apr 18 04:26:38.692392 2026] [:error] [pid 9864:tid 9927] [client 172.213.226.43:7057] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sallu.php"] [unique_id "aeKXfoCFeowknfXHM7kSHAAAAFU"]
[Sat Apr 18 04:26:39.438734 2026] [:error] [pid 9865:tid 9943] [client 172.213.226.43:6946] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aeKXf6zb5knECIY-C-h6CgAAAIY"]
[Sat Apr 18 04:26:40.243854 2026] [:error] [pid 9863:tid 9892] [client 172.213.226.43:7066] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aeKXgDjjiypiFrTucbLv6gAAABM"]
[Sat Apr 18 04:26:40.944331 2026] [:error] [pid 9863:tid 9890] [client 172.213.226.43:7017] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aeKXgDjjiypiFrTucbLv7AAAABE"]
[Sat Apr 18 04:26:41.749535 2026] [:error] [pid 9864:tid 9916] [client 172.213.226.43:7118] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aeKXgYCFeowknfXHM7kSIQAAAEo"]
[Sat Apr 18 04:26:42.323665 2026] [:error] [pid 9864:tid 9921] [client 172.213.226.43:7121] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aeKXgoCFeowknfXHM7kSIwAAAE8"]
[Sat Apr 18 04:26:43.281335 2026] [:error] [pid 9864:tid 9910] [client 172.213.226.43:6850] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aeKXg4CFeowknfXHM7kSKgAAAEU"]
[Sat Apr 18 04:26:43.887545 2026] [:error] [pid 9864:tid 9922] [client 172.213.226.43:7090] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aeKXg4CFeowknfXHM7kSLQAAAFA"]
[Sat Apr 18 04:26:44.526108 2026] [:error] [pid 9865:tid 9943] [client 172.213.226.43:6853] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aeKXhKzb5knECIY-C-h6EwAAAIY"]
[Sat Apr 18 04:26:45.466905 2026] [:error] [pid 9970:tid 9976] [client 172.213.226.43:7143] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aeKXhSYdRLRhVmaIMx2GxgAAAMI"]
[Sat Apr 18 04:26:46.158718 2026] [:error] [pid 9970:tid 9978] [client 172.213.226.43:7019] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aeKXhiYdRLRhVmaIMx2GxwAAAMQ"]
[Sat Apr 18 04:26:47.417664 2026] [:error] [pid 9970:tid 9985] [client 172.213.226.43:7051] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aeKXhyYdRLRhVmaIMx2GzAAAAMs"]
[Sat Apr 18 04:26:48.542017 2026] [:error] [pid 9970:tid 9979] [client 172.213.226.43:7043] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aeKXiCYdRLRhVmaIMx2G0wAAAMU"]
[Sat Apr 18 04:26:49.504262 2026] [:error] [pid 9970:tid 9977] [client 172.213.226.43:7032] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/goods_260325043000.php"] [unique_id "aeKXiSYdRLRhVmaIMx2G1AAAAMM"]
[Sat Apr 18 04:26:50.538066 2026] [:error] [pid 9865:tid 9945] [client 172.213.226.43:7158] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/goods_260325043000.php"] [unique_id "aeKXiqzb5knECIY-C-h6HwAAAIg"]
[Sat Apr 18 04:26:51.883884 2026] [:error] [pid 9970:tid 9995] [client 172.213.226.43:7009] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/goods_260325043000.php"] [unique_id "aeKXiyYdRLRhVmaIMx2G2wAAANU"]
[Sat Apr 18 04:26:53.535561 2026] [:error] [pid 9863:tid 9896] [client 172.213.226.43:7120] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/goods_260325043000.php"] [unique_id "aeKXjTjjiypiFrTucbLwDwAAABc"]
[Sat Apr 18 04:26:54.944692 2026] [:error] [pid 9970:tid 9991] [client 172.213.226.43:7045] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/goods_260401065719.php"] [unique_id "aeKXjiYdRLRhVmaIMx2G4AAAANE"]
[Sat Apr 18 04:26:55.931635 2026] [:error] [pid 9970:tid 9981] [client 172.213.226.43:7112] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/goods_260401065719.php"] [unique_id "aeKXjyYdRLRhVmaIMx2G5gAAAMc"]
[Sat Apr 18 04:26:56.926395 2026] [:error] [pid 9865:tid 9947] [client 172.213.226.43:7108] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/goods_260401065719.php"] [unique_id "aeKXkKzb5knECIY-C-h6NwAAAIo"]
[Sat Apr 18 04:26:58.163628 2026] [:error] [pid 9970:tid 9976] [client 172.213.226.43:7093] [client 172.213.226.43] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/goods_260401065719.php"] [unique_id "aeKXkiYdRLRhVmaIMx2G7gAAAMI"]
[Sat Apr 18 05:16:58.861732 2026] [:error] [pid 9863:tid 9880] [client 4.211.104.36:35821] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nwflm.php"] [unique_id "aeKjSjjjiypiFrTucbIAqQAAAAc"]
[Sat Apr 18 05:17:01.536252 2026] [:error] [pid 9864:tid 9921] [client 4.211.104.36:19459] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nwflm.php"] [unique_id "aeKjTYCFeowknfXHM7km7gAAAE8"]
[Sat Apr 18 05:17:05.670598 2026] [:error] [pid 9865:tid 9959] [client 4.211.104.36:19746] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nwflm.php"] [unique_id "aeKjUazb5knECIY-C-iUJgAAAJY"]
[Sat Apr 18 05:17:08.976172 2026] [:error] [pid 9970:tid 9994] [client 4.211.104.36:2411] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/nwflm.php"] [unique_id "aeKjVCYdRLRhVmaIMx2rzQAAANQ"]
[Sat Apr 18 05:17:10.739219 2026] [:error] [pid 9864:tid 9923] [client 4.211.104.36:2865] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aeKjVoCFeowknfXHM7knHAAAAFE"]
[Sat Apr 18 05:17:13.033758 2026] [:error] [pid 9864:tid 9922] [client 4.211.104.36:2148] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aeKjWYCFeowknfXHM7knIwAAAFA"]
[Sat Apr 18 05:17:14.529136 2026] [:error] [pid 9863:tid 9891] [client 4.211.104.36:32806] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aeKjWjjjiypiFrTucbIAsQAAABI"]
[Sat Apr 18 05:17:16.580571 2026] [:error] [pid 9970:tid 9995] [client 4.211.104.36:17082] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aeKjXCYdRLRhVmaIMx2r1wAAANU"]
[Sat Apr 18 05:17:17.754498 2026] [:error] [pid 9970:tid 9989] [client 4.211.104.36:17086] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "aeKjXSYdRLRhVmaIMx2r2gAAAM8"]
[Sat Apr 18 05:17:18.992997 2026] [:error] [pid 9865:tid 9941] [client 4.211.104.36:19244] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "aeKjXqzb5knECIY-C-iUQQAAAIQ"]
[Sat Apr 18 05:17:19.983436 2026] [:error] [pid 9865:tid 9946] [client 4.211.104.36:19474] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "aeKjX6zb5knECIY-C-iURgAAAIk"]
[Sat Apr 18 05:17:21.061737 2026] [:error] [pid 9865:tid 9945] [client 4.211.104.36:18510] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "aeKjYazb5knECIY-C-iUSQAAAIg"]
[Sat Apr 18 05:17:22.219091 2026] [:error] [pid 9865:tid 9949] [client 4.211.104.36:17037] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "aeKjYqzb5knECIY-C-iUTwAAAIw"]
[Sat Apr 18 05:17:22.906459 2026] [:error] [pid 9863:tid 9883] [client 4.211.104.36:19465] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "aeKjYjjjiypiFrTucbIAuAAAAAo"]
[Sat Apr 18 05:17:23.605008 2026] [:error] [pid 9865:tid 9945] [client 4.211.104.36:17073] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "aeKjY6zb5knECIY-C-iUWQAAAIg"]
[Sat Apr 18 05:17:24.367827 2026] [:error] [pid 9970:tid 9982] [client 4.211.104.36:17611] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "aeKjZCYdRLRhVmaIMx2r4gAAAMg"]
[Sat Apr 18 05:17:25.405080 2026] [:error] [pid 9970:tid 9980] [client 4.211.104.36:19259] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "aeKjZSYdRLRhVmaIMx2r6AAAAMY"]
[Sat Apr 18 05:17:26.062600 2026] [:error] [pid 9970:tid 9975] [client 4.211.104.36:32830] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "aeKjZiYdRLRhVmaIMx2r6wAAAME"]
[Sat Apr 18 05:17:27.073999 2026] [:error] [pid 9970:tid 9990] [client 4.211.104.36:27117] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "aeKjZyYdRLRhVmaIMx2r7QAAANA"]
[Sat Apr 18 05:17:27.801117 2026] [:error] [pid 9970:tid 9993] [client 4.211.104.36:57650] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "aeKjZyYdRLRhVmaIMx2r7wAAANM"]
[Sat Apr 18 05:17:28.638325 2026] [:error] [pid 9864:tid 9916] [client 4.211.104.36:17614] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "aeKjaICFeowknfXHM7knMQAAAEo"]
[Sat Apr 18 05:17:30.270199 2026] [:error] [pid 9863:tid 9879] [client 4.211.104.36:2987] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "aeKjajjjiypiFrTucbIAvgAAAAY"]
[Sat Apr 18 05:17:31.760399 2026] [:error] [pid 9970:tid 9990] [client 4.211.104.36:2132] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "aeKjayYdRLRhVmaIMx2r-AAAANA"]
[Sat Apr 18 05:17:33.440408 2026] [:error] [pid 9970:tid 9982] [client 4.211.104.36:57632] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "aeKjbSYdRLRhVmaIMx2r_QAAAMg"]
[Sat Apr 18 05:17:35.198897 2026] [:error] [pid 9970:tid 9979] [client 4.211.104.36:27110] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "aeKjbyYdRLRhVmaIMx2sAAAAAMU"]
[Sat Apr 18 05:17:36.416397 2026] [:error] [pid 9865:tid 9951] [client 4.211.104.36:57617] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "aeKjcKzb5knECIY-C-iUdQAAAI4"]
[Sat Apr 18 05:17:37.380047 2026] [:error] [pid 9863:tid 9882] [client 4.211.104.36:27093] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "aeKjcTjjiypiFrTucbIAxwAAAAk"]
[Sat Apr 18 05:17:39.115349 2026] [:error] [pid 9864:tid 9927] [client 4.211.104.36:34260] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "aeKjc4CFeowknfXHM7knPQAAAFU"]
[Sat Apr 18 05:17:41.548835 2026] [:error] [pid 9863:tid 9894] [client 4.211.104.36:18518] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/water.php"] [unique_id "aeKjdTjjiypiFrTucbIAzQAAABU"]
[Sat Apr 18 05:17:42.894393 2026] [:error] [pid 9865:tid 9961] [client 4.211.104.36:23093] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/water.php"] [unique_id "aeKjdqzb5knECIY-C-iUiQAAAJg"]
[Sat Apr 18 05:17:44.164499 2026] [:error] [pid 9864:tid 9929] [client 4.211.104.36:2154] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/water.php"] [unique_id "aeKjeICFeowknfXHM7knQgAAAFc"]
[Sat Apr 18 05:17:45.931852 2026] [:error] [pid 9865:tid 9939] [client 4.211.104.36:57339] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/water.php"] [unique_id "aeKjeazb5knECIY-C-iUkQAAAII"]
[Sat Apr 18 05:17:50.121205 2026] [:error] [pid 9864:tid 9916] [client 4.211.104.36:19215] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "aeKjfoCFeowknfXHM7knSgAAAEo"]
[Sat Apr 18 05:17:52.841776 2026] [:error] [pid 9970:tid 9992] [client 4.211.104.36:57608] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "aeKjgCYdRLRhVmaIMx2sHwAAANI"]
[Sat Apr 18 05:17:55.505781 2026] [:error] [pid 9970:tid 9981] [client 4.211.104.36:24335] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "aeKjgyYdRLRhVmaIMx2sJgAAAMc"]
[Sat Apr 18 05:17:57.406127 2026] [:error] [pid 9864:tid 9916] [client 4.211.104.36:23318] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ggb.php"] [unique_id "aeKjhYCFeowknfXHM7knVQAAAEo"]
[Sat Apr 18 05:18:08.039532 2026] [:error] [pid 9970:tid 9990] [client 4.211.104.36:27114] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aeKjkCYdRLRhVmaIMx2sVAAAANA"]
[Sat Apr 18 05:18:13.904986 2026] [:error] [pid 9970:tid 9998] [client 4.211.104.36:17610] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aeKjlSYdRLRhVmaIMx2sYwAAANg"]
[Sat Apr 18 05:18:15.850869 2026] [:error] [pid 9970:tid 9992] [client 4.211.104.36:23087] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aeKjlyYdRLRhVmaIMx2sagAAANI"]
[Sat Apr 18 05:18:17.209633 2026] [:error] [pid 9865:tid 9961] [client 4.211.104.36:23329] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aeKjmazb5knECIY-C-iUsgAAAJg"]
[Sat Apr 18 05:18:18.381582 2026] [:error] [pid 9970:tid 9994] [client 4.211.104.36:20544] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "aeKjmiYdRLRhVmaIMx2sawAAANQ"]
[Sat Apr 18 05:18:19.317910 2026] [:error] [pid 9865:tid 9937] [client 4.211.104.36:17661] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "aeKjm6zb5knECIY-C-iUtQAAAIA"]
[Sat Apr 18 05:18:20.812872 2026] [:error] [pid 9970:tid 9979] [client 4.211.104.36:27128] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "aeKjnCYdRLRhVmaIMx2sdQAAAMU"]
[Sat Apr 18 05:18:24.781884 2026] [:error] [pid 9970:tid 9990] [client 4.211.104.36:24600] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "aeKjoCYdRLRhVmaIMx2segAAANA"]
[Sat Apr 18 05:18:27.134132 2026] [:error] [pid 9970:tid 9989] [client 4.211.104.36:23347] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/3.php"] [unique_id "aeKjoyYdRLRhVmaIMx2sfwAAAM8"]
[Sat Apr 18 05:18:31.953552 2026] [:error] [pid 9970:tid 9995] [client 4.211.104.36:25204] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/3.php"] [unique_id "aeKjpyYdRLRhVmaIMx2skwAAANU"]
[Sat Apr 18 05:18:35.352275 2026] [:error] [pid 9970:tid 9994] [client 4.211.104.36:23140] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/3.php"] [unique_id "aeKjqyYdRLRhVmaIMx2snQAAANQ"]
[Sat Apr 18 05:18:37.819753 2026] [:error] [pid 9970:tid 9975] [client 4.211.104.36:20607] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/3.php"] [unique_id "aeKjrSYdRLRhVmaIMx2spAAAAME"]
[Sat Apr 18 05:18:40.154357 2026] [:error] [pid 9970:tid 9979] [client 4.211.104.36:26758] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/4.php"] [unique_id "aeKjsCYdRLRhVmaIMx2sqQAAAMU"]
[Sat Apr 18 05:18:41.600203 2026] [:error] [pid 9970:tid 9975] [client 4.211.104.36:29355] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/4.php"] [unique_id "aeKjsSYdRLRhVmaIMx2ssAAAAME"]
[Sat Apr 18 05:18:43.511631 2026] [:error] [pid 9970:tid 9980] [client 4.211.104.36:29365] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/4.php"] [unique_id "aeKjsyYdRLRhVmaIMx2stgAAAMY"]
[Sat Apr 18 05:18:47.549589 2026] [:error] [pid 9863:tid 9893] [client 4.211.104.36:23104] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/4.php"] [unique_id "aeKjtzjjiypiFrTucbIA-AAAABQ"]
[Sat Apr 18 05:18:50.153172 2026] [:error] [pid 9970:tid 9981] [client 4.211.104.36:24938] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/5.php"] [unique_id "aeKjuiYdRLRhVmaIMx2sxAAAAMc"]
[Sat Apr 18 05:18:51.381600 2026] [:error] [pid 9863:tid 9896] [client 4.211.104.36:45721] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/5.php"] [unique_id "aeKjuzjjiypiFrTucbIA_wAAABc"]
[Sat Apr 18 05:18:51.940125 2026] [:error] [pid 9863:tid 9891] [client 4.211.104.36:31398] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/5.php"] [unique_id "aeKjuzjjiypiFrTucbIBAgAAABI"]
[Sat Apr 18 05:18:52.807577 2026] [:error] [pid 9865:tid 9954] [client 4.211.104.36:29320] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/5.php"] [unique_id "aeKjvKzb5knECIY-C-iU2gAAAJE"]
[Sat Apr 18 05:18:53.707380 2026] [:error] [pid 9970:tid 9997] [client 4.211.104.36:26548] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/6.php"] [unique_id "aeKjvSYdRLRhVmaIMx2syQAAANc"]
[Sat Apr 18 05:18:55.107955 2026] [:error] [pid 9970:tid 9988] [client 4.211.104.36:26508] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/6.php"] [unique_id "aeKjvyYdRLRhVmaIMx2szgAAAM4"]
[Sat Apr 18 05:18:57.553711 2026] [:error] [pid 9970:tid 9992] [client 4.211.104.36:22218] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/6.php"] [unique_id "aeKjwSYdRLRhVmaIMx2s0wAAANI"]
[Sat Apr 18 05:18:58.402327 2026] [:error] [pid 9970:tid 9997] [client 4.211.104.36:23127] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/6.php"] [unique_id "aeKjwiYdRLRhVmaIMx2s1gAAANc"]
[Sat Apr 18 05:19:00.871656 2026] [:error] [pid 9865:tid 9955] [client 4.211.104.36:2051] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/9.php"] [unique_id "aeKjxKzb5knECIY-C-iU5gAAAJI"]
[Sat Apr 18 05:19:04.605394 2026] [:error] [pid 9863:tid 9883] [client 4.211.104.36:16839] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/9.php"] [unique_id "aeKjyDjjiypiFrTucbIBEQAAAAo"]
[Sat Apr 18 05:19:16.483016 2026] [:error] [pid 9863:tid 9883] [client 4.211.104.36:31393] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwpg.php"] [unique_id "aeKj1DjjiypiFrTucbIBMwAAAAo"]
[Sat Apr 18 05:19:17.094386 2026] [:error] [pid 9865:tid 9952] [client 4.211.104.36:45211] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwpg.php"] [unique_id "aeKj1azb5knECIY-C-iU9AAAAI8"]
[Sat Apr 18 05:19:17.667674 2026] [:error] [pid 9970:tid 9985] [client 4.211.104.36:2066] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwpg.php"] [unique_id "aeKj1SYdRLRhVmaIMx2s6QAAAMs"]
[Sat Apr 18 05:19:18.564691 2026] [:error] [pid 9970:tid 9976] [client 4.211.104.36:31098] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwpg.php"] [unique_id "aeKj1iYdRLRhVmaIMx2s7AAAAMI"]
[Sat Apr 18 05:19:19.104183 2026] [:error] [pid 9864:tid 9920] [client 4.211.104.36:2049] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "aeKj14CFeowknfXHM7knjwAAAE4"]
[Sat Apr 18 05:19:20.001720 2026] [:error] [pid 9864:tid 9926] [client 4.211.104.36:34956] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "aeKj2ICFeowknfXHM7knkgAAAFQ"]
[Sat Apr 18 05:19:21.328673 2026] [:error] [pid 9864:tid 9921] [client 4.211.104.36:24866] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "aeKj2YCFeowknfXHM7knlQAAAE8"]
[Sat Apr 18 05:19:22.100500 2026] [:error] [pid 9863:tid 9895] [client 4.211.104.36:45193] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "aeKj2jjjiypiFrTucbIBNQAAABY"]
[Sat Apr 18 05:19:23.028587 2026] [:error] [pid 9970:tid 9991] [client 4.211.104.36:24690] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aeKj2yYdRLRhVmaIMx2s9gAAANE"]
[Sat Apr 18 05:19:23.684654 2026] [:error] [pid 9970:tid 9987] [client 4.211.104.36:21166] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aeKj2yYdRLRhVmaIMx2s-QAAAM0"]
[Sat Apr 18 05:19:24.705065 2026] [:error] [pid 9970:tid 9984] [client 4.211.104.36:45243] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aeKj3CYdRLRhVmaIMx2s_QAAAMo"]
[Sat Apr 18 05:19:25.712943 2026] [:error] [pid 9865:tid 9961] [client 4.211.104.36:18266] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "aeKj3azb5knECIY-C-iU-QAAAJg"]
[Sat Apr 18 05:19:26.533072 2026] [:error] [pid 9863:tid 9873] [client 4.211.104.36:23387] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "aeKj3jjjiypiFrTucbIBOgAAAAA"]
[Sat Apr 18 05:19:27.299902 2026] [:error] [pid 9863:tid 9885] [client 4.211.104.36:28914] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "aeKj3zjjiypiFrTucbIBOwAAAAw"]
[Sat Apr 18 05:19:28.459599 2026] [:error] [pid 9863:tid 9882] [client 4.211.104.36:22218] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "aeKj4DjjiypiFrTucbIBPAAAAAk"]
[Sat Apr 18 05:19:29.206556 2026] [:error] [pid 9864:tid 9921] [client 4.211.104.36:20909] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "aeKj4YCFeowknfXHM7knpgAAAE8"]
[Sat Apr 18 05:19:29.927275 2026] [:error] [pid 9865:tid 9950] [client 4.211.104.36:20618] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "aeKj4azb5knECIY-C-iU_AAAAI0"]
[Sat Apr 18 05:19:30.820832 2026] [:error] [pid 9863:tid 9893] [client 4.211.104.36:28906] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "aeKj4jjjiypiFrTucbIBQgAAABQ"]
[Sat Apr 18 05:19:31.554368 2026] [:error] [pid 9864:tid 9920] [client 4.211.104.36:18300] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "aeKj44CFeowknfXHM7knrwAAAE4"]
[Sat Apr 18 05:19:32.353462 2026] [:error] [pid 9863:tid 9881] [client 4.211.104.36:17568] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "aeKj5DjjiypiFrTucbIBQwAAAAg"]
[Sat Apr 18 05:19:32.965706 2026] [:error] [pid 9970:tid 9979] [client 4.211.104.36:24660] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zample.php"] [unique_id "aeKj5CYdRLRhVmaIMx2tBAAAAMU"]
[Sat Apr 18 05:19:33.752438 2026] [:error] [pid 9970:tid 9987] [client 4.211.104.36:24698] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zample.php"] [unique_id "aeKj5SYdRLRhVmaIMx2tBgAAAM0"]
[Sat Apr 18 05:19:34.304752 2026] [:error] [pid 9863:tid 9875] [client 4.211.104.36:23391] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zample.php"] [unique_id "aeKj5jjjiypiFrTucbIBSgAAAAI"]
[Sat Apr 18 05:19:34.841306 2026] [:error] [pid 9864:tid 9926] [client 4.211.104.36:28625] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zample.php"] [unique_id "aeKj5oCFeowknfXHM7kntQAAAFQ"]
[Sat Apr 18 05:19:35.382040 2026] [:error] [pid 9864:tid 9906] [client 4.211.104.36:33885] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aeKj54CFeowknfXHM7kntgAAAEE"]
[Sat Apr 18 05:19:35.943458 2026] [:error] [pid 9864:tid 9917] [client 4.211.104.36:18240] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aeKj54CFeowknfXHM7knuQAAAEs"]
[Sat Apr 18 05:19:36.622863 2026] [:error] [pid 9864:tid 9912] [client 4.211.104.36:28642] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aeKj6ICFeowknfXHM7knuwAAAEY"]
[Sat Apr 18 05:19:37.225416 2026] [:error] [pid 9865:tid 9949] [client 4.211.104.36:18757] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aeKj6azb5knECIY-C-iVAgAAAIw"]
[Sat Apr 18 05:19:37.761632 2026] [:error] [pid 9970:tid 9993] [client 4.211.104.36:28873] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aeKj6SYdRLRhVmaIMx2tDQAAANM"]
[Sat Apr 18 05:19:38.291324 2026] [:error] [pid 9970:tid 9986] [client 4.211.104.36:20885] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aeKj6iYdRLRhVmaIMx2tDwAAAMw"]
[Sat Apr 18 05:19:39.316723 2026] [:error] [pid 9865:tid 9958] [client 4.211.104.36:29078] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aeKj66zb5knECIY-C-iVBAAAAJU"]
[Sat Apr 18 05:19:39.922343 2026] [:error] [pid 9970:tid 9978] [client 4.211.104.36:17981] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aeKj6yYdRLRhVmaIMx2tFgAAAMQ"]
[Sat Apr 18 05:19:40.552381 2026] [:error] [pid 9863:tid 9894] [client 4.211.104.36:18263] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aeKj7DjjiypiFrTucbIBUwAAABU"]
[Sat Apr 18 05:19:41.229466 2026] [:error] [pid 9970:tid 9983] [client 4.211.104.36:17948] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aeKj7SYdRLRhVmaIMx2tGQAAAMk"]
[Sat Apr 18 05:19:41.938193 2026] [:error] [pid 9865:tid 9944] [client 4.211.104.36:56727] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aeKj7azb5knECIY-C-iVBgAAAIc"]
[Sat Apr 18 05:19:42.785787 2026] [:error] [pid 9970:tid 9986] [client 4.211.104.36:28300] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aeKj7iYdRLRhVmaIMx2tHQAAAMw"]
[Sat Apr 18 05:19:43.728474 2026] [:error] [pid 9863:tid 9875] [client 4.211.104.36:2365] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "aeKj7zjjiypiFrTucbIBWgAAAAI"]
[Sat Apr 18 05:19:44.514267 2026] [:error] [pid 9865:tid 9957] [client 4.211.104.36:20349] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "aeKj8Kzb5knECIY-C-iVDwAAAJQ"]
[Sat Apr 18 05:19:45.134566 2026] [:error] [pid 9865:tid 9955] [client 4.211.104.36:21981] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "aeKj8azb5knECIY-C-iVEgAAAJI"]
[Sat Apr 18 05:19:46.224820 2026] [:error] [pid 9865:tid 9944] [client 4.211.104.36:2363] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "aeKj8qzb5knECIY-C-iVFQAAAIc"]
[Sat Apr 18 05:19:47.105186 2026] [:error] [pid 9864:tid 9920] [client 4.211.104.36:2645] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aeKj84CFeowknfXHM7knvgAAAE4"]
[Sat Apr 18 05:19:48.236599 2026] [:error] [pid 9865:tid 9941] [client 4.211.104.36:34566] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aeKj9Kzb5knECIY-C-iVHAAAAIQ"]
[Sat Apr 18 05:19:49.428066 2026] [:error] [pid 9864:tid 9930] [client 4.211.104.36:26619] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aeKj9YCFeowknfXHM7knwgAAAFg"]
[Sat Apr 18 05:19:50.548215 2026] [:error] [pid 9864:tid 9907] [client 4.211.104.36:25521] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aeKj9oCFeowknfXHM7knxAAAAEI"]
[Sat Apr 18 05:19:51.523344 2026] [:error] [pid 9865:tid 9939] [client 4.211.104.36:22574] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "aeKj96zb5knECIY-C-iVJwAAAII"]
[Sat Apr 18 05:19:52.644024 2026] [:error] [pid 9970:tid 9998] [client 4.211.104.36:56783] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "aeKj-CYdRLRhVmaIMx2tJgAAANg"]
[Sat Apr 18 05:19:53.586059 2026] [:error] [pid 9865:tid 9957] [client 4.211.104.36:22580] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "aeKj-azb5knECIY-C-iVKQAAAJQ"]
[Sat Apr 18 05:19:55.898990 2026] [:error] [pid 9863:tid 9885] [client 4.211.104.36:34029] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "aeKj-zjjiypiFrTucbIBZwAAAAw"]
[Sat Apr 18 05:20:00.262398 2026] [:error] [pid 9863:tid 9877] [client 4.211.104.36:36213] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sf.php"] [unique_id "aeKkADjjiypiFrTucbIBcQAAAAQ"]
[Sat Apr 18 05:20:02.116874 2026] [:error] [pid 9865:tid 9943] [client 4.211.104.36:32438] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sf.php"] [unique_id "aeKkAqzb5knECIY-C-iVLwAAAIY"]
[Sat Apr 18 05:20:03.740612 2026] [:error] [pid 9865:tid 9947] [client 4.211.104.36:18026] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sf.php"] [unique_id "aeKkA6zb5knECIY-C-iVNQAAAIo"]
[Sat Apr 18 05:20:05.070384 2026] [:error] [pid 9970:tid 9981] [client 4.211.104.36:36197] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sf.php"] [unique_id "aeKkBSYdRLRhVmaIMx2tPwAAAMc"]
[Sat Apr 18 05:20:06.185884 2026] [:error] [pid 9864:tid 9928] [client 4.211.104.36:34013] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/no1.php"] [unique_id "aeKkBoCFeowknfXHM7kn2wAAAFY"]
[Sat Apr 18 05:20:07.321387 2026] [:error] [pid 9863:tid 9890] [client 4.211.104.36:36186] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/no1.php"] [unique_id "aeKkBzjjiypiFrTucbIBeQAAABE"]
[Sat Apr 18 05:20:07.929250 2026] [:error] [pid 9863:tid 9896] [client 4.211.104.36:22398] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/no1.php"] [unique_id "aeKkBzjjiypiFrTucbIBewAAABc"]
[Sat Apr 18 05:20:08.488569 2026] [:error] [pid 9864:tid 9925] [client 4.211.104.36:34009] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/no1.php"] [unique_id "aeKkCICFeowknfXHM7kn3QAAAFM"]
[Sat Apr 18 05:20:09.357492 2026] [:error] [pid 9865:tid 9952] [client 4.211.104.36:26583] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/w2025.php"] [unique_id "aeKkCazb5knECIY-C-iVQAAAAI8"]
[Sat Apr 18 05:20:10.176936 2026] [:error] [pid 9864:tid 9921] [client 4.211.104.36:56801] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/w2025.php"] [unique_id "aeKkCoCFeowknfXHM7kn4gAAAE8"]
[Sat Apr 18 05:20:10.919520 2026] [:error] [pid 9864:tid 9915] [client 4.211.104.36:3019] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/w2025.php"] [unique_id "aeKkCoCFeowknfXHM7kn5AAAAEk"]
[Sat Apr 18 05:20:11.701601 2026] [:error] [pid 9865:tid 9940] [client 4.211.104.36:31346] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/w2025.php"] [unique_id "aeKkC6zb5knECIY-C-iVRwAAAIM"]
[Sat Apr 18 05:20:12.561974 2026] [:error] [pid 9865:tid 9939] [client 4.211.104.36:32391] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fvvff.php"] [unique_id "aeKkDKzb5knECIY-C-iVUAAAAII"]
[Sat Apr 18 05:20:13.501613 2026] [:error] [pid 9865:tid 9947] [client 4.211.104.36:36169] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fvvff.php"] [unique_id "aeKkDazb5knECIY-C-iVVgAAAIo"]
[Sat Apr 18 05:20:14.406899 2026] [:error] [pid 9863:tid 9894] [client 4.211.104.36:3046] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fvvff.php"] [unique_id "aeKkDjjjiypiFrTucbIBfQAAABU"]
[Sat Apr 18 05:20:14.980135 2026] [:error] [pid 9864:tid 9912] [client 4.211.104.36:32436] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fvvff.php"] [unique_id "aeKkDoCFeowknfXHM7kn6gAAAEY"]
[Sat Apr 18 05:20:15.779934 2026] [:error] [pid 9863:tid 9875] [client 4.211.104.36:18030] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "aeKkDzjjiypiFrTucbIBggAAAAI"]
[Sat Apr 18 05:20:25.970815 2026] [:error] [pid 9863:tid 9874] [client 4.211.104.36:17838] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/av.php"] [unique_id "aeKkGTjjiypiFrTucbIBpgAAAAE"]
[Sat Apr 18 05:20:27.950765 2026] [:error] [pid 9864:tid 9908] [client 4.211.104.36:22357] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/av.php"] [unique_id "aeKkG4CFeowknfXHM7kn-wAAAEM"]
[Sat Apr 18 05:20:32.700821 2026] [:error] [pid 9863:tid 9891] [client 4.211.104.36:25500] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/av.php"] [unique_id "aeKkIDjjiypiFrTucbIBtwAAABI"]
[Sat Apr 18 05:20:34.309049 2026] [:error] [pid 9863:tid 9887] [client 4.211.104.36:25535] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/av.php"] [unique_id "aeKkIjjjiypiFrTucbIBvQAAAA4"]
[Sat Apr 18 05:20:35.060034 2026] [:error] [pid 9970:tid 9997] [client 4.211.104.36:26598] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeKkIyYdRLRhVmaIMx2tWgAAANc"]
[Sat Apr 18 05:20:36.178895 2026] [:error] [pid 9865:tid 9955] [client 4.211.104.36:21454] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeKkJKzb5knECIY-C-iVdAAAAJI"]
[Sat Apr 18 05:20:38.937335 2026] [:error] [pid 9865:tid 9949] [client 4.211.104.36:21759] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeKkJqzb5knECIY-C-iVdgAAAIw"]
[Sat Apr 18 05:20:41.464157 2026] [:error] [pid 9865:tid 9961] [client 4.211.104.36:2666] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeKkKazb5knECIY-C-iVewAAAJg"]
[Sat Apr 18 05:20:44.497879 2026] [:error] [pid 9865:tid 9938] [client 4.211.104.36:25426] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bless4.php"] [unique_id "aeKkLKzb5knECIY-C-iVhAAAAIE"]
[Sat Apr 18 05:20:47.099130 2026] [:error] [pid 9970:tid 9980] [client 4.211.104.36:2677] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bless4.php"] [unique_id "aeKkLyYdRLRhVmaIMx2tagAAAMY"]
[Sat Apr 18 05:20:48.543600 2026] [:error] [pid 9863:tid 9884] [client 4.211.104.36:23401] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bless4.php"] [unique_id "aeKkMDjjiypiFrTucbIBzQAAAAs"]
[Sat Apr 18 05:20:49.765403 2026] [:error] [pid 9970:tid 9975] [client 4.211.104.36:17578] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bless4.php"] [unique_id "aeKkMSYdRLRhVmaIMx2teAAAAME"]
[Sat Apr 18 05:20:51.624635 2026] [:error] [pid 9970:tid 9996] [client 4.211.104.36:20639] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aeKkMyYdRLRhVmaIMx2tgQAAANY"]
[Sat Apr 18 05:20:53.024001 2026] [:error] [pid 9865:tid 9938] [client 4.211.104.36:21128] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aeKkNazb5knECIY-C-iVkQAAAIE"]
[Sat Apr 18 05:20:54.938571 2026] [:error] [pid 9970:tid 9994] [client 4.211.104.36:24935] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aeKkNiYdRLRhVmaIMx2tjQAAANQ"]
[Sat Apr 18 05:20:56.029379 2026] [:error] [pid 9970:tid 9981] [client 4.211.104.36:20566] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aeKkOCYdRLRhVmaIMx2tkQAAAMc"]
[Sat Apr 18 05:20:57.669014 2026] [:error] [pid 9864:tid 9916] [client 4.211.104.36:18992] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aeKkOYCFeowknfXHM7koEAAAAEo"]
[Sat Apr 18 05:21:02.327298 2026] [:error] [pid 9970:tid 9988] [client 4.211.104.36:57305] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aeKkPiYdRLRhVmaIMx2tpQAAAM4"]
[Sat Apr 18 05:21:05.544670 2026] [:error] [pid 9970:tid 9993] [client 4.211.104.36:17123] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aeKkQSYdRLRhVmaIMx2tsAAAANM"]
[Sat Apr 18 05:21:08.787461 2026] [:error] [pid 9970:tid 9979] [client 4.211.104.36:24609] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xqq.php"] [unique_id "aeKkRCYdRLRhVmaIMx2tuwAAAMU"]
[Sat Apr 18 05:21:10.582872 2026] [:error] [pid 9865:tid 9940] [client 4.211.104.36:17119] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plss3.php"] [unique_id "aeKkRqzb5knECIY-C-iVrgAAAIM"]
[Sat Apr 18 05:21:12.344222 2026] [:error] [pid 9970:tid 9998] [client 4.211.104.36:61541] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plss3.php"] [unique_id "aeKkSCYdRLRhVmaIMx2txwAAANg"]
[Sat Apr 18 05:21:14.660515 2026] [:error] [pid 9970:tid 9988] [client 4.211.104.36:22805] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plss3.php"] [unique_id "aeKkSiYdRLRhVmaIMx2t0AAAAM4"]
[Sat Apr 18 05:21:15.322543 2026] [:error] [pid 9970:tid 9986] [client 4.211.104.36:23340] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plss3.php"] [unique_id "aeKkSyYdRLRhVmaIMx2t1QAAAMw"]
[Sat Apr 18 05:21:17.711903 2026] [:error] [pid 9970:tid 9975] [client 4.211.104.36:22811] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "aeKkTSYdRLRhVmaIMx2t3AAAAME"]
[Sat Apr 18 05:21:21.341894 2026] [:error] [pid 9865:tid 9943] [client 4.211.104.36:19001] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "aeKkUazb5knECIY-C-iVvwAAAIY"]
[Sat Apr 18 05:21:22.288882 2026] [:error] [pid 9864:tid 9929] [client 4.211.104.36:20585] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "aeKkUoCFeowknfXHM7koJgAAAFc"]
[Sat Apr 18 05:21:24.512640 2026] [:error] [pid 9865:tid 9938] [client 4.211.104.36:18959] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "aeKkVKzb5knECIY-C-iVxwAAAIE"]
[Sat Apr 18 05:21:37.253870 2026] [:error] [pid 9970:tid 9975] [client 4.211.104.36:20522] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aeKkYSYdRLRhVmaIMx2uEwAAAME"]
[Sat Apr 18 05:21:40.268478 2026] [:error] [pid 9970:tid 9990] [client 4.211.104.36:30908] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aeKkZCYdRLRhVmaIMx2uGAAAANA"]
[Sat Apr 18 05:21:42.594479 2026] [:error] [pid 9863:tid 9877] [client 4.211.104.36:32728] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aeKkZjjjiypiFrTucbICKwAAAAQ"]
[Sat Apr 18 05:21:43.997220 2026] [:error] [pid 9970:tid 9988] [client 4.211.104.36:24340] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aeKkZyYdRLRhVmaIMx2uIgAAAM4"]
[Sat Apr 18 05:21:47.027959 2026] [:error] [pid 9864:tid 9923] [client 4.211.104.36:22321] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aeKka4CFeowknfXHM7koTQAAAFE"]
[Sat Apr 18 05:21:49.440776 2026] [:error] [pid 9865:tid 9939] [client 4.211.104.36:34067] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aeKkbazb5knECIY-C-iV9gAAAII"]
[Sat Apr 18 05:21:55.404184 2026] [:error] [pid 9970:tid 9982] [client 4.211.104.36:35801] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aeKkcyYdRLRhVmaIMx2uQQAAAMg"]
[Sat Apr 18 05:21:59.281266 2026] [:error] [pid 9970:tid 9975] [client 4.211.104.36:19024] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aeKkdyYdRLRhVmaIMx2uUgAAAME"]
[Sat Apr 18 05:22:02.656882 2026] [:error] [pid 9970:tid 9981] [client 4.211.104.36:2408] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeKkeiYdRLRhVmaIMx2uXAAAAMc"]
[Sat Apr 18 05:22:05.826170 2026] [:error] [pid 9864:tid 9905] [client 4.211.104.36:2698] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeKkfYCFeowknfXHM7kobgAAAEA"]
[Sat Apr 18 05:22:08.480140 2026] [:error] [pid 9864:tid 9915] [client 4.211.104.36:20675] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeKkgICFeowknfXHM7kocwAAAEk"]
[Sat Apr 18 05:22:10.020290 2026] [:error] [pid 9970:tid 9986] [client 4.211.104.36:26846] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeKkgiYdRLRhVmaIMx2ucwAAAMw"]
[Sat Apr 18 05:22:10.973745 2026] [:error] [pid 9865:tid 9947] [client 4.211.104.36:34519] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aeKkgqzb5knECIY-C-iWRwAAAIo"]
[Sat Apr 18 05:22:12.520403 2026] [:error] [pid 9865:tid 9940] [client 4.211.104.36:2504] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aeKkhKzb5knECIY-C-iWTwAAAIM"]
[Sat Apr 18 05:22:14.834737 2026] [:error] [pid 9970:tid 9988] [client 4.211.104.36:26857] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aeKkhiYdRLRhVmaIMx2ufgAAAM4"]
[Sat Apr 18 05:22:17.262273 2026] [:error] [pid 9864:tid 9923] [client 4.211.104.36:21396] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aeKkiYCFeowknfXHM7kofwAAAFE"]
[Sat Apr 18 05:22:19.477382 2026] [:error] [pid 9863:tid 9875] [client 4.211.104.36:2893] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aeKkizjjiypiFrTucbICUAAAAAI"]
[Sat Apr 18 05:22:20.420375 2026] [:error] [pid 9970:tid 9976] [client 4.211.104.36:42111] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aeKkjCYdRLRhVmaIMx2ujAAAAMI"]
[Sat Apr 18 05:22:21.438168 2026] [:error] [pid 9970:tid 9990] [client 4.211.104.36:26257] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aeKkjSYdRLRhVmaIMx2ukwAAANA"]
[Sat Apr 18 05:22:22.716896 2026] [:error] [pid 9970:tid 9981] [client 4.211.104.36:42075] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aeKkjiYdRLRhVmaIMx2upAAAAMc"]
[Sat Apr 18 05:22:23.448578 2026] [:error] [pid 9863:tid 9883] [client 4.211.104.36:28409] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aeKkjzjjiypiFrTucbICUQAAAAo"]
[Sat Apr 18 05:22:24.309282 2026] [:error] [pid 9864:tid 9912] [client 4.211.104.36:28359] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aeKkkICFeowknfXHM7kogwAAAEY"]
[Sat Apr 18 05:22:25.051906 2026] [:error] [pid 9865:tid 9956] [client 4.211.104.36:17320] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aeKkkazb5knECIY-C-iWewAAAJM"]
[Sat Apr 18 05:22:25.989847 2026] [:error] [pid 9865:tid 9938] [client 4.211.104.36:2145] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aeKkkazb5knECIY-C-iWfwAAAIE"]
[Sat Apr 18 05:22:27.274312 2026] [:error] [pid 9864:tid 9930] [client 4.211.104.36:20280] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "aeKkk4CFeowknfXHM7kohgAAAFg"]
[Sat Apr 18 05:22:28.435176 2026] [:error] [pid 9970:tid 9980] [client 4.211.104.36:26248] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "aeKklCYdRLRhVmaIMx2u4QAAAMY"]
[Sat Apr 18 05:22:29.335726 2026] [:error] [pid 9970:tid 9989] [client 4.211.104.36:34286] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "aeKklSYdRLRhVmaIMx2u6wAAAM8"]
[Sat Apr 18 05:22:30.867854 2026] [:error] [pid 9970:tid 9976] [client 4.211.104.36:21947] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "aeKkliYdRLRhVmaIMx2u-QAAAMI"]
[Sat Apr 18 05:22:32.835606 2026] [:error] [pid 9970:tid 9986] [client 4.211.104.36:18543] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "aeKkmCYdRLRhVmaIMx2vDAAAAMw"]
[Sat Apr 18 05:22:34.356407 2026] [:error] [pid 9970:tid 9995] [client 4.211.104.36:2901] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "aeKkmiYdRLRhVmaIMx2vGwAAANU"]
[Sat Apr 18 05:22:46.963499 2026] [:error] [pid 9970:tid 9992] [client 4.211.104.36:26268] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/av.php"] [unique_id "aeKkpiYdRLRhVmaIMx2vhAAAANI"]
[Sat Apr 18 05:22:48.829706 2026] [:error] [pid 9970:tid 9980] [client 4.211.104.36:26283] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/av.php"] [unique_id "aeKkqCYdRLRhVmaIMx2vjgAAAMY"]
[Sat Apr 18 05:22:50.410162 2026] [:error] [pid 9970:tid 9998] [client 4.211.104.36:34277] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/av.php"] [unique_id "aeKkqiYdRLRhVmaIMx2vnQAAANg"]
[Sat Apr 18 05:22:54.312797 2026] [:error] [pid 9970:tid 9978] [client 4.211.104.36:29637] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/av.php"] [unique_id "aeKkriYdRLRhVmaIMx2vuwAAAMQ"]
[Sat Apr 18 05:22:55.454319 2026] [:error] [pid 9863:tid 9881] [client 4.211.104.36:18498] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aeKkrzjjiypiFrTucbICewAAAAg"]
[Sat Apr 18 05:22:56.562822 2026] [:error] [pid 9865:tid 9959] [client 4.211.104.36:19463] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aeKksKzb5knECIY-C-iWzAAAAJY"]
[Sat Apr 18 05:22:57.814599 2026] [:error] [pid 9863:tid 9890] [client 4.211.104.36:19489] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aeKksTjjiypiFrTucbICjQAAABE"]
[Sat Apr 18 05:22:59.070697 2026] [:error] [pid 9864:tid 9913] [client 4.211.104.36:21907] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aeKks4CFeowknfXHM7kouAAAAEc"]
[Sat Apr 18 05:22:59.965317 2026] [:error] [pid 9970:tid 9987] [client 4.211.104.36:26271] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "aeKksyYdRLRhVmaIMx2v2QAAAM0"]
[Sat Apr 18 05:23:00.836416 2026] [:error] [pid 9863:tid 9895] [client 4.211.104.36:29394] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "aeKktDjjiypiFrTucbICmQAAABY"]
[Sat Apr 18 05:23:02.857208 2026] [:error] [pid 9865:tid 9938] [client 4.211.104.36:25360] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "aeKktqzb5knECIY-C-iW6QAAAIE"]
[Sat Apr 18 05:23:04.784071 2026] [:error] [pid 9970:tid 9992] [client 4.211.104.36:32792] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "aeKkuCYdRLRhVmaIMx2v6gAAANI"]
[Sat Apr 18 05:23:05.600466 2026] [:error] [pid 9864:tid 9910] [client 4.211.104.36:2114] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aeKkuYCFeowknfXHM7kovQAAAEU"]
[Sat Apr 18 05:23:06.762873 2026] [:error] [pid 9865:tid 9942] [client 4.211.104.36:26254] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aeKkuqzb5knECIY-C-iW9AAAAIU"]
[Sat Apr 18 05:23:07.555612 2026] [:error] [pid 9864:tid 9913] [client 4.211.104.36:22858] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aeKku4CFeowknfXHM7koxwAAAEc"]
[Sat Apr 18 05:23:08.797117 2026] [:error] [pid 9864:tid 9928] [client 4.211.104.36:27103] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aeKkvICFeowknfXHM7ko0QAAAFY"]
[Sat Apr 18 05:23:11.010481 2026] [:error] [pid 9863:tid 9887] [client 4.211.104.36:2950] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "aeKkvzjjiypiFrTucbICswAAAA4"]
[Sat Apr 18 05:23:13.186626 2026] [:error] [pid 9970:tid 9979] [client 4.211.104.36:27124] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "aeKkwSYdRLRhVmaIMx2v8wAAAMU"]
[Sat Apr 18 05:23:21.967904 2026] [:error] [pid 9864:tid 9930] [client 4.211.104.36:19515] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "aeKkyYCFeowknfXHM7ko8AAAAFg"]
[Sat Apr 18 05:23:27.263878 2026] [:error] [pid 9865:tid 9958] [client 4.211.104.36:19493] [client 4.211.104.36] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeKkz6zb5knECIY-C-iXFQAAAJU"]
[Sat Apr 18 05:23:28.956755 2026] [:error] [pid 9970:tid 9975] [client 4.211.104.36:27119] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aeKk0CYdRLRhVmaIMx2wEgAAAME"]
[Sat Apr 18 05:23:32.747682 2026] [:error] [pid 9865:tid 9948] [client 4.211.104.36:21900] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aeKk1Kzb5knECIY-C-iXJgAAAIs"]
[Sat Apr 18 05:23:34.041519 2026] [:error] [pid 9865:tid 9952] [client 4.211.104.36:32787] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aeKk1qzb5knECIY-C-iXKwAAAI8"]
[Sat Apr 18 05:23:34.792656 2026] [:error] [pid 9865:tid 9943] [client 4.211.104.36:34255] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeKk1qzb5knECIY-C-iXLgAAAIY"]
[Sat Apr 18 05:23:36.221573 2026] [:error] [pid 9970:tid 9986] [client 4.211.104.36:2060] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeKk2CYdRLRhVmaIMx2wJgAAAMw"]
[Sat Apr 18 05:23:37.607021 2026] [:error] [pid 9970:tid 9997] [client 4.211.104.36:34290] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeKk2SYdRLRhVmaIMx2wLgAAANc"]
[Sat Apr 18 05:23:41.587291 2026] [:error] [pid 9970:tid 9989] [client 4.211.104.36:17069] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeKk3SYdRLRhVmaIMx2wOwAAAM8"]
[Sat Apr 18 05:23:42.888831 2026] [:error] [pid 9865:tid 9956] [client 4.211.104.36:31061] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeKk3qzb5knECIY-C-iXPgAAAJM"]
[Sat Apr 18 05:23:43.644251 2026] [:error] [pid 9865:tid 9939] [client 4.211.104.36:57626] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeKk36zb5knECIY-C-iXQwAAAII"]
[Sat Apr 18 05:23:44.736601 2026] [:error] [pid 9970:tid 9985] [client 4.211.104.36:24948] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeKk4CYdRLRhVmaIMx2wPQAAAMs"]
[Sat Apr 18 05:23:56.700467 2026] [:error] [pid 9970:tid 9976] [client 4.211.104.36:2978] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "aeKk7CYdRLRhVmaIMx2wawAAAMI"]
[Sat Apr 18 05:23:59.116001 2026] [:error] [pid 9970:tid 9989] [client 4.211.104.36:24417] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "aeKk7yYdRLRhVmaIMx2wbAAAAM8"]
[Sat Apr 18 05:24:00.779348 2026] [:error] [pid 9863:tid 9881] [client 4.211.104.36:2054] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "aeKk8DjjiypiFrTucbIC8gAAAAg"]
[Sat Apr 18 05:24:02.488350 2026] [:error] [pid 9863:tid 9891] [client 4.211.104.36:23651] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "aeKk8jjjiypiFrTucbIC8wAAABI"]
[Sat Apr 18 05:24:03.903320 2026] [:error] [pid 9970:tid 9989] [client 4.211.104.36:17621] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alfashell.php"] [unique_id "aeKk8yYdRLRhVmaIMx2wfwAAAM8"]
[Sat Apr 18 05:24:04.935066 2026] [:error] [pid 9970:tid 9979] [client 4.211.104.36:24927] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alfashell.php"] [unique_id "aeKk9CYdRLRhVmaIMx2wigAAAMU"]
[Sat Apr 18 05:24:06.192337 2026] [:error] [pid 9970:tid 9984] [client 4.211.104.36:27046] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alfashell.php"] [unique_id "aeKk9iYdRLRhVmaIMx2wjwAAAMo"]
[Sat Apr 18 05:24:07.700372 2026] [:error] [pid 9970:tid 9978] [client 4.211.104.36:28916] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alfashell.php"] [unique_id "aeKk9yYdRLRhVmaIMx2wlQAAAMQ"]
[Sat Apr 18 05:24:08.554845 2026] [:error] [pid 9970:tid 9976] [client 4.211.104.36:31095] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aeKk-CYdRLRhVmaIMx2wmgAAAMI"]
[Sat Apr 18 05:24:09.796739 2026] [:error] [pid 9864:tid 9916] [client 4.211.104.36:24444] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aeKk-YCFeowknfXHM7kpJgAAAEo"]
[Sat Apr 18 05:24:11.144851 2026] [:error] [pid 9970:tid 9984] [client 4.211.104.36:28880] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aeKk-yYdRLRhVmaIMx2wnQAAAMo"]
[Sat Apr 18 05:24:12.391689 2026] [:error] [pid 9970:tid 9991] [client 4.211.104.36:17601] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aeKk_CYdRLRhVmaIMx2wpAAAANE"]
[Sat Apr 18 05:24:13.116655 2026] [:error] [pid 9864:tid 9923] [client 4.211.104.36:31044] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aeKk_YCFeowknfXHM7kpLQAAAFE"]
[Sat Apr 18 05:24:13.834656 2026] [:error] [pid 9864:tid 9919] [client 4.211.104.36:23870] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aeKk_YCFeowknfXHM7kpMQAAAE0"]
[Sat Apr 18 05:24:14.528927 2026] [:error] [pid 9863:tid 9884] [client 4.211.104.36:23828] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aeKk_jjjiypiFrTucbIC-QAAAAs"]
[Sat Apr 18 05:24:15.328212 2026] [:error] [pid 9863:tid 9877] [client 4.211.104.36:24409] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aeKk_zjjiypiFrTucbIC-wAAAAQ"]
[Sat Apr 18 05:24:16.506456 2026] [:error] [pid 9865:tid 9959] [client 4.211.104.36:21138] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "aeKlAKzb5knECIY-C-iXeAAAAJY"]
[Sat Apr 18 05:24:17.456712 2026] [:error] [pid 9865:tid 9944] [client 4.211.104.36:28924] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "aeKlAazb5knECIY-C-iXeQAAAIc"]
[Sat Apr 18 05:24:18.423659 2026] [:error] [pid 9865:tid 9941] [client 4.211.104.36:23824] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "aeKlAqzb5knECIY-C-iXfAAAAIQ"]
[Sat Apr 18 05:24:20.572167 2026] [:error] [pid 9865:tid 9955] [client 4.211.104.36:17985] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "aeKlBKzb5knECIY-C-iXgAAAAJI"]
[Sat Apr 18 05:24:22.206929 2026] [:error] [pid 9863:tid 9890] [client 4.211.104.36:24403] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/g.php"] [unique_id "aeKlBjjjiypiFrTucbIC_wAAABE"]
[Sat Apr 18 05:24:24.489613 2026] [:error] [pid 9865:tid 9955] [client 4.211.104.36:23841] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/g.php"] [unique_id "aeKlCKzb5knECIY-C-iXlQAAAJI"]
[Sat Apr 18 05:24:25.751439 2026] [:error] [pid 9970:tid 9996] [client 4.211.104.36:34968] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/g.php"] [unique_id "aeKlCSYdRLRhVmaIMx2wsAAAANY"]
[Sat Apr 18 05:24:27.287883 2026] [:error] [pid 9864:tid 9924] [client 4.211.104.36:28879] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/g.php"] [unique_id "aeKlC4CFeowknfXHM7kpRwAAAFI"]
[Sat Apr 18 05:24:28.825784 2026] [:error] [pid 9864:tid 9909] [client 4.211.104.36:32415] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aeKlDICFeowknfXHM7kpSAAAAEQ"]
[Sat Apr 18 05:24:31.826509 2026] [:error] [pid 9863:tid 9877] [client 4.211.104.36:23661] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aeKlDzjjiypiFrTucbIDDQAAAAQ"]
[Sat Apr 18 05:24:34.231689 2026] [:error] [pid 9864:tid 9908] [client 4.211.104.36:26079] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aeKlEoCFeowknfXHM7kpUAAAAEM"]
[Sat Apr 18 05:24:45.190049 2026] [:error] [pid 9864:tid 9919] [client 4.211.104.36:56797] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aeKlHYCFeowknfXHM7kpWgAAAE0"]
[Sat Apr 18 05:24:46.048748 2026] [:error] [pid 9863:tid 9892] [client 4.211.104.36:29365] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aeKlHjjjiypiFrTucbIDFgAAABM"]
[Sat Apr 18 05:24:48.039503 2026] [:error] [pid 9970:tid 9998] [client 4.211.104.36:28593] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aeKlICYdRLRhVmaIMx2w3AAAANg"]
[Sat Apr 18 05:24:50.794496 2026] [:error] [pid 9864:tid 9923] [client 4.211.104.36:33891] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aeKlIoCFeowknfXHM7kpYwAAAFE"]
[Sat Apr 18 05:24:52.073782 2026] [:error] [pid 9865:tid 9942] [client 4.211.104.36:17927] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ew.php"] [unique_id "aeKlJKzb5knECIY-C-iYGwAAAIU"]
[Sat Apr 18 05:24:52.970187 2026] [:error] [pid 9865:tid 9940] [client 4.211.104.36:17970] [client 4.211.104.36] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ew.php"] [unique_id "aeKlJKzb5knECIY-C-iYIAAAAIM"]
[Sat Apr 18 06:29:27.633349 2026] [:error] [pid 9863:tid 9882] [client 20.166.51.62:37331] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/t.php"] [unique_id "aeK0RzjjiypiFrTucbIXKwAAAAk"]
[Sat Apr 18 06:29:30.279844 2026] [:error] [pid 13023:tid 13032] [client 20.166.51.62:7303] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/t.php"] [unique_id "aeK0Sv1e7hG8DAeABB8A2AAAAQc"]
[Sat Apr 18 06:29:32.315369 2026] [:error] [pid 13023:tid 13040] [client 20.166.51.62:13099] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/t.php"] [unique_id "aeK0TP1e7hG8DAeABB8A3QAAAQ8"]
[Sat Apr 18 06:29:33.703741 2026] [:error] [pid 13023:tid 13032] [client 20.166.51.62:27169] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/t.php"] [unique_id "aeK0Tf1e7hG8DAeABB8A4QAAAQc"]
[Sat Apr 18 06:29:35.684360 2026] [:error] [pid 9970:tid 9976] [client 20.166.51.62:11261] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aeK0TyYdRLRhVmaIMx3cIgAAAMI"]
[Sat Apr 18 06:29:38.039885 2026] [:error] [pid 9865:tid 9940] [client 20.166.51.62:11240] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aeK0Uqzb5knECIY-C-i3EQAAAIM"]
[Sat Apr 18 06:29:39.087019 2026] [:error] [pid 13023:tid 13028] [client 20.166.51.62:11216] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aeK0U_1e7hG8DAeABB8A8gAAAQM"]
[Sat Apr 18 06:29:41.067432 2026] [:error] [pid 9865:tid 9955] [client 20.166.51.62:35076] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aeK0Vazb5knECIY-C-i3FQAAAJI"]
[Sat Apr 18 06:29:43.025460 2026] [:error] [pid 9970:tid 9987] [client 20.166.51.62:2045] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aeK0VyYdRLRhVmaIMx3cKgAAAM0"]
[Sat Apr 18 06:29:44.264288 2026] [:error] [pid 9970:tid 9980] [client 20.166.51.62:17692] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aeK0WCYdRLRhVmaIMx3cLAAAAMY"]
[Sat Apr 18 06:29:45.308535 2026] [:error] [pid 13023:tid 13041] [client 20.166.51.62:17703] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aeK0Wf1e7hG8DAeABB8BEAAAARA"]
[Sat Apr 18 06:29:45.976849 2026] [:error] [pid 9865:tid 9940] [client 20.166.51.62:20792] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aeK0Wazb5knECIY-C-i3IQAAAIM"]
[Sat Apr 18 06:29:46.750769 2026] [:error] [pid 13023:tid 13045] [client 20.166.51.62:1066] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/new.php"] [unique_id "aeK0Wv1e7hG8DAeABB8BPgAAARQ"]
[Sat Apr 18 06:29:47.451463 2026] [:error] [pid 13023:tid 13026] [client 20.166.51.62:8376] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/new.php"] [unique_id "aeK0W_1e7hG8DAeABB8BRAAAAQE"]
[Sat Apr 18 06:29:48.403731 2026] [:error] [pid 13023:tid 13035] [client 20.166.51.62:20674] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/new.php"] [unique_id "aeK0XP1e7hG8DAeABB8BSQAAAQo"]
[Sat Apr 18 06:29:49.099100 2026] [:error] [pid 13023:tid 13048] [client 20.166.51.62:27138] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/new.php"] [unique_id "aeK0Xf1e7hG8DAeABB8BTgAAARc"]
[Sat Apr 18 06:29:49.777603 2026] [:error] [pid 9970:tid 9998] [client 20.166.51.62:8362] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aeK0XSYdRLRhVmaIMx3cNQAAANg"]
[Sat Apr 18 06:29:50.912632 2026] [:error] [pid 9865:tid 9945] [client 20.166.51.62:2015] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aeK0Xqzb5knECIY-C-i3JAAAAIg"]
[Sat Apr 18 06:29:52.229476 2026] [:error] [pid 9865:tid 9958] [client 20.166.51.62:20696] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aeK0YKzb5knECIY-C-i3KwAAAJU"]
[Sat Apr 18 06:29:53.023660 2026] [:error] [pid 9970:tid 9974] [client 20.166.51.62:1070] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aeK0YSYdRLRhVmaIMx3cOQAAAMA"]
[Sat Apr 18 06:29:53.831962 2026] [:error] [pid 9865:tid 9944] [client 20.166.51.62:11070] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aeK0Yazb5knECIY-C-i3LwAAAIc"]
[Sat Apr 18 06:29:54.492109 2026] [:error] [pid 9863:tid 9879] [client 20.166.51.62:1037] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aeK0YjjjiypiFrTucbIXOQAAAAY"]
[Sat Apr 18 06:29:55.243875 2026] [:error] [pid 9863:tid 9881] [client 20.166.51.62:20704] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aeK0YzjjiypiFrTucbIXOwAAAAg"]
[Sat Apr 18 06:29:56.020709 2026] [:error] [pid 9865:tid 9941] [client 20.166.51.62:11026] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aeK0ZKzb5knECIY-C-i3NAAAAIQ"]
[Sat Apr 18 06:29:56.908925 2026] [:error] [pid 13023:tid 13043] [client 20.166.51.62:35078] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aeK0ZP1e7hG8DAeABB8BXAAAARI"]
[Sat Apr 18 06:29:57.833493 2026] [:error] [pid 13023:tid 13035] [client 20.166.51.62:35088] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aeK0Zf1e7hG8DAeABB8BZQAAAQo"]
[Sat Apr 18 06:29:59.084794 2026] [:error] [pid 9864:tid 9924] [client 20.166.51.62:20679] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aeK0Z4CFeowknfXHM7lA8gAAAFI"]
[Sat Apr 18 06:30:00.124557 2026] [:error] [pid 9970:tid 9975] [client 20.166.51.62:20787] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aeK0aCYdRLRhVmaIMx3cPAAAAME"]
[Sat Apr 18 06:30:01.154751 2026] [:error] [pid 13023:tid 13044] [client 20.166.51.62:13067] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "aeK0af1e7hG8DAeABB8BxQAAARM"]
[Sat Apr 18 06:30:02.671113 2026] [:error] [pid 9970:tid 9977] [client 20.166.51.62:9796] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "aeK0aiYdRLRhVmaIMx3cQwAAAMM"]
[Sat Apr 18 06:30:03.273984 2026] [:error] [pid 13023:tid 13048] [client 20.166.51.62:20734] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "aeK0a_1e7hG8DAeABB8ByQAAARc"]
[Sat Apr 18 06:30:04.362678 2026] [:error] [pid 13023:tid 13047] [client 20.166.51.62:2010] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "aeK0bP1e7hG8DAeABB8BzgAAARY"]
[Sat Apr 18 06:30:05.383822 2026] [:error] [pid 13023:tid 13048] [client 20.166.51.62:12376] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-blogs.php"] [unique_id "aeK0bf1e7hG8DAeABB8B0gAAARc"]
[Sat Apr 18 06:30:06.327889 2026] [:error] [pid 9970:tid 9974] [client 20.166.51.62:8372] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-blogs.php"] [unique_id "aeK0biYdRLRhVmaIMx3cSAAAAMA"]
[Sat Apr 18 06:30:07.540798 2026] [:error] [pid 9865:tid 9955] [client 20.166.51.62:11031] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-blogs.php"] [unique_id "aeK0b6zb5knECIY-C-i3RQAAAJI"]
[Sat Apr 18 06:30:09.116029 2026] [:error] [pid 9864:tid 9917] [client 20.166.51.62:9818] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-blogs.php"] [unique_id "aeK0cYCFeowknfXHM7lBCgAAAEs"]
[Sat Apr 18 06:30:10.079905 2026] [:error] [pid 9970:tid 9983] [client 20.166.51.62:1993] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aeK0ciYdRLRhVmaIMx3cggAAAMk"]
[Sat Apr 18 06:30:11.166076 2026] [:error] [pid 9970:tid 9996] [client 20.166.51.62:11016] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aeK0cyYdRLRhVmaIMx3ciAAAANY"]
[Sat Apr 18 06:30:11.899684 2026] [:error] [pid 9970:tid 9992] [client 20.166.51.62:18489] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aeK0cyYdRLRhVmaIMx3cjQAAANI"]
[Sat Apr 18 06:30:12.825042 2026] [:error] [pid 13023:tid 13046] [client 20.166.51.62:27153] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aeK0dP1e7hG8DAeABB8B5AAAARU"]
[Sat Apr 18 06:30:15.317538 2026] [:error] [pid 13023:tid 13044] [client 20.166.51.62:19926] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "aeK0d_1e7hG8DAeABB8B7QAAARM"]
[Sat Apr 18 06:30:16.350835 2026] [:error] [pid 13023:tid 13034] [client 20.166.51.62:12167] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "aeK0eP1e7hG8DAeABB8B9AAAAQk"]
[Sat Apr 18 06:30:17.215961 2026] [:error] [pid 13023:tid 13046] [client 20.166.51.62:19694] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "aeK0ef1e7hG8DAeABB8B9QAAARU"]
[Sat Apr 18 06:30:18.398610 2026] [:error] [pid 13023:tid 13044] [client 20.166.51.62:24492] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "aeK0ev1e7hG8DAeABB8B_gAAARM"]
[Sat Apr 18 06:30:20.131287 2026] [:error] [pid 13023:tid 13033] [client 20.166.51.62:18488] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "aeK0fP1e7hG8DAeABB8CBgAAAQg"]
[Sat Apr 18 06:30:22.205955 2026] [:error] [pid 13023:tid 13042] [client 20.166.51.62:19670] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "aeK0fv1e7hG8DAeABB8CDgAAARE"]
[Sat Apr 18 06:30:23.277701 2026] [:error] [pid 9864:tid 9920] [client 20.166.51.62:12188] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "aeK0f4CFeowknfXHM7lBJwAAAE4"]
[Sat Apr 18 06:30:25.032815 2026] [:error] [pid 13023:tid 13043] [client 20.166.51.62:10193] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "aeK0gf1e7hG8DAeABB8CHAAAARI"]
[Sat Apr 18 06:30:26.120415 2026] [:error] [pid 9970:tid 9983] [client 20.166.51.62:24499] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/mh.php"] [unique_id "aeK0giYdRLRhVmaIMx3cpgAAAMk"]
[Sat Apr 18 06:30:26.942673 2026] [:error] [pid 13023:tid 13030] [client 20.166.51.62:17187] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/mh.php"] [unique_id "aeK0gv1e7hG8DAeABB8CIgAAAQU"]
[Sat Apr 18 06:30:36.209114 2026] [:error] [pid 13023:tid 13046] [client 20.166.51.62:17162] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/first.php"] [unique_id "aeK0jP1e7hG8DAeABB8CSQAAARU"]
[Sat Apr 18 06:30:38.681586 2026] [:error] [pid 9864:tid 9910] [client 20.166.51.62:12904] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/first.php"] [unique_id "aeK0joCFeowknfXHM7lBQwAAAEU"]
[Sat Apr 18 06:30:42.449199 2026] [:error] [pid 9864:tid 9930] [client 20.166.51.62:21304] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/first.php"] [unique_id "aeK0koCFeowknfXHM7lBSAAAAFg"]
[Sat Apr 18 06:30:45.879324 2026] [:error] [pid 9865:tid 9937] [client 20.166.51.62:11445] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/first.php"] [unique_id "aeK0lazb5knECIY-C-i3fwAAAIA"]
[Sat Apr 18 06:30:48.632808 2026] [:error] [pid 13023:tid 13038] [client 20.166.51.62:6337] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeK0mP1e7hG8DAeABB8CXgAAAQ0"]
[Sat Apr 18 06:30:49.682007 2026] [:error] [pid 9863:tid 9891] [client 20.166.51.62:17122] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeK0mTjjiypiFrTucbIX-AAAABI"]
[Sat Apr 18 06:30:51.284504 2026] [:error] [pid 9863:tid 9878] [client 20.166.51.62:21311] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeK0mzjjiypiFrTucbIX-QAAAAU"]
[Sat Apr 18 06:30:54.554704 2026] [:error] [pid 9864:tid 9914] [client 20.166.51.62:1851] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeK0noCFeowknfXHM7lBWQAAAEg"]
[Sat Apr 18 06:30:56.838973 2026] [:error] [pid 9865:tid 9941] [client 20.166.51.62:1822] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aeK0oKzb5knECIY-C-i3lQAAAIQ"]
[Sat Apr 18 06:30:58.036749 2026] [:error] [pid 9863:tid 9884] [client 20.166.51.62:34752] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aeK0ojjjiypiFrTucbIYDAAAAAs"]
[Sat Apr 18 06:30:59.373232 2026] [:error] [pid 9863:tid 9873] [client 20.166.51.62:6363] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aeK0ozjjiypiFrTucbIYDgAAAAA"]
[Sat Apr 18 06:31:01.534586 2026] [:error] [pid 9865:tid 9955] [client 20.166.51.62:21274] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aeK0pazb5knECIY-C-i3lwAAAJI"]
[Sat Apr 18 06:31:03.824746 2026] [:error] [pid 9863:tid 9878] [client 20.166.51.62:11428] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/asd.php"] [unique_id "aeK0pzjjiypiFrTucbIYFwAAAAU"]
[Sat Apr 18 06:31:05.949176 2026] [:error] [pid 9864:tid 9907] [client 20.166.51.62:21906] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/asd.php"] [unique_id "aeK0qYCFeowknfXHM7lBcQAAAEI"]
[Sat Apr 18 06:31:07.307372 2026] [:error] [pid 13023:tid 13046] [client 20.166.51.62:11089] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/asd.php"] [unique_id "aeK0q_1e7hG8DAeABB8CiQAAARU"]
[Sat Apr 18 06:31:08.296702 2026] [:error] [pid 13023:tid 13047] [client 20.166.51.62:21307] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/asd.php"] [unique_id "aeK0rP1e7hG8DAeABB8CiwAAARY"]
[Sat Apr 18 06:31:09.742005 2026] [:error] [pid 13023:tid 13033] [client 20.166.51.62:17821] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/public/vx.php"] [unique_id "aeK0rf1e7hG8DAeABB8CjQAAAQg"]
[Sat Apr 18 06:31:11.057997 2026] [:error] [pid 9863:tid 9894] [client 20.166.51.62:14424] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/public/vx.php"] [unique_id "aeK0rzjjiypiFrTucbIYHAAAABU"]
[Sat Apr 18 06:31:12.330580 2026] [:error] [pid 9864:tid 9907] [client 20.166.51.62:1099] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/public/vx.php"] [unique_id "aeK0sICFeowknfXHM7lBfQAAAEI"]
[Sat Apr 18 06:31:13.215529 2026] [:error] [pid 9864:tid 9919] [client 20.166.51.62:1129] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/public/vx.php"] [unique_id "aeK0sYCFeowknfXHM7lBfwAAAE0"]
[Sat Apr 18 06:31:13.907769 2026] [:error] [pid 9865:tid 9949] [client 20.166.51.62:19774] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeK0sazb5knECIY-C-i3pwAAAIw"]
[Sat Apr 18 06:31:14.723546 2026] [:error] [pid 13023:tid 13049] [client 20.166.51.62:17806] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeK0sv1e7hG8DAeABB8CmAAAARg"]
[Sat Apr 18 06:31:15.354598 2026] [:error] [pid 13023:tid 13047] [client 20.166.51.62:21893] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeK0s_1e7hG8DAeABB8CmwAAARY"]
[Sat Apr 18 06:31:15.989868 2026] [:error] [pid 9864:tid 9924] [client 20.166.51.62:12873] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeK0s4CFeowknfXHM7lBiQAAAFI"]
[Sat Apr 18 06:31:17.000808 2026] [:error] [pid 9864:tid 9927] [client 20.166.51.62:12975] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "aeK0tICFeowknfXHM7lBjQAAAFU"]
[Sat Apr 18 06:31:17.773124 2026] [:error] [pid 9970:tid 9985] [client 20.166.51.62:21897] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "aeK0tSYdRLRhVmaIMx3c5QAAAMs"]
[Sat Apr 18 06:31:18.747760 2026] [:error] [pid 13023:tid 13042] [client 20.166.51.62:21948] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "aeK0tv1e7hG8DAeABB8CogAAARE"]
[Sat Apr 18 06:31:19.928109 2026] [:error] [pid 9970:tid 9984] [client 20.166.51.62:36783] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "aeK0tyYdRLRhVmaIMx3c6wAAAMo"]
[Sat Apr 18 06:31:20.801513 2026] [:error] [pid 9970:tid 9994] [client 20.166.51.62:12905] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeK0uCYdRLRhVmaIMx3c7AAAANQ"]
[Sat Apr 18 06:31:21.503891 2026] [:error] [pid 9970:tid 9979] [client 20.166.51.62:27089] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeK0uSYdRLRhVmaIMx3c8AAAAMU"]
[Sat Apr 18 06:31:22.218564 2026] [:error] [pid 13023:tid 13037] [client 20.166.51.62:35311] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeK0uv1e7hG8DAeABB8CpQAAAQw"]
[Sat Apr 18 06:31:23.021933 2026] [:error] [pid 13023:tid 13046] [client 20.166.51.62:27074] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeK0u_1e7hG8DAeABB8CqAAAARU"]
[Sat Apr 18 06:31:23.867579 2026] [:error] [pid 9865:tid 9937] [client 20.166.51.62:1513] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aeK0u6zb5knECIY-C-i3qwAAAIA"]
[Sat Apr 18 06:31:24.877286 2026] [:error] [pid 9865:tid 9940] [client 20.166.51.62:12678] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aeK0vKzb5knECIY-C-i3sAAAAIM"]
[Sat Apr 18 06:31:26.207759 2026] [:error] [pid 9970:tid 9995] [client 20.166.51.62:16576] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aeK0viYdRLRhVmaIMx3dBgAAANU"]
[Sat Apr 18 06:31:27.635478 2026] [:error] [pid 9865:tid 9944] [client 20.166.51.62:1356] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aeK0v6zb5knECIY-C-i3tQAAAIc"]
[Sat Apr 18 06:31:29.347502 2026] [:error] [pid 9864:tid 9925] [client 20.166.51.62:7480] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aeK0wYCFeowknfXHM7lBnQAAAFM"]
[Sat Apr 18 06:31:30.909006 2026] [:error] [pid 9864:tid 9930] [client 20.166.51.62:24488] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aeK0woCFeowknfXHM7lBpAAAAFg"]
[Sat Apr 18 06:31:31.974089 2026] [:error] [pid 13023:tid 13025] [client 20.166.51.62:36872] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aeK0w_1e7hG8DAeABB8CtwAAAQA"]
[Sat Apr 18 06:31:32.930507 2026] [:error] [pid 9863:tid 9884] [client 20.166.51.62:37523] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aeK0xDjjiypiFrTucbIYNAAAAAs"]
[Sat Apr 18 06:31:33.647204 2026] [:error] [pid 13023:tid 13032] [client 20.166.51.62:24483] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/900.php"] [unique_id "aeK0xf1e7hG8DAeABB8CvgAAAQc"]
[Sat Apr 18 06:31:34.680040 2026] [:error] [pid 13023:tid 13037] [client 20.166.51.62:12205] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/900.php"] [unique_id "aeK0xv1e7hG8DAeABB8CwgAAAQw"]
[Sat Apr 18 06:31:56.073159 2026] [:error] [pid 9863:tid 9886] [client 20.166.51.62:7648] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aeK03DjjiypiFrTucbIYagAAAA0"]
[Sat Apr 18 06:31:57.401133 2026] [:error] [pid 9864:tid 9906] [client 20.166.51.62:31634] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aeK03YCFeowknfXHM7lBzgAAAEE"]
[Sat Apr 18 06:31:58.533226 2026] [:error] [pid 9864:tid 9923] [client 20.166.51.62:18214] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aeK03oCFeowknfXHM7lB0QAAAFE"]
[Sat Apr 18 06:31:59.522269 2026] [:error] [pid 9970:tid 9991] [client 20.166.51.62:21970] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aeK03yYdRLRhVmaIMx3dPgAAANE"]
[Sat Apr 18 06:32:01.891631 2026] [:error] [pid 9864:tid 9910] [client 20.166.51.62:20992] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "aeK04YCFeowknfXHM7lB1gAAAEU"]
[Sat Apr 18 06:32:02.949438 2026] [:error] [pid 9863:tid 9882] [client 20.166.51.62:19794] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "aeK04jjjiypiFrTucbIYbwAAAAk"]
[Sat Apr 18 06:32:04.716649 2026] [:error] [pid 13023:tid 13042] [client 20.166.51.62:17535] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "aeK05P1e7hG8DAeABB8DSgAAARE"]
[Sat Apr 18 06:32:06.450867 2026] [:error] [pid 9970:tid 9976] [client 20.166.51.62:17483] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "aeK05iYdRLRhVmaIMx3dQgAAAMI"]
[Sat Apr 18 06:32:07.204452 2026] [:error] [pid 9865:tid 9938] [client 20.166.51.62:37243] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "aeK056zb5knECIY-C-i34gAAAIE"]
[Sat Apr 18 06:32:08.104532 2026] [:error] [pid 13023:tid 13048] [client 20.166.51.62:37184] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "aeK06P1e7hG8DAeABB8DVQAAARc"]
[Sat Apr 18 06:32:09.147707 2026] [:error] [pid 9970:tid 9996] [client 20.166.51.62:21189] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "aeK06SYdRLRhVmaIMx3dRwAAANY"]
[Sat Apr 18 06:32:10.401454 2026] [:error] [pid 9865:tid 9945] [client 20.166.51.62:17486] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "aeK06qzb5knECIY-C-i36wAAAIg"]
[Sat Apr 18 06:32:12.272577 2026] [:error] [pid 9864:tid 9920] [client 20.166.51.62:37247] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "aeK07ICFeowknfXHM7lB4AAAAE4"]
[Sat Apr 18 06:32:13.282737 2026] [:error] [pid 9865:tid 9937] [client 20.166.51.62:15692] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "aeK07azb5knECIY-C-i38wAAAIA"]
[Sat Apr 18 06:32:14.332027 2026] [:error] [pid 13023:tid 13037] [client 20.166.51.62:19017] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "aeK07v1e7hG8DAeABB8DXQAAAQw"]
[Sat Apr 18 06:32:15.464152 2026] [:error] [pid 9970:tid 9986] [client 20.166.51.62:19066] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "aeK07yYdRLRhVmaIMx3dTgAAAMw"]
[Sat Apr 18 06:32:16.650189 2026] [:error] [pid 9864:tid 9906] [client 20.166.51.62:37190] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "aeK08ICFeowknfXHM7lB4wAAAEE"]
[Sat Apr 18 06:32:18.647166 2026] [:error] [pid 9863:tid 9886] [client 20.166.51.62:8466] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "aeK08jjjiypiFrTucbIYgwAAAA0"]
[Sat Apr 18 06:32:20.274581 2026] [:error] [pid 9970:tid 9974] [client 20.166.51.62:10248] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "aeK09CYdRLRhVmaIMx3dVAAAAMA"]
[Sat Apr 18 06:32:22.579844 2026] [:error] [pid 9863:tid 9893] [client 20.166.51.62:18078] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "aeK09jjjiypiFrTucbIYjgAAABQ"]
[Sat Apr 18 06:32:23.807435 2026] [:error] [pid 9864:tid 9908] [client 20.166.51.62:10301] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeK094CFeowknfXHM7lB6wAAAEM"]
[Sat Apr 18 06:32:24.725834 2026] [:error] [pid 13023:tid 13033] [client 20.166.51.62:1749] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeK0-P1e7hG8DAeABB8DZwAAAQg"]
[Sat Apr 18 06:32:25.699414 2026] [:error] [pid 9864:tid 9921] [client 20.166.51.62:17067] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeK0-YCFeowknfXHM7lB7QAAAE8"]
[Sat Apr 18 06:32:26.493229 2026] [:error] [pid 9970:tid 9982] [client 20.166.51.62:18100] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/hellopress/wp_filemanager.php"] [unique_id "aeK0-iYdRLRhVmaIMx3dWgAAAMg"]
[Sat Apr 18 06:32:27.334076 2026] [:error] [pid 13023:tid 13037] [client 20.166.51.62:19981] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "aeK0-_1e7hG8DAeABB8DbAAAAQw"]
[Sat Apr 18 06:32:27.937305 2026] [:error] [pid 13023:tid 13045] [client 20.166.51.62:15235] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "aeK0-_1e7hG8DAeABB8DbwAAARQ"]
[Sat Apr 18 06:32:28.673025 2026] [:error] [pid 13023:tid 13027] [client 20.166.51.62:18342] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "aeK0_P1e7hG8DAeABB8DcgAAAQI"]
[Sat Apr 18 06:32:29.281680 2026] [:error] [pid 9970:tid 9985] [client 20.166.51.62:12769] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "aeK0_SYdRLRhVmaIMx3dXAAAAMs"]
[Sat Apr 18 06:32:29.984811 2026] [:error] [pid 9970:tid 9987] [client 20.166.51.62:15291] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aeK0_SYdRLRhVmaIMx3dXgAAAM0"]
[Sat Apr 18 06:32:30.590740 2026] [:error] [pid 9865:tid 9960] [client 20.166.51.62:7498] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aeK0_qzb5knECIY-C-i4CAAAAJc"]
[Sat Apr 18 06:32:31.255043 2026] [:error] [pid 9865:tid 9953] [client 20.166.51.62:35645] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aeK0_6zb5knECIY-C-i4DQAAAJA"]
[Sat Apr 18 06:32:32.001598 2026] [:error] [pid 13023:tid 13036] [client 20.166.51.62:24186] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aeK1AP1e7hG8DAeABB8DegAAAQs"]
[Sat Apr 18 06:32:32.787959 2026] [:error] [pid 9864:tid 9927] [client 20.166.51.62:12787] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aeK1AICFeowknfXHM7lB9QAAAFU"]
[Sat Apr 18 06:32:33.366356 2026] [:error] [pid 9865:tid 9937] [client 20.166.51.62:17222] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aeK1Aazb5knECIY-C-i4EgAAAIA"]
[Sat Apr 18 06:32:34.261024 2026] [:error] [pid 9863:tid 9885] [client 20.166.51.62:24232] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aeK1AjjjiypiFrTucbIYngAAAAw"]
[Sat Apr 18 06:32:34.981681 2026] [:error] [pid 9970:tid 9997] [client 20.166.51.62:7542] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aeK1AiYdRLRhVmaIMx3dZgAAANc"]
[Sat Apr 18 06:32:35.710320 2026] [:error] [pid 9970:tid 9982] [client 20.166.51.62:6211] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aeK1AyYdRLRhVmaIMx3dbAAAAMg"]
[Sat Apr 18 06:32:36.538779 2026] [:error] [pid 9864:tid 9918] [client 20.166.51.62:24224] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aeK1BICFeowknfXHM7lB_gAAAEw"]
[Sat Apr 18 06:32:37.396822 2026] [:error] [pid 13023:tid 13049] [client 20.166.51.62:35628] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aeK1Bf1e7hG8DAeABB8DiQAAARg"]
[Sat Apr 18 06:32:38.113549 2026] [:error] [pid 13023:tid 13048] [client 20.166.51.62:20802] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aeK1Bv1e7hG8DAeABB8DiwAAARc"]
[Sat Apr 18 06:32:38.909676 2026] [:error] [pid 13023:tid 13034] [client 20.166.51.62:20855] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "aeK1Bv1e7hG8DAeABB8DjgAAAQk"]
[Sat Apr 18 06:32:39.731831 2026] [:error] [pid 13023:tid 13039] [client 20.166.51.62:17242] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "aeK1B_1e7hG8DAeABB8DlAAAAQ4"]
[Sat Apr 18 06:32:40.355347 2026] [:error] [pid 9970:tid 9998] [client 20.166.51.62:20800] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "aeK1CCYdRLRhVmaIMx3ddgAAANg"]
[Sat Apr 18 06:32:41.192781 2026] [:error] [pid 9865:tid 9942] [client 20.166.51.62:8730] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "aeK1Cazb5knECIY-C-i4HgAAAIU"]
[Sat Apr 18 06:32:41.946857 2026] [:error] [pid 9865:tid 9951] [client 20.166.51.62:24240] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/domains.php"] [unique_id "aeK1Cazb5knECIY-C-i4IgAAAI4"]
[Sat Apr 18 06:32:42.655802 2026] [:error] [pid 13023:tid 13045] [client 20.166.51.62:24241] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/domains.php"] [unique_id "aeK1Cv1e7hG8DAeABB8DmgAAARQ"]
[Sat Apr 18 06:32:43.381271 2026] [:error] [pid 9863:tid 9892] [client 20.166.51.62:20838] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/domains.php"] [unique_id "aeK1CzjjiypiFrTucbIYoAAAABM"]
[Sat Apr 18 06:32:44.307070 2026] [:error] [pid 9865:tid 9944] [client 20.166.51.62:24211] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/domains.php"] [unique_id "aeK1DKzb5knECIY-C-i4KgAAAIc"]
[Sat Apr 18 06:32:45.031583 2026] [:error] [pid 13023:tid 13026] [client 20.166.51.62:20837] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "aeK1Df1e7hG8DAeABB8DngAAAQE"]
[Sat Apr 18 06:32:45.933214 2026] [:error] [pid 13023:tid 13033] [client 20.166.51.62:8581] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "aeK1Df1e7hG8DAeABB8DoQAAAQg"]
[Sat Apr 18 06:32:46.890147 2026] [:error] [pid 13023:tid 13028] [client 20.166.51.62:19851] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "aeK1Dv1e7hG8DAeABB8DpQAAAQM"]
[Sat Apr 18 06:32:47.501328 2026] [:error] [pid 9865:tid 9952] [client 20.166.51.62:35477] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "aeK1D6zb5knECIY-C-i4LwAAAI8"]
[Sat Apr 18 06:32:48.382352 2026] [:error] [pid 9863:tid 9895] [client 20.166.51.62:35469] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aeK1EDjjiypiFrTucbIYoQAAABY"]
[Sat Apr 18 06:32:49.896909 2026] [:error] [pid 9865:tid 9947] [client 20.166.51.62:13200] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aeK1Eazb5knECIY-C-i4NgAAAIo"]
[Sat Apr 18 06:32:51.292076 2026] [:error] [pid 9970:tid 9998] [client 20.166.51.62:35359] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aeK1EyYdRLRhVmaIMx3dhAAAANg"]
[Sat Apr 18 06:32:52.632061 2026] [:error] [pid 13023:tid 13040] [client 20.166.51.62:5356] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aeK1FP1e7hG8DAeABB8DtAAAAQ8"]
[Sat Apr 18 06:32:54.810329 2026] [:error] [pid 13023:tid 13034] [client 20.166.51.62:19855] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeK1Fv1e7hG8DAeABB8DuwAAAQk"]
[Sat Apr 18 06:33:04.326775 2026] [:error] [pid 9865:tid 9959] [client 20.166.51.62:5275] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aeK1IKzb5knECIY-C-i4TQAAAJY"]
[Sat Apr 18 06:33:04.978608 2026] [:error] [pid 13023:tid 13043] [client 20.166.51.62:21716] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aeK1IP1e7hG8DAeABB8D6QAAARI"]
[Sat Apr 18 06:33:05.670475 2026] [:error] [pid 13023:tid 13039] [client 20.166.51.62:21718] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aeK1If1e7hG8DAeABB8D7gAAAQ4"]
[Sat Apr 18 06:33:06.559940 2026] [:error] [pid 9864:tid 9909] [client 20.166.51.62:14195] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aeK1IoCFeowknfXHM7lCOwAAAEQ"]
[Sat Apr 18 06:33:08.152653 2026] [:error] [pid 9863:tid 9882] [client 20.166.51.62:5374] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/zoo.php"] [unique_id "aeK1JDjjiypiFrTucbIYsAAAAAk"]
[Sat Apr 18 06:33:09.239387 2026] [:error] [pid 9864:tid 9906] [client 20.166.51.62:20453] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/zoo.php"] [unique_id "aeK1JYCFeowknfXHM7lCPwAAAEE"]
[Sat Apr 18 06:33:10.109106 2026] [:error] [pid 13023:tid 13027] [client 20.166.51.62:17262] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/zoo.php"] [unique_id "aeK1Jv1e7hG8DAeABB8D_QAAAQI"]
[Sat Apr 18 06:33:10.816927 2026] [:error] [pid 13023:tid 13046] [client 20.166.51.62:35347] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/zoo.php"] [unique_id "aeK1Jv1e7hG8DAeABB8EAgAAARU"]
[Sat Apr 18 06:33:11.522040 2026] [:error] [pid 9863:tid 9894] [client 20.166.51.62:8845] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gaza.php"] [unique_id "aeK1JzjjiypiFrTucbIYsgAAABU"]
[Sat Apr 18 06:33:12.225583 2026] [:error] [pid 9865:tid 9952] [client 20.166.51.62:24197] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gaza.php"] [unique_id "aeK1KKzb5knECIY-C-i4UgAAAI8"]
[Sat Apr 18 06:33:12.952439 2026] [:error] [pid 9865:tid 9957] [client 20.166.51.62:5291] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gaza.php"] [unique_id "aeK1KKzb5knECIY-C-i4VwAAAJQ"]
[Sat Apr 18 06:33:14.602744 2026] [:error] [pid 9864:tid 9920] [client 20.166.51.62:35365] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gaza.php"] [unique_id "aeK1KoCFeowknfXHM7lCRAAAAE4"]
[Sat Apr 18 06:33:15.226613 2026] [:error] [pid 9865:tid 9941] [client 20.166.51.62:35147] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/retu11.PhP7"] [unique_id "aeK1K6zb5knECIY-C-i4ZwAAAIQ"]
[Sat Apr 18 06:33:16.008832 2026] [:error] [pid 9864:tid 9918] [client 20.166.51.62:5309] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/retu11.PhP7"] [unique_id "aeK1LICFeowknfXHM7lCRwAAAEw"]
[Sat Apr 18 06:33:16.990981 2026] [:error] [pid 9865:tid 9960] [client 20.166.51.62:8722] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/retu11.PhP7"] [unique_id "aeK1LKzb5knECIY-C-i4dQAAAJc"]
[Sat Apr 18 06:33:17.836747 2026] [:error] [pid 9865:tid 9959] [client 20.166.51.62:19864] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/retu11.PhP7"] [unique_id "aeK1Lazb5knECIY-C-i4ewAAAJY"]
[Sat Apr 18 06:33:18.641606 2026] [:error] [pid 9865:tid 9954] [client 20.166.51.62:19847] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeK1Lqzb5knECIY-C-i4gQAAAJE"]
[Sat Apr 18 06:33:19.671360 2026] [:error] [pid 9865:tid 9937] [client 20.166.51.62:32234] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeK1L6zb5knECIY-C-i4hgAAAIA"]
[Sat Apr 18 06:33:20.772061 2026] [:error] [pid 9864:tid 9906] [client 20.166.51.62:21733] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeK1MICFeowknfXHM7lCTwAAAEE"]
[Sat Apr 18 06:33:21.465343 2026] [:error] [pid 9863:tid 9894] [client 20.166.51.62:14155] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeK1MTjjiypiFrTucbIYwgAAABU"]
[Sat Apr 18 06:33:22.095224 2026] [:error] [pid 9863:tid 9879] [client 20.166.51.62:13208] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/mk.php"] [unique_id "aeK1MjjjiypiFrTucbIYxAAAAAY"]
[Sat Apr 18 06:33:22.810523 2026] [:error] [pid 9970:tid 9996] [client 20.166.51.62:5312] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/mk.php"] [unique_id "aeK1MiYdRLRhVmaIMx3dpgAAANY"]
[Sat Apr 18 06:33:23.801327 2026] [:error] [pid 9865:tid 9941] [client 20.166.51.62:8953] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/mk.php"] [unique_id "aeK1M6zb5knECIY-C-i4jQAAAIQ"]
[Sat Apr 18 06:33:24.602748 2026] [:error] [pid 9863:tid 9874] [client 20.166.51.62:18925] [client 20.166.51.62] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/mk.php"] [unique_id "aeK1NDjjiypiFrTucbIYywAAAAE"]
[Sat Apr 18 06:33:25.376491 2026] [:error] [pid 9970:tid 9976] [client 20.166.51.62:15313] [client 20.166.51.62] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aeK1NSYdRLRhVmaIMx3drAAAAMI"]
[Sat Apr 18 09:54:45.188098 2026] [:error] [pid 34290:tid 34333] [client 158.158.109.150:54952] [client 158.158.109.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aeLkZRqX6WpmmAXOBi-HkwAAAc4"]
[Sat Apr 18 09:54:49.567317 2026] [:error] [pid 34237:tid 34240] [client 158.158.109.150:60680] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "aeLkaRBmX4Wq5a6rxfYOYgAAAUE"]
[Sat Apr 18 09:54:52.655888 2026] [:error] [pid 13023:tid 13040] [client 158.158.109.150:64089] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "aeLkbP1e7hG8DAeABB9kvQAAAQ8"]
[Sat Apr 18 09:54:54.524682 2026] [:error] [pid 34237:tid 34252] [client 158.158.109.150:54941] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "aeLkbhBmX4Wq5a6rxfYOawAAAU0"]
[Sat Apr 18 09:54:57.746974 2026] [:error] [pid 34237:tid 34261] [client 158.158.109.150:53539] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "aeLkcRBmX4Wq5a6rxfYOcQAAAVY"]
[Sat Apr 18 09:55:00.814039 2026] [:error] [pid 9865:tid 9937] [client 158.158.109.150:56214] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tiny2.php"] [unique_id "aeLkdKzb5knECIY-C-jzKAAAAIA"]
[Sat Apr 18 09:55:02.865382 2026] [:error] [pid 9865:tid 9942] [client 158.158.109.150:62286] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tiny2.php"] [unique_id "aeLkdqzb5knECIY-C-jzLQAAAIU"]
[Sat Apr 18 09:55:05.291390 2026] [:error] [pid 34290:tid 34343] [client 158.158.109.150:64098] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tiny2.php"] [unique_id "aeLkeRqX6WpmmAXOBi-HpAAAAdg"]
[Sat Apr 18 09:55:09.943427 2026] [:error] [pid 34288:tid 34310] [client 158.158.109.150:60698] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tiny2.php"] [unique_id "aeLkfeTIiy__PtiLmplrFAAAAZI"]
[Sat Apr 18 09:55:14.814475 2026] [:error] [pid 34288:tid 34292] [client 158.158.109.150:60141] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/state.php"] [unique_id "aeLkguTIiy__PtiLmplrGwAAAYA"]
[Sat Apr 18 09:55:18.124141 2026] [:error] [pid 13023:tid 13033] [client 158.158.109.150:11024] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/state.php"] [unique_id "aeLkhv1e7hG8DAeABB9k0QAAAQg"]
[Sat Apr 18 09:55:19.893618 2026] [:error] [pid 34237:tid 34249] [client 158.158.109.150:62306] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/state.php"] [unique_id "aeLkhxBmX4Wq5a6rxfYOiwAAAUo"]
[Sat Apr 18 09:55:21.730460 2026] [:error] [pid 13023:tid 13039] [client 158.158.109.150:60695] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/state.php"] [unique_id "aeLkif1e7hG8DAeABB9k3gAAAQ4"]
[Sat Apr 18 09:55:23.114281 2026] [:error] [pid 34288:tid 34312] [client 158.158.109.150:54971] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "aeLki-TIiy__PtiLmplrJgAAAZQ"]
[Sat Apr 18 09:55:24.730200 2026] [:error] [pid 9970:tid 9975] [client 158.158.109.150:54969] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "aeLkjCYdRLRhVmaIMx0eEwAAAME"]
[Sat Apr 18 09:55:26.031069 2026] [:error] [pid 34288:tid 34295] [client 158.158.109.150:53334] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "aeLkjuTIiy__PtiLmplrKQAAAYM"]
[Sat Apr 18 09:55:27.133353 2026] [:error] [pid 9970:tid 9990] [client 158.158.109.150:60731] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "aeLkjyYdRLRhVmaIMx0eFwAAANA"]
[Sat Apr 18 09:55:28.933512 2026] [:error] [pid 13023:tid 13026] [client 158.158.109.150:64109] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "aeLkkP1e7hG8DAeABB9k6QAAAQE"]
[Sat Apr 18 09:55:32.190465 2026] [:error] [pid 13023:tid 13047] [client 158.158.109.150:62313] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "aeLklP1e7hG8DAeABB9k9wAAARY"]
[Sat Apr 18 09:55:33.795717 2026] [:error] [pid 34237:tid 34249] [client 158.158.109.150:53372] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "aeLklRBmX4Wq5a6rxfYOowAAAUo"]
[Sat Apr 18 09:55:36.130021 2026] [:error] [pid 13023:tid 13036] [client 158.158.109.150:11034] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "aeLkmP1e7hG8DAeABB9lBgAAAQs"]
[Sat Apr 18 09:55:37.362516 2026] [:error] [pid 34237:tid 34241] [client 158.158.109.150:60110] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "aeLkmRBmX4Wq5a6rxfYOrgAAAUI"]
[Sat Apr 18 09:55:38.185676 2026] [:error] [pid 34237:tid 34260] [client 158.158.109.150:53555] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "aeLkmhBmX4Wq5a6rxfYOsgAAAVU"]
[Sat Apr 18 09:55:38.825748 2026] [:error] [pid 34237:tid 34248] [client 158.158.109.150:53320] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "aeLkmhBmX4Wq5a6rxfYOtAAAAUk"]
[Sat Apr 18 09:55:39.691220 2026] [:error] [pid 34237:tid 34242] [client 158.158.109.150:60104] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "aeLkmxBmX4Wq5a6rxfYOtgAAAUM"]
[Sat Apr 18 09:55:40.643014 2026] [:error] [pid 13023:tid 13041] [client 158.158.109.150:60143] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "aeLknP1e7hG8DAeABB9lGgAAARA"]
[Sat Apr 18 09:55:41.448553 2026] [:error] [pid 34237:tid 34263] [client 158.158.109.150:60721] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "aeLknRBmX4Wq5a6rxfYOuQAAAVg"]
[Sat Apr 18 09:55:42.029817 2026] [:error] [pid 9864:tid 9906] [client 158.158.109.150:64084] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "aeLknoCFeowknfXHM7lo3AAAAEE"]
[Sat Apr 18 09:55:42.927290 2026] [:error] [pid 34237:tid 34240] [client 158.158.109.150:53337] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "aeLknhBmX4Wq5a6rxfYOvQAAAUE"]
[Sat Apr 18 09:55:43.452865 2026] [:error] [pid 34288:tid 34292] [client 158.158.109.150:53528] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ss.php"] [unique_id "aeLkn-TIiy__PtiLmplrMwAAAYA"]
[Sat Apr 18 09:55:44.376358 2026] [:error] [pid 9863:tid 9889] [client 158.158.109.150:62283] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ss.php"] [unique_id "aeLkoDjjiypiFrTucbJGVwAAABA"]
[Sat Apr 18 09:55:45.351996 2026] [:error] [pid 9970:tid 9990] [client 158.158.109.150:60722] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ss.php"] [unique_id "aeLkoSYdRLRhVmaIMx0eIwAAANA"]
[Sat Apr 18 09:55:46.790368 2026] [:error] [pid 34288:tid 34303] [client 158.158.109.150:62300] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ss.php"] [unique_id "aeLkouTIiy__PtiLmplrNwAAAYs"]
[Sat Apr 18 09:55:47.850470 2026] [:error] [pid 34288:tid 34315] [client 158.158.109.150:53526] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "aeLko-TIiy__PtiLmplrOQAAAZc"]
[Sat Apr 18 09:55:48.739030 2026] [:error] [pid 9865:tid 9937] [client 158.158.109.150:64102] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tx79.php"] [unique_id "aeLkpKzb5knECIY-C-jzQwAAAIA"]
[Sat Apr 18 09:55:58.761697 2026] [:error] [pid 34290:tid 34340] [client 158.158.109.150:53510] [client 158.158.109.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "aeLkrhqX6WpmmAXOBi-H4AAAAdU"]
[Sat Apr 18 09:56:02.674401 2026] [:error] [pid 9863:tid 9873] [client 158.158.109.150:63770] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/img.php"] [unique_id "aeLksjjjiypiFrTucbJGfwAAAAA"]
[Sat Apr 18 09:56:04.414697 2026] [:error] [pid 13023:tid 13043] [client 158.158.109.150:64126] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/img.php"] [unique_id "aeLktP1e7hG8DAeABB9lJQAAARI"]
[Sat Apr 18 09:56:05.622685 2026] [:error] [pid 13023:tid 13040] [client 158.158.109.150:62304] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/img.php"] [unique_id "aeLktf1e7hG8DAeABB9lKAAAAQ8"]
[Sat Apr 18 09:56:06.241554 2026] [:error] [pid 34237:tid 34250] [client 158.158.109.150:64081] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/img.php"] [unique_id "aeLkthBmX4Wq5a6rxfYO3AAAAUs"]
[Sat Apr 18 09:56:07.893828 2026] [:error] [pid 13023:tid 13039] [client 158.158.109.150:63748] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/12.php"] [unique_id "aeLkt_1e7hG8DAeABB9lKwAAAQ4"]
[Sat Apr 18 09:56:08.737674 2026] [:error] [pid 13023:tid 13038] [client 158.158.109.150:63041] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/12.php"] [unique_id "aeLkuP1e7hG8DAeABB9lLgAAAQ0"]
[Sat Apr 18 09:56:09.579876 2026] [:error] [pid 34290:tid 34322] [client 158.158.109.150:53367] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/12.php"] [unique_id "aeLkuRqX6WpmmAXOBi-H4QAAAcM"]
[Sat Apr 18 09:56:10.440002 2026] [:error] [pid 13023:tid 13049] [client 158.158.109.150:60706] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/12.php"] [unique_id "aeLkuv1e7hG8DAeABB9lNAAAARg"]
[Sat Apr 18 09:56:11.759857 2026] [:error] [pid 13023:tid 13034] [client 158.158.109.150:54920] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "aeLku_1e7hG8DAeABB9lOgAAAQk"]
[Sat Apr 18 09:56:13.889609 2026] [:error] [pid 9863:tid 9880] [client 158.158.109.150:60703] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "aeLkvTjjiypiFrTucbJGggAAAAc"]
[Sat Apr 18 09:56:14.883335 2026] [:error] [pid 13023:tid 13037] [client 158.158.109.150:53547] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "aeLkvv1e7hG8DAeABB9lQgAAAQw"]
[Sat Apr 18 09:56:15.874838 2026] [:error] [pid 13023:tid 13040] [client 158.158.109.150:53530] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "aeLkv_1e7hG8DAeABB9lRgAAAQ8"]
[Sat Apr 18 09:56:16.887763 2026] [:error] [pid 13023:tid 13036] [client 158.158.109.150:53566] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "aeLkwP1e7hG8DAeABB9lSAAAAQs"]
[Sat Apr 18 09:56:18.102568 2026] [:error] [pid 13023:tid 13042] [client 158.158.109.150:63071] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "aeLkwv1e7hG8DAeABB9lTAAAARE"]
[Sat Apr 18 09:56:18.725068 2026] [:error] [pid 9863:tid 9879] [client 158.158.109.150:63093] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "aeLkwjjjiypiFrTucbJGhAAAAAY"]
[Sat Apr 18 09:56:19.386321 2026] [:error] [pid 13023:tid 13036] [client 158.158.109.150:53560] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "aeLkw_1e7hG8DAeABB9lVAAAAQs"]
[Sat Apr 18 09:56:20.322896 2026] [:error] [pid 13023:tid 13037] [client 158.158.109.150:11056] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aeLkxP1e7hG8DAeABB9lVwAAAQw"]
[Sat Apr 18 09:56:20.925215 2026] [:error] [pid 34288:tid 34295] [client 158.158.109.150:60691] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aeLkxOTIiy__PtiLmplrSAAAAYM"]
[Sat Apr 18 09:56:21.733664 2026] [:error] [pid 13023:tid 13048] [client 158.158.109.150:54972] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aeLkxf1e7hG8DAeABB9lXQAAARc"]
[Sat Apr 18 09:56:22.788899 2026] [:error] [pid 9863:tid 9881] [client 158.158.109.150:11046] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aeLkxjjjiypiFrTucbJGiAAAAAg"]
[Sat Apr 18 09:56:23.710381 2026] [:error] [pid 9864:tid 9909] [client 158.158.109.150:53544] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/roksad1.php"] [unique_id "aeLkx4CFeowknfXHM7lo6AAAAEQ"]
[Sat Apr 18 09:56:24.310368 2026] [:error] [pid 13023:tid 13031] [client 158.158.109.150:62274] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/roksad1.php"] [unique_id "aeLkyP1e7hG8DAeABB9lYQAAAQY"]
[Sat Apr 18 09:56:24.935588 2026] [:error] [pid 13023:tid 13027] [client 158.158.109.150:57234] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/roksad1.php"] [unique_id "aeLkyP1e7hG8DAeABB9lZAAAAQI"]
[Sat Apr 18 09:56:25.491770 2026] [:error] [pid 9863:tid 9888] [client 158.158.109.150:63759] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/roksad1.php"] [unique_id "aeLkyTjjiypiFrTucbJGjQAAAA8"]
[Sat Apr 18 09:56:26.233694 2026] [:error] [pid 34237:tid 34242] [client 158.158.109.150:63043] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "aeLkyhBmX4Wq5a6rxfYO3wAAAUM"]
[Sat Apr 18 09:56:26.825020 2026] [:error] [pid 9863:tid 9874] [client 158.158.109.150:60719] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "aeLkyjjjiypiFrTucbJGkAAAAAE"]
[Sat Apr 18 09:56:27.533141 2026] [:error] [pid 34237:tid 34263] [client 158.158.109.150:62279] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "aeLkyxBmX4Wq5a6rxfYO4wAAAVg"]
[Sat Apr 18 09:56:28.073589 2026] [:error] [pid 34237:tid 34241] [client 158.158.109.150:53335] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "aeLkzBBmX4Wq5a6rxfYO5gAAAUI"]
[Sat Apr 18 09:56:28.930649 2026] [:error] [pid 9864:tid 9908] [client 158.158.109.150:54931] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aeLkzICFeowknfXHM7lo6QAAAEM"]
[Sat Apr 18 09:56:29.836935 2026] [:error] [pid 9865:tid 9954] [client 158.158.109.150:60732] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aeLkzazb5knECIY-C-jzXgAAAJE"]
[Sat Apr 18 09:56:30.821212 2026] [:error] [pid 9864:tid 9915] [client 158.158.109.150:63751] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aeLkzoCFeowknfXHM7lo6wAAAEk"]
[Sat Apr 18 09:56:31.450813 2026] [:error] [pid 9970:tid 9981] [client 158.158.109.150:62308] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aeLkzyYdRLRhVmaIMx0eOgAAAMc"]
[Sat Apr 18 09:56:31.973227 2026] [:error] [pid 9863:tid 9873] [client 158.158.109.150:11064] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aeLkzzjjiypiFrTucbJGlAAAAAA"]
[Sat Apr 18 09:56:32.507458 2026] [:error] [pid 9863:tid 9884] [client 158.158.109.150:63786] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aeLk0DjjiypiFrTucbJGlQAAAAs"]
[Sat Apr 18 09:56:33.299878 2026] [:error] [pid 9863:tid 9886] [client 158.158.109.150:11009] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aeLk0TjjiypiFrTucbJGlwAAAA0"]
[Sat Apr 18 09:56:33.991357 2026] [:error] [pid 9864:tid 9913] [client 158.158.109.150:54962] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aeLk0YCFeowknfXHM7lo7gAAAEc"]
[Sat Apr 18 09:56:34.660546 2026] [:error] [pid 9863:tid 9897] [client 158.158.109.150:53356] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "aeLk0jjjiypiFrTucbJGmQAAABg"]
[Sat Apr 18 09:56:35.491632 2026] [:error] [pid 34237:tid 34246] [client 158.158.109.150:53363] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "aeLk0xBmX4Wq5a6rxfYO6AAAAUc"]
[Sat Apr 18 09:56:36.674436 2026] [:error] [pid 9863:tid 9885] [client 158.158.109.150:54927] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "aeLk1DjjiypiFrTucbJGnQAAAAw"]
[Sat Apr 18 09:56:38.034472 2026] [:error] [pid 9970:tid 9997] [client 158.158.109.150:62312] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "aeLk1iYdRLRhVmaIMx0ePwAAANc"]
[Sat Apr 18 09:56:39.237533 2026] [:error] [pid 9970:tid 9993] [client 158.158.109.150:58893] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/db.php"] [unique_id "aeLk1yYdRLRhVmaIMx0eQgAAANM"]
[Sat Apr 18 09:56:40.327038 2026] [:error] [pid 13023:tid 13033] [client 158.158.109.150:58903] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/db.php"] [unique_id "aeLk2P1e7hG8DAeABB9laQAAAQg"]
[Sat Apr 18 09:56:41.171550 2026] [:error] [pid 13023:tid 13030] [client 158.158.109.150:63088] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/db.php"] [unique_id "aeLk2f1e7hG8DAeABB9lagAAAQU"]
[Sat Apr 18 09:56:42.054651 2026] [:error] [pid 9970:tid 9980] [client 158.158.109.150:62273] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/db.php"] [unique_id "aeLk2iYdRLRhVmaIMx0eRAAAAMY"]
[Sat Apr 18 09:56:42.844095 2026] [:error] [pid 34237:tid 34247] [client 158.158.109.150:57926] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/less.php"] [unique_id "aeLk2hBmX4Wq5a6rxfYO7QAAAUg"]
[Sat Apr 18 09:56:44.297208 2026] [:error] [pid 34290:tid 34340] [client 158.158.109.150:58899] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/less.php"] [unique_id "aeLk3BqX6WpmmAXOBi-H5gAAAdU"]
[Sat Apr 18 09:56:46.172771 2026] [:error] [pid 9865:tid 9943] [client 158.158.109.150:58901] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/less.php"] [unique_id "aeLk3qzb5knECIY-C-jzZgAAAIY"]
[Sat Apr 18 09:56:47.588890 2026] [:error] [pid 34237:tid 34250] [client 158.158.109.150:58927] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/less.php"] [unique_id "aeLk3xBmX4Wq5a6rxfYPAAAAAUs"]
[Sat Apr 18 09:56:48.518928 2026] [:error] [pid 34290:tid 34333] [client 158.158.109.150:63794] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "aeLk4BqX6WpmmAXOBi-H5wAAAc4"]
[Sat Apr 18 09:56:49.387537 2026] [:error] [pid 9863:tid 9892] [client 158.158.109.150:57934] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "aeLk4TjjiypiFrTucbJGrQAAABM"]
[Sat Apr 18 09:56:50.578663 2026] [:error] [pid 9865:tid 9949] [client 158.158.109.150:63086] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "aeLk4qzb5knECIY-C-jzagAAAIw"]
[Sat Apr 18 09:56:51.252412 2026] [:error] [pid 34290:tid 34326] [client 158.158.109.150:59181] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "aeLk4xqX6WpmmAXOBi-H6AAAAcc"]
[Sat Apr 18 09:56:52.087462 2026] [:error] [pid 9970:tid 9974] [client 158.158.109.150:54966] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/maxro.php"] [unique_id "aeLk5CYdRLRhVmaIMx0eUAAAAMA"]
[Sat Apr 18 09:56:53.033908 2026] [:error] [pid 34237:tid 34253] [client 158.158.109.150:63778] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/maxro.php"] [unique_id "aeLk5RBmX4Wq5a6rxfYPBQAAAU4"]
[Sat Apr 18 09:56:55.475538 2026] [:error] [pid 34290:tid 34338] [client 158.158.109.150:53543] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/maxro.php"] [unique_id "aeLk5xqX6WpmmAXOBi-H7AAAAdM"]
[Sat Apr 18 09:56:57.778589 2026] [:error] [pid 9863:tid 9893] [client 158.158.109.150:63802] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/maxro.php"] [unique_id "aeLk6TjjiypiFrTucbJGsgAAABQ"]
[Sat Apr 18 09:57:28.327464 2026] [:error] [pid 13023:tid 13036] [client 158.158.109.150:11150] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/zogy1.php"] [unique_id "aeLlCP1e7hG8DAeABB9mBAAAAQs"]
[Sat Apr 18 09:57:29.279829 2026] [:error] [pid 34288:tid 34307] [client 158.158.109.150:63480] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/zogy1.php"] [unique_id "aeLlCeTIiy__PtiLmplrmgAAAY8"]
[Sat Apr 18 09:57:30.135496 2026] [:error] [pid 9970:tid 9977] [client 158.158.109.150:16815] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/zogy1.php"] [unique_id "aeLlCiYdRLRhVmaIMx0eZQAAAMM"]
[Sat Apr 18 09:57:30.710500 2026] [:error] [pid 9970:tid 9984] [client 158.158.109.150:59440] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/zogy1.php"] [unique_id "aeLlCiYdRLRhVmaIMx0eZgAAAMo"]
[Sat Apr 18 09:57:31.444774 2026] [:error] [pid 34288:tid 34303] [client 158.158.109.150:62211] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeLlC-TIiy__PtiLmplrnAAAAYs"]
[Sat Apr 18 09:57:33.058336 2026] [:error] [pid 9864:tid 9912] [client 158.158.109.150:62994] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeLlDYCFeowknfXHM7lo9QAAAEY"]
[Sat Apr 18 09:57:33.689060 2026] [:error] [pid 9865:tid 9950] [client 158.158.109.150:56969] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeLlDazb5knECIY-C-jz8QAAAI0"]
[Sat Apr 18 09:57:34.394947 2026] [:error] [pid 9864:tid 9927] [client 158.158.109.150:11352] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/aios-bootstrap.php"] [unique_id "aeLlDoCFeowknfXHM7lo9gAAAFU"]
[Sat Apr 18 09:57:35.322926 2026] [:error] [pid 9865:tid 9956] [client 158.158.109.150:16787] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/rh.php"] [unique_id "aeLlD6zb5knECIY-C-jz9wAAAJM"]
[Sat Apr 18 09:57:35.900629 2026] [:error] [pid 9970:tid 9997] [client 158.158.109.150:59076] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/rh.php"] [unique_id "aeLlDyYdRLRhVmaIMx0ebgAAANc"]
[Sat Apr 18 09:57:37.535777 2026] [:error] [pid 9863:tid 9893] [client 158.158.109.150:58845] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/rh.php"] [unique_id "aeLlETjjiypiFrTucbJHBgAAABQ"]
[Sat Apr 18 09:57:38.355547 2026] [:error] [pid 34288:tid 34304] [client 158.158.109.150:65224] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/rh.php"] [unique_id "aeLlEuTIiy__PtiLmplroAAAAYw"]
[Sat Apr 18 09:57:39.170942 2026] [:error] [pid 9865:tid 9947] [client 158.158.109.150:52854] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gz.php"] [unique_id "aeLlE6zb5knECIY-C-j0AQAAAIo"]
[Sat Apr 18 09:57:39.821760 2026] [:error] [pid 34237:tid 34247] [client 158.158.109.150:58293] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gz.php"] [unique_id "aeLlExBmX4Wq5a6rxfYPUwAAAUg"]
[Sat Apr 18 09:57:40.328040 2026] [:error] [pid 34237:tid 34242] [client 158.158.109.150:11266] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gz.php"] [unique_id "aeLlFBBmX4Wq5a6rxfYPVAAAAUM"]
[Sat Apr 18 09:57:41.039542 2026] [:error] [pid 9865:tid 9938] [client 158.158.109.150:65259] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gz.php"] [unique_id "aeLlFazb5knECIY-C-j0CgAAAIE"]
[Sat Apr 18 09:57:41.648371 2026] [:error] [pid 34288:tid 34303] [client 158.158.109.150:59393] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gelio1.php"] [unique_id "aeLlFeTIiy__PtiLmplrowAAAYs"]
[Sat Apr 18 09:57:42.229957 2026] [:error] [pid 9865:tid 9951] [client 158.158.109.150:65218] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gelio1.php"] [unique_id "aeLlFqzb5knECIY-C-j0DwAAAI4"]
[Sat Apr 18 09:57:42.796045 2026] [:error] [pid 13023:tid 13030] [client 158.158.109.150:11276] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gelio1.php"] [unique_id "aeLlFv1e7hG8DAeABB9mIQAAAQU"]
[Sat Apr 18 09:57:43.358834 2026] [:error] [pid 9970:tid 9981] [client 158.158.109.150:11297] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gelio1.php"] [unique_id "aeLlFyYdRLRhVmaIMx0ecgAAAMc"]
[Sat Apr 18 09:57:43.925505 2026] [:error] [pid 9970:tid 9976] [client 158.158.109.150:11323] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/areak1.php"] [unique_id "aeLlFyYdRLRhVmaIMx0edQAAAMI"]
[Sat Apr 18 09:57:44.662892 2026] [:error] [pid 34288:tid 34296] [client 158.158.109.150:58251] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/areak1.php"] [unique_id "aeLlGOTIiy__PtiLmplrpwAAAYQ"]
[Sat Apr 18 09:57:45.590346 2026] [:error] [pid 13023:tid 13043] [client 158.158.109.150:55922] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/areak1.php"] [unique_id "aeLlGf1e7hG8DAeABB9mIwAAARI"]
[Sat Apr 18 09:57:46.351548 2026] [:error] [pid 9970:tid 9977] [client 158.158.109.150:11360] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/areak1.php"] [unique_id "aeLlGiYdRLRhVmaIMx0efAAAAMM"]
[Sat Apr 18 09:57:47.030163 2026] [:error] [pid 13023:tid 13048] [client 158.158.109.150:11315] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/qqa.php"] [unique_id "aeLlG_1e7hG8DAeABB9mJQAAARc"]
[Sat Apr 18 09:57:47.762603 2026] [:error] [pid 13023:tid 13035] [client 158.158.109.150:58878] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/qqa.php"] [unique_id "aeLlG_1e7hG8DAeABB9mKwAAAQo"]
[Sat Apr 18 09:57:49.231929 2026] [:error] [pid 9864:tid 9925] [client 158.158.109.150:52835] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/qqa.php"] [unique_id "aeLlHYCFeowknfXHM7lo-gAAAFM"]
[Sat Apr 18 09:57:51.133937 2026] [:error] [pid 9864:tid 9920] [client 158.158.109.150:58294] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/qqa.php"] [unique_id "aeLlH4CFeowknfXHM7lo-wAAAE4"]
[Sat Apr 18 09:57:53.121263 2026] [:error] [pid 13023:tid 13039] [client 158.158.109.150:54467] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aeLlIf1e7hG8DAeABB9mOwAAAQ4"]
[Sat Apr 18 09:57:54.964563 2026] [:error] [pid 9970:tid 9978] [client 158.158.109.150:58847] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aeLlIiYdRLRhVmaIMx0efwAAAMQ"]
[Sat Apr 18 09:57:57.412124 2026] [:error] [pid 9865:tid 9945] [client 158.158.109.150:62791] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aeLlJazb5knECIY-C-j0GQAAAIg"]
[Sat Apr 18 09:57:58.045287 2026] [:error] [pid 34237:tid 34258] [client 158.158.109.150:52581] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aeLlJhBmX4Wq5a6rxfYPaQAAAVM"]
[Sat Apr 18 09:57:59.175791 2026] [:error] [pid 9864:tid 9923] [client 158.158.109.150:55883] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ga.php"] [unique_id "aeLlJ4CFeowknfXHM7lpAgAAAFE"]
[Sat Apr 18 09:58:00.042476 2026] [:error] [pid 34288:tid 34299] [client 158.158.109.150:58852] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ga.php"] [unique_id "aeLlKOTIiy__PtiLmplrtAAAAYc"]
[Sat Apr 18 09:58:01.076173 2026] [:error] [pid 13023:tid 13048] [client 158.158.109.150:55924] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ga.php"] [unique_id "aeLlKf1e7hG8DAeABB9mTQAAARc"]
[Sat Apr 18 09:58:01.709488 2026] [:error] [pid 34237:tid 34246] [client 158.158.109.150:62822] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ga.php"] [unique_id "aeLlKRBmX4Wq5a6rxfYPbQAAAUc"]
[Sat Apr 18 09:58:02.614943 2026] [:error] [pid 9863:tid 9881] [client 158.158.109.150:11294] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xozx.php"] [unique_id "aeLlKjjjiypiFrTucbJHKwAAAAg"]
[Sat Apr 18 09:58:03.520618 2026] [:error] [pid 34288:tid 34308] [client 158.158.109.150:62812] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xozx.php"] [unique_id "aeLlK-TIiy__PtiLmplruQAAAZA"]
[Sat Apr 18 09:58:04.264203 2026] [:error] [pid 34237:tid 34251] [client 158.158.109.150:62587] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xozx.php"] [unique_id "aeLlLBBmX4Wq5a6rxfYPcwAAAUw"]
[Sat Apr 18 09:58:05.167192 2026] [:error] [pid 9863:tid 9876] [client 158.158.109.150:54516] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xozx.php"] [unique_id "aeLlLTjjiypiFrTucbJHLwAAAAM"]
[Sat Apr 18 09:58:06.284851 2026] [:error] [pid 9865:tid 9941] [client 158.158.109.150:54218] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/1100.php"] [unique_id "aeLlLqzb5knECIY-C-j0IQAAAIQ"]
[Sat Apr 18 09:58:07.532221 2026] [:error] [pid 34237:tid 34262] [client 158.158.109.150:57234] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/1100.php"] [unique_id "aeLlLxBmX4Wq5a6rxfYPfwAAAVc"]
[Sat Apr 18 09:58:09.678798 2026] [:error] [pid 13023:tid 13028] [client 158.158.109.150:54224] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/1100.php"] [unique_id "aeLlMf1e7hG8DAeABB9mXQAAAQM"]
[Sat Apr 18 09:58:11.195404 2026] [:error] [pid 9863:tid 9873] [client 158.158.109.150:54505] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/1100.php"] [unique_id "aeLlMzjjiypiFrTucbJHMwAAAAA"]
[Sat Apr 18 09:58:12.531961 2026] [:error] [pid 34237:tid 34261] [client 158.158.109.150:11316] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/press.php"] [unique_id "aeLlNBBmX4Wq5a6rxfYPhAAAAVY"]
[Sat Apr 18 09:58:13.482277 2026] [:error] [pid 9865:tid 9943] [client 158.158.109.150:62784] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/press.php"] [unique_id "aeLlNazb5knECIY-C-j0KQAAAIY"]
[Sat Apr 18 09:58:14.021063 2026] [:error] [pid 34288:tid 34304] [client 158.158.109.150:54223] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/press.php"] [unique_id "aeLlNuTIiy__PtiLmplrzAAAAYw"]
[Sat Apr 18 09:58:14.664820 2026] [:error] [pid 13023:tid 13041] [client 158.158.109.150:62582] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/press.php"] [unique_id "aeLlNv1e7hG8DAeABB9mcgAAARA"]
[Sat Apr 18 09:58:15.460753 2026] [:error] [pid 9863:tid 9888] [client 158.158.109.150:54488] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aeLlNzjjiypiFrTucbJHQgAAAA8"]
[Sat Apr 18 09:58:16.284011 2026] [:error] [pid 34237:tid 34254] [client 158.158.109.150:58842] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aeLlOBBmX4Wq5a6rxfYPjAAAAU8"]
[Sat Apr 18 09:58:16.913170 2026] [:error] [pid 9863:tid 9882] [client 158.158.109.150:62543] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aeLlODjjiypiFrTucbJHSQAAAAk"]
[Sat Apr 18 09:58:18.182178 2026] [:error] [pid 34288:tid 34301] [client 158.158.109.150:58848] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aeLlOuTIiy__PtiLmplr0gAAAYk"]
[Sat Apr 18 09:58:19.143848 2026] [:error] [pid 9865:tid 9951] [client 158.158.109.150:65238] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-kz.php"] [unique_id "aeLlO6zb5knECIY-C-j0LgAAAI4"]
[Sat Apr 18 09:58:19.878306 2026] [:error] [pid 9864:tid 9906] [client 158.158.109.150:52587] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-kz.php"] [unique_id "aeLlO4CFeowknfXHM7lpEQAAAEE"]
[Sat Apr 18 09:58:20.815834 2026] [:error] [pid 9970:tid 9996] [client 158.158.109.150:11271] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-kz.php"] [unique_id "aeLlPCYdRLRhVmaIMx0elgAAANY"]
[Sat Apr 18 09:58:21.528201 2026] [:error] [pid 13023:tid 13030] [client 158.158.109.150:55898] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-kz.php"] [unique_id "aeLlPf1e7hG8DAeABB9mfwAAAQU"]
[Sat Apr 18 09:58:22.121999 2026] [:error] [pid 13023:tid 13031] [client 158.158.109.150:54526] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-lo.php"] [unique_id "aeLlPv1e7hG8DAeABB9mggAAAQY"]
[Sat Apr 18 09:58:22.882429 2026] [:error] [pid 13023:tid 13027] [client 158.158.109.150:52590] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-lo.php"] [unique_id "aeLlPv1e7hG8DAeABB9mhAAAAQI"]
[Sat Apr 18 09:58:23.834592 2026] [:error] [pid 13023:tid 13041] [client 158.158.109.150:11287] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-lo.php"] [unique_id "aeLlP_1e7hG8DAeABB9miAAAARA"]
[Sat Apr 18 09:58:24.777005 2026] [:error] [pid 34288:tid 34306] [client 158.158.109.150:65220] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-lo.php"] [unique_id "aeLlQOTIiy__PtiLmplr3AAAAY4"]
[Sat Apr 18 09:58:25.703722 2026] [:error] [pid 9863:tid 9881] [client 158.158.109.150:54513] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fone1.php"] [unique_id "aeLlQTjjiypiFrTucbJHSgAAAAg"]
[Sat Apr 18 09:58:26.439890 2026] [:error] [pid 9864:tid 9905] [client 158.158.109.150:62792] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fone1.php"] [unique_id "aeLlQoCFeowknfXHM7lpFAAAAEA"]
[Sat Apr 18 09:58:27.308168 2026] [:error] [pid 9863:tid 9875] [client 158.158.109.150:58840] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fone1.php"] [unique_id "aeLlQzjjiypiFrTucbJHTwAAAAI"]
[Sat Apr 18 09:58:35.463971 2026] [:error] [pid 9864:tid 9925] [client 158.158.109.150:58242] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/x3x.php"] [unique_id "aeLlS4CFeowknfXHM7lpIQAAAFM"]
[Sat Apr 18 09:58:36.263268 2026] [:error] [pid 34290:tid 34337] [client 158.158.109.150:10757] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/x3x.php"] [unique_id "aeLlTBqX6WpmmAXOBi-INwAAAdI"]
[Sat Apr 18 09:58:36.778664 2026] [:error] [pid 34290:tid 34333] [client 158.158.109.150:62846] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/x3x.php"] [unique_id "aeLlTBqX6WpmmAXOBi-IOAAAAc4"]
[Sat Apr 18 09:58:37.506567 2026] [:error] [pid 9864:tid 9924] [client 158.158.109.150:62571] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/x3x.php"] [unique_id "aeLlTYCFeowknfXHM7lpIwAAAFI"]
[Sat Apr 18 09:58:38.048828 2026] [:error] [pid 34237:tid 34263] [client 158.158.109.150:54234] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xy.php"] [unique_id "aeLlThBmX4Wq5a6rxfYPtAAAAVg"]
[Sat Apr 18 09:58:38.626051 2026] [:error] [pid 13023:tid 13038] [client 158.158.109.150:10787] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xy.php"] [unique_id "aeLlTv1e7hG8DAeABB9msgAAAQ0"]
[Sat Apr 18 09:58:39.293880 2026] [:error] [pid 13023:tid 13042] [client 158.158.109.150:53105] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xy.php"] [unique_id "aeLlT_1e7hG8DAeABB9mtwAAARE"]
[Sat Apr 18 09:58:39.955801 2026] [:error] [pid 9863:tid 9892] [client 158.158.109.150:53067] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xy.php"] [unique_id "aeLlTzjjiypiFrTucbJHYQAAABM"]
[Sat Apr 18 09:58:40.773999 2026] [:error] [pid 9970:tid 9996] [client 158.158.109.150:55902] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/global.php"] [unique_id "aeLlUCYdRLRhVmaIMx0eoQAAANY"]
[Sat Apr 18 09:58:41.590304 2026] [:error] [pid 34288:tid 34309] [client 158.158.109.150:58242] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/global.php"] [unique_id "aeLlUeTIiy__PtiLmplr8gAAAZE"]
[Sat Apr 18 09:58:42.259582 2026] [:error] [pid 34237:tid 34263] [client 158.158.109.150:62810] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/global.php"] [unique_id "aeLlUhBmX4Wq5a6rxfYPvQAAAVg"]
[Sat Apr 18 09:58:42.902800 2026] [:error] [pid 13023:tid 13036] [client 158.158.109.150:62794] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/global.php"] [unique_id "aeLlUv1e7hG8DAeABB9mwAAAAQs"]
[Sat Apr 18 09:58:43.899427 2026] [:error] [pid 34237:tid 34240] [client 158.158.109.150:62826] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aeLlUxBmX4Wq5a6rxfYPxwAAAUE"]
[Sat Apr 18 09:58:44.569934 2026] [:error] [pid 9970:tid 9991] [client 158.158.109.150:62819] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aeLlVCYdRLRhVmaIMx0erAAAANE"]
[Sat Apr 18 09:58:45.231885 2026] [:error] [pid 9863:tid 9889] [client 158.158.109.150:54483] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aeLlVTjjiypiFrTucbJHYwAAABA"]
[Sat Apr 18 09:58:46.083110 2026] [:error] [pid 34237:tid 34260] [client 158.158.109.150:53100] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aeLlVhBmX4Wq5a6rxfYP0AAAAVU"]
[Sat Apr 18 09:58:46.782028 2026] [:error] [pid 13023:tid 13032] [client 158.158.109.150:54513] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/link.php"] [unique_id "aeLlVv1e7hG8DAeABB9mxwAAAQc"]
[Sat Apr 18 09:58:47.525933 2026] [:error] [pid 9863:tid 9890] [client 158.158.109.150:52551] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/link.php"] [unique_id "aeLlVzjjiypiFrTucbJHZgAAABE"]
[Sat Apr 18 09:58:48.091970 2026] [:error] [pid 13023:tid 13038] [client 158.158.109.150:54522] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/link.php"] [unique_id "aeLlWP1e7hG8DAeABB9mzAAAAQ0"]
[Sat Apr 18 09:58:48.699772 2026] [:error] [pid 34288:tid 34295] [client 158.158.109.150:62564] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/link.php"] [unique_id "aeLlWOTIiy__PtiLmplr-AAAAYM"]
[Sat Apr 18 09:58:49.336476 2026] [:error] [pid 9863:tid 9882] [client 158.158.109.150:62800] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeLlWTjjiypiFrTucbJHawAAAAk"]
[Sat Apr 18 09:58:49.939629 2026] [:error] [pid 13023:tid 13045] [client 158.158.109.150:11312] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeLlWf1e7hG8DAeABB9m0QAAARQ"]
[Sat Apr 18 09:58:50.690435 2026] [:error] [pid 34237:tid 34249] [client 158.158.109.150:10803] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeLlWhBmX4Wq5a6rxfYP3gAAAUo"]
[Sat Apr 18 09:58:51.409378 2026] [:error] [pid 34237:tid 34243] [client 158.158.109.150:54268] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ortasekerli1.php"] [unique_id "aeLlWxBmX4Wq5a6rxfYP4gAAAUQ"]
[Sat Apr 18 09:58:52.228773 2026] [:error] [pid 9863:tid 9887] [client 158.158.109.150:54240] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-block.php"] [unique_id "aeLlXDjjiypiFrTucbJHbwAAAA4"]
[Sat Apr 18 09:58:52.845193 2026] [:error] [pid 9863:tid 9873] [client 158.158.109.150:54270] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-block.php"] [unique_id "aeLlXDjjiypiFrTucbJHcwAAAAA"]
[Sat Apr 18 09:58:53.392674 2026] [:error] [pid 9863:tid 9882] [client 158.158.109.150:54250] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-block.php"] [unique_id "aeLlXTjjiypiFrTucbJHegAAAAk"]
[Sat Apr 18 09:58:53.941562 2026] [:error] [pid 34290:tid 34329] [client 158.158.109.150:54478] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-block.php"] [unique_id "aeLlXRqX6WpmmAXOBi-IRgAAAco"]
[Sat Apr 18 09:58:54.577137 2026] [:error] [pid 9865:tid 9956] [client 158.158.109.150:10762] [client 158.158.109.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/wincust.php"] [unique_id "aeLlXqzb5knECIY-C-j0QQAAAJM"]
[Sat Apr 18 09:58:55.148039 2026] [:error] [pid 34288:tid 34293] [client 158.158.109.150:65290] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aeLlX-TIiy__PtiLmplsAQAAAYE"]
[Sat Apr 18 09:58:55.685682 2026] [:error] [pid 34237:tid 34243] [client 158.158.109.150:54472] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aeLlXxBmX4Wq5a6rxfYP8QAAAUQ"]
[Sat Apr 18 09:58:56.200464 2026] [:error] [pid 34288:tid 34312] [client 158.158.109.150:62530] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aeLlYOTIiy__PtiLmplsBAAAAZQ"]
[Sat Apr 18 09:58:56.905598 2026] [:error] [pid 13023:tid 13032] [client 158.158.109.150:54248] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aeLlYP1e7hG8DAeABB9m2wAAAQc"]
[Sat Apr 18 09:58:57.506874 2026] [:error] [pid 9863:tid 9894] [client 158.158.109.150:62801] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aeLlYTjjiypiFrTucbJHgQAAABU"]
[Sat Apr 18 09:58:58.208548 2026] [:error] [pid 9864:tid 9906] [client 158.158.109.150:54211] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aeLlYoCFeowknfXHM7lpLwAAAEE"]
[Sat Apr 18 09:58:58.843780 2026] [:error] [pid 13023:tid 13041] [client 158.158.109.150:58858] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aeLlYv1e7hG8DAeABB9m5AAAARA"]
[Sat Apr 18 09:58:59.437077 2026] [:error] [pid 13023:tid 13048] [client 158.158.109.150:11288] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aeLlY_1e7hG8DAeABB9m7gAAARc"]
[Sat Apr 18 09:58:59.970527 2026] [:error] [pid 34288:tid 34301] [client 158.158.109.150:65246] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xltt.php"] [unique_id "aeLlY-TIiy__PtiLmplsDAAAAYk"]
[Sat Apr 18 09:59:00.572920 2026] [:error] [pid 34237:tid 34240] [client 158.158.109.150:62788] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xltt.php"] [unique_id "aeLlZBBmX4Wq5a6rxfYP-QAAAUE"]
[Sat Apr 18 09:59:01.108097 2026] [:error] [pid 9863:tid 9894] [client 158.158.109.150:52558] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xltt.php"] [unique_id "aeLlZTjjiypiFrTucbJHgwAAABU"]
[Sat Apr 18 09:59:01.698943 2026] [:error] [pid 34290:tid 34335] [client 158.158.109.150:11307] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xltt.php"] [unique_id "aeLlZRqX6WpmmAXOBi-ITAAAAdA"]
[Sat Apr 18 09:59:02.320403 2026] [:error] [pid 34237:tid 34255] [client 158.158.109.150:65251] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws57.php"] [unique_id "aeLlZhBmX4Wq5a6rxfYP-wAAAVA"]
[Sat Apr 18 09:59:03.262026 2026] [:error] [pid 13023:tid 13029] [client 158.158.109.150:54227] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws57.php"] [unique_id "aeLlZ_1e7hG8DAeABB9m-wAAAQQ"]
[Sat Apr 18 09:59:03.838870 2026] [:error] [pid 9865:tid 9938] [client 158.158.109.150:54465] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws57.php"] [unique_id "aeLlZ6zb5knECIY-C-j0QwAAAIE"]
[Sat Apr 18 09:59:04.456825 2026] [:error] [pid 9865:tid 9961] [client 158.158.109.150:65242] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws57.php"] [unique_id "aeLlaKzb5knECIY-C-j0RAAAAJg"]
[Sat Apr 18 09:59:05.084600 2026] [:error] [pid 9865:tid 9943] [client 158.158.109.150:62787] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws61.php"] [unique_id "aeLlaazb5knECIY-C-j0RgAAAIY"]
[Sat Apr 18 09:59:05.690315 2026] [:error] [pid 34288:tid 34297] [client 158.158.109.150:58873] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws61.php"] [unique_id "aeLlaeTIiy__PtiLmplsDQAAAYU"]
[Sat Apr 18 09:59:06.381219 2026] [:error] [pid 9970:tid 9992] [client 158.158.109.150:65227] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws61.php"] [unique_id "aeLlaiYdRLRhVmaIMx0evwAAANI"]
[Sat Apr 18 09:59:07.046798 2026] [:error] [pid 9970:tid 9990] [client 158.158.109.150:58849] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws61.php"] [unique_id "aeLlayYdRLRhVmaIMx0ewAAAANA"]
[Sat Apr 18 09:59:08.041115 2026] [:error] [pid 34288:tid 34303] [client 158.158.109.150:55888] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws66.php"] [unique_id "aeLlbOTIiy__PtiLmplsEQAAAYs"]
[Sat Apr 18 09:59:09.031278 2026] [:error] [pid 13023:tid 13049] [client 158.158.109.150:11285] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws66.php"] [unique_id "aeLlbf1e7hG8DAeABB9nHQAAARg"]
[Sat Apr 18 09:59:10.107456 2026] [:error] [pid 13023:tid 13035] [client 158.158.109.150:62567] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws66.php"] [unique_id "aeLlbv1e7hG8DAeABB9nJQAAAQo"]
[Sat Apr 18 09:59:11.660055 2026] [:error] [pid 9863:tid 9896] [client 158.158.109.150:65243] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws66.php"] [unique_id "aeLlbzjjiypiFrTucbJHiwAAABc"]
[Sat Apr 18 09:59:12.524963 2026] [:error] [pid 9865:tid 9953] [client 158.158.109.150:62831] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "aeLlcKzb5knECIY-C-j0UQAAAJA"]
[Sat Apr 18 09:59:13.564786 2026] [:error] [pid 9864:tid 9908] [client 158.158.109.150:62786] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "aeLlcYCFeowknfXHM7lpcQAAAEM"]
[Sat Apr 18 09:59:14.770017 2026] [:error] [pid 34237:tid 34240] [client 158.158.109.150:11339] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "aeLlchBmX4Wq5a6rxfYP_wAAAUE"]
[Sat Apr 18 09:59:15.940547 2026] [:error] [pid 13023:tid 13035] [client 158.158.109.150:62796] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "aeLlc_1e7hG8DAeABB9nQwAAAQo"]
[Sat Apr 18 09:59:16.888310 2026] [:error] [pid 13023:tid 13042] [client 158.158.109.150:62827] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xynz.php"] [unique_id "aeLldP1e7hG8DAeABB9nTQAAARE"]
[Sat Apr 18 09:59:17.949759 2026] [:error] [pid 34288:tid 34299] [client 158.158.109.150:65253] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xynz.php"] [unique_id "aeLldeTIiy__PtiLmplsPwAAAYc"]
[Sat Apr 18 09:59:18.651513 2026] [:error] [pid 9865:tid 9949] [client 158.158.109.150:58870] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xynz.php"] [unique_id "aeLldqzb5knECIY-C-j0VgAAAIw"]
[Sat Apr 18 09:59:19.198060 2026] [:error] [pid 13023:tid 13044] [client 158.158.109.150:65273] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xynz.php"] [unique_id "aeLld_1e7hG8DAeABB9nWwAAARM"]
[Sat Apr 18 09:59:19.761599 2026] [:error] [pid 9970:tid 9994] [client 158.158.109.150:58864] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-01ul.php"] [unique_id "aeLldyYdRLRhVmaIMx0e_AAAANQ"]
[Sat Apr 18 09:59:20.356410 2026] [:error] [pid 34290:tid 34321] [client 158.158.109.150:58299] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-01ul.php"] [unique_id "aeLleBqX6WpmmAXOBi-IfwAAAcI"]
[Sat Apr 18 09:59:21.064844 2026] [:error] [pid 9863:tid 9883] [client 158.158.109.150:58253] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-01ul.php"] [unique_id "aeLleTjjiypiFrTucbJHmwAAAAo"]
[Sat Apr 18 09:59:21.848580 2026] [:error] [pid 9863:tid 9890] [client 158.158.109.150:55874] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-01ul.php"] [unique_id "aeLleTjjiypiFrTucbJHoAAAABE"]
[Sat Apr 18 09:59:22.395685 2026] [:error] [pid 13023:tid 13033] [client 158.158.109.150:55903] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/e7.php"] [unique_id "aeLlev1e7hG8DAeABB9nYwAAAQg"]
[Sat Apr 18 09:59:22.986164 2026] [:error] [pid 34288:tid 34310] [client 158.158.109.150:58270] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/e7.php"] [unique_id "aeLleuTIiy__PtiLmplsQgAAAZI"]
[Sat Apr 18 09:59:23.502022 2026] [:error] [pid 9970:tid 9993] [client 158.158.109.150:52559] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/e7.php"] [unique_id "aeLleyYdRLRhVmaIMx0fAwAAANM"]
[Sat Apr 18 09:59:24.041532 2026] [:error] [pid 34290:tid 34327] [client 158.158.109.150:52544] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/e7.php"] [unique_id "aeLlfBqX6WpmmAXOBi-IhgAAAcg"]
[Sat Apr 18 09:59:24.586293 2026] [:error] [pid 13023:tid 13027] [client 158.158.109.150:58835] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/e3.php"] [unique_id "aeLlfP1e7hG8DAeABB9naQAAAQI"]
[Sat Apr 18 09:59:25.325345 2026] [:error] [pid 9865:tid 9961] [client 158.158.109.150:58248] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/e3.php"] [unique_id "aeLlfazb5knECIY-C-j0YwAAAJg"]
[Sat Apr 18 09:59:25.932742 2026] [:error] [pid 13023:tid 13039] [client 158.158.109.150:11350] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/e3.php"] [unique_id "aeLlff1e7hG8DAeABB9nbQAAAQ4"]
[Sat Apr 18 09:59:26.433544 2026] [:error] [pid 9863:tid 9893] [client 158.158.109.150:58853] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/e3.php"] [unique_id "aeLlfjjjiypiFrTucbJHpQAAABQ"]
[Sat Apr 18 09:59:27.108142 2026] [:error] [pid 34288:tid 34295] [client 158.158.109.150:55910] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/aevly.php"] [unique_id "aeLlf-TIiy__PtiLmplsSAAAAYM"]
[Sat Apr 18 09:59:27.889943 2026] [:error] [pid 9970:tid 9982] [client 158.158.109.150:52579] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/aevly.php"] [unique_id "aeLlfyYdRLRhVmaIMx0fCQAAAMg"]
[Sat Apr 18 09:59:28.669077 2026] [:error] [pid 34288:tid 34300] [client 158.158.109.150:52570] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/aevly.php"] [unique_id "aeLlgOTIiy__PtiLmplsUwAAAYg"]
[Sat Apr 18 09:59:29.207201 2026] [:error] [pid 9864:tid 9921] [client 158.158.109.150:54482] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/aevly.php"] [unique_id "aeLlgYCFeowknfXHM7lpfAAAAE8"]
[Sat Apr 18 09:59:29.928870 2026] [:error] [pid 9863:tid 9877] [client 158.158.109.150:54504] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "aeLlgTjjiypiFrTucbJHqAAAAAQ"]
[Sat Apr 18 09:59:30.808422 2026] [:error] [pid 9970:tid 9977] [client 158.158.109.150:58841] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "aeLlgiYdRLRhVmaIMx0fEwAAAMM"]
[Sat Apr 18 09:59:31.648673 2026] [:error] [pid 13023:tid 13038] [client 158.158.109.150:53057] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "aeLlg_1e7hG8DAeABB9ncwAAAQ0"]
[Sat Apr 18 09:59:32.543740 2026] [:error] [pid 13023:tid 13033] [client 158.158.109.150:65225] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "aeLlhP1e7hG8DAeABB9neQAAAQg"]
[Sat Apr 18 09:59:33.528815 2026] [:error] [pid 13023:tid 13036] [client 158.158.109.150:11306] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-class.php"] [unique_id "aeLlhf1e7hG8DAeABB9nhQAAAQs"]
[Sat Apr 18 09:59:34.830150 2026] [:error] [pid 34237:tid 34246] [client 158.158.109.150:53086] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-class.php"] [unique_id "aeLlhhBmX4Wq5a6rxfYQFgAAAUc"]
[Sat Apr 18 09:59:42.381728 2026] [:error] [pid 9863:tid 9894] [client 158.158.109.150:65261] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/goods_260401065719.php"] [unique_id "aeLljjjjiypiFrTucbJH5gAAABU"]
[Sat Apr 18 09:59:43.635132 2026] [:error] [pid 9865:tid 9961] [client 158.158.109.150:54510] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/goods_260401065719.php"] [unique_id "aeLlj6zb5knECIY-C-j0bwAAAJg"]
[Sat Apr 18 09:59:44.571534 2026] [:error] [pid 13023:tid 13047] [client 158.158.109.150:58818] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/goods_260401065719.php"] [unique_id "aeLlkP1e7hG8DAeABB9nsQAAARY"]
[Sat Apr 18 09:59:45.505654 2026] [:error] [pid 13023:tid 13031] [client 158.158.109.150:54492] [client 158.158.109.150] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/goods_260401065719.php"] [unique_id "aeLlkf1e7hG8DAeABB9ntAAAAQY"]
[Sat Apr 18 13:41:48.423756 2026] [:error] [pid 9970:tid 9983] [client 20.215.185.132:23347] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tentang_rmol.php"] [unique_id "aeMZnCYdRLRhVmaIMx1dUgAAAMk"]
[Sat Apr 18 13:41:48.935374 2026] [:error] [pid 9970:tid 9981] [client 20.215.185.132:21081] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tentang_rmol.php"] [unique_id "aeMZnCYdRLRhVmaIMx1dVAAAAMc"]
[Sat Apr 18 13:41:49.446380 2026] [:error] [pid 9970:tid 9976] [client 20.215.185.132:29852] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tentang_rmol.php"] [unique_id "aeMZnSYdRLRhVmaIMx1dWAAAAMI"]
[Sat Apr 18 13:41:49.961083 2026] [:error] [pid 9864:tid 9918] [client 20.215.185.132:39031] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tentang_rmol.php"] [unique_id "aeMZnYCFeowknfXHM7mmDQAAAEw"]
[Sat Apr 18 13:41:50.471834 2026] [:error] [pid 13023:tid 13034] [client 20.215.185.132:22778] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yellow.php"] [unique_id "aeMZnv1e7hG8DAeABB-3GgAAAQk"]
[Sat Apr 18 13:41:50.982772 2026] [:error] [pid 13023:tid 13041] [client 20.215.185.132:29825] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yellow.php"] [unique_id "aeMZnv1e7hG8DAeABB-3HQAAARA"]
[Sat Apr 18 13:41:51.494761 2026] [:error] [pid 13023:tid 13032] [client 20.215.185.132:39021] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yellow.php"] [unique_id "aeMZn_1e7hG8DAeABB-3HwAAAQc"]
[Sat Apr 18 13:41:52.005576 2026] [:error] [pid 9864:tid 9926] [client 20.215.185.132:22520] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yellow.php"] [unique_id "aeMZoICFeowknfXHM7mmDwAAAFQ"]
[Sat Apr 18 13:41:52.515884 2026] [:error] [pid 34290:tid 34334] [client 20.215.185.132:24375] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/block-template-utils.php"] [unique_id "aeMZoBqX6WpmmAXOBi-35QAAAc8"]
[Sat Apr 18 13:41:53.025820 2026] [:error] [pid 9863:tid 9893] [client 20.215.185.132:29845] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/block-template-utils.php"] [unique_id "aeMZoTjjiypiFrTucbKXlwAAABQ"]
[Sat Apr 18 13:41:53.537540 2026] [:error] [pid 9865:tid 9943] [client 20.215.185.132:25058] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/block-template-utils.php"] [unique_id "aeMZoazb5knECIY-C-gqnAAAAIY"]
[Sat Apr 18 13:41:54.047991 2026] [:error] [pid 9970:tid 9993] [client 20.215.185.132:23357] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/block-template-utils.php"] [unique_id "aeMZoiYdRLRhVmaIMx1dWwAAANM"]
[Sat Apr 18 13:41:54.644315 2026] [:error] [pid 9863:tid 9873] [client 20.215.185.132:21090] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/14.php"] [unique_id "aeMZojjjiypiFrTucbKXmgAAAAA"]
[Sat Apr 18 13:41:55.171152 2026] [:error] [pid 9863:tid 9887] [client 20.215.185.132:25607] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/14.php"] [unique_id "aeMZozjjiypiFrTucbKXnAAAAA4"]
[Sat Apr 18 13:41:55.700724 2026] [:error] [pid 13023:tid 13048] [client 20.215.185.132:23300] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/14.php"] [unique_id "aeMZo_1e7hG8DAeABB-3JAAAARc"]
[Sat Apr 18 13:41:56.214871 2026] [:error] [pid 13023:tid 13030] [client 20.215.185.132:27315] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/14.php"] [unique_id "aeMZpP1e7hG8DAeABB-3JwAAAQU"]
[Sat Apr 18 13:41:56.732908 2026] [:error] [pid 9864:tid 9927] [client 20.215.185.132:22729] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/update_with_pics.php"] [unique_id "aeMZpICFeowknfXHM7mmEAAAAFU"]
[Sat Apr 18 13:41:57.252008 2026] [:error] [pid 34290:tid 34322] [client 20.215.185.132:29830] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/update_with_pics.php"] [unique_id "aeMZpRqX6WpmmAXOBi-36AAAAcM"]
[Sat Apr 18 13:41:57.794742 2026] [:error] [pid 9865:tid 9950] [client 20.215.185.132:24346] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/update_with_pics.php"] [unique_id "aeMZpazb5knECIY-C-gqpAAAAI0"]
[Sat Apr 18 13:41:58.335121 2026] [:error] [pid 13023:tid 13039] [client 20.215.185.132:25081] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/update_with_pics.php"] [unique_id "aeMZpv1e7hG8DAeABB-3LAAAAQ4"]
[Sat Apr 18 13:41:58.849560 2026] [:error] [pid 13023:tid 13048] [client 20.215.185.132:39012] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/date-object.php"] [unique_id "aeMZpv1e7hG8DAeABB-3LgAAARc"]
[Sat Apr 18 13:41:59.365165 2026] [:error] [pid 9970:tid 9997] [client 20.215.185.132:29867] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/date-object.php"] [unique_id "aeMZpyYdRLRhVmaIMx1dXgAAANc"]
[Sat Apr 18 13:41:59.879559 2026] [:error] [pid 9970:tid 9984] [client 20.215.185.132:29838] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/date-object.php"] [unique_id "aeMZpyYdRLRhVmaIMx1dXwAAAMo"]
[Sat Apr 18 13:42:00.392661 2026] [:error] [pid 9864:tid 9930] [client 20.215.185.132:21058] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/date-object.php"] [unique_id "aeMZqICFeowknfXHM7mmFgAAAFg"]
[Sat Apr 18 13:42:00.916745 2026] [:error] [pid 9865:tid 9958] [client 20.215.185.132:29846] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/w-1.php"] [unique_id "aeMZqKzb5knECIY-C-gqpQAAAJU"]
[Sat Apr 18 13:42:01.462190 2026] [:error] [pid 34288:tid 34295] [client 20.215.185.132:24356] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/w-1.php"] [unique_id "aeMZqeTIiy__PtiLmpmb2gAAAYM"]
[Sat Apr 18 13:42:01.977862 2026] [:error] [pid 9864:tid 9910] [client 20.215.185.132:27312] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/w-1.php"] [unique_id "aeMZqYCFeowknfXHM7mmFwAAAEU"]
[Sat Apr 18 13:42:02.487374 2026] [:error] [pid 34288:tid 34312] [client 20.215.185.132:39022] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/w-1.php"] [unique_id "aeMZquTIiy__PtiLmpmb2wAAAZQ"]
[Sat Apr 18 13:42:02.997612 2026] [:error] [pid 34237:tid 34249] [client 20.215.185.132:22783] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zwso.php"] [unique_id "aeMZqhBmX4Wq5a6rxfYwZwAAAUo"]
[Sat Apr 18 13:42:03.510188 2026] [:error] [pid 9864:tid 9926] [client 20.215.185.132:23339] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zwso.php"] [unique_id "aeMZq4CFeowknfXHM7mmGQAAAFQ"]
[Sat Apr 18 13:42:04.020157 2026] [:error] [pid 13023:tid 13047] [client 20.215.185.132:3947] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zwso.php"] [unique_id "aeMZrP1e7hG8DAeABB-3LwAAARY"]
[Sat Apr 18 13:42:04.529841 2026] [:error] [pid 34290:tid 34341] [client 20.215.185.132:30855] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zwso.php"] [unique_id "aeMZrBqX6WpmmAXOBi-37QAAAdY"]
[Sat Apr 18 13:42:05.041266 2026] [:error] [pid 13023:tid 13042] [client 20.215.185.132:38999] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bbh.php"] [unique_id "aeMZrf1e7hG8DAeABB-3MQAAARE"]
[Sat Apr 18 13:42:05.551151 2026] [:error] [pid 34237:tid 34256] [client 20.215.185.132:39030] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bbh.php"] [unique_id "aeMZrRBmX4Wq5a6rxfYwagAAAVE"]
[Sat Apr 18 13:42:06.062055 2026] [:error] [pid 34237:tid 34255] [client 20.215.185.132:25064] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bbh.php"] [unique_id "aeMZrhBmX4Wq5a6rxfYwbQAAAVA"]
[Sat Apr 18 13:42:06.580331 2026] [:error] [pid 9864:tid 9916] [client 20.215.185.132:22772] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bbh.php"] [unique_id "aeMZroCFeowknfXHM7mmHAAAAEo"]
[Sat Apr 18 13:42:07.090666 2026] [:error] [pid 9864:tid 9912] [client 20.215.185.132:25036] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gool.php"] [unique_id "aeMZr4CFeowknfXHM7mmHgAAAEY"]
[Sat Apr 18 13:42:07.603091 2026] [:error] [pid 13023:tid 13040] [client 20.215.185.132:23357] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gool.php"] [unique_id "aeMZr_1e7hG8DAeABB-3MwAAAQ8"]
[Sat Apr 18 13:42:08.114285 2026] [:error] [pid 9863:tid 9887] [client 20.215.185.132:3958] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gool.php"] [unique_id "aeMZsDjjiypiFrTucbKXowAAAA4"]
[Sat Apr 18 13:42:08.625943 2026] [:error] [pid 9865:tid 9955] [client 20.215.185.132:29586] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gool.php"] [unique_id "aeMZsKzb5knECIY-C-gqqQAAAJI"]
[Sat Apr 18 13:42:09.140418 2026] [:error] [pid 9865:tid 9944] [client 20.215.185.132:25062] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class-wp-pagebuilders-BDsjLk.php"] [unique_id "aeMZsazb5knECIY-C-gqqwAAAIc"]
[Sat Apr 18 13:42:09.651828 2026] [:error] [pid 34288:tid 34302] [client 20.215.185.132:24754] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class-wp-pagebuilders-BDsjLk.php"] [unique_id "aeMZseTIiy__PtiLmpmb3wAAAYo"]
[Sat Apr 18 13:42:10.169974 2026] [:error] [pid 34290:tid 34336] [client 20.215.185.132:17708] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class-wp-pagebuilders-BDsjLk.php"] [unique_id "aeMZshqX6WpmmAXOBi-38AAAAdE"]
[Sat Apr 18 13:42:10.683449 2026] [:error] [pid 9865:tid 9947] [client 20.215.185.132:17712] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class-wp-pagebuilders-BDsjLk.php"] [unique_id "aeMZsqzb5knECIY-C-gqsQAAAIo"]
[Sat Apr 18 13:42:11.197833 2026] [:error] [pid 9865:tid 9953] [client 20.215.185.132:29604] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/iiiihjwn.php"] [unique_id "aeMZs6zb5knECIY-C-gqswAAAJA"]
[Sat Apr 18 13:42:11.763451 2026] [:error] [pid 9865:tid 9960] [client 20.215.185.132:22489] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/iiiihjwn.php"] [unique_id "aeMZs6zb5knECIY-C-gqtAAAAJc"]
[Sat Apr 18 13:42:12.277185 2026] [:error] [pid 13023:tid 13048] [client 20.215.185.132:19396] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/iiiihjwn.php"] [unique_id "aeMZtP1e7hG8DAeABB-3NgAAARc"]
[Sat Apr 18 13:42:12.803004 2026] [:error] [pid 9865:tid 9946] [client 20.215.185.132:29568] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/iiiihjwn.php"] [unique_id "aeMZtKzb5knECIY-C-gqugAAAIk"]
[Sat Apr 18 13:42:13.323976 2026] [:error] [pid 9865:tid 9959] [client 20.215.185.132:22038] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ru_RU_lite.mo.php"] [unique_id "aeMZtazb5knECIY-C-gqvQAAAJY"]
[Sat Apr 18 13:42:13.834484 2026] [:error] [pid 9865:tid 9947] [client 20.215.185.132:22024] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ru_RU_lite.mo.php"] [unique_id "aeMZtazb5knECIY-C-gqwQAAAIo"]
[Sat Apr 18 13:42:14.346140 2026] [:error] [pid 34290:tid 34331] [client 20.215.185.132:23570] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ru_RU_lite.mo.php"] [unique_id "aeMZthqX6WpmmAXOBi-39AAAAcw"]
[Sat Apr 18 13:42:14.886153 2026] [:error] [pid 34290:tid 34335] [client 20.215.185.132:17676] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ru_RU_lite.mo.php"] [unique_id "aeMZthqX6WpmmAXOBi-39QAAAdA"]
[Sat Apr 18 13:42:15.411695 2026] [:error] [pid 9864:tid 9915] [client 20.215.185.132:23604] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wpputty.php"] [unique_id "aeMZt4CFeowknfXHM7mmIgAAAEk"]
[Sat Apr 18 13:42:15.929288 2026] [:error] [pid 9864:tid 9907] [client 20.215.185.132:27806] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wpputty.php"] [unique_id "aeMZt4CFeowknfXHM7mmIwAAAEI"]
[Sat Apr 18 13:42:16.473284 2026] [:error] [pid 34290:tid 34341] [client 20.215.185.132:27515] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wpputty.php"] [unique_id "aeMZuBqX6WpmmAXOBi-3-QAAAdY"]
[Sat Apr 18 13:42:17.001361 2026] [:error] [pid 34288:tid 34306] [client 20.215.185.132:18066] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wpputty.php"] [unique_id "aeMZueTIiy__PtiLmpmb4AAAAY4"]
[Sat Apr 18 13:42:17.517467 2026] [:error] [pid 34290:tid 34334] [client 20.215.185.132:3601] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dodo.php"] [unique_id "aeMZuRqX6WpmmAXOBi-3_AAAAc8"]
[Sat Apr 18 13:42:18.027835 2026] [:error] [pid 13023:tid 13038] [client 20.215.185.132:3835] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dodo.php"] [unique_id "aeMZuv1e7hG8DAeABB-3NwAAAQ0"]
[Sat Apr 18 13:42:18.552785 2026] [:error] [pid 13023:tid 13027] [client 20.215.185.132:23565] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dodo.php"] [unique_id "aeMZuv1e7hG8DAeABB-3OQAAAQI"]
[Sat Apr 18 13:42:19.066180 2026] [:error] [pid 9864:tid 9916] [client 20.215.185.132:27516] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dodo.php"] [unique_id "aeMZu4CFeowknfXHM7mmJwAAAEo"]
[Sat Apr 18 13:42:19.576479 2026] [:error] [pid 34288:tid 34310] [client 20.215.185.132:27715] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-post-data.php"] [unique_id "aeMZu-TIiy__PtiLmpmb4wAAAZI"]
[Sat Apr 18 13:42:20.085882 2026] [:error] [pid 9865:tid 9958] [client 20.215.185.132:18054] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-post-data.php"] [unique_id "aeMZvKzb5knECIY-C-gqwwAAAJU"]
[Sat Apr 18 13:42:20.599011 2026] [:error] [pid 34288:tid 34300] [client 20.215.185.132:39674] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-post-data.php"] [unique_id "aeMZvOTIiy__PtiLmpmb5AAAAYg"]
[Sat Apr 18 13:42:21.109228 2026] [:error] [pid 34288:tid 34298] [client 20.215.185.132:26342] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-post-data.php"] [unique_id "aeMZveTIiy__PtiLmpmb5QAAAYY"]
[Sat Apr 18 13:42:21.620396 2026] [:error] [pid 9864:tid 9913] [client 20.215.185.132:18074] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class-wp-recovery-mode-key-service-add.php"] [unique_id "aeMZvYCFeowknfXHM7mmKQAAAEc"]
[Sat Apr 18 13:42:22.130543 2026] [:error] [pid 9864:tid 9918] [client 20.215.185.132:27498] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class-wp-recovery-mode-key-service-add.php"] [unique_id "aeMZvoCFeowknfXHM7mmLQAAAEw"]
[Sat Apr 18 13:42:22.641014 2026] [:error] [pid 9970:tid 9983] [client 20.215.185.132:26312] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class-wp-recovery-mode-key-service-add.php"] [unique_id "aeMZviYdRLRhVmaIMx1dZwAAAMk"]
[Sat Apr 18 13:42:23.152463 2026] [:error] [pid 34288:tid 34311] [client 20.215.185.132:3693] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class-wp-recovery-mode-key-service-add.php"] [unique_id "aeMZv-TIiy__PtiLmpmb6AAAAZM"]
[Sat Apr 18 13:42:23.666820 2026] [:error] [pid 9863:tid 9888] [client 20.215.185.132:52893] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Marvins.php"] [unique_id "aeMZvzjjiypiFrTucbKXpgAAAA8"]
[Sat Apr 18 13:42:24.177009 2026] [:error] [pid 13023:tid 13028] [client 20.215.185.132:52902] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Marvins.php"] [unique_id "aeMZwP1e7hG8DAeABB-3PQAAAQM"]
[Sat Apr 18 13:42:24.692687 2026] [:error] [pid 13023:tid 13045] [client 20.215.185.132:23339] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Marvins.php"] [unique_id "aeMZwP1e7hG8DAeABB-3PgAAARQ"]
[Sat Apr 18 13:42:25.202372 2026] [:error] [pid 34237:tid 34243] [client 20.215.185.132:28259] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Marvins.php"] [unique_id "aeMZwRBmX4Wq5a6rxfYwcwAAAUQ"]
[Sat Apr 18 13:42:25.729968 2026] [:error] [pid 34290:tid 34342] [client 20.215.185.132:23760] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/astab.php"] [unique_id "aeMZwRqX6WpmmAXOBi-4BAAAAdc"]
[Sat Apr 18 13:42:26.243004 2026] [:error] [pid 34290:tid 34340] [client 20.215.185.132:28486] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/astab.php"] [unique_id "aeMZwhqX6WpmmAXOBi-4BgAAAdU"]
[Sat Apr 18 13:42:26.755126 2026] [:error] [pid 34288:tid 34292] [client 20.215.185.132:23758] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/astab.php"] [unique_id "aeMZwuTIiy__PtiLmpmb7QAAAYA"]
[Sat Apr 18 13:42:27.268412 2026] [:error] [pid 34290:tid 34333] [client 20.215.185.132:52870] [client 20.215.185.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/astab.php"] [unique_id "aeMZwxqX6WpmmAXOBi-4CQAAAc4"]
[Sat Apr 18 17:35:05.723949 2026] [:error] [pid 34290:tid 34339] [client 136.109.247.201:51552] [client 136.109.247.201] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.109.247.201, incrementing ddos counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aeNQSRqX6WpmmAXOBi_tXwAAAdQ"]
[Sat Apr 18 17:35:05.976818 2026] [:error] [pid 34290:tid 34326] [client 136.109.247.201:51552] [client 136.109.247.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/"] [unique_id "aeNQSRqX6WpmmAXOBi_tYQAAAcc"]
[Sat Apr 18 17:35:06.749643 2026] [:error] [pid 13023:tid 13033] [client 136.109.247.201:54394] [client 136.109.247.201] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aeNQSv1e7hG8DAeABB_eSwAAAQg"]
[Sun Apr 19 04:44:32.256694 2026] [:error] [pid 47773:tid 47836] [client 3.39.244.108:53930] [client 3.39.244.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aePtMOiBHdnCJDuPq9AzcwAAAFQ"]
[Sun Apr 19 04:44:33.048300 2026] [:error] [pid 15764:tid 15837] [client 3.39.244.108:53980] [client 3.39.244.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env"] [unique_id "aePtMWLL_sqdSHoVp-TgvgAAAks"]
[Sun Apr 19 04:44:33.665776 2026] [:error] [pid 47773:tid 47823] [client 3.39.244.108:54024] [client 3.39.244.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "aePtMeiBHdnCJDuPq9AzdgAAAEc"]
[Sun Apr 19 04:44:34.279160 2026] [:error] [pid 47886:tid 47902] [client 3.39.244.108:54044] [client 3.39.244.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.production"] [unique_id "aePtMkSe8yiyuPrD7yPcjgAAAM4"]
[Sun Apr 19 04:44:34.888315 2026] [:error] [pid 47772:tid 47800] [client 3.39.244.108:54070] [client 3.39.244.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.staging"] [unique_id "aePtMoc0L16cb4smAz-IrQAAAAs"]
[Sun Apr 19 04:44:35.493369 2026] [:error] [pid 47773:tid 47836] [client 3.39.244.108:34604] [client 3.39.244.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.development"] [unique_id "aePtM-iBHdnCJDuPq9AzhwAAAFQ"]
[Sun Apr 19 04:44:36.103908 2026] [:error] [pid 47772:tid 47812] [client 3.39.244.108:34640] [client 3.39.244.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.test"] [unique_id "aePtNIc0L16cb4smAz-IsgAAABc"]
[Sun Apr 19 04:44:36.715937 2026] [:error] [pid 15764:tid 15828] [client 3.39.244.108:34670] [client 3.39.244.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.remote"] [unique_id "aePtNGLL_sqdSHoVp-TgwgAAAkI"]
[Sun Apr 19 06:24:00.251603 2026] [:error] [pid 15693:tid 15711] [client 3.250.2.106:52474] [client 3.250.2.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aeQEgMNMD-ccazQlTskaHwAAAU8"]
[Sun Apr 19 06:24:01.558832 2026] [:error] [pid 15764:tid 15827] [client 3.250.2.106:52584] [client 3.250.2.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env"] [unique_id "aeQEgWLL_sqdSHoVp-T0NgAAAkE"]
[Sun Apr 19 06:24:02.582314 2026] [:error] [pid 15694:tid 15730] [client 3.250.2.106:52632] [client 3.250.2.106] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "aeQEgrimB-jol1fwqArATQAAAYQ"]
[Sun Apr 19 19:13:25.661059 2026] [:error] [pid 15763:tid 15814] [client 213.35.109.170:55042] [client 213.35.109.170] ModSecurity: Access denied with code 403 (phase 2). Found 1 byte(s) in ARGS:auth outside range: 1-255. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "95"] [id "210410"] [rev "4"] [msg "COMODO WAF: Invalid character in request||measureyourcause.measureyourbrand.com.au|F|3"] [data "ARGS:auth=\\x00"] [severity "ERROR"] [tag "CWAF"] [tag "Protocol"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/wp-automatic/inc/csv.php"] [unique_id "aeS41bMXv1Y1THOoxaDVqwAAAhI"]
[Sun Apr 19 20:56:46.772357 2026] [:error] [pid 15763:tid 15814] [client 74.248.130.1:13062] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-temp.php"] [unique_id "aeTRDrMXv1Y1THOoxaDxDgAAAhI"]
[Sun Apr 19 20:56:47.463065 2026] [:error] [pid 15760:tid 15775] [client 74.248.130.1:31079] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-temp.php"] [unique_id "aeTRD_SdD_XHQMJ_ISscVgAAAcc"]
[Sun Apr 19 20:56:48.101557 2026] [:error] [pid 15764:tid 15839] [client 74.248.130.1:62960] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-temp.php"] [unique_id "aeTREGLL_sqdSHoVp-QI4QAAAk0"]
[Sun Apr 19 20:56:48.725506 2026] [:error] [pid 15764:tid 15830] [client 74.248.130.1:13671] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-temp.php"] [unique_id "aeTREGLL_sqdSHoVp-QI5AAAAkQ"]
[Sun Apr 19 20:56:49.392288 2026] [:error] [pid 15764:tid 15829] [client 74.248.130.1:13538] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/t00l.php"] [unique_id "aeTREWLL_sqdSHoVp-QI5QAAAkM"]
[Sun Apr 19 20:56:50.158663 2026] [:error] [pid 15760:tid 15770] [client 74.248.130.1:13095] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/t00l.php"] [unique_id "aeTREvSdD_XHQMJ_ISscXgAAAcI"]
[Sun Apr 19 20:56:51.182380 2026] [:error] [pid 15764:tid 15845] [client 74.248.130.1:13016] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/t00l.php"] [unique_id "aeTRE2LL_sqdSHoVp-QI7QAAAlM"]
[Sun Apr 19 20:56:51.896407 2026] [:error] [pid 15764:tid 15826] [client 74.248.130.1:13011] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/t00l.php"] [unique_id "aeTRE2LL_sqdSHoVp-QI8QAAAkA"]
[Sun Apr 19 20:56:53.026559 2026] [:error] [pid 15765:tid 15875] [client 74.248.130.1:13663] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/CDX2.php"] [unique_id "aeTRFfRqinw-W5EwQ773QQAAApY"]
[Sun Apr 19 20:56:54.128271 2026] [:error] [pid 47772:tid 47813] [client 74.248.130.1:13114] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/CDX2.php"] [unique_id "aeTRFoc0L16cb4smAz-zGQAAABg"]
[Sun Apr 19 20:56:55.149866 2026] [:error] [pid 47775:tid 47851] [client 74.248.130.1:62949] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/CDX2.php"] [unique_id "aeTRF7mztjlk9tsmoewP_gAAAIg"]
[Sun Apr 19 20:56:55.974181 2026] [:error] [pid 47772:tid 47799] [client 74.248.130.1:13074] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/CDX2.php"] [unique_id "aeTRF4c0L16cb4smAz-zHgAAAAo"]
[Sun Apr 19 20:56:56.555657 2026] [:error] [pid 47772:tid 47803] [client 74.248.130.1:13542] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Cap.php"] [unique_id "aeTRGIc0L16cb4smAz-zIQAAAA4"]
[Sun Apr 19 20:56:57.672344 2026] [:error] [pid 47772:tid 47792] [client 74.248.130.1:13662] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Cap.php"] [unique_id "aeTRGYc0L16cb4smAz-zJgAAAAM"]
[Sun Apr 19 20:56:58.384403 2026] [:error] [pid 15694:tid 15724] [client 74.248.130.1:13060] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Cap.php"] [unique_id "aeTRGrimB-jol1fwqAoJ0AAAAYE"]
[Sun Apr 19 20:56:58.942189 2026] [:error] [pid 47772:tid 47809] [client 74.248.130.1:13059] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Cap.php"] [unique_id "aeTRGoc0L16cb4smAz-zLgAAABQ"]
[Sun Apr 19 20:56:59.765789 2026] [:error] [pid 47772:tid 47806] [client 74.248.130.1:31101] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/CDX1.php"] [unique_id "aeTRG4c0L16cb4smAz-zNwAAABE"]
[Sun Apr 19 20:57:00.382347 2026] [:error] [pid 47886:tid 47899] [client 74.248.130.1:13651] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/CDX1.php"] [unique_id "aeTRHESe8yiyuPrD7yNy8wAAAMs"]
[Sun Apr 19 20:57:00.991641 2026] [:error] [pid 15760:tid 15772] [client 74.248.130.1:31050] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/CDX1.php"] [unique_id "aeTRHPSdD_XHQMJ_ISsccgAAAcQ"]
[Sun Apr 19 20:57:01.559647 2026] [:error] [pid 47772:tid 47808] [client 74.248.130.1:13015] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/CDX1.php"] [unique_id "aeTRHYc0L16cb4smAz-zPAAAABM"]
[Sun Apr 19 20:57:02.265750 2026] [:error] [pid 15693:tid 15697] [client 74.248.130.1:13563] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeTRHsNMD-ccazQlTslYRwAAAUE"]
[Sun Apr 19 20:57:02.859989 2026] [:error] [pid 47886:tid 47893] [client 74.248.130.1:12999] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeTRHkSe8yiyuPrD7yNy-wAAAMU"]
[Sun Apr 19 20:57:03.432830 2026] [:error] [pid 15763:tid 15817] [client 74.248.130.1:13639] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeTRH7MXv1Y1THOoxaDxGwAAAhU"]
[Sun Apr 19 20:57:04.087061 2026] [:error] [pid 15760:tid 15773] [client 74.248.130.1:31046] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeTRIPSdD_XHQMJ_ISscdQAAAcU"]
[Sun Apr 19 20:57:04.963410 2026] [:error] [pid 15764:tid 15837] [client 74.248.130.1:62923] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeTRIGLL_sqdSHoVp-QJBgAAAks"]
[Sun Apr 19 20:57:05.762568 2026] [:error] [pid 15760:tid 15769] [client 74.248.130.1:12911] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeTRIfSdD_XHQMJ_ISscewAAAcE"]
[Sun Apr 19 20:57:06.632613 2026] [:error] [pid 15694:tid 15748] [client 74.248.130.1:31088] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeTRIrimB-jol1fwqAoJ2QAAAZY"]
[Sun Apr 19 20:57:07.281025 2026] [:error] [pid 15760:tid 15788] [client 74.248.130.1:62917] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeTRI_SdD_XHQMJ_ISscjAAAAdQ"]
[Sun Apr 19 20:57:07.838736 2026] [:error] [pid 15760:tid 15791] [client 74.248.130.1:13647] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class-bda.php"] [unique_id "aeTRI_SdD_XHQMJ_ISscjwAAAdc"]
[Sun Apr 19 20:57:08.474137 2026] [:error] [pid 15763:tid 15801] [client 74.248.130.1:13025] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class-bda.php"] [unique_id "aeTRJLMXv1Y1THOoxaDxIQAAAgU"]
[Sun Apr 19 20:57:09.067155 2026] [:error] [pid 15694:tid 15732] [client 74.248.130.1:43138] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class-bda.php"] [unique_id "aeTRJbimB-jol1fwqAoJ3AAAAYY"]
[Sun Apr 19 20:57:09.745372 2026] [:error] [pid 15760:tid 15774] [client 74.248.130.1:62914] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class-bda.php"] [unique_id "aeTRJfSdD_XHQMJ_ISscogAAAcY"]
[Sun Apr 19 20:57:10.479822 2026] [:error] [pid 47772:tid 47805] [client 74.248.130.1:13110] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bhm.php"] [unique_id "aeTRJoc0L16cb4smAz-zRwAAABA"]
[Sun Apr 19 20:57:11.050766 2026] [:error] [pid 15760:tid 15786] [client 74.248.130.1:31064] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bhm.php"] [unique_id "aeTRJ_SdD_XHQMJ_ISscsQAAAdI"]
[Sun Apr 19 20:57:11.653556 2026] [:error] [pid 15763:tid 15820] [client 74.248.130.1:13108] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bhm.php"] [unique_id "aeTRJ7MXv1Y1THOoxaDxIwAAAhg"]
[Sun Apr 19 20:57:12.546959 2026] [:error] [pid 15760:tid 15786] [client 74.248.130.1:13071] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bhm.php"] [unique_id "aeTRKPSdD_XHQMJ_ISscvAAAAdI"]
[Sun Apr 19 20:57:13.669136 2026] [:error] [pid 15763:tid 15815] [client 74.248.130.1:13067] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xozx.php"] [unique_id "aeTRKbMXv1Y1THOoxaDxKAAAAhM"]
[Sun Apr 19 20:57:14.392558 2026] [:error] [pid 15764:tid 15851] [client 74.248.130.1:13070] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xozx.php"] [unique_id "aeTRKmLL_sqdSHoVp-QJDAAAAlg"]
[Sun Apr 19 20:57:14.956648 2026] [:error] [pid 15764:tid 15850] [client 74.248.130.1:31061] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xozx.php"] [unique_id "aeTRKmLL_sqdSHoVp-QJDwAAAlc"]
[Sun Apr 19 20:57:15.582486 2026] [:error] [pid 15764:tid 15826] [client 74.248.130.1:13116] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xozx.php"] [unique_id "aeTRK2LL_sqdSHoVp-QJFQAAAkA"]
[Sun Apr 19 20:57:16.384699 2026] [:error] [pid 15764:tid 15830] [client 74.248.130.1:13018] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-Blogs.php"] [unique_id "aeTRLGLL_sqdSHoVp-QJGAAAAkQ"]
[Sun Apr 19 20:57:17.054187 2026] [:error] [pid 47772:tid 47807] [client 74.248.130.1:13632] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-Blogs.php"] [unique_id "aeTRLYc0L16cb4smAz-zSwAAABI"]
[Sun Apr 19 20:57:18.227198 2026] [:error] [pid 15760:tid 15792] [client 74.248.130.1:13061] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-Blogs.php"] [unique_id "aeTRLvSdD_XHQMJ_ISsc1QAAAdg"]
[Sun Apr 19 20:57:18.997547 2026] [:error] [pid 15760:tid 15782] [client 74.248.130.1:13669] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-Blogs.php"] [unique_id "aeTRLvSdD_XHQMJ_ISsc2QAAAc4"]
[Sun Apr 19 20:57:19.858745 2026] [:error] [pid 47772:tid 47797] [client 74.248.130.1:13078] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmu.php"] [unique_id "aeTRL4c0L16cb4smAz-zVwAAAAg"]
[Sun Apr 19 20:57:20.911108 2026] [:error] [pid 47772:tid 47790] [client 74.248.130.1:13513] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmu.php"] [unique_id "aeTRMIc0L16cb4smAz-zYAAAAAE"]
[Sun Apr 19 20:57:21.708786 2026] [:error] [pid 47772:tid 47797] [client 74.248.130.1:13524] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmu.php"] [unique_id "aeTRMYc0L16cb4smAz-zagAAAAg"]
[Sun Apr 19 20:57:22.544819 2026] [:error] [pid 47775:tid 47849] [client 74.248.130.1:13031] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmu.php"] [unique_id "aeTRMrmztjlk9tsmoewQDQAAAIY"]
[Sun Apr 19 20:57:23.485490 2026] [:error] [pid 15760:tid 15781] [client 74.248.130.1:13047] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ref.php"] [unique_id "aeTRM_SdD_XHQMJ_ISsc3gAAAc0"]
[Sun Apr 19 20:57:24.220823 2026] [:error] [pid 15765:tid 15860] [client 74.248.130.1:43153] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ref.php"] [unique_id "aeTRNPRqinw-W5EwQ773TwAAAoc"]
[Sun Apr 19 20:57:24.976732 2026] [:error] [pid 47886:tid 47904] [client 74.248.130.1:13044] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ref.php"] [unique_id "aeTRNESe8yiyuPrD7yNzEAAAANA"]
[Sun Apr 19 20:57:25.730622 2026] [:error] [pid 15764:tid 15840] [client 74.248.130.1:13638] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ref.php"] [unique_id "aeTRNWLL_sqdSHoVp-QJIgAAAk4"]
[Sun Apr 19 20:57:26.373631 2026] [:error] [pid 15764:tid 15839] [client 74.248.130.1:13644] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-xme.php"] [unique_id "aeTRNmLL_sqdSHoVp-QJJQAAAk0"]
[Sun Apr 19 20:57:26.995194 2026] [:error] [pid 15760:tid 15786] [client 74.248.130.1:62961] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-xme.php"] [unique_id "aeTRNvSdD_XHQMJ_ISsc6gAAAdI"]
[Sun Apr 19 20:57:27.947105 2026] [:error] [pid 47773:tid 47834] [client 74.248.130.1:13087] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-xme.php"] [unique_id "aeTRN-iBHdnCJDuPq9A7gAAAAFI"]
[Sun Apr 19 20:57:28.515977 2026] [:error] [pid 15760:tid 15781] [client 74.248.130.1:13004] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-xme.php"] [unique_id "aeTROPSdD_XHQMJ_ISsc7gAAAc0"]
[Sun Apr 19 20:57:29.103088 2026] [:error] [pid 15764:tid 15827] [client 74.248.130.1:13000] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adminer.php"] [unique_id "aeTROWLL_sqdSHoVp-QJLAAAAkE"]
[Sun Apr 19 20:57:29.788105 2026] [:error] [pid 47775:tid 47857] [client 74.248.130.1:62920] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adminer.php"] [unique_id "aeTRObmztjlk9tsmoewQEgAAAI4"]
[Sun Apr 19 20:57:30.343878 2026] [:error] [pid 47775:tid 47856] [client 74.248.130.1:13002] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adminer.php"] [unique_id "aeTROrmztjlk9tsmoewQFgAAAI0"]
[Sun Apr 19 20:57:30.932480 2026] [:error] [pid 47773:tid 47818] [client 74.248.130.1:13021] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adminer.php"] [unique_id "aeTROuiBHdnCJDuPq9A7igAAAEI"]
[Sun Apr 19 20:57:31.495058 2026] [:error] [pid 47772:tid 47796] [client 74.248.130.1:13005] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ktfow.php"] [unique_id "aeTRO4c0L16cb4smAz-zhQAAAAc"]
[Sun Apr 19 20:57:32.136460 2026] [:error] [pid 15764:tid 15826] [client 74.248.130.1:13045] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ktfow.php"] [unique_id "aeTRPGLL_sqdSHoVp-QJLQAAAkA"]
[Sun Apr 19 20:57:32.651994 2026] [:error] [pid 15764:tid 15837] [client 74.248.130.1:31052] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ktfow.php"] [unique_id "aeTRPGLL_sqdSHoVp-QJLwAAAks"]
[Sun Apr 19 20:57:33.410395 2026] [:error] [pid 47773:tid 47840] [client 74.248.130.1:62918] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ktfow.php"] [unique_id "aeTRPeiBHdnCJDuPq9A7lwAAAFg"]
[Sun Apr 19 20:57:33.999250 2026] [:error] [pid 15760:tid 15789] [client 74.248.130.1:62935] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mode.php"] [unique_id "aeTRPfSdD_XHQMJ_ISsc9gAAAdU"]
[Sun Apr 19 20:57:34.943653 2026] [:error] [pid 15694:tid 15725] [client 74.248.130.1:13641] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mode.php"] [unique_id "aeTRPrimB-jol1fwqAoJ6QAAAYI"]
[Sun Apr 19 20:57:35.611181 2026] [:error] [pid 15760:tid 15769] [client 74.248.130.1:13085] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mode.php"] [unique_id "aeTRP_SdD_XHQMJ_ISsc-gAAAcE"]
[Sun Apr 19 20:57:36.202819 2026] [:error] [pid 47773:tid 47834] [client 74.248.130.1:31098] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mode.php"] [unique_id "aeTRQOiBHdnCJDuPq9A7pAAAAFI"]
[Sun Apr 19 20:57:36.825406 2026] [:error] [pid 15760:tid 15768] [client 74.248.130.1:13633] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Xx.php"] [unique_id "aeTRQPSdD_XHQMJ_ISsc_wAAAcA"]
[Sun Apr 19 20:57:37.461052 2026] [:error] [pid 15760:tid 15777] [client 74.248.130.1:13645] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Xx.php"] [unique_id "aeTRQfSdD_XHQMJ_ISsdBQAAAck"]
[Sun Apr 19 20:57:38.112705 2026] [:error] [pid 47773:tid 47831] [client 74.248.130.1:13545] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Xx.php"] [unique_id "aeTRQuiBHdnCJDuPq9A7qQAAAE8"]
[Sun Apr 19 20:57:38.807344 2026] [:error] [pid 15760:tid 15783] [client 74.248.130.1:31045] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Xx.php"] [unique_id "aeTRQvSdD_XHQMJ_ISsdEwAAAc8"]
[Sun Apr 19 20:57:39.376200 2026] [:error] [pid 15760:tid 15787] [client 74.248.130.1:62945] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmini.php"] [unique_id "aeTRQ_SdD_XHQMJ_ISsdFgAAAdM"]
[Sun Apr 19 20:57:39.935170 2026] [:error] [pid 15760:tid 15792] [client 74.248.130.1:62966] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmini.php"] [unique_id "aeTRQ_SdD_XHQMJ_ISsdHAAAAdg"]
[Sun Apr 19 20:57:40.475777 2026] [:error] [pid 15694:tid 15751] [client 74.248.130.1:13668] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmini.php"] [unique_id "aeTRRLimB-jol1fwqAoJ7AAAAZg"]
[Sun Apr 19 20:57:40.994247 2026] [:error] [pid 47886:tid 47889] [client 74.248.130.1:62929] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmini.php"] [unique_id "aeTRRESe8yiyuPrD7yNzOgAAAME"]
[Sun Apr 19 20:57:41.676768 2026] [:error] [pid 15763:tid 15802] [client 74.248.130.1:31071] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2468.php"] [unique_id "aeTRRbMXv1Y1THOoxaDxOwAAAgY"]
[Sun Apr 19 20:57:42.215177 2026] [:error] [pid 47773:tid 47840] [client 74.248.130.1:13527] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2468.php"] [unique_id "aeTRRuiBHdnCJDuPq9A7rwAAAFg"]
[Sun Apr 19 20:57:42.779440 2026] [:error] [pid 47886:tid 47900] [client 74.248.130.1:13040] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2468.php"] [unique_id "aeTRRkSe8yiyuPrD7yNzPgAAAMw"]
[Sun Apr 19 20:57:43.420810 2026] [:error] [pid 47773:tid 47824] [client 74.248.130.1:13657] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2468.php"] [unique_id "aeTRR-iBHdnCJDuPq9A7twAAAEg"]
[Sun Apr 19 20:57:43.961890 2026] [:error] [pid 15693:tid 15702] [client 74.248.130.1:13075] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeTRR8NMD-ccazQlTslYUgAAAUY"]
[Sun Apr 19 20:57:44.539698 2026] [:error] [pid 15764:tid 15851] [client 74.248.130.1:43137] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeTRSGLL_sqdSHoVp-QJOAAAAlg"]
[Sun Apr 19 20:57:45.074153 2026] [:error] [pid 15763:tid 15814] [client 74.248.130.1:13666] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeTRSbMXv1Y1THOoxaDxRAAAAhI"]
[Sun Apr 19 20:57:45.614778 2026] [:error] [pid 47772:tid 47811] [client 74.248.130.1:13042] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "aeTRSYc0L16cb4smAz-zjQAAABY"]
[Sun Apr 19 20:57:55.246475 2026] [:error] [pid 15763:tid 15819] [client 74.248.130.1:62924] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "aeTRU7MXv1Y1THOoxaDxZgAAAhc"]
[Sun Apr 19 20:57:55.938454 2026] [:error] [pid 15764:tid 15834] [client 74.248.130.1:13551] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "aeTRU2LL_sqdSHoVp-QJWAAAAkg"]
[Sun Apr 19 20:57:56.676171 2026] [:error] [pid 15760:tid 15783] [client 74.248.130.1:62974] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "aeTRVPSdD_XHQMJ_ISsdcwAAAc8"]
[Sun Apr 19 20:57:57.495495 2026] [:error] [pid 47886:tid 47903] [client 74.248.130.1:31103] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "aeTRVUSe8yiyuPrD7yNzTwAAAM8"]
[Sun Apr 19 20:57:58.373801 2026] [:error] [pid 15764:tid 15828] [client 74.248.130.1:13073] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "aeTRVmLL_sqdSHoVp-QJWQAAAkI"]
[Sun Apr 19 20:57:58.990060 2026] [:error] [pid 15760:tid 15787] [client 74.248.130.1:13014] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "aeTRVvSdD_XHQMJ_ISsdfQAAAdM"]
[Sun Apr 19 20:57:59.623067 2026] [:error] [pid 15760:tid 15792] [client 74.248.130.1:31063] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "aeTRV_SdD_XHQMJ_ISsdggAAAdg"]
[Sun Apr 19 20:58:00.277592 2026] [:error] [pid 15760:tid 15784] [client 74.248.130.1:13543] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "aeTRWPSdD_XHQMJ_ISsdiAAAAdA"]
[Sun Apr 19 20:58:01.012957 2026] [:error] [pid 15763:tid 15812] [client 74.248.130.1:13112] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/13.php"] [unique_id "aeTRWbMXv1Y1THOoxaDxbQAAAhA"]
[Sun Apr 19 20:58:01.803757 2026] [:error] [pid 15763:tid 15816] [client 74.248.130.1:13528] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/13.php"] [unique_id "aeTRWbMXv1Y1THOoxaDxdQAAAhQ"]
[Sun Apr 19 20:58:02.566963 2026] [:error] [pid 15764:tid 15834] [client 74.248.130.1:31070] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/13.php"] [unique_id "aeTRWmLL_sqdSHoVp-QJXQAAAkg"]
[Sun Apr 19 20:58:03.265544 2026] [:error] [pid 15760:tid 15774] [client 74.248.130.1:13559] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/13.php"] [unique_id "aeTRW_SdD_XHQMJ_ISsdmgAAAcY"]
[Sun Apr 19 20:58:03.852440 2026] [:error] [pid 47772:tid 47794] [client 74.248.130.1:62970] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/11.php"] [unique_id "aeTRW4c0L16cb4smAz-zpgAAAAU"]
[Sun Apr 19 20:58:04.391645 2026] [:error] [pid 15694:tid 15736] [client 74.248.130.1:62932] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/11.php"] [unique_id "aeTRXLimB-jol1fwqAoJ8wAAAYo"]
[Sun Apr 19 20:58:04.944947 2026] [:error] [pid 15760:tid 15789] [client 74.248.130.1:62925] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/11.php"] [unique_id "aeTRXPSdD_XHQMJ_ISsdogAAAdU"]
[Sun Apr 19 20:58:05.482059 2026] [:error] [pid 47775:tid 47858] [client 74.248.130.1:13520] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/11.php"] [unique_id "aeTRXbmztjlk9tsmoewQSgAAAI8"]
[Sun Apr 19 20:58:06.084783 2026] [:error] [pid 47886:tid 47901] [client 74.248.130.1:31078] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/p.php"] [unique_id "aeTRXkSe8yiyuPrD7yNzVAAAAM0"]
[Sun Apr 19 20:58:06.690979 2026] [:error] [pid 15760:tid 15788] [client 74.248.130.1:62938] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/p.php"] [unique_id "aeTRXvSdD_XHQMJ_ISsdqwAAAdQ"]
[Sun Apr 19 20:58:07.426786 2026] [:error] [pid 15760:tid 15786] [client 74.248.130.1:13064] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/p.php"] [unique_id "aeTRX_SdD_XHQMJ_ISsdswAAAdI"]
[Sun Apr 19 20:58:08.006491 2026] [:error] [pid 15760:tid 15780] [client 74.248.130.1:31044] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/p.php"] [unique_id "aeTRYPSdD_XHQMJ_ISsdugAAAcw"]
[Sun Apr 19 20:58:08.685400 2026] [:error] [pid 15760:tid 15785] [client 74.248.130.1:13007] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeTRYPSdD_XHQMJ_ISsdvQAAAdE"]
[Sun Apr 19 20:58:09.259534 2026] [:error] [pid 47775:tid 47844] [client 74.248.130.1:62951] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeTRYbmztjlk9tsmoewQUwAAAIE"]
[Sun Apr 19 20:58:09.923487 2026] [:error] [pid 15764:tid 15837] [client 74.248.130.1:62975] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeTRYWLL_sqdSHoVp-QJZwAAAks"]
[Sun Apr 19 20:58:10.484125 2026] [:error] [pid 15760:tid 15776] [client 74.248.130.1:12997] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeTRYvSdD_XHQMJ_ISsdxAAAAcg"]
[Sun Apr 19 20:58:11.125744 2026] [:error] [pid 15760:tid 15789] [client 74.248.130.1:13665] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "aeTRY_SdD_XHQMJ_ISsdywAAAdU"]
[Sun Apr 19 20:58:11.917938 2026] [:error] [pid 15760:tid 15772] [client 74.248.130.1:31083] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "aeTRY_SdD_XHQMJ_ISsd1wAAAcQ"]
[Sun Apr 19 20:58:12.536766 2026] [:error] [pid 15764:tid 15839] [client 74.248.130.1:13634] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "aeTRZGLL_sqdSHoVp-QJcAAAAk0"]
[Sun Apr 19 20:58:13.140128 2026] [:error] [pid 15694:tid 15748] [client 74.248.130.1:13640] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "aeTRZbimB-jol1fwqAoJ9AAAAZY"]
[Sun Apr 19 20:58:13.811168 2026] [:error] [pid 15765:tid 15864] [client 74.248.130.1:31092] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aeTRZfRqinw-W5EwQ773XgAAAos"]
[Sun Apr 19 20:58:14.437095 2026] [:error] [pid 47773:tid 47838] [client 74.248.130.1:13109] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aeTRZuiBHdnCJDuPq9A8DAAAAFY"]
[Sun Apr 19 20:58:15.038368 2026] [:error] [pid 47773:tid 47820] [client 74.248.130.1:62944] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aeTRZ-iBHdnCJDuPq9A8FQAAAEQ"]
[Sun Apr 19 20:58:15.669133 2026] [:error] [pid 15760:tid 15790] [client 74.248.130.1:12992] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aeTRZ_SdD_XHQMJ_ISseAAAAAdY"]
[Sun Apr 19 20:58:16.389697 2026] [:error] [pid 15760:tid 15787] [client 74.248.130.1:13051] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tea.php"] [unique_id "aeTRaPSdD_XHQMJ_ISseBgAAAdM"]
[Sun Apr 19 20:58:17.120457 2026] [:error] [pid 15694:tid 15725] [client 74.248.130.1:62937] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tea.php"] [unique_id "aeTRabimB-jol1fwqAoJ-QAAAYI"]
[Sun Apr 19 20:58:17.868605 2026] [:error] [pid 15765:tid 15853] [client 74.248.130.1:31085] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tea.php"] [unique_id "aeTRafRqinw-W5EwQ773YQAAAoE"]
[Sun Apr 19 20:58:18.584693 2026] [:error] [pid 47773:tid 47828] [client 74.248.130.1:31058] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tea.php"] [unique_id "aeTRauiBHdnCJDuPq9A8HAAAAEw"]
[Sun Apr 19 20:58:19.228467 2026] [:error] [pid 15765:tid 15856] [client 74.248.130.1:13035] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/seo.php"] [unique_id "aeTRa_Rqinw-W5EwQ773YwAAAoM"]
[Sun Apr 19 20:58:19.821567 2026] [:error] [pid 15693:tid 15718] [client 74.248.130.1:13529] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/seo.php"] [unique_id "aeTRa8NMD-ccazQlTslYWgAAAVY"]
[Sun Apr 19 20:58:20.443360 2026] [:error] [pid 47886:tid 47893] [client 74.248.130.1:62964] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/seo.php"] [unique_id "aeTRbESe8yiyuPrD7yNzWwAAAMU"]
[Sun Apr 19 20:58:21.113080 2026] [:error] [pid 47886:tid 47905] [client 74.248.130.1:13089] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/seo.php"] [unique_id "aeTRbUSe8yiyuPrD7yNzXQAAANE"]
[Sun Apr 19 20:58:22.081706 2026] [:error] [pid 15760:tid 15776] [client 74.248.130.1:62913] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/7.php"] [unique_id "aeTRbvSdD_XHQMJ_ISseFQAAAcg"]
[Sun Apr 19 20:58:22.973177 2026] [:error] [pid 15764:tid 15851] [client 74.248.130.1:13652] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/7.php"] [unique_id "aeTRbmLL_sqdSHoVp-QJfwAAAlg"]
[Sun Apr 19 20:58:23.826053 2026] [:error] [pid 15763:tid 15800] [client 74.248.130.1:13012] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/7.php"] [unique_id "aeTRb7MXv1Y1THOoxaDxoQAAAgQ"]
[Sun Apr 19 20:58:24.626225 2026] [:error] [pid 47773:tid 47819] [client 74.248.130.1:62939] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/7.php"] [unique_id "aeTRcOiBHdnCJDuPq9A8HgAAAEM"]
[Sun Apr 19 20:58:25.350033 2026] [:error] [pid 15760:tid 15785] [client 74.248.130.1:12899] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aeTRcfSdD_XHQMJ_ISseIgAAAdE"]
[Sun Apr 19 20:58:25.957862 2026] [:error] [pid 15763:tid 15798] [client 74.248.130.1:43196] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aeTRcbMXv1Y1THOoxaDxpgAAAgI"]
[Sun Apr 19 20:58:26.687441 2026] [:error] [pid 15760:tid 15774] [client 74.248.130.1:13549] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aeTRcvSdD_XHQMJ_ISseKQAAAcY"]
[Sun Apr 19 20:58:27.433277 2026] [:error] [pid 15763:tid 15799] [client 74.248.130.1:13063] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aeTRc7MXv1Y1THOoxaDxrgAAAgM"]
[Sun Apr 19 20:58:28.145719 2026] [:error] [pid 15763:tid 15796] [client 74.248.130.1:13069] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aeTRdLMXv1Y1THOoxaDxtAAAAgA"]
[Sun Apr 19 20:58:28.798460 2026] [:error] [pid 47772:tid 47790] [client 74.248.130.1:62959] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aeTRdIc0L16cb4smAz-0BAAAAAE"]
[Sun Apr 19 20:58:29.713617 2026] [:error] [pid 15760:tid 15771] [client 74.248.130.1:12993] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aeTRdfSdD_XHQMJ_ISseLQAAAcM"]
[Sun Apr 19 20:58:30.378840 2026] [:error] [pid 47772:tid 47805] [client 74.248.130.1:31093] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aeTRdoc0L16cb4smAz-0CwAAABA"]
[Sun Apr 19 20:58:31.096743 2026] [:error] [pid 15760:tid 15791] [client 74.248.130.1:13037] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "aeTRd_SdD_XHQMJ_ISseNAAAAdc"]
[Sun Apr 19 20:58:31.956703 2026] [:error] [pid 15760:tid 15769] [client 74.248.130.1:12907] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "aeTRd_SdD_XHQMJ_ISseOwAAAcE"]
[Sun Apr 19 20:58:32.568044 2026] [:error] [pid 47773:tid 47828] [client 74.248.130.1:13164] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "aeTReOiBHdnCJDuPq9A8JgAAAEw"]
[Sun Apr 19 20:58:33.226884 2026] [:error] [pid 47775:tid 47866] [client 74.248.130.1:12891] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "aeTRebmztjlk9tsmoewQYwAAAJc"]
[Sun Apr 19 20:58:33.824423 2026] [:error] [pid 15764:tid 15843] [client 74.248.130.1:62955] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/3.php"] [unique_id "aeTReWLL_sqdSHoVp-QJjAAAAlE"]
[Sun Apr 19 20:58:34.512987 2026] [:error] [pid 15760:tid 15770] [client 74.248.130.1:13511] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/3.php"] [unique_id "aeTRevSdD_XHQMJ_ISseRQAAAcI"]
[Sun Apr 19 20:58:35.041981 2026] [:error] [pid 15760:tid 15772] [client 74.248.130.1:13561] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/3.php"] [unique_id "aeTRe_SdD_XHQMJ_ISseSQAAAcQ"]
[Sun Apr 19 20:58:35.626106 2026] [:error] [pid 15765:tid 15863] [client 74.248.130.1:31081] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/3.php"] [unique_id "aeTRe_Rqinw-W5EwQ773aAAAAoo"]
[Sun Apr 19 20:58:36.253493 2026] [:error] [pid 15763:tid 15805] [client 74.248.130.1:62919] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/4.php"] [unique_id "aeTRfLMXv1Y1THOoxaDxvAAAAgk"]
[Sun Apr 19 20:58:36.807390 2026] [:error] [pid 15760:tid 15781] [client 74.248.130.1:12640] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/4.php"] [unique_id "aeTRfPSdD_XHQMJ_ISseVgAAAc0"]
[Sun Apr 19 20:58:37.623280 2026] [:error] [pid 47773:tid 47837] [client 74.248.130.1:13029] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/4.php"] [unique_id "aeTRfeiBHdnCJDuPq9A8LAAAAFU"]
[Sun Apr 19 20:58:38.334048 2026] [:error] [pid 15760:tid 15789] [client 74.248.130.1:62921] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/4.php"] [unique_id "aeTRfvSdD_XHQMJ_ISseXwAAAdU"]
[Sun Apr 19 20:58:38.958809 2026] [:error] [pid 47775:tid 47850] [client 74.248.130.1:13101] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/5.php"] [unique_id "aeTRfrmztjlk9tsmoewQZgAAAIc"]
[Sun Apr 19 20:58:39.519687 2026] [:error] [pid 47772:tid 47809] [client 74.248.130.1:62943] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/5.php"] [unique_id "aeTRf4c0L16cb4smAz-0EAAAABQ"]
[Sun Apr 19 20:58:40.193276 2026] [:error] [pid 47886:tid 47907] [client 74.248.130.1:13664] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/5.php"] [unique_id "aeTRgESe8yiyuPrD7yNzZwAAANM"]
[Sun Apr 19 20:58:40.739580 2026] [:error] [pid 15764:tid 15834] [client 74.248.130.1:31095] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/5.php"] [unique_id "aeTRgGLL_sqdSHoVp-QJlQAAAkg"]
[Sun Apr 19 20:58:41.349493 2026] [:error] [pid 15760:tid 15783] [client 74.248.130.1:13550] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/6.php"] [unique_id "aeTRgfSdD_XHQMJ_ISseZAAAAc8"]
[Sun Apr 19 20:58:42.186772 2026] [:error] [pid 15760:tid 15772] [client 74.248.130.1:13052] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/6.php"] [unique_id "aeTRgvSdD_XHQMJ_ISseagAAAcQ"]
[Sun Apr 19 20:58:42.858105 2026] [:error] [pid 47773:tid 47833] [client 74.248.130.1:13157] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/6.php"] [unique_id "aeTRguiBHdnCJDuPq9A8NQAAAFE"]
[Sun Apr 19 20:58:43.466955 2026] [:error] [pid 15760:tid 15791] [client 74.248.130.1:13546] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/6.php"] [unique_id "aeTRg_SdD_XHQMJ_ISsebwAAAdc"]
[Sun Apr 19 20:58:44.277725 2026] [:error] [pid 15764:tid 15832] [client 74.248.130.1:12662] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/9.php"] [unique_id "aeTRhGLL_sqdSHoVp-QJoAAAAkY"]
[Sun Apr 19 20:58:44.933962 2026] [:error] [pid 15763:tid 15808] [client 74.248.130.1:31055] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/9.php"] [unique_id "aeTRhLMXv1Y1THOoxaDxzAAAAgw"]
[Sun Apr 19 20:58:45.921058 2026] [:error] [pid 47772:tid 47802] [client 74.248.130.1:13681] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/9.php"] [unique_id "aeTRhYc0L16cb4smAz-0IQAAAA0"]
[Sun Apr 19 20:58:46.609362 2026] [:error] [pid 15764:tid 15830] [client 74.248.130.1:13023] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/9.php"] [unique_id "aeTRhmLL_sqdSHoVp-QJqQAAAkQ"]
[Sun Apr 19 20:58:47.175335 2026] [:error] [pid 15760:tid 15768] [client 74.248.130.1:31048] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/10.php"] [unique_id "aeTRh_SdD_XHQMJ_ISsecwAAAcA"]
[Sun Apr 19 20:58:48.423703 2026] [:error] [pid 47772:tid 47803] [client 74.248.130.1:13097] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/10.php"] [unique_id "aeTRiIc0L16cb4smAz-0KwAAAA4"]
[Sun Apr 19 20:58:49.263151 2026] [:error] [pid 15764:tid 15845] [client 74.248.130.1:13091] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/10.php"] [unique_id "aeTRiWLL_sqdSHoVp-QJsgAAAlM"]
[Sun Apr 19 20:58:50.030592 2026] [:error] [pid 47772:tid 47813] [client 74.248.130.1:13643] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/10.php"] [unique_id "aeTRioc0L16cb4smAz-0MgAAABg"]
[Sun Apr 19 20:58:50.786443 2026] [:error] [pid 15764:tid 15828] [client 74.248.130.1:13535] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/100.php"] [unique_id "aeTRimLL_sqdSHoVp-QJuAAAAkI"]
[Sun Apr 19 20:58:51.526686 2026] [:error] [pid 15764:tid 15847] [client 74.248.130.1:31067] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/100.php"] [unique_id "aeTRi2LL_sqdSHoVp-QJvQAAAlU"]
[Sun Apr 19 20:58:52.543640 2026] [:error] [pid 15760:tid 15792] [client 74.248.130.1:12889] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/100.php"] [unique_id "aeTRjPSdD_XHQMJ_ISseewAAAdg"]
[Sun Apr 19 20:58:53.525884 2026] [:error] [pid 47773:tid 47840] [client 74.248.130.1:43162] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/100.php"] [unique_id "aeTRjeiBHdnCJDuPq9A8QQAAAFg"]
[Sun Apr 19 20:59:01.127304 2026] [:error] [pid 15693:tid 15701] [client 74.248.130.1:13072] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "aeTRlcNMD-ccazQlTslYbgAAAUU"]
[Sun Apr 19 20:59:01.865798 2026] [:error] [pid 15764:tid 15840] [client 74.248.130.1:31059] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "aeTRlWLL_sqdSHoVp-QJ3QAAAk4"]
[Sun Apr 19 20:59:02.623308 2026] [:error] [pid 47886:tid 47912] [client 74.248.130.1:31102] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "aeTRlkSe8yiyuPrD7yNzdQAAANg"]
[Sun Apr 19 20:59:03.278353 2026] [:error] [pid 47772:tid 47800] [client 74.248.130.1:13558] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "aeTRl4c0L16cb4smAz-0XAAAAAs"]
[Sun Apr 19 20:59:03.887099 2026] [:error] [pid 47775:tid 47846] [client 74.248.130.1:13672] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aeTRl7mztjlk9tsmoewQegAAAIM"]
[Sun Apr 19 20:59:04.717669 2026] [:error] [pid 47773:tid 47823] [client 74.248.130.1:13137] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aeTRmOiBHdnCJDuPq9A8XgAAAEc"]
[Sun Apr 19 20:59:05.540328 2026] [:error] [pid 47772:tid 47807] [client 74.248.130.1:43180] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aeTRmYc0L16cb4smAz-0XwAAABI"]
[Sun Apr 19 20:59:06.196491 2026] [:error] [pid 15764:tid 15833] [client 74.248.130.1:13567] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aeTRmmLL_sqdSHoVp-QJ4QAAAkc"]
[Sun Apr 19 20:59:06.996203 2026] [:error] [pid 15763:tid 15812] [client 74.248.130.1:31069] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aeTRmrMXv1Y1THOoxaDx8AAAAhA"]
[Sun Apr 19 20:59:07.662824 2026] [:error] [pid 15764:tid 15834] [client 74.248.130.1:43164] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aeTRm2LL_sqdSHoVp-QJ5gAAAkg"]
[Sun Apr 19 20:59:08.343388 2026] [:error] [pid 47772:tid 47794] [client 74.248.130.1:13058] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aeTRnIc0L16cb4smAz-0ZwAAAAU"]
[Sun Apr 19 20:59:09.042762 2026] [:error] [pid 47773:tid 47826] [client 74.248.130.1:13564] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aeTRneiBHdnCJDuPq9A8ZQAAAEo"]
[Sun Apr 19 20:59:09.758646 2026] [:error] [pid 15760:tid 15768] [client 74.248.130.1:62956] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aeTRnfSdD_XHQMJ_ISselQAAAcA"]
[Sun Apr 19 20:59:10.432958 2026] [:error] [pid 47886:tid 47899] [client 74.248.130.1:13017] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aeTRnkSe8yiyuPrD7yNzfAAAAMs"]
[Sun Apr 19 20:59:10.975117 2026] [:error] [pid 47773:tid 47818] [client 74.248.130.1:13526] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aeTRnuiBHdnCJDuPq9A8aQAAAEI"]
[Sun Apr 19 20:59:11.561086 2026] [:error] [pid 47886:tid 47904] [client 74.248.130.1:62940] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aeTRn0Se8yiyuPrD7yNzgQAAANA"]
[Sun Apr 19 20:59:12.260159 2026] [:error] [pid 15760:tid 15786] [client 74.248.130.1:13673] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "aeTRoPSdD_XHQMJ_ISseoQAAAdI"]
[Sun Apr 19 20:59:12.849521 2026] [:error] [pid 47773:tid 47837] [client 74.248.130.1:13653] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "aeTRoOiBHdnCJDuPq9A8awAAAFU"]
[Sun Apr 19 20:59:13.419513 2026] [:error] [pid 47773:tid 47826] [client 74.248.130.1:13510] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "aeTRoeiBHdnCJDuPq9A8cAAAAEo"]
[Sun Apr 19 20:59:13.945842 2026] [:error] [pid 47775:tid 47846] [client 74.248.130.1:62950] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "aeTRobmztjlk9tsmoewQiwAAAIM"]
[Sun Apr 19 20:59:14.620392 2026] [:error] [pid 47775:tid 47847] [client 74.248.130.1:13690] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aeTRormztjlk9tsmoewQjQAAAIQ"]
[Sun Apr 19 20:59:15.174368 2026] [:error] [pid 47773:tid 47818] [client 74.248.130.1:13530] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aeTRo-iBHdnCJDuPq9A8dQAAAEI"]
[Sun Apr 19 20:59:15.720901 2026] [:error] [pid 15693:tid 15705] [client 74.248.130.1:13057] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aeTRo8NMD-ccazQlTslYdAAAAUk"]
[Sun Apr 19 20:59:16.335682 2026] [:error] [pid 47886:tid 47911] [client 74.248.130.1:12616] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aeTRpESe8yiyuPrD7yNzhAAAANc"]
[Sun Apr 19 20:59:16.884285 2026] [:error] [pid 15693:tid 15696] [client 74.248.130.1:43139] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "aeTRpMNMD-ccazQlTslYdwAAAUA"]
[Sun Apr 19 20:59:17.557725 2026] [:error] [pid 15760:tid 15771] [client 74.248.130.1:12996] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "aeTRpfSdD_XHQMJ_ISsesAAAAcM"]
[Sun Apr 19 20:59:18.076884 2026] [:error] [pid 15760:tid 15787] [client 74.248.130.1:43136] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "aeTRpvSdD_XHQMJ_ISsetAAAAdM"]
[Sun Apr 19 20:59:18.704505 2026] [:error] [pid 47772:tid 47797] [client 74.248.130.1:13056] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "aeTRpoc0L16cb4smAz-0dgAAAAg"]
[Sun Apr 19 20:59:19.399257 2026] [:error] [pid 47773:tid 47821] [client 74.248.130.1:12898] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/no1.php"] [unique_id "aeTRp-iBHdnCJDuPq9A8eQAAAEU"]
[Sun Apr 19 20:59:19.940441 2026] [:error] [pid 47886:tid 47888] [client 74.248.130.1:43145] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/no1.php"] [unique_id "aeTRp0Se8yiyuPrD7yNzhgAAAMA"]
[Sun Apr 19 20:59:20.480052 2026] [:error] [pid 15694:tid 15736] [client 74.248.130.1:62968] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/no1.php"] [unique_id "aeTRqLimB-jol1fwqAoKFgAAAYo"]
[Sun Apr 19 20:59:21.190366 2026] [:error] [pid 47886:tid 47905] [client 74.248.130.1:43167] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/no1.php"] [unique_id "aeTRqUSe8yiyuPrD7yNziwAAANE"]
[Sun Apr 19 20:59:22.132661 2026] [:error] [pid 47775:tid 47853] [client 74.248.130.1:12627] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/w2025.php"] [unique_id "aeTRqrmztjlk9tsmoewQlQAAAIo"]
[Sun Apr 19 20:59:22.751397 2026] [:error] [pid 47772:tid 47806] [client 74.248.130.1:43156] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/w2025.php"] [unique_id "aeTRqoc0L16cb4smAz-0egAAABE"]
[Sun Apr 19 20:59:23.315206 2026] [:error] [pid 47772:tid 47803] [client 74.248.130.1:13660] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/w2025.php"] [unique_id "aeTRq4c0L16cb4smAz-0ewAAAA4"]
[Sun Apr 19 20:59:23.903791 2026] [:error] [pid 15764:tid 15845] [client 74.248.130.1:13517] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/w2025.php"] [unique_id "aeTRq2LL_sqdSHoVp-QKAAAAAlM"]
[Sun Apr 19 20:59:24.659718 2026] [:error] [pid 15763:tid 15814] [client 74.248.130.1:13655] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fvvff.php"] [unique_id "aeTRrLMXv1Y1THOoxaDx9wAAAhI"]
[Sun Apr 19 20:59:25.336136 2026] [:error] [pid 47775:tid 47867] [client 74.248.130.1:12917] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fvvff.php"] [unique_id "aeTRrbmztjlk9tsmoewQmwAAAJg"]
[Sun Apr 19 20:59:26.043250 2026] [:error] [pid 15694:tid 15751] [client 74.248.130.1:31089] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fvvff.php"] [unique_id "aeTRrrimB-jol1fwqAoKIwAAAZg"]
[Sun Apr 19 20:59:26.877965 2026] [:error] [pid 15764:tid 15840] [client 74.248.130.1:62969] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fvvff.php"] [unique_id "aeTRrmLL_sqdSHoVp-QKBAAAAk4"]
[Sun Apr 19 20:59:27.632914 2026] [:error] [pid 15693:tid 15700] [client 74.248.130.1:12878] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "aeTRr8NMD-ccazQlTslYhQAAAUQ"]
[Sun Apr 19 20:59:28.505476 2026] [:error] [pid 15765:tid 15872] [client 74.248.130.1:31047] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "aeTRsPRqinw-W5EwQ773hwAAApM"]
[Sun Apr 19 20:59:29.305612 2026] [:error] [pid 15760:tid 15785] [client 74.248.130.1:62947] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "aeTRsfSdD_XHQMJ_ISsewAAAAdE"]
[Sun Apr 19 20:59:29.868744 2026] [:error] [pid 47772:tid 47801] [client 74.248.130.1:13149] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "aeTRsYc0L16cb4smAz-0gwAAAAw"]
[Sun Apr 19 20:59:30.490161 2026] [:error] [pid 15764:tid 15841] [client 74.248.130.1:62972] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aeTRsmLL_sqdSHoVp-QKBwAAAk8"]
[Sun Apr 19 20:59:31.190165 2026] [:error] [pid 15764:tid 15833] [client 74.248.130.1:43194] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aeTRs2LL_sqdSHoVp-QKCgAAAkc"]
[Sun Apr 19 20:59:31.934430 2026] [:error] [pid 15764:tid 15851] [client 74.248.130.1:12664] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aeTRs2LL_sqdSHoVp-QKDwAAAlg"]
[Sun Apr 19 20:59:32.558210 2026] [:error] [pid 15763:tid 15813] [client 74.248.130.1:12923] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aeTRtLMXv1Y1THOoxaDx_wAAAhE"]
[Sun Apr 19 20:59:33.391823 2026] [:error] [pid 47772:tid 47796] [client 74.248.130.1:13036] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aeTRtYc0L16cb4smAz-0iAAAAAc"]
[Sun Apr 19 20:59:33.967612 2026] [:error] [pid 47772:tid 47794] [client 74.248.130.1:59973] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aeTRtYc0L16cb4smAz-0iwAAAAU"]
[Sun Apr 19 20:59:34.915549 2026] [:error] [pid 47772:tid 47813] [client 74.248.130.1:62915] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aeTRtoc0L16cb4smAz-0lAAAABg"]
[Sun Apr 19 20:59:35.668176 2026] [:error] [pid 47886:tid 47897] [client 74.248.130.1:59974] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aeTRt0Se8yiyuPrD7yNzjgAAAMk"]
[Sun Apr 19 20:59:37.122202 2026] [:error] [pid 47775:tid 47867] [client 74.248.130.1:12661] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeTRubmztjlk9tsmoewQpgAAAJg"]
[Sun Apr 19 20:59:38.110228 2026] [:error] [pid 47772:tid 47805] [client 74.248.130.1:12652] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeTRuoc0L16cb4smAz-0lwAAABA"]
[Sun Apr 19 20:59:39.021725 2026] [:error] [pid 47775:tid 47852] [client 74.248.130.1:13175] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeTRu7mztjlk9tsmoewQrgAAAIk"]
[Sun Apr 19 20:59:39.754563 2026] [:error] [pid 15760:tid 15783] [client 74.248.130.1:12913] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeTRu_SdD_XHQMJ_ISse5gAAAc8"]
[Sun Apr 19 20:59:40.546936 2026] [:error] [pid 15763:tid 15796] [client 74.248.130.1:31053] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aeTRvLMXv1Y1THOoxaDyDAAAAgA"]
[Sun Apr 19 20:59:41.481614 2026] [:error] [pid 15760:tid 15787] [client 74.248.130.1:13050] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aeTRvfSdD_XHQMJ_ISse_AAAAdM"]
[Sun Apr 19 20:59:42.564345 2026] [:error] [pid 15760:tid 15776] [client 74.248.130.1:12866] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aeTRvvSdD_XHQMJ_ISsfBQAAAcg"]
[Sun Apr 19 20:59:43.588651 2026] [:error] [pid 47773:tid 47827] [client 74.248.130.1:62962] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aeTRv-iBHdnCJDuPq9A8lgAAAEs"]
[Sun Apr 19 20:59:44.305071 2026] [:error] [pid 47886:tid 47909] [client 74.248.130.1:31091] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "aeTRwESe8yiyuPrD7yNzlgAAANU"]
[Sun Apr 19 20:59:44.971795 2026] [:error] [pid 47772:tid 47795] [client 74.248.130.1:12628] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "aeTRwIc0L16cb4smAz-0nwAAAAY"]
[Sun Apr 19 20:59:46.036866 2026] [:error] [pid 15760:tid 15776] [client 74.248.130.1:31057] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "aeTRwvSdD_XHQMJ_ISsfEQAAAcg"]
[Sun Apr 19 20:59:46.588047 2026] [:error] [pid 15760:tid 15777] [client 74.248.130.1:13099] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "aeTRwvSdD_XHQMJ_ISsfFwAAAck"]
[Sun Apr 19 20:59:47.548890 2026] [:error] [pid 15760:tid 15777] [client 74.248.130.1:13032] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "aeTRw_SdD_XHQMJ_ISsfIQAAAck"]
[Sun Apr 19 20:59:48.270740 2026] [:error] [pid 15760:tid 15776] [client 74.248.130.1:43192] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "aeTRxPSdD_XHQMJ_ISsfJgAAAcg"]
[Sun Apr 19 20:59:48.896900 2026] [:error] [pid 15765:tid 15865] [client 74.248.130.1:31096] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "aeTRxPRqinw-W5EwQ773kQAAAow"]
[Sun Apr 19 20:59:49.643550 2026] [:error] [pid 47773:tid 47821] [client 74.248.130.1:13082] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "aeTRxeiBHdnCJDuPq9A8ngAAAEU"]
[Sun Apr 19 20:59:50.392447 2026] [:error] [pid 47773:tid 47838] [client 74.248.130.1:13689] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aeTRxuiBHdnCJDuPq9A8oAAAAFY"]
[Sun Apr 19 20:59:51.350813 2026] [:error] [pid 47772:tid 47801] [client 74.248.130.1:12638] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aeTRx4c0L16cb4smAz-0qQAAAAw"]
[Sun Apr 19 20:59:52.037507 2026] [:error] [pid 15764:tid 15826] [client 74.248.130.1:13667] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aeTRyGLL_sqdSHoVp-QKLAAAAkA"]
[Sun Apr 19 20:59:52.902635 2026] [:error] [pid 47773:tid 47840] [client 74.248.130.1:13693] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aeTRyOiBHdnCJDuPq9A8pQAAAFg"]
[Sun Apr 19 20:59:53.581565 2026] [:error] [pid 15760:tid 15774] [client 74.248.130.1:13024] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aeTRyfSdD_XHQMJ_ISsfKQAAAcY"]
[Sun Apr 19 20:59:54.173539 2026] [:error] [pid 15760:tid 15776] [client 74.248.130.1:43170] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aeTRyvSdD_XHQMJ_ISsfLwAAAcg"]
[Sun Apr 19 20:59:54.746136 2026] [:error] [pid 15760:tid 15780] [client 74.248.130.1:13560] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aeTRyvSdD_XHQMJ_ISsfNQAAAcw"]
[Sun Apr 19 20:59:55.379063 2026] [:error] [pid 15760:tid 15769] [client 74.248.130.1:13001] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aeTRy_SdD_XHQMJ_ISsfOQAAAcE"]
[Sun Apr 19 20:59:56.029056 2026] [:error] [pid 15760:tid 15775] [client 74.248.130.1:13661] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/style.php"] [unique_id "aeTRzPSdD_XHQMJ_ISsfQQAAAcc"]
[Sun Apr 19 20:59:56.737674 2026] [:error] [pid 47775:tid 47861] [client 74.248.130.1:13523] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/style.php"] [unique_id "aeTRzLmztjlk9tsmoewQtwAAAJI"]
[Sun Apr 19 20:59:57.566893 2026] [:error] [pid 47772:tid 47792] [client 74.248.130.1:13679] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/style.php"] [unique_id "aeTRzYc0L16cb4smAz-0tAAAAAM"]
[Sun Apr 19 20:59:58.468074 2026] [:error] [pid 15760:tid 15772] [client 74.248.130.1:13556] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/style.php"] [unique_id "aeTRzvSdD_XHQMJ_ISsfTAAAAcQ"]
[Sun Apr 19 20:59:59.174629 2026] [:error] [pid 47775:tid 47864] [client 74.248.130.1:62941] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aeTRz7mztjlk9tsmoewQuAAAAJU"]
[Sun Apr 19 20:59:59.870946 2026] [:error] [pid 47775:tid 47854] [client 74.248.130.1:13650] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aeTRz7mztjlk9tsmoewQuwAAAIs"]
[Sun Apr 19 21:00:08.279127 2026] [:error] [pid 15764:tid 15843] [client 74.248.130.1:62963] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aeTR2GLL_sqdSHoVp-QKUgAAAlE"]
[Sun Apr 19 21:00:08.805666 2026] [:error] [pid 47773:tid 47819] [client 74.248.130.1:13030] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aeTR2OiBHdnCJDuPq9A8uQAAAEM"]
[Sun Apr 19 21:00:09.391103 2026] [:error] [pid 15760:tid 15792] [client 74.248.130.1:13562] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aeTR2fSdD_XHQMJ_ISsfbQAAAdg"]
[Sun Apr 19 21:00:09.956792 2026] [:error] [pid 47775:tid 47861] [client 74.248.130.1:43162] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aeTR2bmztjlk9tsmoewQxwAAAJI"]
[Sun Apr 19 21:00:10.529449 2026] [:error] [pid 15760:tid 15784] [client 74.248.130.1:43158] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aeTR2vSdD_XHQMJ_ISsfdgAAAdA"]
[Sun Apr 19 21:00:11.261268 2026] [:error] [pid 47772:tid 47789] [client 74.248.130.1:12919] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aeTR24c0L16cb4smAz-0-AAAAAA"]
[Sun Apr 19 21:00:11.849048 2026] [:error] [pid 15763:tid 15820] [client 74.248.130.1:62971] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aeTR27MXv1Y1THOoxaDyHQAAAhg"]
[Sun Apr 19 21:00:12.508078 2026] [:error] [pid 47773:tid 47825] [client 74.248.130.1:31076] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "aeTR3OiBHdnCJDuPq9A8vgAAAEk"]
[Sun Apr 19 21:00:13.265319 2026] [:error] [pid 15763:tid 15804] [client 74.248.130.1:13516] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeTR3bMXv1Y1THOoxaDyHgAAAgg"]
[Sun Apr 19 21:00:14.064409 2026] [:error] [pid 15760:tid 15788] [client 74.248.130.1:13125] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeTR3vSdD_XHQMJ_ISsfggAAAdQ"]
[Sun Apr 19 21:00:14.637215 2026] [:error] [pid 47775:tid 47847] [client 74.248.130.1:12633] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeTR3rmztjlk9tsmoewQ0AAAAIQ"]
[Sun Apr 19 21:00:15.290250 2026] [:error] [pid 15760:tid 15777] [client 74.248.130.1:12651] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "aeTR3_SdD_XHQMJ_ISsfhQAAAck"]
[Sun Apr 19 21:00:15.863394 2026] [:error] [pid 15760:tid 15776] [client 74.248.130.1:12880] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeTR3_SdD_XHQMJ_ISsfhgAAAcg"]
[Sun Apr 19 21:00:16.539787 2026] [:error] [pid 15760:tid 15782] [client 74.248.130.1:12617] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeTR4PSdD_XHQMJ_ISsfnQAAAc4"]
[Sun Apr 19 21:00:17.254952 2026] [:error] [pid 15760:tid 15772] [client 74.248.130.1:13518] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeTR4fSdD_XHQMJ_ISsfqQAAAcQ"]
[Sun Apr 19 21:00:17.818459 2026] [:error] [pid 15760:tid 15778] [client 74.248.130.1:31099] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeTR4fSdD_XHQMJ_ISsfrwAAAco"]
[Sun Apr 19 21:00:18.513335 2026] [:error] [pid 15694:tid 15738] [client 74.248.130.1:31054] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aeTR4rimB-jol1fwqAoKNAAAAYw"]
[Sun Apr 19 21:00:19.053519 2026] [:error] [pid 15760:tid 15792] [client 74.248.130.1:13081] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aeTR4_SdD_XHQMJ_ISsfvQAAAdg"]
[Sun Apr 19 21:00:19.710806 2026] [:error] [pid 15764:tid 15826] [client 74.248.130.1:13683] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aeTR42LL_sqdSHoVp-QKWgAAAkA"]
[Sun Apr 19 21:00:20.524094 2026] [:error] [pid 47772:tid 47802] [client 74.248.130.1:12920] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aeTR5Ic0L16cb4smAz-1DgAAAA0"]
[Sun Apr 19 21:00:21.081874 2026] [:error] [pid 15760:tid 15772] [client 74.248.130.1:43142] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aeTR5fSdD_XHQMJ_ISsfyQAAAcQ"]
[Sun Apr 19 21:00:21.759108 2026] [:error] [pid 15760:tid 15778] [client 74.248.130.1:60003] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aeTR5fSdD_XHQMJ_ISsf0AAAAco"]
[Sun Apr 19 21:00:22.597009 2026] [:error] [pid 15760:tid 15788] [client 74.248.130.1:12926] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aeTR5vSdD_XHQMJ_ISsf1gAAAdQ"]
[Sun Apr 19 21:00:23.585553 2026] [:error] [pid 15764:tid 15837] [client 74.248.130.1:13048] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aeTR52LL_sqdSHoVp-QKYAAAAks"]
[Sun Apr 19 21:00:24.474784 2026] [:error] [pid 47773:tid 47824] [client 74.248.130.1:13540] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "aeTR6OiBHdnCJDuPq9A8zQAAAEg"]
[Sun Apr 19 21:00:25.486801 2026] [:error] [pid 47772:tid 47796] [client 74.248.130.1:59969] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "aeTR6Yc0L16cb4smAz-1HAAAAAc"]
[Sun Apr 19 21:00:26.289381 2026] [:error] [pid 15760:tid 15791] [client 74.248.130.1:13127] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "aeTR6vSdD_XHQMJ_ISsf5AAAAdc"]
[Sun Apr 19 21:00:27.152759 2026] [:error] [pid 47772:tid 47799] [client 74.248.130.1:13682] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/goods.php"] [unique_id "aeTR64c0L16cb4smAz-1JAAAAAo"]
[Sun Apr 19 21:00:28.354867 2026] [:error] [pid 15760:tid 15776] [client 74.248.130.1:43161] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aeTR7PSdD_XHQMJ_ISsf6wAAAcg"]
[Sun Apr 19 21:00:28.908437 2026] [:error] [pid 15760:tid 15789] [client 74.248.130.1:13507] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aeTR7PSdD_XHQMJ_ISsf8AAAAdU"]
[Sun Apr 19 21:00:30.022480 2026] [:error] [pid 47772:tid 47800] [client 74.248.130.1:63558] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aeTR7oc0L16cb4smAz-1LAAAAAs"]
[Sun Apr 19 21:00:30.861698 2026] [:error] [pid 47886:tid 47898] [client 74.248.130.1:43199] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aeTR7kSe8yiyuPrD7yNzrwAAAMo"]
[Sun Apr 19 21:00:32.005509 2026] [:error] [pid 15764:tid 15848] [client 74.248.130.1:13076] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aeTR8GLL_sqdSHoVp-QKeQAAAlY"]
[Sun Apr 19 21:00:32.693577 2026] [:error] [pid 47772:tid 47807] [client 74.248.130.1:12656] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aeTR8Ic0L16cb4smAz-1NgAAABI"]
[Sun Apr 19 21:00:33.539946 2026] [:error] [pid 47772:tid 47791] [client 74.248.130.1:13532] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aeTR8Yc0L16cb4smAz-1OQAAAAI"]
[Sun Apr 19 21:00:34.146904 2026] [:error] [pid 15765:tid 15862] [client 74.248.130.1:31060] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "aeTR8vRqinw-W5EwQ773rAAAAok"]
[Sun Apr 19 21:00:34.811093 2026] [:error] [pid 15760:tid 15784] [client 74.248.130.1:31085] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeTR8vSdD_XHQMJ_ISsgAwAAAdA"]
[Sun Apr 19 21:00:35.474382 2026] [:error] [pid 15760:tid 15773] [client 74.248.130.1:31051] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeTR8_SdD_XHQMJ_ISsgBwAAAcU"]
[Sun Apr 19 21:00:36.210975 2026] [:error] [pid 15760:tid 15769] [client 74.248.130.1:13636] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeTR9PSdD_XHQMJ_ISsgDgAAAcE"]
[Sun Apr 19 21:00:36.839962 2026] [:error] [pid 47772:tid 47799] [client 74.248.130.1:12619] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "aeTR9Ic0L16cb4smAz-1RgAAAAo"]
[Sun Apr 19 21:00:37.645838 2026] [:error] [pid 47772:tid 47797] [client 74.248.130.1:12646] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aeTR9Yc0L16cb4smAz-1TAAAAAg"]
[Sun Apr 19 21:00:38.541662 2026] [:error] [pid 47886:tid 47910] [client 74.248.130.1:12631] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aeTR9kSe8yiyuPrD7yNzswAAANY"]
[Sun Apr 19 21:00:39.152368 2026] [:error] [pid 15763:tid 15798] [client 74.248.130.1:13167] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aeTR97MXv1Y1THOoxaDyKgAAAgI"]
[Sun Apr 19 21:00:39.679444 2026] [:error] [pid 47775:tid 47843] [client 74.248.130.1:12896] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "aeTR97mztjlk9tsmoewQ4AAAAIA"]
[Sun Apr 19 21:00:40.351979 2026] [:error] [pid 15760:tid 15791] [client 74.248.130.1:62942] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aeTR-PSdD_XHQMJ_ISsgHwAAAdc"]
[Sun Apr 19 21:00:40.881126 2026] [:error] [pid 15760:tid 15787] [client 74.248.130.1:63561] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aeTR-PSdD_XHQMJ_ISsgJgAAAdM"]
[Sun Apr 19 21:00:41.798786 2026] [:error] [pid 15693:tid 15696] [client 74.248.130.1:13648] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aeTR-cNMD-ccazQlTslYswAAAUA"]
[Sun Apr 19 21:00:42.393500 2026] [:error] [pid 47886:tid 47908] [client 74.248.130.1:12922] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aeTR-kSe8yiyuPrD7yNztAAAANQ"]
[Sun Apr 19 21:00:43.017157 2026] [:error] [pid 47773:tid 47816] [client 74.248.130.1:31071] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aeTR--iBHdnCJDuPq9A84QAAAEA"]
[Sun Apr 19 21:00:44.040987 2026] [:error] [pid 47772:tid 47812] [client 74.248.130.1:13537] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aeTR_Ic0L16cb4smAz-1VAAAABc"]
[Sun Apr 19 21:00:44.759683 2026] [:error] [pid 47886:tid 47912] [client 74.248.130.1:13654] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aeTR_ESe8yiyuPrD7yNztQAAANg"]
[Sun Apr 19 21:00:45.351782 2026] [:error] [pid 47886:tid 47909] [client 74.248.130.1:13554] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aeTR_USe8yiyuPrD7yNzuAAAANU"]
[Sun Apr 19 21:00:45.946140 2026] [:error] [pid 47772:tid 47796] [client 74.248.130.1:12892] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "aeTR_Yc0L16cb4smAz-1XQAAAAc"]
[Sun Apr 19 21:00:46.500544 2026] [:error] [pid 15763:tid 15816] [client 74.248.130.1:13686] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "aeTR_rMXv1Y1THOoxaDyMQAAAhQ"]
[Sun Apr 19 21:00:47.063675 2026] [:error] [pid 47772:tid 47795] [client 74.248.130.1:13547] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "aeTR_4c0L16cb4smAz-1YQAAAAY"]
[Sun Apr 19 21:00:48.079189 2026] [:error] [pid 15763:tid 15798] [client 74.248.130.1:43190] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "aeTSALMXv1Y1THOoxaDyNgAAAgI"]
[Sun Apr 19 21:00:48.656164 2026] [:error] [pid 15760:tid 15777] [client 74.248.130.1:61719] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "aeTSAPSdD_XHQMJ_ISsgOwAAAck"]
[Sun Apr 19 21:00:49.281243 2026] [:error] [pid 15694:tid 15735] [client 74.248.130.1:13694] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "aeTSAbimB-jol1fwqAoKPAAAAYk"]
[Sun Apr 19 21:00:50.060418 2026] [:error] [pid 15763:tid 15797] [client 74.248.130.1:13068] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "aeTSArMXv1Y1THOoxaDyOwAAAgE"]
[Sun Apr 19 21:00:50.621521 2026] [:error] [pid 15760:tid 15774] [client 74.248.130.1:12647] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "aeTSAvSdD_XHQMJ_ISsgRAAAAcY"]
[Sun Apr 19 21:00:51.343194 2026] [:error] [pid 47773:tid 47834] [client 74.248.130.1:43178] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-michan.php"] [unique_id "aeTSA-iBHdnCJDuPq9A87AAAAFI"]
[Sun Apr 19 21:00:52.044149 2026] [:error] [pid 15760:tid 15792] [client 74.248.130.1:13533] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-michan.php"] [unique_id "aeTSBPSdD_XHQMJ_ISsgSgAAAdg"]
[Sun Apr 19 21:00:52.683370 2026] [:error] [pid 15760:tid 15774] [client 74.248.130.1:13173] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-michan.php"] [unique_id "aeTSBPSdD_XHQMJ_ISsgUwAAAcY"]
[Sun Apr 19 21:00:53.487762 2026] [:error] [pid 15760:tid 15779] [client 74.248.130.1:13103] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-michan.php"] [unique_id "aeTSBfSdD_XHQMJ_ISsgXAAAAcs"]
[Sun Apr 19 21:00:54.287142 2026] [:error] [pid 47772:tid 47792] [client 74.248.130.1:12611] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin1.php"] [unique_id "aeTSBoc0L16cb4smAz-1aQAAAAM"]
[Sun Apr 19 21:00:54.833533 2026] [:error] [pid 15765:tid 15871] [client 74.248.130.1:12626] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin1.php"] [unique_id "aeTSBvRqinw-W5EwQ773sgAAApI"]
[Sun Apr 19 21:00:55.657715 2026] [:error] [pid 47772:tid 47794] [client 74.248.130.1:12663] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin1.php"] [unique_id "aeTSB4c0L16cb4smAz-1cQAAAAU"]
[Sun Apr 19 21:00:56.315511 2026] [:error] [pid 47772:tid 47802] [client 74.248.130.1:13098] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin1.php"] [unique_id "aeTSCIc0L16cb4smAz-1dAAAAA0"]
[Sun Apr 19 21:00:57.041223 2026] [:error] [pid 47773:tid 47826] [client 74.248.130.1:12670] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeTSCeiBHdnCJDuPq9A88wAAAEo"]
[Sun Apr 19 21:00:57.771280 2026] [:error] [pid 15764:tid 15832] [client 74.248.130.1:13677] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeTSCWLL_sqdSHoVp-QKkwAAAkY"]
[Sun Apr 19 21:00:58.780344 2026] [:error] [pid 15764:tid 15834] [client 74.248.130.1:13016] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeTSCmLL_sqdSHoVp-QKmAAAAkg"]
[Sun Apr 19 21:00:59.643339 2026] [:error] [pid 47773:tid 47832] [client 74.248.130.1:13656] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeTSC-iBHdnCJDuPq9A9AAAAAFA"]
[Sun Apr 19 21:01:00.386796 2026] [:error] [pid 15764:tid 15850] [client 74.248.130.1:13557] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeTSDGLL_sqdSHoVp-QKmgAAAlc"]
[Sun Apr 19 21:01:01.033518 2026] [:error] [pid 47772:tid 47800] [client 74.248.130.1:12666] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeTSDYc0L16cb4smAz-1ewAAAAs"]
[Sun Apr 19 21:01:01.802156 2026] [:error] [pid 15760:tid 15780] [client 74.248.130.1:13020] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeTSDfSdD_XHQMJ_ISsgbgAAAcw"]
[Sun Apr 19 21:01:02.711210 2026] [:error] [pid 47772:tid 47801] [client 74.248.130.1:13096] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeTSDoc0L16cb4smAz-1gAAAAAw"]
[Sun Apr 19 21:01:03.463308 2026] [:error] [pid 15765:tid 15877] [client 74.248.130.1:12903] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeTSD_Rqinw-W5EwQ773tQAAApg"]
[Sun Apr 19 21:01:04.106374 2026] [:error] [pid 47773:tid 47817] [client 74.248.130.1:43143] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeTSEOiBHdnCJDuPq9A9DAAAAEE"]
[Sun Apr 19 21:01:04.830412 2026] [:error] [pid 47775:tid 47858] [client 74.248.130.1:13508] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeTSELmztjlk9tsmoewQ9QAAAI8"]
[Sun Apr 19 21:01:05.456446 2026] [:error] [pid 15760:tid 15780] [client 74.248.130.1:12657] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeTSEfSdD_XHQMJ_ISsgewAAAcw"]
[Sun Apr 19 21:01:06.003185 2026] [:error] [pid 15765:tid 15860] [client 74.248.130.1:13086] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "aeTSEvRqinw-W5EwQ773uAAAAoc"]
[Sun Apr 19 21:01:06.658697 2026] [:error] [pid 15760:tid 15778] [client 74.248.130.1:13555] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "aeTSEvSdD_XHQMJ_ISsgfgAAAco"]
[Sun Apr 19 21:01:07.209245 2026] [:error] [pid 47886:tid 47891] [client 74.248.130.1:43173] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "aeTSE0Se8yiyuPrD7yNzygAAAMM"]
[Sun Apr 19 21:01:07.765022 2026] [:error] [pid 15764:tid 15830] [client 74.248.130.1:12881] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "aeTSE2LL_sqdSHoVp-QKqwAAAkQ"]
[Sun Apr 19 21:01:14.113022 2026] [:error] [pid 47886:tid 47905] [client 74.248.130.1:13521] [client 74.248.130.1] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeTSGkSe8yiyuPrD7yNz8AAAANE"]
[Sun Apr 19 21:01:15.761233 2026] [:error] [pid 15765:tid 15874] [client 74.248.130.1:31068] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeTSG_Rqinw-W5EwQ773ygAAApU"]
[Sun Apr 19 21:01:16.283453 2026] [:error] [pid 15763:tid 15796] [client 74.248.130.1:43186] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeTSHLMXv1Y1THOoxaDyYAAAAgA"]
[Sun Apr 19 21:01:16.923852 2026] [:error] [pid 15760:tid 15775] [client 74.248.130.1:13105] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeTSHPSdD_XHQMJ_ISsgjAAAAcc"]
[Sun Apr 19 21:01:17.454610 2026] [:error] [pid 15760:tid 15786] [client 74.248.130.1:59975] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeTSHfSdD_XHQMJ_ISsgkgAAAdI"]
[Sun Apr 19 21:01:17.996560 2026] [:error] [pid 47773:tid 47835] [client 74.248.130.1:31065] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeTSHeiBHdnCJDuPq9A9FgAAAFM"]
[Sun Apr 19 21:01:18.522429 2026] [:error] [pid 47773:tid 47839] [client 74.248.130.1:61710] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeTSHuiBHdnCJDuPq9A9GwAAAFc"]
[Sun Apr 19 21:01:19.102322 2026] [:error] [pid 15763:tid 15820] [client 74.248.130.1:43174] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeTSH7MXv1Y1THOoxaDyZAAAAhg"]
[Sun Apr 19 21:01:19.727477 2026] [:error] [pid 47773:tid 47834] [client 74.248.130.1:13067] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/wp-file-manager/admin/"] [unique_id "aeTSH-iBHdnCJDuPq9A9IQAAAFI"]
[Sun Apr 19 21:01:20.282332 2026] [:error] [pid 15763:tid 15813] [client 74.248.130.1:13038] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aeTSILMXv1Y1THOoxaDyagAAAhE"]
[Sun Apr 19 21:01:20.877769 2026] [:error] [pid 15694:tid 15746] [client 74.248.130.1:13158] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aeTSILimB-jol1fwqAoKSQAAAZQ"]
[Sun Apr 19 21:01:21.479471 2026] [:error] [pid 47772:tid 47802] [client 74.248.130.1:13088] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aeTSIYc0L16cb4smAz-1kQAAAA0"]
[Sun Apr 19 21:01:22.033397 2026] [:error] [pid 47886:tid 47909] [client 74.248.130.1:12653] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aeTSIkSe8yiyuPrD7yNz-QAAANU"]
[Sun Apr 19 21:01:22.773426 2026] [:error] [pid 47772:tid 47794] [client 74.248.130.1:62927] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "aeTSIoc0L16cb4smAz-1lQAAAAU"]
[Sun Apr 19 21:01:23.450236 2026] [:error] [pid 47775:tid 47856] [client 74.248.130.1:13539] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "aeTSI7mztjlk9tsmoewRAAAAAI0"]
[Sun Apr 19 21:01:24.048667 2026] [:error] [pid 47773:tid 47830] [client 74.248.130.1:31074] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "aeTSJOiBHdnCJDuPq9A9KgAAAE4"]
[Sun Apr 19 21:01:24.630923 2026] [:error] [pid 15765:tid 15857] [client 74.248.130.1:13015] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "aeTSJPRqinw-W5EwQ773zgAAAoQ"]
[Sun Apr 19 21:01:25.320812 2026] [:error] [pid 47773:tid 47816] [client 74.248.130.1:60025] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "aeTSJeiBHdnCJDuPq9A9LgAAAEA"]
[Sun Apr 19 21:01:26.007090 2026] [:error] [pid 15765:tid 15868] [client 74.248.130.1:13114] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "aeTSJvRqinw-W5EwQ7730AAAAo8"]
[Sun Apr 19 21:01:26.729145 2026] [:error] [pid 47886:tid 47894] [client 74.248.130.1:13119] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "aeTSJkSe8yiyuPrD7yNz-wAAAMY"]
[Sun Apr 19 21:01:27.524555 2026] [:error] [pid 47772:tid 47801] [client 74.248.130.1:60043] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "aeTSJ4c0L16cb4smAz-1mQAAAAw"]
[Sun Apr 19 21:01:28.380017 2026] [:error] [pid 47773:tid 47835] [client 74.248.130.1:62967] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/in.php"] [unique_id "aeTSKOiBHdnCJDuPq9A9MwAAAFM"]
[Sun Apr 19 21:01:29.065848 2026] [:error] [pid 15760:tid 15792] [client 74.248.130.1:60057] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/in.php"] [unique_id "aeTSKfSdD_XHQMJ_ISsgvQAAAdg"]
[Sun Apr 19 21:01:29.970651 2026] [:error] [pid 47772:tid 47800] [client 74.248.130.1:13565] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/in.php"] [unique_id "aeTSKYc0L16cb4smAz-1oAAAAAs"]
[Sun Apr 19 21:01:30.623925 2026] [:error] [pid 47772:tid 47801] [client 74.248.130.1:13518] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/in.php"] [unique_id "aeTSKoc0L16cb4smAz-1pgAAAAw"]
[Sun Apr 19 21:01:31.302866 2026] [:error] [pid 15765:tid 15877] [client 74.248.130.1:13691] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "aeTSK_Rqinw-W5EwQ7731wAAApg"]
[Sun Apr 19 21:01:32.058324 2026] [:error] [pid 15760:tid 15775] [client 74.248.130.1:12658] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "aeTSLPSdD_XHQMJ_ISsgvgAAAcc"]
[Sun Apr 19 21:01:32.795683 2026] [:error] [pid 15765:tid 15860] [client 74.248.130.1:13644] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "aeTSLPRqinw-W5EwQ7733AAAAoc"]
[Sun Apr 19 21:01:33.518412 2026] [:error] [pid 47775:tid 47846] [client 74.248.130.1:13662] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "aeTSLbmztjlk9tsmoewRCAAAAIM"]
[Sun Apr 19 21:01:34.248612 2026] [:error] [pid 15763:tid 15799] [client 74.248.130.1:13061] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeTSLrMXv1Y1THOoxaDyegAAAgM"]
[Sun Apr 19 21:01:35.066504 2026] [:error] [pid 47773:tid 47837] [client 74.248.130.1:13122] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeTSL-iBHdnCJDuPq9A9SQAAAFU"]
[Sun Apr 19 21:01:35.846530 2026] [:error] [pid 15760:tid 15771] [client 74.248.130.1:31073] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeTSL_SdD_XHQMJ_ISsgxgAAAcM"]
[Sun Apr 19 21:01:36.601323 2026] [:error] [pid 15760:tid 15776] [client 74.248.130.1:13059] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "aeTSMPSdD_XHQMJ_ISsgzwAAAcg"]
[Sun Apr 19 21:01:37.286925 2026] [:error] [pid 47775:tid 47857] [client 74.248.130.1:43138] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "aeTSMbmztjlk9tsmoewRDgAAAI4"]
[Sun Apr 19 21:01:37.859771 2026] [:error] [pid 15760:tid 15777] [client 74.248.130.1:13174] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "aeTSMfSdD_XHQMJ_ISsg1gAAAck"]
[Sun Apr 19 21:01:38.543168 2026] [:error] [pid 15760:tid 15771] [client 74.248.130.1:13639] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "aeTSMvSdD_XHQMJ_ISsg1wAAAcM"]
[Sun Apr 19 21:01:39.224507 2026] [:error] [pid 47773:tid 47831] [client 74.248.130.1:31090] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "aeTSM-iBHdnCJDuPq9A9VQAAAE8"]
[Sun Apr 19 21:01:39.902924 2026] [:error] [pid 15694:tid 15737] [client 74.248.130.1:12924] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeTSM7imB-jol1fwqAoKXgAAAYs"]
[Sun Apr 19 21:01:40.792202 2026] [:error] [pid 15760:tid 15776] [client 74.248.130.1:13671] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeTSNPSdD_XHQMJ_ISsg3wAAAcg"]
[Sun Apr 19 21:01:41.538833 2026] [:error] [pid 47772:tid 47812] [client 74.248.130.1:31084] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeTSNYc0L16cb4smAz-1uQAAABc"]
[Sun Apr 19 21:01:42.334012 2026] [:error] [pid 15764:tid 15835] [client 74.248.130.1:60018] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "aeTSNmLL_sqdSHoVp-QK4AAAAkk"]
[Sun Apr 19 21:01:43.037350 2026] [:error] [pid 15760:tid 15774] [client 74.248.130.1:31061] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "aeTSN_SdD_XHQMJ_ISsg5AAAAcY"]
[Sun Apr 19 21:01:44.586670 2026] [:error] [pid 47772:tid 47798] [client 74.248.130.1:63559] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "aeTSOIc0L16cb4smAz-1vQAAAAk"]
[Sun Apr 19 21:01:45.566823 2026] [:error] [pid 47773:tid 47821] [client 74.248.130.1:59980] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "aeTSOeiBHdnCJDuPq9A9YgAAAEU"]
[Sun Apr 19 21:01:46.201194 2026] [:error] [pid 15764:tid 15839] [client 74.248.130.1:13045] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "aeTSOmLL_sqdSHoVp-QK8QAAAk0"]
[Sun Apr 19 21:01:46.908909 2026] [:error] [pid 47775:tid 47865] [client 74.248.130.1:13538] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alfashell.php"] [unique_id "aeTSOrmztjlk9tsmoewRHAAAAJY"]
[Sun Apr 19 21:01:47.717201 2026] [:error] [pid 47775:tid 47856] [client 74.248.130.1:13145] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alfashell.php"] [unique_id "aeTSO7mztjlk9tsmoewRIQAAAI0"]
[Sun Apr 19 21:01:48.461153 2026] [:error] [pid 15760:tid 15787] [client 74.248.130.1:63602] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alfashell.php"] [unique_id "aeTSPPSdD_XHQMJ_ISsg8gAAAdM"]
[Sun Apr 19 21:01:49.064104 2026] [:error] [pid 47773:tid 47836] [client 74.248.130.1:13049] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alfashell.php"] [unique_id "aeTSPeiBHdnCJDuPq9A9agAAAFQ"]
[Sun Apr 19 21:01:49.596906 2026] [:error] [pid 47886:tid 47896] [client 74.248.130.1:13545] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aeTSPUSe8yiyuPrD7yNz_wAAAMg"]
[Sun Apr 19 21:01:50.578029 2026] [:error] [pid 47773:tid 47816] [client 74.248.130.1:13525] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aeTSPuiBHdnCJDuPq9A9cAAAAEA"]
[Sun Apr 19 21:01:51.110862 2026] [:error] [pid 15765:tid 15876] [client 74.248.130.1:12618] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aeTSP_Rqinw-W5EwQ7735AAAApc"]
[Sun Apr 19 21:01:52.004349 2026] [:error] [pid 15760:tid 15770] [client 74.248.130.1:59970] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aeTSQPSdD_XHQMJ_ISsg8wAAAcI"]
[Sun Apr 19 21:01:52.857060 2026] [:error] [pid 15764:tid 15841] [client 74.248.130.1:31075] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aeTSQGLL_sqdSHoVp-QK_wAAAk8"]
[Sun Apr 19 21:01:53.572573 2026] [:error] [pid 15764:tid 15845] [client 74.248.130.1:13162] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aeTSQWLL_sqdSHoVp-QLAwAAAlM"]
[Sun Apr 19 21:01:54.539481 2026] [:error] [pid 47772:tid 47809] [client 74.248.130.1:12613] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aeTSQoc0L16cb4smAz-11gAAABQ"]
[Sun Apr 19 21:01:55.256708 2026] [:error] [pid 15760:tid 15769] [client 74.248.130.1:63573] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "aeTSQ_SdD_XHQMJ_ISsg-AAAAcE"]
[Sun Apr 19 21:01:55.959011 2026] [:error] [pid 47772:tid 47808] [client 74.248.130.1:13019] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "aeTSQ4c0L16cb4smAz-13QAAABM"]
[Sun Apr 19 21:01:56.615732 2026] [:error] [pid 15760:tid 15774] [client 74.248.130.1:63600] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "aeTSRPSdD_XHQMJ_ISsg-wAAAcY"]
[Sun Apr 19 21:01:57.274994 2026] [:error] [pid 15693:tid 15700] [client 74.248.130.1:13131] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "aeTSRcNMD-ccazQlTslYyAAAAUQ"]
[Sun Apr 19 21:01:57.866933 2026] [:error] [pid 47773:tid 47817] [client 74.248.130.1:31041] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "aeTSReiBHdnCJDuPq9A9dwAAAEE"]
[Sun Apr 19 21:01:58.462608 2026] [:error] [pid 47773:tid 47822] [client 74.248.130.1:60002] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/g.php"] [unique_id "aeTSRuiBHdnCJDuPq9A9eQAAAEY"]
[Sun Apr 19 21:01:58.994067 2026] [:error] [pid 47772:tid 47813] [client 74.248.130.1:31077] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/g.php"] [unique_id "aeTSRoc0L16cb4smAz-14wAAABg"]
[Sun Apr 19 21:01:59.674939 2026] [:error] [pid 47773:tid 47821] [client 74.248.130.1:13077] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/g.php"] [unique_id "aeTSR-iBHdnCJDuPq9A9ewAAAEU"]
[Sun Apr 19 21:02:00.262093 2026] [:error] [pid 47772:tid 47810] [client 74.248.130.1:62917] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/g.php"] [unique_id "aeTSSIc0L16cb4smAz-16AAAABU"]
[Sun Apr 19 21:02:00.863433 2026] [:error] [pid 15765:tid 15860] [client 74.248.130.1:13121] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aeTSSPRqinw-W5EwQ7735wAAAoc"]
[Sun Apr 19 21:02:01.491761 2026] [:error] [pid 15764:tid 15845] [client 74.248.130.1:13551] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aeTSSWLL_sqdSHoVp-QLCgAAAlM"]
[Sun Apr 19 21:02:02.220807 2026] [:error] [pid 47772:tid 47803] [client 74.248.130.1:13685] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aeTSSoc0L16cb4smAz-16QAAAA4"]
[Sun Apr 19 21:02:02.829538 2026] [:error] [pid 15693:tid 15710] [client 74.248.130.1:43146] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aeTSSsNMD-ccazQlTslYyQAAAU4"]
[Sun Apr 19 21:02:03.403995 2026] [:error] [pid 15765:tid 15859] [client 74.248.130.1:31064] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aeTSS_Rqinw-W5EwQ7736gAAAoY"]
[Sun Apr 19 21:02:03.962307 2026] [:error] [pid 15693:tid 15709] [client 74.248.130.1:31046] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aeTSS8NMD-ccazQlTslYygAAAU0"]
[Sun Apr 19 21:02:04.557495 2026] [:error] [pid 47773:tid 47823] [client 74.248.130.1:13536] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aeTSTOiBHdnCJDuPq9A9jAAAAEc"]
[Sun Apr 19 21:02:05.215907 2026] [:error] [pid 15764:tid 15842] [client 74.248.130.1:62948] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aeTSTWLL_sqdSHoVp-QLFAAAAlA"]
[Sun Apr 19 21:02:05.904339 2026] [:error] [pid 15760:tid 15781] [client 74.248.130.1:13144] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ew.php"] [unique_id "aeTSTfSdD_XHQMJ_ISshCAAAAc0"]
[Sun Apr 19 21:02:06.823511 2026] [:error] [pid 47772:tid 47813] [client 74.248.130.1:12867] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ew.php"] [unique_id "aeTSToc0L16cb4smAz-16wAAABg"]
[Sun Apr 19 21:02:07.626652 2026] [:error] [pid 15764:tid 15827] [client 74.248.130.1:31056] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ew.php"] [unique_id "aeTST2LL_sqdSHoVp-QLGgAAAkE"]
[Sun Apr 19 21:02:08.278925 2026] [:error] [pid 15760:tid 15772] [client 74.248.130.1:12873] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ew.php"] [unique_id "aeTSUPSdD_XHQMJ_ISshEAAAAcQ"]
[Sun Apr 19 21:02:08.850654 2026] [:error] [pid 47773:tid 47824] [client 74.248.130.1:13100] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "aeTSUOiBHdnCJDuPq9A9oAAAAEg"]
[Sun Apr 19 21:02:09.448767 2026] [:error] [pid 15693:tid 15714] [client 74.248.130.1:13044] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "aeTSUcNMD-ccazQlTslYywAAAVI"]
[Sun Apr 19 21:02:10.013094 2026] [:error] [pid 47886:tid 47896] [client 74.248.130.1:62954] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "aeTSUkSe8yiyuPrD7yN0DgAAAMg"]
[Sun Apr 19 21:02:10.581977 2026] [:error] [pid 47886:tid 47911] [client 74.248.130.1:13014] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "aeTSUkSe8yiyuPrD7yN0EQAAANc"]
[Sun Apr 19 21:02:11.329564 2026] [:error] [pid 47773:tid 47831] [client 74.248.130.1:13046] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hypo.php"] [unique_id "aeTSU-iBHdnCJDuPq9A9pAAAAE8"]
[Sun Apr 19 21:02:11.944294 2026] [:error] [pid 15763:tid 15798] [client 74.248.130.1:13668] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hypo.php"] [unique_id "aeTSU7MXv1Y1THOoxaDyowAAAgI"]
[Sun Apr 19 21:02:12.804447 2026] [:error] [pid 47772:tid 47801] [client 74.248.130.1:13182] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hypo.php"] [unique_id "aeTSVIc0L16cb4smAz-18QAAAAw"]
[Sun Apr 19 21:02:13.726854 2026] [:error] [pid 47772:tid 47804] [client 74.248.130.1:12875] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hypo.php"] [unique_id "aeTSVYc0L16cb4smAz-19gAAAA8"]
[Sun Apr 19 21:02:14.360697 2026] [:error] [pid 47772:tid 47798] [client 74.248.130.1:13543] [client 74.248.130.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file18.php"] [unique_id "aeTSVoc0L16cb4smAz-1_AAAAAk"]
[Mon Apr 20 00:53:34.917829 2026] [:error] [pid 15764:tid 15850] [client 74.248.152.234:59682] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "aeUIjmLL_sqdSHoVp-RkYAAAAlc"]
[Mon Apr 20 00:53:36.787787 2026] [:error] [pid 15763:tid 15809] [client 74.248.152.234:60174] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "aeUIkLMXv1Y1THOoxaAuiQAAAg0"]
[Mon Apr 20 00:53:37.546164 2026] [:error] [pid 47772:tid 47810] [client 74.248.152.234:60164] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "aeUIkYc0L16cb4smAz_9DgAAABU"]
[Mon Apr 20 00:53:38.524122 2026] [:error] [pid 15760:tid 15780] [client 74.248.152.234:59689] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "aeUIkvSdD_XHQMJ_ISuZAwAAAcw"]
[Mon Apr 20 00:53:39.501420 2026] [:error] [pid 47772:tid 47806] [client 74.248.152.234:55388] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "aeUIk4c0L16cb4smAz_9EQAAABE"]
[Mon Apr 20 00:53:40.059344 2026] [:error] [pid 15763:tid 15797] [client 74.248.152.234:60244] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "aeUIlLMXv1Y1THOoxaAuigAAAgE"]
[Mon Apr 20 00:53:40.840621 2026] [:error] [pid 15763:tid 15798] [client 74.248.152.234:55390] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "aeUIlLMXv1Y1THOoxaAuiwAAAgI"]
[Mon Apr 20 00:53:41.560846 2026] [:error] [pid 47772:tid 47792] [client 74.248.152.234:60219] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "aeUIlYc0L16cb4smAz_9FAAAAAM"]
[Mon Apr 20 00:53:42.321152 2026] [:error] [pid 47772:tid 47795] [client 74.248.152.234:52955] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aeUIloc0L16cb4smAz_9FwAAAAY"]
[Mon Apr 20 00:53:43.067432 2026] [:error] [pid 15764:tid 15846] [client 74.248.152.234:58587] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aeUIl2LL_sqdSHoVp-RkZwAAAlQ"]
[Mon Apr 20 00:53:43.627995 2026] [:error] [pid 47886:tid 47903] [client 74.248.152.234:52988] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aeUIl0Se8yiyuPrD7yOV_AAAAM8"]
[Mon Apr 20 00:53:45.025939 2026] [:error] [pid 15760:tid 15775] [client 74.248.152.234:7958] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "aeUImfSdD_XHQMJ_ISuZEAAAAcc"]
[Mon Apr 20 00:53:45.939584 2026] [:error] [pid 15765:tid 15876] [client 74.248.152.234:7994] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aeUImfRqinw-W5EwQ74W4AAAApc"]
[Mon Apr 20 00:53:46.583992 2026] [:error] [pid 15763:tid 15818] [client 74.248.152.234:60239] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aeUImrMXv1Y1THOoxaAukgAAAhY"]
[Mon Apr 20 00:53:47.198694 2026] [:error] [pid 15760:tid 15774] [client 74.248.152.234:55423] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aeUIm_SdD_XHQMJ_ISuZHAAAAcY"]
[Mon Apr 20 00:53:47.841195 2026] [:error] [pid 47886:tid 47894] [client 74.248.152.234:58562] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lib.php"] [unique_id "aeUIm0Se8yiyuPrD7yOV_wAAAMY"]
[Mon Apr 20 00:53:48.940557 2026] [:error] [pid 15765:tid 15855] [client 74.248.152.234:55372] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file-kikikoko.php"] [unique_id "aeUInPRqinw-W5EwQ74W4QAAAoI"]
[Mon Apr 20 00:53:49.945429 2026] [:error] [pid 15764:tid 15831] [client 74.248.152.234:60281] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file-kikikoko.php"] [unique_id "aeUInWLL_sqdSHoVp-RkawAAAkU"]
[Mon Apr 20 00:53:52.023015 2026] [:error] [pid 15760:tid 15790] [client 74.248.152.234:60271] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file-kikikoko.php"] [unique_id "aeUIoPSdD_XHQMJ_ISuZMAAAAdY"]
[Mon Apr 20 00:53:53.835166 2026] [:error] [pid 47775:tid 47861] [client 74.248.152.234:53512] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file-kikikoko.php"] [unique_id "aeUIobmztjlk9tsmoew8fAAAAJI"]
[Mon Apr 20 00:53:57.380102 2026] [:error] [pid 47775:tid 47863] [client 74.248.152.234:52931] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aeUIpbmztjlk9tsmoew8gQAAAJQ"]
[Mon Apr 20 00:53:58.453432 2026] [:error] [pid 15760:tid 15781] [client 74.248.152.234:52911] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aeUIpvSdD_XHQMJ_ISuZRAAAAc0"]
[Mon Apr 20 00:54:00.683495 2026] [:error] [pid 47772:tid 47796] [client 74.248.152.234:55420] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aeUIqIc0L16cb4smAz_9HwAAAAc"]
[Mon Apr 20 00:54:01.968408 2026] [:error] [pid 47772:tid 47810] [client 74.248.152.234:52893] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aeUIqYc0L16cb4smAz_9IQAAABU"]
[Mon Apr 20 00:54:03.295695 2026] [:error] [pid 47773:tid 47819] [client 74.248.152.234:60209] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ganja.php"] [unique_id "aeUIq-iBHdnCJDuPq9BtFwAAAEM"]
[Mon Apr 20 00:54:04.342220 2026] [:error] [pid 47773:tid 47830] [client 74.248.152.234:60184] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ganja.php"] [unique_id "aeUIrOiBHdnCJDuPq9BtGAAAAE4"]
[Mon Apr 20 00:54:04.921698 2026] [:error] [pid 15694:tid 15730] [client 74.248.152.234:59676] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ganja.php"] [unique_id "aeUIrLimB-jol1fwqAokpwAAAYQ"]
[Mon Apr 20 00:54:05.808649 2026] [:error] [pid 15760:tid 15777] [client 74.248.152.234:58584] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ganja.php"] [unique_id "aeUIrfSdD_XHQMJ_ISuZUAAAAck"]
[Mon Apr 20 00:54:06.636467 2026] [:error] [pid 47886:tid 47900] [client 74.248.152.234:52872] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/doc.php"] [unique_id "aeUIrkSe8yiyuPrD7yOWBAAAAMw"]
[Mon Apr 20 00:54:07.251571 2026] [:error] [pid 15764:tid 15829] [client 74.248.152.234:60188] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/doc.php"] [unique_id "aeUIr2LL_sqdSHoVp-RkfgAAAkM"]
[Mon Apr 20 00:54:07.939672 2026] [:error] [pid 15760:tid 15792] [client 74.248.152.234:63317] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/doc.php"] [unique_id "aeUIr_SdD_XHQMJ_ISuZVAAAAdg"]
[Mon Apr 20 00:54:08.594520 2026] [:error] [pid 15760:tid 15790] [client 74.248.152.234:53522] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/doc.php"] [unique_id "aeUIsPSdD_XHQMJ_ISuZWAAAAdY"]
[Mon Apr 20 00:54:09.153854 2026] [:error] [pid 15760:tid 15785] [client 74.248.152.234:7991] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sad821.php"] [unique_id "aeUIsfSdD_XHQMJ_ISuZXQAAAdE"]
[Mon Apr 20 00:54:09.687938 2026] [:error] [pid 15760:tid 15776] [client 74.248.152.234:7971] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sad821.php"] [unique_id "aeUIsfSdD_XHQMJ_ISuZYwAAAcg"]
[Mon Apr 20 00:54:10.311183 2026] [:error] [pid 47773:tid 47832] [client 74.248.152.234:59662] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sad821.php"] [unique_id "aeUIsuiBHdnCJDuPq9BtGgAAAFA"]
[Mon Apr 20 00:54:10.841993 2026] [:error] [pid 15765:tid 15865] [client 74.248.152.234:52986] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sad821.php"] [unique_id "aeUIsvRqinw-W5EwQ74W4wAAAow"]
[Mon Apr 20 00:54:11.655076 2026] [:error] [pid 15764:tid 15832] [client 74.248.152.234:59670] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sad8210.php"] [unique_id "aeUIs2LL_sqdSHoVp-RkgQAAAkY"]
[Mon Apr 20 00:54:12.380473 2026] [:error] [pid 47772:tid 47794] [client 74.248.152.234:60187] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sad8210.php"] [unique_id "aeUItIc0L16cb4smAz_9MwAAAAU"]
[Mon Apr 20 00:54:12.983987 2026] [:error] [pid 15765:tid 15859] [client 74.248.152.234:52954] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sad8210.php"] [unique_id "aeUItPRqinw-W5EwQ74W5AAAAoY"]
[Mon Apr 20 00:54:13.731320 2026] [:error] [pid 15764:tid 15838] [client 74.248.152.234:60267] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sad8210.php"] [unique_id "aeUItWLL_sqdSHoVp-RkhQAAAkw"]
[Mon Apr 20 00:54:14.336945 2026] [:error] [pid 15694:tid 15726] [client 74.248.152.234:52906] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeUItrimB-jol1fwqAokqwAAAYM"]
[Mon Apr 20 00:54:15.114819 2026] [:error] [pid 47773:tid 47828] [client 74.248.152.234:58597] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeUIt-iBHdnCJDuPq9BtIAAAAEw"]
[Mon Apr 20 00:54:15.643161 2026] [:error] [pid 15764:tid 15830] [client 74.248.152.234:59687] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeUIt2LL_sqdSHoVp-RkjQAAAkQ"]
[Mon Apr 20 00:54:16.229834 2026] [:error] [pid 15760:tid 15786] [client 74.248.152.234:55417] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeUIuPSdD_XHQMJ_ISuZZwAAAdI"]
[Mon Apr 20 00:54:16.925540 2026] [:error] [pid 15764:tid 15836] [client 74.248.152.234:63319] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/man.php"] [unique_id "aeUIuGLL_sqdSHoVp-RkkAAAAko"]
[Mon Apr 20 00:54:17.505558 2026] [:error] [pid 15693:tid 15701] [client 74.248.152.234:55374] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/man.php"] [unique_id "aeUIucNMD-ccazQlTslt2gAAAUU"]
[Mon Apr 20 00:54:18.048066 2026] [:error] [pid 15693:tid 15704] [client 74.248.152.234:55365] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/man.php"] [unique_id "aeUIusNMD-ccazQlTslt2wAAAUg"]
[Mon Apr 20 00:54:18.612329 2026] [:error] [pid 15693:tid 15708] [client 74.248.152.234:59700] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/man.php"] [unique_id "aeUIusNMD-ccazQlTslt3AAAAUw"]
[Mon Apr 20 00:54:19.275531 2026] [:error] [pid 15763:tid 15808] [client 74.248.152.234:7970] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "aeUIu7MXv1Y1THOoxaAunwAAAgw"]
[Mon Apr 20 00:54:19.900551 2026] [:error] [pid 15764:tid 15840] [client 74.248.152.234:58606] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "aeUIu2LL_sqdSHoVp-RklQAAAk4"]
[Mon Apr 20 00:54:20.475652 2026] [:error] [pid 15765:tid 15868] [client 74.248.152.234:60272] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "aeUIvPRqinw-W5EwQ74W6wAAAo8"]
[Mon Apr 20 00:54:21.072605 2026] [:error] [pid 47772:tid 47807] [client 74.248.152.234:52933] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "aeUIvYc0L16cb4smAz_9OgAAABI"]
[Mon Apr 20 00:54:21.610971 2026] [:error] [pid 47772:tid 47804] [client 74.248.152.234:7982] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "aeUIvYc0L16cb4smAz_9PAAAAA8"]
[Mon Apr 20 00:54:22.576362 2026] [:error] [pid 15763:tid 15817] [client 74.248.152.234:58607] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "aeUIvrMXv1Y1THOoxaAuoAAAAhU"]
[Mon Apr 20 00:54:23.570566 2026] [:error] [pid 15694:tid 15733] [client 74.248.152.234:52967] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "aeUIv7imB-jol1fwqAokrwAAAYc"]
[Mon Apr 20 00:54:24.294620 2026] [:error] [pid 15765:tid 15865] [client 74.248.152.234:59690] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "aeUIwPRqinw-W5EwQ74W8QAAAow"]
[Mon Apr 20 00:54:25.311296 2026] [:error] [pid 47773:tid 47821] [client 74.248.152.234:58618] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "aeUIweiBHdnCJDuPq9BtKAAAAEU"]
[Mon Apr 20 00:54:26.242791 2026] [:error] [pid 47886:tid 47903] [client 74.248.152.234:58591] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "aeUIwkSe8yiyuPrD7yOWCAAAAM8"]
[Mon Apr 20 00:54:27.190119 2026] [:error] [pid 47775:tid 47859] [client 74.248.152.234:58605] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "aeUIw7mztjlk9tsmoew8hwAAAJA"]
[Mon Apr 20 00:54:27.913530 2026] [:error] [pid 15764:tid 15826] [client 74.248.152.234:7997] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "aeUIw2LL_sqdSHoVp-RknwAAAkA"]
[Mon Apr 20 00:54:28.535674 2026] [:error] [pid 15693:tid 15700] [client 74.248.152.234:52941] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aeUIxMNMD-ccazQlTslt3gAAAUQ"]
[Mon Apr 20 00:54:29.289734 2026] [:error] [pid 15764:tid 15831] [client 74.248.152.234:60175] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aeUIxWLL_sqdSHoVp-RkogAAAkU"]
[Mon Apr 20 00:54:30.197992 2026] [:error] [pid 47886:tid 47895] [client 74.248.152.234:58596] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aeUIxkSe8yiyuPrD7yOWDAAAAMc"]
[Mon Apr 20 00:54:30.748902 2026] [:error] [pid 15694:tid 15734] [client 74.248.152.234:60183] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aeUIxrimB-jol1fwqAoktwAAAYg"]
[Mon Apr 20 00:54:31.481558 2026] [:error] [pid 47773:tid 47824] [client 74.248.152.234:59651] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/12.php"] [unique_id "aeUIx-iBHdnCJDuPq9BtLwAAAEg"]
[Mon Apr 20 00:54:32.292821 2026] [:error] [pid 15764:tid 15833] [client 74.248.152.234:12383] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/12.php"] [unique_id "aeUIyGLL_sqdSHoVp-RkqQAAAkc"]
[Mon Apr 20 00:54:32.970086 2026] [:error] [pid 15765:tid 15871] [client 74.248.152.234:59698] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/12.php"] [unique_id "aeUIyPRqinw-W5EwQ74W9AAAApI"]
[Mon Apr 20 00:54:33.492061 2026] [:error] [pid 47775:tid 47846] [client 74.248.152.234:59709] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/12.php"] [unique_id "aeUIybmztjlk9tsmoew8jQAAAIM"]
[Mon Apr 20 00:54:39.652515 2026] [:error] [pid 15760:tid 15783] [client 74.248.152.234:55366] [client 74.248.152.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "aeUIz_SdD_XHQMJ_ISuZiAAAAc8"]
[Mon Apr 20 00:54:42.891111 2026] [:error] [pid 15693:tid 15720] [client 74.248.152.234:58611] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fone1.php"] [unique_id "aeUI0sNMD-ccazQlTslt5wAAAVg"]
[Mon Apr 20 00:54:43.770826 2026] [:error] [pid 47772:tid 47810] [client 74.248.152.234:52953] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fone1.php"] [unique_id "aeUI04c0L16cb4smAz_9TwAAABU"]
[Mon Apr 20 00:54:44.358779 2026] [:error] [pid 47773:tid 47830] [client 74.248.152.234:53526] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fone1.php"] [unique_id "aeUI1OiBHdnCJDuPq9BtOwAAAE4"]
[Mon Apr 20 00:54:44.969402 2026] [:error] [pid 47772:tid 47813] [client 74.248.152.234:63236] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fone1.php"] [unique_id "aeUI1Ic0L16cb4smAz_9UwAAABg"]
[Mon Apr 20 00:54:45.632884 2026] [:error] [pid 15694:tid 15733] [client 74.248.152.234:63285] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/config.php"] [unique_id "aeUI1bimB-jol1fwqAokuAAAAYc"]
[Mon Apr 20 00:54:46.209403 2026] [:error] [pid 15763:tid 15819] [client 74.248.152.234:7986] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/config.php"] [unique_id "aeUI1rMXv1Y1THOoxaAutAAAAhc"]
[Mon Apr 20 00:54:47.047838 2026] [:error] [pid 15764:tid 15831] [client 74.248.152.234:55363] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/config.php"] [unique_id "aeUI12LL_sqdSHoVp-RkwwAAAkU"]
[Mon Apr 20 00:54:47.997811 2026] [:error] [pid 47772:tid 47795] [client 74.248.152.234:63275] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/config.php"] [unique_id "aeUI14c0L16cb4smAz_9WQAAAAY"]
[Mon Apr 20 00:54:48.978619 2026] [:error] [pid 15760:tid 15779] [client 74.248.152.234:60196] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xltt.php"] [unique_id "aeUI2PSdD_XHQMJ_ISuZmgAAAcs"]
[Mon Apr 20 00:54:50.070271 2026] [:error] [pid 47775:tid 47860] [client 74.248.152.234:55377] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xltt.php"] [unique_id "aeUI2rmztjlk9tsmoew8kgAAAJE"]
[Mon Apr 20 00:54:51.473734 2026] [:error] [pid 15760:tid 15784] [client 74.248.152.234:63293] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xltt.php"] [unique_id "aeUI2_SdD_XHQMJ_ISuZngAAAdA"]
[Mon Apr 20 00:54:52.204357 2026] [:error] [pid 15763:tid 15812] [client 74.248.152.234:60182] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xltt.php"] [unique_id "aeUI3LMXv1Y1THOoxaAuuwAAAhA"]
[Mon Apr 20 00:54:53.279221 2026] [:error] [pid 15694:tid 15735] [client 74.248.152.234:58621] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "aeUI3bimB-jol1fwqAokwQAAAYk"]
[Mon Apr 20 00:54:53.883078 2026] [:error] [pid 47886:tid 47888] [client 74.248.152.234:52980] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "aeUI3USe8yiyuPrD7yOWEAAAAMA"]
[Mon Apr 20 00:54:54.832011 2026] [:error] [pid 15693:tid 15704] [client 74.248.152.234:60233] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "aeUI3sNMD-ccazQlTslt7AAAAUg"]
[Mon Apr 20 00:54:55.438206 2026] [:error] [pid 47772:tid 47789] [client 74.248.152.234:58617] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "aeUI34c0L16cb4smAz_9WwAAAAA"]
[Mon Apr 20 00:54:56.149530 2026] [:error] [pid 15760:tid 15773] [client 74.248.152.234:60260] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aeUI4PSdD_XHQMJ_ISuZogAAAcU"]
[Mon Apr 20 00:54:56.862107 2026] [:error] [pid 47773:tid 47822] [client 74.248.152.234:58565] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aeUI4OiBHdnCJDuPq9BtPgAAAEY"]
[Mon Apr 20 00:54:57.479886 2026] [:error] [pid 15765:tid 15874] [client 74.248.152.234:60198] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aeUI4fRqinw-W5EwQ74W-AAAApU"]
[Mon Apr 20 00:54:58.202363 2026] [:error] [pid 47886:tid 47901] [client 74.248.152.234:59663] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aeUI4kSe8yiyuPrD7yOWFQAAAM0"]
[Mon Apr 20 00:54:59.143814 2026] [:error] [pid 47886:tid 47907] [client 74.248.152.234:53528] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "aeUI40Se8yiyuPrD7yOWGAAAANM"]
[Mon Apr 20 00:54:59.974012 2026] [:error] [pid 47772:tid 47798] [client 74.248.152.234:63277] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "aeUI44c0L16cb4smAz_9YgAAAAk"]
[Mon Apr 20 00:55:01.541550 2026] [:error] [pid 15763:tid 15799] [client 74.248.152.234:60253] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "aeUI5bMXv1Y1THOoxaAuxAAAAgM"]
[Mon Apr 20 00:55:02.572846 2026] [:error] [pid 15763:tid 15818] [client 74.248.152.234:60264] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "aeUI5rMXv1Y1THOoxaAuxgAAAhY"]
[Mon Apr 20 00:55:03.214201 2026] [:error] [pid 15763:tid 15804] [client 74.248.152.234:7949] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wglum1.php"] [unique_id "aeUI57MXv1Y1THOoxaAuxwAAAgg"]
[Mon Apr 20 00:55:04.127644 2026] [:error] [pid 15693:tid 15714] [client 74.248.152.234:52987] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wglum1.php"] [unique_id "aeUI6MNMD-ccazQlTslt8QAAAVI"]
[Mon Apr 20 00:55:04.696352 2026] [:error] [pid 47773:tid 47828] [client 74.248.152.234:63262] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wglum1.php"] [unique_id "aeUI6OiBHdnCJDuPq9BtRQAAAEw"]
[Mon Apr 20 00:55:05.223279 2026] [:error] [pid 47773:tid 47833] [client 74.248.152.234:58581] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wglum1.php"] [unique_id "aeUI6eiBHdnCJDuPq9BtSAAAAFE"]
[Mon Apr 20 00:55:06.157002 2026] [:error] [pid 15760:tid 15783] [client 74.248.152.234:59660] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "aeUI6vSdD_XHQMJ_ISuZpgAAAc8"]
[Mon Apr 20 00:55:06.824037 2026] [:error] [pid 47773:tid 47834] [client 74.248.152.234:44377] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "aeUI6uiBHdnCJDuPq9BtSwAAAFI"]
[Mon Apr 20 00:55:07.696253 2026] [:error] [pid 15765:tid 15874] [client 74.248.152.234:7993] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "aeUI6_Rqinw-W5EwQ74XCAAAApU"]
[Mon Apr 20 00:55:08.541065 2026] [:error] [pid 15765:tid 15866] [client 74.248.152.234:7952] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ng.php"] [unique_id "aeUI7PRqinw-W5EwQ74XDAAAAo0"]
[Mon Apr 20 00:55:09.491139 2026] [:error] [pid 15764:tid 15827] [client 74.248.152.234:7940] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "aeUI7WLL_sqdSHoVp-RkzgAAAkE"]
[Mon Apr 20 00:55:10.120437 2026] [:error] [pid 47772:tid 47809] [client 74.248.152.234:58592] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "aeUI7oc0L16cb4smAz_9ZgAAABQ"]
[Mon Apr 20 00:55:10.845318 2026] [:error] [pid 47772:tid 47803] [client 74.248.152.234:7984] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "aeUI7oc0L16cb4smAz_9aAAAAA4"]
[Mon Apr 20 00:55:11.610847 2026] [:error] [pid 15760:tid 15792] [client 74.248.152.234:60252] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wgift1.php"] [unique_id "aeUI7_SdD_XHQMJ_ISuZtgAAAdg"]
[Mon Apr 20 00:55:12.635835 2026] [:error] [pid 15760:tid 15781] [client 74.248.152.234:55392] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xynz.php"] [unique_id "aeUI8PSdD_XHQMJ_ISuZtwAAAc0"]
[Mon Apr 20 00:55:13.256799 2026] [:error] [pid 47775:tid 47865] [client 74.248.152.234:59666] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xynz.php"] [unique_id "aeUI8bmztjlk9tsmoew8sAAAAJY"]
[Mon Apr 20 00:55:13.840937 2026] [:error] [pid 47775:tid 47856] [client 74.248.152.234:58560] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xynz.php"] [unique_id "aeUI8bmztjlk9tsmoew8sgAAAI0"]
[Mon Apr 20 00:55:14.378801 2026] [:error] [pid 15760:tid 15791] [client 74.248.152.234:58563] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xynz.php"] [unique_id "aeUI8vSdD_XHQMJ_ISuZvAAAAdc"]
[Mon Apr 20 00:55:14.925247 2026] [:error] [pid 15760:tid 15781] [client 74.248.152.234:52873] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeUI8vSdD_XHQMJ_ISuZwAAAAc0"]
[Mon Apr 20 00:55:15.603876 2026] [:error] [pid 47775:tid 47860] [client 74.248.152.234:55381] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeUI87mztjlk9tsmoew8swAAAJE"]
[Mon Apr 20 00:55:16.338399 2026] [:error] [pid 47775:tid 47844] [client 74.248.152.234:50550] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeUI9Lmztjlk9tsmoew8tgAAAIE"]
[Mon Apr 20 00:55:16.935906 2026] [:error] [pid 15760:tid 15783] [client 74.248.152.234:60169] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/images/admin.php"] [unique_id "aeUI9PSdD_XHQMJ_ISuZxAAAAc8"]
[Mon Apr 20 00:55:18.241400 2026] [:error] [pid 47775:tid 47845] [client 74.248.152.234:63274] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/press.php"] [unique_id "aeUI9rmztjlk9tsmoew8uAAAAII"]
[Mon Apr 20 00:55:19.744491 2026] [:error] [pid 15694:tid 15748] [client 74.248.152.234:7966] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/press.php"] [unique_id "aeUI97imB-jol1fwqAokxQAAAZY"]
[Mon Apr 20 00:55:20.611563 2026] [:error] [pid 47775:tid 47859] [client 74.248.152.234:59694] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/press.php"] [unique_id "aeUI-Lmztjlk9tsmoew8uQAAAJA"]
[Mon Apr 20 00:55:21.320787 2026] [:error] [pid 47773:tid 47826] [client 74.248.152.234:52880] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/press.php"] [unique_id "aeUI-eiBHdnCJDuPq9BtTgAAAEo"]
[Mon Apr 20 00:55:21.882477 2026] [:error] [pid 15760:tid 15791] [client 74.248.152.234:50529] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "aeUI-fSdD_XHQMJ_ISuZzAAAAdc"]
[Mon Apr 20 00:55:22.454531 2026] [:error] [pid 15765:tid 15853] [client 74.248.152.234:50498] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "aeUI-vRqinw-W5EwQ74XFQAAAoE"]
[Mon Apr 20 00:55:23.081725 2026] [:error] [pid 15763:tid 15796] [client 74.248.152.234:60221] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "aeUI-7MXv1Y1THOoxaAu4QAAAgA"]
[Mon Apr 20 00:55:23.716449 2026] [:error] [pid 15694:tid 15739] [client 74.248.152.234:60253] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "aeUI-7imB-jol1fwqAokyAAAAY0"]
[Mon Apr 20 00:55:24.298032 2026] [:error] [pid 15763:tid 15798] [client 74.248.152.234:44381] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rh.php"] [unique_id "aeUI_LMXv1Y1THOoxaAu5QAAAgI"]
[Mon Apr 20 00:55:25.022506 2026] [:error] [pid 15693:tid 15707] [client 74.248.152.234:58604] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rh.php"] [unique_id "aeUI_cNMD-ccazQlTslt-gAAAUs"]
[Mon Apr 20 00:55:25.737128 2026] [:error] [pid 47773:tid 47838] [client 74.248.152.234:50539] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rh.php"] [unique_id "aeUI_eiBHdnCJDuPq9BtVQAAAFY"]
[Mon Apr 20 00:55:26.507662 2026] [:error] [pid 47773:tid 47820] [client 74.248.152.234:60248] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rh.php"] [unique_id "aeUI_uiBHdnCJDuPq9BtWQAAAEQ"]
[Mon Apr 20 00:55:27.566740 2026] [:error] [pid 47772:tid 47789] [client 74.248.152.234:49596] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/d.php"] [unique_id "aeUI_4c0L16cb4smAz_9bgAAAAA"]
[Mon Apr 20 00:55:28.355131 2026] [:error] [pid 15763:tid 15797] [client 74.248.152.234:44390] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/d.php"] [unique_id "aeUJALMXv1Y1THOoxaAu7AAAAgE"]
[Mon Apr 20 00:55:29.074999 2026] [:error] [pid 47772:tid 47790] [client 74.248.152.234:63239] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/d.php"] [unique_id "aeUJAYc0L16cb4smAz_9cQAAAAE"]
[Mon Apr 20 00:55:29.706500 2026] [:error] [pid 15764:tid 15841] [client 74.248.152.234:63253] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/d.php"] [unique_id "aeUJAWLL_sqdSHoVp-Rk3QAAAk8"]
[Mon Apr 20 00:55:30.252914 2026] [:error] [pid 15763:tid 15812] [client 74.248.152.234:60265] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aeUJArMXv1Y1THOoxaAu7wAAAhA"]
[Mon Apr 20 00:55:30.924732 2026] [:error] [pid 15764:tid 15846] [client 74.248.152.234:44396] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aeUJAmLL_sqdSHoVp-Rk3wAAAlQ"]
[Mon Apr 20 00:55:31.728829 2026] [:error] [pid 15764:tid 15830] [client 74.248.152.234:50543] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aeUJA2LL_sqdSHoVp-Rk4gAAAkQ"]
[Mon Apr 20 00:55:32.417359 2026] [:error] [pid 15764:tid 15828] [client 74.248.152.234:50513] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aeUJBGLL_sqdSHoVp-Rk5QAAAkI"]
[Mon Apr 20 00:55:33.019991 2026] [:error] [pid 15763:tid 15816] [client 74.248.152.234:59736] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/view.php"] [unique_id "aeUJBbMXv1Y1THOoxaAu9wAAAhQ"]
[Mon Apr 20 00:55:33.893375 2026] [:error] [pid 15765:tid 15869] [client 74.248.152.234:60170] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/view.php"] [unique_id "aeUJBfRqinw-W5EwQ74XGQAAApA"]
[Mon Apr 20 00:55:34.768592 2026] [:error] [pid 15694:tid 15731] [client 74.248.152.234:58571] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/view.php"] [unique_id "aeUJBrimB-jol1fwqAokzwAAAYU"]
[Mon Apr 20 00:55:36.009702 2026] [:error] [pid 15764:tid 15847] [client 74.248.152.234:55401] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/view.php"] [unique_id "aeUJCGLL_sqdSHoVp-Rk5wAAAlU"]
[Mon Apr 20 00:55:38.805076 2026] [:error] [pid 15763:tid 15820] [client 74.248.152.234:60232] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cilus.php"] [unique_id "aeUJCrMXv1Y1THOoxaAu_AAAAhg"]
[Mon Apr 20 00:55:40.293017 2026] [:error] [pid 15764:tid 15847] [client 74.248.152.234:49597] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cilus.php"] [unique_id "aeUJDGLL_sqdSHoVp-Rk8wAAAlU"]
[Mon Apr 20 00:55:41.426018 2026] [:error] [pid 15694:tid 15730] [client 74.248.152.234:50542] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cilus.php"] [unique_id "aeUJDbimB-jol1fwqAok0gAAAYQ"]
[Mon Apr 20 00:55:47.803711 2026] [:error] [pid 15694:tid 15731] [client 74.248.152.234:52914] [client 74.248.152.234] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aeUJE7imB-jol1fwqAok4AAAAYU"]
[Mon Apr 20 00:55:51.267079 2026] [:error] [pid 47773:tid 47838] [client 74.248.152.234:63278] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/state.php"] [unique_id "aeUJF-iBHdnCJDuPq9BtagAAAFY"]
[Mon Apr 20 00:55:52.685719 2026] [:error] [pid 15763:tid 15819] [client 74.248.152.234:59773] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/state.php"] [unique_id "aeUJGLMXv1Y1THOoxaAvAgAAAhc"]
[Mon Apr 20 00:55:53.402583 2026] [:error] [pid 15765:tid 15859] [client 74.248.152.234:12113] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/state.php"] [unique_id "aeUJGfRqinw-W5EwQ74XKgAAAoY"]
[Mon Apr 20 00:55:54.285774 2026] [:error] [pid 15765:tid 15865] [client 74.248.152.234:43440] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/state.php"] [unique_id "aeUJGvRqinw-W5EwQ74XLAAAAow"]
[Mon Apr 20 00:55:54.834901 2026] [:error] [pid 15764:tid 15847] [client 74.248.152.234:49594] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ss.php"] [unique_id "aeUJGmLL_sqdSHoVp-Rk_AAAAlU"]
[Mon Apr 20 00:55:55.531137 2026] [:error] [pid 15760:tid 15773] [client 74.248.152.234:12149] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ss.php"] [unique_id "aeUJG_SdD_XHQMJ_ISuZ8gAAAcU"]
[Mon Apr 20 00:55:56.340869 2026] [:error] [pid 15760:tid 15775] [client 74.248.152.234:53591] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ss.php"] [unique_id "aeUJHPSdD_XHQMJ_ISuZ8wAAAcc"]
[Mon Apr 20 00:55:57.588263 2026] [:error] [pid 15760:tid 15774] [client 74.248.152.234:12134] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ss.php"] [unique_id "aeUJHfSdD_XHQMJ_ISuZ9gAAAcY"]
[Mon Apr 20 00:55:58.128069 2026] [:error] [pid 15760:tid 15779] [client 74.248.152.234:56794] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/error_log.php"] [unique_id "aeUJHvSdD_XHQMJ_ISuZ-gAAAcs"]
[Mon Apr 20 00:55:58.905757 2026] [:error] [pid 15760:tid 15769] [client 74.248.152.234:45554] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/error_log.php"] [unique_id "aeUJHvSdD_XHQMJ_ISuaAgAAAcE"]
[Mon Apr 20 00:55:59.994871 2026] [:error] [pid 15760:tid 15777] [client 74.248.152.234:44685] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/error_log.php"] [unique_id "aeUJH_SdD_XHQMJ_ISuaFAAAAck"]
[Mon Apr 20 00:56:00.714551 2026] [:error] [pid 15694:tid 15724] [client 74.248.152.234:53611] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/error_log.php"] [unique_id "aeUJILimB-jol1fwqAok6QAAAYE"]
[Mon Apr 20 00:56:01.463703 2026] [:error] [pid 15760:tid 15774] [client 74.248.152.234:44685] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mifta.php"] [unique_id "aeUJIfSdD_XHQMJ_ISuaGwAAAcY"]
[Mon Apr 20 00:56:02.374184 2026] [:error] [pid 15764:tid 15840] [client 74.248.152.234:63769] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mifta.php"] [unique_id "aeUJImLL_sqdSHoVp-Rk_wAAAk4"]
[Mon Apr 20 00:56:03.317360 2026] [:error] [pid 15764:tid 15841] [client 74.248.152.234:60595] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mifta.php"] [unique_id "aeUJI2LL_sqdSHoVp-RlAwAAAk8"]
[Mon Apr 20 00:56:04.084440 2026] [:error] [pid 15760:tid 15772] [client 74.248.152.234:45522] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mifta.php"] [unique_id "aeUJJPSdD_XHQMJ_ISuaIgAAAcQ"]
[Mon Apr 20 00:56:04.618502 2026] [:error] [pid 47772:tid 47811] [client 74.248.152.234:45523] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws57.php"] [unique_id "aeUJJIc0L16cb4smAz_9fgAAABY"]
[Mon Apr 20 00:56:05.451355 2026] [:error] [pid 15760:tid 15792] [client 74.248.152.234:53630] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws57.php"] [unique_id "aeUJJfSdD_XHQMJ_ISuaJgAAAdg"]
[Mon Apr 20 00:56:06.441771 2026] [:error] [pid 15764:tid 15848] [client 74.248.152.234:46428] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws57.php"] [unique_id "aeUJJmLL_sqdSHoVp-RlBgAAAlY"]
[Mon Apr 20 00:56:07.297626 2026] [:error] [pid 15760:tid 15791] [client 74.248.152.234:8173] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws57.php"] [unique_id "aeUJJ_SdD_XHQMJ_ISuaLwAAAdc"]
[Mon Apr 20 00:56:07.819964 2026] [:error] [pid 15760:tid 15780] [client 74.248.152.234:8057] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "aeUJJ_SdD_XHQMJ_ISuaMQAAAcw"]
[Mon Apr 20 00:56:08.339141 2026] [:error] [pid 15760:tid 15783] [client 74.248.152.234:45547] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "aeUJKPSdD_XHQMJ_ISuaNgAAAc8"]
[Mon Apr 20 00:56:08.931786 2026] [:error] [pid 15764:tid 15842] [client 74.248.152.234:61970] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "aeUJKGLL_sqdSHoVp-RlEAAAAlA"]
[Mon Apr 20 00:56:09.466973 2026] [:error] [pid 47773:tid 47833] [client 74.248.152.234:46402] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "aeUJKeiBHdnCJDuPq9BtcwAAAFE"]
[Mon Apr 20 00:56:10.234186 2026] [:error] [pid 15764:tid 15846] [client 74.248.152.234:61959] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aeUJKmLL_sqdSHoVp-RlFAAAAlQ"]
[Mon Apr 20 00:56:10.895715 2026] [:error] [pid 15760:tid 15769] [client 74.248.152.234:8178] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aeUJKvSdD_XHQMJ_ISuaPgAAAcE"]
[Mon Apr 20 00:56:11.655900 2026] [:error] [pid 15760:tid 15786] [client 74.248.152.234:51676] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aeUJK_SdD_XHQMJ_ISuaQQAAAdI"]
[Mon Apr 20 00:56:12.576159 2026] [:error] [pid 15760:tid 15780] [client 74.248.152.234:48275] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aeUJLPSdD_XHQMJ_ISuaQwAAAcw"]
[Mon Apr 20 00:56:13.146620 2026] [:error] [pid 47772:tid 47790] [client 74.248.152.234:51686] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/packsin1.php"] [unique_id "aeUJLYc0L16cb4smAz_9lwAAAAE"]
[Mon Apr 20 00:56:13.835014 2026] [:error] [pid 15694:tid 15735] [client 74.248.152.234:58562] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/packsin1.php"] [unique_id "aeUJLbimB-jol1fwqAok6wAAAYk"]
[Mon Apr 20 00:56:14.514111 2026] [:error] [pid 15760:tid 15787] [client 74.248.152.234:8055] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/packsin1.php"] [unique_id "aeUJLvSdD_XHQMJ_ISuaSAAAAdM"]
[Mon Apr 20 00:56:15.245115 2026] [:error] [pid 15760:tid 15772] [client 74.248.152.234:57981] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/packsin1.php"] [unique_id "aeUJL_SdD_XHQMJ_ISuaSgAAAcQ"]
[Mon Apr 20 00:56:15.824433 2026] [:error] [pid 15764:tid 15838] [client 74.248.152.234:43369] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xs.php"] [unique_id "aeUJL2LL_sqdSHoVp-RlGAAAAkw"]
[Mon Apr 20 00:56:16.396417 2026] [:error] [pid 15760:tid 15769] [client 74.248.152.234:48256] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xs.php"] [unique_id "aeUJMPSdD_XHQMJ_ISuaTgAAAcE"]
[Mon Apr 20 00:56:17.106024 2026] [:error] [pid 15764:tid 15828] [client 74.248.152.234:12257] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xs.php"] [unique_id "aeUJMWLL_sqdSHoVp-RlHgAAAkI"]
[Mon Apr 20 00:56:17.893102 2026] [:error] [pid 15764:tid 15835] [client 74.248.152.234:50082] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xs.php"] [unique_id "aeUJMWLL_sqdSHoVp-RlHwAAAkk"]
[Mon Apr 20 00:56:18.719987 2026] [:error] [pid 15764:tid 15829] [client 74.248.152.234:48381] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/img.php"] [unique_id "aeUJMmLL_sqdSHoVp-RlIwAAAkM"]
[Mon Apr 20 00:56:19.297169 2026] [:error] [pid 47773:tid 47834] [client 74.248.152.234:12484] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/img.php"] [unique_id "aeUJM-iBHdnCJDuPq9BtdQAAAFI"]
[Mon Apr 20 00:56:20.003150 2026] [:error] [pid 15760:tid 15790] [client 74.248.152.234:43389] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/img.php"] [unique_id "aeUJNPSdD_XHQMJ_ISuaUQAAAdY"]
[Mon Apr 20 00:56:20.851157 2026] [:error] [pid 15760:tid 15781] [client 74.248.152.234:12515] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/img.php"] [unique_id "aeUJNPSdD_XHQMJ_ISuaUwAAAc0"]
[Mon Apr 20 00:56:21.513327 2026] [:error] [pid 15763:tid 15806] [client 74.248.152.234:12229] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aeUJNbMXv1Y1THOoxaAvDgAAAgo"]
[Mon Apr 20 00:56:22.102594 2026] [:error] [pid 15764:tid 15845] [client 74.248.152.234:50050] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aeUJNmLL_sqdSHoVp-RlKQAAAlM"]
[Mon Apr 20 00:56:22.643806 2026] [:error] [pid 47773:tid 47830] [client 74.248.152.234:48928] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aeUJNuiBHdnCJDuPq9BteQAAAE4"]
[Mon Apr 20 00:56:23.428645 2026] [:error] [pid 47773:tid 47824] [client 74.248.152.234:12486] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aeUJN-iBHdnCJDuPq9BtewAAAEg"]
[Mon Apr 20 00:56:23.984328 2026] [:error] [pid 15763:tid 15802] [client 74.248.152.234:12530] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/maxro.php"] [unique_id "aeUJN7MXv1Y1THOoxaAvEQAAAgY"]
[Mon Apr 20 00:56:24.627334 2026] [:error] [pid 47773:tid 47828] [client 74.248.152.234:48947] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/maxro.php"] [unique_id "aeUJOOiBHdnCJDuPq9BtfgAAAEw"]
[Mon Apr 20 00:56:25.533937 2026] [:error] [pid 15764:tid 15844] [client 74.248.152.234:50049] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/maxro.php"] [unique_id "aeUJOWLL_sqdSHoVp-RlMAAAAlI"]
[Mon Apr 20 00:56:26.543816 2026] [:error] [pid 15764:tid 15841] [client 74.248.152.234:48907] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/maxro.php"] [unique_id "aeUJOmLL_sqdSHoVp-RlMQAAAk8"]
[Mon Apr 20 00:56:27.255879 2026] [:error] [pid 15694:tid 15732] [client 74.248.152.234:59160] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a7.php"] [unique_id "aeUJO7imB-jol1fwqAok8AAAAYY"]
[Mon Apr 20 00:56:28.435870 2026] [:error] [pid 15760:tid 15774] [client 74.248.152.234:50086] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a7.php"] [unique_id "aeUJPPSdD_XHQMJ_ISuaWAAAAcY"]
[Mon Apr 20 00:56:29.696362 2026] [:error] [pid 47772:tid 47803] [client 74.248.152.234:12525] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a7.php"] [unique_id "aeUJPYc0L16cb4smAz_9oQAAAA4"]
[Mon Apr 20 00:56:30.819550 2026] [:error] [pid 15765:tid 15875] [client 74.248.152.234:62676] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a7.php"] [unique_id "aeUJPvRqinw-W5EwQ74XPgAAApY"]
[Mon Apr 20 00:56:31.662304 2026] [:error] [pid 47773:tid 47835] [client 74.248.152.234:52271] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-block.php"] [unique_id "aeUJP-iBHdnCJDuPq9BtjQAAAFM"]
[Mon Apr 20 00:56:32.514003 2026] [:error] [pid 15760:tid 15782] [client 74.248.152.234:50069] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-block.php"] [unique_id "aeUJQPSdD_XHQMJ_ISuaXgAAAc4"]
[Mon Apr 20 00:56:33.548754 2026] [:error] [pid 15764:tid 15830] [client 74.248.152.234:48342] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-block.php"] [unique_id "aeUJQWLL_sqdSHoVp-RlNQAAAkQ"]
[Mon Apr 20 00:56:34.177993 2026] [:error] [pid 47772:tid 47812] [client 74.248.152.234:57285] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-block.php"] [unique_id "aeUJQoc0L16cb4smAz_9owAAABc"]
[Mon Apr 20 00:56:34.907285 2026] [:error] [pid 47775:tid 47845] [client 74.248.152.234:62684] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aeUJQrmztjlk9tsmoew86wAAAII"]
[Mon Apr 20 00:56:35.673219 2026] [:error] [pid 15693:tid 15702] [client 74.248.152.234:59189] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aeUJQ8NMD-ccazQlTsluIwAAAUY"]
[Mon Apr 20 00:56:36.310633 2026] [:error] [pid 15763:tid 15820] [client 74.248.152.234:50097] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aeUJRLMXv1Y1THOoxaAvGQAAAhg"]
[Mon Apr 20 00:56:36.923396 2026] [:error] [pid 15765:tid 15856] [client 74.248.152.234:48339] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aeUJRPRqinw-W5EwQ74XSgAAAoM"]
[Mon Apr 20 00:56:37.534195 2026] [:error] [pid 15763:tid 15804] [client 74.248.152.234:62695] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/areak1.php"] [unique_id "aeUJRbMXv1Y1THOoxaAvGwAAAgg"]
[Mon Apr 20 00:56:38.075880 2026] [:error] [pid 15763:tid 15810] [client 74.248.152.234:50094] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/areak1.php"] [unique_id "aeUJRrMXv1Y1THOoxaAvHQAAAg4"]
[Mon Apr 20 00:56:38.950479 2026] [:error] [pid 47773:tid 47832] [client 74.248.152.234:48376] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/areak1.php"] [unique_id "aeUJRuiBHdnCJDuPq9BtnAAAAFA"]
[Mon Apr 20 00:56:39.748808 2026] [:error] [pid 15765:tid 15863] [client 74.248.152.234:50110] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/areak1.php"] [unique_id "aeUJR_Rqinw-W5EwQ74XVAAAAoo"]
[Mon Apr 20 00:56:40.441029 2026] [:error] [pid 15764:tid 15843] [client 74.248.152.234:50062] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sallu.php"] [unique_id "aeUJSGLL_sqdSHoVp-RlPgAAAlE"]
[Mon Apr 20 00:56:41.248921 2026] [:error] [pid 47886:tid 47889] [client 74.248.152.234:57328] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sallu.php"] [unique_id "aeUJSUSe8yiyuPrD7yOWRQAAAME"]
[Mon Apr 20 00:56:42.951948 2026] [:error] [pid 15760:tid 15788] [client 74.248.152.234:12537] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sallu.php"] [unique_id "aeUJSvSdD_XHQMJ_ISuaYwAAAdQ"]
[Mon Apr 20 00:56:43.835320 2026] [:error] [pid 15693:tid 15701] [client 74.248.152.234:57321] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sallu.php"] [unique_id "aeUJS8NMD-ccazQlTsluMgAAAUU"]
[Mon Apr 20 00:56:44.523940 2026] [:error] [pid 15760:tid 15792] [client 74.248.152.234:57337] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tiny2.php"] [unique_id "aeUJTPSdD_XHQMJ_ISuacQAAAdg"]
[Mon Apr 20 00:56:45.149221 2026] [:error] [pid 47886:tid 47911] [client 74.248.152.234:57284] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tiny2.php"] [unique_id "aeUJTUSe8yiyuPrD7yOWRwAAANc"]
[Mon Apr 20 00:56:45.957328 2026] [:error] [pid 47773:tid 47817] [client 74.248.152.234:57323] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tiny2.php"] [unique_id "aeUJTeiBHdnCJDuPq9BtowAAAEE"]
[Mon Apr 20 00:56:46.993012 2026] [:error] [pid 15765:tid 15862] [client 74.248.152.234:62659] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tiny2.php"] [unique_id "aeUJTvRqinw-W5EwQ74XYAAAAok"]
[Mon Apr 20 00:56:47.641738 2026] [:error] [pid 15693:tid 15707] [client 74.248.152.234:48321] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/7.php"] [unique_id "aeUJT8NMD-ccazQlTsluOQAAAUs"]
[Mon Apr 20 00:56:48.586539 2026] [:error] [pid 15760:tid 15788] [client 74.248.152.234:48359] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/7.php"] [unique_id "aeUJUPSdD_XHQMJ_ISuagAAAAdQ"]
[Mon Apr 20 00:56:59.043088 2026] [:error] [pid 15764:tid 15846] [client 74.248.152.234:52230] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "aeUJW2LL_sqdSHoVp-RlaAAAAlQ"]
[Mon Apr 20 00:56:59.669410 2026] [:error] [pid 47772:tid 47800] [client 74.248.152.234:56228] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "aeUJW4c0L16cb4smAz_9vwAAAAs"]
[Mon Apr 20 00:57:00.385950 2026] [:error] [pid 47773:tid 47816] [client 74.248.152.234:12240] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "aeUJXOiBHdnCJDuPq9BtwgAAAEA"]
[Mon Apr 20 00:57:01.036354 2026] [:error] [pid 15760:tid 15770] [client 74.248.152.234:48376] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws84.php"] [unique_id "aeUJXfSdD_XHQMJ_ISuavAAAAcI"]
[Mon Apr 20 00:57:01.644773 2026] [:error] [pid 15765:tid 15871] [client 74.248.152.234:50064] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws61.php"] [unique_id "aeUJXfRqinw-W5EwQ74XcwAAApI"]
[Mon Apr 20 00:57:02.402003 2026] [:error] [pid 47773:tid 47819] [client 74.248.152.234:54190] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws61.php"] [unique_id "aeUJXuiBHdnCJDuPq9BtxAAAAEM"]
[Mon Apr 20 00:57:03.214494 2026] [:error] [pid 15760:tid 15785] [client 74.248.152.234:12506] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws61.php"] [unique_id "aeUJX_SdD_XHQMJ_ISua0QAAAdE"]
[Mon Apr 20 00:57:03.850350 2026] [:error] [pid 47772:tid 47812] [client 74.248.152.234:7949] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws61.php"] [unique_id "aeUJX4c0L16cb4smAz_9ywAAABc"]
[Mon Apr 20 00:57:04.645204 2026] [:error] [pid 15694:tid 15732] [client 74.248.152.234:56195] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class-wp-image.php"] [unique_id "aeUJYLimB-jol1fwqAolCwAAAYY"]
[Mon Apr 20 00:57:05.342564 2026] [:error] [pid 15765:tid 15862] [client 74.248.152.234:52264] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class-wp-image.php"] [unique_id "aeUJYfRqinw-W5EwQ74XdAAAAok"]
[Mon Apr 20 00:57:06.261523 2026] [:error] [pid 47772:tid 47794] [client 74.248.152.234:44338] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class-wp-image.php"] [unique_id "aeUJYoc0L16cb4smAz_91QAAAAU"]
[Mon Apr 20 00:57:06.821074 2026] [:error] [pid 47775:tid 47861] [client 74.248.152.234:54246] [client 74.248.152.234] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class-wp-image.php"] [unique_id "aeUJYrmztjlk9tsmoew9AAAAAJI"]
[Mon Apr 20 11:03:23.092594 2026] [:error] [pid 11352:tid 11415] [client 34.30.92.68:55686] [client 34.30.92.68] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.30.92.68, incrementing ddos counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "aeWXe2l10mhMSfJ7ir8-FgAAAIE"]
[Mon Apr 20 11:03:23.305887 2026] [:error] [pid 11352:tid 11429] [client 34.30.92.68:55686] [client 34.30.92.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/"] [unique_id "aeWXe2l10mhMSfJ7ir8-GAAAAI8"]
[Mon Apr 20 11:03:24.154056 2026] [:error] [pid 11350:tid 11367] [client 34.30.92.68:50638] [client 34.30.92.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "aeWXfP4EoMBgOJuJnT0NLgAAAAg"]
[Mon Apr 20 11:03:24.994976 2026] [:error] [pid 11350:tid 11371] [client 34.30.92.68:63775] [client 34.30.92.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "aeWXfP4EoMBgOJuJnT0NMwAAAAw"]
[Mon Apr 20 11:03:25.793870 2026] [:error] [pid 11350:tid 11363] [client 34.30.92.68:62722] [client 34.30.92.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "aeWXff4EoMBgOJuJnT0NNgAAAAQ"]
[Mon Apr 20 11:03:26.611785 2026] [:error] [pid 11351:tid 11410] [client 34.30.92.68:58035] [client 34.30.92.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "aeWXfgN8Z1-vktaI_tNeaAAAAFc"]
[Mon Apr 20 11:03:27.410074 2026] [:error] [pid 11352:tid 11417] [client 34.30.92.68:56564] [client 34.30.92.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "aeWXf2l10mhMSfJ7ir8-IQAAAIM"]
[Mon Apr 20 11:03:28.220387 2026] [:error] [pid 11350:tid 11378] [client 34.30.92.68:58074] [client 34.30.92.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/news/wp-includes/wlwmanifest.xml"] [unique_id "aeWXgP4EoMBgOJuJnT0NPwAAABM"]
[Mon Apr 20 11:03:29.026956 2026] [:error] [pid 11441:tid 11457] [client 34.30.92.68:50564] [client 34.30.92.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2018/wp-includes/wlwmanifest.xml"] [unique_id "aeWXgcixByFUvmh319CmYAAAAM4"]
[Tue Apr 21 02:15:28.965385 2026] [:error] [pid 11441:tid 11456] [client 160.30.179.124:56242] [client 160.30.179.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env"] [unique_id "aeZtQMixByFUvmh319DuAQAAAM0"]
[Tue Apr 21 13:56:21.031646 2026] [:error] [pid 4777:tid 4810] [client 18.144.168.7:41334] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aecRhaxXur6bykKyLZRhTgAAARY"]
[Tue Apr 21 13:56:21.895031 2026] [:error] [pid 35320:tid 35334] [client 18.144.168.7:41364] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env"] [unique_id "aecRhYJW6fdXWO6agMHtWwAAAAQ"]
[Tue Apr 21 13:56:22.562454 2026] [:error] [pid 5377:tid 5394] [client 18.144.168.7:48956] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "aecRhrBKychFlrHBdvumMQAAAcg"]
[Tue Apr 21 13:56:23.228039 2026] [:error] [pid 5377:tid 5397] [client 18.144.168.7:48974] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.production"] [unique_id "aecRh7BKychFlrHBdvumMgAAAcs"]
[Tue Apr 21 13:56:23.888678 2026] [:error] [pid 4822:tid 4841] [client 18.144.168.7:49000] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.staging"] [unique_id "aecRhyAteFQFwS_23JlWIgAAAU8"]
[Tue Apr 21 13:56:24.551768 2026] [:error] [pid 5377:tid 5386] [client 18.144.168.7:49042] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.development"] [unique_id "aecRiLBKychFlrHBdvumNgAAAcA"]
[Tue Apr 21 13:56:25.215441 2026] [:error] [pid 4823:tid 4853] [client 18.144.168.7:49056] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.test"] [unique_id "aecRifc8mke3PfHqsxFj2gAAAYA"]
[Tue Apr 21 13:56:25.878221 2026] [:error] [pid 35321:tid 35398] [client 18.144.168.7:49092] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.remote"] [unique_id "aecRiTeHLhVUuu8cVXx-4gAAAE4"]
[Tue Apr 21 13:56:26.540627 2026] [:error] [pid 5377:tid 5396] [client 18.144.168.7:49124] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.bak"] [unique_id "aecRirBKychFlrHBdvumOQAAAco"]
[Tue Apr 21 13:56:27.196775 2026] [:error] [pid 35321:tid 35389] [client 18.144.168.7:49148] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.backup"] [unique_id "aecRizeHLhVUuu8cVXx-5QAAAEU"]
[Tue Apr 21 13:56:27.859500 2026] [:error] [pid 5377:tid 5398] [client 18.144.168.7:49182] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.save"] [unique_id "aecRi7BKychFlrHBdvumPAAAAcw"]
[Tue Apr 21 13:56:28.517323 2026] [:error] [pid 35320:tid 35343] [client 18.144.168.7:49202] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.old"] [unique_id "aecRjIJW6fdXWO6agMHtaAAAAA0"]
[Tue Apr 21 13:56:29.174350 2026] [:error] [pid 5377:tid 5390] [client 18.144.168.7:49232] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.sample"] [unique_id "aecRjbBKychFlrHBdvumQgAAAcQ"]
[Tue Apr 21 13:56:29.838100 2026] [:error] [pid 5377:tid 5389] [client 18.144.168.7:49262] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.example"] [unique_id "aecRjbBKychFlrHBdvumQwAAAcM"]
[Tue Apr 21 13:56:30.496524 2026] [:error] [pid 5377:tid 5386] [client 18.144.168.7:49270] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.dev"] [unique_id "aecRjrBKychFlrHBdvumRAAAAcA"]
[Tue Apr 21 13:56:31.154932 2026] [:error] [pid 4823:tid 4863] [client 18.144.168.7:49288] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.prod"] [unique_id "aecRj_c8mke3PfHqsxFj4wAAAYo"]
[Tue Apr 21 13:56:31.822097 2026] [:error] [pid 35322:tid 35374] [client 18.144.168.7:49296] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.stage"] [unique_id "aecRj6PoAfV40BTfVKylTwAAAJE"]
[Tue Apr 21 13:56:32.485290 2026] [:error] [pid 4823:tid 4857] [client 18.144.168.7:51380] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.docker"] [unique_id "aecRkPc8mke3PfHqsxFj5QAAAYQ"]
[Tue Apr 21 13:56:33.143376 2026] [:error] [pid 35322:tid 35380] [client 18.144.168.7:51410] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.live"] [unique_id "aecRkaPoAfV40BTfVKylUgAAAJc"]
[Tue Apr 21 13:56:33.846581 2026] [:error] [pid 35322:tid 35364] [client 18.144.168.7:51438] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.preprod"] [unique_id "aecRkaPoAfV40BTfVKylVAAAAIc"]
[Tue Apr 21 13:56:34.506169 2026] [:error] [pid 35321:tid 35398] [client 18.144.168.7:51470] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.uat"] [unique_id "aecRkjeHLhVUuu8cVXx-8AAAAE4"]
[Tue Apr 21 13:56:35.169925 2026] [:error] [pid 5377:tid 5403] [client 18.144.168.7:51488] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.dist"] [unique_id "aecRk7BKychFlrHBdvumRwAAAdE"]
[Tue Apr 21 13:56:35.834269 2026] [:error] [pid 5377:tid 5391] [client 18.144.168.7:51522] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.swp"] [unique_id "aecRk7BKychFlrHBdvumSgAAAcU"]
[Tue Apr 21 13:56:36.493334 2026] [:error] [pid 35415:tid 35446] [client 18.144.168.7:51550] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env~"] [unique_id "aecRlEiqDinI4_22zzg11AAAANM"]
[Tue Apr 21 13:56:37.152795 2026] [:error] [pid 4822:tid 4841] [client 18.144.168.7:51568] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/app/.env"] [unique_id "aecRlSAteFQFwS_23JlWNgAAAU8"]
[Tue Apr 21 13:56:37.810815 2026] [:error] [pid 4777:tid 4802] [client 18.144.168.7:51592] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/apps/.env"] [unique_id "aecRlaxXur6bykKyLZRhZgAAAQ4"]
[Tue Apr 21 13:56:38.475107 2026] [:error] [pid 4823:tid 4857] [client 18.144.168.7:51612] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/api/.env"] [unique_id "aecRlvc8mke3PfHqsxFj7gAAAYQ"]
[Tue Apr 21 13:56:39.137797 2026] [:error] [pid 4822:tid 4830] [client 18.144.168.7:51638] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/web/.env"] [unique_id "aecRlyAteFQFwS_23JlWPAAAAUQ"]
[Tue Apr 21 13:56:39.803213 2026] [:error] [pid 4823:tid 4875] [client 18.144.168.7:51652] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/site/.env"] [unique_id "aecRl_c8mke3PfHqsxFj8QAAAZY"]
[Tue Apr 21 13:56:40.460728 2026] [:error] [pid 4823:tid 4870] [client 18.144.168.7:51692] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/.env"] [unique_id "aecRmPc8mke3PfHqsxFj9QAAAZE"]
[Tue Apr 21 13:56:41.123365 2026] [:error] [pid 4823:tid 4866] [client 18.144.168.7:51712] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin/.env"] [unique_id "aecRmfc8mke3PfHqsxFj9wAAAY0"]
[Tue Apr 21 13:56:41.786228 2026] [:error] [pid 35415:tid 35442] [client 18.144.168.7:51736] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/backend/.env"] [unique_id "aecRmUiqDinI4_22zzg11wAAAM8"]
[Tue Apr 21 13:56:42.445430 2026] [:error] [pid 4823:tid 4877] [client 18.144.168.7:36558] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/server/.env"] [unique_id "aecRmvc8mke3PfHqsxFj_gAAAZg"]
[Tue Apr 21 13:56:43.103052 2026] [:error] [pid 4777:tid 4790] [client 18.144.168.7:36596] [client 18.144.168.7] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/frontend/.env"] [unique_id "aecRm6xXur6bykKyLZRhaQAAAQI"]
[Tue Apr 21 15:37:32.373328 2026] [:error] [pid 35322:tid 35367] [client 185.82.72.182:64159] [client 185.82.72.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "aecpPKPoAfV40BTfVKzCowAAAIo"]
[Tue Apr 21 15:37:33.190657 2026] [:error] [pid 35321:tid 35407] [client 45.86.200.251:65095] [client 45.86.200.251] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aecpPTeHLhVUuu8cVXyr9QAAAFc"]
[Tue Apr 21 15:37:35.255387 2026] [:error] [pid 4823:tid 4867] [client 45.86.200.236:65245] [client 45.86.200.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "aecpP_c8mke3PfHqsxG6QgAAAY4"]
[Tue Apr 21 15:37:36.075309 2026] [:error] [pid 53978:tid 53993] [client 45.86.200.223:46115] [client 45.86.200.223] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/as.php"] [unique_id "aecpQJ1ivsR4hcOSQbaxeAAAAo0"]
[Tue Apr 21 15:37:37.733285 2026] [:error] [pid 5377:tid 5404] [client 45.86.200.246:51999] [client 45.86.200.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "aecpQbBKychFlrHBdvvlQQAAAdI"]
[Tue Apr 21 15:37:38.285260 2026] [:error] [pid 53832:tid 53846] [client 45.86.200.215:55021] [client 45.86.200.215] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aecpQtzkuxsE_OhM9UIXLgAAAks"]
[Tue Apr 21 15:37:38.545887 2026] [:error] [pid 53832:tid 53841] [client 45.86.200.246:54139] [client 45.86.200.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aecpQtzkuxsE_OhM9UIXMwAAAkY"]
[Tue Apr 21 15:37:40.499583 2026] [:error] [pid 53978:tid 54004] [client 185.82.72.206:47761] [client 185.82.72.206] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "aecpRJ1ivsR4hcOSQbaxsAAAApg"]
[Tue Apr 21 15:37:43.083730 2026] [:error] [pid 54080:tid 54083] [client 185.82.72.182:54731] [client 185.82.72.182] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aecpR4zEbQHHxtmWbaZUXAAAAsE"]
[Tue Apr 21 15:38:20.065837 2026] [:error] [pid 35321:tid 35395] [client 45.86.200.219:52739] [client 45.86.200.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.git/execute.php"] [unique_id "aecpbDeHLhVUuu8cVXyvkAAAAEs"]
[Tue Apr 21 15:38:27.620919 2026] [:error] [pid 35321:tid 35387] [client 45.86.200.235:34763] [client 45.86.200.235] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.git/execute.php"] [unique_id "aecpczeHLhVUuu8cVXywMgAAAEM"]
[Tue Apr 21 15:38:29.129655 2026] [:error] [pid 4823:tid 4866] [client 45.86.200.227:39905] [client 45.86.200.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aecpdfc8mke3PfHqsxG9FAAAAY0"]
[Tue Apr 21 15:38:29.660275 2026] [:error] [pid 5377:tid 5386] [client 45.86.200.225:50727] [client 45.86.200.225] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/chosen.php"] [unique_id "aecpdbBKychFlrHBdvvnrAAAAcA"]
[Tue Apr 21 15:38:30.479680 2026] [:error] [pid 35321:tid 35391] [client 45.86.200.241:51325] [client 45.86.200.241] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aecpdjeHLhVUuu8cVXywYgAAAEc"]
[Tue Apr 21 15:38:31.049811 2026] [:error] [pid 54080:tid 54102] [client 185.82.72.104:30701] [client 185.82.72.104] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aecpd4zEbQHHxtmWbaZVYgAAAtQ"]
[Tue Apr 21 15:38:31.910572 2026] [:error] [pid 35320:tid 35338] [client 45.86.200.248:42267] [client 45.86.200.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aecpd4JW6fdXWO6agMEd-AAAAAg"]
[Tue Apr 21 15:38:33.556950 2026] [:error] [pid 35322:tid 35376] [client 45.86.200.213:27839] [client 45.86.200.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aecpeaPoAfV40BTfVKzEwwAAAJM"]
[Tue Apr 21 15:38:34.100732 2026] [:error] [pid 53731:tid 53752] [client 45.86.200.236:52361] [client 45.86.200.236] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aecpel2I9THUR-bRVGzc9QAAAhA"]
[Tue Apr 21 15:38:35.477743 2026] [:error] [pid 5377:tid 5397] [client 45.86.200.227:59165] [client 45.86.200.227] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aecpe7BKychFlrHBdvvn0wAAAcs"]
[Tue Apr 21 15:38:36.189573 2026] [:error] [pid 35415:tid 35451] [client 45.86.200.238:29919] [client 45.86.200.238] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/chosen.php"] [unique_id "aecpfEiqDinI4_22zzhZCwAAANg"]
[Tue Apr 21 15:38:36.742793 2026] [:error] [pid 5377:tid 5407] [client 185.82.72.10:27093] [client 185.82.72.10] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/chosen.php"] [unique_id "aecpfLBKychFlrHBdvvn2AAAAdU"]
[Tue Apr 21 15:38:37.575686 2026] [:error] [pid 5377:tid 5408] [client 45.86.200.229:21679] [client 45.86.200.229] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aecpfbBKychFlrHBdvvn3QAAAdY"]
[Tue Apr 21 15:38:38.136964 2026] [:error] [pid 35321:tid 35398] [client 185.82.72.107:25891] [client 185.82.72.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aecpfjeHLhVUuu8cVXywzQAAAE4"]
[Tue Apr 21 15:38:38.974305 2026] [:error] [pid 53731:tid 53748] [client 45.86.200.213:33009] [client 45.86.200.213] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aecpfl2I9THUR-bRVGzdDQAAAg0"]
[Tue Apr 21 15:38:40.722655 2026] [:error] [pid 35322:tid 35368] [client 45.86.200.242:50129] [client 45.86.200.242] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aecpgKPoAfV40BTfVKzE7QAAAIs"]
[Tue Apr 21 15:38:41.288615 2026] [:error] [pid 35320:tid 35347] [client 45.86.200.249:21545] [client 45.86.200.249] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aecpgYJW6fdXWO6agMEeYAAAABE"]
[Tue Apr 21 15:38:42.222578 2026] [:error] [pid 53731:tid 53741] [client 45.86.200.217:43885] [client 45.86.200.217] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aecpgl2I9THUR-bRVGzdIgAAAgY"]
[Tue Apr 21 15:38:42.642581 2026] [:error] [pid 4777:tid 4800] [client 45.86.200.221:62783] [client 45.86.200.221] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aecpgqxXur6bykKyLZSIpQAAAQw"]
[Tue Apr 21 15:38:44.289504 2026] [:error] [pid 35321:tid 35384] [client 45.86.200.248:53433] [client 45.86.200.248] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aecphDeHLhVUuu8cVXyxNgAAAEA"]
[Tue Apr 21 15:38:44.827783 2026] [:error] [pid 4777:tid 4792] [client 45.86.200.228:20629] [client 45.86.200.228] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aecphKxXur6bykKyLZSIrAAAAQQ"]
[Tue Apr 21 15:39:04.238280 2026] [:error] [pid 53978:tid 53980] [client 185.82.72.206:33687] [client 185.82.72.206] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-links.php/wp-content/plugins/wp-content/uploa/"] [unique_id "aecpmJ1ivsR4hcOSQba0kAAAAoA"]
[Tue Apr 21 15:39:29.276381 2026] [:error] [pid 53832:tid 53850] [client 185.82.72.103:63549] [client 185.82.72.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/"] [unique_id "aecpsdzkuxsE_OhM9UIb-gAAAk8"]
[Tue Apr 21 15:39:37.544353 2026] [:error] [pid 4823:tid 4856] [client 45.86.200.235:51475] [client 45.86.200.235] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/"] [unique_id "aecpufc8mke3PfHqsxG_PwAAAYM"]
[Tue Apr 21 15:42:57.106949 2026] [:error] [pid 35321:tid 35387] [client 54.232.141.252:52466] [client 54.232.141.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aecqgTeHLhVUuu8cVXy5GwAAAEM"]
[Tue Apr 21 15:42:59.008175 2026] [:error] [pid 54080:tid 54103] [client 54.232.141.252:52534] [client 54.232.141.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env"] [unique_id "aecqg4zEbQHHxtmWbaZb2gAAAtU"]
[Tue Apr 21 15:43:00.477203 2026] [:error] [pid 35321:tid 35407] [client 54.232.141.252:52552] [client 54.232.141.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "aecqhDeHLhVUuu8cVXy5MgAAAFc"]
[Tue Apr 21 15:43:01.936073 2026] [:error] [pid 54080:tid 54089] [client 54.232.141.252:52588] [client 54.232.141.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.production"] [unique_id "aecqhYzEbQHHxtmWbaZb4gAAAsc"]
[Tue Apr 21 15:43:03.406931 2026] [:error] [pid 35321:tid 35393] [client 54.232.141.252:51836] [client 54.232.141.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.staging"] [unique_id "aecqhzeHLhVUuu8cVXy5TgAAAEk"]
[Tue Apr 21 15:43:04.868163 2026] [:error] [pid 53832:tid 53835] [client 54.232.141.252:51862] [client 54.232.141.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.development"] [unique_id "aecqiNzkuxsE_OhM9UIhdwAAAkA"]
[Tue Apr 21 15:43:06.326811 2026] [:error] [pid 54080:tid 54093] [client 54.232.141.252:51894] [client 54.232.141.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.test"] [unique_id "aecqiozEbQHHxtmWbaZb8wAAAss"]
[Tue Apr 21 15:43:07.781607 2026] [:error] [pid 35321:tid 35397] [client 54.232.141.252:51910] [client 54.232.141.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.remote"] [unique_id "aecqizeHLhVUuu8cVXy5dgAAAE0"]
[Tue Apr 21 15:43:09.245166 2026] [:error] [pid 35321:tid 35399] [client 54.232.141.252:51932] [client 54.232.141.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.bak"] [unique_id "aecqjTeHLhVUuu8cVXy5iwAAAE8"]
[Tue Apr 21 15:43:10.707769 2026] [:error] [pid 54080:tid 54104] [client 54.232.141.252:51968] [client 54.232.141.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.backup"] [unique_id "aecqjozEbQHHxtmWbaZcEAAAAtY"]
[Tue Apr 21 15:43:12.167542 2026] [:error] [pid 35321:tid 35393] [client 54.232.141.252:52002] [client 54.232.141.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.save"] [unique_id "aecqkDeHLhVUuu8cVXy5owAAAEk"]
[Tue Apr 21 15:43:13.627821 2026] [:error] [pid 53832:tid 53849] [client 54.232.141.252:46490] [client 54.232.141.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.old"] [unique_id "aecqkdzkuxsE_OhM9UIhvgAAAk4"]
[Tue Apr 21 15:43:15.090121 2026] [:error] [pid 4823:tid 4870] [client 54.232.141.252:46520] [client 54.232.141.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.sample"] [unique_id "aecqk_c8mke3PfHqsxHD3gAAAZE"]
[Tue Apr 21 15:43:16.557113 2026] [:error] [pid 35321:tid 35405] [client 54.232.141.252:46556] [client 54.232.141.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.example"] [unique_id "aecqlDeHLhVUuu8cVXy5wQAAAFU"]
[Tue Apr 21 15:43:18.016954 2026] [:error] [pid 54080:tid 54083] [client 54.232.141.252:46576] [client 54.232.141.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.dev"] [unique_id "aecqlozEbQHHxtmWbaZcQwAAAsE"]
[Tue Apr 21 15:43:19.476946 2026] [:error] [pid 35321:tid 35405] [client 54.232.141.252:46588] [client 54.232.141.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.prod"] [unique_id "aecqlzeHLhVUuu8cVXy51AAAAFU"]
[Tue Apr 21 15:43:20.941776 2026] [:error] [pid 54080:tid 54102] [client 54.232.141.252:46626] [client 54.232.141.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.stage"] [unique_id "aecqmIzEbQHHxtmWbaZcTQAAAtQ"]
[Tue Apr 21 15:43:22.404098 2026] [:error] [pid 4823:tid 4862] [client 54.232.141.252:46648] [client 54.232.141.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.ci"] [unique_id "aecqmvc8mke3PfHqsxHECgAAAYk"]
[Tue Apr 21 15:43:23.863320 2026] [:error] [pid 53832:tid 53835] [client 54.232.141.252:41258] [client 54.232.141.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.docker"] [unique_id "aecqm9zkuxsE_OhM9UIh7wAAAkA"]
[Tue Apr 21 15:43:25.329040 2026] [:error] [pid 53832:tid 53851] [client 54.232.141.252:41286] [client 54.232.141.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.live"] [unique_id "aecqndzkuxsE_OhM9UIh_QAAAlA"]
[Tue Apr 21 15:43:26.800318 2026] [:error] [pid 53832:tid 53838] [client 54.232.141.252:41308] [client 54.232.141.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.preprod"] [unique_id "aecqntzkuxsE_OhM9UIiCwAAAkM"]
[Tue Apr 21 15:43:28.256515 2026] [:error] [pid 53832:tid 53841] [client 54.232.141.252:41330] [client 54.232.141.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.uat"] [unique_id "aecqoNzkuxsE_OhM9UIiIQAAAkY"]
[Tue Apr 21 15:43:29.714520 2026] [:error] [pid 35321:tid 35384] [client 54.232.141.252:41374] [client 54.232.141.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.dist"] [unique_id "aecqoTeHLhVUuu8cVXy6EgAAAEA"]
[Tue Apr 21 15:43:31.172428 2026] [:error] [pid 35321:tid 35407] [client 54.232.141.252:41398] [client 54.232.141.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.swp"] [unique_id "aecqozeHLhVUuu8cVXy6GAAAAFc"]
[Tue Apr 21 15:43:32.630592 2026] [:error] [pid 4823:tid 4854] [client 54.232.141.252:41428] [client 54.232.141.252] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env~"] [unique_id "aecqpPc8mke3PfHqsxHEVwAAAYE"]
[Tue Apr 21 19:17:08.605550 2026] [:error] [pid 53978:tid 53991] [client 157.230.114.42:56872] [client 157.230.114.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.230.114.42, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aedctJ1ivsR4hcOSQbYC4AAAAos"]
[Tue Apr 21 19:17:09.741007 2026] [:error] [pid 35321:tid 35393] [client 157.230.114.42:57453] [client 157.230.114.42] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 157.230.114.42, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "aedctTeHLhVUuu8cVXxOggAAAEk"]
[Tue Apr 21 21:21:12.620638 2026] [:error] [pid 53978:tid 53982] [client 20.240.53.226:15706] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aed5yJ1ivsR4hcOSQbYmvgAAAoI"]
[Tue Apr 21 21:21:14.457969 2026] [:error] [pid 53731:tid 53750] [client 20.240.53.226:15644] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aed5yl2I9THUR-bRVGxuYgAAAg8"]
[Tue Apr 21 21:21:15.632938 2026] [:error] [pid 35320:tid 35337] [client 20.240.53.226:15703] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aed5y4JW6fdXWO6agMHNWAAAAAc"]
[Tue Apr 21 21:21:16.947593 2026] [:error] [pid 35321:tid 35398] [client 20.240.53.226:15684] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aed5zDeHLhVUuu8cVXywVgAAAE4"]
[Tue Apr 21 21:21:18.038279 2026] [:error] [pid 35321:tid 35390] [client 20.240.53.226:15629] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/term.php"] [unique_id "aed5zjeHLhVUuu8cVXywXgAAAEY"]
[Tue Apr 21 21:21:18.997904 2026] [:error] [pid 53832:tid 53855] [client 20.240.53.226:15641] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/term.php"] [unique_id "aed5ztzkuxsE_OhM9UJvAQAAAlQ"]
[Tue Apr 21 21:21:19.729801 2026] [:error] [pid 53978:tid 53984] [client 20.240.53.226:15691] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/term.php"] [unique_id "aed5z51ivsR4hcOSQbYmwAAAAoQ"]
[Tue Apr 21 21:21:20.636875 2026] [:error] [pid 53832:tid 53850] [client 20.240.53.226:15716] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/term.php"] [unique_id "aed50NzkuxsE_OhM9UJvBQAAAk8"]
[Tue Apr 21 21:21:21.544375 2026] [:error] [pid 53978:tid 53996] [client 20.240.53.226:15619] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aed50Z1ivsR4hcOSQbYmwwAAApA"]
[Tue Apr 21 21:21:22.419883 2026] [:error] [pid 35320:tid 35337] [client 20.240.53.226:15714] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aed50oJW6fdXWO6agMHNagAAAAc"]
[Tue Apr 21 21:21:23.523507 2026] [:error] [pid 53731:tid 53752] [client 20.240.53.226:15715] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aed5012I9THUR-bRVGxuawAAAhA"]
[Tue Apr 21 21:21:24.233123 2026] [:error] [pid 35321:tid 35393] [client 20.240.53.226:15708] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aed51DeHLhVUuu8cVXywcAAAAEk"]
[Tue Apr 21 21:21:24.978540 2026] [:error] [pid 35320:tid 35337] [client 20.240.53.226:15731] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "aed51IJW6fdXWO6agMHNeAAAAAc"]
[Tue Apr 21 21:21:25.552898 2026] [:error] [pid 35415:tid 35446] [client 20.240.53.226:15664] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "aed51UiqDinI4_22zzh2vwAAANM"]
[Tue Apr 21 21:21:26.232731 2026] [:error] [pid 35415:tid 35429] [client 20.240.53.226:15705] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "aed51kiqDinI4_22zzh2wAAAAMI"]
[Tue Apr 21 21:21:26.803731 2026] [:error] [pid 35320:tid 35335] [client 20.240.53.226:15728] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "aed51oJW6fdXWO6agMHNfQAAAAU"]
[Tue Apr 21 21:21:27.458690 2026] [:error] [pid 53978:tid 53997] [client 20.240.53.226:15729] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aed5151ivsR4hcOSQbYmxwAAApE"]
[Tue Apr 21 21:21:28.232280 2026] [:error] [pid 53731:tid 53750] [client 20.240.53.226:15639] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aed52F2I9THUR-bRVGxubwAAAg8"]
[Tue Apr 21 21:21:28.860118 2026] [:error] [pid 53731:tid 53744] [client 20.240.53.226:15713] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aed52F2I9THUR-bRVGxucgAAAgk"]
[Tue Apr 21 21:21:29.402592 2026] [:error] [pid 53978:tid 53991] [client 20.240.53.226:15730] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aed52Z1ivsR4hcOSQbYmzgAAAos"]
[Tue Apr 21 21:21:29.928119 2026] [:error] [pid 53731:tid 53749] [client 20.240.53.226:15741] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aed52V2I9THUR-bRVGxudAAAAg4"]
[Tue Apr 21 21:21:30.587539 2026] [:error] [pid 35321:tid 35406] [client 20.240.53.226:15688] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aed52jeHLhVUuu8cVXywgwAAAFY"]
[Tue Apr 21 21:21:31.507712 2026] [:error] [pid 53832:tid 53846] [client 20.240.53.226:15665] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aed529zkuxsE_OhM9UJvEAAAAks"]
[Tue Apr 21 21:21:32.103330 2026] [:error] [pid 53731:tid 53760] [client 20.240.53.226:15735] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aed53F2I9THUR-bRVGxueAAAAhg"]
[Tue Apr 21 21:21:32.964694 2026] [:error] [pid 53731:tid 53746] [client 20.240.53.226:15622] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aed53F2I9THUR-bRVGxuewAAAgs"]
[Tue Apr 21 21:21:33.777589 2026] [:error] [pid 53731:tid 53757] [client 20.240.53.226:15656] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aed53V2I9THUR-bRVGxugQAAAhU"]
[Tue Apr 21 21:21:34.323850 2026] [:error] [pid 53731:tid 53744] [client 20.240.53.226:15706] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aed53l2I9THUR-bRVGxuhwAAAgk"]
[Tue Apr 21 21:21:35.058864 2026] [:error] [pid 54080:tid 54103] [client 20.240.53.226:15632] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aed534zEbQHHxtmWbaa9LgAAAtU"]
[Tue Apr 21 21:21:35.799014 2026] [:error] [pid 35321:tid 35398] [client 20.240.53.226:15711] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "aed53zeHLhVUuu8cVXywkwAAAE4"]
[Tue Apr 21 21:21:36.889746 2026] [:error] [pid 54080:tid 54086] [client 20.240.53.226:15620] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "aed54IzEbQHHxtmWbaa9NAAAAsQ"]
[Tue Apr 21 21:21:37.935033 2026] [:error] [pid 53978:tid 53990] [client 20.240.53.226:15742] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "aed54Z1ivsR4hcOSQbYm1AAAAoo"]
[Tue Apr 21 21:21:38.720427 2026] [:error] [pid 4823:tid 4858] [client 20.240.53.226:15651] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "aed54vc8mke3PfHqsxECCQAAAYU"]
[Tue Apr 21 21:21:39.844767 2026] [:error] [pid 53731:tid 53747] [client 20.240.53.226:15709] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog-header.php"] [unique_id "aed5412I9THUR-bRVGxuoAAAAgw"]
[Tue Apr 21 21:21:40.669553 2026] [:error] [pid 53978:tid 54002] [client 20.240.53.226:15624] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog-header.php"] [unique_id "aed55J1ivsR4hcOSQbYm1gAAApY"]
[Tue Apr 21 21:21:41.469710 2026] [:error] [pid 53978:tid 53997] [client 20.240.53.226:15636] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog-header.php"] [unique_id "aed55Z1ivsR4hcOSQbYm2wAAApE"]
[Tue Apr 21 21:21:42.209757 2026] [:error] [pid 53731:tid 53755] [client 20.240.53.226:15738] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog-header.php"] [unique_id "aed55l2I9THUR-bRVGxurQAAAhM"]
[Tue Apr 21 21:21:42.887608 2026] [:error] [pid 35322:tid 35379] [client 20.240.53.226:15669] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bmi.php"] [unique_id "aed55qPoAfV40BTfVKzd0AAAAJY"]
[Tue Apr 21 21:21:43.861301 2026] [:error] [pid 53978:tid 54004] [client 20.240.53.226:15733] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bmi.php"] [unique_id "aed5551ivsR4hcOSQbYm3QAAApg"]
[Tue Apr 21 21:21:44.542391 2026] [:error] [pid 35321:tid 35393] [client 20.240.53.226:15739] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bmi.php"] [unique_id "aed56DeHLhVUuu8cVXywrAAAAEk"]
[Tue Apr 21 21:21:45.188195 2026] [:error] [pid 54080:tid 54082] [client 20.240.53.226:15681] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bmi.php"] [unique_id "aed56YzEbQHHxtmWbaa9QgAAAsA"]
[Tue Apr 21 21:21:45.906171 2026] [:error] [pid 53731:tid 53743] [client 20.240.53.226:15724] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "aed56V2I9THUR-bRVGxutAAAAgg"]
[Tue Apr 21 21:21:46.668247 2026] [:error] [pid 53731:tid 53750] [client 20.240.53.226:3016] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "aed56l2I9THUR-bRVGxutQAAAg8"]
[Tue Apr 21 21:21:47.301654 2026] [:error] [pid 35320:tid 35339] [client 20.240.53.226:15693] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "aed564JW6fdXWO6agMHNmwAAAAk"]
[Tue Apr 21 21:21:48.057179 2026] [:error] [pid 53731:tid 53755] [client 20.240.53.226:15690] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "aed57F2I9THUR-bRVGxuuwAAAhM"]
[Tue Apr 21 21:21:49.200973 2026] [:error] [pid 4823:tid 4853] [client 20.240.53.226:15728] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "aed57fc8mke3PfHqsxECDgAAAYA"]
[Tue Apr 21 21:21:50.594731 2026] [:error] [pid 35321:tid 35406] [client 20.240.53.226:3045] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "aed57jeHLhVUuu8cVXywrwAAAFY"]
[Tue Apr 21 21:21:52.406397 2026] [:error] [pid 35320:tid 35349] [client 20.240.53.226:15732] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "aed58IJW6fdXWO6agMHNrQAAABM"]
[Tue Apr 21 21:21:53.711807 2026] [:error] [pid 35320:tid 35343] [client 20.240.53.226:15631] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "aed58YJW6fdXWO6agMHNuQAAAA0"]
[Tue Apr 21 21:21:54.886824 2026] [:error] [pid 35320:tid 35349] [client 20.240.53.226:15734] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "aed58oJW6fdXWO6agMHNwgAAABM"]
[Tue Apr 21 21:21:56.317354 2026] [:error] [pid 4777:tid 4795] [client 20.240.53.226:15699] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "aed59KxXur6bykKyLZStPQAAAQc"]
[Tue Apr 21 21:21:57.215614 2026] [:error] [pid 35322:tid 35380] [client 20.240.53.226:15710] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "aed59aPoAfV40BTfVKzd0wAAAJc"]
[Tue Apr 21 21:21:58.043067 2026] [:error] [pid 53978:tid 53996] [client 20.240.53.226:15662] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "aed59p1ivsR4hcOSQbYm7AAAApA"]
[Tue Apr 21 21:21:59.538631 2026] [:error] [pid 35321:tid 35398] [client 20.240.53.226:15743] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "aed59zeHLhVUuu8cVXywtgAAAE4"]
[Tue Apr 21 21:22:00.350077 2026] [:error] [pid 35321:tid 35406] [client 20.240.53.226:3030] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "aed5-DeHLhVUuu8cVXywvQAAAFY"]
[Tue Apr 21 21:22:01.079291 2026] [:error] [pid 35321:tid 35395] [client 20.240.53.226:3013] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "aed5-TeHLhVUuu8cVXywwAAAAEs"]
[Tue Apr 21 21:22:01.764011 2026] [:error] [pid 35321:tid 35408] [client 20.240.53.226:15670] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "aed5-TeHLhVUuu8cVXywwgAAAFg"]
[Tue Apr 21 21:22:02.354259 2026] [:error] [pid 53731:tid 53735] [client 20.240.53.226:15623] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plugin-install.php"] [unique_id "aed5-l2I9THUR-bRVGxuwwAAAgA"]
[Tue Apr 21 21:22:03.020128 2026] [:error] [pid 35415:tid 35446] [client 20.240.53.226:15736] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plugin-install.php"] [unique_id "aed5-0iqDinI4_22zzh20gAAANM"]
[Tue Apr 21 21:22:04.271398 2026] [:error] [pid 53731:tid 53745] [client 20.240.53.226:3041] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plugin-install.php"] [unique_id "aed5_F2I9THUR-bRVGxuyAAAAgo"]
[Tue Apr 21 21:22:05.163848 2026] [:error] [pid 54080:tid 54098] [client 20.240.53.226:15717] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plugin-install.php"] [unique_id "aed5_YzEbQHHxtmWbaa9XAAAAtA"]
[Tue Apr 21 21:22:06.301419 2026] [:error] [pid 35320:tid 35351] [client 20.240.53.226:15627] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aed5_oJW6fdXWO6agMHN4AAAABU"]
[Tue Apr 21 21:22:07.417856 2026] [:error] [pid 53731:tid 53750] [client 20.240.53.226:15707] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aed5_12I9THUR-bRVGxu0wAAAg8"]
[Tue Apr 21 21:22:08.763822 2026] [:error] [pid 35320:tid 35341] [client 20.240.53.226:15700] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aed6AIJW6fdXWO6agMHN5wAAAAs"]
[Tue Apr 21 21:22:10.278386 2026] [:error] [pid 35320:tid 35349] [client 20.240.53.226:3047] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aed6AoJW6fdXWO6agMHN6wAAABM"]
[Tue Apr 21 21:22:24.312609 2026] [:error] [pid 35322:tid 35362] [client 20.240.53.226:3055] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws66.php"] [unique_id "aed6EKPoAfV40BTfVKzd3wAAAIU"]
[Tue Apr 21 21:22:26.221522 2026] [:error] [pid 53978:tid 53985] [client 20.240.53.226:15630] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws66.php"] [unique_id "aed6Ep1ivsR4hcOSQbYnBQAAAoU"]
[Tue Apr 21 21:22:27.509961 2026] [:error] [pid 35321:tid 35400] [client 20.240.53.226:3024] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws66.php"] [unique_id "aed6EzeHLhVUuu8cVXyxHgAAAFA"]
[Tue Apr 21 21:22:28.778859 2026] [:error] [pid 35320:tid 35346] [client 20.240.53.226:15689] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws66.php"] [unique_id "aed6FIJW6fdXWO6agMHOGQAAABA"]
[Tue Apr 21 21:22:31.219934 2026] [:error] [pid 35320:tid 35334] [client 20.240.53.226:15680] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file61.php"] [unique_id "aed6F4JW6fdXWO6agMHOIAAAAAQ"]
[Tue Apr 21 21:22:31.980019 2026] [:error] [pid 53731:tid 53738] [client 20.240.53.226:15625] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file61.php"] [unique_id "aed6F12I9THUR-bRVGxu_AAAAgM"]
[Tue Apr 21 21:22:33.464694 2026] [:error] [pid 4823:tid 4860] [client 20.240.53.226:15697] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file61.php"] [unique_id "aed6Gfc8mke3PfHqsxECIAAAAYc"]
[Tue Apr 21 21:22:35.686575 2026] [:error] [pid 53832:tid 53842] [client 20.240.53.226:15633] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file61.php"] [unique_id "aed6G9zkuxsE_OhM9UJvJgAAAkc"]
[Tue Apr 21 21:22:38.278209 2026] [:error] [pid 53978:tid 54002] [client 20.240.53.226:3012] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asd.php"] [unique_id "aed6Hp1ivsR4hcOSQbYnCQAAApY"]
[Tue Apr 21 21:22:39.758162 2026] [:error] [pid 53731:tid 53756] [client 20.240.53.226:15652] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asd.php"] [unique_id "aed6H12I9THUR-bRVGxvBwAAAhQ"]
[Tue Apr 21 21:22:40.578513 2026] [:error] [pid 53832:tid 53857] [client 20.240.53.226:15621] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asd.php"] [unique_id "aed6INzkuxsE_OhM9UJvKwAAAlY"]
[Tue Apr 21 21:22:42.022885 2026] [:error] [pid 35321:tid 35402] [client 20.240.53.226:15642] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asd.php"] [unique_id "aed6IjeHLhVUuu8cVXyxLwAAAFI"]
[Tue Apr 21 21:22:42.989852 2026] [:error] [pid 54080:tid 54091] [client 20.240.53.226:15646] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aed6IozEbQHHxtmWbaa9egAAAsk"]
[Tue Apr 21 21:22:44.523074 2026] [:error] [pid 35321:tid 35397] [client 20.240.53.226:15634] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aed6JDeHLhVUuu8cVXyxNQAAAE0"]
[Tue Apr 21 21:22:45.231044 2026] [:error] [pid 35321:tid 35393] [client 20.240.53.226:15680] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aed6JTeHLhVUuu8cVXyxOQAAAEk"]
[Tue Apr 21 21:22:46.761804 2026] [:error] [pid 35321:tid 35385] [client 20.240.53.226:15647] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xx.php"] [unique_id "aed6JjeHLhVUuu8cVXyxRAAAAEE"]
[Tue Apr 21 21:22:49.138403 2026] [:error] [pid 35320:tid 35340] [client 20.240.53.226:3032] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "aed6KYJW6fdXWO6agMHOQgAAAAo"]
[Tue Apr 21 21:22:50.757869 2026] [:error] [pid 35320:tid 35336] [client 20.240.53.226:15726] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "aed6KoJW6fdXWO6agMHORwAAAAY"]
[Tue Apr 21 21:22:51.738289 2026] [:error] [pid 35321:tid 35397] [client 20.240.53.226:15685] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "aed6KzeHLhVUuu8cVXyxWgAAAE0"]
[Tue Apr 21 21:22:53.576919 2026] [:error] [pid 35321:tid 35387] [client 20.240.53.226:15672] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "aed6LTeHLhVUuu8cVXyxZgAAAEM"]
[Tue Apr 21 21:22:54.348455 2026] [:error] [pid 35321:tid 35392] [client 20.240.53.226:15682] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aed6LjeHLhVUuu8cVXyxagAAAEg"]
[Tue Apr 21 21:22:55.299670 2026] [:error] [pid 54080:tid 54105] [client 20.240.53.226:15674] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aed6L4zEbQHHxtmWbaa9hQAAAtc"]
[Tue Apr 21 21:22:56.451425 2026] [:error] [pid 35321:tid 35386] [client 20.240.53.226:15722] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aed6MDeHLhVUuu8cVXyxdQAAAEI"]
[Tue Apr 21 21:22:57.026557 2026] [:error] [pid 53978:tid 54001] [client 20.240.53.226:2947] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cu.php"] [unique_id "aed6MZ1ivsR4hcOSQbYnDwAAApU"]
[Tue Apr 21 21:22:57.596177 2026] [:error] [pid 35321:tid 35403] [client 20.240.53.226:15702] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "aed6MTeHLhVUuu8cVXyxeQAAAFM"]
[Tue Apr 21 21:22:58.461435 2026] [:error] [pid 35321:tid 35384] [client 20.240.53.226:3034] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "aed6MjeHLhVUuu8cVXyxfwAAAEA"]
[Tue Apr 21 21:22:59.457497 2026] [:error] [pid 35320:tid 35334] [client 20.240.53.226:3042] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "aed6M4JW6fdXWO6agMHOUwAAAAQ"]
[Tue Apr 21 21:23:00.307892 2026] [:error] [pid 35321:tid 35408] [client 20.240.53.226:3022] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "aed6NDeHLhVUuu8cVXyxhAAAAFg"]
[Tue Apr 21 21:23:01.749946 2026] [:error] [pid 35320:tid 35347] [client 20.240.53.226:15659] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mh.php"] [unique_id "aed6NYJW6fdXWO6agMHOWAAAABE"]
[Tue Apr 21 21:23:02.708250 2026] [:error] [pid 35320:tid 35348] [client 20.240.53.226:15692] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mh.php"] [unique_id "aed6NoJW6fdXWO6agMHOWwAAABI"]
[Tue Apr 21 21:23:04.192891 2026] [:error] [pid 4823:tid 4856] [client 20.240.53.226:3015] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mh.php"] [unique_id "aed6OPc8mke3PfHqsxECLQAAAYM"]
[Tue Apr 21 21:23:06.028780 2026] [:error] [pid 35321:tid 35392] [client 20.240.53.226:3010] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mh.php"] [unique_id "aed6OjeHLhVUuu8cVXyxlAAAAEg"]
[Tue Apr 21 21:23:07.761599 2026] [:error] [pid 53731:tid 53742] [client 20.240.53.226:15721] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Jcrop.php"] [unique_id "aed6O12I9THUR-bRVGxvLgAAAgc"]
[Tue Apr 21 21:23:09.630509 2026] [:error] [pid 35321:tid 35398] [client 20.240.53.226:15667] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Jcrop.php"] [unique_id "aed6PTeHLhVUuu8cVXyxowAAAE4"]
[Tue Apr 21 21:23:10.563818 2026] [:error] [pid 35322:tid 35357] [client 20.240.53.226:15698] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Jcrop.php"] [unique_id "aed6PqPoAfV40BTfVKzd7QAAAIA"]
[Tue Apr 21 21:23:11.597667 2026] [:error] [pid 53731:tid 53750] [client 20.240.53.226:2955] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Jcrop.php"] [unique_id "aed6P12I9THUR-bRVGxvOAAAAg8"]
[Tue Apr 21 21:23:12.174668 2026] [:error] [pid 54080:tid 54090] [client 20.240.53.226:3057] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aed6QIzEbQHHxtmWbaa9kAAAAsg"]
[Tue Apr 21 21:23:12.897281 2026] [:error] [pid 53731:tid 53741] [client 20.240.53.226:15740] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aed6QF2I9THUR-bRVGxvOgAAAgY"]
[Tue Apr 21 21:23:13.484843 2026] [:error] [pid 35415:tid 35435] [client 20.240.53.226:3027] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aed6QUiqDinI4_22zzh25wAAAMg"]
[Tue Apr 21 21:23:14.071198 2026] [:error] [pid 35321:tid 35390] [client 20.240.53.226:15616] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aed6QjeHLhVUuu8cVXyxuQAAAEY"]
[Tue Apr 21 21:23:14.598866 2026] [:error] [pid 35321:tid 35386] [client 20.240.53.226:3027] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aed6QjeHLhVUuu8cVXyxwQAAAEI"]
[Tue Apr 21 21:23:15.183387 2026] [:error] [pid 4777:tid 4804] [client 20.240.53.226:15640] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aed6Q6xXur6bykKyLZStYgAAARA"]
[Tue Apr 21 21:23:15.830067 2026] [:error] [pid 35320:tid 35331] [client 20.240.53.226:15727] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aed6Q4JW6fdXWO6agMHOaQAAAAE"]
[Tue Apr 21 21:23:16.419608 2026] [:error] [pid 35320:tid 35353] [client 20.240.53.226:15720] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aed6RIJW6fdXWO6agMHObAAAABc"]
[Tue Apr 21 21:23:17.005431 2026] [:error] [pid 35321:tid 35403] [client 20.240.53.226:15645] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "aed6RTeHLhVUuu8cVXyx0wAAAFM"]
[Tue Apr 21 21:23:17.606699 2026] [:error] [pid 35321:tid 35405] [client 20.240.53.226:3061] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "aed6RTeHLhVUuu8cVXyx1wAAAFU"]
[Tue Apr 21 21:23:18.169510 2026] [:error] [pid 35320:tid 35354] [client 20.240.53.226:3036] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "aed6RoJW6fdXWO6agMHOcgAAABg"]
[Tue Apr 21 21:23:18.746935 2026] [:error] [pid 35321:tid 35385] [client 20.240.53.226:2990] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "aed6RjeHLhVUuu8cVXyx3gAAAEE"]
[Tue Apr 21 21:23:19.403324 2026] [:error] [pid 35321:tid 35384] [client 20.240.53.226:15649] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "aed6RzeHLhVUuu8cVXyx4QAAAEA"]
[Tue Apr 21 21:23:19.974728 2026] [:error] [pid 53731:tid 53745] [client 20.240.53.226:15666] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "aed6R12I9THUR-bRVGxvOwAAAgo"]
[Tue Apr 21 21:23:20.568627 2026] [:error] [pid 53731:tid 53742] [client 20.240.53.226:15628] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "aed6SF2I9THUR-bRVGxvPAAAAgc"]
[Tue Apr 21 21:23:21.209347 2026] [:error] [pid 53731:tid 53748] [client 20.240.53.226:15668] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "aed6SV2I9THUR-bRVGxvPQAAAg0"]
[Tue Apr 21 21:23:21.873697 2026] [:error] [pid 53731:tid 53737] [client 20.240.53.226:15638] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aed6SV2I9THUR-bRVGxvQQAAAgI"]
[Tue Apr 21 21:23:22.531336 2026] [:error] [pid 53832:tid 53839] [client 20.240.53.226:15725] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aed6StzkuxsE_OhM9UJvNgAAAkQ"]
[Tue Apr 21 21:23:31.548424 2026] [:error] [pid 53832:tid 53852] [client 20.240.53.226:15654] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "aed6U9zkuxsE_OhM9UJvVQAAAlE"]
[Tue Apr 21 21:23:32.259147 2026] [:error] [pid 54080:tid 54094] [client 20.240.53.226:3023] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "aed6VIzEbQHHxtmWbaa9qQAAAsw"]
[Tue Apr 21 21:23:32.965604 2026] [:error] [pid 35321:tid 35392] [client 20.240.53.226:3044] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "aed6VDeHLhVUuu8cVXyyBwAAAEg"]
[Tue Apr 21 21:23:33.511753 2026] [:error] [pid 4777:tid 4808] [client 20.240.53.226:2969] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "aed6VaxXur6bykKyLZStZwAAARQ"]
[Tue Apr 21 21:23:34.094322 2026] [:error] [pid 35321:tid 35385] [client 20.240.53.226:3043] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jk.php"] [unique_id "aed6VjeHLhVUuu8cVXyyCgAAAEE"]
[Tue Apr 21 21:23:34.670174 2026] [:error] [pid 35321:tid 35394] [client 20.240.53.226:15696] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jk.php"] [unique_id "aed6VjeHLhVUuu8cVXyyDQAAAEo"]
[Tue Apr 21 21:23:35.249958 2026] [:error] [pid 53731:tid 53744] [client 20.240.53.226:2958] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jk.php"] [unique_id "aed6V12I9THUR-bRVGxvVAAAAgk"]
[Tue Apr 21 21:23:35.845261 2026] [:error] [pid 53731:tid 53741] [client 20.240.53.226:15737] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jk.php"] [unique_id "aed6V12I9THUR-bRVGxvVwAAAgY"]
[Tue Apr 21 21:23:36.426096 2026] [:error] [pid 35320:tid 35350] [client 20.240.53.226:15712] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aed6WIJW6fdXWO6agMHOjQAAABQ"]
[Tue Apr 21 21:23:37.032683 2026] [:error] [pid 53832:tid 53835] [client 20.240.53.226:15618] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aed6WdzkuxsE_OhM9UJvZQAAAkA"]
[Tue Apr 21 21:23:37.598882 2026] [:error] [pid 35322:tid 35369] [client 20.240.53.226:15635] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aed6WaPoAfV40BTfVKzd9gAAAIw"]
[Tue Apr 21 21:23:38.156105 2026] [:error] [pid 35321:tid 35406] [client 20.240.53.226:3028] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "aed6WjeHLhVUuu8cVXyyEgAAAFY"]
[Tue Apr 21 21:23:38.832363 2026] [:error] [pid 35321:tid 35388] [client 20.240.53.226:15648] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aed6WjeHLhVUuu8cVXyyFwAAAEQ"]
[Tue Apr 21 21:23:39.496563 2026] [:error] [pid 4777:tid 4809] [client 20.240.53.226:2967] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aed6W6xXur6bykKyLZStaQAAARU"]
[Tue Apr 21 21:23:40.189085 2026] [:error] [pid 35320:tid 35333] [client 20.240.53.226:2962] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aed6XIJW6fdXWO6agMHOlwAAAAM"]
[Tue Apr 21 21:23:40.722284 2026] [:error] [pid 35321:tid 35401] [client 20.240.53.226:15683] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "aed6XDeHLhVUuu8cVXyyGwAAAFE"]
[Tue Apr 21 21:23:41.360979 2026] [:error] [pid 53978:tid 53992] [client 20.240.53.226:3020] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "aed6XZ1ivsR4hcOSQbYnVgAAAow"]
[Tue Apr 21 21:23:42.056393 2026] [:error] [pid 53978:tid 53993] [client 20.240.53.226:15679] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "aed6Xp1ivsR4hcOSQbYnWQAAAo0"]
[Tue Apr 21 21:23:42.685085 2026] [:error] [pid 53978:tid 53997] [client 20.240.53.226:3065] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "aed6Xp1ivsR4hcOSQbYnWwAAApE"]
[Tue Apr 21 21:23:43.274051 2026] [:error] [pid 53978:tid 53983] [client 20.240.53.226:2898] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mini.php"] [unique_id "aed6X51ivsR4hcOSQbYnXwAAAoM"]
[Tue Apr 21 21:23:43.883534 2026] [:error] [pid 35321:tid 35388] [client 20.240.53.226:15723] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aed6XzeHLhVUuu8cVXyyJQAAAEQ"]
[Tue Apr 21 21:23:44.687414 2026] [:error] [pid 54080:tid 54103] [client 20.240.53.226:3019] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aed6YIzEbQHHxtmWbaa9qwAAAtU"]
[Tue Apr 21 21:23:45.799597 2026] [:error] [pid 35321:tid 35394] [client 20.240.53.226:3031] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aed6YTeHLhVUuu8cVXyyOQAAAEo"]
[Tue Apr 21 21:23:46.546954 2026] [:error] [pid 35321:tid 35386] [client 20.240.53.226:15676] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aed6YjeHLhVUuu8cVXyyPwAAAEI"]
[Tue Apr 21 21:23:47.137026 2026] [:error] [pid 53978:tid 53998] [client 20.240.53.226:2970] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mode.php"] [unique_id "aed6Y51ivsR4hcOSQbYnaQAAApI"]
[Tue Apr 21 21:23:47.942269 2026] [:error] [pid 53731:tid 53744] [client 20.240.53.226:15663] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mode.php"] [unique_id "aed6Y12I9THUR-bRVGxvewAAAgk"]
[Tue Apr 21 21:23:48.689281 2026] [:error] [pid 53731:tid 53750] [client 20.240.53.226:3037] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mode.php"] [unique_id "aed6ZF2I9THUR-bRVGxvfwAAAg8"]
[Tue Apr 21 21:23:49.340359 2026] [:error] [pid 53731:tid 53752] [client 20.240.53.226:15637] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mode.php"] [unique_id "aed6ZV2I9THUR-bRVGxvhAAAAhA"]
[Tue Apr 21 21:23:50.228175 2026] [:error] [pid 35322:tid 35378] [client 20.240.53.226:3056] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aed6ZqPoAfV40BTfVKzd-wAAAJU"]
[Tue Apr 21 21:23:51.180928 2026] [:error] [pid 4823:tid 4853] [client 20.240.53.226:3017] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aed6Z_c8mke3PfHqsxECPAAAAYA"]
[Tue Apr 21 21:23:51.837749 2026] [:error] [pid 53731:tid 53752] [client 20.240.53.226:3011] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aed6Z12I9THUR-bRVGxvjwAAAhA"]
[Tue Apr 21 21:23:52.460589 2026] [:error] [pid 53978:tid 53988] [client 20.240.53.226:15704] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aed6aJ1ivsR4hcOSQbYnbgAAAog"]
[Tue Apr 21 21:23:53.049803 2026] [:error] [pid 53978:tid 53996] [client 20.240.53.226:15701] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-block.php"] [unique_id "aed6aZ1ivsR4hcOSQbYncwAAApA"]
[Tue Apr 21 21:23:53.625461 2026] [:error] [pid 35320:tid 35336] [client 20.240.53.226:15695] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-block.php"] [unique_id "aed6aYJW6fdXWO6agMHOsQAAAAY"]
[Tue Apr 21 21:23:54.263475 2026] [:error] [pid 53832:tid 53848] [client 20.240.53.226:2946] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-block.php"] [unique_id "aed6atzkuxsE_OhM9UJvcgAAAk0"]
[Tue Apr 21 21:23:54.993774 2026] [:error] [pid 4823:tid 4871] [client 20.240.53.226:3014] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-block.php"] [unique_id "aed6avc8mke3PfHqsxECPwAAAZI"]
[Tue Apr 21 21:23:55.576327 2026] [:error] [pid 35321:tid 35393] [client 20.240.53.226:15661] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws88.php"] [unique_id "aed6azeHLhVUuu8cVXyySgAAAEk"]
[Tue Apr 21 21:23:56.253090 2026] [:error] [pid 4777:tid 4790] [client 20.240.53.226:2980] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws88.php"] [unique_id "aed6bKxXur6bykKyLZStdQAAAQI"]
[Tue Apr 21 21:23:57.064085 2026] [:error] [pid 35321:tid 35406] [client 20.240.53.226:3008] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws88.php"] [unique_id "aed6bTeHLhVUuu8cVXyyVQAAAFY"]
[Tue Apr 21 21:23:58.074968 2026] [:error] [pid 35321:tid 35385] [client 20.240.53.226:15660] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws88.php"] [unique_id "aed6bjeHLhVUuu8cVXyyXAAAAEE"]
[Tue Apr 21 21:23:58.942977 2026] [:error] [pid 35321:tid 35405] [client 20.240.53.226:15657] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adoms.php"] [unique_id "aed6bjeHLhVUuu8cVXyyXwAAAFU"]
[Tue Apr 21 21:23:59.698432 2026] [:error] [pid 35321:tid 35386] [client 20.240.53.226:3039] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adoms.php"] [unique_id "aed6bzeHLhVUuu8cVXyyYgAAAEI"]
[Tue Apr 21 21:24:00.461024 2026] [:error] [pid 4823:tid 4864] [client 20.240.53.226:3069] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adoms.php"] [unique_id "aed6cPc8mke3PfHqsxECRwAAAYs"]
[Tue Apr 21 21:24:01.179570 2026] [:error] [pid 53978:tid 53996] [client 20.240.53.226:3038] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adoms.php"] [unique_id "aed6cZ1ivsR4hcOSQbYnfQAAApA"]
[Tue Apr 21 21:24:02.080806 2026] [:error] [pid 35320:tid 35330] [client 20.240.53.226:3026] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plugin-editor.php"] [unique_id "aed6coJW6fdXWO6agMHOuQAAAAA"]
[Tue Apr 21 21:24:02.821399 2026] [:error] [pid 4823:tid 4863] [client 20.240.53.226:15671] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plugin-editor.php"] [unique_id "aed6cvc8mke3PfHqsxECTgAAAYo"]
[Tue Apr 21 21:24:03.598426 2026] [:error] [pid 35320:tid 35334] [client 20.240.53.226:3070] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plugin-editor.php"] [unique_id "aed6c4JW6fdXWO6agMHOuwAAAAQ"]
[Tue Apr 21 21:24:04.337820 2026] [:error] [pid 35322:tid 35375] [client 20.240.53.226:3033] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plugin-editor.php"] [unique_id "aed6dKPoAfV40BTfVKzeCwAAAJI"]
[Tue Apr 21 21:24:05.059259 2026] [:error] [pid 35322:tid 35360] [client 20.240.53.226:15673] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8573.php"] [unique_id "aed6daPoAfV40BTfVKzeDAAAAIM"]
[Tue Apr 21 21:24:05.782980 2026] [:error] [pid 53978:tid 53993] [client 20.240.53.226:2949] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8573.php"] [unique_id "aed6dZ1ivsR4hcOSQbYnhgAAAo0"]
[Tue Apr 21 21:24:06.423550 2026] [:error] [pid 35321:tid 35391] [client 20.240.53.226:2968] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8573.php"] [unique_id "aed6djeHLhVUuu8cVXyyegAAAEc"]
[Tue Apr 21 21:24:07.015185 2026] [:error] [pid 35321:tid 35396] [client 20.240.53.226:15626] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8573.php"] [unique_id "aed6dzeHLhVUuu8cVXyyfgAAAEw"]
[Tue Apr 21 21:24:07.701986 2026] [:error] [pid 35321:tid 35385] [client 20.240.53.226:3067] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/an.php"] [unique_id "aed6dzeHLhVUuu8cVXyyhAAAAEE"]
[Tue Apr 21 21:24:08.293022 2026] [:error] [pid 35320:tid 35350] [client 20.240.53.226:3054] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/an.php"] [unique_id "aed6eIJW6fdXWO6agMHO1wAAABQ"]
[Tue Apr 21 21:24:08.888900 2026] [:error] [pid 35321:tid 35395] [client 20.240.53.226:3001] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/an.php"] [unique_id "aed6eDeHLhVUuu8cVXyyiAAAAEs"]
[Tue Apr 21 21:24:09.518494 2026] [:error] [pid 35321:tid 35391] [client 20.240.53.226:2950] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/an.php"] [unique_id "aed6eTeHLhVUuu8cVXyyjQAAAEc"]
[Tue Apr 21 21:24:10.111379 2026] [:error] [pid 53832:tid 53835] [client 20.240.53.226:3059] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/t.php"] [unique_id "aed6etzkuxsE_OhM9UJvhQAAAkA"]
[Tue Apr 21 21:24:10.723715 2026] [:error] [pid 53731:tid 53755] [client 20.240.53.226:2963] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/t.php"] [unique_id "aed6el2I9THUR-bRVGxvmAAAAhM"]
[Tue Apr 21 21:24:11.359436 2026] [:error] [pid 35322:tid 35364] [client 20.240.53.226:2921] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/t.php"] [unique_id "aed6e6PoAfV40BTfVKzeEgAAAIc"]
[Tue Apr 21 21:24:12.059562 2026] [:error] [pid 35320:tid 35341] [client 20.240.53.226:2992] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/t.php"] [unique_id "aed6fIJW6fdXWO6agMHO5gAAAAs"]
[Tue Apr 21 21:24:12.742537 2026] [:error] [pid 35321:tid 35395] [client 20.240.53.226:3048] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aed6fDeHLhVUuu8cVXyymQAAAEs"]
[Tue Apr 21 21:24:13.365665 2026] [:error] [pid 53978:tid 53982] [client 20.240.53.226:2944] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aed6fZ1ivsR4hcOSQbYnjQAAAoI"]
[Tue Apr 21 21:24:14.182811 2026] [:error] [pid 35320:tid 35350] [client 20.240.53.226:3050] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aed6foJW6fdXWO6agMHO6gAAABQ"]
[Tue Apr 21 21:24:14.831287 2026] [:error] [pid 35320:tid 35342] [client 20.240.53.226:3052] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aed6foJW6fdXWO6agMHO6wAAAAw"]
[Tue Apr 21 21:24:15.587423 2026] [:error] [pid 35321:tid 35399] [client 20.240.53.226:2971] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/profile.php"] [unique_id "aed6fzeHLhVUuu8cVXyyowAAAE8"]
[Tue Apr 21 21:24:16.208129 2026] [:error] [pid 54080:tid 54106] [client 20.240.53.226:15694] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/profile.php"] [unique_id "aed6gIzEbQHHxtmWbaa9yAAAAtg"]
[Tue Apr 21 21:24:16.819302 2026] [:error] [pid 53978:tid 53998] [client 20.240.53.226:3058] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/profile.php"] [unique_id "aed6gJ1ivsR4hcOSQbYnmAAAApI"]
[Tue Apr 21 21:24:17.662581 2026] [:error] [pid 53978:tid 53995] [client 20.240.53.226:3051] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/profile.php"] [unique_id "aed6gZ1ivsR4hcOSQbYnnAAAAo8"]
[Tue Apr 21 21:24:18.552683 2026] [:error] [pid 4777:tid 4796] [client 20.240.53.226:2971] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gaza.php"] [unique_id "aed6gqxXur6bykKyLZStgQAAAQg"]
[Tue Apr 21 21:24:19.611520 2026] [:error] [pid 35321:tid 35400] [client 20.240.53.226:3071] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gaza.php"] [unique_id "aed6gzeHLhVUuu8cVXyyrAAAAFA"]
[Tue Apr 21 21:24:20.314164 2026] [:error] [pid 35321:tid 35404] [client 20.240.53.226:3040] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gaza.php"] [unique_id "aed6hDeHLhVUuu8cVXyyrwAAAFQ"]
[Tue Apr 21 21:24:21.128600 2026] [:error] [pid 35320:tid 35337] [client 20.240.53.226:2887] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gaza.php"] [unique_id "aed6hYJW6fdXWO6agMHPAQAAAAc"]
[Tue Apr 21 21:24:21.901206 2026] [:error] [pid 35320:tid 35340] [client 20.240.53.226:2986] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aed6hYJW6fdXWO6agMHPBQAAAAo"]
[Tue Apr 21 21:24:24.655699 2026] [:error] [pid 35320:tid 35350] [client 20.240.53.226:2957] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aed6iIJW6fdXWO6agMHPFwAAABQ"]
[Tue Apr 21 21:24:26.242055 2026] [:error] [pid 35321:tid 35385] [client 20.240.53.226:3060] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aed6ijeHLhVUuu8cVXyywQAAAEE"]
[Tue Apr 21 21:24:27.707174 2026] [:error] [pid 35320:tid 35348] [client 20.240.53.226:2995] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aed6i4JW6fdXWO6agMHPIgAAABI"]
[Tue Apr 21 21:24:30.387807 2026] [:error] [pid 35320:tid 35337] [client 20.240.53.226:15686] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "aed6joJW6fdXWO6agMHPOgAAAAc"]
[Tue Apr 21 21:24:42.029864 2026] [:error] [pid 53978:tid 53980] [client 20.240.53.226:15675] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/retu11.PhP7"] [unique_id "aed6mp1ivsR4hcOSQbYnvQAAAoA"]
[Tue Apr 21 21:24:43.876297 2026] [:error] [pid 35322:tid 35374] [client 20.240.53.226:2998] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/retu11.PhP7"] [unique_id "aed6m6PoAfV40BTfVKzeIAAAAJE"]
[Tue Apr 21 21:24:45.704805 2026] [:error] [pid 53832:tid 53852] [client 20.240.53.226:3003] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/retu11.PhP7"] [unique_id "aed6ndzkuxsE_OhM9UJvwQAAAlE"]
[Tue Apr 21 21:24:46.929388 2026] [:error] [pid 35320:tid 35353] [client 20.240.53.226:3018] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/retu11.PhP7"] [unique_id "aed6noJW6fdXWO6agMHPXwAAABc"]
[Tue Apr 21 21:24:48.001320 2026] [:error] [pid 4777:tid 4809] [client 20.240.53.226:15719] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rip.php"] [unique_id "aed6oKxXur6bykKyLZStkwAAARU"]
[Tue Apr 21 21:24:48.954837 2026] [:error] [pid 4777:tid 4800] [client 20.240.53.226:15653] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rip.php"] [unique_id "aed6oKxXur6bykKyLZStmAAAAQw"]
[Tue Apr 21 21:24:50.154006 2026] [:error] [pid 35320:tid 35336] [client 20.240.53.226:2951] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rip.php"] [unique_id "aed6ooJW6fdXWO6agMHPZQAAAAY"]
[Tue Apr 21 21:24:51.103248 2026] [:error] [pid 53832:tid 53853] [client 20.240.53.226:15718] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rip.php"] [unique_id "aed6o9zkuxsE_OhM9UJvyAAAAlI"]
[Tue Apr 21 21:24:52.385517 2026] [:error] [pid 53978:tid 53998] [client 20.240.53.226:2966] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aed6pJ1ivsR4hcOSQbYnxQAAApI"]
[Tue Apr 21 21:24:53.121196 2026] [:error] [pid 35320:tid 35346] [client 20.240.53.226:2954] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aed6pYJW6fdXWO6agMHPcwAAABA"]
[Tue Apr 21 21:24:53.739598 2026] [:error] [pid 35321:tid 35401] [client 20.240.53.226:2973] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aed6pTeHLhVUuu8cVXyzLgAAAFE"]
[Tue Apr 21 21:24:54.326820 2026] [:error] [pid 35320:tid 35337] [client 20.240.53.226:3064] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aed6poJW6fdXWO6agMHPfwAAAAc"]
[Tue Apr 21 21:24:55.074489 2026] [:error] [pid 35321:tid 35388] [client 20.240.53.226:2907] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zoo.php"] [unique_id "aed6pzeHLhVUuu8cVXyzNgAAAEQ"]
[Tue Apr 21 21:24:55.776391 2026] [:error] [pid 35320:tid 35342] [client 20.240.53.226:2904] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zoo.php"] [unique_id "aed6p4JW6fdXWO6agMHPiQAAAAw"]
[Tue Apr 21 21:24:56.750550 2026] [:error] [pid 35320:tid 35340] [client 20.240.53.226:2948] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zoo.php"] [unique_id "aed6qIJW6fdXWO6agMHPjAAAAAo"]
[Tue Apr 21 21:24:58.224557 2026] [:error] [pid 35321:tid 35388] [client 20.240.53.226:2960] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zoo.php"] [unique_id "aed6qjeHLhVUuu8cVXyzRwAAAEQ"]
[Tue Apr 21 21:25:00.469746 2026] [:error] [pid 35320:tid 35343] [client 20.240.53.226:2881] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admlo.php"] [unique_id "aed6rIJW6fdXWO6agMHPmgAAAA0"]
[Tue Apr 21 21:25:02.840270 2026] [:error] [pid 35320:tid 35336] [client 20.240.53.226:15650] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admlo.php"] [unique_id "aed6roJW6fdXWO6agMHPpAAAAAY"]
[Tue Apr 21 21:25:04.928939 2026] [:error] [pid 35320:tid 35352] [client 20.240.53.226:15658] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admlo.php"] [unique_id "aed6sIJW6fdXWO6agMHPtQAAABY"]
[Tue Apr 21 21:25:06.630773 2026] [:error] [pid 35321:tid 35389] [client 20.240.53.226:2883] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admlo.php"] [unique_id "aed6sjeHLhVUuu8cVXyzZAAAAEU"]
[Tue Apr 21 21:25:09.211055 2026] [:error] [pid 53978:tid 53998] [client 20.240.53.226:2991] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gcqoa.php"] [unique_id "aed6tZ1ivsR4hcOSQbYn0AAAApI"]
[Tue Apr 21 21:25:10.663060 2026] [:error] [pid 35321:tid 35387] [client 20.240.53.226:3009] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gcqoa.php"] [unique_id "aed6tjeHLhVUuu8cVXyziwAAAEM"]
[Tue Apr 21 21:25:13.006922 2026] [:error] [pid 53731:tid 53746] [client 20.240.53.226:2880] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gcqoa.php"] [unique_id "aed6uV2I9THUR-bRVGxv9gAAAgs"]
[Tue Apr 21 21:25:14.264300 2026] [:error] [pid 35322:tid 35358] [client 20.240.53.226:3005] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gcqoa.php"] [unique_id "aed6uqPoAfV40BTfVKzeMQAAAIE"]
[Tue Apr 21 21:25:15.054812 2026] [:error] [pid 35415:tid 35439] [client 20.240.53.226:2840] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "aed6u0iqDinI4_22zzh3FAAAAMw"]
[Tue Apr 21 21:25:15.683236 2026] [:error] [pid 35415:tid 35451] [client 20.240.53.226:2891] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "aed6u0iqDinI4_22zzh3FQAAANg"]
[Tue Apr 21 21:25:16.744998 2026] [:error] [pid 35321:tid 35393] [client 20.240.53.226:3006] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "aed6vDeHLhVUuu8cVXyznAAAAEk"]
[Tue Apr 21 21:25:18.193645 2026] [:error] [pid 35415:tid 35430] [client 20.240.53.226:2901] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "aed6vkiqDinI4_22zzh3GAAAAMM"]
[Tue Apr 21 21:25:20.843132 2026] [:error] [pid 54080:tid 54102] [client 20.240.53.226:3063] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/b.php"] [unique_id "aed6wIzEbQHHxtmWbaa-CAAAAtQ"]
[Tue Apr 21 21:25:23.811933 2026] [:error] [pid 35321:tid 35400] [client 20.240.53.226:3000] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/b.php"] [unique_id "aed6wzeHLhVUuu8cVXyzoAAAAFA"]
[Tue Apr 21 21:25:27.845443 2026] [:error] [pid 53731:tid 53757] [client 20.240.53.226:2981] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/b.php"] [unique_id "aed6x12I9THUR-bRVGxwFAAAAhU"]
[Tue Apr 21 21:25:40.986949 2026] [:error] [pid 4823:tid 4865] [client 20.240.53.226:2988] [client 20.240.53.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aed61Pc8mke3PfHqsxECiwAAAYw"]
[Wed Apr 22 10:25:23.467900 2026] [:error] [pid 31755:tid 31781] [client 163.7.2.30:36834] [client 163.7.2.30] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourcause.measureyourbrand.com.au|F|2"] [data ".php.bak"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/config.php.bak"] [unique_id "aegxkwz2mYMkg3X8q1vVrwAAAhI"]
[Wed Apr 22 23:37:01.940292 2026] [:error] [pid 6252:tid 6317] [client 74.248.33.208:11260] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wziar1.php"] [unique_id "aejrHetGYuiYb1nWBpRrYQAAAQU"]
[Wed Apr 22 23:37:05.530454 2026] [:error] [pid 6251:tid 6300] [client 74.248.33.208:11252] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wziar1.php"] [unique_id "aejrISsFAzbyObL-SQ6X8wAAAI8"]
[Wed Apr 22 23:37:08.719294 2026] [:error] [pid 6250:tid 6271] [client 74.248.33.208:52859] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wziar1.php"] [unique_id "aejrJA-iZeQkqmQVfj4yEQAAAFE"]
[Wed Apr 22 23:37:11.075121 2026] [:error] [pid 6384:tid 6409] [client 74.248.33.208:36692] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wziar1.php"] [unique_id "aejrJz58M3t15ICeWHWYMAAAANY"]
[Wed Apr 22 23:37:13.881803 2026] [:error] [pid 23776:tid 23781] [client 74.248.33.208:39325] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aejrKbRExf-1pAbSeJsv4gAAAYM"]
[Wed Apr 22 23:37:16.493156 2026] [:error] [pid 6344:tid 6370] [client 74.248.33.208:43196] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aejrLEDOTF-pkQnDeUkdjQAAABU"]
[Wed Apr 22 23:37:24.522968 2026] [:error] [pid 6384:tid 6403] [client 74.248.33.208:40834] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "aejrND58M3t15ICeWHWYTQAAANA"]
[Wed Apr 22 23:37:28.469785 2026] [:error] [pid 6251:tid 6308] [client 74.248.33.208:11261] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/7logs.php"] [unique_id "aejrOCsFAzbyObL-SQ6YBgAAAJc"]
[Wed Apr 22 23:37:31.100024 2026] [:error] [pid 9085:tid 9088] [client 74.248.33.208:43187] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/7logs.php"] [unique_id "aejrO9-_-or9vQnlWnrklQAAAUE"]
[Wed Apr 22 23:37:37.150710 2026] [:error] [pid 6384:tid 6389] [client 74.248.33.208:43508] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/7logs.php"] [unique_id "aejrQT58M3t15ICeWHWYagAAAMI"]
[Wed Apr 22 23:37:49.375888 2026] [:error] [pid 6384:tid 6397] [client 74.248.33.208:37055] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aejrTT58M3t15ICeWHWYjgAAAMo"]
[Wed Apr 22 23:37:51.178398 2026] [:error] [pid 6252:tid 6315] [client 74.248.33.208:45865] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aejrT-tGYuiYb1nWBpRrfQAAAQM"]
[Wed Apr 22 23:37:56.775911 2026] [:error] [pid 23776:tid 23785] [client 74.248.33.208:49859] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "aejrVLRExf-1pAbSeJswNAAAAYc"]
[Wed Apr 22 23:38:32.002102 2026] [:error] [pid 6384:tid 6391] [client 74.248.33.208:37679] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aejreD58M3t15ICeWHWYxQAAAMQ"]
[Wed Apr 22 23:38:35.109951 2026] [:error] [pid 6251:tid 6308] [client 74.248.33.208:54708] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aejreysFAzbyObL-SQ6YMAAAAJc"]
[Wed Apr 22 23:38:41.331088 2026] [:error] [pid 6251:tid 6292] [client 74.248.33.208:51385] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aejrgSsFAzbyObL-SQ6YNQAAAIc"]
[Wed Apr 22 23:38:44.480320 2026] [:error] [pid 6252:tid 6333] [client 74.248.33.208:37587] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aejrhOtGYuiYb1nWBpRrpgAAARU"]
[Wed Apr 22 23:38:49.795512 2026] [:error] [pid 6344:tid 6360] [client 74.248.33.208:49826] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aejriUDOTF-pkQnDeUkd_AAAAAs"]
[Wed Apr 22 23:38:51.767794 2026] [:error] [pid 6251:tid 6289] [client 74.248.33.208:42875] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aejriysFAzbyObL-SQ6YQgAAAIQ"]
[Wed Apr 22 23:38:52.788595 2026] [:error] [pid 6250:tid 6258] [client 74.248.33.208:42875] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aejrjA-iZeQkqmQVfj4yiQAAAEQ"]
[Wed Apr 22 23:38:54.495011 2026] [:error] [pid 6384:tid 6407] [client 74.248.33.208:41944] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "aejrjj58M3t15ICeWHWY8gAAANQ"]
[Wed Apr 22 23:38:56.856882 2026] [:error] [pid 6344:tid 6363] [client 74.248.33.208:42867] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bfil.php"] [unique_id "aejrkEDOTF-pkQnDeUkeBQAAAA4"]
[Wed Apr 22 23:39:05.320176 2026] [:error] [pid 9085:tid 9093] [client 74.248.33.208:38240] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bfil.php"] [unique_id "aejrmd-_-or9vQnlWnrljwAAAUY"]
[Wed Apr 22 23:39:06.517162 2026] [:error] [pid 6252:tid 6333] [client 74.248.33.208:52069] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bfil.php"] [unique_id "aejrmutGYuiYb1nWBpRruQAAARU"]
[Wed Apr 22 23:39:08.095949 2026] [:error] [pid 6344:tid 6364] [client 74.248.33.208:44181] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bfil.php"] [unique_id "aejrnEDOTF-pkQnDeUkeEwAAAA8"]
[Wed Apr 22 23:39:09.089564 2026] [:error] [pid 6252:tid 6332] [client 74.248.33.208:10293] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abrand.php"] [unique_id "aejrnetGYuiYb1nWBpRrvAAAARQ"]
[Wed Apr 22 23:39:11.793907 2026] [:error] [pid 6250:tid 6269] [client 74.248.33.208:11050] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abrand.php"] [unique_id "aejrnw-iZeQkqmQVfj4yjgAAAE8"]
[Wed Apr 22 23:39:14.205395 2026] [:error] [pid 6344:tid 6370] [client 74.248.33.208:10759] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abrand.php"] [unique_id "aejrokDOTF-pkQnDeUkeHwAAABU"]
[Wed Apr 22 23:39:16.036601 2026] [:error] [pid 6344:tid 6361] [client 74.248.33.208:33026] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abrand.php"] [unique_id "aejrpEDOTF-pkQnDeUkeIgAAAAw"]
[Wed Apr 22 23:39:18.091053 2026] [:error] [pid 23776:tid 23784] [client 74.248.33.208:40252] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "aejrprRExf-1pAbSeJswtgAAAYY"]
[Wed Apr 22 23:39:21.945581 2026] [:error] [pid 9085:tid 9088] [client 74.248.33.208:33042] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "aejrqd-_-or9vQnlWnrlsAAAAUE"]
[Wed Apr 22 23:39:26.965907 2026] [:error] [pid 6384:tid 6396] [client 74.248.33.208:34785] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "aejrrj58M3t15ICeWHWZMwAAAMk"]
[Wed Apr 22 23:39:29.799038 2026] [:error] [pid 6250:tid 6259] [client 74.248.33.208:34794] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "aejrsQ-iZeQkqmQVfj4ylgAAAEU"]
[Wed Apr 22 23:39:43.855588 2026] [:error] [pid 23776:tid 23788] [client 74.248.33.208:10803] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aejrv7RExf-1pAbSeJsw7gAAAYo"]
[Wed Apr 22 23:39:46.911197 2026] [:error] [pid 6344:tid 6349] [client 74.248.33.208:10756] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aejrwkDOTF-pkQnDeUkeQAAAAAA"]
[Wed Apr 22 23:39:47.795189 2026] [:error] [pid 6384:tid 6410] [client 74.248.33.208:42654] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aejrwz58M3t15ICeWHWZZwAAANc"]
[Wed Apr 22 23:39:52.661038 2026] [:error] [pid 6384:tid 6403] [client 74.248.33.208:51275] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aejryD58M3t15ICeWHWZcAAAANA"]
[Wed Apr 22 23:39:56.651622 2026] [:error] [pid 9085:tid 9093] [client 74.248.33.208:40585] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/100.php"] [unique_id "aejrzN-_-or9vQnlWnrl8AAAAUY"]
[Wed Apr 22 23:40:00.240333 2026] [:error] [pid 6344:tid 6367] [client 74.248.33.208:54406] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/100.php"] [unique_id "aejr0EDOTF-pkQnDeUkeUQAAABI"]
[Wed Apr 22 23:40:03.562733 2026] [:error] [pid 6344:tid 6355] [client 74.248.33.208:42929] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/100.php"] [unique_id "aejr00DOTF-pkQnDeUkeWgAAAAY"]
[Wed Apr 22 23:40:07.795192 2026] [:error] [pid 6250:tid 6262] [client 74.248.33.208:54430] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/100.php"] [unique_id "aejr1w-iZeQkqmQVfj4yqgAAAEg"]
[Wed Apr 22 23:40:14.312290 2026] [:error] [pid 6384:tid 6407] [client 74.248.33.208:39003] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aejr3j58M3t15ICeWHWZiAAAANQ"]
[Wed Apr 22 23:40:19.736212 2026] [:error] [pid 9085:tid 9106] [client 74.248.33.208:35851] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aejr49-_-or9vQnlWnrmCwAAAVM"]
[Wed Apr 22 23:40:23.203105 2026] [:error] [pid 6251:tid 6304] [client 74.248.33.208:42597] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aejr5ysFAzbyObL-SQ6YagAAAJM"]
[Wed Apr 22 23:40:26.514725 2026] [:error] [pid 23776:tid 23785] [client 74.248.33.208:54972] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/koiy.php"] [unique_id "aejr6rRExf-1pAbSeJsw-AAAAYc"]
[Wed Apr 22 23:40:31.116222 2026] [:error] [pid 9085:tid 9097] [client 74.248.33.208:42564] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/koiy.php"] [unique_id "aejr79-_-or9vQnlWnrmIAAAAUo"]
[Wed Apr 22 23:40:42.298660 2026] [:error] [pid 23776:tid 23782] [client 74.248.33.208:63314] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/albin.php"] [unique_id "aejr-rRExf-1pAbSeJsxCwAAAYQ"]
[Wed Apr 22 23:40:57.280333 2026] [:error] [pid 6384:tid 6395] [client 74.248.33.208:10695] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xper1.php"] [unique_id "aejsCT58M3t15ICeWHWZ1wAAAMg"]
[Wed Apr 22 23:40:59.664884 2026] [:error] [pid 23776:tid 23780] [client 74.248.33.208:10751] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xper1.php"] [unique_id "aejsC7RExf-1pAbSeJsxGAAAAYI"]
[Wed Apr 22 23:41:05.011733 2026] [:error] [pid 6250:tid 6266] [client 74.248.33.208:51478] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xper1.php"] [unique_id "aejsEQ-iZeQkqmQVfj4yygAAAEw"]
[Wed Apr 22 23:41:11.656029 2026] [:error] [pid 6252:tid 6330] [client 74.248.33.208:51481] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xper1.php"] [unique_id "aejsF-tGYuiYb1nWBpRr-QAAARI"]
[Wed Apr 22 23:41:14.852900 2026] [:error] [pid 6384:tid 6402] [client 74.248.33.208:49962] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/t00l.php"] [unique_id "aejsGj58M3t15ICeWHWZ5wAAAM8"]
[Wed Apr 22 23:41:20.868014 2026] [:error] [pid 6344:tid 6355] [client 74.248.33.208:63341] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/t00l.php"] [unique_id "aejsIEDOTF-pkQnDeUkefQAAAAY"]
[Wed Apr 22 23:41:24.373482 2026] [:error] [pid 6384:tid 6406] [client 74.248.33.208:10700] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/t00l.php"] [unique_id "aejsJD58M3t15ICeWHWZ_wAAANM"]
[Wed Apr 22 23:41:27.194841 2026] [:error] [pid 6250:tid 6275] [client 74.248.33.208:42576] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/t00l.php"] [unique_id "aejsJw-iZeQkqmQVfj4y2AAAAFU"]
[Wed Apr 22 23:41:30.696791 2026] [:error] [pid 6252:tid 6316] [client 74.248.33.208:49933] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/casp1.php"] [unique_id "aejsKutGYuiYb1nWBpRsAwAAAQQ"]
[Wed Apr 22 23:41:38.488862 2026] [:error] [pid 6250:tid 6267] [client 74.248.33.208:42211] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/casp1.php"] [unique_id "aejsMg-iZeQkqmQVfj4y4QAAAE0"]
[Wed Apr 22 23:41:48.031074 2026] [:error] [pid 23776:tid 23799] [client 74.248.33.208:10838] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/acc.php"] [unique_id "aejsPLRExf-1pAbSeJsxPwAAAZU"]
[Wed Apr 22 23:41:54.572396 2026] [:error] [pid 23776:tid 23784] [client 74.248.33.208:10819] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/acc.php"] [unique_id "aejsQrRExf-1pAbSeJsxRwAAAYY"]
[Wed Apr 22 23:42:11.820842 2026] [:error] [pid 6251:tid 6296] [client 74.248.33.208:63354] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "aejsUysFAzbyObL-SQ6YuQAAAIs"]
[Wed Apr 22 23:42:17.639680 2026] [:error] [pid 23776:tid 23792] [client 74.248.33.208:48686] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "aejsWbRExf-1pAbSeJsxYgAAAY4"]
[Wed Apr 22 23:42:34.550387 2026] [:error] [pid 23776:tid 23782] [client 74.248.33.208:53598] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/prosellers8.php"] [unique_id "aejsarRExf-1pAbSeJsxdQAAAYQ"]
[Wed Apr 22 23:42:38.071833 2026] [:error] [pid 6250:tid 6257] [client 74.248.33.208:52757] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/prosellers8.php"] [unique_id "aejsbg-iZeQkqmQVfj4y_gAAAEM"]
[Wed Apr 22 23:42:46.233495 2026] [:error] [pid 9085:tid 9102] [client 74.248.33.208:39646] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shop.php"] [unique_id "aejsdt-_-or9vQnlWnrm1QAAAU8"]
[Wed Apr 22 23:42:50.124196 2026] [:error] [pid 6251:tid 6285] [client 74.248.33.208:46089] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shop.php"] [unique_id "aejseisFAzbyObL-SQ6YxAAAAIA"]
[Wed Apr 22 23:42:53.063277 2026] [:error] [pid 23776:tid 23779] [client 74.248.33.208:49782] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shop.php"] [unique_id "aejsfbRExf-1pAbSeJsxjQAAAYE"]
[Wed Apr 22 23:43:05.171775 2026] [:error] [pid 6250:tid 6277] [client 74.248.33.208:47479] [client 74.248.33.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ww.php"] [unique_id "aejsiQ-iZeQkqmQVfj4zCgAAAFc"]
[Thu Apr 23 07:23:55.086688 2026] [:error] [pid 43083:tid 43109] [client 89.251.0.123:32749] [client 89.251.0.123] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aelYizC5hrvNXosL83LCbAAAANg"]
[Thu Apr 23 07:24:06.111302 2026] [:error] [pid 64998:tid 65010] [client 89.251.0.134:64331] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aelYloV5EysYcTLjmwjtjwAAAcg"]
[Thu Apr 23 07:24:07.691826 2026] [:error] [pid 42973:tid 43056] [client 89.251.0.124:48311] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aelYl26I0QqmmmLTHE3VyAAAAI0"]
[Thu Apr 23 07:24:10.278820 2026] [:error] [pid 59700:tid 59716] [client 89.251.0.145:55861] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aelYmpXyGZJFeAIDWtlSoAAAAU4"]
[Thu Apr 23 07:24:11.847425 2026] [:error] [pid 65000:tid 65042] [client 89.251.0.139:49647] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aelYm76vRb9j6psK2ZaNvQAAAgk"]
[Thu Apr 23 07:24:14.691511 2026] [:error] [pid 65000:tid 65050] [client 89.251.0.144:30715] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aelYnr6vRb9j6psK2ZaOBwAAAhE"]
[Thu Apr 23 07:24:15.604827 2026] [:error] [pid 64998:tid 65020] [client 89.251.0.145:63475] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aelYn4V5EysYcTLjmwjuLQAAAdI"]
[Thu Apr 23 07:24:16.227656 2026] [:error] [pid 42971:tid 42998] [client 89.251.0.116:31263] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aelYoDEP2_5RswrH8bGhJgAAAAw"]
[Thu Apr 23 07:24:16.850486 2026] [:error] [pid 43083:tid 43091] [client 89.251.0.131:40911] [client 89.251.0.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aelYoDC5hrvNXosL83LC6wAAAMY"]
[Thu Apr 23 07:24:17.569721 2026] [:error] [pid 42971:tid 43008] [client 89.251.0.151:21175] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aelYoTEP2_5RswrH8bGhNQAAABY"]
[Thu Apr 23 07:24:18.371855 2026] [:error] [pid 25635:tid 25656] [client 89.251.0.132:59651] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aelYosRxv6UsgRGKB3LdBQAAARE"]
[Thu Apr 23 07:24:19.372825 2026] [:error] [pid 25635:tid 25660] [client 89.251.0.147:63831] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aelYo8Rxv6UsgRGKB3LdFQAAARU"]
[Thu Apr 23 07:24:20.708011 2026] [:error] [pid 42971:tid 43006] [client 89.251.0.115:25543] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "aelYpDEP2_5RswrH8bGhTQAAABQ"]
[Thu Apr 23 07:24:21.957658 2026] [:error] [pid 42971:tid 43002] [client 89.251.0.129:46965] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aelYpTEP2_5RswrH8bGhZQAAABA"]
[Thu Apr 23 07:24:22.680289 2026] [:error] [pid 64998:tid 65003] [client 89.251.0.119:55031] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "aelYpoV5EysYcTLjmwjusQAAAcE"]
[Thu Apr 23 07:24:23.023877 2026] [:error] [pid 64998:tid 65003] [client 89.251.0.119:58335] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aelYp4V5EysYcTLjmwjuwgAAAcE"]
[Thu Apr 23 07:24:23.987261 2026] [:error] [pid 59700:tid 59708] [client 89.251.0.135:51741] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aelYp5XyGZJFeAIDWtlS9gAAAUY"]
[Thu Apr 23 07:24:24.450836 2026] [:error] [pid 64967:tid 64971] [client 89.251.0.116:47315] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "aelYqIAV4GfOOdX8QzoMFwAAAYI"]
[Thu Apr 23 07:24:26.259656 2026] [:error] [pid 42971:tid 42994] [client 89.251.0.136:31525] [client 89.251.0.136] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin/upload/css.php"] [unique_id "aelYqjEP2_5RswrH8bGhiAAAAAg"]
[Thu Apr 23 07:24:27.110933 2026] [:error] [pid 64967:tid 64993] [client 89.251.0.114:47743] [client 89.251.0.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "aelYq4AV4GfOOdX8QzoMUQAAAZg"]
[Thu Apr 23 07:24:28.266720 2026] [:error] [pid 59700:tid 59725] [client 89.251.0.128:40493] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aelYrJXyGZJFeAIDWtlTIAAAAVc"]
[Thu Apr 23 07:24:28.647649 2026] [:error] [pid 64967:tid 64977] [client 89.251.0.115:45969] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "aelYrIAV4GfOOdX8QzoMeAAAAYg"]
[Thu Apr 23 07:24:29.190685 2026] [:error] [pid 42973:tid 43056] [client 89.251.0.115:58563] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aelYrW6I0QqmmmLTHE3WRgAAAI0"]
[Thu Apr 23 07:24:31.153299 2026] [:error] [pid 43083:tid 43097] [client 89.251.0.113:43417] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aelYrzC5hrvNXosL83LDnAAAAMw"]
[Thu Apr 23 07:24:31.300761 2026] [:error] [pid 42971:tid 43008] [client 89.251.0.142:26221] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "aelYrzEP2_5RswrH8bGhsAAAABY"]
[Thu Apr 23 07:24:32.195786 2026] [:error] [pid 43083:tid 43088] [client 89.251.0.126:37569] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aelYsDC5hrvNXosL83LDtgAAAMM"]
[Thu Apr 23 07:24:32.381757 2026] [:error] [pid 59700:tid 59703] [client 89.251.0.114:40957] [client 89.251.0.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "aelYsJXyGZJFeAIDWtlTLwAAAUE"]
[Thu Apr 23 07:24:33.988028 2026] [:error] [pid 43083:tid 43087] [client 89.251.0.135:46069] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "aelYsTC5hrvNXosL83LD0QAAAMI"]
[Thu Apr 23 07:24:34.562529 2026] [:error] [pid 25635:tid 25656] [client 89.251.0.114:32839] [client 89.251.0.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aelYssRxv6UsgRGKB3LdrgAAARE"]
[Thu Apr 23 07:24:34.675637 2026] [:error] [pid 65000:tid 65031] [client 89.251.0.150:31363] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "aelYsr6vRb9j6psK2ZaPhwAAAgI"]
[Thu Apr 23 07:24:35.281837 2026] [:error] [pid 42972:tid 43029] [client 89.251.0.120:37151] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "aelYs8OAb-3sOknsk4cZpgAAAE0"]
[Thu Apr 23 07:24:35.479248 2026] [:error] [pid 64998:tid 65021] [client 89.251.0.140:57555] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aelYs4V5EysYcTLjmwjvYgAAAdM"]
[Thu Apr 23 07:24:36.217631 2026] [:error] [pid 43083:tid 43087] [client 89.251.0.127:46783] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "aelYtDC5hrvNXosL83LD6QAAAMI"]
[Thu Apr 23 07:24:36.574085 2026] [:error] [pid 65000:tid 65038] [client 89.251.0.137:21735] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aelYtL6vRb9j6psK2ZaPtQAAAgU"]
[Thu Apr 23 07:24:37.135592 2026] [:error] [pid 43083:tid 43106] [client 89.251.0.119:37207] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "aelYtTC5hrvNXosL83LD-QAAANU"]
[Thu Apr 23 07:24:37.198715 2026] [:error] [pid 65000:tid 65044] [client 89.251.0.113:41801] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aelYtb6vRb9j6psK2ZaPyQAAAgs"]
[Thu Apr 23 07:24:37.807606 2026] [:error] [pid 65000:tid 65039] [client 89.251.0.144:64369] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aelYtb6vRb9j6psK2ZaP4QAAAgY"]
[Thu Apr 23 07:24:38.373334 2026] [:error] [pid 43083:tid 43103] [client 89.251.0.146:59177] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "aelYtjC5hrvNXosL83LEBQAAANI"]
[Thu Apr 23 07:24:38.766526 2026] [:error] [pid 43083:tid 43085] [client 89.251.0.116:32665] [client 89.251.0.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/update/403.php"] [unique_id "aelYtjC5hrvNXosL83LECAAAAMA"]
[Thu Apr 23 07:24:38.995617 2026] [:error] [pid 42973:tid 43060] [client 89.251.0.129:35121] [client 89.251.0.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/bypass.php"] [unique_id "aelYtm6I0QqmmmLTHE3WfgAAAJE"]
[Thu Apr 23 07:24:40.234972 2026] [:error] [pid 42971:tid 43008] [client 89.251.0.144:30959] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "aelYuDEP2_5RswrH8bGh8gAAABY"]
[Thu Apr 23 07:24:41.059604 2026] [:error] [pid 42973:tid 43058] [client 89.251.0.126:38259] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aelYuW6I0QqmmmLTHE3WkAAAAI8"]
[Thu Apr 23 07:24:41.241456 2026] [:error] [pid 43083:tid 43090] [client 89.251.0.142:41729] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "aelYuTC5hrvNXosL83LEHwAAAMU"]
[Thu Apr 23 07:24:41.658342 2026] [:error] [pid 64998:tid 65022] [client 89.251.0.121:20501] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aelYuYV5EysYcTLjmwjvgQAAAdQ"]
[Thu Apr 23 07:24:42.230831 2026] [:error] [pid 42971:tid 43002] [client 89.251.0.144:24665] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "aelYujEP2_5RswrH8bGiGgAAABA"]
[Thu Apr 23 07:24:42.346973 2026] [:error] [pid 65000:tid 65047] [client 89.251.0.134:30241] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aelYur6vRb9j6psK2ZaQXQAAAg4"]
[Thu Apr 23 07:24:45.610862 2026] [:error] [pid 65000:tid 65042] [client 89.251.0.143:55393] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aelYvb6vRb9j6psK2ZaQugAAAgk"]
[Thu Apr 23 07:24:45.724407 2026] [:error] [pid 42971:tid 43001] [client 89.251.0.144:59371] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "aelYvTEP2_5RswrH8bGiWQAAAA8"]
[Thu Apr 23 07:24:46.683402 2026] [:error] [pid 42972:tid 43020] [client 89.251.0.132:54105] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "aelYvsOAb-3sOknsk4caBQAAAEQ"]
[Thu Apr 23 07:24:47.180817 2026] [:error] [pid 65000:tid 65057] [client 89.251.0.117:46657] [client 89.251.0.117] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.117, incrementing brute counter"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aelYv76vRb9j6psK2ZaQ5wAAAhg"]
[Thu Apr 23 07:24:48.532615 2026] [:error] [pid 42973:tid 43059] [client 89.251.0.138:30433] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "aelYwG6I0QqmmmLTHE3WzQAAAJA"]
[Thu Apr 23 07:24:49.467644 2026] [:error] [pid 42973:tid 43056] [client 89.251.0.133:58749] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "aelYwW6I0QqmmmLTHE3W2gAAAI0"]
[Thu Apr 23 07:24:51.154352 2026] [:error] [pid 65000:tid 65042] [client 89.251.0.117:46657] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aelYw76vRb9j6psK2ZaROAAAAgk"]
[Thu Apr 23 07:24:51.424072 2026] [:error] [pid 42972:tid 43027] [client 89.251.0.127:45029] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "aelYw8OAb-3sOknsk4caYQAAAEs"]
[Thu Apr 23 07:24:52.294613 2026] [:error] [pid 65000:tid 65049] [client 89.251.0.142:32859] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "aelYxL6vRb9j6psK2ZaRWQAAAhA"]
[Thu Apr 23 07:24:52.325036 2026] [:error] [pid 64998:tid 65015] [client 89.251.0.151:24883] [client 89.251.0.151] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.151, incrementing brute counter"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aelYxIV5EysYcTLjmwjv8wAAAc0"]
[Thu Apr 23 07:24:52.925670 2026] [:error] [pid 64998:tid 65005] [client 89.251.0.151:24883] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/item.php"] [unique_id "aelYxIV5EysYcTLjmwjv_wAAAcM"]
[Thu Apr 23 07:24:53.229786 2026] [:error] [pid 42972:tid 43021] [client 89.251.0.136:34151] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "aelYxcOAb-3sOknsk4cajgAAAEU"]
[Thu Apr 23 07:24:53.907273 2026] [:error] [pid 64998:tid 65022] [client 89.251.0.120:41049] [client 89.251.0.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/pki-validation/index.php"] [unique_id "aelYxYV5EysYcTLjmwjwCwAAAdQ"]
[Thu Apr 23 07:24:54.009028 2026] [:error] [pid 43083:tid 43097] [client 89.251.0.117:63475] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "aelYxjC5hrvNXosL83LEkQAAAMw"]
[Thu Apr 23 07:24:54.676427 2026] [:error] [pid 64998:tid 65003] [client 89.251.0.120:21731] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "aelYxoV5EysYcTLjmwjwFgAAAcE"]
[Thu Apr 23 07:24:56.215385 2026] [:error] [pid 42973:tid 43049] [client 89.251.0.151:59821] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "aelYyG6I0QqmmmLTHE3XCgAAAIY"]
[Thu Apr 23 07:24:56.804912 2026] [:error] [pid 64998:tid 65020] [client 89.251.0.136:41527] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aelYyIV5EysYcTLjmwjwPwAAAdI"]
[Thu Apr 23 07:24:57.310778 2026] [:error] [pid 25635:tid 25643] [client 89.251.0.138:35491] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "aelYycRxv6UsgRGKB3LedgAAAQQ"]
[Thu Apr 23 07:24:57.889469 2026] [:error] [pid 43083:tid 43102] [client 89.251.0.148:36257] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "aelYyTC5hrvNXosL83LEwgAAANE"]
[Thu Apr 23 07:25:00.146642 2026] [:error] [pid 65000:tid 65030] [client 89.251.0.139:56873] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aelYzL6vRb9j6psK2ZaSGgAAAgE"]
[Thu Apr 23 07:25:01.576087 2026] [:error] [pid 59700:tid 59718] [client 89.251.0.151:40205] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/admin.php"] [unique_id "aelYzZXyGZJFeAIDWtlUJAAAAVA"]
[Thu Apr 23 07:25:01.775125 2026] [:error] [pid 64967:tid 64985] [client 89.251.0.115:34175] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aelYzYAV4GfOOdX8QzoOIQAAAZA"]
[Thu Apr 23 07:25:03.718291 2026] [:error] [pid 64998:tid 65020] [client 89.251.0.134:37311] [client 89.251.0.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/function.php"] [unique_id "aelYz4V5EysYcTLjmwjwfQAAAdI"]
[Thu Apr 23 07:25:05.260306 2026] [:error] [pid 65000:tid 65046] [client 89.251.0.133:36423] [client 89.251.0.133] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.133, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "aelY0b6vRb9j6psK2ZaSYgAAAg0"]
[Thu Apr 23 07:25:07.118022 2026] [:error] [pid 65000:tid 65038] [client 89.251.0.151:45117] [client 89.251.0.151] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.151, incrementing brute counter"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aelY076vRb9j6psK2ZaShAAAAgU"]
[Thu Apr 23 07:25:07.509327 2026] [:error] [pid 65000:tid 65042] [client 89.251.0.151:45117] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aelY076vRb9j6psK2ZaSigAAAgk"]
[Thu Apr 23 07:25:09.260292 2026] [:error] [pid 65000:tid 65044] [client 89.251.0.133:36423] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "aelY1b6vRb9j6psK2ZaStQAAAgs"]
[Thu Apr 23 07:25:11.565404 2026] [:error] [pid 65000:tid 65053] [client 89.251.0.132:59107] [client 89.251.0.132] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.132, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "aelY176vRb9j6psK2ZaS9AAAAhQ"]
[Thu Apr 23 07:25:12.382201 2026] [:error] [pid 65000:tid 65040] [client 89.251.0.132:59107] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/item.php"] [unique_id "aelY2L6vRb9j6psK2ZaTAAAAAgc"]
[Thu Apr 23 07:25:14.439176 2026] [:error] [pid 64967:tid 64987] [client 89.251.0.139:38583] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aelY2oAV4GfOOdX8QzoOxAAAAZI"]
[Thu Apr 23 07:25:14.945740 2026] [:error] [pid 42972:tid 43040] [client 89.251.0.113:33359] [client 89.251.0.113] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aelY2sOAb-3sOknsk4cb7gAAAFg"]
[Thu Apr 23 07:25:16.909923 2026] [:error] [pid 42973:tid 43056] [client 89.251.0.131:60793] [client 89.251.0.131] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.131, incrementing brute counter"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aelY3G6I0QqmmmLTHE3X7wAAAI0"]
[Thu Apr 23 07:25:17.206252 2026] [:error] [pid 42973:tid 43050] [client 89.251.0.131:60793] [client 89.251.0.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-conflg.php"] [unique_id "aelY3W6I0QqmmmLTHE3X8wAAAIc"]
[Thu Apr 23 07:25:17.282014 2026] [:error] [pid 59700:tid 59724] [client 89.251.0.138:29873] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "aelY3ZXyGZJFeAIDWtlU6wAAAVY"]
[Thu Apr 23 07:25:18.776505 2026] [:error] [pid 42971:tid 43010] [client 89.251.0.126:51425] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aelY3jEP2_5RswrH8bGj0wAAABg"]
[Thu Apr 23 07:25:19.892172 2026] [:error] [pid 42972:tid 43019] [client 89.251.0.132:27915] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aelY38OAb-3sOknsk4ccFgAAAEM"]
[Thu Apr 23 07:25:20.607288 2026] [:error] [pid 43083:tid 43101] [client 89.251.0.124:30843] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "aelY4DC5hrvNXosL83LFxAAAANA"]
[Thu Apr 23 07:25:20.761925 2026] [:error] [pid 42972:tid 43025] [client 89.251.0.129:63409] [client 89.251.0.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/x.php"] [unique_id "aelY4MOAb-3sOknsk4ccJgAAAEk"]
[Thu Apr 23 07:25:21.826388 2026] [:error] [pid 64998:tid 65008] [client 89.251.0.141:46815] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "aelY4YV5EysYcTLjmwjxMAAAAcY"]
[Thu Apr 23 07:25:22.238895 2026] [:error] [pid 65000:tid 65051] [client 89.251.0.127:59961] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aelY4r6vRb9j6psK2ZaTkAAAAhI"]
[Thu Apr 23 07:25:23.970298 2026] [:error] [pid 64998:tid 65010] [client 89.251.0.119:40757] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aelY44V5EysYcTLjmwjxWwAAAcg"]
[Thu Apr 23 07:25:24.600417 2026] [:error] [pid 42971:tid 43005] [client 89.251.0.126:40337] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aelY5DEP2_5RswrH8bGkGAAAABM"]
[Thu Apr 23 07:25:26.971786 2026] [:error] [pid 59700:tid 59721] [client 89.251.0.129:44391] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aelY5pXyGZJFeAIDWtlVYAAAAVM"]
[Thu Apr 23 07:25:27.207827 2026] [:error] [pid 64967:tid 64985] [client 89.251.0.146:56325] [client 89.251.0.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.146, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "aelY54AV4GfOOdX8QzoPKAAAAZA"]
[Thu Apr 23 07:25:27.541882 2026] [:error] [pid 64967:tid 64969] [client 89.251.0.146:56325] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "aelY54AV4GfOOdX8QzoPKwAAAYA"]
[Thu Apr 23 07:25:27.890315 2026] [:error] [pid 42972:tid 43029] [client 89.251.0.124:39785] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aelY58OAb-3sOknsk4ccSwAAAE0"]
[Thu Apr 23 07:25:29.680381 2026] [:error] [pid 42973:tid 43047] [client 89.251.0.140:34163] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aelY6W6I0QqmmmLTHE3YNwAAAIQ"]
[Thu Apr 23 07:25:32.251318 2026] [:error] [pid 64967:tid 64970] [client 89.251.0.133:20799] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aelY7IAV4GfOOdX8QzoPdQAAAYE"]
[Thu Apr 23 07:25:33.172011 2026] [:error] [pid 65000:tid 65040] [client 89.251.0.134:54463] [client 89.251.0.134] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/install.php"] [unique_id "aelY7b6vRb9j6psK2ZaULAAAAgc"]
[Thu Apr 23 07:25:33.863207 2026] [:error] [pid 42973:tid 43064] [client 89.251.0.146:41489] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/click.php"] [unique_id "aelY7W6I0QqmmmLTHE3YTwAAAJU"]
[Thu Apr 23 07:25:34.561070 2026] [:error] [pid 42971:tid 42999] [client 89.251.0.117:58691] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "aelY7jEP2_5RswrH8bGklgAAAA0"]
[Thu Apr 23 07:25:35.658166 2026] [:error] [pid 64998:tid 65005] [client 89.251.0.132:40277] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aelY74V5EysYcTLjmwjyGAAAAcM"]
[Thu Apr 23 07:25:36.227384 2026] [:error] [pid 64998:tid 65024] [client 89.251.0.133:46553] [client 89.251.0.133] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.133, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "aelY8IV5EysYcTLjmwjyMQAAAdY"]
[Thu Apr 23 07:25:37.495416 2026] [:error] [pid 64998:tid 65008] [client 89.251.0.133:46553] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "aelY8YV5EysYcTLjmwjyXAAAAcY"]
[Thu Apr 23 07:25:38.567982 2026] [:error] [pid 43083:tid 43086] [client 89.251.0.119:60027] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/infi.php"] [unique_id "aelY8jC5hrvNXosL83LGiQAAAME"]
[Thu Apr 23 07:25:39.043814 2026] [:error] [pid 64967:tid 64976] [client 89.251.0.141:54179] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aelY84AV4GfOOdX8QzoPnwAAAYc"]
[Thu Apr 23 07:25:39.683160 2026] [:error] [pid 64967:tid 64985] [client 89.251.0.124:40641] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aelY84AV4GfOOdX8QzoPpwAAAZA"]
[Thu Apr 23 07:25:39.945005 2026] [:error] [pid 42973:tid 43044] [client 89.251.0.138:51371] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "aelY826I0QqmmmLTHE3YdQAAAIE"]
[Thu Apr 23 07:25:40.248289 2026] [:error] [pid 42971:tid 43001] [client 89.251.0.137:59421] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aelY9DEP2_5RswrH8bGk5AAAAA8"]
[Thu Apr 23 07:25:40.829817 2026] [:error] [pid 42971:tid 43006] [client 89.251.0.127:25707] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aelY9DEP2_5RswrH8bGk7wAAABQ"]
[Thu Apr 23 07:25:41.656609 2026] [:error] [pid 42972:tid 43018] [client 89.251.0.143:37323] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "aelY9cOAb-3sOknsk4ccxwAAAEI"]
[Thu Apr 23 07:25:42.208761 2026] [:error] [pid 42971:tid 42992] [client 89.251.0.140:27495] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aelY9jEP2_5RswrH8bGlHwAAAAY"]
[Thu Apr 23 07:25:42.319790 2026] [:error] [pid 43083:tid 43101] [client 89.251.0.147:20971] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "aelY9jC5hrvNXosL83LGwgAAANA"]
[Thu Apr 23 07:25:42.862023 2026] [:error] [pid 64967:tid 64970] [client 89.251.0.135:22443] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aelY9oAV4GfOOdX8QzoPwQAAAYE"]
[Thu Apr 23 07:25:44.143657 2026] [:error] [pid 64967:tid 64991] [client 89.251.0.132:54441] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aelY-IAV4GfOOdX8QzoP0AAAAZY"]
[Thu Apr 23 07:25:44.766414 2026] [:error] [pid 42972:tid 43035] [client 89.251.0.134:45141] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aelY-MOAb-3sOknsk4cc7QAAAFM"]
[Thu Apr 23 07:25:44.831159 2026] [:error] [pid 64967:tid 64982] [client 89.251.0.116:28345] [client 89.251.0.116] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/sunrise/colors_95.php"] [unique_id "aelY-IAV4GfOOdX8QzoP1AAAAY0"]
[Thu Apr 23 07:25:45.399852 2026] [:error] [pid 25635:tid 25660] [client 89.251.0.146:42351] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aelY-cRxv6UsgRGKB3LfxAAAARU"]
[Thu Apr 23 07:25:45.739349 2026] [:error] [pid 65000:tid 65040] [client 89.251.0.147:35847] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "aelY-b6vRb9j6psK2ZaUfQAAAgc"]
[Thu Apr 23 07:25:46.042618 2026] [:error] [pid 65000:tid 65048] [client 89.251.0.134:48841] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aelY-r6vRb9j6psK2ZaUhAAAAg8"]
[Thu Apr 23 07:25:46.687374 2026] [:error] [pid 65000:tid 65056] [client 89.251.0.119:33181] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "aelY-r6vRb9j6psK2ZaUmgAAAhc"]
[Thu Apr 23 07:25:46.961568 2026] [:error] [pid 65000:tid 65052] [client 89.251.0.131:31971] [client 89.251.0.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aelY-r6vRb9j6psK2ZaUogAAAhM"]
[Thu Apr 23 07:25:48.227769 2026] [:error] [pid 65000:tid 65052] [client 89.251.0.148:51823] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aelY_L6vRb9j6psK2ZaUvwAAAhM"]
[Thu Apr 23 07:25:48.265419 2026] [:error] [pid 64998:tid 65011] [client 89.251.0.134:63135] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/edit.php"] [unique_id "aelY_IV5EysYcTLjmwjy5QAAAck"]
[Thu Apr 23 07:25:49.203686 2026] [:error] [pid 42973:tid 43066] [client 89.251.0.129:55115] [client 89.251.0.129] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/user/about.php"] [unique_id "aelY_W6I0QqmmmLTHE3YmgAAAJc"]
[Thu Apr 23 07:25:49.868286 2026] [:error] [pid 25635:tid 25640] [client 89.251.0.135:33989] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "aelY_cRxv6UsgRGKB3Lf3QAAAQE"]
[Thu Apr 23 07:25:51.008660 2026] [:error] [pid 42971:tid 42994] [client 89.251.0.113:21849] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aelY_zEP2_5RswrH8bGlnwAAAAg"]
[Thu Apr 23 07:25:51.482545 2026] [:error] [pid 65000:tid 65043] [client 89.251.0.150:58621] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/click.php"] [unique_id "aelY_76vRb9j6psK2ZaU4gAAAgo"]
[Thu Apr 23 07:25:53.066625 2026] [:error] [pid 64998:tid 65008] [client 89.251.0.141:48243] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "aelZAYV5EysYcTLjmwjzGwAAAcY"]
[Thu Apr 23 07:25:57.915685 2026] [:error] [pid 25635:tid 25646] [client 89.251.0.117:41141] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aelZBcRxv6UsgRGKB3LgAAAAAQc"]
[Thu Apr 23 07:25:59.504578 2026] [:error] [pid 59700:tid 59724] [client 89.251.0.121:42213] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aelZB5XyGZJFeAIDWtlWOAAAAVY"]
[Thu Apr 23 07:25:59.813840 2026] [:error] [pid 64998:tid 65026] [client 89.251.0.131:45599] [client 89.251.0.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "aelZB4V5EysYcTLjmwjzZAAAAdg"]
[Thu Apr 23 07:26:00.089527 2026] [:error] [pid 25635:tid 25655] [client 89.251.0.141:32907] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aelZCMRxv6UsgRGKB3LgCAAAARA"]
[Thu Apr 23 07:26:00.547042 2026] [:error] [pid 42971:tid 42993] [client 89.251.0.140:30013] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "aelZCDEP2_5RswrH8bGl8QAAAAc"]
[Thu Apr 23 07:26:01.242904 2026] [:error] [pid 42971:tid 43006] [client 89.251.0.147:57771] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "aelZCTEP2_5RswrH8bGl9gAAABQ"]
[Thu Apr 23 07:26:02.018212 2026] [:error] [pid 64967:tid 64977] [client 89.251.0.132:54913] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "aelZCoAV4GfOOdX8QzoQbAAAAYg"]
[Thu Apr 23 07:26:02.305100 2026] [:error] [pid 25635:tid 25642] [client 89.251.0.120:56399] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aelZCsRxv6UsgRGKB3LgGgAAAQM"]
[Thu Apr 23 07:26:03.850342 2026] [proxy_fcgi:error] [pid 42973:tid 43065] [client 89.251.0.146:56203] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:26:04.120363 2026] [:error] [pid 64998:tid 65017] [client 89.251.0.132:47113] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "aelZDIV5EysYcTLjmwjzgAAAAc8"]
[Thu Apr 23 07:26:04.179310 2026] [proxy_fcgi:error] [pid 42973:tid 43057] [client 89.251.0.146:56203] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:26:04.512611 2026] [proxy_fcgi:error] [pid 42973:tid 43067] [client 89.251.0.146:56203] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:26:04.781049 2026] [:error] [pid 42971:tid 43007] [client 89.251.0.119:39969] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "aelZDDEP2_5RswrH8bGmHAAAABU"]
[Thu Apr 23 07:26:06.055480 2026] [:error] [pid 43083:tid 43100] [client 89.251.0.117:56081] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aelZDjC5hrvNXosL83LHiwAAAM8"]
[Thu Apr 23 07:26:06.357033 2026] [:error] [pid 42973:tid 43061] [client 89.251.0.146:56203] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aelZDm6I0QqmmmLTHE3ZBQAAAJI"]
[Thu Apr 23 07:26:06.662118 2026] [:error] [pid 65000:tid 65039] [client 89.251.0.121:44691] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "aelZDr6vRb9j6psK2ZaVkAAAAgY"]
[Thu Apr 23 07:26:06.936881 2026] [:error] [pid 59700:tid 59709] [client 89.251.0.151:35625] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aelZDpXyGZJFeAIDWtlWhAAAAUc"]
[Thu Apr 23 07:26:07.450153 2026] [:error] [pid 42971:tid 42993] [client 89.251.0.131:39385] [client 89.251.0.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "aelZDzEP2_5RswrH8bGmMgAAAAc"]
[Thu Apr 23 07:26:07.554972 2026] [:error] [pid 64998:tid 65004] [client 89.251.0.131:64921] [client 89.251.0.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aelZD4V5EysYcTLjmwjzkQAAAcI"]
[Thu Apr 23 07:26:08.009541 2026] [:error] [pid 64998:tid 65023] [client 89.251.0.117:62413] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "aelZEIV5EysYcTLjmwjzlQAAAdU"]
[Thu Apr 23 07:26:08.162792 2026] [:error] [pid 43083:tid 43089] [client 89.251.0.121:22611] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aelZEDC5hrvNXosL83LHmgAAAMQ"]
[Thu Apr 23 07:26:08.789189 2026] [:error] [pid 25635:tid 25651] [client 89.251.0.128:57087] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aelZEMRxv6UsgRGKB3LgUgAAAQw"]
[Thu Apr 23 07:26:08.897730 2026] [:error] [pid 25635:tid 25654] [client 89.251.0.126:39527] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "aelZEMRxv6UsgRGKB3LgUwAAAQ8"]
[Thu Apr 23 07:26:09.409329 2026] [:error] [pid 25635:tid 25650] [client 89.251.0.138:58433] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aelZEcRxv6UsgRGKB3LgWgAAAQs"]
[Thu Apr 23 07:26:10.232407 2026] [:error] [pid 65000:tid 65053] [client 89.251.0.148:29341] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "aelZEr6vRb9j6psK2ZaVuQAAAhQ"]
[Thu Apr 23 07:26:10.330621 2026] [:error] [pid 64998:tid 65003] [client 89.251.0.123:53553] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aelZEoV5EysYcTLjmwjzsQAAAcE"]
[Thu Apr 23 07:26:11.084842 2026] [:error] [pid 43083:tid 43097] [client 89.251.0.119:28781] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aelZEzC5hrvNXosL83LHugAAAMw"]
[Thu Apr 23 07:26:11.711891 2026] [:error] [pid 43083:tid 43107] [client 89.251.0.127:33373] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aelZEzC5hrvNXosL83LHygAAANY"]
[Thu Apr 23 07:26:12.278446 2026] [:error] [pid 43083:tid 43085] [client 89.251.0.151:38475] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "aelZFDC5hrvNXosL83LH1AAAAMA"]
[Thu Apr 23 07:26:12.352900 2026] [:error] [pid 64967:tid 64975] [client 89.251.0.113:42889] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aelZFIAV4GfOOdX8QzoQyAAAAYY"]
[Thu Apr 23 07:26:14.205187 2026] [:error] [pid 42971:tid 43001] [client 89.251.0.128:49235] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aelZFjEP2_5RswrH8bGmhQAAAA8"]
[Thu Apr 23 07:26:15.153022 2026] [:error] [pid 59700:tid 59718] [client 89.251.0.140:21971] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aelZF5XyGZJFeAIDWtlXBwAAAVA"]
[Thu Apr 23 07:26:16.332696 2026] [:error] [pid 42971:tid 43004] [client 89.251.0.151:53215] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "aelZGDEP2_5RswrH8bGmuAAAABI"]
[Thu Apr 23 07:26:16.526758 2026] [:error] [pid 64998:tid 65019] [client 89.251.0.134:24345] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aelZGIV5EysYcTLjmwjz2AAAAdE"]
[Thu Apr 23 07:26:17.597585 2026] [:error] [pid 65000:tid 65038] [client 89.251.0.143:22567] [client 89.251.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/view-more/ioxi.php"] [unique_id "aelZGb6vRb9j6psK2ZaWBgAAAgU"]
[Thu Apr 23 07:26:17.773298 2026] [:error] [pid 65000:tid 65030] [client 89.251.0.127:48245] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aelZGb6vRb9j6psK2ZaWDAAAAgE"]
[Thu Apr 23 07:26:18.442535 2026] [:error] [pid 42971:tid 42987] [client 89.251.0.115:42033] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "aelZGjEP2_5RswrH8bGm1QAAAAE"]
[Thu Apr 23 07:26:19.024340 2026] [:error] [pid 43083:tid 43105] [client 89.251.0.146:43749] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "aelZGzC5hrvNXosL83LIEgAAANQ"]
[Thu Apr 23 07:26:19.229491 2026] [:error] [pid 59700:tid 59710] [client 89.251.0.134:51045] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aelZG5XyGZJFeAIDWtlXagAAAUg"]
[Thu Apr 23 07:26:21.117992 2026] [:error] [pid 65000:tid 65050] [client 89.251.0.123:50337] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aelZHb6vRb9j6psK2ZaWQgAAAhE"]
[Thu Apr 23 07:26:21.336158 2026] [:error] [pid 65000:tid 65055] [client 89.251.0.133:45469] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "aelZHb6vRb9j6psK2ZaWRQAAAhY"]
[Thu Apr 23 07:26:22.816346 2026] [:error] [pid 65000:tid 65056] [client 89.251.0.135:37207] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aelZHr6vRb9j6psK2ZaWVgAAAhc"]
[Thu Apr 23 07:26:23.135255 2026] [proxy_fcgi:error] [pid 64998:tid 65018] [client 89.251.0.138:32553] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:26:23.492306 2026] [proxy_fcgi:error] [pid 64998:tid 65006] [client 89.251.0.138:32553] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:26:23.876313 2026] [proxy_fcgi:error] [pid 64998:tid 65003] [client 89.251.0.138:32553] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:26:25.477284 2026] [:error] [pid 64998:tid 65009] [client 89.251.0.138:32553] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "aelZIYV5EysYcTLjmwj0LAAAAcc"]
[Thu Apr 23 07:26:26.091344 2026] [:error] [pid 64967:tid 64982] [client 89.251.0.114:21735] [client 89.251.0.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "aelZIoAV4GfOOdX8QzoRCwAAAY0"]
[Thu Apr 23 07:26:26.705840 2026] [:error] [pid 64967:tid 64993] [client 89.251.0.124:24959] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "aelZIoAV4GfOOdX8QzoRGgAAAZg"]
[Thu Apr 23 07:26:27.305208 2026] [:error] [pid 42971:tid 43009] [client 89.251.0.132:24959] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/src/Exception/Http/about.php"] [unique_id "aelZIzEP2_5RswrH8bGnZwAAABc"]
[Thu Apr 23 07:26:27.942517 2026] [:error] [pid 42972:tid 43034] [client 89.251.0.126:62079] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/index.php"] [unique_id "aelZI8OAb-3sOknsk4ceUAAAAFI"]
[Thu Apr 23 07:26:28.551012 2026] [:error] [pid 64967:tid 64987] [client 89.251.0.120:31485] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/index.php"] [unique_id "aelZJIAV4GfOOdX8QzoRUAAAAZI"]
[Thu Apr 23 07:26:29.084366 2026] [:error] [pid 42971:tid 43001] [client 89.251.0.129:49891] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aelZJTEP2_5RswrH8bGnoAAAAA8"]
[Thu Apr 23 07:26:29.476209 2026] [:error] [pid 43083:tid 43097] [client 89.251.0.142:60419] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/media/index.php"] [unique_id "aelZJTC5hrvNXosL83LIPgAAAMw"]
[Thu Apr 23 07:26:29.681744 2026] [:error] [pid 42973:tid 43060] [client 89.251.0.128:36007] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aelZJW6I0QqmmmLTHE3ZnAAAAJE"]
[Thu Apr 23 07:26:30.161685 2026] [:error] [pid 42973:tid 43064] [client 89.251.0.116:52737] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/index.php"] [unique_id "aelZJm6I0QqmmmLTHE3ZnwAAAJU"]
[Thu Apr 23 07:26:30.630313 2026] [:error] [pid 43083:tid 43089] [client 89.251.0.134:29621] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aelZJjC5hrvNXosL83LIRAAAAMQ"]
[Thu Apr 23 07:26:30.806149 2026] [:error] [pid 59700:tid 59702] [client 89.251.0.138:45405] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/about.php"] [unique_id "aelZJpXyGZJFeAIDWtlX5AAAAUA"]
[Thu Apr 23 07:26:31.465587 2026] [:error] [pid 59700:tid 59705] [client 89.251.0.115:39879] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/lightgray/img/wp-login.php"] [unique_id "aelZJ5XyGZJFeAIDWtlX6wAAAUM"]
[Thu Apr 23 07:26:32.065747 2026] [:error] [pid 42972:tid 43039] [client 89.251.0.124:63131] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aelZKMOAb-3sOknsk4ceaQAAAFc"]
[Thu Apr 23 07:26:32.634115 2026] [:error] [pid 42972:tid 43018] [client 89.251.0.128:43549] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aelZKMOAb-3sOknsk4cecAAAAEI"]
[Thu Apr 23 07:26:32.885125 2026] [:error] [pid 64998:tid 65002] [client 89.251.0.151:63485] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/fonts/themes.php"] [unique_id "aelZKIV5EysYcTLjmwj0UQAAAcA"]
[Thu Apr 23 07:26:33.792707 2026] [:error] [pid 42972:tid 43033] [client 89.251.0.137:40951] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/index.php"] [unique_id "aelZKcOAb-3sOknsk4ceiQAAAFE"]
[Thu Apr 23 07:26:34.576531 2026] [:error] [pid 42972:tid 43033] [client 89.251.0.144:22599] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aelZKsOAb-3sOknsk4celwAAAFE"]
[Thu Apr 23 07:26:35.077281 2026] [:error] [pid 42972:tid 43032] [client 89.251.0.146:37329] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/media/wp-login.php"] [unique_id "aelZK8OAb-3sOknsk4cenwAAAFA"]
[Thu Apr 23 07:26:35.279431 2026] [:error] [pid 43083:tid 43097] [client 89.251.0.150:22963] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aelZKzC5hrvNXosL83LIXQAAAMw"]
[Thu Apr 23 07:26:36.333583 2026] [:error] [pid 43083:tid 43088] [client 89.251.0.147:25607] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/about.php"] [unique_id "aelZLDC5hrvNXosL83LIeAAAAMM"]
[Thu Apr 23 07:26:38.075772 2026] [:error] [pid 59700:tid 59714] [client 89.251.0.131:21087] [client 89.251.0.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-login.php"] [unique_id "aelZLpXyGZJFeAIDWtlYOQAAAUw"]
[Thu Apr 23 07:26:38.188482 2026] [:error] [pid 65000:tid 65041] [client 89.251.0.127:62089] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aelZLr6vRb9j6psK2ZaWkQAAAgg"]
[Thu Apr 23 07:26:39.139331 2026] [proxy_fcgi:error] [pid 59700:tid 59723] [client 89.251.0.143:49499] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:26:39.927120 2026] [:error] [pid 59700:tid 59711] [client 89.251.0.132:32103] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/about.php"] [unique_id "aelZL5XyGZJFeAIDWtlYTgAAAUk"]
[Thu Apr 23 07:26:40.374356 2026] [:error] [pid 59700:tid 59725] [client 89.251.0.143:49499] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/function.php"] [unique_id "aelZMJXyGZJFeAIDWtlYUwAAAVc"]
[Thu Apr 23 07:26:40.973558 2026] [:error] [pid 25635:tid 25649] [client 89.251.0.127:31781] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/wp-class.php"] [unique_id "aelZMMRxv6UsgRGKB3Lg5AAAAQo"]
[Thu Apr 23 07:26:40.987547 2026] [:error] [pid 59700:tid 59723] [client 89.251.0.124:25783] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aelZMJXyGZJFeAIDWtlYWgAAAVU"]
[Thu Apr 23 07:26:42.188664 2026] [:error] [pid 59700:tid 59707] [client 89.251.0.114:51369] [client 89.251.0.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aelZMpXyGZJFeAIDWtlYawAAAUU"]
[Thu Apr 23 07:26:42.779990 2026] [:error] [pid 64998:tid 65003] [client 89.251.0.150:20135] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aelZMoV5EysYcTLjmwj0hAAAAcE"]
[Thu Apr 23 07:26:45.694502 2026] [:error] [pid 65000:tid 65040] [client 89.251.0.132:61521] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aelZNb6vRb9j6psK2ZaXFAAAAgc"]
[Thu Apr 23 07:26:46.361004 2026] [:error] [pid 64998:tid 65012] [client 89.251.0.126:37827] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aelZNoV5EysYcTLjmwj0zQAAAco"]
[Thu Apr 23 07:26:46.706074 2026] [:error] [pid 42972:tid 43033] [client 89.251.0.126:46511] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/html-api/chosen.php"] [unique_id "aelZNsOAb-3sOknsk4ce_gAAAFE"]
[Thu Apr 23 07:26:47.302104 2026] [:error] [pid 42971:tid 42990] [client 89.251.0.126:21441] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/autoload_classmap.php"] [unique_id "aelZNzEP2_5RswrH8bGolgAAAAQ"]
[Thu Apr 23 07:26:48.158400 2026] [:error] [pid 25635:tid 25647] [client 89.251.0.123:64105] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/index.php"] [unique_id "aelZOMRxv6UsgRGKB3LhEwAAAQg"]
[Thu Apr 23 07:26:48.247682 2026] [:error] [pid 65000:tid 65044] [client 89.251.0.146:27401] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/index.php"] [unique_id "aelZOL6vRb9j6psK2ZaXJAAAAgs"]
[Thu Apr 23 07:26:49.469396 2026] [:error] [pid 59700:tid 59711] [client 89.251.0.114:23555] [client 89.251.0.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/index.php"] [unique_id "aelZOZXyGZJFeAIDWtlYnwAAAUk"]
[Thu Apr 23 07:26:49.769071 2026] [:error] [pid 64998:tid 65009] [client 89.251.0.113:47347] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aelZOYV5EysYcTLjmwj1FQAAAcc"]
[Thu Apr 23 07:26:50.055716 2026] [:error] [pid 42971:tid 43004] [client 89.251.0.144:31221] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/index.php"] [unique_id "aelZOjEP2_5RswrH8bGovwAAABI"]
[Thu Apr 23 07:26:50.380380 2026] [:error] [pid 42971:tid 43003] [client 89.251.0.136:50239] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aelZOjEP2_5RswrH8bGozwAAABE"]
[Thu Apr 23 07:26:51.916043 2026] [:error] [pid 42971:tid 43002] [client 89.251.0.150:47275] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aelZOzEP2_5RswrH8bGpBwAAABA"]
[Thu Apr 23 07:26:52.551859 2026] [:error] [pid 64998:tid 65021] [client 89.251.0.116:55079] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fm.php"] [unique_id "aelZPIV5EysYcTLjmwj1KQAAAdM"]
[Thu Apr 23 07:26:53.055303 2026] [:error] [pid 42971:tid 43010] [client 89.251.0.140:31885] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aelZPTEP2_5RswrH8bGpHgAAABg"]
[Thu Apr 23 07:26:54.062724 2026] [:error] [pid 42973:tid 43048] [client 89.251.0.113:60649] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aelZPm6I0QqmmmLTHE3aRAAAAIU"]
[Thu Apr 23 07:26:54.952834 2026] [:error] [pid 64998:tid 65009] [client 89.251.0.126:48395] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/calendar/index.php"] [unique_id "aelZPoV5EysYcTLjmwj1XwAAAcc"]
[Thu Apr 23 07:26:55.972313 2026] [proxy_fcgi:error] [pid 64967:tid 64993] [client 89.251.0.124:29751] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:26:56.585879 2026] [:error] [pid 64967:tid 64990] [client 89.251.0.124:29751] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/function.php"] [unique_id "aelZQIAV4GfOOdX8QzoSJQAAAZU"]
[Thu Apr 23 07:26:57.182792 2026] [:error] [pid 65000:tid 65032] [client 89.251.0.147:20763] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/plugins.php"] [unique_id "aelZQb6vRb9j6psK2ZaXfwAAAgM"]
[Thu Apr 23 07:26:59.474404 2026] [:error] [pid 64998:tid 65017] [client 89.251.0.137:43985] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/chosen.php"] [unique_id "aelZQ4V5EysYcTLjmwj1jgAAAc8"]
[Thu Apr 23 07:27:00.093515 2026] [:error] [pid 25635:tid 25662] [client 89.251.0.142:62175] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Renderer/about.php"] [unique_id "aelZRMRxv6UsgRGKB3LhSQAAARc"]
[Thu Apr 23 07:27:00.206754 2026] [:error] [pid 42972:tid 43036] [client 89.251.0.124:40297] [client 89.251.0.124] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.124, incrementing brute counter"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/js/wp-login.php"] [unique_id "aelZRMOAb-3sOknsk4cfSwAAAFQ"]
[Thu Apr 23 07:27:02.977376 2026] [:error] [pid 42972:tid 43027] [client 89.251.0.124:40297] [client 89.251.0.124] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.124, incrementing brute counter"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aelZRsOAb-3sOknsk4cfZgAAAEs"]
[Thu Apr 23 07:27:03.780152 2026] [:error] [pid 42971:tid 42993] [client 89.251.0.151:57217] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/atomlib.php"] [unique_id "aelZRzEP2_5RswrH8bGpbwAAAAc"]
[Thu Apr 23 07:27:04.406617 2026] [:error] [pid 43083:tid 43089] [client 89.251.0.143:54561] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/index.php"] [unique_id "aelZSDC5hrvNXosL83LJxgAAAMQ"]
[Thu Apr 23 07:27:06.457295 2026] [proxy_fcgi:error] [pid 42972:tid 43029] [client 89.251.0.124:40297] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:27:06.821399 2026] [:error] [pid 64998:tid 65017] [client 89.251.0.132:57865] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/index.php"] [unique_id "aelZSoV5EysYcTLjmwj1zAAAAc8"]
[Thu Apr 23 07:27:07.455118 2026] [:error] [pid 59700:tid 59711] [client 89.251.0.123:32945] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/wp-conflg.php"] [unique_id "aelZS5XyGZJFeAIDWtlY-AAAAUk"]
[Thu Apr 23 07:27:08.086308 2026] [:error] [pid 64998:tid 65023] [client 89.251.0.144:52741] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/autoload_classmap.php"] [unique_id "aelZTIV5EysYcTLjmwj13AAAAdU"]
[Thu Apr 23 07:27:10.891547 2026] [:error] [pid 42971:tid 43000] [client 89.251.0.143:39903] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Exception-wp.php"] [unique_id "aelZTjEP2_5RswrH8bGpsAAAAA4"]
[Thu Apr 23 07:27:11.427644 2026] [:error] [pid 42972:tid 43033] [client 89.251.0.124:40297] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aelZT8OAb-3sOknsk4cfywAAAFE"]
[Thu Apr 23 07:27:11.876178 2026] [:error] [pid 42972:tid 43037] [client 89.251.0.126:53173] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/autoload_classmap.php"] [unique_id "aelZT8OAb-3sOknsk4cf0wAAAFU"]
[Thu Apr 23 07:27:13.155047 2026] [:error] [pid 64967:tid 64970] [client 89.251.0.151:37199] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aelZUYAV4GfOOdX8QzoSqwAAAYE"]
[Thu Apr 23 07:27:14.414204 2026] [:error] [pid 43083:tid 43098] [client 89.251.0.133:39579] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aelZUjC5hrvNXosL83LKPQAAAM0"]
[Thu Apr 23 07:27:15.034962 2026] [:error] [pid 42971:tid 42993] [client 89.251.0.115:24375] [client 89.251.0.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.115, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/js/wp-login.php"] [unique_id "aelZUzEP2_5RswrH8bGp4QAAAAc"]
[Thu Apr 23 07:27:17.124834 2026] [:error] [pid 42971:tid 42989] [client 89.251.0.115:24375] [client 89.251.0.115] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.115, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/wp-login.php"] [unique_id "aelZVTEP2_5RswrH8bGp9gAAAAM"]
[Thu Apr 23 07:27:18.453381 2026] [:error] [pid 65000:tid 65052] [client 89.251.0.116:46743] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aelZVr6vRb9j6psK2ZaYSwAAAhM"]
[Thu Apr 23 07:27:19.713268 2026] [:error] [pid 65000:tid 65047] [client 89.251.0.135:62055] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aelZV76vRb9j6psK2ZaYUQAAAg4"]
[Thu Apr 23 07:27:20.746961 2026] [:error] [pid 64967:tid 64971] [client 89.251.0.117:44377] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aelZWIAV4GfOOdX8QzoTDAAAAYI"]
[Thu Apr 23 07:27:20.773871 2026] [proxy_fcgi:error] [pid 42971:tid 43006] [client 89.251.0.115:24375] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:27:22.716313 2026] [proxy_fcgi:error] [pid 65000:tid 65046] [client 89.251.0.144:41873] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:27:23.027304 2026] [proxy_fcgi:error] [pid 65000:tid 65042] [client 89.251.0.144:41873] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:27:23.346138 2026] [:error] [pid 65000:tid 65041] [client 89.251.0.144:41873] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aelZW76vRb9j6psK2ZaYnQAAAgg"]
[Thu Apr 23 07:27:23.974028 2026] [:error] [pid 64998:tid 65025] [client 89.251.0.146:21447] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aelZW4V5EysYcTLjmwj2cwAAAdc"]
[Thu Apr 23 07:27:25.946907 2026] [:error] [pid 42971:tid 42999] [client 89.251.0.115:24375] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/about.php"] [unique_id "aelZXTEP2_5RswrH8bGqVwAAAA0"]
[Thu Apr 23 07:27:26.928846 2026] [:error] [pid 42971:tid 42986] [client 89.251.0.133:24835] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aelZXjEP2_5RswrH8bGqXQAAAAA"]
[Thu Apr 23 07:27:27.586102 2026] [:error] [pid 65000:tid 65048] [client 89.251.0.143:50083] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/fonts/autoload_classmap.php"] [unique_id "aelZX76vRb9j6psK2ZaY2AAAAg8"]
[Thu Apr 23 07:27:27.830362 2026] [:error] [pid 64967:tid 64975] [client 89.251.0.114:29999] [client 89.251.0.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "aelZX4AV4GfOOdX8QzoTUAAAAYY"]
[Thu Apr 23 07:27:28.753882 2026] [:error] [pid 65000:tid 65043] [client 89.251.0.143:41603] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/atomlib.php"] [unique_id "aelZYL6vRb9j6psK2ZaY7AAAAgo"]
[Thu Apr 23 07:27:29.466822 2026] [:error] [pid 43083:tid 43109] [client 89.251.0.140:55775] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aelZYTC5hrvNXosL83LK9gAAANg"]
[Thu Apr 23 07:27:32.502086 2026] [:error] [pid 64998:tid 65006] [client 89.251.0.113:24405] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/autoload_classmap.php"] [unique_id "aelZZIV5EysYcTLjmwj2xQAAAcQ"]
[Thu Apr 23 07:27:33.169534 2026] [:error] [pid 25635:tid 25657] [client 89.251.0.144:62643] [client 89.251.0.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/contacts.php"] [unique_id "aelZZcRxv6UsgRGKB3Lh_AAAARI"]
[Thu Apr 23 07:27:35.574738 2026] [:error] [pid 65000:tid 65046] [client 89.251.0.134:31467] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aelZZ76vRb9j6psK2ZaZRgAAAg0"]
[Thu Apr 23 07:27:35.619681 2026] [:error] [pid 64998:tid 65015] [client 89.251.0.116:52465] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/about.php"] [unique_id "aelZZ4V5EysYcTLjmwj24QAAAc0"]
[Thu Apr 23 07:27:36.243632 2026] [proxy_fcgi:error] [pid 42971:tid 43003] [client 89.251.0.145:27531] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:27:36.618165 2026] [:error] [pid 65000:tid 65038] [client 89.251.0.120:64499] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/index.php"] [unique_id "aelZaL6vRb9j6psK2ZaZUwAAAgU"]
[Thu Apr 23 07:27:37.248450 2026] [:error] [pid 42971:tid 43007] [client 89.251.0.145:27531] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aelZaTEP2_5RswrH8bGqvgAAABU"]
[Thu Apr 23 07:27:38.723299 2026] [proxy_fcgi:error] [pid 43083:tid 43103] [client 89.251.0.150:58399] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:27:39.105598 2026] [proxy_fcgi:error] [pid 43083:tid 43096] [client 89.251.0.150:58399] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:27:39.577364 2026] [:error] [pid 43083:tid 43092] [client 89.251.0.150:58399] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/autoload_classmap.php"] [unique_id "aelZazC5hrvNXosL83LLYgAAAMc"]
[Thu Apr 23 07:27:39.904620 2026] [proxy_fcgi:error] [pid 65000:tid 65056] [client 89.251.0.117:46517] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:27:40.219289 2026] [:error] [pid 43083:tid 43085] [client 89.251.0.117:60257] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-conflg.php"] [unique_id "aelZbDC5hrvNXosL83LLZgAAAMA"]
[Thu Apr 23 07:27:40.535001 2026] [:error] [pid 65000:tid 65038] [client 89.251.0.117:46517] [client 89.251.0.117] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.117, incrementing brute counter"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aelZbL6vRb9j6psK2ZaZcwAAAgU"]
[Thu Apr 23 07:27:41.505852 2026] [:error] [pid 42971:tid 42992] [client 89.251.0.144:55049] [client 89.251.0.144] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/maint/wonder.php"] [unique_id "aelZbTEP2_5RswrH8bGq9AAAAAY"]
[Thu Apr 23 07:27:43.002166 2026] [:error] [pid 65000:tid 65051] [client 89.251.0.117:46517] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aelZb76vRb9j6psK2ZaZjwAAAhI"]
[Thu Apr 23 07:27:44.062686 2026] [:error] [pid 43083:tid 43107] [client 89.251.0.120:44899] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aelZcDC5hrvNXosL83LLhgAAANY"]
[Thu Apr 23 07:27:44.378415 2026] [:error] [pid 65000:tid 65057] [client 89.251.0.117:27865] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/dist/default.php"] [unique_id "aelZcL6vRb9j6psK2ZaZsgAAAhg"]
[Thu Apr 23 07:27:45.616687 2026] [:error] [pid 64967:tid 64989] [client 89.251.0.120:28047] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "aelZcYAV4GfOOdX8QzoT3AAAAZQ"]
[Thu Apr 23 07:27:46.998317 2026] [:error] [pid 64967:tid 64992] [client 89.251.0.134:30893] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aelZcoAV4GfOOdX8QzoT7gAAAZc"]
[Thu Apr 23 07:27:47.224323 2026] [:error] [pid 64998:tid 65002] [client 89.251.0.135:36835] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/src/index.php"] [unique_id "aelZc4V5EysYcTLjmwj3RAAAAcA"]
[Thu Apr 23 07:27:50.459296 2026] [:error] [pid 65000:tid 65051] [client 89.251.0.150:54391] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aelZdr6vRb9j6psK2ZaaHgAAAhI"]
[Thu Apr 23 07:27:50.660142 2026] [:error] [pid 59700:tid 59712] [client 89.251.0.143:41785] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Parse/about.php"] [unique_id "aelZdpXyGZJFeAIDWtlaRQAAAUo"]
[Thu Apr 23 07:27:51.465291 2026] [proxy_fcgi:error] [pid 59700:tid 59707] [client 89.251.0.134:57579] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:27:52.561121 2026] [:error] [pid 59700:tid 59702] [client 89.251.0.134:57579] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/wp-conflg.php"] [unique_id "aelZeJXyGZJFeAIDWtlaUwAAAUA"]
[Thu Apr 23 07:27:53.964155 2026] [:error] [pid 64998:tid 65005] [client 89.251.0.125:63751] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aelZeYV5EysYcTLjmwj3gAAAAcM"]
[Thu Apr 23 07:27:55.237645 2026] [proxy_fcgi:error] [pid 65000:tid 65030] [client 89.251.0.148:63595] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:27:55.918977 2026] [:error] [pid 65000:tid 65037] [client 89.251.0.148:63595] [client 89.251.0.148] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.148, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/ocean/wp-login.php"] [unique_id "aelZe76vRb9j6psK2ZaaWAAAAgQ"]
[Thu Apr 23 07:27:56.817226 2026] [:error] [pid 43083:tid 43098] [client 89.251.0.141:22751] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aelZfDC5hrvNXosL83LMQAAAAM0"]
[Thu Apr 23 07:27:58.325351 2026] [:error] [pid 65000:tid 65057] [client 89.251.0.148:63595] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Cache/upfile.php"] [unique_id "aelZfr6vRb9j6psK2ZaajgAAAhg"]
[Thu Apr 23 07:27:58.596544 2026] [proxy_fcgi:error] [pid 59700:tid 59717] [client 89.251.0.151:54771] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:27:58.879532 2026] [:error] [pid 59700:tid 59713] [client 89.251.0.151:54771] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aelZfpXyGZJFeAIDWtlagwAAAUs"]
[Thu Apr 23 07:27:59.280562 2026] [:error] [pid 65000:tid 65056] [client 89.251.0.126:28507] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/plugins/fullscreen/about.php"] [unique_id "aelZf76vRb9j6psK2ZaaowAAAhc"]
[Thu Apr 23 07:27:59.800956 2026] [:error] [pid 64967:tid 64979] [client 89.251.0.124:33335] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/db.php"] [unique_id "aelZf4AV4GfOOdX8QzoUJwAAAYo"]
[Thu Apr 23 07:28:00.448990 2026] [:error] [pid 42972:tid 43019] [client 89.251.0.135:29381] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aelZgMOAb-3sOknsk4chwgAAAEM"]
[Thu Apr 23 07:28:01.152561 2026] [:error] [pid 64967:tid 64972] [client 89.251.0.147:53945] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aelZgYAV4GfOOdX8QzoUMgAAAYM"]
[Thu Apr 23 07:28:01.673427 2026] [:error] [pid 64967:tid 64989] [client 89.251.0.128:40179] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-function.php"] [unique_id "aelZgYAV4GfOOdX8QzoUNQAAAZQ"]
[Thu Apr 23 07:28:01.886994 2026] [:error] [pid 43083:tid 43096] [client 89.251.0.124:39677] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aelZgTC5hrvNXosL83LMjQAAAMs"]
[Thu Apr 23 07:28:02.459727 2026] [:error] [pid 42972:tid 43032] [client 89.251.0.129:56161] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aelZgsOAb-3sOknsk4chzwAAAFA"]
[Thu Apr 23 07:28:03.091659 2026] [:error] [pid 64967:tid 64979] [client 89.251.0.148:33233] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aelZg4AV4GfOOdX8QzoUOgAAAYo"]
[Thu Apr 23 07:28:03.202648 2026] [:error] [pid 43083:tid 43109] [client 89.251.0.121:29933] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Canonical.php"] [unique_id "aelZgzC5hrvNXosL83LMrwAAANg"]
[Thu Apr 23 07:28:03.773399 2026] [:error] [pid 59700:tid 59707] [client 89.251.0.124:41417] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/autoload_classmap.php"] [unique_id "aelZg5XyGZJFeAIDWtlaqgAAAUU"]
[Thu Apr 23 07:28:04.365560 2026] [:error] [pid 42972:tid 43025] [client 89.251.0.146:30587] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aelZhMOAb-3sOknsk4ch1wAAAEk"]
[Thu Apr 23 07:28:04.995027 2026] [:error] [pid 42972:tid 43040] [client 89.251.0.116:53071] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aelZhMOAb-3sOknsk4ch2AAAAFg"]
[Thu Apr 23 07:28:05.672660 2026] [:error] [pid 42973:tid 43046] [client 89.251.0.151:34003] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-feed-index.php"] [unique_id "aelZhW6I0QqmmmLTHE3bogAAAIM"]
[Thu Apr 23 07:28:05.706734 2026] [:error] [pid 64967:tid 64985] [client 89.251.0.123:54261] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aelZhYAV4GfOOdX8QzoURwAAAZA"]
[Thu Apr 23 07:28:06.304305 2026] [:error] [pid 64998:tid 65006] [client 89.251.0.117:65463] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aelZhoV5EysYcTLjmwj39wAAAcQ"]
[Thu Apr 23 07:28:06.931762 2026] [:error] [pid 42971:tid 42994] [client 89.251.0.150:53231] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aelZhjEP2_5RswrH8bGrgwAAAAg"]
[Thu Apr 23 07:28:06.962094 2026] [proxy_fcgi:error] [pid 65000:tid 65051] [client 89.251.0.113:27761] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:28:07.433755 2026] [:error] [pid 65000:tid 65056] [client 89.251.0.113:27761] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-section-boolean.php"] [unique_id "aelZh76vRb9j6psK2ZabLwAAAhc"]
[Thu Apr 23 07:28:07.782264 2026] [proxy_fcgi:error] [pid 42972:tid 43035] [client 89.251.0.138:41519] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:28:08.364868 2026] [:error] [pid 64998:tid 65020] [client 89.251.0.121:64565] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/db.php"] [unique_id "aelZiIV5EysYcTLjmwj4CwAAAdI"]
[Thu Apr 23 07:28:08.647186 2026] [:error] [pid 42972:tid 43037] [client 89.251.0.138:41519] [client 89.251.0.138] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.138, incrementing brute counter"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aelZiMOAb-3sOknsk4ch4QAAAFU"]
[Thu Apr 23 07:28:08.944635 2026] [:error] [pid 64998:tid 65005] [client 89.251.0.146:48597] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-dependency-float.php"] [unique_id "aelZiIV5EysYcTLjmwj4FQAAAcM"]
[Thu Apr 23 07:28:09.600610 2026] [:error] [pid 64998:tid 65010] [client 89.251.0.132:30307] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/index.php"] [unique_id "aelZiYV5EysYcTLjmwj4HgAAAcg"]
[Thu Apr 23 07:28:10.234407 2026] [:error] [pid 64967:tid 64987] [client 89.251.0.133:33703] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/purna.php"] [unique_id "aelZioAV4GfOOdX8QzoUcgAAAZI"]
[Thu Apr 23 07:28:10.381429 2026] [:error] [pid 42972:tid 43040] [client 89.251.0.138:41519] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aelZisOAb-3sOknsk4ch6gAAAFg"]
[Thu Apr 23 07:28:11.910110 2026] [:error] [pid 42973:tid 43045] [client 89.251.0.135:34617] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-class.php"] [unique_id "aelZi26I0QqmmmLTHE3bzQAAAII"]
[Thu Apr 23 07:28:12.637733 2026] [:error] [pid 65000:tid 65030] [client 89.251.0.139:22731] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/l10n/class-wp-widddget-pages.php"] [unique_id "aelZjL6vRb9j6psK2ZabVAAAAgE"]
[Thu Apr 23 07:28:12.713713 2026] [:error] [pid 64967:tid 64972] [client 89.251.0.143:49803] [client 89.251.0.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/revslider/includes/external/page/index.php"] [unique_id "aelZjIAV4GfOOdX8QzoUlAAAAYM"]
[Thu Apr 23 07:28:13.864688 2026] [:error] [pid 64998:tid 65009] [client 89.251.0.129:21431] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-nav-menu-auto-add-control-repository.php"] [unique_id "aelZjYV5EysYcTLjmwj4UgAAAcc"]
[Thu Apr 23 07:28:15.459883 2026] [:error] [pid 59700:tid 59726] [client 89.251.0.117:54549] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime.min-soap.php"] [unique_id "aelZj5XyGZJFeAIDWtlbDwAAAVg"]
[Thu Apr 23 07:28:16.045692 2026] [:error] [pid 42971:tid 42997] [client 89.251.0.145:49839] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/module.audio-video.riff-set.php"] [unique_id "aelZkDEP2_5RswrH8bGrygAAAAs"]
[Thu Apr 23 07:28:16.772922 2026] [:error] [pid 59700:tid 59721] [client 89.251.0.123:27929] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/utils/license.php"] [unique_id "aelZkJXyGZJFeAIDWtlbEgAAAVM"]
[Thu Apr 23 07:28:16.797467 2026] [:error] [pid 42972:tid 43020] [client 89.251.0.121:37123] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aelZkMOAb-3sOknsk4ciDQAAAEQ"]
[Thu Apr 23 07:28:17.368457 2026] [:error] [pid 43083:tid 43098] [client 89.251.0.123:36851] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/options.php"] [unique_id "aelZkTC5hrvNXosL83LNVgAAAM0"]
[Thu Apr 23 07:28:17.368962 2026] [:error] [pid 64967:tid 64972] [client 89.251.0.143:59405] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aelZkYAV4GfOOdX8QzoUxAAAAYM"]
[Thu Apr 23 07:28:17.942958 2026] [:error] [pid 64967:tid 64976] [client 89.251.0.121:64445] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aelZkYAV4GfOOdX8QzoUzwAAAYc"]
[Thu Apr 23 07:28:17.963317 2026] [proxy_fcgi:error] [pid 64967:tid 64983] [client 89.251.0.128:27867] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:28:18.882655 2026] [:error] [pid 64967:tid 64983] [client 89.251.0.128:27867] [client 89.251.0.128] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.128, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/bltm/wp-login.php"] [unique_id "aelZkoAV4GfOOdX8QzoU3QAAAY4"]
[Thu Apr 23 07:28:20.459496 2026] [:error] [pid 42972:tid 43037] [client 89.251.0.140:27343] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aelZlMOAb-3sOknsk4ciPwAAAFU"]
[Thu Apr 23 07:28:20.463656 2026] [:error] [pid 64967:tid 64992] [client 89.251.0.128:27867] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/goto.php"] [unique_id "aelZlIAV4GfOOdX8QzoU6wAAAZc"]
[Thu Apr 23 07:28:21.340291 2026] [:error] [pid 43083:tid 43091] [client 89.251.0.147:63435] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aelZlTC5hrvNXosL83LNiwAAAMY"]
[Thu Apr 23 07:28:21.971248 2026] [:error] [pid 65000:tid 65053] [client 89.251.0.117:58071] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aelZlb6vRb9j6psK2ZabyQAAAhQ"]
[Thu Apr 23 07:28:23.833096 2026] [:error] [pid 43083:tid 43092] [client 89.251.0.128:60601] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aelZlzC5hrvNXosL83LN1wAAAMc"]
[Thu Apr 23 07:28:25.739543 2026] [:error] [pid 42971:tid 42995] [client 89.251.0.151:45381] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aelZmTEP2_5RswrH8bGsGQAAAAk"]
[Thu Apr 23 07:28:26.639166 2026] [:error] [pid 43083:tid 43090] [client 89.251.0.135:40041] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/codemirror/index.php"] [unique_id "aelZmjC5hrvNXosL83LN_wAAAMU"]
[Thu Apr 23 07:28:27.106662 2026] [:error] [pid 64967:tid 64992] [client 89.251.0.140:47605] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aelZm4AV4GfOOdX8QzoVLwAAAZc"]
[Thu Apr 23 07:28:27.220443 2026] [:error] [pid 42973:tid 43047] [client 89.251.0.142:64371] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/wp_class_datlib.php"] [unique_id "aelZm26I0QqmmmLTHE3cJQAAAIQ"]
[Thu Apr 23 07:28:27.836359 2026] [:error] [pid 42972:tid 43035] [client 89.251.0.123:63047] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/langs/about.php"] [unique_id "aelZm8OAb-3sOknsk4ciYwAAAFM"]
[Thu Apr 23 07:28:30.355903 2026] [:error] [pid 42971:tid 43009] [client 89.251.0.126:24629] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Registry-private.php"] [unique_id "aelZnjEP2_5RswrH8bGsOgAAABc"]
[Thu Apr 23 07:28:31.263398 2026] [:error] [pid 42971:tid 43001] [client 89.251.0.123:63233] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-meta.php"] [unique_id "aelZnzEP2_5RswrH8bGsPgAAAA8"]
[Thu Apr 23 07:28:32.103178 2026] [:error] [pid 59700:tid 59705] [client 89.251.0.132:56793] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/bypass.php"] [unique_id "aelZoJXyGZJFeAIDWtlbggAAAUM"]
[Thu Apr 23 07:28:32.628417 2026] [:error] [pid 64998:tid 65018] [client 89.251.0.144:50375] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aelZoIV5EysYcTLjmwj5DwAAAdA"]
[Thu Apr 23 07:28:33.562219 2026] [:error] [pid 64998:tid 65017] [client 89.251.0.142:56961] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/about.php"] [unique_id "aelZoYV5EysYcTLjmwj5IAAAAc8"]
[Thu Apr 23 07:28:34.634230 2026] [:error] [pid 42973:tid 43058] [client 89.251.0.128:39869] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/adminfus.php"] [unique_id "aelZom6I0QqmmmLTHE3cUAAAAI8"]
[Thu Apr 23 07:28:35.592850 2026] [:error] [pid 59700:tid 59702] [client 89.251.0.141:62443] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/group/wp-style.php"] [unique_id "aelZo5XyGZJFeAIDWtlbtwAAAUA"]
[Thu Apr 23 07:28:36.272411 2026] [:error] [pid 43083:tid 43099] [client 89.251.0.141:22223] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aelZpDC5hrvNXosL83LOXAAAAM4"]
[Thu Apr 23 07:28:37.114373 2026] [:error] [pid 25635:tid 25652] [client 89.251.0.136:62685] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-wolf-widget.php"] [unique_id "aelZpcRxv6UsgRGKB3LjWAAAAQ0"]
[Thu Apr 23 07:28:37.653658 2026] [:error] [pid 42971:tid 42993] [client 89.251.0.113:58121] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aelZpTEP2_5RswrH8bGscQAAAAc"]
[Thu Apr 23 07:28:39.668893 2026] [:error] [pid 65000:tid 65043] [client 89.251.0.138:46609] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aelZp76vRb9j6psK2ZacwwAAAgo"]
[Thu Apr 23 07:28:41.714925 2026] [:error] [pid 42971:tid 42988] [client 89.251.0.126:21687] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aelZqTEP2_5RswrH8bGshwAAAAI"]
[Thu Apr 23 07:28:41.720974 2026] [:error] [pid 59700:tid 59718] [client 89.251.0.127:62809] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/index.php"] [unique_id "aelZqZXyGZJFeAIDWtlb-gAAAVA"]
[Thu Apr 23 07:28:42.838062 2026] [:error] [pid 25635:tid 25660] [client 89.251.0.135:26833] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/about.php"] [unique_id "aelZqsRxv6UsgRGKB3LjcwAAARU"]
[Thu Apr 23 07:28:43.165659 2026] [:error] [pid 42973:tid 43062] [client 89.251.0.120:27003] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aelZq26I0QqmmmLTHE3ccQAAAJM"]
[Thu Apr 23 07:28:44.877859 2026] [:error] [pid 42971:tid 43001] [client 89.251.0.117:56381] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aelZrDEP2_5RswrH8bGskwAAAA8"]
[Thu Apr 23 07:28:45.476324 2026] [:error] [pid 65000:tid 65029] [client 89.251.0.117:57733] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/wp-sup.php"] [unique_id "aelZrb6vRb9j6psK2ZadFwAAAgA"]
[Thu Apr 23 07:28:47.388901 2026] [:error] [pid 64998:tid 65011] [client 89.251.0.125:46735] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-t.api.php"] [unique_id "aelZr4V5EysYcTLjmwj5yQAAAck"]
[Thu Apr 23 07:28:47.800921 2026] [:error] [pid 42971:tid 42997] [client 89.251.0.136:62651] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aelZrzEP2_5RswrH8bGsuwAAAAs"]
[Thu Apr 23 07:28:49.333523 2026] [:error] [pid 43083:tid 43109] [client 89.251.0.119:55183] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/require-dynamic-blocks.php"] [unique_id "aelZsTC5hrvNXosL83LO1wAAANg"]
[Thu Apr 23 07:28:50.341813 2026] [:error] [pid 59700:tid 59705] [client 89.251.0.123:33541] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aelZspXyGZJFeAIDWtlcTgAAAUM"]
[Thu Apr 23 07:28:51.426731 2026] [:error] [pid 43083:tid 43087] [client 89.251.0.125:25467] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-rss-database.php"] [unique_id "aelZszC5hrvNXosL83LO-AAAAMI"]
[Thu Apr 23 07:28:52.388860 2026] [:error] [pid 64967:tid 64985] [client 89.251.0.132:49307] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aelZtIAV4GfOOdX8QzoV2wAAAZA"]
[Thu Apr 23 07:28:52.707508 2026] [:error] [pid 64967:tid 64993] [client 89.251.0.123:63293] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-customize-manager-client.php"] [unique_id "aelZtIAV4GfOOdX8QzoV3QAAAZg"]
[Thu Apr 23 07:28:53.027744 2026] [:error] [pid 25635:tid 25662] [client 89.251.0.148:46825] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aelZtcRxv6UsgRGKB3LjogAAARc"]
[Thu Apr 23 07:28:53.396276 2026] [:error] [pid 65000:tid 65029] [client 89.251.0.113:45405] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/script-modules-packages.min-boolean.php"] [unique_id "aelZtb6vRb9j6psK2ZadQwAAAgA"]
[Thu Apr 23 07:28:54.006534 2026] [:error] [pid 64998:tid 65007] [client 89.251.0.146:26615] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aelZtoV5EysYcTLjmwj6AQAAAcU"]
[Thu Apr 23 07:28:55.730598 2026] [:error] [pid 64998:tid 65002] [client 89.251.0.141:28671] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/simi.php"] [unique_id "aelZt4V5EysYcTLjmwj6FAAAAcA"]
[Thu Apr 23 07:28:56.296561 2026] [:error] [pid 42971:tid 42991] [client 89.251.0.129:55101] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "aelZuDEP2_5RswrH8bGs_AAAAAU"]
[Thu Apr 23 07:28:57.013493 2026] [:error] [pid 42972:tid 43040] [client 89.251.0.114:28679] [client 89.251.0.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aelZucOAb-3sOknsk4cjMQAAAFg"]
[Thu Apr 23 07:28:58.230790 2026] [:error] [pid 65000:tid 65042] [client 89.251.0.117:56121] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine-session.php"] [unique_id "aelZur6vRb9j6psK2ZadpAAAAgk"]
[Thu Apr 23 07:28:59.656754 2026] [:error] [pid 25635:tid 25642] [client 89.251.0.145:43807] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "aelZu8Rxv6UsgRGKB3LjxAAAAQM"]
[Thu Apr 23 07:29:01.326591 2026] [:error] [pid 59700:tid 59724] [client 89.251.0.128:50531] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "aelZvZXyGZJFeAIDWtlcpQAAAVY"]
[Thu Apr 23 07:29:01.428255 2026] [:error] [pid 59700:tid 59715] [client 89.251.0.145:36763] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aelZvZXyGZJFeAIDWtlcpgAAAU0"]
[Thu Apr 23 07:29:02.212677 2026] [:error] [pid 42973:tid 43062] [client 89.251.0.137:47015] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "aelZvm6I0QqmmmLTHE3c1gAAAJM"]
[Thu Apr 23 07:29:02.213787 2026] [:error] [pid 42973:tid 43062] [client 89.251.0.129:28887] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/file/wp-style.php"] [unique_id "aelZvm6I0QqmmmLTHE3c1wAAAJM"]
[Thu Apr 23 07:29:03.178585 2026] [:error] [pid 64998:tid 65003] [client 89.251.0.114:61325] [client 89.251.0.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/class-IXR-cilent.php"] [unique_id "aelZv4V5EysYcTLjmwj6cQAAAcE"]
[Thu Apr 23 07:29:03.476156 2026] [:error] [pid 43083:tid 43091] [client 89.251.0.141:35953] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aelZvzC5hrvNXosL83LPewAAAMY"]
[Thu Apr 23 07:29:04.607004 2026] [:error] [pid 43083:tid 43098] [client 89.251.0.113:21653] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/install.php"] [unique_id "aelZwDC5hrvNXosL83LPlgAAAM0"]
[Thu Apr 23 07:29:04.677462 2026] [:error] [pid 65000:tid 65037] [client 89.251.0.119:56303] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aelZwL6vRb9j6psK2Zad2wAAAgQ"]
[Thu Apr 23 07:29:05.388702 2026] [:error] [pid 64998:tid 65006] [client 89.251.0.128:47031] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/xleet.php"] [unique_id "aelZwYV5EysYcTLjmwj6lAAAAcQ"]
[Thu Apr 23 07:29:08.172016 2026] [:error] [pid 25635:tid 25639] [client 89.251.0.125:22041] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aelZxMRxv6UsgRGKB3Lj_gAAAQA"]
[Thu Apr 23 07:29:08.965296 2026] [:error] [pid 64967:tid 64970] [client 89.251.0.115:46615] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/category-double.php"] [unique_id "aelZxIAV4GfOOdX8QzoWMAAAAYE"]
[Thu Apr 23 07:29:09.464121 2026] [:error] [pid 42971:tid 43001] [client 89.251.0.135:58091] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aelZxTEP2_5RswrH8bGtogAAAA8"]
[Thu Apr 23 07:29:10.765735 2026] [:error] [pid 43083:tid 43097] [client 89.251.0.140:20209] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/db.php"] [unique_id "aelZxjC5hrvNXosL83LPyAAAAMw"]
[Thu Apr 23 07:29:10.861409 2026] [:error] [pid 59700:tid 59720] [client 89.251.0.144:30133] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aelZxpXyGZJFeAIDWtlc5AAAAVI"]
[Thu Apr 23 07:29:11.453983 2026] [:error] [pid 64998:tid 65013] [client 89.251.0.143:50845] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/security.php"] [unique_id "aelZx4V5EysYcTLjmwj6xgAAAcs"]
[Thu Apr 23 07:29:12.109903 2026] [:error] [pid 42972:tid 43026] [client 89.251.0.145:53185] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/as.php"] [unique_id "aelZyMOAb-3sOknsk4cjnAAAAEo"]
[Thu Apr 23 07:29:12.746054 2026] [:error] [pid 64998:tid 65002] [client 89.251.0.128:64495] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-language-pack.php"] [unique_id "aelZyIV5EysYcTLjmwj60wAAAcA"]
[Thu Apr 23 07:29:13.046529 2026] [:error] [pid 43083:tid 43096] [client 89.251.0.140:55173] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aelZyTC5hrvNXosL83LP1gAAAMs"]
[Thu Apr 23 07:29:13.667945 2026] [:error] [pid 65000:tid 65043] [client 89.251.0.133:44669] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/install.php"] [unique_id "aelZyb6vRb9j6psK2ZaeFAAAAgo"]
[Thu Apr 23 07:29:13.705857 2026] [:error] [pid 43083:tid 43098] [client 89.251.0.134:46255] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-walker-comment-client.php"] [unique_id "aelZyTC5hrvNXosL83LP5AAAAM0"]
[Thu Apr 23 07:29:14.473673 2026] [:error] [pid 42972:tid 43019] [client 89.251.0.121:39363] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "aelZysOAb-3sOknsk4cjsgAAAEM"]
[Thu Apr 23 07:29:16.809370 2026] [:error] [pid 42972:tid 43018] [client 89.251.0.125:28633] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-network-query-stat.php"] [unique_id "aelZzMOAb-3sOknsk4cjzwAAAEI"]
[Thu Apr 23 07:29:17.684201 2026] [:error] [pid 42971:tid 43004] [client 89.251.0.139:36203] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aelZzTEP2_5RswrH8bGuFQAAABI"]
[Thu Apr 23 07:29:18.217253 2026] [:error] [pid 42973:tid 43064] [client 89.251.0.131:53049] [client 89.251.0.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-session-tokens-https.php"] [unique_id "aelZzm6I0QqmmmLTHE3dPQAAAJU"]
[Thu Apr 23 07:29:19.318172 2026] [:error] [pid 25635:tid 25648] [client 89.251.0.129:30673] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aelZz8Rxv6UsgRGKB3LkMwAAAQk"]
[Thu Apr 23 07:29:19.584416 2026] [:error] [pid 64967:tid 64972] [client 89.251.0.121:54473] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/lrs_dage.php"] [unique_id "aelZz4AV4GfOOdX8QzoWagAAAYM"]
[Thu Apr 23 07:29:20.624885 2026] [:error] [pid 65000:tid 65041] [client 89.251.0.132:55545] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "aelZ0L6vRb9j6psK2ZaeWQAAAgg"]
[Thu Apr 23 07:29:21.896532 2026] [:error] [pid 42972:tid 43034] [client 89.251.0.120:35209] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "aelZ0cOAb-3sOknsk4ckCQAAAFI"]
[Thu Apr 23 07:29:23.151468 2026] [:error] [pid 65000:tid 65039] [client 89.251.0.115:33849] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/as.php"] [unique_id "aelZ076vRb9j6psK2ZaefQAAAgY"]
[Thu Apr 23 07:29:24.114392 2026] [:error] [pid 64967:tid 64970] [client 89.251.0.116:27891] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/wp-conflg.php"] [unique_id "aelZ1IAV4GfOOdX8QzoWhgAAAYE"]
[Thu Apr 23 07:29:24.811309 2026] [:error] [pid 25635:tid 25655] [client 89.251.0.151:25677] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/install.php"] [unique_id "aelZ1MRxv6UsgRGKB3LkUQAAARA"]
[Thu Apr 23 07:29:24.858298 2026] [:error] [pid 65000:tid 65041] [client 89.251.0.151:28687] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aelZ1L6vRb9j6psK2ZaekgAAAgg"]
[Thu Apr 23 07:29:25.394367 2026] [:error] [pid 42973:tid 43067] [client 89.251.0.144:26693] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/db.php"] [unique_id "aelZ1W6I0QqmmmLTHE3dawAAAJg"]
[Thu Apr 23 07:29:25.863482 2026] [:error] [pid 64967:tid 64991] [client 89.251.0.142:36385] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aelZ1YAV4GfOOdX8QzoWkQAAAZY"]
[Thu Apr 23 07:29:26.783202 2026] [:error] [pid 43083:tid 43095] [client 89.251.0.131:32767] [client 89.251.0.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aelZ1jC5hrvNXosL83LQbQAAAMo"]
[Thu Apr 23 07:29:28.169077 2026] [:error] [pid 59700:tid 59705] [client 89.251.0.114:42147] [client 89.251.0.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aelZ2JXyGZJFeAIDWtldewAAAUM"]
[Thu Apr 23 07:29:28.203711 2026] [:error] [pid 42971:tid 42987] [client 89.251.0.129:60389] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/thickbox/about.php"] [unique_id "aelZ2DEP2_5RswrH8bGulQAAAAE"]
[Thu Apr 23 07:29:29.926751 2026] [:error] [pid 64967:tid 64977] [client 89.251.0.120:35477] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rk2.php"] [unique_id "aelZ2YAV4GfOOdX8QzoWowAAAYg"]
[Thu Apr 23 07:29:31.793374 2026] [:error] [pid 42973:tid 43052] [client 89.251.0.123:57365] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/past.php"] [unique_id "aelZ226I0QqmmmLTHE3dhAAAAIk"]
[Thu Apr 23 07:29:32.308205 2026] [:error] [pid 42972:tid 43023] [client 89.251.0.143:53215] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aelZ3MOAb-3sOknsk4ckXAAAAEc"]
[Thu Apr 23 07:29:32.923351 2026] [:error] [pid 64998:tid 65015] [client 89.251.0.151:41149] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aelZ3IV5EysYcTLjmwj7tgAAAc0"]
[Thu Apr 23 07:29:33.483300 2026] [:error] [pid 64998:tid 65015] [client 89.251.0.133:20257] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/edit-tags.php"] [unique_id "aelZ3YV5EysYcTLjmwj7wAAAAc0"]
[Thu Apr 23 07:29:34.703103 2026] [:error] [pid 65000:tid 65038] [client 89.251.0.138:21151] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aelZ3r6vRb9j6psK2ZaezQAAAgU"]
[Thu Apr 23 07:29:35.346277 2026] [:error] [pid 65000:tid 65045] [client 89.251.0.137:24609] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aelZ376vRb9j6psK2Zae5AAAAgw"]
[Thu Apr 23 07:29:35.797736 2026] [:error] [pid 65000:tid 65046] [client 89.251.0.128:24001] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/footer-default.php"] [unique_id "aelZ376vRb9j6psK2Zae8QAAAg0"]
[Thu Apr 23 07:29:36.529723 2026] [:error] [pid 64967:tid 64980] [client 89.251.0.144:57091] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aelZ4IAV4GfOOdX8QzoWuwAAAYs"]
[Thu Apr 23 07:29:36.725427 2026] [:error] [pid 43083:tid 43091] [client 89.251.0.125:20519] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-meta-request.php"] [unique_id "aelZ4DC5hrvNXosL83LREAAAAMY"]
[Thu Apr 23 07:29:37.271014 2026] [:error] [pid 59700:tid 59710] [client 89.251.0.129:30107] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "aelZ4ZXyGZJFeAIDWtld0QAAAUg"]
[Thu Apr 23 07:29:37.916734 2026] [:error] [pid 59700:tid 59708] [client 89.251.0.144:48187] [client 89.251.0.144] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.144, incrementing brute counter"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aelZ4ZXyGZJFeAIDWtld3gAAAUY"]
[Thu Apr 23 07:29:37.943996 2026] [proxy_fcgi:error] [pid 59700:tid 59708] [client 89.251.0.144:48187] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:29:38.039425 2026] [:error] [pid 43083:tid 43088] [client 89.251.0.147:58715] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/bypass.php"] [unique_id "aelZ4jC5hrvNXosL83LRSwAAAMM"]
[Thu Apr 23 07:29:38.264116 2026] [:error] [pid 59700:tid 59723] [client 89.251.0.144:48187] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "aelZ4pXyGZJFeAIDWtld5gAAAVU"]
[Thu Apr 23 07:29:39.408960 2026] [:error] [pid 42971:tid 43010] [client 89.251.0.148:39505] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/l10n/wp-login.php"] [unique_id "aelZ4zEP2_5RswrH8bGu5wAAABg"]
[Thu Apr 23 07:29:40.680817 2026] [:error] [pid 43083:tid 43096] [client 89.251.0.140:34075] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aelZ5DC5hrvNXosL83LRhgAAAMs"]
[Thu Apr 23 07:29:42.921255 2026] [:error] [pid 42972:tid 43024] [client 89.251.0.139:60957] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/network.php"] [unique_id "aelZ5sOAb-3sOknsk4ckpgAAAEg"]
[Thu Apr 23 07:29:43.237161 2026] [:error] [pid 59700:tid 59715] [client 89.251.0.141:24681] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-ss.php"] [unique_id "aelZ55XyGZJFeAIDWtleTQAAAU0"]
[Thu Apr 23 07:29:43.966319 2026] [:error] [pid 59700:tid 59710] [client 89.251.0.133:56853] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/xsec1.php"] [unique_id "aelZ55XyGZJFeAIDWtleWgAAAUg"]
[Thu Apr 23 07:29:45.627395 2026] [:error] [pid 64998:tid 65013] [client 89.251.0.114:45455] [client 89.251.0.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/crystal/sad.php"] [unique_id "aelZ6YV5EysYcTLjmwj8KwAAAcs"]
[Thu Apr 23 07:29:46.040062 2026] [:error] [pid 59700:tid 59722] [client 89.251.0.124:46957] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aelZ6pXyGZJFeAIDWtlefAAAAVQ"]
[Thu Apr 23 07:29:46.456355 2026] [:error] [pid 65000:tid 65037] [client 89.251.0.119:59193] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-packages.min.php"] [unique_id "aelZ6r6vRb9j6psK2ZafXgAAAgQ"]
[Thu Apr 23 07:29:46.714192 2026] [:error] [pid 64998:tid 65003] [client 89.251.0.127:44995] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "aelZ6oV5EysYcTLjmwj8OgAAAcE"]
[Thu Apr 23 07:29:47.980653 2026] [:error] [pid 64998:tid 65017] [client 89.251.0.131:58131] [client 89.251.0.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aelZ64V5EysYcTLjmwj8UAAAAc8"]
[Thu Apr 23 07:29:48.268457 2026] [:error] [pid 43083:tid 43107] [client 89.251.0.119:42341] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-phpmailer-beta.php"] [unique_id "aelZ7DC5hrvNXosL83LR0AAAANY"]
[Thu Apr 23 07:29:48.613903 2026] [:error] [pid 42971:tid 43004] [client 89.251.0.126:24793] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "aelZ7DEP2_5RswrH8bGvKQAAABI"]
[Thu Apr 23 07:29:48.925486 2026] [:error] [pid 65000:tid 65032] [client 89.251.0.145:26601] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ms-file.php"] [unique_id "aelZ7L6vRb9j6psK2ZafeAAAAgM"]
[Thu Apr 23 07:29:49.250302 2026] [proxy_fcgi:error] [pid 64998:tid 65009] [client 89.251.0.127:45133] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:29:49.530946 2026] [:error] [pid 64998:tid 65025] [client 89.251.0.127:45133] [client 89.251.0.127] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.127, incrementing brute counter"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aelZ7YV5EysYcTLjmwj8aQAAAdc"]
[Thu Apr 23 07:29:49.560382 2026] [:error] [pid 64998:tid 65010] [client 89.251.0.119:63497] [client 89.251.0.119] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.119, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/acme-challenge/wp-login.php"] [unique_id "aelZ7YV5EysYcTLjmwj8bQAAAcg"]
[Thu Apr 23 07:29:49.572951 2026] [proxy_fcgi:error] [pid 64998:tid 65010] [client 89.251.0.119:63497] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:29:49.940581 2026] [:error] [pid 64998:tid 65025] [client 89.251.0.119:63497] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/av.php"] [unique_id "aelZ7YV5EysYcTLjmwj8dwAAAdc"]
[Thu Apr 23 07:29:50.180209 2026] [:error] [pid 64998:tid 65010] [client 89.251.0.127:45133] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aelZ7oV5EysYcTLjmwj8fAAAAcg"]
[Thu Apr 23 07:29:51.207691 2026] [:error] [pid 43083:tid 43104] [client 89.251.0.142:43745] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/autoload_classmap.php"] [unique_id "aelZ7zC5hrvNXosL83LSFwAAANM"]
[Thu Apr 23 07:29:51.822614 2026] [:error] [pid 42972:tid 43028] [client 89.251.0.147:29917] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aelZ78OAb-3sOknsk4ckzQAAAEw"]
[Thu Apr 23 07:29:51.833294 2026] [:error] [pid 42971:tid 42999] [client 89.251.0.148:28099] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/network.php"] [unique_id "aelZ7zEP2_5RswrH8bGvSAAAAA0"]
[Thu Apr 23 07:29:52.946473 2026] [:error] [pid 42973:tid 43046] [client 89.251.0.140:25659] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aelZ8G6I0QqmmmLTHE3dsgAAAIM"]
[Thu Apr 23 07:29:54.229889 2026] [:error] [pid 42973:tid 43060] [client 89.251.0.114:64975] [client 89.251.0.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aelZ8m6I0QqmmmLTHE3duQAAAJE"]
[Thu Apr 23 07:29:55.013201 2026] [:error] [pid 43083:tid 43099] [client 89.251.0.120:31671] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/XML/content.php"] [unique_id "aelZ8zC5hrvNXosL83LSWAAAAM4"]
[Thu Apr 23 07:29:55.653650 2026] [:error] [pid 43083:tid 43105] [client 89.251.0.120:26775] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/item.php"] [unique_id "aelZ8zC5hrvNXosL83LSZAAAANQ"]
[Thu Apr 23 07:29:56.448421 2026] [:error] [pid 64998:tid 65022] [client 89.251.0.138:44247] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aelZ9IV5EysYcTLjmwj8swAAAdQ"]
[Thu Apr 23 07:29:57.004302 2026] [:error] [pid 64998:tid 65025] [client 89.251.0.133:22753] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/plugins.php"] [unique_id "aelZ9YV5EysYcTLjmwj8ugAAAdc"]
[Thu Apr 23 07:29:57.591480 2026] [:error] [pid 42972:tid 43038] [client 89.251.0.121:21091] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/install.php"] [unique_id "aelZ9cOAb-3sOknsk4ck9AAAAFY"]
[Thu Apr 23 07:29:57.687755 2026] [:error] [pid 42972:tid 43040] [client 89.251.0.137:32279] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aelZ9cOAb-3sOknsk4ck9wAAAFg"]
[Thu Apr 23 07:29:58.301340 2026] [proxy_fcgi:error] [pid 42973:tid 43064] [client 89.251.0.144:25059] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:29:58.759313 2026] [:error] [pid 42973:tid 43048] [client 89.251.0.144:25059] [client 89.251.0.144] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.144, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/wp-login.php"] [unique_id "aelZ9m6I0QqmmmLTHE3dyAAAAIU"]
[Thu Apr 23 07:29:59.452588 2026] [:error] [pid 42973:tid 43059] [client 89.251.0.144:25059] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-nav-widgets.php"] [unique_id "aelZ926I0QqmmmLTHE3dzAAAAJA"]
[Thu Apr 23 07:29:59.791709 2026] [:error] [pid 25635:tid 25652] [client 89.251.0.126:61773] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aelZ98Rxv6UsgRGKB3Lk_wAAAQ0"]
[Thu Apr 23 07:30:00.575444 2026] [:error] [pid 42971:tid 43002] [client 89.251.0.124:42763] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "aelZ-DEP2_5RswrH8bGvsAAAABA"]
[Thu Apr 23 07:30:01.451774 2026] [:error] [pid 42973:tid 43043] [client 89.251.0.121:60897] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/doc.php"] [unique_id "aelZ-W6I0QqmmmLTHE3d3QAAAIA"]
[Thu Apr 23 07:30:02.765861 2026] [:error] [pid 42972:tid 43033] [client 89.251.0.132:23243] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/1.php"] [unique_id "aelZ-sOAb-3sOknsk4clSwAAAFE"]
[Thu Apr 23 07:30:02.783951 2026] [:error] [pid 42972:tid 43021] [client 89.251.0.113:26703] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/count.php"] [unique_id "aelZ-sOAb-3sOknsk4clTwAAAEU"]
[Thu Apr 23 07:30:03.469850 2026] [:error] [pid 42971:tid 43010] [client 89.251.0.135:41919] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/fonts/class_api.php"] [unique_id "aelZ-zEP2_5RswrH8bGvzgAAABg"]
[Thu Apr 23 07:30:05.569734 2026] [:error] [pid 25635:tid 25658] [client 89.251.0.115:39999] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/admin.php"] [unique_id "aelZ_cRxv6UsgRGKB3LlOgAAARM"]
[Thu Apr 23 07:30:05.922022 2026] [:error] [pid 42971:tid 43001] [client 89.251.0.114:41147] [client 89.251.0.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aelZ_TEP2_5RswrH8bGv5AAAAA8"]
[Thu Apr 23 07:30:06.818444 2026] [:error] [pid 42972:tid 43026] [client 89.251.0.138:43101] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/about.php"] [unique_id "aelZ_sOAb-3sOknsk4clcwAAAEo"]
[Thu Apr 23 07:30:07.322048 2026] [:error] [pid 64967:tid 64985] [client 89.251.0.143:43233] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||www.measureyourcause.measureyourbrand.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/images/stories/themes.php"] [unique_id "aelZ_4AV4GfOOdX8QzoXLwAAAZA"]
[Thu Apr 23 07:30:07.663040 2026] [:error] [pid 64967:tid 64970] [client 89.251.0.143:43233] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aelZ_4AV4GfOOdX8QzoXNAAAAYE"]
[Thu Apr 23 07:30:09.042287 2026] [:error] [pid 42971:tid 42997] [client 89.251.0.144:44255] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-customize-manager-interpreter.php"] [unique_id "aelaATEP2_5RswrH8bGwCQAAAAs"]
[Thu Apr 23 07:30:09.603787 2026] [:error] [pid 43083:tid 43091] [client 89.251.0.125:37573] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aelaATC5hrvNXosL83LS1wAAAMY"]
[Thu Apr 23 07:30:10.531543 2026] [:error] [pid 59700:tid 59721] [client 89.251.0.116:59429] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "aelaApXyGZJFeAIDWtlfIQAAAVM"]
[Thu Apr 23 07:30:10.697516 2026] [:error] [pid 64967:tid 64985] [client 89.251.0.126:63349] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/bypass.php"] [unique_id "aelaAoAV4GfOOdX8QzoXPgAAAZA"]
[Thu Apr 23 07:30:11.684594 2026] [:error] [pid 43083:tid 43087] [client 89.251.0.123:32157] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/count.php"] [unique_id "aelaAzC5hrvNXosL83LS6AAAAMI"]
[Thu Apr 23 07:30:13.576919 2026] [:error] [pid 42973:tid 43063] [client 89.251.0.150:23619] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aelaBW6I0QqmmmLTHE3eGgAAAJQ"]
[Thu Apr 23 07:30:14.947972 2026] [:error] [pid 59700:tid 59723] [client 89.251.0.135:58265] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aelaBpXyGZJFeAIDWtlfWQAAAVU"]
[Thu Apr 23 07:30:15.269084 2026] [:error] [pid 43083:tid 43098] [client 89.251.0.127:63695] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/chosen.php"] [unique_id "aelaBzC5hrvNXosL83LTFwAAAM0"]
[Thu Apr 23 07:30:16.768449 2026] [:error] [pid 42972:tid 43032] [client 89.251.0.119:46621] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 2). String match ".php" at REQUEST_FILENAME. [file "/usr/local/apache/modsecurity-cwaf/rules/24_Apps_Joomla.conf"] [line "74"] [id "240000"] [rev "1"] [msg "COMODO WAF: Protecting Joomla folder||measureyourcause.measureyourbrand.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Joomla"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/images/stories/themes.php"] [unique_id "aelaCMOAb-3sOknsk4cltwAAAFA"]
[Thu Apr 23 07:30:17.129763 2026] [:error] [pid 42972:tid 43039] [client 89.251.0.119:46621] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/footer-embed-function.php"] [unique_id "aelaCcOAb-3sOknsk4clugAAAFc"]
[Thu Apr 23 07:30:18.356835 2026] [:error] [pid 59700:tid 59718] [client 89.251.0.144:50499] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/l10n/class-wp-translation-file-mo-event.php"] [unique_id "aelaCpXyGZJFeAIDWtlfeAAAAVA"]
[Thu Apr 23 07:30:18.524145 2026] [:error] [pid 65000:tid 65050] [client 89.251.0.142:36653] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aelaCr6vRb9j6psK2ZagmQAAAhE"]
[Thu Apr 23 07:30:19.228191 2026] [:error] [pid 65000:tid 65055] [client 89.251.0.148:20671] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/vars-soap.php"] [unique_id "aelaC76vRb9j6psK2ZagyQAAAhY"]
[Thu Apr 23 07:30:21.110417 2026] [:error] [pid 65000:tid 65057] [client 89.251.0.139:39363] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aelaDb6vRb9j6psK2ZahDgAAAhg"]
[Thu Apr 23 07:30:21.821674 2026] [:error] [pid 43083:tid 43093] [client 89.251.0.124:61271] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/colour.php"] [unique_id "aelaDTC5hrvNXosL83LTOAAAAMg"]
[Thu Apr 23 07:30:22.092906 2026] [:error] [pid 42972:tid 43038] [client 89.251.0.145:41923] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/id3/wp-work.php"] [unique_id "aelaDsOAb-3sOknsk4cl7wAAAFY"]
[Thu Apr 23 07:30:22.891047 2026] [:error] [pid 42972:tid 43020] [client 89.251.0.139:42995] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aelaDsOAb-3sOknsk4cl-wAAAEQ"]
[Thu Apr 23 07:30:23.460980 2026] [:error] [pid 42972:tid 43021] [client 89.251.0.132:63807] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-taxonomy.editor.php"] [unique_id "aelaD8OAb-3sOknsk4cmBgAAAEU"]
[Thu Apr 23 07:30:23.498747 2026] [:error] [pid 65000:tid 65051] [client 89.251.0.121:64319] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aelaD76vRb9j6psK2ZahMgAAAhI"]
[Thu Apr 23 07:30:24.919625 2026] [:error] [pid 64998:tid 65002] [client 89.251.0.142:30149] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aelaEIV5EysYcTLjmwj9XQAAAcA"]
[Thu Apr 23 07:30:25.124557 2026] [:error] [pid 43083:tid 43099] [client 89.251.0.123:53801] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/wp-conflg.php"] [unique_id "aelaETC5hrvNXosL83LTRAAAAM4"]
[Thu Apr 23 07:30:26.778292 2026] [:error] [pid 65000:tid 65053] [client 89.251.0.137:63505] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aelaEr6vRb9j6psK2ZahZwAAAhQ"]
[Thu Apr 23 07:30:27.420596 2026] [:error] [pid 42973:tid 43060] [client 89.251.0.133:37297] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/about5.php"] [unique_id "aelaE26I0QqmmmLTHE3eMgAAAJE"]
[Thu Apr 23 07:30:28.005391 2026] [:error] [pid 65000:tid 65056] [client 89.251.0.147:33287] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/interactivity-api-xml.php"] [unique_id "aelaFL6vRb9j6psK2ZahdgAAAhc"]
[Thu Apr 23 07:30:28.823837 2026] [:error] [pid 42971:tid 43002] [client 89.251.0.148:38449] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/colour.php"] [unique_id "aelaFDEP2_5RswrH8bGwgQAAABA"]
[Thu Apr 23 07:30:29.919279 2026] [:error] [pid 64967:tid 64979] [client 89.251.0.139:31341] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-background-position-control-variable.php"] [unique_id "aelaFYAV4GfOOdX8QzoXlQAAAYo"]
[Thu Apr 23 07:30:30.004474 2026] [:error] [pid 42971:tid 42996] [client 89.251.0.116:61079] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/db.php"] [unique_id "aelaFjEP2_5RswrH8bGwmgAAAAo"]
[Thu Apr 23 07:30:30.750546 2026] [:error] [pid 42972:tid 43037] [client 89.251.0.142:56609] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/include.php"] [unique_id "aelaFsOAb-3sOknsk4cmGgAAAFU"]
[Thu Apr 23 07:30:31.550210 2026] [:error] [pid 43083:tid 43092] [client 89.251.0.150:41205] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aelaFzC5hrvNXosL83LTbgAAAMc"]
[Thu Apr 23 07:30:32.219254 2026] [:error] [pid 59700:tid 59712] [client 89.251.0.117:25431] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/imgareaselect/wp-login.php"] [unique_id "aelaGJXyGZJFeAIDWtlgHwAAAUo"]
[Thu Apr 23 07:30:33.265897 2026] [:error] [pid 25635:tid 25661] [client 89.251.0.148:53433] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aelaGcRxv6UsgRGKB3LlkAAAARY"]
[Thu Apr 23 07:30:33.828367 2026] [:error] [pid 42972:tid 43027] [client 89.251.0.120:38493] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/l10n/class-wp-translations-interface.php"] [unique_id "aelaGcOAb-3sOknsk4cmIQAAAEs"]
[Thu Apr 23 07:30:33.874044 2026] [:error] [pid 59700:tid 59726] [client 89.251.0.121:53021] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aelaGZXyGZJFeAIDWtlgNAAAAVg"]
[Thu Apr 23 07:30:34.681334 2026] [:error] [pid 59700:tid 59719] [client 89.251.0.125:46477] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aelaGpXyGZJFeAIDWtlgOwAAAVE"]
[Thu Apr 23 07:30:34.683116 2026] [:error] [pid 64967:tid 64970] [client 89.251.0.146:64611] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/about5.php"] [unique_id "aelaGoAV4GfOOdX8QzoXtQAAAYE"]
[Thu Apr 23 07:30:36.066083 2026] [:error] [pid 65000:tid 65047] [client 89.251.0.117:55063] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aelaHL6vRb9j6psK2ZahwAAAAg4"]
[Thu Apr 23 07:30:36.769082 2026] [:error] [pid 65000:tid 65050] [client 89.251.0.151:49733] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/db.php"] [unique_id "aelaHL6vRb9j6psK2ZahzAAAAhE"]
[Thu Apr 23 07:30:38.240448 2026] [:error] [pid 64967:tid 64973] [client 89.251.0.123:30607] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/dist/bypass.php"] [unique_id "aelaHoAV4GfOOdX8QzoXvgAAAYQ"]
[Thu Apr 23 07:30:39.537250 2026] [:error] [pid 64998:tid 65019] [client 89.251.0.117:60357] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aelaH4V5EysYcTLjmwj-CAAAAdE"]
[Thu Apr 23 07:30:39.897211 2026] [:error] [pid 64998:tid 65007] [client 89.251.0.129:39263] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/wp-conflg.php"] [unique_id "aelaH4V5EysYcTLjmwj-DgAAAcU"]
[Thu Apr 23 07:30:40.239450 2026] [:error] [pid 64998:tid 65002] [client 89.251.0.148:40921] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aelaIIV5EysYcTLjmwj-FgAAAcA"]
[Thu Apr 23 07:30:40.470615 2026] [:error] [pid 65000:tid 65056] [client 89.251.0.127:34317] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/wp-includes/assets/script-loader-packages.php"] [unique_id "aelaIL6vRb9j6psK2Zah-wAAAhc"]
[Thu Apr 23 07:30:41.168496 2026] [:error] [pid 42972:tid 43027] [client 89.251.0.132:33253] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/login.php"] [unique_id "aelaIcOAb-3sOknsk4cmMgAAAEs"]
[Thu Apr 23 07:30:41.225244 2026] [:error] [pid 64998:tid 65012] [client 89.251.0.129:61067] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aelaIYV5EysYcTLjmwj-JAAAAco"]
[Thu Apr 23 07:30:41.839450 2026] [:error] [pid 42972:tid 43037] [client 89.251.0.133:31457] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "aelaIcOAb-3sOknsk4cmOQAAAFU"]
[Thu Apr 23 07:30:43.302252 2026] [:error] [pid 59700:tid 59726] [client 89.251.0.125:45515] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aelaI5XyGZJFeAIDWtlgfQAAAVg"]
[Thu Apr 23 07:30:43.706315 2026] [:error] [pid 42971:tid 43004] [client 89.251.0.138:26047] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/chosen.php"] [unique_id "aelaIzEP2_5RswrH8bGxBAAAABI"]
[Thu Apr 23 07:30:44.412789 2026] [:error] [pid 25635:tid 25654] [client 89.251.0.138:33249] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aelaJMRxv6UsgRGKB3LlwwAAAQ8"]
[Thu Apr 23 07:30:45.048493 2026] [:error] [pid 42971:tid 43001] [client 89.251.0.119:54407] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/Cache/index.php"] [unique_id "aelaJTEP2_5RswrH8bGxDgAAAA8"]
[Thu Apr 23 07:30:45.176303 2026] [:error] [pid 42973:tid 43052] [client 89.251.0.136:32965] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aelaJW6I0QqmmmLTHE3eYQAAAIk"]
[Thu Apr 23 07:30:45.682207 2026] [:error] [pid 65000:tid 65048] [client 89.251.0.134:41937] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/about.php"] [unique_id "aelaJb6vRb9j6psK2ZaiKAAAAg8"]
[Thu Apr 23 07:30:45.747036 2026] [:error] [pid 65000:tid 65057] [client 89.251.0.145:24851] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aelaJb6vRb9j6psK2ZaiKgAAAhg"]
[Thu Apr 23 07:30:46.840444 2026] [:error] [pid 42973:tid 43060] [client 89.251.0.136:62155] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/about.php"] [unique_id "aelaJm6I0QqmmmLTHE3edgAAAJE"]
[Thu Apr 23 07:30:47.330488 2026] [:error] [pid 64998:tid 65018] [client 89.251.0.147:53699] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aelaJ4V5EysYcTLjmwj-SgAAAdA"]
[Thu Apr 23 07:30:47.679083 2026] [:error] [pid 43083:tid 43107] [client 89.251.0.133:25249] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/simi.php"] [unique_id "aelaJzC5hrvNXosL83LT1QAAANY"]
[Thu Apr 23 07:30:48.804472 2026] [:error] [pid 64967:tid 64971] [client 89.251.0.117:25907] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aelaKIAV4GfOOdX8QzoYBQAAAYI"]
[Thu Apr 23 07:30:49.204254 2026] [:error] [pid 42971:tid 42992] [client 89.251.0.121:62505] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/Text/index.php"] [unique_id "aelaKTEP2_5RswrH8bGxLgAAAAY"]
[Thu Apr 23 07:30:49.985424 2026] [:error] [pid 25635:tid 25660] [client 89.251.0.137:56971] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aelaKcRxv6UsgRGKB3Ll2AAAARU"]
[Thu Apr 23 07:30:50.211173 2026] [:error] [pid 65000:tid 65042] [client 89.251.0.116:34587] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/abcd.php"] [unique_id "aelaKr6vRb9j6psK2ZaiZAAAAgk"]
[Thu Apr 23 07:30:50.898317 2026] [:error] [pid 64998:tid 65003] [client 89.251.0.151:55653] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/rk2.php"] [unique_id "aelaKoV5EysYcTLjmwj-UwAAAcE"]
[Thu Apr 23 07:30:51.099356 2026] [:error] [pid 64967:tid 64986] [client 89.251.0.145:56533] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aelaK4AV4GfOOdX8QzoYEwAAAZE"]
[Thu Apr 23 07:30:51.652202 2026] [:error] [pid 64967:tid 64971] [client 89.251.0.126:39405] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/class-wp-widget-search-interpreter.php"] [unique_id "aelaK4AV4GfOOdX8QzoYFwAAAYI"]
[Thu Apr 23 07:30:53.281080 2026] [:error] [pid 43083:tid 43090] [client 89.251.0.150:23057] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-template-utils-other.php"] [unique_id "aelaLTC5hrvNXosL83LUCwAAAMU"]
[Thu Apr 23 07:30:54.346730 2026] [:error] [pid 65000:tid 65038] [client 89.251.0.131:42953] [client 89.251.0.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aelaLr6vRb9j6psK2ZaiuQAAAgU"]
[Thu Apr 23 07:30:54.712827 2026] [:error] [pid 64998:tid 65002] [client 89.251.0.146:24005] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sodium_compat/lib/widget-group.php"] [unique_id "aelaLoV5EysYcTLjmwj-fAAAAcA"]
[Thu Apr 23 07:30:55.063818 2026] [:error] [pid 65000:tid 65051] [client 89.251.0.124:34831] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aelaL76vRb9j6psK2ZaiwwAAAhI"]
[Thu Apr 23 07:30:55.740061 2026] [:error] [pid 43083:tid 43090] [client 89.251.0.121:32361] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jcrop/about.php"] [unique_id "aelaLzC5hrvNXosL83LUHAAAAMU"]
[Thu Apr 23 07:30:56.532435 2026] [:error] [pid 64998:tid 65002] [client 89.251.0.151:62177] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aelaMIV5EysYcTLjmwj-jAAAAcA"]
[Thu Apr 23 07:30:56.724098 2026] [:error] [pid 59700:tid 59712] [client 89.251.0.113:41395] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/chosen.php"] [unique_id "aelaMJXyGZJFeAIDWtlg5QAAAUo"]
[Thu Apr 23 07:30:58.750325 2026] [:error] [pid 64998:tid 65023] [client 89.251.0.127:60891] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aelaMoV5EysYcTLjmwj-rQAAAdU"]
[Thu Apr 23 07:31:00.057669 2026] [:error] [pid 64998:tid 65018] [client 89.251.0.127:55817] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aelaNIV5EysYcTLjmwj-yQAAAdA"]
[Thu Apr 23 07:31:01.321788 2026] [:error] [pid 64998:tid 65025] [client 89.251.0.148:33607] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/plugin.php"] [unique_id "aelaNYV5EysYcTLjmwj-2QAAAdc"]
[Thu Apr 23 07:31:01.817401 2026] [:error] [pid 43083:tid 43090] [client 89.251.0.150:22453] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aelaNTC5hrvNXosL83LUUwAAAMU"]
[Thu Apr 23 07:31:02.190540 2026] [:error] [pid 43083:tid 43102] [client 89.251.0.119:38689] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-scripts-query.php"] [unique_id "aelaNjC5hrvNXosL83LUVwAAANE"]
[Thu Apr 23 07:31:03.173452 2026] [:error] [pid 65000:tid 65039] [client 89.251.0.119:44933] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aelaN76vRb9j6psK2ZajUwAAAgY"]
[Thu Apr 23 07:31:03.822864 2026] [:error] [pid 65000:tid 65057] [client 89.251.0.141:20767] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/module.audio-license.php"] [unique_id "aelaN76vRb9j6psK2ZajYQAAAhg"]
[Thu Apr 23 07:31:05.412319 2026] [:error] [pid 64998:tid 65015] [client 89.251.0.143:39997] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aelaOYV5EysYcTLjmwj_AAAAAc0"]
[Thu Apr 23 07:31:06.451479 2026] [:error] [pid 65000:tid 65044] [client 89.251.0.147:43683] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-error-module.php"] [unique_id "aelaOr6vRb9j6psK2ZajtAAAAgs"]
[Thu Apr 23 07:31:07.640102 2026] [:error] [pid 25635:tid 25648] [client 89.251.0.128:62269] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aelaO8Rxv6UsgRGKB3LmCAAAAQk"]
[Thu Apr 23 07:31:07.967294 2026] [:error] [pid 64998:tid 65004] [client 89.251.0.125:47059] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/litespeed.php"] [unique_id "aelaO4V5EysYcTLjmwj_HAAAAcI"]
[Thu Apr 23 07:31:10.110485 2026] [:error] [pid 42971:tid 42997] [client 89.251.0.133:42051] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aelaPjEP2_5RswrH8bGxkwAAAAs"]
[Thu Apr 23 07:31:10.111377 2026] [:error] [pid 64967:tid 64987] [client 89.251.0.144:27887] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/alam.php"] [unique_id "aelaPoAV4GfOOdX8QzoYQwAAAZI"]
[Thu Apr 23 07:31:11.816645 2026] [proxy_fcgi:error] [pid 25635:tid 25658] [client 89.251.0.126:25755] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:31:12.154563 2026] [:error] [pid 64967:tid 64986] [client 89.251.0.129:47887] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/imagess.php"] [unique_id "aelaQIAV4GfOOdX8QzoYSgAAAZE"]
[Thu Apr 23 07:31:12.170650 2026] [:error] [pid 25635:tid 25652] [client 89.251.0.126:25755] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aelaQMRxv6UsgRGKB3LmHgAAAQ0"]
[Thu Apr 23 07:31:12.878538 2026] [:error] [pid 42972:tid 43037] [client 89.251.0.127:23183] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aelaQMOAb-3sOknsk4cm9QAAAFU"]
[Thu Apr 23 07:31:13.238639 2026] [:error] [pid 25635:tid 25642] [client 89.251.0.132:30481] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/default-filters-edit.php"] [unique_id "aelaQcRxv6UsgRGKB3LmKAAAAQM"]
[Thu Apr 23 07:31:14.365909 2026] [:error] [pid 64967:tid 64989] [client 89.251.0.141:30737] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aelaQoAV4GfOOdX8QzoYVgAAAZQ"]
[Thu Apr 23 07:31:15.280684 2026] [:error] [pid 65000:tid 65039] [client 89.251.0.121:44197] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aelaQ76vRb9j6psK2ZakQwAAAgY"]
[Thu Apr 23 07:31:15.946870 2026] [:error] [pid 42972:tid 43016] [client 89.251.0.142:59573] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/Auth/index.php"] [unique_id "aelaQ8OAb-3sOknsk4cnAwAAAEA"]
[Thu Apr 23 07:31:17.652382 2026] [:error] [pid 42972:tid 43031] [client 89.251.0.119:22647] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/theme.php"] [unique_id "aelaRcOAb-3sOknsk4cnCwAAAE8"]
[Thu Apr 23 07:31:17.960610 2026] [:error] [pid 65000:tid 65055] [client 89.251.0.144:43277] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/wp-2019.php"] [unique_id "aelaRb6vRb9j6psK2ZakhAAAAhY"]
[Thu Apr 23 07:31:18.975155 2026] [:error] [pid 65000:tid 65041] [client 89.251.0.123:47903] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aelaRr6vRb9j6psK2ZakjgAAAgg"]
[Thu Apr 23 07:31:19.118307 2026] [proxy_fcgi:error] [pid 59700:tid 59711] [client 89.251.0.119:50923] AH01071: Got error 'Primary script unknown'
[Thu Apr 23 07:31:19.453901 2026] [:error] [pid 59700:tid 59721] [client 89.251.0.119:50923] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/shell.php"] [unique_id "aelaR5XyGZJFeAIDWtlhfgAAAVM"]
[Thu Apr 23 07:31:20.155517 2026] [:error] [pid 64998:tid 65016] [client 89.251.0.124:28333] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/log.php"] [unique_id "aelaSIV5EysYcTLjmwj_gAAAAc4"]
[Thu Apr 23 07:31:20.380544 2026] [:error] [pid 42973:tid 43047] [client 89.251.0.123:50425] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-selective-refresh-library.php"] [unique_id "aelaSG6I0QqmmmLTHE3e-QAAAIQ"]
[Thu Apr 23 07:31:20.858383 2026] [:error] [pid 43083:tid 43104] [client 89.251.0.127:50377] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aelaSDC5hrvNXosL83LVBAAAANM"]
[Thu Apr 23 07:31:21.691719 2026] [:error] [pid 65000:tid 65052] [client 89.251.0.146:46817] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aelaSb6vRb9j6psK2ZakuAAAAhM"]
[Thu Apr 23 07:31:22.444509 2026] [:error] [pid 43083:tid 43095] [client 89.251.0.138:20991] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/aw.php"] [unique_id "aelaSjC5hrvNXosL83LVDwAAAMo"]
[Thu Apr 23 07:31:23.964078 2026] [:error] [pid 64998:tid 65017] [client 89.251.0.143:55771] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/library/wp-login.php"] [unique_id "aelaS4V5EysYcTLjmwj_qQAAAc8"]
[Thu Apr 23 07:31:24.519037 2026] [:error] [pid 59700:tid 59721] [client 89.251.0.113:63475] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/db.php"] [unique_id "aelaTJXyGZJFeAIDWtlhtAAAAVM"]
[Thu Apr 23 07:31:25.107310 2026] [:error] [pid 65000:tid 65047] [client 89.251.0.128:49509] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/interactivity-api/about.php"] [unique_id "aelaTb6vRb9j6psK2Zak-gAAAg4"]
[Thu Apr 23 07:31:25.563579 2026] [:error] [pid 59700:tid 59703] [client 89.251.0.136:45503] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/install.php"] [unique_id "aelaTZXyGZJFeAIDWtlhuQAAAUE"]
[Thu Apr 23 07:31:27.509738 2026] [:error] [pid 42972:tid 43027] [client 89.251.0.143:30025] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aelaT8OAb-3sOknsk4cnMQAAAEs"]
[Thu Apr 23 07:31:28.824787 2026] [:error] [pid 43083:tid 43093] [client 89.251.0.146:44805] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aelaUDC5hrvNXosL83LVUgAAAMg"]
[Thu Apr 23 07:31:29.929770 2026] [:error] [pid 65000:tid 65053] [client 89.251.0.117:51381] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/wp-2019.php"] [unique_id "aelaUb6vRb9j6psK2ZalWgAAAhQ"]
[Thu Apr 23 07:31:30.315128 2026] [:error] [pid 65000:tid 65037] [client 89.251.0.141:57811] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/template-less.php"] [unique_id "aelaUr6vRb9j6psK2ZalXwAAAgQ"]
[Thu Apr 23 07:31:30.557794 2026] [:error] [pid 65000:tid 65045] [client 89.251.0.117:20995] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/info.php"] [unique_id "aelaUr6vRb9j6psK2ZalYQAAAgw"]
[Thu Apr 23 07:31:31.465529 2026] [:error] [pid 65000:tid 65053] [client 89.251.0.116:60473] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aelaU76vRb9j6psK2ZalaAAAAhQ"]
[Thu Apr 23 07:31:31.820639 2026] [:error] [pid 43083:tid 43089] [client 89.251.0.124:51539] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/log.php"] [unique_id "aelaUzC5hrvNXosL83LVcAAAAMQ"]
[Thu Apr 23 07:31:33.738043 2026] [:error] [pid 43083:tid 43088] [client 89.251.0.133:58875] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-runtime-num.php"] [unique_id "aelaVTC5hrvNXosL83LVhgAAAMM"]
[Thu Apr 23 07:31:34.508352 2026] [:error] [pid 64967:tid 64971] [client 89.251.0.126:55479] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/script-loader-react-refresh-entry.min-object.php"] [unique_id "aelaVoAV4GfOOdX8QzoYjgAAAYI"]
[Thu Apr 23 07:31:35.008532 2026] [:error] [pid 65000:tid 65042] [client 89.251.0.117:37433] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/min.php"] [unique_id "aelaV76vRb9j6psK2ZalhgAAAgk"]
[Thu Apr 23 07:31:35.316041 2026] [:error] [pid 42971:tid 42986] [client 89.251.0.113:64881] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/aw.php"] [unique_id "aelaVzEP2_5RswrH8bGx_QAAAAA"]
[Thu Apr 23 07:31:35.682850 2026] [:error] [pid 65000:tid 65050] [client 89.251.0.139:51987] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aelaV76vRb9j6psK2ZaliwAAAhE"]
[Thu Apr 23 07:31:37.153396 2026] [:error] [pid 42972:tid 43034] [client 89.251.0.145:32333] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/file.php"] [unique_id "aelaWcOAb-3sOknsk4cnXAAAAFI"]
[Thu Apr 23 07:31:37.535121 2026] [:error] [pid 42971:tid 42989] [client 89.251.0.125:65153] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/db.php"] [unique_id "aelaWTEP2_5RswrH8bGyJQAAAAM"]
[Thu Apr 23 07:31:38.211663 2026] [:error] [pid 64998:tid 65019] [client 89.251.0.134:51621] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aelaWoV5EysYcTLjmwgAZQAAAdE"]
[Thu Apr 23 07:31:38.319742 2026] [:error] [pid 43083:tid 43107] [client 89.251.0.141:37503] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/install.php"] [unique_id "aelaWjC5hrvNXosL83LVzQAAANY"]
[Thu Apr 23 07:31:39.267613 2026] [:error] [pid 42971:tid 42986] [client 89.251.0.129:53727] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/load.php"] [unique_id "aelaWzEP2_5RswrH8bGyPQAAAAA"]
[Thu Apr 23 07:31:39.999707 2026] [:error] [pid 42971:tid 43002] [client 89.251.0.133:23027] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aelaWzEP2_5RswrH8bGySAAAABA"]
[Thu Apr 23 07:31:40.462398 2026] [:error] [pid 64998:tid 65007] [client 89.251.0.113:47109] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/install.php"] [unique_id "aelaXIV5EysYcTLjmwgAegAAAcU"]
[Thu Apr 23 07:31:41.742301 2026] [:error] [pid 64998:tid 65007] [client 89.251.0.131:62715] [client 89.251.0.131] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aelaXYV5EysYcTLjmwgAiAAAAcU"]
[Thu Apr 23 07:31:41.865963 2026] [:error] [pid 64998:tid 65009] [client 89.251.0.125:30761] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/dedi1.php"] [unique_id "aelaXYV5EysYcTLjmwgAjQAAAcc"]
[Thu Apr 23 07:31:44.541463 2026] [:error] [pid 43083:tid 43099] [client 89.251.0.151:49577] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/template-less.php"] [unique_id "aelaYDC5hrvNXosL83LV9gAAAM4"]
[Thu Apr 23 07:31:45.273210 2026] [:error] [pid 59700:tid 59704] [client 89.251.0.143:61643] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/alfa-rex.php"] [unique_id "aelaYZXyGZJFeAIDWtliLwAAAUI"]
[Thu Apr 23 07:31:45.573626 2026] [:error] [pid 64998:tid 65023] [client 89.251.0.139:48763] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aelaYYV5EysYcTLjmwgArQAAAdU"]
[Thu Apr 23 07:31:46.661532 2026] [:error] [pid 42971:tid 43000] [client 89.251.0.148:45415] [client 89.251.0.148] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aelaYjEP2_5RswrH8bGylwAAAA4"]
[Thu Apr 23 07:31:48.059081 2026] [:error] [pid 65000:tid 65032] [client 89.251.0.121:30349] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aelaZL6vRb9j6psK2Zal2AAAAgM"]
[Thu Apr 23 07:31:49.144008 2026] [:error] [pid 43083:tid 43094] [client 89.251.0.139:29361] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aelaZTC5hrvNXosL83LWHQAAAMk"]
[Thu Apr 23 07:31:49.896036 2026] [:error] [pid 65000:tid 65032] [client 89.251.0.132:54391] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aelaZb6vRb9j6psK2Zal6QAAAgM"]
[Thu Apr 23 07:31:51.272811 2026] [:error] [pid 59700:tid 59714] [client 89.251.0.142:58039] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/min.php"] [unique_id "aelaZ5XyGZJFeAIDWtliTAAAAUw"]
[Thu Apr 23 07:31:52.497192 2026] [:error] [pid 64998:tid 65006] [client 89.251.0.119:63791] [client 89.251.0.119] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/wp-conflg.php"] [unique_id "aelaaIV5EysYcTLjmwgA3wAAAcQ"]
[Thu Apr 23 07:31:56.690967 2026] [:error] [pid 43083:tid 43089] [client 89.251.0.137:39397] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/file.php"] [unique_id "aelabDC5hrvNXosL83LWTAAAAMQ"]
[Thu Apr 23 07:31:58.252973 2026] [:error] [pid 64998:tid 65007] [client 89.251.0.115:39577] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/about.php"] [unique_id "aelaboV5EysYcTLjmwgBCgAAAcU"]
[Thu Apr 23 07:31:59.112439 2026] [:error] [pid 65000:tid 65039] [client 89.251.0.151:36355] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/system.php"] [unique_id "aelab76vRb9j6psK2ZamKwAAAgY"]
[Thu Apr 23 07:32:00.744456 2026] [:error] [pid 64998:tid 65005] [client 89.251.0.123:41685] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aelacIV5EysYcTLjmwgBLwAAAcM"]
[Thu Apr 23 07:32:02.765526 2026] [:error] [pid 65000:tid 65055] [client 89.251.0.141:64849] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/load.php"] [unique_id "aelacr6vRb9j6psK2ZamVwAAAhY"]
[Thu Apr 23 07:32:02.790429 2026] [:error] [pid 65000:tid 65048] [client 89.251.0.139:60979] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aelacr6vRb9j6psK2ZamWAAAAg8"]
[Thu Apr 23 07:32:03.376542 2026] [:error] [pid 25635:tid 25652] [client 89.251.0.136:25631] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/chosen.php"] [unique_id "aelac8Rxv6UsgRGKB3LmsAAAAQ0"]
[Thu Apr 23 07:32:03.412874 2026] [:error] [pid 65000:tid 65043] [client 89.251.0.135:35333] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aelac76vRb9j6psK2ZamYgAAAgo"]
[Thu Apr 23 07:32:04.019322 2026] [:error] [pid 42972:tid 43032] [client 89.251.0.115:27249] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aeladMOAb-3sOknsk4cn6wAAAFA"]
[Thu Apr 23 07:32:04.995148 2026] [:error] [pid 25635:tid 25663] [client 89.251.0.114:44585] [client 89.251.0.114] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-theme-float.php"] [unique_id "aeladMRxv6UsgRGKB3LmswAAARg"]
[Thu Apr 23 07:32:05.299693 2026] [:error] [pid 65000:tid 65031] [client 89.251.0.121:29239] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/src/Response/about.php"] [unique_id "aeladb6vRb9j6psK2ZamfwAAAgI"]
[Thu Apr 23 07:32:06.629254 2026] [:error] [pid 42971:tid 42991] [client 89.251.0.150:42407] [client 89.251.0.150] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-style.php"] [unique_id "aeladjEP2_5RswrH8bGzBAAAAAU"]
[Thu Apr 23 07:32:08.005565 2026] [:error] [pid 42972:tid 43040] [client 89.251.0.125:52911] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/autoload_classmap.php"] [unique_id "aelaeMOAb-3sOknsk4cn_gAAAFg"]
[Thu Apr 23 07:32:08.543791 2026] [:error] [pid 25635:tid 25661] [client 89.251.0.138:21363] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ms-pie.php"] [unique_id "aelaeMRxv6UsgRGKB3LmvgAAARY"]
[Thu Apr 23 07:32:09.721580 2026] [:error] [pid 43083:tid 43107] [client 89.251.0.126:54441] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/admin.php"] [unique_id "aelaeTC5hrvNXosL83LWpgAAANY"]
[Thu Apr 23 07:32:10.493726 2026] [:error] [pid 42972:tid 43025] [client 89.251.0.120:61511] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/autoload_classmap.php"] [unique_id "aelaesOAb-3sOknsk4coCAAAAEk"]
[Thu Apr 23 07:32:10.675806 2026] [:error] [pid 42971:tid 43003] [client 89.251.0.115:23249] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aelaejEP2_5RswrH8bGzLAAAABE"]
[Thu Apr 23 07:32:11.279693 2026] [:error] [pid 59700:tid 59702] [client 89.251.0.128:24765] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/db.php"] [unique_id "aelae5XyGZJFeAIDWtlisgAAAUA"]
[Thu Apr 23 07:32:11.998069 2026] [:error] [pid 42972:tid 43031] [client 89.251.0.134:26327] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/nav-menu.php"] [unique_id "aelae8OAb-3sOknsk4coDwAAAE8"]
[Thu Apr 23 07:32:12.625861 2026] [:error] [pid 65000:tid 65031] [client 89.251.0.134:30143] [client 89.251.0.134] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/user.php"] [unique_id "aelafL6vRb9j6psK2Zam2gAAAgI"]
[Thu Apr 23 07:32:15.317859 2026] [:error] [pid 25635:tid 25655] [client 89.251.0.127:49491] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/system.php"] [unique_id "aelaf8Rxv6UsgRGKB3Lm0gAAARA"]
[Thu Apr 23 07:32:16.446752 2026] [:error] [pid 43083:tid 43101] [client 89.251.0.145:49125] [client 89.251.0.145] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-bindings/about.php"] [unique_id "aelagDC5hrvNXosL83LW0wAAANA"]
[Thu Apr 23 07:32:17.465355 2026] [:error] [pid 65000:tid 65053] [client 89.251.0.126:28133] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/dist/script-modules/block-library/search/about.php"] [unique_id "aelagb6vRb9j6psK2ZanQQAAAhQ"]
[Thu Apr 23 07:32:18.200136 2026] [:error] [pid 65000:tid 65039] [client 89.251.0.133:54213] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-upload-control-cookie.php"] [unique_id "aelagr6vRb9j6psK2ZanUQAAAgY"]
[Thu Apr 23 07:32:18.298094 2026] [:error] [pid 42971:tid 43008] [client 89.251.0.124:44543] [client 89.251.0.124] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-cropped-image-control.php"] [unique_id "aelagjEP2_5RswrH8bGzgQAAABY"]
[Thu Apr 23 07:32:19.055756 2026] [:error] [pid 65000:tid 65043] [client 89.251.0.147:24091] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/simi.php"] [unique_id "aelag76vRb9j6psK2ZanXAAAAgo"]
[Thu Apr 23 07:32:19.261532 2026] [:error] [pid 59700:tid 59718] [client 89.251.0.128:61117] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/ultra.php"] [unique_id "aelag5XyGZJFeAIDWtlizAAAAVA"]
[Thu Apr 23 07:32:19.824299 2026] [:error] [pid 42971:tid 43001] [client 89.251.0.151:46377] [client 89.251.0.151] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class-wp-taxonomy-sample.php"] [unique_id "aelagzEP2_5RswrH8bGzkAAAAA8"]
[Thu Apr 23 07:32:20.514692 2026] [:error] [pid 59700:tid 59709] [client 89.251.0.140:38715] [client 89.251.0.140] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.140, incrementing brute counter"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aelahJXyGZJFeAIDWtli0wAAAUc"]
[Thu Apr 23 07:32:21.336255 2026] [:error] [pid 59700:tid 59722] [client 89.251.0.140:38715] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/preferences/wp-login.php"] [unique_id "aelahZXyGZJFeAIDWtli2gAAAVQ"]
[Thu Apr 23 07:32:21.540519 2026] [:error] [pid 59700:tid 59702] [client 89.251.0.127:27319] [client 89.251.0.127] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/src/Response/about.php"] [unique_id "aelahZXyGZJFeAIDWtli2wAAAUA"]
[Thu Apr 23 07:32:23.251575 2026] [:error] [pid 43083:tid 43107] [client 89.251.0.138:28519] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/media-text/index.php"] [unique_id "aelahzC5hrvNXosL83LW8gAAANY"]
[Thu Apr 23 07:32:24.090207 2026] [:error] [pid 42972:tid 43030] [client 89.251.0.126:30235] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/phpmailer/phpmailer.php"] [unique_id "aelaiMOAb-3sOknsk4coLQAAAE4"]
[Thu Apr 23 07:32:24.823314 2026] [:error] [pid 25635:tid 25643] [client 89.251.0.126:46835] [client 89.251.0.126] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ms-pie.php"] [unique_id "aelaiMRxv6UsgRGKB3Lm6QAAAQQ"]
[Thu Apr 23 07:32:27.551290 2026] [:error] [pid 59700:tid 59708] [client 89.251.0.138:40543] [client 89.251.0.138] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/latest-comments/template-loader.php"] [unique_id "aelai5XyGZJFeAIDWtli_wAAAUY"]
[Thu Apr 23 07:32:27.950935 2026] [:error] [pid 25635:tid 25643] [client 89.251.0.147:33383] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/html-api/index.php"] [unique_id "aelai8Rxv6UsgRGKB3Lm-QAAAQQ"]
[Thu Apr 23 07:32:29.348677 2026] [:error] [pid 42972:tid 43039] [client 89.251.0.116:37111] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/nav-menu.php"] [unique_id "aelajcOAb-3sOknsk4coSwAAAFc"]
[Thu Apr 23 07:32:30.405355 2026] [:error] [pid 64998:tid 65003] [client 89.251.0.113:53257] [client 89.251.0.113] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/user.php"] [unique_id "aelajoV5EysYcTLjmwgCdQAAAcE"]
[Thu Apr 23 07:32:32.623361 2026] [:error] [pid 59700:tid 59717] [client 89.251.0.120:29981] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/nextpage/index.php"] [unique_id "aelakJXyGZJFeAIDWtljNgAAAU8"]
[Thu Apr 23 07:32:34.890497 2026] [:error] [pid 59700:tid 59713] [client 89.251.0.115:48379] [client 89.251.0.115] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/link-template-firewall.php"] [unique_id "aelakpXyGZJFeAIDWtljWQAAAUs"]
[Thu Apr 23 07:32:36.183015 2026] [:error] [pid 59700:tid 59705] [client 89.251.0.132:51001] [client 89.251.0.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/dist/script-modules/block-library/search/about.php"] [unique_id "aelalJXyGZJFeAIDWtljZAAAAUM"]
[Thu Apr 23 07:32:37.126411 2026] [:error] [pid 64998:tid 65009] [client 89.251.0.133:48109] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/class-wp-customize-cropped-image-control.php"] [unique_id "aelalYV5EysYcTLjmwgC6QAAAcc"]
[Thu Apr 23 07:32:37.780215 2026] [:error] [pid 64967:tid 64972] [client 89.251.0.116:50439] [client 89.251.0.116] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/sitemaps/providers/ultra.php"] [unique_id "aelalYAV4GfOOdX8QzoaGwAAAYM"]
[Thu Apr 23 07:32:38.853957 2026] [:error] [pid 65000:tid 65048] [client 89.251.0.146:20297] [client 89.251.0.146] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 89.251.0.146, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/classic-editor/wp-login.php"] [unique_id "aelalr6vRb9j6psK2ZaoQwAAAg8"]
[Thu Apr 23 07:32:39.494361 2026] [:error] [pid 65000:tid 65038] [client 89.251.0.146:20297] [client 89.251.0.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/preferences/wp-login.php"] [unique_id "aelal76vRb9j6psK2ZaoTQAAAgU"]
[Thu Apr 23 07:32:40.185121 2026] [:error] [pid 25635:tid 25657] [client 89.251.0.141:52577] [client 89.251.0.141] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/media-text/index.php"] [unique_id "aelamMRxv6UsgRGKB3LnIgAAARI"]
[Thu Apr 23 07:32:40.877916 2026] [:error] [pid 42973:tid 43053] [client 89.251.0.139:65083] [client 89.251.0.139] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "aelamG6I0QqmmmLTHE3f2QAAAIo"]
[Thu Apr 23 07:32:40.921328 2026] [:error] [pid 59700:tid 59702] [client 89.251.0.120:45353] [client 89.251.0.120] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/phpmailer/phpmailer.php"] [unique_id "aelamJXyGZJFeAIDWtljjgAAAUA"]
[Thu Apr 23 07:32:41.619960 2026] [:error] [pid 59700:tid 59712] [client 89.251.0.135:26961] [client 89.251.0.135] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/src/Decode/HTML/sitemaps.php"] [unique_id "aelamZXyGZJFeAIDWtljlAAAAUo"]
[Thu Apr 23 07:32:42.369372 2026] [:error] [pid 43083:tid 43099] [client 89.251.0.143:46795] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/mer_gagal.php"] [unique_id "aelamjC5hrvNXosL83LXZgAAAM4"]
[Thu Apr 23 07:32:43.167069 2026] [:error] [pid 64998:tid 65025] [client 89.251.0.123:50955] [client 89.251.0.123] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/html-api/wp-login.php"] [unique_id "aelam4V5EysYcTLjmwgDfwAAAdc"]
[Thu Apr 23 07:32:43.834406 2026] [:error] [pid 59700:tid 59723] [client 89.251.0.144:47981] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/latest-comments/template-loader.php"] [unique_id "aelam5XyGZJFeAIDWtljswAAAVU"]
[Thu Apr 23 07:32:45.049881 2026] [:error] [pid 64998:tid 65002] [client 89.251.0.142:49927] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/alfa-rex.php"] [unique_id "aelanYV5EysYcTLjmwgDpAAAAcA"]
[Thu Apr 23 07:32:46.579321 2026] [:error] [pid 64998:tid 65017] [client 89.251.0.147:51007] [client 89.251.0.147] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/Core32.php"] [unique_id "aelanoV5EysYcTLjmwgDyAAAAc8"]
[Thu Apr 23 07:32:47.754651 2026] [:error] [pid 65000:tid 65047] [client 89.251.0.140:33909] [client 89.251.0.140] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/nextpage/index.php"] [unique_id "aelan76vRb9j6psK2Zao4AAAAg4"]
[Thu Apr 23 07:32:49.504930 2026] [:error] [pid 64998:tid 65026] [client 89.251.0.144:25417] [client 89.251.0.144] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/link-template-firewall.php"] [unique_id "aelaoYV5EysYcTLjmwgEIQAAAdg"]
[Thu Apr 23 07:32:51.241639 2026] [:error] [pid 42971:tid 42997] [client 89.251.0.142:23721] [client 89.251.0.142] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/wp-conflg.php"] [unique_id "aelaozEP2_5RswrH8bG0jwAAAAs"]
[Thu Apr 23 07:32:53.502891 2026] [:error] [pid 65000:tid 65043] [client 89.251.0.137:30929] [client 89.251.0.137] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/index.php"] [unique_id "aelapb6vRb9j6psK2ZapHgAAAgo"]
[Thu Apr 23 07:32:54.236979 2026] [:error] [pid 65000:tid 65029] [client 89.251.0.117:28461] [client 89.251.0.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "aelapr6vRb9j6psK2ZapKQAAAgA"]
[Thu Apr 23 07:32:56.830485 2026] [:error] [pid 43083:tid 43096] [client 89.251.0.128:24513] [client 89.251.0.128] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/wp-conflg.php"] [unique_id "aelaqDC5hrvNXosL83LXuQAAAMs"]
[Thu Apr 23 07:32:58.155804 2026] [:error] [pid 64998:tid 65003] [client 89.251.0.136:41725] [client 89.251.0.136] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/src/Decode/HTML/sitemaps.php"] [unique_id "aelaqoV5EysYcTLjmwgE5wAAAcE"]
[Thu Apr 23 07:32:59.782725 2026] [:error] [pid 43083:tid 43107] [client 89.251.0.143:48867] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/mer_gagal.php"] [unique_id "aelaqzC5hrvNXosL83LXxwAAANY"]
[Thu Apr 23 07:33:00.636132 2026] [:error] [pid 64998:tid 65024] [client 89.251.0.125:48983] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/html-api/wp-login.php"] [unique_id "aelarIV5EysYcTLjmwgFGwAAAdY"]
[Thu Apr 23 07:33:03.331375 2026] [:error] [pid 65000:tid 65042] [client 89.251.0.121:46033] [client 89.251.0.121] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/alfa-rex.php"] [unique_id "aelar76vRb9j6psK2ZapywAAAgk"]
[Thu Apr 23 07:33:04.828847 2026] [:error] [pid 65000:tid 65040] [client 89.251.0.143:33369] [client 89.251.0.143] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/Core32.php"] [unique_id "aelasL6vRb9j6psK2Zap5QAAAgc"]
[Thu Apr 23 07:33:08.733918 2026] [:error] [pid 25635:tid 25655] [client 89.251.0.133:38835] [client 89.251.0.133] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/wp-conflg.php"] [unique_id "aelatMRxv6UsgRGKB3LnRwAAARA"]
[Thu Apr 23 07:33:11.235328 2026] [:error] [pid 43083:tid 43090] [client 89.251.0.129:63629] [client 89.251.0.129] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/tinymce/skins/wordpress/images/index.php"] [unique_id "aelatzC5hrvNXosL83LYRgAAAMU"]
[Thu Apr 23 07:33:12.117935 2026] [:error] [pid 64967:tid 64970] [client 89.251.0.125:39961] [client 89.251.0.125] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/library/index.php"] [unique_id "aelauIAV4GfOOdX8QzoaRQAAAYE"]
[Thu Apr 23 07:33:33.131700 2026] [autoindex:error] [pid 65000:tid 65030] [client 89.251.0.133:62787] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 07:33:53.297022 2026] [autoindex:error] [pid 64998:tid 65013] [client 89.251.0.121:26029] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Thu Apr 23 20:50:33.687227 2026] [:error] [pid 59700:tid 59711] [client 23.100.53.213:11651] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aeoVmZXyGZJFeAIDWtkhnwAAAUk"]
[Thu Apr 23 20:50:34.615330 2026] [:error] [pid 65000:tid 65041] [client 23.100.53.213:11765] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aeoVmr6vRb9j6psK2ZZriQAAAgg"]
[Thu Apr 23 20:50:35.353424 2026] [:error] [pid 42971:tid 42999] [client 23.100.53.213:11754] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aeoVmzEP2_5RswrH8bEmXwAAAA0"]
[Thu Apr 23 20:50:36.264328 2026] [:error] [pid 64998:tid 65006] [client 23.100.53.213:11664] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aeoVnIV5EysYcTLjmwhoWgAAAcQ"]
[Thu Apr 23 20:50:36.957440 2026] [:error] [pid 65000:tid 65032] [client 23.100.53.213:11656] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/term.php"] [unique_id "aeoVnL6vRb9j6psK2ZZrlAAAAgM"]
[Thu Apr 23 20:50:37.757862 2026] [:error] [pid 42973:tid 43049] [client 23.100.53.213:11766] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/term.php"] [unique_id "aeoVnW6I0QqmmmLTHE0PVQAAAIY"]
[Thu Apr 23 20:50:38.478874 2026] [:error] [pid 65000:tid 65049] [client 23.100.53.213:11767] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/term.php"] [unique_id "aeoVnr6vRb9j6psK2ZZrnwAAAhA"]
[Thu Apr 23 20:50:39.016751 2026] [:error] [pid 42973:tid 43051] [client 23.100.53.213:11750] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/term.php"] [unique_id "aeoVn26I0QqmmmLTHE0PWQAAAIg"]
[Thu Apr 23 20:50:39.912076 2026] [:error] [pid 42973:tid 43067] [client 23.100.53.213:11760] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aeoVn26I0QqmmmLTHE0PWwAAAJg"]
[Thu Apr 23 20:50:40.628118 2026] [:error] [pid 65000:tid 65040] [client 23.100.53.213:11719] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aeoVoL6vRb9j6psK2ZZrsgAAAgc"]
[Thu Apr 23 20:50:41.569924 2026] [:error] [pid 42972:tid 43018] [client 23.100.53.213:11739] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aeoVocOAb-3sOknsk4ctcgAAAEI"]
[Thu Apr 23 20:50:42.424108 2026] [:error] [pid 42972:tid 43029] [client 23.100.53.213:11749] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aeoVosOAb-3sOknsk4ctdQAAAE0"]
[Thu Apr 23 20:50:43.083352 2026] [:error] [pid 43083:tid 43089] [client 23.100.53.213:11758] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "aeoVozC5hrvNXosL83JzEQAAAMQ"]
[Thu Apr 23 20:50:43.713906 2026] [:error] [pid 46953:tid 46958] [client 23.100.53.213:11772] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "aeoVo0nlpdHh-P6wKboytAAAAkI"]
[Thu Apr 23 20:50:44.248642 2026] [:error] [pid 65000:tid 65040] [client 23.100.53.213:11659] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "aeoVpL6vRb9j6psK2ZZrwQAAAgc"]
[Thu Apr 23 20:50:44.803922 2026] [:error] [pid 59700:tid 59706] [client 23.100.53.213:11657] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "aeoVpJXyGZJFeAIDWtkhpgAAAUQ"]
[Thu Apr 23 20:50:45.348052 2026] [:error] [pid 46953:tid 46980] [client 23.100.53.213:11667] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aeoVpUnlpdHh-P6wKboytQAAAlc"]
[Thu Apr 23 20:50:45.915375 2026] [:error] [pid 65000:tid 65056] [client 23.100.53.213:11775] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aeoVpb6vRb9j6psK2ZZrxQAAAhc"]
[Thu Apr 23 20:50:46.492301 2026] [:error] [pid 46953:tid 46959] [client 23.100.53.213:11677] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aeoVpknlpdHh-P6wKboyuAAAAkM"]
[Thu Apr 23 20:50:47.045931 2026] [:error] [pid 64998:tid 65018] [client 23.100.53.213:11663] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aeoVp4V5EysYcTLjmwhoZQAAAdA"]
[Thu Apr 23 20:50:47.604839 2026] [:error] [pid 64998:tid 65010] [client 23.100.53.213:11742] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aeoVp4V5EysYcTLjmwhoawAAAcg"]
[Thu Apr 23 20:50:48.252949 2026] [:error] [pid 64998:tid 65023] [client 23.100.53.213:11650] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aeoVqIV5EysYcTLjmwhocgAAAdU"]
[Thu Apr 23 20:50:48.819553 2026] [:error] [pid 64998:tid 65013] [client 23.100.53.213:11759] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aeoVqIV5EysYcTLjmwhoeQAAAcs"]
[Thu Apr 23 20:50:49.409403 2026] [:error] [pid 64998:tid 65023] [client 23.100.53.213:11654] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aeoVqYV5EysYcTLjmwhofQAAAdU"]
[Thu Apr 23 20:50:49.956168 2026] [:error] [pid 64998:tid 65011] [client 23.100.53.213:11721] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aeoVqYV5EysYcTLjmwhogAAAAck"]
[Thu Apr 23 20:50:50.484387 2026] [:error] [pid 64998:tid 65006] [client 23.100.53.213:11716] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aeoVqoV5EysYcTLjmwhohAAAAcQ"]
[Thu Apr 23 20:50:51.025309 2026] [:error] [pid 42973:tid 43056] [client 23.100.53.213:11771] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aeoVq26I0QqmmmLTHE0PaAAAAI0"]
[Thu Apr 23 20:50:51.698451 2026] [:error] [pid 43083:tid 43100] [client 23.100.53.213:11680] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aeoVqzC5hrvNXosL83JzFgAAAM8"]
[Thu Apr 23 20:50:52.409657 2026] [:error] [pid 43083:tid 43088] [client 23.100.53.213:11761] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "aeoVrDC5hrvNXosL83JzGQAAAMM"]
[Thu Apr 23 20:50:52.964167 2026] [:error] [pid 42973:tid 43064] [client 23.100.53.213:11648] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "aeoVrG6I0QqmmmLTHE0PcQAAAJU"]
[Thu Apr 23 20:50:53.579395 2026] [:error] [pid 42971:tid 43006] [client 23.100.53.213:11756] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "aeoVrTEP2_5RswrH8bEmYgAAABQ"]
[Thu Apr 23 20:50:54.230682 2026] [:error] [pid 64998:tid 65013] [client 23.100.53.213:11732] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "aeoVroV5EysYcTLjmwhoiAAAAcs"]
[Thu Apr 23 20:50:54.820926 2026] [:error] [pid 59700:tid 59716] [client 23.100.53.213:11598] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog-header.php"] [unique_id "aeoVrpXyGZJFeAIDWtkhrgAAAU4"]
[Thu Apr 23 20:50:55.512940 2026] [:error] [pid 59700:tid 59704] [client 23.100.53.213:11768] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog-header.php"] [unique_id "aeoVr5XyGZJFeAIDWtkhtQAAAUI"]
[Thu Apr 23 20:50:56.093515 2026] [:error] [pid 64998:tid 65018] [client 23.100.53.213:11584] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog-header.php"] [unique_id "aeoVsIV5EysYcTLjmwhojgAAAdA"]
[Thu Apr 23 20:50:56.716165 2026] [:error] [pid 65000:tid 65051] [client 23.100.53.213:11692] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog-header.php"] [unique_id "aeoVsL6vRb9j6psK2ZZr3QAAAhI"]
[Thu Apr 23 20:50:57.605539 2026] [:error] [pid 65000:tid 65048] [client 23.100.53.213:11733] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bmi.php"] [unique_id "aeoVsb6vRb9j6psK2ZZr4wAAAg8"]
[Thu Apr 23 20:50:58.893136 2026] [:error] [pid 65000:tid 65040] [client 23.100.53.213:11741] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bmi.php"] [unique_id "aeoVsr6vRb9j6psK2ZZr7gAAAgc"]
[Thu Apr 23 20:51:00.155523 2026] [:error] [pid 42973:tid 43056] [client 23.100.53.213:11730] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bmi.php"] [unique_id "aeoVtG6I0QqmmmLTHE0PcwAAAI0"]
[Thu Apr 23 20:51:01.314427 2026] [:error] [pid 42973:tid 43044] [client 23.100.53.213:11711] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bmi.php"] [unique_id "aeoVtW6I0QqmmmLTHE0PdgAAAIE"]
[Thu Apr 23 20:51:02.313232 2026] [:error] [pid 64998:tid 65025] [client 23.100.53.213:11725] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "aeoVtoV5EysYcTLjmwhonQAAAdc"]
[Thu Apr 23 20:51:03.306104 2026] [:error] [pid 65000:tid 65047] [client 23.100.53.213:11774] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "aeoVt76vRb9j6psK2ZZsAwAAAg4"]
[Thu Apr 23 20:51:03.889277 2026] [:error] [pid 65000:tid 65044] [client 23.100.53.213:11747] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "aeoVt76vRb9j6psK2ZZsCwAAAgs"]
[Thu Apr 23 20:51:04.528841 2026] [:error] [pid 64998:tid 65021] [client 23.100.53.213:11720] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "aeoVuIV5EysYcTLjmwhopgAAAdM"]
[Thu Apr 23 20:51:05.113770 2026] [:error] [pid 64998:tid 65023] [client 23.100.53.213:11593] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeoVuYV5EysYcTLjmwhoqQAAAdU"]
[Thu Apr 23 20:51:05.659208 2026] [:error] [pid 42973:tid 43048] [client 23.100.53.213:11612] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeoVuW6I0QqmmmLTHE0PgwAAAIU"]
[Thu Apr 23 20:51:06.231309 2026] [:error] [pid 64998:tid 65019] [client 23.100.53.213:11686] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeoVuoV5EysYcTLjmwhorQAAAdE"]
[Thu Apr 23 20:51:06.795408 2026] [:error] [pid 64998:tid 65006] [client 23.100.53.213:11718] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/radio.php"] [unique_id "aeoVuoV5EysYcTLjmwhosgAAAcQ"]
[Thu Apr 23 20:51:07.572906 2026] [:error] [pid 64998:tid 65015] [client 23.100.53.213:11713] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "aeoVu4V5EysYcTLjmwhouAAAAc0"]
[Thu Apr 23 20:51:08.150893 2026] [:error] [pid 65000:tid 65032] [client 23.100.53.213:11597] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "aeoVvL6vRb9j6psK2ZZsFwAAAgM"]
[Thu Apr 23 20:51:08.744423 2026] [:error] [pid 42972:tid 43024] [client 23.100.53.213:11706] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "aeoVvMOAb-3sOknsk4ctlAAAAEg"]
[Thu Apr 23 20:51:09.327943 2026] [:error] [pid 65000:tid 65039] [client 23.100.53.213:11769] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-png.php"] [unique_id "aeoVvb6vRb9j6psK2ZZsHgAAAgY"]
[Thu Apr 23 20:51:09.898117 2026] [:error] [pid 43083:tid 43097] [client 23.100.53.213:11729] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "aeoVvTC5hrvNXosL83JzIwAAAMw"]
[Thu Apr 23 20:51:10.640962 2026] [:error] [pid 65000:tid 65042] [client 23.100.53.213:11714] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "aeoVvr6vRb9j6psK2ZZsJgAAAgk"]
[Thu Apr 23 20:51:11.166543 2026] [:error] [pid 64998:tid 65004] [client 23.100.53.213:11670] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "aeoVv4V5EysYcTLjmwhovAAAAcI"]
[Thu Apr 23 20:51:12.714187 2026] [:error] [pid 65000:tid 65054] [client 23.100.53.213:11728] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wen.php"] [unique_id "aeoVwL6vRb9j6psK2ZZsNQAAAhU"]
[Thu Apr 23 20:51:13.365940 2026] [:error] [pid 65000:tid 65046] [client 23.100.53.213:11705] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plugin-install.php"] [unique_id "aeoVwb6vRb9j6psK2ZZsOAAAAg0"]
[Thu Apr 23 20:51:14.253723 2026] [:error] [pid 65000:tid 65032] [client 23.100.53.213:11682] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plugin-install.php"] [unique_id "aeoVwr6vRb9j6psK2ZZsPAAAAgM"]
[Thu Apr 23 20:51:14.803936 2026] [:error] [pid 42972:tid 43027] [client 23.100.53.213:11726] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plugin-install.php"] [unique_id "aeoVwsOAb-3sOknsk4ctowAAAEs"]
[Thu Apr 23 20:51:15.449310 2026] [:error] [pid 64967:tid 64982] [client 23.100.53.213:11665] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plugin-install.php"] [unique_id "aeoVw4AV4GfOOdX8QzpyOAAAAY0"]
[Thu Apr 23 20:51:16.006718 2026] [:error] [pid 64998:tid 65018] [client 23.100.53.213:11715] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeoVxIV5EysYcTLjmwhoxAAAAdA"]
[Thu Apr 23 20:51:16.663096 2026] [:error] [pid 46953:tid 46976] [client 23.100.53.213:11764] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeoVxEnlpdHh-P6wKboyxwAAAlQ"]
[Thu Apr 23 20:51:17.377908 2026] [:error] [pid 42973:tid 43058] [client 23.100.53.213:11734] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeoVxW6I0QqmmmLTHE0PigAAAI8"]
[Thu Apr 23 20:51:18.019483 2026] [:error] [pid 43083:tid 43096] [client 23.100.53.213:11681] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi001.PhP7"] [unique_id "aeoVxjC5hrvNXosL83JzJgAAAMs"]
[Thu Apr 23 20:51:18.637465 2026] [:error] [pid 42972:tid 43018] [client 23.100.53.213:11703] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aeoVxsOAb-3sOknsk4ctpQAAAEI"]
[Thu Apr 23 20:51:19.250140 2026] [:error] [pid 64967:tid 64971] [client 23.100.53.213:11723] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aeoVx4AV4GfOOdX8QzpyPQAAAYI"]
[Thu Apr 23 20:51:19.816523 2026] [:error] [pid 65000:tid 65037] [client 23.100.53.213:11773] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aeoVx76vRb9j6psK2ZZsTwAAAgQ"]
[Thu Apr 23 20:51:20.319413 2026] [:error] [pid 42973:tid 43044] [client 23.100.53.213:11599] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-kikikoko.php"] [unique_id "aeoVyG6I0QqmmmLTHE0PkgAAAIE"]
[Thu Apr 23 20:51:20.879846 2026] [:error] [pid 65000:tid 65044] [client 23.100.53.213:11745] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aeoVyL6vRb9j6psK2ZZsUgAAAgs"]
[Thu Apr 23 20:51:21.527066 2026] [:error] [pid 42972:tid 43019] [client 23.100.53.213:11607] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aeoVycOAb-3sOknsk4ctqQAAAEM"]
[Thu Apr 23 20:51:22.162903 2026] [:error] [pid 42972:tid 43020] [client 23.100.53.213:11590] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aeoVysOAb-3sOknsk4ctqwAAAEQ"]
[Thu Apr 23 20:51:22.662658 2026] [:error] [pid 59700:tid 59722] [client 23.100.53.213:11683] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aeoVypXyGZJFeAIDWtkhwQAAAVQ"]
[Thu Apr 23 20:51:23.227989 2026] [:error] [pid 42972:tid 43037] [client 23.100.53.213:11620] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aeoVy8OAb-3sOknsk4ctrQAAAFU"]
[Thu Apr 23 20:51:23.801629 2026] [:error] [pid 65000:tid 65057] [client 23.100.53.213:11596] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aeoVy76vRb9j6psK2ZZsXgAAAhg"]
[Thu Apr 23 20:51:24.373147 2026] [:error] [pid 42972:tid 43031] [client 23.100.53.213:11744] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aeoVzMOAb-3sOknsk4ctsAAAAE8"]
[Thu Apr 23 20:51:25.013343 2026] [:error] [pid 65000:tid 65050] [client 23.100.53.213:11588] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aeoVzb6vRb9j6psK2ZZsZAAAAhE"]
[Thu Apr 23 20:51:25.601519 2026] [:error] [pid 65000:tid 65052] [client 23.100.53.213:11770] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/new.php"] [unique_id "aeoVzb6vRb9j6psK2ZZsawAAAhM"]
[Thu Apr 23 20:51:26.176103 2026] [:error] [pid 25635:tid 25643] [client 23.100.53.213:11755] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/new.php"] [unique_id "aeoVzsRxv6UsgRGKB3IxJQAAAQQ"]
[Thu Apr 23 20:51:26.753160 2026] [:error] [pid 64998:tid 65007] [client 23.100.53.213:11607] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/new.php"] [unique_id "aeoVzoV5EysYcTLjmwho1wAAAcU"]
[Thu Apr 23 20:51:27.316281 2026] [:error] [pid 64998:tid 65022] [client 23.100.53.213:11586] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/new.php"] [unique_id "aeoVz4V5EysYcTLjmwho2wAAAdQ"]
[Thu Apr 23 20:51:27.889709 2026] [:error] [pid 64998:tid 65004] [client 23.100.53.213:11727] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeoVz4V5EysYcTLjmwho3gAAAcI"]
[Thu Apr 23 20:51:28.560707 2026] [:error] [pid 42973:tid 43065] [client 23.100.53.213:11724] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeoV0G6I0QqmmmLTHE0PngAAAJY"]
[Thu Apr 23 20:51:29.120954 2026] [:error] [pid 64998:tid 65020] [client 23.100.53.213:11652] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeoV0YV5EysYcTLjmwho4wAAAdI"]
[Thu Apr 23 20:51:29.706371 2026] [:error] [pid 64998:tid 65014] [client 23.100.53.213:11660] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/network/edit.php"] [unique_id "aeoV0YV5EysYcTLjmwho5wAAAcw"]
[Thu Apr 23 20:51:30.222776 2026] [:error] [pid 65000:tid 65047] [client 23.100.53.213:11688] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws48.php"] [unique_id "aeoV0r6vRb9j6psK2ZZscwAAAg4"]
[Thu Apr 23 20:51:30.797062 2026] [:error] [pid 42972:tid 43037] [client 23.100.53.213:11684] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws48.php"] [unique_id "aeoV0sOAb-3sOknsk4ctwAAAAFU"]
[Thu Apr 23 20:51:31.444209 2026] [:error] [pid 64967:tid 64990] [client 23.100.53.213:11629] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws48.php"] [unique_id "aeoV04AV4GfOOdX8QzpyQgAAAZU"]
[Thu Apr 23 20:51:32.013114 2026] [:error] [pid 46953:tid 46966] [client 23.100.53.213:11531] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws48.php"] [unique_id "aeoV1EnlpdHh-P6wKboy3QAAAko"]
[Thu Apr 23 20:51:32.643973 2026] [:error] [pid 43083:tid 43089] [client 23.100.53.213:11738] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aeoV1DC5hrvNXosL83JzLgAAAMQ"]
[Thu Apr 23 20:51:41.553497 2026] [:error] [pid 64967:tid 64989] [client 23.100.53.213:11636] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "aeoV3YAV4GfOOdX8QzpyVQAAAZQ"]
[Thu Apr 23 20:51:42.081303 2026] [:error] [pid 65000:tid 65032] [client 23.100.53.213:11592] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "aeoV3r6vRb9j6psK2ZZsjQAAAgM"]
[Thu Apr 23 20:51:42.669057 2026] [:error] [pid 64998:tid 65022] [client 23.100.53.213:11585] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "aeoV3oV5EysYcTLjmwho-wAAAdQ"]
[Thu Apr 23 20:51:43.347752 2026] [:error] [pid 65000:tid 65040] [client 23.100.53.213:11746] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "aeoV376vRb9j6psK2ZZslAAAAgc"]
[Thu Apr 23 20:51:44.313956 2026] [:error] [pid 64998:tid 65025] [client 23.100.53.213:11702] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mh.php"] [unique_id "aeoV4IV5EysYcTLjmwhpAgAAAdc"]
[Thu Apr 23 20:51:44.858490 2026] [:error] [pid 59700:tid 59707] [client 23.100.53.213:11601] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mh.php"] [unique_id "aeoV4JXyGZJFeAIDWtkhzQAAAUU"]
[Thu Apr 23 20:51:45.481767 2026] [:error] [pid 42972:tid 43020] [client 23.100.53.213:11748] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mh.php"] [unique_id "aeoV4cOAb-3sOknsk4ctygAAAEQ"]
[Thu Apr 23 20:51:46.021163 2026] [:error] [pid 42973:tid 43052] [client 23.100.53.213:11696] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mh.php"] [unique_id "aeoV4m6I0QqmmmLTHE0PswAAAIk"]
[Thu Apr 23 20:51:46.639415 2026] [:error] [pid 65000:tid 65037] [client 23.100.53.213:11610] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Jcrop.php"] [unique_id "aeoV4r6vRb9j6psK2ZZsmwAAAgQ"]
[Thu Apr 23 20:51:47.219998 2026] [:error] [pid 65000:tid 65057] [client 23.100.53.213:11533] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Jcrop.php"] [unique_id "aeoV476vRb9j6psK2ZZsnwAAAhg"]
[Thu Apr 23 20:51:47.797304 2026] [:error] [pid 65000:tid 65048] [client 23.100.53.213:11731] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Jcrop.php"] [unique_id "aeoV476vRb9j6psK2ZZspAAAAg8"]
[Thu Apr 23 20:51:48.588645 2026] [:error] [pid 65000:tid 65037] [client 23.100.53.213:11522] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Jcrop.php"] [unique_id "aeoV5L6vRb9j6psK2ZZsqwAAAgQ"]
[Thu Apr 23 20:51:49.279969 2026] [:error] [pid 42972:tid 43026] [client 23.100.53.213:11679] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aeoV5cOAb-3sOknsk4ctzgAAAEo"]
[Thu Apr 23 20:51:49.914537 2026] [:error] [pid 43083:tid 43090] [client 23.100.53.213:11743] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aeoV5TC5hrvNXosL83JzQgAAAMU"]
[Thu Apr 23 20:51:50.557495 2026] [:error] [pid 64998:tid 65019] [client 23.100.53.213:11762] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aeoV5oV5EysYcTLjmwhpDQAAAdE"]
[Thu Apr 23 20:51:51.165532 2026] [:error] [pid 64998:tid 65008] [client 23.100.53.213:11735] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abc.php"] [unique_id "aeoV54V5EysYcTLjmwhpEwAAAcY"]
[Thu Apr 23 20:51:51.997167 2026] [:error] [pid 42971:tid 42996] [client 23.100.53.213:11661] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aeoV5zEP2_5RswrH8bEmcQAAAAo"]
[Thu Apr 23 20:51:52.855544 2026] [:error] [pid 43083:tid 43103] [client 23.100.53.213:11685] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aeoV6DC5hrvNXosL83JzRQAAANI"]
[Thu Apr 23 20:51:53.591578 2026] [:error] [pid 46953:tid 46958] [client 23.100.53.213:11689] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aeoV6UnlpdHh-P6wKboy7AAAAkI"]
[Thu Apr 23 20:51:54.421405 2026] [:error] [pid 25635:tid 25649] [client 23.100.53.213:11721] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aeoV6sRxv6UsgRGKB3IxLQAAAQo"]
[Thu Apr 23 20:51:55.370824 2026] [:error] [pid 59700:tid 59723] [client 23.100.53.213:11751] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "aeoV65XyGZJFeAIDWtkh6AAAAVU"]
[Thu Apr 23 20:51:56.280410 2026] [:error] [pid 64998:tid 65003] [client 23.100.53.213:11591] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "aeoV7IV5EysYcTLjmwhpIwAAAcE"]
[Thu Apr 23 20:51:57.442360 2026] [:error] [pid 59700:tid 59703] [client 23.100.53.213:11672] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "aeoV7ZXyGZJFeAIDWtkh7AAAAUE"]
[Thu Apr 23 20:51:58.616495 2026] [:error] [pid 46953:tid 46957] [client 23.100.53.213:11666] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bnm.php"] [unique_id "aeoV7knlpdHh-P6wKboy8AAAAkE"]
[Thu Apr 23 20:52:00.550993 2026] [:error] [pid 43083:tid 43109] [client 23.100.53.213:11639] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "aeoV8DC5hrvNXosL83JzSwAAANg"]
[Thu Apr 23 20:52:01.888613 2026] [:error] [pid 64998:tid 65018] [client 23.100.53.213:11477] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "aeoV8YV5EysYcTLjmwhpNgAAAdA"]
[Thu Apr 23 20:52:02.950650 2026] [:error] [pid 42972:tid 43035] [client 23.100.53.213:11653] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "aeoV8sOAb-3sOknsk4ct3gAAAFM"]
[Thu Apr 23 20:52:03.820095 2026] [:error] [pid 42972:tid 43036] [client 23.100.53.213:11618] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws80.php"] [unique_id "aeoV88OAb-3sOknsk4ct4gAAAFQ"]
[Thu Apr 23 20:52:04.668637 2026] [:error] [pid 42972:tid 43029] [client 23.100.53.213:11700] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aeoV9MOAb-3sOknsk4ct5wAAAE0"]
[Thu Apr 23 20:52:05.583887 2026] [:error] [pid 64998:tid 65004] [client 23.100.53.213:11528] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aeoV9YV5EysYcTLjmwhpQgAAAcI"]
[Thu Apr 23 20:52:06.192329 2026] [:error] [pid 64998:tid 65020] [client 23.100.53.213:11624] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aeoV9oV5EysYcTLjmwhpSAAAAdI"]
[Thu Apr 23 20:52:06.899697 2026] [:error] [pid 64998:tid 65009] [client 23.100.53.213:11603] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aeoV9oV5EysYcTLjmwhpTgAAAcc"]
[Thu Apr 23 20:52:07.457783 2026] [:error] [pid 64998:tid 65011] [client 23.100.53.213:11604] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/s.php"] [unique_id "aeoV94V5EysYcTLjmwhpUwAAAck"]
[Thu Apr 23 20:52:08.027249 2026] [:error] [pid 43083:tid 43097] [client 23.100.53.213:11704] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/s.php"] [unique_id "aeoV-DC5hrvNXosL83JzUwAAAMw"]
[Thu Apr 23 20:52:08.580448 2026] [:error] [pid 43083:tid 43092] [client 23.100.53.213:11520] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/s.php"] [unique_id "aeoV-DC5hrvNXosL83JzVQAAAMc"]
[Thu Apr 23 20:52:09.131861 2026] [:error] [pid 46953:tid 46969] [client 23.100.53.213:11707] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/s.php"] [unique_id "aeoV-UnlpdHh-P6wKboy9wAAAk0"]
[Thu Apr 23 20:52:09.678598 2026] [:error] [pid 65000:tid 65049] [client 23.100.53.213:11627] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tymn.php"] [unique_id "aeoV-b6vRb9j6psK2ZZsywAAAhA"]
[Thu Apr 23 20:52:10.415455 2026] [:error] [pid 65000:tid 65038] [client 23.100.53.213:11537] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tymn.php"] [unique_id "aeoV-r6vRb9j6psK2ZZszgAAAgU"]
[Thu Apr 23 20:52:10.948172 2026] [:error] [pid 65000:tid 65029] [client 23.100.53.213:11634] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tymn.php"] [unique_id "aeoV-r6vRb9j6psK2ZZs1AAAAgA"]
[Thu Apr 23 20:52:11.586860 2026] [:error] [pid 46953:tid 46975] [client 23.100.53.213:11669] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tymn.php"] [unique_id "aeoV-0nlpdHh-P6wKboy-QAAAlM"]
[Thu Apr 23 20:52:12.116614 2026] [:error] [pid 65000:tid 65045] [client 23.100.53.213:11643] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeoV_L6vRb9j6psK2ZZs2wAAAgw"]
[Thu Apr 23 20:52:12.700678 2026] [:error] [pid 65000:tid 65042] [client 23.100.53.213:11655] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeoV_L6vRb9j6psK2ZZs3wAAAgk"]
[Thu Apr 23 20:52:13.572054 2026] [:error] [pid 59700:tid 59702] [client 23.100.53.213:11637] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeoV_ZXyGZJFeAIDWtkh9QAAAUA"]
[Thu Apr 23 20:52:14.443954 2026] [:error] [pid 42972:tid 43028] [client 23.100.53.213:11649] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeoV_sOAb-3sOknsk4cuAQAAAEw"]
[Thu Apr 23 20:52:15.049043 2026] [:error] [pid 64998:tid 65006] [client 23.100.53.213:11615] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "aeoV_4V5EysYcTLjmwhpawAAAcQ"]
[Thu Apr 23 20:52:15.646805 2026] [:error] [pid 65000:tid 65044] [client 23.100.53.213:11674] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "aeoV_76vRb9j6psK2ZZs4QAAAgs"]
[Thu Apr 23 20:52:16.302987 2026] [:error] [pid 65000:tid 65048] [client 23.100.53.213:11697] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "aeoWAL6vRb9j6psK2ZZs5QAAAg8"]
[Thu Apr 23 20:52:17.021568 2026] [:error] [pid 65000:tid 65041] [client 23.100.53.213:11712] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "aeoWAb6vRb9j6psK2ZZs6QAAAgg"]
[Thu Apr 23 20:52:17.732918 2026] [:error] [pid 42971:tid 43008] [client 23.100.53.213:11658] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aeoWATEP2_5RswrH8bEmgAAAABY"]
[Thu Apr 23 20:52:18.372772 2026] [:error] [pid 42973:tid 43046] [client 23.100.53.213:11698] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aeoWAm6I0QqmmmLTHE0PyAAAAIM"]
[Thu Apr 23 20:52:18.941367 2026] [:error] [pid 42972:tid 43031] [client 23.100.53.213:11693] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aeoWAsOAb-3sOknsk4cuCQAAAE8"]
[Thu Apr 23 20:52:19.772850 2026] [:error] [pid 65000:tid 65048] [client 23.100.53.213:11538] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aeoWA76vRb9j6psK2ZZs7wAAAg8"]
[Thu Apr 23 20:52:21.220493 2026] [:error] [pid 42971:tid 42998] [client 23.100.53.213:11694] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "aeoWBTEP2_5RswrH8bEmgwAAAAw"]
[Thu Apr 23 20:52:21.892959 2026] [:error] [pid 65000:tid 65053] [client 23.100.53.213:11540] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "aeoWBb6vRb9j6psK2ZZs8AAAAhQ"]
[Thu Apr 23 20:52:22.633410 2026] [:error] [pid 42972:tid 43029] [client 23.100.53.213:11671] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "aeoWBsOAb-3sOknsk4cuFwAAAE0"]
[Thu Apr 23 20:52:23.603190 2026] [:error] [pid 64998:tid 65003] [client 23.100.53.213:11754] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "aeoWB4V5EysYcTLjmwhphQAAAcE"]
[Thu Apr 23 20:52:24.430704 2026] [:error] [pid 59700:tid 59717] [client 23.100.53.213:11613] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-class-atom.php"] [unique_id "aeoWCJXyGZJFeAIDWtkh-gAAAU8"]
[Thu Apr 23 20:52:25.238957 2026] [:error] [pid 59700:tid 59712] [client 23.100.53.213:11628] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-class-atom.php"] [unique_id "aeoWCZXyGZJFeAIDWtkh_AAAAUo"]
[Thu Apr 23 20:52:25.879141 2026] [:error] [pid 42972:tid 43016] [client 23.100.53.213:11708] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-class-atom.php"] [unique_id "aeoWCcOAb-3sOknsk4cuIwAAAEA"]
[Thu Apr 23 20:52:26.971979 2026] [:error] [pid 65000:tid 65050] [client 23.100.53.213:11753] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-class-atom.php"] [unique_id "aeoWCr6vRb9j6psK2ZZs9wAAAhE"]
[Thu Apr 23 20:52:27.929722 2026] [:error] [pid 64998:tid 65023] [client 23.100.53.213:11545] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aeoWC4V5EysYcTLjmwhpjwAAAdU"]
[Thu Apr 23 20:52:28.651120 2026] [:error] [pid 65000:tid 65055] [client 23.100.53.213:11595] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aeoWDL6vRb9j6psK2ZZs_QAAAhY"]
[Thu Apr 23 20:52:29.930268 2026] [:error] [pid 65000:tid 65044] [client 23.100.53.213:11717] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aeoWDb6vRb9j6psK2ZZtBwAAAgs"]
[Thu Apr 23 20:52:31.020924 2026] [:error] [pid 65000:tid 65043] [client 23.100.53.213:11605] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aeoWD76vRb9j6psK2ZZtIQAAAgo"]
[Thu Apr 23 20:52:31.929839 2026] [:error] [pid 65000:tid 65029] [client 23.100.53.213:11600] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/press.php"] [unique_id "aeoWD76vRb9j6psK2ZZtLgAAAgA"]
[Thu Apr 23 20:52:32.612359 2026] [:error] [pid 42973:tid 43059] [client 23.100.53.213:11690] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/press.php"] [unique_id "aeoWEG6I0QqmmmLTHE0P2QAAAJA"]
[Thu Apr 23 20:52:33.446581 2026] [:error] [pid 42972:tid 43030] [client 23.100.53.213:11668] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/press.php"] [unique_id "aeoWEcOAb-3sOknsk4cuLwAAAE4"]
[Thu Apr 23 20:52:33.982167 2026] [:error] [pid 42972:tid 43023] [client 23.100.53.213:11536] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/press.php"] [unique_id "aeoWEcOAb-3sOknsk4cuMgAAAEc"]
[Thu Apr 23 20:52:34.706989 2026] [:error] [pid 65000:tid 65047] [client 23.100.53.213:11644] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/900.php"] [unique_id "aeoWEr6vRb9j6psK2ZZtPgAAAg4"]
[Thu Apr 23 20:52:35.338394 2026] [:error] [pid 42973:tid 43049] [client 23.100.53.213:11691] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/900.php"] [unique_id "aeoWE26I0QqmmmLTHE0P4AAAAIY"]
[Thu Apr 23 20:52:35.949039 2026] [:error] [pid 25635:tid 25654] [client 23.100.53.213:11529] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/900.php"] [unique_id "aeoWE8Rxv6UsgRGKB3IxNgAAAQ8"]
[Thu Apr 23 20:52:36.776739 2026] [:error] [pid 46953:tid 46974] [client 23.100.53.213:11633] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/900.php"] [unique_id "aeoWFEnlpdHh-P6wKbozDQAAAlI"]
[Thu Apr 23 20:52:37.561910 2026] [:error] [pid 65000:tid 65042] [client 23.100.53.213:11542] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeoWFb6vRb9j6psK2ZZtRwAAAgk"]
[Thu Apr 23 20:52:38.769826 2026] [:error] [pid 64998:tid 65020] [client 23.100.53.213:11631] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeoWFoV5EysYcTLjmwhpmgAAAdI"]
[Thu Apr 23 20:52:39.379627 2026] [:error] [pid 64998:tid 65005] [client 23.100.53.213:11617] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeoWF4V5EysYcTLjmwhpnQAAAcM"]
[Thu Apr 23 20:52:40.034545 2026] [:error] [pid 64998:tid 65024] [client 23.100.53.213:11662] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "aeoWGIV5EysYcTLjmwhpogAAAdY"]
[Thu Apr 23 20:52:40.779075 2026] [:error] [pid 65000:tid 65042] [client 23.100.53.213:11571] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jk.php"] [unique_id "aeoWGL6vRb9j6psK2ZZtSwAAAgk"]
[Thu Apr 23 20:52:51.840379 2026] [:error] [pid 42972:tid 43031] [client 23.100.53.213:11606] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8573.php"] [unique_id "aeoWI8OAb-3sOknsk4cuawAAAE8"]
[Thu Apr 23 20:52:52.402498 2026] [:error] [pid 65000:tid 65055] [client 23.100.53.213:11611] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8573.php"] [unique_id "aeoWJL6vRb9j6psK2ZZtXAAAAhY"]
[Thu Apr 23 20:52:53.130690 2026] [:error] [pid 65000:tid 65039] [client 23.100.53.213:11550] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8573.php"] [unique_id "aeoWJb6vRb9j6psK2ZZtYAAAAgY"]
[Thu Apr 23 20:52:53.773663 2026] [:error] [pid 64998:tid 65006] [client 23.100.53.213:11532] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8573.php"] [unique_id "aeoWJYV5EysYcTLjmwhp6AAAAcQ"]
[Thu Apr 23 20:52:54.612764 2026] [:error] [pid 64998:tid 65005] [client 23.100.53.213:11608] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/an.php"] [unique_id "aeoWJoV5EysYcTLjmwhp6QAAAcM"]
[Thu Apr 23 20:52:55.134910 2026] [:error] [pid 42972:tid 43021] [client 23.100.53.213:11737] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/an.php"] [unique_id "aeoWJ8OAb-3sOknsk4cucgAAAEU"]
[Thu Apr 23 20:52:55.676164 2026] [:error] [pid 65000:tid 65040] [client 23.100.53.213:11635] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/an.php"] [unique_id "aeoWJ76vRb9j6psK2ZZtZwAAAgc"]
[Thu Apr 23 20:52:56.250221 2026] [:error] [pid 64998:tid 65020] [client 23.100.53.213:11701] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/an.php"] [unique_id "aeoWKIV5EysYcTLjmwhp7gAAAdI"]
[Thu Apr 23 20:52:56.846006 2026] [:error] [pid 46953:tid 46972] [client 23.100.53.213:11539] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/t.php"] [unique_id "aeoWKEnlpdHh-P6wKbozGQAAAlA"]
[Thu Apr 23 20:52:57.560498 2026] [:error] [pid 64967:tid 64987] [client 23.100.53.213:11752] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/t.php"] [unique_id "aeoWKYAV4GfOOdX8QzpyfAAAAZI"]
[Thu Apr 23 20:52:58.197688 2026] [:error] [pid 42972:tid 43027] [client 23.100.53.213:11486] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/t.php"] [unique_id "aeoWKsOAb-3sOknsk4cufgAAAEs"]
[Thu Apr 23 20:52:59.570907 2026] [:error] [pid 46953:tid 46965] [client 23.100.53.213:11573] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/t.php"] [unique_id "aeoWK0nlpdHh-P6wKbozGwAAAkk"]
[Thu Apr 23 20:53:00.254493 2026] [:error] [pid 42972:tid 43032] [client 23.100.53.213:11543] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeoWLMOAb-3sOknsk4cuhQAAAFA"]
[Thu Apr 23 20:53:00.761116 2026] [:error] [pid 42972:tid 43036] [client 23.100.53.213:11740] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeoWLMOAb-3sOknsk4cuhwAAAFQ"]
[Thu Apr 23 20:53:01.284752 2026] [:error] [pid 65000:tid 65054] [client 23.100.53.213:11699] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeoWLb6vRb9j6psK2ZZtbgAAAhU"]
[Thu Apr 23 20:53:01.907179 2026] [:error] [pid 59700:tid 59712] [client 23.100.53.213:11763] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeoWLZXyGZJFeAIDWtkiKQAAAUo"]
[Thu Apr 23 20:53:02.514857 2026] [:error] [pid 42972:tid 43019] [client 23.100.53.213:11609] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/profile.php"] [unique_id "aeoWLsOAb-3sOknsk4culAAAAEM"]
[Thu Apr 23 20:53:03.130806 2026] [:error] [pid 42973:tid 43060] [client 23.100.53.213:11583] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/profile.php"] [unique_id "aeoWL26I0QqmmmLTHE0P-wAAAJE"]
[Thu Apr 23 20:53:03.692175 2026] [:error] [pid 59700:tid 59716] [client 23.100.53.213:11621] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/profile.php"] [unique_id "aeoWL5XyGZJFeAIDWtkiMwAAAU4"]
[Thu Apr 23 20:53:04.283287 2026] [:error] [pid 65000:tid 65051] [client 23.100.53.213:11568] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/profile.php"] [unique_id "aeoWML6vRb9j6psK2ZZtewAAAhI"]
[Thu Apr 23 20:53:04.876087 2026] [:error] [pid 65000:tid 65046] [client 23.100.53.213:11534] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gaza.php"] [unique_id "aeoWML6vRb9j6psK2ZZtgQAAAg0"]
[Thu Apr 23 20:53:05.440767 2026] [:error] [pid 65000:tid 65030] [client 23.100.53.213:11675] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gaza.php"] [unique_id "aeoWMb6vRb9j6psK2ZZtiQAAAgE"]
[Thu Apr 23 20:53:05.982027 2026] [:error] [pid 42972:tid 43016] [client 23.100.53.213:11569] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gaza.php"] [unique_id "aeoWMcOAb-3sOknsk4cunwAAAEA"]
[Thu Apr 23 20:53:06.499510 2026] [:error] [pid 25635:tid 25662] [client 23.100.53.213:11676] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gaza.php"] [unique_id "aeoWMsRxv6UsgRGKB3IxPAAAARc"]
[Thu Apr 23 20:53:07.270588 2026] [:error] [pid 64967:tid 64992] [client 23.100.53.213:11490] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aeoWM4AV4GfOOdX8QzpyggAAAZc"]
[Thu Apr 23 20:53:07.894835 2026] [:error] [pid 46953:tid 46978] [client 23.100.53.213:11523] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aeoWM0nlpdHh-P6wKbozIAAAAlU"]
[Thu Apr 23 20:53:08.500047 2026] [:error] [pid 64998:tid 65022] [client 23.100.53.213:11525] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aeoWNIV5EysYcTLjmwhp9QAAAdQ"]
[Thu Apr 23 20:53:09.039191 2026] [:error] [pid 64967:tid 64981] [client 23.100.53.213:11587] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aeoWNYAV4GfOOdX8QzpyhwAAAYw"]
[Thu Apr 23 20:53:09.729977 2026] [:error] [pid 46953:tid 46956] [client 23.100.53.213:11757] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "aeoWNUnlpdHh-P6wKbozJwAAAkA"]
[Thu Apr 23 20:53:10.471816 2026] [:error] [pid 65000:tid 65049] [client 23.100.53.213:11552] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "aeoWNr6vRb9j6psK2ZZtjAAAAhA"]
[Thu Apr 23 20:53:11.087374 2026] [:error] [pid 42972:tid 43038] [client 23.100.53.213:11638] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "aeoWN8OAb-3sOknsk4curQAAAFY"]
[Thu Apr 23 20:53:11.752388 2026] [:error] [pid 65000:tid 65048] [client 23.100.53.213:11709] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "aeoWN76vRb9j6psK2ZZtkQAAAg8"]
[Thu Apr 23 20:53:12.317076 2026] [:error] [pid 43083:tid 43099] [client 23.100.53.213:11474] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "aeoWODC5hrvNXosL83JzeQAAAM4"]
[Thu Apr 23 20:53:12.857298 2026] [:error] [pid 65000:tid 65053] [client 23.100.53.213:11616] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "aeoWOL6vRb9j6psK2ZZtnQAAAhQ"]
[Thu Apr 23 20:53:13.451781 2026] [:error] [pid 46953:tid 46968] [client 23.100.53.213:11619] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "aeoWOUnlpdHh-P6wKbozLAAAAkw"]
[Thu Apr 23 20:53:14.202132 2026] [:error] [pid 64998:tid 65011] [client 23.100.53.213:11549] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws82.php"] [unique_id "aeoWOoV5EysYcTLjmwhp9gAAAck"]
[Thu Apr 23 20:53:14.975885 2026] [:error] [pid 43083:tid 43096] [client 23.100.53.213:11521] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aeoWOjC5hrvNXosL83JzfwAAAMs"]
[Thu Apr 23 20:53:15.755693 2026] [:error] [pid 64967:tid 64985] [client 23.100.53.213:11695] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aeoWO4AV4GfOOdX8QzpyjgAAAZA"]
[Thu Apr 23 20:53:16.304095 2026] [:error] [pid 64967:tid 64971] [client 23.100.53.213:11642] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aeoWPIAV4GfOOdX8QzpyjwAAAYI"]
[Thu Apr 23 20:53:17.116819 2026] [:error] [pid 42972:tid 43030] [client 23.100.53.213:11594] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aeoWPcOAb-3sOknsk4cuvQAAAE4"]
[Thu Apr 23 20:53:18.427359 2026] [:error] [pid 42972:tid 43027] [client 23.100.53.213:11562] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeoWPsOAb-3sOknsk4cuwQAAAEs"]
[Thu Apr 23 20:53:19.440440 2026] [:error] [pid 65000:tid 65031] [client 23.100.53.213:11647] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeoWP76vRb9j6psK2ZZtsQAAAgI"]
[Thu Apr 23 20:53:20.028455 2026] [:error] [pid 65000:tid 65039] [client 23.100.53.213:11544] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeoWQL6vRb9j6psK2ZZtswAAAgY"]
[Thu Apr 23 20:53:20.986690 2026] [:error] [pid 42972:tid 43032] [client 23.100.53.213:11574] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yw5bi63u.php"] [unique_id "aeoWQMOAb-3sOknsk4cuyAAAAFA"]
[Thu Apr 23 20:53:22.050158 2026] [:error] [pid 64998:tid 65009] [client 23.100.53.213:11527] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "aeoWQoV5EysYcTLjmwhp-gAAAcc"]
[Thu Apr 23 20:53:22.821649 2026] [:error] [pid 42973:tid 43049] [client 23.100.53.213:11548] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "aeoWQm6I0QqmmmLTHE0QBgAAAIY"]
[Thu Apr 23 20:53:23.935117 2026] [:error] [pid 25635:tid 25639] [client 23.100.53.213:11546] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "aeoWQ8Rxv6UsgRGKB3IxRAAAAQA"]
[Thu Apr 23 20:53:24.887005 2026] [:error] [pid 64998:tid 65020] [client 23.100.53.213:11576] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tool.php"] [unique_id "aeoWRIV5EysYcTLjmwhqAwAAAdI"]
[Thu Apr 23 20:53:25.554371 2026] [:error] [pid 42972:tid 43024] [client 23.100.53.213:11582] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aeoWRcOAb-3sOknsk4cu0AAAAEg"]
[Thu Apr 23 20:53:26.236996 2026] [:error] [pid 42973:tid 43047] [client 23.100.53.213:11479] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aeoWRm6I0QqmmmLTHE0QDAAAAIQ"]
[Thu Apr 23 20:53:26.854784 2026] [:error] [pid 42972:tid 43033] [client 23.100.53.213:11466] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aeoWRsOAb-3sOknsk4cu0wAAAFE"]
[Thu Apr 23 20:53:27.606592 2026] [:error] [pid 42973:tid 43066] [client 23.100.53.213:11589] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "aeoWR26I0QqmmmLTHE0QEwAAAJc"]
[Thu Apr 23 20:53:28.152576 2026] [:error] [pid 42972:tid 43038] [client 23.100.53.213:11508] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aeoWSMOAb-3sOknsk4cu1wAAAFY"]
[Thu Apr 23 20:53:28.919391 2026] [:error] [pid 42971:tid 43009] [client 23.100.53.213:11646] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aeoWSDEP2_5RswrH8bEmmQAAABc"]
[Thu Apr 23 20:53:29.455343 2026] [:error] [pid 64998:tid 65015] [client 23.100.53.213:11475] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aeoWSYV5EysYcTLjmwhqEAAAAc0"]
[Thu Apr 23 20:53:30.032747 2026] [:error] [pid 65000:tid 65052] [client 23.100.53.213:11424] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aeoWSr6vRb9j6psK2ZZtwAAAAhM"]
[Thu Apr 23 20:53:30.608293 2026] [:error] [pid 42973:tid 43067] [client 23.100.53.213:11632] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aeoWSm6I0QqmmmLTHE0QGwAAAJg"]
[Thu Apr 23 20:53:31.189506 2026] [:error] [pid 65000:tid 65030] [client 23.100.53.213:11626] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aeoWS76vRb9j6psK2ZZtwgAAAgE"]
[Thu Apr 23 20:53:31.841469 2026] [:error] [pid 42972:tid 43039] [client 23.100.53.213:11432] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aeoWS8OAb-3sOknsk4cu4QAAAFc"]
[Thu Apr 23 20:53:32.433826 2026] [:error] [pid 64998:tid 65018] [client 23.100.53.213:11492] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "aeoWTIV5EysYcTLjmwhqFQAAAdA"]
[Thu Apr 23 20:53:33.024046 2026] [:error] [pid 65000:tid 65050] [client 23.100.53.213:11575] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mk.php"] [unique_id "aeoWTb6vRb9j6psK2ZZtxQAAAhE"]
[Thu Apr 23 20:53:33.633673 2026] [:error] [pid 64998:tid 65016] [client 23.100.53.213:11625] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mk.php"] [unique_id "aeoWTYV5EysYcTLjmwhqFwAAAc4"]
[Thu Apr 23 20:53:34.262367 2026] [:error] [pid 64967:tid 64990] [client 23.100.53.213:11559] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mk.php"] [unique_id "aeoWToAV4GfOOdX8QzpykgAAAZU"]
[Thu Apr 23 20:53:34.827142 2026] [:error] [pid 42973:tid 43055] [client 23.100.53.213:11602] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mk.php"] [unique_id "aeoWTm6I0QqmmmLTHE0QJgAAAIw"]
[Thu Apr 23 20:53:35.378469 2026] [:error] [pid 42973:tid 43048] [client 23.100.53.213:11678] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aeoWT26I0QqmmmLTHE0QKQAAAIU"]
[Thu Apr 23 20:53:35.990409 2026] [:error] [pid 46953:tid 46974] [client 23.100.53.213:11622] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aeoWT0nlpdHh-P6wKbozSAAAAlI"]
[Thu Apr 23 20:53:36.786262 2026] [:error] [pid 64998:tid 65020] [client 23.100.53.213:11526] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aeoWUIV5EysYcTLjmwhqHQAAAdI"]
[Thu Apr 23 20:53:37.444649 2026] [:error] [pid 42971:tid 43000] [client 23.100.53.213:11560] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "aeoWUTEP2_5RswrH8bEmnAAAAA4"]
[Thu Apr 23 20:53:38.030264 2026] [:error] [pid 64998:tid 65023] [client 23.100.53.213:11637] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "aeoWUoV5EysYcTLjmwhqJAAAAdU"]
[Thu Apr 23 20:53:38.768996 2026] [:error] [pid 65000:tid 65045] [client 23.100.53.213:11483] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "aeoWUr6vRb9j6psK2ZZt1gAAAgw"]
[Thu Apr 23 20:53:39.439674 2026] [:error] [pid 64998:tid 65013] [client 23.100.53.213:11554] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "aeoWU4V5EysYcTLjmwhqJwAAAcs"]
[Thu Apr 23 20:53:40.150445 2026] [:error] [pid 65000:tid 65053] [client 23.100.53.213:11555] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a4.php"] [unique_id "aeoWVL6vRb9j6psK2ZZt2gAAAhQ"]
[Thu Apr 23 20:53:40.853411 2026] [:error] [pid 42973:tid 43052] [client 23.100.53.213:11651] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/retu11.PhP7"] [unique_id "aeoWVG6I0QqmmmLTHE0QLAAAAIk"]
[Thu Apr 23 20:53:41.738634 2026] [:error] [pid 64998:tid 65002] [client 23.100.53.213:11507] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/retu11.PhP7"] [unique_id "aeoWVYV5EysYcTLjmwhqLgAAAcA"]
[Thu Apr 23 20:53:42.434014 2026] [:error] [pid 42973:tid 43064] [client 23.100.53.213:11476] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/retu11.PhP7"] [unique_id "aeoWVm6I0QqmmmLTHE0QMQAAAJU"]
[Thu Apr 23 20:53:43.082151 2026] [:error] [pid 42972:tid 43018] [client 23.100.53.213:11547] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/retu11.PhP7"] [unique_id "aeoWV8OAb-3sOknsk4cvFAAAAEI"]
[Thu Apr 23 20:53:43.754869 2026] [:error] [pid 64998:tid 65022] [client 23.100.53.213:11736] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rip.php"] [unique_id "aeoWV4V5EysYcTLjmwhqNAAAAdQ"]
[Thu Apr 23 20:53:44.360908 2026] [:error] [pid 65000:tid 65057] [client 23.100.53.213:11467] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rip.php"] [unique_id "aeoWWL6vRb9j6psK2ZZt4wAAAhg"]
[Thu Apr 23 20:53:45.205956 2026] [:error] [pid 59700:tid 59704] [client 23.100.53.213:11564] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rip.php"] [unique_id "aeoWWZXyGZJFeAIDWtkiVwAAAUI"]
[Thu Apr 23 20:53:46.081554 2026] [:error] [pid 42971:tid 42998] [client 23.100.53.213:11553] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rip.php"] [unique_id "aeoWWjEP2_5RswrH8bEmpQAAAAw"]
[Thu Apr 23 20:53:46.941244 2026] [:error] [pid 64998:tid 65008] [client 23.100.53.213:11457] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aeoWWoV5EysYcTLjmwhqQwAAAcY"]
[Thu Apr 23 20:53:47.727020 2026] [:error] [pid 64998:tid 65015] [client 23.100.53.213:11516] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aeoWW4V5EysYcTLjmwhqSAAAAc0"]
[Thu Apr 23 20:53:48.414380 2026] [:error] [pid 65000:tid 65032] [client 23.100.53.213:11614] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aeoWXL6vRb9j6psK2ZZt7gAAAgM"]
[Thu Apr 23 20:53:48.960050 2026] [:error] [pid 64998:tid 65018] [client 23.100.53.213:11555] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aeoWXIV5EysYcTLjmwhqSgAAAdA"]
[Thu Apr 23 20:53:49.513457 2026] [:error] [pid 25635:tid 25642] [client 23.100.53.213:11460] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zoo.php"] [unique_id "aeoWXcRxv6UsgRGKB3IxRgAAAQM"]
[Thu Apr 23 20:53:50.171312 2026] [:error] [pid 64967:tid 64971] [client 23.100.53.213:11641] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zoo.php"] [unique_id "aeoWXoAV4GfOOdX8QzpyogAAAYI"]
[Thu Apr 23 20:53:50.934954 2026] [:error] [pid 59700:tid 59719] [client 23.100.53.213:11498] [client 23.100.53.213] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zoo.php"] [unique_id "aeoWXpXyGZJFeAIDWtkiWgAAAVE"]
[Thu Apr 23 23:25:37.125517 2026] [:error] [pid 43083:tid 43105] [client 20.216.173.101:47661] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aeo58TC5hrvNXosL83KLDgAAANQ"]
[Thu Apr 23 23:25:39.200405 2026] [:error] [pid 65000:tid 65038] [client 20.216.173.101:33219] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aeo5876vRb9j6psK2ZbYKQAAAgU"]
[Thu Apr 23 23:25:40.098120 2026] [:error] [pid 64998:tid 65008] [client 20.216.173.101:46605] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aeo59IV5EysYcTLjmwi24gAAAcY"]
[Thu Apr 23 23:25:43.058388 2026] [:error] [pid 25635:tid 25642] [client 20.216.173.101:1887] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aeo598Rxv6UsgRGKB3I-qAAAAQM"]
[Thu Apr 23 23:25:46.370727 2026] [:error] [pid 65000:tid 65037] [client 20.216.173.101:8939] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zxcs.php"] [unique_id "aeo5-r6vRb9j6psK2ZbYQwAAAgQ"]
[Thu Apr 23 23:25:47.778385 2026] [:error] [pid 65000:tid 65041] [client 20.216.173.101:1895] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zxcs.php"] [unique_id "aeo5-76vRb9j6psK2ZbYSQAAAgg"]
[Thu Apr 23 23:25:52.377496 2026] [:error] [pid 42972:tid 43030] [client 20.216.173.101:1898] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zxcs.php"] [unique_id "aeo6AMOAb-3sOknsk4dokQAAAE4"]
[Thu Apr 23 23:25:53.315609 2026] [:error] [pid 46953:tid 46969] [client 20.216.173.101:39958] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zxcs.php"] [unique_id "aeo6AUnlpdHh-P6wKbpPGQAAAk0"]
[Thu Apr 23 23:25:54.601250 2026] [:error] [pid 65000:tid 65049] [client 20.216.173.101:33248] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/s1.php"] [unique_id "aeo6Ar6vRb9j6psK2ZbYWgAAAhA"]
[Thu Apr 23 23:25:55.406576 2026] [:error] [pid 43083:tid 43099] [client 20.216.173.101:39968] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/s1.php"] [unique_id "aeo6AzC5hrvNXosL83KLEQAAAM4"]
[Thu Apr 23 23:25:57.503485 2026] [:error] [pid 42972:tid 43037] [client 20.216.173.101:26767] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/s1.php"] [unique_id "aeo6BcOAb-3sOknsk4dolAAAAFU"]
[Thu Apr 23 23:25:59.190400 2026] [:error] [pid 42973:tid 43067] [client 20.216.173.101:7771] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/s1.php"] [unique_id "aeo6B26I0QqmmmLTHE0-1wAAAJg"]
[Thu Apr 23 23:26:05.689159 2026] [:error] [pid 42972:tid 43039] [client 20.216.173.101:33265] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-kz.php"] [unique_id "aeo6DcOAb-3sOknsk4domAAAAFc"]
[Thu Apr 23 23:26:14.234428 2026] [:error] [pid 42973:tid 43049] [client 20.216.173.101:39964] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-kz.php"] [unique_id "aeo6Fm6I0QqmmmLTHE0-5AAAAIY"]
[Thu Apr 23 23:26:19.632859 2026] [:error] [pid 42973:tid 43067] [client 20.216.173.101:8943] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "aeo6G26I0QqmmmLTHE0-8gAAAJg"]
[Thu Apr 23 23:26:22.259981 2026] [:error] [pid 59700:tid 59715] [client 20.216.173.101:7797] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "aeo6HpXyGZJFeAIDWtlC_wAAAU0"]
[Thu Apr 23 23:26:43.058040 2026] [:error] [pid 42972:tid 43025] [client 20.216.173.101:41909] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "aeo6M8OAb-3sOknsk4do1AAAAEk"]
[Thu Apr 23 23:27:04.066567 2026] [:error] [pid 59700:tid 59704] [client 20.216.173.101:18719] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "aeo6SJXyGZJFeAIDWtlDIgAAAUI"]
[Thu Apr 23 23:27:06.826456 2026] [:error] [pid 25635:tid 25639] [client 20.216.173.101:1534] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "aeo6SsRxv6UsgRGKB3I-swAAAQA"]
[Thu Apr 23 23:27:08.075819 2026] [:error] [pid 65000:tid 65051] [client 20.216.173.101:45444] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "aeo6TL6vRb9j6psK2ZbZHgAAAhI"]
[Thu Apr 23 23:27:09.694725 2026] [:error] [pid 42973:tid 43066] [client 20.216.173.101:1518] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "aeo6TW6I0QqmmmLTHE0_NAAAAJc"]
[Thu Apr 23 23:27:12.345157 2026] [:error] [pid 65000:tid 65043] [client 20.216.173.101:26824] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "aeo6UL6vRb9j6psK2ZbZMAAAAgo"]
[Thu Apr 23 23:27:13.771722 2026] [:error] [pid 65000:tid 65056] [client 20.216.173.101:9600] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "aeo6Ub6vRb9j6psK2ZbZMwAAAhc"]
[Thu Apr 23 23:27:15.030522 2026] [:error] [pid 42973:tid 43062] [client 20.216.173.101:7444] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "aeo6U26I0QqmmmLTHE0_OAAAAJM"]
[Thu Apr 23 23:27:17.812900 2026] [:error] [pid 64998:tid 65013] [client 20.216.173.101:58241] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wps.php"] [unique_id "aeo6VYV5EysYcTLjmwi39gAAAcs"]
[Thu Apr 23 23:27:30.258165 2026] [:error] [pid 59700:tid 59713] [client 20.216.173.101:43686] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aeo6YpXyGZJFeAIDWtlDRAAAAUs"]
[Thu Apr 23 23:27:35.916267 2026] [:error] [pid 65000:tid 65054] [client 20.216.173.101:55279] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/12.php"] [unique_id "aeo6Z76vRb9j6psK2ZbZjgAAAhU"]
[Thu Apr 23 23:27:38.392554 2026] [:error] [pid 42972:tid 43021] [client 20.216.173.101:57847] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/12.php"] [unique_id "aeo6asOAb-3sOknsk4dpKgAAAEU"]
[Thu Apr 23 23:27:51.060762 2026] [:error] [pid 59700:tid 59716] [client 20.216.173.101:19388] [client 20.216.173.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tiny.php"] [unique_id "aeo6d5XyGZJFeAIDWtlDXQAAAU4"]
[Thu Apr 23 23:27:55.780412 2026] [:error] [pid 59700:tid 59711] [client 20.216.173.101:35050] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/roksad1.php"] [unique_id "aeo6e5XyGZJFeAIDWtlDYwAAAUk"]
[Thu Apr 23 23:28:01.792065 2026] [:error] [pid 42973:tid 43062] [client 20.216.173.101:46059] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/roksad1.php"] [unique_id "aeo6gW6I0QqmmmLTHE0_cQAAAJM"]
[Thu Apr 23 23:28:05.797382 2026] [:error] [pid 64998:tid 65008] [client 20.216.173.101:37475] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/roksad1.php"] [unique_id "aeo6hYV5EysYcTLjmwi4qAAAAcY"]
[Thu Apr 23 23:28:08.112397 2026] [:error] [pid 65000:tid 65031] [client 20.216.173.101:56753] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/roksad1.php"] [unique_id "aeo6iL6vRb9j6psK2ZbZ0gAAAgI"]
[Thu Apr 23 23:28:13.299633 2026] [:error] [pid 65000:tid 65031] [client 20.216.173.101:6983] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fone1.php"] [unique_id "aeo6jb6vRb9j6psK2ZbZ8QAAAgI"]
[Thu Apr 23 23:28:14.412325 2026] [:error] [pid 42973:tid 43050] [client 20.216.173.101:48171] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fone1.php"] [unique_id "aeo6jm6I0QqmmmLTHE0_ngAAAIc"]
[Thu Apr 23 23:28:16.330196 2026] [:error] [pid 42972:tid 43036] [client 20.216.173.101:36228] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fone1.php"] [unique_id "aeo6kMOAb-3sOknsk4dpTwAAAFQ"]
[Thu Apr 23 23:28:18.360728 2026] [:error] [pid 46953:tid 46967] [client 20.216.173.101:21458] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fone1.php"] [unique_id "aeo6kknlpdHh-P6wKbpPbgAAAks"]
[Thu Apr 23 23:28:20.348245 2026] [:error] [pid 25635:tid 25639] [client 20.216.173.101:57731] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/config.php"] [unique_id "aeo6lMRxv6UsgRGKB3I-vwAAAQA"]
[Thu Apr 23 23:28:20.979638 2026] [:error] [pid 64967:tid 64977] [client 20.216.173.101:64857] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/config.php"] [unique_id "aeo6lIAV4GfOOdX8QzqDoAAAAYg"]
[Thu Apr 23 23:28:27.176198 2026] [:error] [pid 64998:tid 65008] [client 20.216.173.101:21446] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/config.php"] [unique_id "aeo6m4V5EysYcTLjmwi4twAAAcY"]
[Thu Apr 23 23:28:30.281588 2026] [:error] [pid 46953:tid 46969] [client 20.216.173.101:13779] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/config.php"] [unique_id "aeo6nknlpdHh-P6wKbpPdQAAAk0"]
[Thu Apr 23 23:28:34.203563 2026] [:error] [pid 43083:tid 43094] [client 20.216.173.101:31970] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xltt.php"] [unique_id "aeo6ojC5hrvNXosL83KLfQAAAMk"]
[Thu Apr 23 23:28:36.551372 2026] [:error] [pid 42973:tid 43067] [client 20.216.173.101:51301] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xltt.php"] [unique_id "aeo6pG6I0QqmmmLTHE0_0wAAAJg"]
[Thu Apr 23 23:28:40.863704 2026] [:error] [pid 65000:tid 65041] [client 20.216.173.101:8841] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xltt.php"] [unique_id "aeo6qL6vRb9j6psK2ZbaNwAAAgg"]
[Thu Apr 23 23:28:43.016478 2026] [:error] [pid 42972:tid 43037] [client 20.216.173.101:51324] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xltt.php"] [unique_id "aeo6q8OAb-3sOknsk4dpsQAAAFU"]
[Thu Apr 23 23:28:45.376597 2026] [:error] [pid 42973:tid 43060] [client 20.216.173.101:20839] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "aeo6rW6I0QqmmmLTHE0_4QAAAJE"]
[Thu Apr 23 23:28:47.683622 2026] [:error] [pid 65000:tid 65047] [client 20.216.173.101:20846] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "aeo6r76vRb9j6psK2ZbaaAAAAg4"]
[Thu Apr 23 23:28:50.855454 2026] [:error] [pid 42972:tid 43016] [client 20.216.173.101:51276] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "aeo6ssOAb-3sOknsk4dpxAAAAEA"]
[Thu Apr 23 23:28:54.667773 2026] [:error] [pid 65000:tid 65038] [client 20.216.173.101:28867] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "aeo6tr6vRb9j6psK2ZbaigAAAgU"]
[Thu Apr 23 23:29:12.218568 2026] [:error] [pid 59700:tid 59721] [client 20.216.173.101:8887] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aeo6yJXyGZJFeAIDWtlDuQAAAVM"]
[Thu Apr 23 23:29:15.615344 2026] [:error] [pid 42972:tid 43031] [client 20.216.173.101:25502] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aeo6y8OAb-3sOknsk4dp8QAAAE8"]
[Thu Apr 23 23:29:17.607520 2026] [:error] [pid 65000:tid 65057] [client 20.216.173.101:50920] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aeo6zb6vRb9j6psK2ZbavgAAAhg"]
[Thu Apr 23 23:29:18.870914 2026] [:error] [pid 64998:tid 65006] [client 20.216.173.101:42515] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aeo6zoV5EysYcTLjmwi5PgAAAcQ"]
[Thu Apr 23 23:29:19.831514 2026] [:error] [pid 65000:tid 65054] [client 20.216.173.101:8883] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/view.php"] [unique_id "aeo6z76vRb9j6psK2ZbawgAAAhU"]
[Thu Apr 23 23:29:22.808710 2026] [:error] [pid 42973:tid 43048] [client 20.216.173.101:50912] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/view.php"] [unique_id "aeo60m6I0QqmmmLTHE1ACQAAAIU"]
[Thu Apr 23 23:29:28.413089 2026] [:error] [pid 65000:tid 65052] [client 20.216.173.101:25495] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/view.php"] [unique_id "aeo62L6vRb9j6psK2Zba9gAAAhM"]
[Thu Apr 23 23:29:35.665381 2026] [:error] [pid 65000:tid 65041] [client 20.216.173.101:22877] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cilus.php"] [unique_id "aeo6376vRb9j6psK2ZbbIAAAAgg"]
[Thu Apr 23 23:29:40.179719 2026] [:error] [pid 65000:tid 65041] [client 20.216.173.101:22903] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cilus.php"] [unique_id "aeo65L6vRb9j6psK2ZbbMwAAAgg"]
[Thu Apr 23 23:29:43.516835 2026] [:error] [pid 64998:tid 65023] [client 20.216.173.101:50893] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cilus.php"] [unique_id "aeo654V5EysYcTLjmwi5YQAAAdU"]
[Thu Apr 23 23:29:57.535249 2026] [:error] [pid 42972:tid 43021] [client 20.216.173.101:14982] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aeo69cOAb-3sOknsk4dqIwAAAEU"]
[Thu Apr 23 23:29:58.730565 2026] [:error] [pid 43083:tid 43100] [client 20.216.173.101:51318] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aeo69jC5hrvNXosL83KLuAAAAM8"]
[Thu Apr 23 23:30:00.749658 2026] [:error] [pid 65000:tid 65030] [client 20.216.173.101:64863] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aeo6-L6vRb9j6psK2ZbbfQAAAgE"]
[Thu Apr 23 23:30:01.989650 2026] [:error] [pid 46953:tid 46969] [client 20.216.173.101:35625] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aeo6-UnlpdHh-P6wKbpP4gAAAk0"]
[Thu Apr 23 23:30:04.627963 2026] [:error] [pid 65000:tid 65047] [client 20.216.173.101:50943] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/doc.php"] [unique_id "aeo6_L6vRb9j6psK2ZbbkAAAAg4"]
[Thu Apr 23 23:30:06.347584 2026] [:error] [pid 64998:tid 65026] [client 20.216.173.101:22854] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/doc.php"] [unique_id "aeo6_oV5EysYcTLjmwi5fQAAAdg"]
[Thu Apr 23 23:30:10.154396 2026] [:error] [pid 42971:tid 43006] [client 20.216.173.101:9721] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/doc.php"] [unique_id "aeo7AjEP2_5RswrH8bE5vgAAABQ"]
[Thu Apr 23 23:30:22.499220 2026] [:error] [pid 42972:tid 43032] [client 20.216.173.101:22879] [client 20.216.173.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/wp-login.php"] [unique_id "aeo7DsOAb-3sOknsk4dqcgAAAFA"]
[Thu Apr 23 23:30:30.052263 2026] [:error] [pid 65000:tid 65047] [client 20.216.173.101:44355] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mifta.php"] [unique_id "aeo7Fr6vRb9j6psK2ZbcAAAAAg4"]
[Thu Apr 23 23:30:32.386018 2026] [:error] [pid 42971:tid 43006] [client 20.216.173.101:22888] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mifta.php"] [unique_id "aeo7GDEP2_5RswrH8bE5ywAAABQ"]
[Thu Apr 23 23:30:39.793791 2026] [:error] [pid 65000:tid 65040] [client 20.216.173.101:33706] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mifta.php"] [unique_id "aeo7H76vRb9j6psK2ZbcQgAAAgc"]
[Thu Apr 23 23:30:43.761824 2026] [:error] [pid 65000:tid 65029] [client 20.216.173.101:37430] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mifta.php"] [unique_id "aeo7I76vRb9j6psK2ZbcWQAAAgA"]
[Thu Apr 23 23:30:47.310977 2026] [:error] [pid 65000:tid 65042] [client 20.216.173.101:39418] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws57.php"] [unique_id "aeo7J76vRb9j6psK2ZbcbgAAAgk"]
[Thu Apr 23 23:30:49.960953 2026] [:error] [pid 65000:tid 65030] [client 20.216.173.101:36228] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws57.php"] [unique_id "aeo7Kb6vRb9j6psK2ZbcdwAAAgE"]
[Thu Apr 23 23:30:56.875705 2026] [:error] [pid 42973:tid 43054] [client 20.216.173.101:9699] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws57.php"] [unique_id "aeo7MG6I0QqmmmLTHE1AagAAAIs"]
[Thu Apr 23 23:31:04.864626 2026] [:error] [pid 64998:tid 65002] [client 20.216.173.101:9725] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "aeo7OIV5EysYcTLjmwi6FgAAAcA"]
[Thu Apr 23 23:31:12.274833 2026] [:error] [pid 64998:tid 65007] [client 20.216.173.101:22041] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "aeo7QIV5EysYcTLjmwi6fwAAAcU"]
[Thu Apr 23 23:31:14.427690 2026] [:error] [pid 42971:tid 42999] [client 20.216.173.101:39421] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws86.php"] [unique_id "aeo7QjEP2_5RswrH8bE57QAAAA0"]
[Thu Apr 23 23:31:16.459261 2026] [:error] [pid 64998:tid 65004] [client 20.216.173.101:35054] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aeo7RIV5EysYcTLjmwi6vAAAAcI"]
[Thu Apr 23 23:31:19.090302 2026] [:error] [pid 25635:tid 25648] [client 20.216.173.101:53284] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aeo7R8Rxv6UsgRGKB3I_CgAAAQk"]
[Thu Apr 23 23:31:24.315581 2026] [:error] [pid 43083:tid 43106] [client 20.216.173.101:37427] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aeo7TDC5hrvNXosL83KL4wAAANU"]
[Thu Apr 23 23:31:26.442385 2026] [:error] [pid 59700:tid 59702] [client 20.216.173.101:58245] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fs.php"] [unique_id "aeo7TpXyGZJFeAIDWtlEKAAAAUA"]
[Thu Apr 23 23:31:39.869064 2026] [:error] [pid 65000:tid 65056] [client 20.216.173.101:31412] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/7.php"] [unique_id "aeo7W76vRb9j6psK2ZbdWgAAAhc"]
[Thu Apr 23 23:31:41.574686 2026] [:error] [pid 65000:tid 65046] [client 20.216.173.101:11241] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/7.php"] [unique_id "aeo7Xb6vRb9j6psK2ZbdXwAAAg0"]
[Thu Apr 23 23:31:48.171469 2026] [:error] [pid 42972:tid 43033] [client 20.216.173.101:10448] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/7.php"] [unique_id "aeo7ZMOAb-3sOknsk4drIAAAAFE"]
[Thu Apr 23 23:31:51.465181 2026] [:error] [pid 42972:tid 43028] [client 20.216.173.101:39995] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/7.php"] [unique_id "aeo7Z8OAb-3sOknsk4drMQAAAEw"]
[Thu Apr 23 23:32:13.323693 2026] [:error] [pid 59700:tid 59725] [client 20.216.173.101:7777] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aeo7fZXyGZJFeAIDWtlETQAAAVc"]
[Thu Apr 23 23:32:16.442691 2026] [:error] [pid 64998:tid 65015] [client 20.216.173.101:7769] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aeo7gIV5EysYcTLjmwi7jgAAAc0"]
[Thu Apr 23 23:32:21.418750 2026] [:error] [pid 42972:tid 43021] [client 20.216.173.101:7799] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aeo7hcOAb-3sOknsk4drRAAAAEU"]
[Thu Apr 23 23:32:23.238804 2026] [:error] [pid 42972:tid 43030] [client 20.216.173.101:58354] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aeo7h8OAb-3sOknsk4drSAAAAE4"]
[Thu Apr 23 23:32:27.897962 2026] [:error] [pid 59700:tid 59713] [client 20.216.173.101:24946] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gecko.php"] [unique_id "aeo7i5XyGZJFeAIDWtlEWQAAAUs"]
[Thu Apr 23 23:32:31.388136 2026] [:error] [pid 42972:tid 43018] [client 20.216.173.101:36889] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gecko.php"] [unique_id "aeo7j8OAb-3sOknsk4drWgAAAEI"]
[Thu Apr 23 23:32:35.994707 2026] [:error] [pid 64998:tid 65003] [client 20.216.173.101:36902] [client 20.216.173.101] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gecko.php"] [unique_id "aeo7k4V5EysYcTLjmwi73QAAAcE"]
[Fri Apr 24 04:45:37.306965 2026] [:error] [pid 19200:tid 19211] [client 20.215.57.60:16214] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.dj/index.php"] [unique_id "aeqE8TQ--M3-tsKAnhFyEwAAAMM"]
[Fri Apr 24 04:45:37.893737 2026] [:error] [pid 19100:tid 19123] [client 20.215.57.60:5960] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.dj/index.php"] [unique_id "aeqE8bF_hzQs4CqbiffxigAAAA0"]
[Fri Apr 24 04:45:38.479168 2026] [:error] [pid 19102:tid 19188] [client 20.215.57.60:5810] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.dj/index.php"] [unique_id "aeqE8gDSgrbLEZbkqD6fUAAAAJg"]
[Fri Apr 24 04:45:39.078540 2026] [:error] [pid 19100:tid 19129] [client 20.215.57.60:5815] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.dj/index.php"] [unique_id "aeqE87F_hzQs4CqbiffxjAAAABM"]
[Fri Apr 24 04:45:39.752441 2026] [:error] [pid 19100:tid 19109] [client 20.215.57.60:55388] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aeqE87F_hzQs4CqbiffxjgAAAAA"]
[Fri Apr 24 04:45:40.321882 2026] [:error] [pid 19100:tid 19124] [client 20.215.57.60:59927] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aeqE9LF_hzQs4CqbiffxkAAAAA4"]
[Fri Apr 24 04:45:40.883485 2026] [:error] [pid 19100:tid 19118] [client 20.215.57.60:31606] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aeqE9LF_hzQs4CqbiffxlAAAAAg"]
[Fri Apr 24 04:45:41.549051 2026] [:error] [pid 19100:tid 19127] [client 20.215.57.60:16194] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "aeqE9bF_hzQs4CqbiffxmgAAABE"]
[Fri Apr 24 04:45:42.137141 2026] [:error] [pid 19101:tid 19142] [client 20.215.57.60:59953] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.tmb/"] [unique_id "aeqE9mAHj9bEvrTgbO21UAAAAEU"]
[Fri Apr 24 04:45:42.757156 2026] [:error] [pid 19200:tid 19211] [client 20.215.57.60:6009] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.tmb/"] [unique_id "aeqE9jQ--M3-tsKAnhFyJwAAAMM"]
[Fri Apr 24 04:45:43.366324 2026] [:error] [pid 19200:tid 19219] [client 20.215.57.60:21560] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.tmb/"] [unique_id "aeqE9zQ--M3-tsKAnhFyLAAAAMs"]
[Fri Apr 24 04:45:43.971801 2026] [:error] [pid 52129:tid 52155] [client 20.215.57.60:16236] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.tmb/"] [unique_id "aeqE9-KCZKf8_u2LKiAkEgAAARY"]
[Fri Apr 24 04:45:44.569348 2026] [:error] [pid 19200:tid 19232] [client 20.215.57.60:8385] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/one.php"] [unique_id "aeqE-DQ--M3-tsKAnhFyLwAAANg"]
[Fri Apr 24 04:45:45.170678 2026] [:error] [pid 19200:tid 19226] [client 20.215.57.60:5981] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/one.php"] [unique_id "aeqE-TQ--M3-tsKAnhFyMwAAANI"]
[Fri Apr 24 04:45:45.740990 2026] [:error] [pid 19100:tid 19134] [client 20.215.57.60:25138] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/one.php"] [unique_id "aeqE-bF_hzQs4CqbiffxrQAAABg"]
[Fri Apr 24 04:45:46.356978 2026] [:error] [pid 19100:tid 19121] [client 20.215.57.60:5791] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/one.php"] [unique_id "aeqE-rF_hzQs4CqbiffxsgAAAAs"]
[Fri Apr 24 04:45:46.948550 2026] [:error] [pid 19102:tid 19183] [client 20.215.57.60:25132] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "aeqE-gDSgrbLEZbkqD6faAAAAJM"]
[Fri Apr 24 04:45:47.555568 2026] [:error] [pid 52129:tid 52139] [client 20.215.57.60:5970] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "aeqE--KCZKf8_u2LKiAkFQAAAQY"]
[Fri Apr 24 04:45:48.175865 2026] [:error] [pid 52129:tid 52141] [client 20.215.57.60:46382] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "aeqE_OKCZKf8_u2LKiAkGAAAAQg"]
[Fri Apr 24 04:45:48.726653 2026] [:error] [pid 19100:tid 19133] [client 20.215.57.60:5967] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "aeqE_LF_hzQs4CqbiffxtwAAABc"]
[Fri Apr 24 04:45:49.307439 2026] [:error] [pid 19200:tid 19217] [client 20.215.57.60:50546] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/dragonshell.php"] [unique_id "aeqE_TQ--M3-tsKAnhFyOQAAAMk"]
[Fri Apr 24 04:45:49.864822 2026] [:error] [pid 52129:tid 52146] [client 20.215.57.60:25115] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/dragonshell.php"] [unique_id "aeqE_eKCZKf8_u2LKiAkJgAAAQ0"]
[Fri Apr 24 04:45:50.401051 2026] [:error] [pid 19102:tid 19172] [client 20.215.57.60:49414] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/dragonshell.php"] [unique_id "aeqE_gDSgrbLEZbkqD6fcAAAAIg"]
[Fri Apr 24 04:45:50.993093 2026] [:error] [pid 19100:tid 19112] [client 20.215.57.60:8440] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/dragonshell.php"] [unique_id "aeqE_rF_hzQs4CqbiffxugAAAAM"]
[Fri Apr 24 04:45:51.574460 2026] [:error] [pid 52129:tid 52141] [client 20.215.57.60:59921] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/no20.php"] [unique_id "aeqE_-KCZKf8_u2LKiAkLQAAAQg"]
[Fri Apr 24 04:45:52.170917 2026] [:error] [pid 19100:tid 19120] [client 20.215.57.60:31596] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/no20.php"] [unique_id "aeqFALF_hzQs4CqbiffxwAAAAAo"]
[Fri Apr 24 04:45:52.807558 2026] [:error] [pid 19100:tid 19124] [client 20.215.57.60:58501] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/no20.php"] [unique_id "aeqFALF_hzQs4CqbiffxxwAAAA4"]
[Fri Apr 24 04:45:53.357980 2026] [:error] [pid 19100:tid 19132] [client 20.215.57.60:55304] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/no20.php"] [unique_id "aeqFAbF_hzQs4CqbiffxzQAAABY"]
[Fri Apr 24 04:45:53.903038 2026] [:error] [pid 52129:tid 52135] [client 20.215.57.60:16239] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-alone.php"] [unique_id "aeqFAeKCZKf8_u2LKiAkNQAAAQI"]
[Fri Apr 24 04:45:54.480668 2026] [:error] [pid 52129:tid 52155] [client 20.215.57.60:23632] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-alone.php"] [unique_id "aeqFAuKCZKf8_u2LKiAkNwAAARY"]
[Fri Apr 24 04:45:55.000104 2026] [:error] [pid 19100:tid 19130] [client 20.215.57.60:25109] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-alone.php"] [unique_id "aeqFArF_hzQs4Cqbiffx0QAAABQ"]
[Fri Apr 24 04:45:55.586943 2026] [:error] [pid 19101:tid 19150] [client 20.215.57.60:58517] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-alone.php"] [unique_id "aeqFA2AHj9bEvrTgbO21XwAAAE0"]
[Fri Apr 24 04:45:56.162988 2026] [:error] [pid 52129:tid 52155] [client 20.215.57.60:21559] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/yasnu.php"] [unique_id "aeqFBOKCZKf8_u2LKiAkRAAAARY"]
[Fri Apr 24 04:45:56.731447 2026] [:error] [pid 52129:tid 52153] [client 20.215.57.60:21534] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/yasnu.php"] [unique_id "aeqFBOKCZKf8_u2LKiAkTQAAARQ"]
[Fri Apr 24 04:45:57.314334 2026] [:error] [pid 52129:tid 52137] [client 20.215.57.60:16206] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/yasnu.php"] [unique_id "aeqFBeKCZKf8_u2LKiAkVQAAAQQ"]
[Fri Apr 24 04:45:57.884693 2026] [:error] [pid 19200:tid 19211] [client 20.215.57.60:5995] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/yasnu.php"] [unique_id "aeqFBTQ--M3-tsKAnhFyPAAAAMM"]
[Fri Apr 24 04:45:58.492184 2026] [:error] [pid 19101:tid 19153] [client 20.215.57.60:49423] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/sl.php"] [unique_id "aeqFBmAHj9bEvrTgbO21YwAAAFA"]
[Fri Apr 24 04:45:59.104383 2026] [:error] [pid 19100:tid 19122] [client 20.215.57.60:16245] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/sl.php"] [unique_id "aeqFB7F_hzQs4Cqbiffx1wAAAAw"]
[Fri Apr 24 04:45:59.712963 2026] [:error] [pid 19102:tid 19184] [client 20.215.57.60:59967] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/sl.php"] [unique_id "aeqFBwDSgrbLEZbkqD6ffgAAAJQ"]
[Fri Apr 24 04:46:00.256717 2026] [:error] [pid 19200:tid 19215] [client 20.215.57.60:21557] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/sl.php"] [unique_id "aeqFCDQ--M3-tsKAnhFyQAAAAMc"]
[Fri Apr 24 04:46:00.798840 2026] [:error] [pid 19102:tid 19183] [client 20.215.57.60:23639] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/sw.php"] [unique_id "aeqFCADSgrbLEZbkqD6ffwAAAJM"]
[Fri Apr 24 04:46:01.341933 2026] [:error] [pid 52129:tid 52142] [client 20.215.57.60:49455] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/sw.php"] [unique_id "aeqFCeKCZKf8_u2LKiAkYwAAAQk"]
[Fri Apr 24 04:46:01.899248 2026] [:error] [pid 19102:tid 19185] [client 20.215.57.60:55348] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/sw.php"] [unique_id "aeqFCQDSgrbLEZbkqD6fhAAAAJU"]
[Fri Apr 24 04:46:02.434085 2026] [:error] [pid 19102:tid 19167] [client 20.215.57.60:24626] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/sw.php"] [unique_id "aeqFCgDSgrbLEZbkqD6fhwAAAIM"]
[Fri Apr 24 04:46:02.976722 2026] [:error] [pid 19102:tid 19182] [client 20.215.57.60:5687] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/vuln.php"] [unique_id "aeqFCgDSgrbLEZbkqD6fiwAAAJI"]
[Fri Apr 24 04:46:03.547662 2026] [:error] [pid 52129:tid 52139] [client 20.215.57.60:25101] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/vuln.php"] [unique_id "aeqFC-KCZKf8_u2LKiAkZwAAAQY"]
[Fri Apr 24 04:46:04.097123 2026] [:error] [pid 19102:tid 19167] [client 20.215.57.60:5786] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/vuln.php"] [unique_id "aeqFDADSgrbLEZbkqD6fmAAAAIM"]
[Fri Apr 24 04:46:04.693844 2026] [:error] [pid 52129:tid 52136] [client 20.215.57.60:21595] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/vuln.php"] [unique_id "aeqFDOKCZKf8_u2LKiAkagAAAQM"]
[Fri Apr 24 04:46:05.219589 2026] [:error] [pid 19102:tid 19175] [client 20.215.57.60:24628] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-temp.php"] [unique_id "aeqFDQDSgrbLEZbkqD6fqAAAAIs"]
[Fri Apr 24 04:46:05.764600 2026] [:error] [pid 52129:tid 52146] [client 20.215.57.60:23630] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-temp.php"] [unique_id "aeqFDeKCZKf8_u2LKiAkcgAAAQ0"]
[Fri Apr 24 04:46:06.337482 2026] [:error] [pid 19102:tid 19172] [client 20.215.57.60:38051] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-temp.php"] [unique_id "aeqFDgDSgrbLEZbkqD6fsgAAAIg"]
[Fri Apr 24 04:46:06.886357 2026] [:error] [pid 52129:tid 52145] [client 20.215.57.60:21575] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-temp.php"] [unique_id "aeqFDuKCZKf8_u2LKiAkdgAAAQw"]
[Fri Apr 24 04:46:07.450816 2026] [:error] [pid 19101:tid 19157] [client 20.215.57.60:21522] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/sxdfrt.php"] [unique_id "aeqFD2AHj9bEvrTgbO21agAAAFQ"]
[Fri Apr 24 04:46:08.008740 2026] [:error] [pid 52129:tid 52144] [client 20.215.57.60:54054] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/sxdfrt.php"] [unique_id "aeqFEOKCZKf8_u2LKiAkfQAAAQs"]
[Fri Apr 24 04:46:08.569504 2026] [:error] [pid 19100:tid 19112] [client 20.215.57.60:5641] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/sxdfrt.php"] [unique_id "aeqFELF_hzQs4Cqbiffx9QAAAAM"]
[Fri Apr 24 04:46:09.151067 2026] [:error] [pid 19102:tid 19181] [client 20.215.57.60:6018] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/sxdfrt.php"] [unique_id "aeqFEQDSgrbLEZbkqD6fygAAAJE"]
[Fri Apr 24 04:46:09.745702 2026] [:error] [pid 52129:tid 52140] [client 20.215.57.60:15641] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeqFEeKCZKf8_u2LKiAkhQAAAQc"]
[Fri Apr 24 04:46:10.330261 2026] [:error] [pid 52129:tid 52151] [client 20.215.57.60:61275] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeqFEuKCZKf8_u2LKiAkjAAAARI"]
[Fri Apr 24 04:46:10.895935 2026] [:error] [pid 19100:tid 19116] [client 20.215.57.60:64713] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeqFErF_hzQs4Cqbiffx_wAAAAc"]
[Fri Apr 24 04:46:11.456445 2026] [:error] [pid 19101:tid 19148] [client 20.215.57.60:21600] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "aeqFE2AHj9bEvrTgbO21bAAAAEs"]
[Fri Apr 24 04:46:12.062740 2026] [:error] [pid 19100:tid 19130] [client 20.215.57.60:54057] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeqFFLF_hzQs4CqbiffyAwAAABQ"]
[Fri Apr 24 04:46:12.604829 2026] [:error] [pid 19101:tid 19141] [client 20.215.57.60:15679] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeqFFGAHj9bEvrTgbO21cAAAAEQ"]
[Fri Apr 24 04:46:13.140288 2026] [:error] [pid 19100:tid 19110] [client 20.215.57.60:30155] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeqFFbF_hzQs4CqbiffyDgAAAAE"]
[Fri Apr 24 04:46:13.679908 2026] [:error] [pid 52129:tid 52148] [client 20.215.57.60:32066] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "aeqFFeKCZKf8_u2LKiAklQAAAQ8"]
[Fri Apr 24 04:46:14.260842 2026] [:error] [pid 19200:tid 19231] [client 20.215.57.60:61306] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/class-bda.php"] [unique_id "aeqFFjQ--M3-tsKAnhFyVAAAANc"]
[Fri Apr 24 04:46:14.882688 2026] [:error] [pid 19101:tid 19156] [client 20.215.57.60:32096] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/class-bda.php"] [unique_id "aeqFFmAHj9bEvrTgbO21cwAAAFM"]
[Fri Apr 24 04:46:15.450003 2026] [:error] [pid 52129:tid 52145] [client 20.215.57.60:28617] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/class-bda.php"] [unique_id "aeqFF-KCZKf8_u2LKiAkngAAAQw"]
[Fri Apr 24 04:46:16.050822 2026] [:error] [pid 19102:tid 19186] [client 20.215.57.60:30170] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/class-bda.php"] [unique_id "aeqFGADSgrbLEZbkqD6f-QAAAJY"]
[Fri Apr 24 04:46:16.610490 2026] [:error] [pid 52129:tid 52137] [client 20.215.57.60:32103] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bhm.php"] [unique_id "aeqFGOKCZKf8_u2LKiAkqQAAAQQ"]
[Fri Apr 24 04:46:17.211615 2026] [:error] [pid 19101:tid 19137] [client 20.215.57.60:28623] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bhm.php"] [unique_id "aeqFGWAHj9bEvrTgbO21ewAAAEA"]
[Fri Apr 24 04:46:17.777365 2026] [:error] [pid 19102:tid 19183] [client 20.215.57.60:6142] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bhm.php"] [unique_id "aeqFGQDSgrbLEZbkqD6gAAAAAJM"]
[Fri Apr 24 04:46:18.399294 2026] [:error] [pid 19200:tid 19213] [client 20.215.57.60:35193] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bhm.php"] [unique_id "aeqFGjQ--M3-tsKAnhFyXAAAAMU"]
[Fri Apr 24 04:46:18.968928 2026] [:error] [pid 52129:tid 52147] [client 20.215.57.60:42784] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xmu.php"] [unique_id "aeqFGuKCZKf8_u2LKiAkuQAAAQ4"]
[Fri Apr 24 04:46:19.565785 2026] [:error] [pid 19100:tid 19127] [client 20.215.57.60:63179] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xmu.php"] [unique_id "aeqFG7F_hzQs4CqbiffyGwAAABE"]
[Fri Apr 24 04:46:20.102694 2026] [:error] [pid 52129:tid 52145] [client 20.215.57.60:60678] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xmu.php"] [unique_id "aeqFHOKCZKf8_u2LKiAkvQAAAQw"]
[Fri Apr 24 04:46:20.671793 2026] [:error] [pid 52129:tid 52150] [client 20.215.57.60:16670] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xmu.php"] [unique_id "aeqFHOKCZKf8_u2LKiAkwQAAARE"]
[Fri Apr 24 04:46:21.294963 2026] [:error] [pid 19100:tid 19129] [client 20.215.57.60:63188] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ref.php"] [unique_id "aeqFHbF_hzQs4CqbiffyJQAAABM"]
[Fri Apr 24 04:46:21.901381 2026] [:error] [pid 19101:tid 19152] [client 20.215.57.60:63211] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ref.php"] [unique_id "aeqFHWAHj9bEvrTgbO21igAAAE8"]
[Fri Apr 24 04:46:22.442027 2026] [:error] [pid 52129:tid 52133] [client 20.215.57.60:5391] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ref.php"] [unique_id "aeqFHuKCZKf8_u2LKiAkxQAAAQA"]
[Fri Apr 24 04:46:23.004416 2026] [:error] [pid 52129:tid 52137] [client 20.215.57.60:38103] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ref.php"] [unique_id "aeqFH-KCZKf8_u2LKiAkxgAAAQQ"]
[Fri Apr 24 04:46:23.572731 2026] [:error] [pid 19200:tid 19225] [client 20.215.57.60:33609] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-xme.php"] [unique_id "aeqFHzQ--M3-tsKAnhFyZwAAANE"]
[Fri Apr 24 04:46:24.159195 2026] [:error] [pid 19102:tid 19178] [client 20.215.57.60:32006] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-xme.php"] [unique_id "aeqFIADSgrbLEZbkqD6gJAAAAI4"]
[Fri Apr 24 04:46:24.732635 2026] [:error] [pid 19200:tid 19220] [client 20.215.57.60:5687] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-xme.php"] [unique_id "aeqFIDQ--M3-tsKAnhFybwAAAMw"]
[Fri Apr 24 04:46:25.301048 2026] [:error] [pid 52129:tid 52145] [client 20.215.57.60:16666] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-xme.php"] [unique_id "aeqFIeKCZKf8_u2LKiAk1gAAAQw"]
[Fri Apr 24 04:46:25.905799 2026] [:error] [pid 19100:tid 19131] [client 20.215.57.60:15738] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/adminer.php"] [unique_id "aeqFIbF_hzQs4CqbiffyMAAAABU"]
[Fri Apr 24 04:46:26.477724 2026] [:error] [pid 19200:tid 19218] [client 20.215.57.60:32037] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/adminer.php"] [unique_id "aeqFIjQ--M3-tsKAnhFydAAAAMo"]
[Fri Apr 24 04:46:27.061571 2026] [:error] [pid 52129:tid 52149] [client 20.215.57.60:49253] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/adminer.php"] [unique_id "aeqFI-KCZKf8_u2LKiAk5wAAARA"]
[Fri Apr 24 04:46:27.608437 2026] [:error] [pid 19200:tid 19208] [client 20.215.57.60:42317] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/adminer.php"] [unique_id "aeqFIzQ--M3-tsKAnhFyeQAAAMA"]
[Fri Apr 24 04:46:28.245791 2026] [:error] [pid 19100:tid 19113] [client 20.215.57.60:17159] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ktfow.php"] [unique_id "aeqFJLF_hzQs4CqbiffyNgAAAAQ"]
[Fri Apr 24 04:46:28.873019 2026] [:error] [pid 52129:tid 52133] [client 20.215.57.60:42363] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ktfow.php"] [unique_id "aeqFJOKCZKf8_u2LKiAk8gAAAQA"]
[Fri Apr 24 04:46:29.451852 2026] [:error] [pid 52129:tid 52146] [client 20.215.57.60:36586] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ktfow.php"] [unique_id "aeqFJeKCZKf8_u2LKiAk9gAAAQ0"]
[Fri Apr 24 04:46:29.991303 2026] [:error] [pid 19101:tid 19141] [client 20.215.57.60:31110] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ktfow.php"] [unique_id "aeqFJWAHj9bEvrTgbO21kQAAAEQ"]
[Fri Apr 24 04:46:30.679673 2026] [:error] [pid 19200:tid 19222] [client 20.215.57.60:36552] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/mode.php"] [unique_id "aeqFJjQ--M3-tsKAnhFyhQAAAM4"]
[Fri Apr 24 04:46:31.304574 2026] [:error] [pid 19200:tid 19228] [client 20.215.57.60:22137] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/mode.php"] [unique_id "aeqFJzQ--M3-tsKAnhFyiAAAANQ"]
[Fri Apr 24 04:46:31.909846 2026] [:error] [pid 52129:tid 52148] [client 20.215.57.60:57893] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/mode.php"] [unique_id "aeqFJ-KCZKf8_u2LKiAlCAAAAQ8"]
[Fri Apr 24 04:46:32.479424 2026] [:error] [pid 19102:tid 19182] [client 20.215.57.60:35134] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/mode.php"] [unique_id "aeqFKADSgrbLEZbkqD6gNAAAAJI"]
[Fri Apr 24 04:46:33.062573 2026] [:error] [pid 19100:tid 19124] [client 20.215.57.60:36495] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/Xx.php"] [unique_id "aeqFKbF_hzQs4CqbiffyQwAAAA4"]
[Fri Apr 24 04:46:33.638116 2026] [:error] [pid 19101:tid 19146] [client 20.215.57.60:51119] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/Xx.php"] [unique_id "aeqFKWAHj9bEvrTgbO21mQAAAEk"]
[Fri Apr 24 04:46:34.361169 2026] [:error] [pid 52129:tid 52137] [client 20.215.57.60:17699] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/Xx.php"] [unique_id "aeqFKuKCZKf8_u2LKiAlDgAAAQQ"]
[Fri Apr 24 04:46:34.995352 2026] [:error] [pid 19101:tid 19151] [client 20.215.57.60:28119] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/Xx.php"] [unique_id "aeqFKmAHj9bEvrTgbO21nQAAAE4"]
[Fri Apr 24 04:46:35.542492 2026] [:error] [pid 19102:tid 19177] [client 20.215.57.60:37491] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xmini.php"] [unique_id "aeqFKwDSgrbLEZbkqD6gPQAAAI0"]
[Fri Apr 24 04:46:36.130341 2026] [:error] [pid 19102:tid 19179] [client 20.215.57.60:35601] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xmini.php"] [unique_id "aeqFLADSgrbLEZbkqD6gPwAAAI8"]
[Fri Apr 24 04:46:36.659768 2026] [:error] [pid 52129:tid 52147] [client 20.215.57.60:35606] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xmini.php"] [unique_id "aeqFLOKCZKf8_u2LKiAlGAAAAQ4"]
[Fri Apr 24 04:46:46.065379 2026] [:error] [pid 19102:tid 19172] [client 20.215.57.60:36146] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "aeqFNgDSgrbLEZbkqD6gagAAAIg"]
[Fri Apr 24 04:46:46.659773 2026] [:error] [pid 52129:tid 52143] [client 20.215.57.60:56031] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "aeqFNuKCZKf8_u2LKiAlMAAAAQo"]
[Fri Apr 24 04:46:47.284905 2026] [:error] [pid 52129:tid 52135] [client 20.215.57.60:18149] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "aeqFN-KCZKf8_u2LKiAlNAAAAQI"]
[Fri Apr 24 04:46:47.851164 2026] [:error] [pid 19100:tid 19121] [client 20.215.57.60:27754] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "aeqFN7F_hzQs4CqbiffyXAAAAAs"]
[Fri Apr 24 04:46:48.378604 2026] [:error] [pid 19100:tid 19118] [client 20.215.57.60:45084] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "aeqFOLF_hzQs4CqbiffyXgAAAAg"]
[Fri Apr 24 04:46:48.939176 2026] [:error] [pid 19101:tid 19154] [client 20.215.57.60:40054] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "aeqFOGAHj9bEvrTgbO211AAAAFE"]
[Fri Apr 24 04:46:50.014774 2026] [:error] [pid 52129:tid 52147] [client 20.215.57.60:20004] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "aeqFOuKCZKf8_u2LKiAlQgAAAQ4"]
[Fri Apr 24 04:46:50.800004 2026] [:error] [pid 19200:tid 19231] [client 20.215.57.60:40041] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "aeqFOjQ--M3-tsKAnhFywwAAANc"]
[Fri Apr 24 04:46:51.475385 2026] [:error] [pid 52129:tid 52145] [client 20.215.57.60:40063] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "aeqFO-KCZKf8_u2LKiAlRwAAAQw"]
[Fri Apr 24 04:46:52.147919 2026] [:error] [pid 19200:tid 19211] [client 20.215.57.60:38831] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "aeqFPDQ--M3-tsKAnhFyyAAAAMM"]
[Fri Apr 24 04:46:52.984745 2026] [:error] [pid 19101:tid 19146] [client 20.215.57.60:33573] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "aeqFPGAHj9bEvrTgbO212gAAAEk"]
[Fri Apr 24 04:46:53.671370 2026] [:error] [pid 19200:tid 19219] [client 20.215.57.60:38740] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "aeqFPTQ--M3-tsKAnhFy0gAAAMs"]
[Fri Apr 24 04:46:54.388748 2026] [:error] [pid 19200:tid 19229] [client 20.215.57.60:25168] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "aeqFPjQ--M3-tsKAnhFy1wAAANU"]
[Fri Apr 24 04:46:54.999814 2026] [:error] [pid 19200:tid 19218] [client 20.215.57.60:56015] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "aeqFPjQ--M3-tsKAnhFy2QAAAMo"]
[Fri Apr 24 04:46:55.677801 2026] [:error] [pid 19200:tid 19212] [client 20.215.57.60:17226] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "aeqFPzQ--M3-tsKAnhFy3gAAAMQ"]
[Fri Apr 24 04:46:56.312611 2026] [:error] [pid 19200:tid 19219] [client 20.215.57.60:18160] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "aeqFQDQ--M3-tsKAnhFy4gAAAMs"]
[Fri Apr 24 04:46:56.950153 2026] [:error] [pid 52129:tid 52134] [client 20.215.57.60:57304] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/13.php"] [unique_id "aeqFQOKCZKf8_u2LKiAlVwAAAQE"]
[Fri Apr 24 04:46:57.728458 2026] [:error] [pid 52129:tid 52157] [client 20.215.57.60:29637] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/13.php"] [unique_id "aeqFQeKCZKf8_u2LKiAlXQAAARg"]
[Fri Apr 24 04:46:58.485762 2026] [:error] [pid 52129:tid 52135] [client 20.215.57.60:17279] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/13.php"] [unique_id "aeqFQuKCZKf8_u2LKiAlYwAAAQI"]
[Fri Apr 24 04:46:59.184944 2026] [:error] [pid 19200:tid 19219] [client 20.215.57.60:57324] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/13.php"] [unique_id "aeqFQzQ--M3-tsKAnhFy8wAAAMs"]
[Fri Apr 24 04:46:59.745904 2026] [:error] [pid 19102:tid 19176] [client 20.215.57.60:48752] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/11.php"] [unique_id "aeqFQwDSgrbLEZbkqD6gugAAAIw"]
[Fri Apr 24 04:47:00.323159 2026] [:error] [pid 52129:tid 52153] [client 20.215.57.60:34105] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/11.php"] [unique_id "aeqFROKCZKf8_u2LKiAlaAAAARQ"]
[Fri Apr 24 04:47:00.963154 2026] [:error] [pid 19100:tid 19123] [client 20.215.57.60:5828] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/11.php"] [unique_id "aeqFRLF_hzQs4CqbiffybAAAAA0"]
[Fri Apr 24 04:47:01.607853 2026] [:error] [pid 52129:tid 52156] [client 20.215.57.60:30602] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/11.php"] [unique_id "aeqFReKCZKf8_u2LKiAlcwAAARc"]
[Fri Apr 24 04:47:02.259068 2026] [:error] [pid 52129:tid 52148] [client 20.215.57.60:30623] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/p.php"] [unique_id "aeqFRuKCZKf8_u2LKiAleAAAAQ8"]
[Fri Apr 24 04:47:02.807252 2026] [:error] [pid 52129:tid 52136] [client 20.215.57.60:57321] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/p.php"] [unique_id "aeqFRuKCZKf8_u2LKiAlfgAAAQM"]
[Fri Apr 24 04:47:03.412316 2026] [:error] [pid 52129:tid 52154] [client 20.215.57.60:5875] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/p.php"] [unique_id "aeqFR-KCZKf8_u2LKiAlgwAAARU"]
[Fri Apr 24 04:47:04.060700 2026] [:error] [pid 19101:tid 19141] [client 20.215.57.60:16171] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/p.php"] [unique_id "aeqFSGAHj9bEvrTgbO219QAAAEQ"]
[Fri Apr 24 04:47:04.692145 2026] [:error] [pid 52129:tid 52153] [client 20.215.57.60:34081] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeqFSOKCZKf8_u2LKiAliQAAARQ"]
[Fri Apr 24 04:47:05.332090 2026] [:error] [pid 19100:tid 19129] [client 20.215.57.60:48710] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeqFSbF_hzQs4CqbiffycwAAABM"]
[Fri Apr 24 04:47:05.973175 2026] [:error] [pid 19100:tid 19128] [client 20.215.57.60:41873] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeqFSbF_hzQs4CqbiffydQAAABI"]
[Fri Apr 24 04:47:06.767387 2026] [:error] [pid 19100:tid 19111] [client 20.215.57.60:34571] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/"] [unique_id "aeqFSrF_hzQs4CqbiffyfwAAAAI"]
[Fri Apr 24 04:47:07.397296 2026] [:error] [pid 19100:tid 19132] [client 20.215.57.60:28589] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "aeqFS7F_hzQs4CqbiffyhAAAABY"]
[Fri Apr 24 04:47:07.941138 2026] [:error] [pid 19200:tid 19228] [client 20.215.57.60:31191] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "aeqFSzQ--M3-tsKAnhFzAAAAANQ"]
[Fri Apr 24 04:47:08.513960 2026] [:error] [pid 19102:tid 19182] [client 20.215.57.60:28559] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "aeqFTADSgrbLEZbkqD6gwgAAAJI"]
[Fri Apr 24 04:47:09.074508 2026] [:error] [pid 19200:tid 19231] [client 20.215.57.60:30628] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "aeqFTTQ--M3-tsKAnhFzBAAAANc"]
[Fri Apr 24 04:47:09.603450 2026] [:error] [pid 19200:tid 19221] [client 20.215.57.60:31230] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aeqFTTQ--M3-tsKAnhFzCwAAAM0"]
[Fri Apr 24 04:47:10.201272 2026] [:error] [pid 52129:tid 52149] [client 20.215.57.60:61238] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aeqFTuKCZKf8_u2LKiAllgAAARA"]
[Fri Apr 24 04:47:10.780871 2026] [:error] [pid 52129:tid 52144] [client 20.215.57.60:61216] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aeqFTuKCZKf8_u2LKiAlnQAAAQs"]
[Fri Apr 24 04:47:11.366850 2026] [:error] [pid 52129:tid 52137] [client 20.215.57.60:57948] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "aeqFT-KCZKf8_u2LKiAlogAAAQQ"]
[Fri Apr 24 04:47:11.882672 2026] [:error] [pid 19101:tid 19149] [client 20.215.57.60:41882] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/max.php"] [unique_id "aeqFT2AHj9bEvrTgbO22AgAAAEw"]
[Fri Apr 24 04:47:12.408626 2026] [:error] [pid 19101:tid 19154] [client 20.215.57.60:43273] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/max.php"] [unique_id "aeqFUGAHj9bEvrTgbO22BAAAAFE"]
[Fri Apr 24 04:47:12.965886 2026] [:error] [pid 19102:tid 19180] [client 20.215.57.60:48209] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/max.php"] [unique_id "aeqFUADSgrbLEZbkqD6gygAAAJA"]
[Fri Apr 24 04:47:13.544967 2026] [:error] [pid 19200:tid 19221] [client 20.215.57.60:41878] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/max.php"] [unique_id "aeqFUTQ--M3-tsKAnhFzGwAAAM0"]
[Fri Apr 24 04:47:14.122846 2026] [:error] [pid 52129:tid 52157] [client 20.215.57.60:43308] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/seo.php"] [unique_id "aeqFUuKCZKf8_u2LKiAlqgAAARg"]
[Fri Apr 24 04:47:14.658178 2026] [:error] [pid 52129:tid 52134] [client 20.215.57.60:24648] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/seo.php"] [unique_id "aeqFUuKCZKf8_u2LKiAlrwAAAQE"]
[Fri Apr 24 04:47:15.245714 2026] [:error] [pid 52129:tid 52139] [client 20.215.57.60:41259] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/seo.php"] [unique_id "aeqFU-KCZKf8_u2LKiAltQAAAQY"]
[Fri Apr 24 04:47:15.857053 2026] [:error] [pid 52129:tid 52143] [client 20.215.57.60:34614] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/seo.php"] [unique_id "aeqFU-KCZKf8_u2LKiAlvAAAAQo"]
[Fri Apr 24 04:47:16.462838 2026] [:error] [pid 19102:tid 19168] [client 20.215.57.60:26661] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/7.php"] [unique_id "aeqFVADSgrbLEZbkqD6g0AAAAIQ"]
[Fri Apr 24 04:47:17.207746 2026] [:error] [pid 19200:tid 19216] [client 20.215.57.60:61185] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/7.php"] [unique_id "aeqFVTQ--M3-tsKAnhFzLAAAAMg"]
[Fri Apr 24 04:47:17.890266 2026] [:error] [pid 19101:tid 19137] [client 20.215.57.60:28571] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/7.php"] [unique_id "aeqFVWAHj9bEvrTgbO22CwAAAEA"]
[Fri Apr 24 04:47:18.491019 2026] [:error] [pid 19100:tid 19131] [client 20.215.57.60:60294] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/7.php"] [unique_id "aeqFVrF_hzQs4CqbiffyoQAAABU"]
[Fri Apr 24 04:47:19.102742 2026] [:error] [pid 19101:tid 19159] [client 20.215.57.60:16158] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aeqFV2AHj9bEvrTgbO22DAAAAFY"]
[Fri Apr 24 04:47:19.829462 2026] [:error] [pid 19102:tid 19179] [client 20.215.57.60:26682] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aeqFVwDSgrbLEZbkqD6g2QAAAI8"]
[Fri Apr 24 04:47:20.398677 2026] [:error] [pid 52129:tid 52153] [client 20.215.57.60:61199] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aeqFWOKCZKf8_u2LKiAlzAAAARQ"]
[Fri Apr 24 04:47:21.008561 2026] [:error] [pid 52129:tid 52144] [client 20.215.57.60:41885] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aeqFWeKCZKf8_u2LKiAlzQAAAQs"]
[Fri Apr 24 04:47:21.697994 2026] [:error] [pid 52129:tid 52137] [client 20.215.57.60:32522] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aeqFWeKCZKf8_u2LKiAl0gAAAQQ"]
[Fri Apr 24 04:47:22.297074 2026] [:error] [pid 52129:tid 52148] [client 20.215.57.60:25654] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aeqFWuKCZKf8_u2LKiAl2AAAAQ8"]
[Fri Apr 24 04:47:22.895357 2026] [:error] [pid 19101:tid 19140] [client 20.215.57.60:24676] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aeqFWmAHj9bEvrTgbO22HgAAAEM"]
[Fri Apr 24 04:47:23.567721 2026] [:error] [pid 19100:tid 19127] [client 20.215.57.60:61202] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "aeqFW7F_hzQs4CqbiffyqwAAABE"]
[Fri Apr 24 04:47:24.142605 2026] [:error] [pid 19200:tid 19228] [client 20.215.57.60:24672] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "aeqFXDQ--M3-tsKAnhFzNwAAANQ"]
[Fri Apr 24 04:47:24.765070 2026] [:error] [pid 19200:tid 19215] [client 20.215.57.60:60334] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "aeqFXDQ--M3-tsKAnhFzOAAAAMc"]
[Fri Apr 24 04:47:25.374569 2026] [:error] [pid 52129:tid 52153] [client 20.215.57.60:34606] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "aeqFXeKCZKf8_u2LKiAl5gAAARQ"]
[Fri Apr 24 04:47:26.153079 2026] [:error] [pid 52129:tid 52139] [client 20.215.57.60:26649] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "aeqFXuKCZKf8_u2LKiAl8AAAAQY"]
[Fri Apr 24 04:47:26.832650 2026] [:error] [pid 52129:tid 52136] [client 20.215.57.60:61212] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/3.php"] [unique_id "aeqFXuKCZKf8_u2LKiAl-QAAAQM"]
[Fri Apr 24 04:47:27.368086 2026] [:error] [pid 52129:tid 52139] [client 20.215.57.60:60030] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/3.php"] [unique_id "aeqFX-KCZKf8_u2LKiAl_wAAAQY"]
[Fri Apr 24 04:47:27.938038 2026] [:error] [pid 52129:tid 52156] [client 20.215.57.60:60306] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/3.php"] [unique_id "aeqFX-KCZKf8_u2LKiAmBQAAARc"]
[Fri Apr 24 04:47:28.484303 2026] [:error] [pid 19200:tid 19209] [client 20.215.57.60:24091] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/3.php"] [unique_id "aeqFYDQ--M3-tsKAnhFzPQAAAME"]
[Fri Apr 24 04:47:29.089339 2026] [:error] [pid 19200:tid 19218] [client 20.215.57.60:41891] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/4.php"] [unique_id "aeqFYTQ--M3-tsKAnhFzRAAAAMo"]
[Fri Apr 24 04:47:29.677720 2026] [:error] [pid 52129:tid 52143] [client 20.215.57.60:19467] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/4.php"] [unique_id "aeqFYeKCZKf8_u2LKiAmDAAAAQo"]
[Fri Apr 24 04:47:30.284777 2026] [:error] [pid 19102:tid 19179] [client 20.215.57.60:26650] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/4.php"] [unique_id "aeqFYgDSgrbLEZbkqD6g5wAAAI8"]
[Fri Apr 24 04:47:30.918247 2026] [:error] [pid 19200:tid 19216] [client 20.215.57.60:56638] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/4.php"] [unique_id "aeqFYjQ--M3-tsKAnhFzTgAAAMg"]
[Fri Apr 24 04:47:31.565011 2026] [:error] [pid 19102:tid 19176] [client 20.215.57.60:48210] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/5.php"] [unique_id "aeqFYwDSgrbLEZbkqD6g6gAAAIw"]
[Fri Apr 24 04:47:32.105863 2026] [:error] [pid 19102:tid 19168] [client 20.215.57.60:58567] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/5.php"] [unique_id "aeqFZADSgrbLEZbkqD6g7wAAAIQ"]
[Fri Apr 24 04:47:32.719824 2026] [:error] [pid 52129:tid 52150] [client 20.215.57.60:25645] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/5.php"] [unique_id "aeqFZOKCZKf8_u2LKiAmFgAAARE"]
[Fri Apr 24 04:47:33.286087 2026] [:error] [pid 19200:tid 19210] [client 20.215.57.60:48710] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/5.php"] [unique_id "aeqFZTQ--M3-tsKAnhFzUgAAAMI"]
[Fri Apr 24 04:47:34.050820 2026] [:error] [pid 19200:tid 19221] [client 20.215.57.60:43268] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/6.php"] [unique_id "aeqFZjQ--M3-tsKAnhFzVQAAAM0"]
[Fri Apr 24 04:47:34.724897 2026] [:error] [pid 19200:tid 19213] [client 20.215.57.60:44619] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/6.php"] [unique_id "aeqFZjQ--M3-tsKAnhFzWgAAAMU"]
[Fri Apr 24 04:47:35.372177 2026] [:error] [pid 19200:tid 19220] [client 20.215.57.60:52428] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/6.php"] [unique_id "aeqFZzQ--M3-tsKAnhFzXAAAAMw"]
[Fri Apr 24 04:47:35.973033 2026] [:error] [pid 19102:tid 19180] [client 20.215.57.60:26672] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/6.php"] [unique_id "aeqFZwDSgrbLEZbkqD6g-wAAAJA"]
[Fri Apr 24 04:47:36.569135 2026] [:error] [pid 19200:tid 19216] [client 20.215.57.60:62859] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/9.php"] [unique_id "aeqFaDQ--M3-tsKAnhFzXwAAAMg"]
[Fri Apr 24 04:47:37.160463 2026] [:error] [pid 52129:tid 52146] [client 20.215.57.60:19481] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/9.php"] [unique_id "aeqFaeKCZKf8_u2LKiAmLgAAAQ0"]
[Fri Apr 24 04:47:37.739978 2026] [:error] [pid 19100:tid 19109] [client 20.215.57.60:44619] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/9.php"] [unique_id "aeqFabF_hzQs4CqbiffytQAAAAA"]
[Fri Apr 24 04:47:38.328447 2026] [:error] [pid 19200:tid 19221] [client 20.215.57.60:24105] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/9.php"] [unique_id "aeqFajQ--M3-tsKAnhFzYwAAAM0"]
[Fri Apr 24 04:47:38.991585 2026] [:error] [pid 19200:tid 19212] [client 20.215.57.60:52437] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/10.php"] [unique_id "aeqFajQ--M3-tsKAnhFzagAAAMQ"]
[Fri Apr 24 04:47:39.640302 2026] [:error] [pid 52129:tid 52133] [client 20.215.57.60:43269] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/10.php"] [unique_id "aeqFa-KCZKf8_u2LKiAmNAAAAQA"]
[Fri Apr 24 04:47:40.182566 2026] [:error] [pid 52129:tid 52151] [client 20.215.57.60:44667] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/10.php"] [unique_id "aeqFbOKCZKf8_u2LKiAmOgAAARI"]
[Fri Apr 24 04:47:40.752357 2026] [:error] [pid 19102:tid 19181] [client 20.215.57.60:52448] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/10.php"] [unique_id "aeqFbADSgrbLEZbkqD6hCgAAAJE"]
[Fri Apr 24 04:47:41.366161 2026] [:error] [pid 19200:tid 19219] [client 20.215.57.60:5265] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/100.php"] [unique_id "aeqFbTQ--M3-tsKAnhFzcAAAAMs"]
[Fri Apr 24 04:47:41.969464 2026] [:error] [pid 19200:tid 19212] [client 20.215.57.60:44637] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/100.php"] [unique_id "aeqFbTQ--M3-tsKAnhFzdQAAAMQ"]
[Fri Apr 24 04:47:42.524482 2026] [:error] [pid 19101:tid 19138] [client 20.215.57.60:58615] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/100.php"] [unique_id "aeqFbmAHj9bEvrTgbO22OAAAAEE"]
[Fri Apr 24 04:47:43.090433 2026] [:error] [pid 19100:tid 19110] [client 20.215.57.60:58616] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/100.php"] [unique_id "aeqFb7F_hzQs4CqbiffyuQAAAAE"]
[Fri Apr 24 04:47:43.679960 2026] [:error] [pid 19101:tid 19153] [client 20.215.57.60:62969] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeqFb2AHj9bEvrTgbO22PQAAAFA"]
[Fri Apr 24 04:47:44.245295 2026] [:error] [pid 19101:tid 19140] [client 20.215.57.60:24087] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeqFcGAHj9bEvrTgbO22QAAAAEM"]
[Fri Apr 24 04:47:44.894663 2026] [:error] [pid 52129:tid 52136] [client 20.215.57.60:62917] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/nastar.php"] [unique_id "aeqFcOKCZKf8_u2LKiAmQwAAAQM"]
[Fri Apr 24 04:47:52.765147 2026] [:error] [pid 19101:tid 19140] [client 20.215.57.60:59980] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aeqFeGAHj9bEvrTgbO22UgAAAEM"]
[Fri Apr 24 04:47:53.372435 2026] [:error] [pid 19200:tid 19224] [client 20.215.57.60:33066] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aeqFeTQ--M3-tsKAnhFzsQAAANA"]
[Fri Apr 24 04:47:53.931379 2026] [:error] [pid 19101:tid 19142] [client 20.215.57.60:32574] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aeqFeWAHj9bEvrTgbO22VAAAAEU"]
[Fri Apr 24 04:47:54.528921 2026] [:error] [pid 19200:tid 19227] [client 20.215.57.60:25634] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "aeqFejQ--M3-tsKAnhFztQAAANM"]
[Fri Apr 24 04:47:55.133856 2026] [:error] [pid 52129:tid 52135] [client 20.215.57.60:36211] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "aeqFe-KCZKf8_u2LKiAmXwAAAQI"]
[Fri Apr 24 04:47:55.694464 2026] [:error] [pid 19102:tid 19184] [client 20.215.57.60:58560] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "aeqFewDSgrbLEZbkqD6hOQAAAJQ"]
[Fri Apr 24 04:47:56.275838 2026] [:error] [pid 52129:tid 52134] [client 20.215.57.60:24094] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "aeqFfOKCZKf8_u2LKiAmYgAAAQE"]
[Fri Apr 24 04:47:56.898698 2026] [:error] [pid 19200:tid 19230] [client 20.215.57.60:58580] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "aeqFfDQ--M3-tsKAnhFzvwAAANY"]
[Fri Apr 24 04:47:57.514884 2026] [:error] [pid 19100:tid 19119] [client 20.215.57.60:24066] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aeqFfbF_hzQs4Cqbiffy0QAAAAk"]
[Fri Apr 24 04:47:58.115703 2026] [:error] [pid 52129:tid 52143] [client 20.215.57.60:62867] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aeqFfuKCZKf8_u2LKiAmYwAAAQo"]
[Fri Apr 24 04:47:58.675162 2026] [:error] [pid 19200:tid 19219] [client 20.215.57.60:19485] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aeqFfjQ--M3-tsKAnhFzyQAAAMs"]
[Fri Apr 24 04:47:59.420043 2026] [:error] [pid 19102:tid 19185] [client 20.215.57.60:59490] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aeqFfwDSgrbLEZbkqD6hQQAAAJU"]
[Fri Apr 24 04:48:00.070827 2026] [:error] [pid 19200:tid 19226] [client 20.215.57.60:20563] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "aeqFgDQ--M3-tsKAnhFzzgAAANI"]
[Fri Apr 24 04:48:00.722541 2026] [:error] [pid 19102:tid 19181] [client 20.215.57.60:32519] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "aeqFgADSgrbLEZbkqD6hRwAAAJE"]
[Fri Apr 24 04:48:01.321678 2026] [:error] [pid 19100:tid 19129] [client 20.215.57.60:52438] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "aeqFgbF_hzQs4Cqbiffy2gAAABM"]
[Fri Apr 24 04:48:01.916397 2026] [:error] [pid 19102:tid 19174] [client 20.215.57.60:44640] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "aeqFgQDSgrbLEZbkqD6hSQAAAIo"]
[Fri Apr 24 04:48:02.475082 2026] [:error] [pid 19100:tid 19127] [client 20.215.57.60:5307] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/no1.php"] [unique_id "aeqFgrF_hzQs4Cqbiffy3QAAABE"]
[Fri Apr 24 04:48:02.994075 2026] [:error] [pid 52129:tid 52137] [client 20.215.57.60:19495] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/no1.php"] [unique_id "aeqFguKCZKf8_u2LKiAmaAAAAQQ"]
[Fri Apr 24 04:48:03.565451 2026] [:error] [pid 52129:tid 52148] [client 20.215.57.60:5252] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/no1.php"] [unique_id "aeqFg-KCZKf8_u2LKiAmbgAAAQ8"]
[Fri Apr 24 04:48:04.109865 2026] [:error] [pid 19200:tid 19224] [client 20.215.57.60:33086] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/no1.php"] [unique_id "aeqFhDQ--M3-tsKAnhFz2QAAANA"]
[Fri Apr 24 04:48:04.664920 2026] [:error] [pid 19100:tid 19119] [client 20.215.57.60:58591] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/w2025.php"] [unique_id "aeqFhLF_hzQs4Cqbiffy4wAAAAk"]
[Fri Apr 24 04:48:05.218631 2026] [:error] [pid 19100:tid 19109] [client 20.215.57.60:19470] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/w2025.php"] [unique_id "aeqFhbF_hzQs4Cqbiffy5wAAAAA"]
[Fri Apr 24 04:48:05.815230 2026] [:error] [pid 19100:tid 19129] [client 20.215.57.60:52372] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/w2025.php"] [unique_id "aeqFhbF_hzQs4Cqbiffy7QAAABM"]
[Fri Apr 24 04:48:06.365928 2026] [:error] [pid 19102:tid 19180] [client 20.215.57.60:33039] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/w2025.php"] [unique_id "aeqFhgDSgrbLEZbkqD6hVgAAAJA"]
[Fri Apr 24 04:48:06.926351 2026] [:error] [pid 19102:tid 19165] [client 20.215.57.60:44622] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fvvff.php"] [unique_id "aeqFhgDSgrbLEZbkqD6hXAAAAIE"]
[Fri Apr 24 04:48:07.514291 2026] [:error] [pid 19101:tid 19154] [client 20.215.57.60:59495] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fvvff.php"] [unique_id "aeqFh2AHj9bEvrTgbO22WwAAAFE"]
[Fri Apr 24 04:48:08.051315 2026] [:error] [pid 19102:tid 19185] [client 20.215.57.60:59514] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fvvff.php"] [unique_id "aeqFiADSgrbLEZbkqD6hYQAAAJU"]
[Fri Apr 24 04:48:08.580777 2026] [:error] [pid 52129:tid 52137] [client 20.215.57.60:36214] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fvvff.php"] [unique_id "aeqFiOKCZKf8_u2LKiAmfgAAAQQ"]
[Fri Apr 24 04:48:09.211543 2026] [:error] [pid 19200:tid 19226] [client 20.215.57.60:5286] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "aeqFiTQ--M3-tsKAnhFz3QAAANI"]
[Fri Apr 24 04:48:09.887551 2026] [:error] [pid 19200:tid 19231] [client 20.215.57.60:59494] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "aeqFiTQ--M3-tsKAnhFz5gAAANc"]
[Fri Apr 24 04:48:10.443486 2026] [:error] [pid 52129:tid 52139] [client 20.215.57.60:43330] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "aeqFiuKCZKf8_u2LKiAmhwAAAQY"]
[Fri Apr 24 04:48:11.011171 2026] [:error] [pid 52129:tid 52141] [client 20.215.57.60:27251] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "aeqFi-KCZKf8_u2LKiAmjwAAAQg"]
[Fri Apr 24 04:48:11.630611 2026] [:error] [pid 52129:tid 52136] [client 20.215.57.60:36181] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aeqFi-KCZKf8_u2LKiAmkQAAAQM"]
[Fri Apr 24 04:48:12.341559 2026] [:error] [pid 52129:tid 52146] [client 20.215.57.60:24079] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aeqFjOKCZKf8_u2LKiAmlgAAAQ0"]
[Fri Apr 24 04:48:12.953684 2026] [:error] [pid 19101:tid 19144] [client 20.215.57.60:44628] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aeqFjGAHj9bEvrTgbO22YgAAAEc"]
[Fri Apr 24 04:48:13.490399 2026] [:error] [pid 19101:tid 19145] [client 20.215.57.60:62909] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "aeqFjWAHj9bEvrTgbO22ZwAAAEg"]
[Fri Apr 24 04:48:14.124380 2026] [:error] [pid 52129:tid 52156] [client 20.215.57.60:5301] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aeqFjuKCZKf8_u2LKiAmoQAAARc"]
[Fri Apr 24 04:48:14.732038 2026] [:error] [pid 19100:tid 19127] [client 20.215.57.60:36208] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aeqFjrF_hzQs4Cqbiffy-QAAABE"]
[Fri Apr 24 04:48:15.346758 2026] [:error] [pid 19200:tid 19222] [client 20.215.57.60:61806] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aeqFjzQ--M3-tsKAnhFz9gAAAM4"]
[Fri Apr 24 04:48:15.997013 2026] [:error] [pid 52129:tid 52155] [client 20.215.57.60:26639] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aeqFj-KCZKf8_u2LKiAmrAAAARY"]
[Fri Apr 24 04:48:16.844515 2026] [:error] [pid 52129:tid 52149] [client 20.215.57.60:59499] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeqFkOKCZKf8_u2LKiAmtwAAARA"]
[Fri Apr 24 04:48:17.534756 2026] [:error] [pid 52129:tid 52157] [client 20.215.57.60:61756] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeqFkeKCZKf8_u2LKiAmwAAAARg"]
[Fri Apr 24 04:48:18.080587 2026] [:error] [pid 19100:tid 19134] [client 20.215.57.60:20600] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeqFkrF_hzQs4CqbiffzAwAAABg"]
[Fri Apr 24 04:48:18.664379 2026] [:error] [pid 52129:tid 52137] [client 20.215.57.60:61820] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "aeqFkuKCZKf8_u2LKiAmywAAAQQ"]
[Fri Apr 24 04:48:19.240221 2026] [:error] [pid 19102:tid 19166] [client 20.215.57.60:59496] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aeqFkwDSgrbLEZbkqD6haAAAAII"]
[Fri Apr 24 04:48:20.096003 2026] [:error] [pid 19100:tid 19130] [client 20.215.57.60:59477] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aeqFlLF_hzQs4CqbiffzCgAAABQ"]
[Fri Apr 24 04:48:20.870576 2026] [:error] [pid 19100:tid 19123] [client 20.215.57.60:62851] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aeqFlLF_hzQs4CqbiffzDgAAAA0"]
[Fri Apr 24 04:48:21.466336 2026] [:error] [pid 19200:tid 19223] [client 20.215.57.60:52377] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aeqFlTQ--M3-tsKAnhF0BAAAAM8"]
[Fri Apr 24 04:48:22.264304 2026] [:error] [pid 52129:tid 52152] [client 20.215.57.60:33054] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "aeqFluKCZKf8_u2LKiAm4wAAARM"]
[Fri Apr 24 04:48:22.873571 2026] [:error] [pid 19101:tid 19141] [client 20.215.57.60:61794] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "aeqFlmAHj9bEvrTgbO22cgAAAEQ"]
[Fri Apr 24 04:48:23.403273 2026] [:error] [pid 19101:tid 19138] [client 20.215.57.60:27152] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "aeqFl2AHj9bEvrTgbO22dgAAAEE"]
[Fri Apr 24 04:48:24.003673 2026] [:error] [pid 19101:tid 19149] [client 20.215.57.60:17768] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "aeqFmGAHj9bEvrTgbO22egAAAEw"]
[Fri Apr 24 04:48:24.636525 2026] [:error] [pid 19102:tid 19164] [client 20.215.57.60:61822] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "aeqFmADSgrbLEZbkqD6hcQAAAIA"]
[Fri Apr 24 04:48:25.323637 2026] [:error] [pid 19102:tid 19168] [client 20.215.57.60:52470] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "aeqFmQDSgrbLEZbkqD6hdwAAAIQ"]
[Fri Apr 24 04:48:26.001815 2026] [:error] [pid 52129:tid 52136] [client 20.215.57.60:44003] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "aeqFmuKCZKf8_u2LKiAm6AAAAQM"]
[Fri Apr 24 04:48:26.766377 2026] [:error] [pid 52129:tid 52143] [client 20.215.57.60:36172] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "aeqFmuKCZKf8_u2LKiAm8AAAAQo"]
[Fri Apr 24 04:48:27.607529 2026] [:error] [pid 52129:tid 52138] [client 20.215.57.60:33065] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aeqFm-KCZKf8_u2LKiAm-gAAAQU"]
[Fri Apr 24 04:48:28.352171 2026] [:error] [pid 19200:tid 19216] [client 20.215.57.60:48145] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aeqFnDQ--M3-tsKAnhF0GAAAAMg"]
[Fri Apr 24 04:48:29.025108 2026] [:error] [pid 52129:tid 52153] [client 20.215.57.60:27165] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aeqFneKCZKf8_u2LKiAm_wAAARQ"]
[Fri Apr 24 04:48:29.702384 2026] [:error] [pid 52129:tid 52157] [client 20.215.57.60:27160] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "aeqFneKCZKf8_u2LKiAnBwAAARg"]
[Fri Apr 24 04:48:30.462045 2026] [:error] [pid 19200:tid 19220] [client 20.215.57.60:27174] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aeqFnjQ--M3-tsKAnhF0IAAAAMw"]
[Fri Apr 24 04:48:31.188049 2026] [:error] [pid 19101:tid 19137] [client 20.215.57.60:43344] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aeqFn2AHj9bEvrTgbO22fwAAAEA"]
[Fri Apr 24 04:48:31.902779 2026] [:error] [pid 19102:tid 19178] [client 20.215.57.60:57271] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aeqFnwDSgrbLEZbkqD6hkQAAAI4"]
[Fri Apr 24 04:48:32.632753 2026] [:error] [pid 52129:tid 52136] [client 20.215.57.60:44029] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "aeqFoOKCZKf8_u2LKiAnFwAAAQM"]
[Fri Apr 24 04:48:33.255328 2026] [:error] [pid 19200:tid 19213] [client 20.215.57.60:27212] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/style.php"] [unique_id "aeqFoTQ--M3-tsKAnhF0JwAAAMU"]
[Fri Apr 24 04:48:34.154701 2026] [:error] [pid 19200:tid 19232] [client 20.215.57.60:44013] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/style.php"] [unique_id "aeqFojQ--M3-tsKAnhF0MwAAANg"]
[Fri Apr 24 04:48:34.925113 2026] [:error] [pid 19200:tid 19210] [client 20.215.57.60:54686] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/style.php"] [unique_id "aeqFojQ--M3-tsKAnhF0PAAAAMI"]
[Fri Apr 24 04:48:35.775661 2026] [:error] [pid 19200:tid 19219] [client 20.215.57.60:36191] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/style.php"] [unique_id "aeqFozQ--M3-tsKAnhF0QAAAAMs"]
[Fri Apr 24 04:48:36.468249 2026] [:error] [pid 19101:tid 19155] [client 20.215.57.60:49882] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/av.php"] [unique_id "aeqFpGAHj9bEvrTgbO22iQAAAFI"]
[Fri Apr 24 04:48:37.133299 2026] [:error] [pid 19200:tid 19221] [client 20.215.57.60:45120] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/av.php"] [unique_id "aeqFpTQ--M3-tsKAnhF0TAAAAM0"]
[Fri Apr 24 04:48:37.683727 2026] [:error] [pid 19200:tid 19213] [client 20.215.57.60:48177] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/av.php"] [unique_id "aeqFpTQ--M3-tsKAnhF0TwAAAMU"]
[Fri Apr 24 04:48:38.223921 2026] [:error] [pid 52129:tid 52136] [client 20.215.57.60:25718] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/av.php"] [unique_id "aeqFpuKCZKf8_u2LKiAnIgAAAQM"]
[Fri Apr 24 04:48:38.789103 2026] [:error] [pid 52129:tid 52138] [client 20.215.57.60:52367] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeqFpuKCZKf8_u2LKiAnJAAAAQU"]
[Fri Apr 24 04:48:39.344888 2026] [:error] [pid 19100:tid 19112] [client 20.215.57.60:36199] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeqFp7F_hzQs4CqbiffzKAAAAAM"]
[Fri Apr 24 04:48:40.072168 2026] [:error] [pid 52129:tid 52135] [client 20.215.57.60:48138] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeqFqOKCZKf8_u2LKiAnKgAAAQI"]
[Fri Apr 24 04:48:40.889633 2026] [:error] [pid 19200:tid 19220] [client 20.215.57.60:25715] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aeqFqDQ--M3-tsKAnhF0XwAAAMw"]
[Fri Apr 24 04:48:41.522545 2026] [:error] [pid 19200:tid 19226] [client 20.215.57.60:25712] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aeqFqTQ--M3-tsKAnhF0ZAAAANI"]
[Fri Apr 24 04:48:42.169974 2026] [:error] [pid 19200:tid 19232] [client 20.215.57.60:48158] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aeqFqjQ--M3-tsKAnhF0agAAANg"]
[Fri Apr 24 04:48:42.812036 2026] [:error] [pid 19200:tid 19220] [client 20.215.57.60:25708] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aeqFqjQ--M3-tsKAnhF0cAAAAMw"]
[Fri Apr 24 04:48:43.376817 2026] [:error] [pid 52129:tid 52138] [client 20.215.57.60:48182] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "aeqFq-KCZKf8_u2LKiAnMwAAAQU"]
[Fri Apr 24 04:48:43.997319 2026] [:error] [pid 52129:tid 52156] [client 20.215.57.60:45136] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aeqFq-KCZKf8_u2LKiAnOQAAARc"]
[Fri Apr 24 04:48:44.660702 2026] [:error] [pid 19102:tid 19179] [client 20.215.57.60:27145] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aeqFrADSgrbLEZbkqD6hpwAAAI8"]
[Fri Apr 24 04:48:45.238488 2026] [:error] [pid 19200:tid 19217] [client 20.215.57.60:43376] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aeqFrTQ--M3-tsKAnhF0ggAAAMk"]
[Fri Apr 24 04:48:45.953653 2026] [:error] [pid 19200:tid 19229] [client 20.215.57.60:57231] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/vx.php"] [unique_id "aeqFrTQ--M3-tsKAnhF0hwAAANU"]
[Fri Apr 24 04:48:46.524313 2026] [:error] [pid 19200:tid 19220] [client 20.215.57.60:49861] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aeqFrjQ--M3-tsKAnhF0jQAAAMw"]
[Fri Apr 24 04:48:47.219664 2026] [:error] [pid 19200:tid 19228] [client 20.215.57.60:48159] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aeqFrzQ--M3-tsKAnhF0jwAAANQ"]
[Fri Apr 24 04:48:47.858823 2026] [:error] [pid 52129:tid 52141] [client 20.215.57.60:55947] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aeqFr-KCZKf8_u2LKiAnRwAAAQg"]
[Fri Apr 24 04:48:48.559747 2026] [:error] [pid 19200:tid 19219] [client 20.215.57.60:5756] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "aeqFsDQ--M3-tsKAnhF0kQAAAMs"]
[Fri Apr 24 04:48:49.214993 2026] [:error] [pid 19200:tid 19213] [client 20.215.57.60:52396] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeqFsTQ--M3-tsKAnhF0lwAAAMU"]
[Fri Apr 24 04:48:49.901447 2026] [:error] [pid 52129:tid 52154] [client 20.215.57.60:17743] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeqFseKCZKf8_u2LKiAnUQAAARU"]
[Fri Apr 24 04:48:50.447993 2026] [:error] [pid 52129:tid 52149] [client 20.215.57.60:27136] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeqFsuKCZKf8_u2LKiAnWgAAARA"]
[Fri Apr 24 04:48:50.995853 2026] [:error] [pid 19200:tid 19232] [client 20.215.57.60:17780] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "aeqFsjQ--M3-tsKAnhF0mwAAANg"]
[Fri Apr 24 04:48:51.656196 2026] [:error] [pid 19200:tid 19220] [client 20.215.57.60:45123] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "aeqFszQ--M3-tsKAnhF0ngAAAMw"]
[Fri Apr 24 04:48:59.111980 2026] [:error] [pid 52129:tid 52154] [client 20.215.57.60:27147] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aeqFu-KCZKf8_u2LKiAngwAAARU"]
[Fri Apr 24 04:48:59.745307 2026] [:error] [pid 19100:tid 19132] [client 20.215.57.60:61770] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aeqFu7F_hzQs4CqbiffzVAAAABY"]
[Fri Apr 24 04:49:00.351104 2026] [:error] [pid 19200:tid 19226] [client 20.215.57.60:45177] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aeqFvDQ--M3-tsKAnhF0twAAANI"]
[Fri Apr 24 04:49:01.244920 2026] [:error] [pid 19200:tid 19208] [client 20.215.57.60:25664] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aeqFvTQ--M3-tsKAnhF0wgAAAMA"]
[Fri Apr 24 04:49:02.139225 2026] [:error] [pid 19200:tid 19230] [client 20.215.57.60:44005] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aeqFvjQ--M3-tsKAnhF0zAAAANY"]
[Fri Apr 24 04:49:02.890149 2026] [:error] [pid 19100:tid 19120] [client 20.215.57.60:49867] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aeqFvrF_hzQs4CqbiffzWAAAAAo"]
[Fri Apr 24 04:49:03.526611 2026] [:error] [pid 52129:tid 52139] [client 20.215.57.60:60411] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aeqFv-KCZKf8_u2LKiAniwAAAQY"]
[Fri Apr 24 04:49:04.102605 2026] [:error] [pid 19102:tid 19186] [client 20.215.57.60:23606] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/we.php"] [unique_id "aeqFwADSgrbLEZbkqD6h1gAAAJY"]
[Fri Apr 24 04:49:04.632486 2026] [:error] [pid 52129:tid 52154] [client 20.215.57.60:43974] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "aeqFwOKCZKf8_u2LKiAnjwAAARU"]
[Fri Apr 24 04:49:05.152454 2026] [:error] [pid 52129:tid 52144] [client 20.215.57.60:55987] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "aeqFweKCZKf8_u2LKiAnkQAAAQs"]
[Fri Apr 24 04:49:05.831195 2026] [:error] [pid 19200:tid 19221] [client 20.215.57.60:61800] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "aeqFwTQ--M3-tsKAnhF00wAAAM0"]
[Fri Apr 24 04:49:06.443361 2026] [:error] [pid 19101:tid 19151] [client 20.215.57.60:49881] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "aeqFwmAHj9bEvrTgbO22ygAAAE4"]
[Fri Apr 24 04:49:07.098582 2026] [:error] [pid 52129:tid 52153] [client 20.215.57.60:27171] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin1.php"] [unique_id "aeqFw-KCZKf8_u2LKiAnoQAAARQ"]
[Fri Apr 24 04:49:07.842375 2026] [:error] [pid 19102:tid 19188] [client 20.215.57.60:49863] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin1.php"] [unique_id "aeqFwwDSgrbLEZbkqD6h2QAAAJg"]
[Fri Apr 24 04:49:08.391802 2026] [:error] [pid 19200:tid 19219] [client 20.215.57.60:17787] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin1.php"] [unique_id "aeqFxDQ--M3-tsKAnhF01wAAAMs"]
[Fri Apr 24 04:49:09.177695 2026] [:error] [pid 19100:tid 19131] [client 20.215.57.60:23600] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin1.php"] [unique_id "aeqFxbF_hzQs4CqbiffzaAAAABU"]
[Fri Apr 24 04:49:09.863027 2026] [:error] [pid 19200:tid 19215] [client 20.215.57.60:25673] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeqFxTQ--M3-tsKAnhF04QAAAMc"]
[Fri Apr 24 04:49:10.406819 2026] [:error] [pid 19200:tid 19232] [client 20.215.57.60:45168] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeqFxjQ--M3-tsKAnhF05AAAANg"]
[Fri Apr 24 04:49:11.207891 2026] [:error] [pid 52129:tid 52143] [client 20.215.57.60:49901] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeqFx-KCZKf8_u2LKiAnrgAAAQo"]
[Fri Apr 24 04:49:11.823536 2026] [:error] [pid 52129:tid 52149] [client 20.215.57.60:17747] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "aeqFx-KCZKf8_u2LKiAntAAAARA"]
[Fri Apr 24 04:49:12.578142 2026] [:error] [pid 19102:tid 19183] [client 20.215.57.60:5738] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeqFyADSgrbLEZbkqD6h5QAAAJM"]
[Fri Apr 24 04:49:13.216795 2026] [:error] [pid 52129:tid 52145] [client 20.215.57.60:41965] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeqFyeKCZKf8_u2LKiAnuQAAAQw"]
[Fri Apr 24 04:49:13.854479 2026] [:error] [pid 19102:tid 19164] [client 20.215.57.60:49918] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeqFyQDSgrbLEZbkqD6h7gAAAIA"]
[Fri Apr 24 04:49:14.642395 2026] [:error] [pid 19100:tid 19110] [client 20.215.57.60:5718] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "aeqFyrF_hzQs4CqbiffzcAAAAAE"]
[Fri Apr 24 04:49:15.296840 2026] [:error] [pid 19101:tid 19142] [client 20.215.57.60:55954] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeqFy2AHj9bEvrTgbO222wAAAEU"]
[Fri Apr 24 04:49:16.056539 2026] [:error] [pid 52129:tid 52149] [client 20.215.57.60:27660] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeqFzOKCZKf8_u2LKiAnwAAAARA"]
[Fri Apr 24 04:49:16.814577 2026] [:error] [pid 19102:tid 19180] [client 20.215.57.60:45181] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeqFzADSgrbLEZbkqD6h9wAAAJA"]
[Fri Apr 24 04:49:17.724467 2026] [:error] [pid 19101:tid 19147] [client 20.215.57.60:60360] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "aeqFzWAHj9bEvrTgbO223QAAAEo"]
[Fri Apr 24 04:49:18.321694 2026] [:error] [pid 19101:tid 19140] [client 20.215.57.60:39997] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/"] [unique_id "aeqFzmAHj9bEvrTgbO223gAAAEM"]
[Fri Apr 24 04:49:19.039133 2026] [:error] [pid 19101:tid 19145] [client 20.215.57.60:45122] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/"] [unique_id "aeqFz2AHj9bEvrTgbO224wAAAEg"]
[Fri Apr 24 04:49:19.900188 2026] [:error] [pid 19100:tid 19133] [client 20.215.57.60:55994] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/"] [unique_id "aeqFz7F_hzQs4CqbiffzfwAAABc"]
[Fri Apr 24 04:49:20.716994 2026] [:error] [pid 19100:tid 19129] [client 20.215.57.60:61809] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/"] [unique_id "aeqF0LF_hzQs4CqbiffziAAAABM"]
[Fri Apr 24 04:49:21.338370 2026] [:error] [pid 19102:tid 19188] [client 20.215.57.60:36216] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aeqF0QDSgrbLEZbkqD6h_wAAAJg"]
[Fri Apr 24 04:49:22.106948 2026] [:error] [pid 52129:tid 52134] [client 20.215.57.60:46451] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aeqF0uKCZKf8_u2LKiAn0gAAAQE"]
[Fri Apr 24 04:49:22.711915 2026] [:error] [pid 52129:tid 52147] [client 20.215.57.60:25705] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aeqF0uKCZKf8_u2LKiAn2AAAAQ4"]
[Fri Apr 24 04:49:23.501939 2026] [:error] [pid 19101:tid 19153] [client 20.215.57.60:49898] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "aeqF02AHj9bEvrTgbO22-AAAAFA"]
[Fri Apr 24 04:49:24.089070 2026] [:error] [pid 19101:tid 19142] [client 20.215.57.60:45170] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeqF1GAHj9bEvrTgbO22-QAAAEU"]
[Fri Apr 24 04:49:24.607941 2026] [:error] [pid 19100:tid 19133] [client 20.215.57.60:39946] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeqF1LF_hzQs4CqbiffznAAAABc"]
[Fri Apr 24 04:49:25.173556 2026] [:error] [pid 52129:tid 52152] [client 20.215.57.60:55968] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeqF1eKCZKf8_u2LKiAn4AAAARM"]
[Fri Apr 24 04:49:25.707958 2026] [:error] [pid 52129:tid 52138] [client 20.215.57.60:46414] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "aeqF1eKCZKf8_u2LKiAn5gAAAQU"]
[Fri Apr 24 04:49:26.299052 2026] [:error] [pid 52129:tid 52152] [client 20.215.57.60:41971] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aeqF1uKCZKf8_u2LKiAn7gAAARM"]
[Fri Apr 24 04:49:26.924684 2026] [:error] [pid 52129:tid 52142] [client 20.215.57.60:59468] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aeqF1uKCZKf8_u2LKiAn9gAAAQk"]
[Fri Apr 24 04:49:27.530956 2026] [:error] [pid 52129:tid 52150] [client 20.215.57.60:27704] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aeqF1-KCZKf8_u2LKiAn_gAAARE"]
[Fri Apr 24 04:49:28.123418 2026] [:error] [pid 19100:tid 19116] [client 20.215.57.60:55958] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "aeqF2LF_hzQs4CqbiffzowAAAAc"]
[Fri Apr 24 04:49:28.855117 2026] [:error] [pid 19101:tid 19153] [client 20.215.57.60:5322] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeqF2GAHj9bEvrTgbO22_wAAAFA"]
[Fri Apr 24 04:49:29.516522 2026] [:error] [pid 19100:tid 19131] [client 20.215.57.60:60370] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeqF2bF_hzQs4CqbiffzqgAAABU"]
[Fri Apr 24 04:49:30.273777 2026] [:error] [pid 19200:tid 19209] [client 20.215.57.60:26704] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeqF2jQ--M3-tsKAnhF1BwAAAME"]
[Fri Apr 24 04:49:30.870754 2026] [:error] [pid 52129:tid 52155] [client 20.215.57.60:26750] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "aeqF2uKCZKf8_u2LKiAoHQAAARY"]
[Fri Apr 24 04:49:31.548413 2026] [:error] [pid 19200:tid 19217] [client 20.215.57.60:49868] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/av.php"] [unique_id "aeqF2zQ--M3-tsKAnhF1CQAAAMk"]
[Fri Apr 24 04:49:32.078324 2026] [:error] [pid 19200:tid 19214] [client 20.215.57.60:23553] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/av.php"] [unique_id "aeqF3DQ--M3-tsKAnhF1DAAAAMY"]
[Fri Apr 24 04:49:32.653920 2026] [:error] [pid 19200:tid 19226] [client 20.215.57.60:64694] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/av.php"] [unique_id "aeqF3DQ--M3-tsKAnhF1DgAAANI"]
[Fri Apr 24 04:49:33.458180 2026] [:error] [pid 19200:tid 19212] [client 20.215.57.60:60377] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/av.php"] [unique_id "aeqF3TQ--M3-tsKAnhF1FgAAAMQ"]
[Fri Apr 24 04:49:34.015448 2026] [:error] [pid 19200:tid 19225] [client 20.215.57.60:46442] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aeqF3jQ--M3-tsKAnhF1GQAAANE"]
[Fri Apr 24 04:49:34.679750 2026] [:error] [pid 19200:tid 19230] [client 20.215.57.60:45169] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aeqF3jQ--M3-tsKAnhF1HwAAANY"]
[Fri Apr 24 04:49:35.272499 2026] [:error] [pid 19102:tid 19169] [client 20.215.57.60:41969] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aeqF3wDSgrbLEZbkqD6iFQAAAIU"]
[Fri Apr 24 04:49:35.893552 2026] [:error] [pid 19101:tid 19146] [client 20.215.57.60:17788] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "aeqF32AHj9bEvrTgbO23EgAAAEk"]
[Fri Apr 24 04:49:36.489098 2026] [:error] [pid 19100:tid 19109] [client 20.215.57.60:64646] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "aeqF4LF_hzQs4CqbiffzuwAAAAA"]
[Fri Apr 24 04:49:37.084474 2026] [:error] [pid 19100:tid 19126] [client 20.215.57.60:5517] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "aeqF4bF_hzQs4CqbiffzvgAAABA"]
[Fri Apr 24 04:49:37.788019 2026] [:error] [pid 19102:tid 19177] [client 20.215.57.60:5630] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "aeqF4QDSgrbLEZbkqD6iIAAAAI0"]
[Fri Apr 24 04:49:38.501129 2026] [:error] [pid 19101:tid 19148] [client 20.215.57.60:60384] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "aeqF4mAHj9bEvrTgbO23FgAAAEs"]
[Fri Apr 24 04:49:39.097016 2026] [:error] [pid 19100:tid 19121] [client 20.215.57.60:45142] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aeqF47F_hzQs4CqbiffzwQAAAAs"]
[Fri Apr 24 04:49:39.745546 2026] [:error] [pid 52129:tid 52154] [client 20.215.57.60:46428] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aeqF4-KCZKf8_u2LKiAoQAAAARU"]
[Fri Apr 24 04:49:40.306684 2026] [:error] [pid 52129:tid 52149] [client 20.215.57.60:59006] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aeqF5OKCZKf8_u2LKiAoQQAAARA"]
[Fri Apr 24 04:49:40.945666 2026] [:error] [pid 19101:tid 19146] [client 20.215.57.60:60369] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "aeqF5GAHj9bEvrTgbO23HQAAAEk"]
[Fri Apr 24 04:49:41.565030 2026] [:error] [pid 52129:tid 52146] [client 20.215.57.60:35682] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "aeqF5eKCZKf8_u2LKiAoQgAAAQ0"]
[Fri Apr 24 04:49:42.168452 2026] [:error] [pid 19101:tid 19140] [client 20.215.57.60:5516] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "aeqF5mAHj9bEvrTgbO23IAAAAEM"]
[Fri Apr 24 04:49:42.825993 2026] [:error] [pid 19101:tid 19141] [client 20.215.57.60:21089] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "aeqF5mAHj9bEvrTgbO23JQAAAEQ"]
[Fri Apr 24 04:49:43.361288 2026] [:error] [pid 52129:tid 52155] [client 20.215.57.60:26741] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "aeqF5-KCZKf8_u2LKiAoTQAAARY"]
[Fri Apr 24 04:49:43.887249 2026] [:error] [pid 52129:tid 52151] [client 20.215.57.60:41964] [client 20.215.57.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "aeqF5-KCZKf8_u2LKiAoWAAAARI"]
[Fri Apr 24 04:49:46.244463 2026] [:error] [pid 52129:tid 52144] [client 20.215.57.60:5896] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aeqF6uKCZKf8_u2LKiAoagAAAQs"]
[Fri Apr 24 04:49:46.829058 2026] [:error] [pid 52129:tid 52153] [client 20.215.57.60:38103] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aeqF6uKCZKf8_u2LKiAocQAAARQ"]
[Fri Apr 24 04:49:47.496272 2026] [:error] [pid 52129:tid 52145] [client 20.215.57.60:5205] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/f35.php"] [unique_id "aeqF6-KCZKf8_u2LKiAoegAAAQw"]
[Fri Apr 24 04:49:48.219143 2026] [:error] [pid 19200:tid 19226] [client 20.215.57.60:35704] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeqF7DQ--M3-tsKAnhF1UAAAANI"]
[Fri Apr 24 04:49:48.775125 2026] [:error] [pid 52129:tid 52142] [client 20.215.57.60:5921] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeqF7OKCZKf8_u2LKiAohgAAAQk"]
[Fri Apr 24 04:49:49.346704 2026] [:error] [pid 19102:tid 19167] [client 20.215.57.60:51738] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeqF7QDSgrbLEZbkqD6iPAAAAIM"]
[Fri Apr 24 04:49:50.151633 2026] [:error] [pid 19100:tid 19110] [client 20.215.57.60:42821] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "aeqF7rF_hzQs4Cqbiffz2wAAAAE"]
[Fri Apr 24 04:49:50.886852 2026] [:error] [pid 19102:tid 19175] [client 20.215.57.60:41939] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeqF7gDSgrbLEZbkqD6iPwAAAIs"]
[Fri Apr 24 04:49:51.618560 2026] [:error] [pid 19102:tid 19166] [client 20.215.57.60:5313] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeqF7wDSgrbLEZbkqD6iRgAAAII"]
[Fri Apr 24 04:49:52.232737 2026] [:error] [pid 19200:tid 19223] [client 20.215.57.60:51750] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeqF8DQ--M3-tsKAnhF1WgAAAM8"]
[Fri Apr 24 04:49:52.841961 2026] [:error] [pid 19200:tid 19216] [client 20.215.57.60:5347] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "aeqF8DQ--M3-tsKAnhF1XgAAAMg"]
[Fri Apr 24 04:49:53.460371 2026] [:error] [pid 52129:tid 52137] [client 20.215.57.60:39393] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aeqF8eKCZKf8_u2LKiAongAAAQQ"]
[Fri Apr 24 04:49:54.025569 2026] [:error] [pid 19100:tid 19125] [client 20.215.57.60:5358] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aeqF8rF_hzQs4Cqbiffz5gAAAA8"]
[Fri Apr 24 04:49:54.726020 2026] [:error] [pid 19200:tid 19208] [client 20.215.57.60:54130] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aeqF8jQ--M3-tsKAnhF1aQAAAMA"]
[Fri Apr 24 04:49:55.289676 2026] [:error] [pid 52129:tid 52147] [client 20.215.57.60:24185] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/k.php"] [unique_id "aeqF8-KCZKf8_u2LKiAopwAAAQ4"]
[Fri Apr 24 04:49:55.909871 2026] [:error] [pid 52129:tid 52133] [client 20.215.57.60:21098] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ww2.php"] [unique_id "aeqF8-KCZKf8_u2LKiAosQAAAQA"]
[Fri Apr 24 04:49:56.545345 2026] [:error] [pid 19102:tid 19173] [client 20.215.57.60:51749] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ww2.php"] [unique_id "aeqF9ADSgrbLEZbkqD6iXQAAAIk"]
[Fri Apr 24 04:49:57.161993 2026] [:error] [pid 52129:tid 52138] [client 20.215.57.60:5623] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ww2.php"] [unique_id "aeqF9eKCZKf8_u2LKiAowQAAAQU"]
[Fri Apr 24 04:49:57.830929 2026] [:error] [pid 19102:tid 19164] [client 20.215.57.60:5361] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ww2.php"] [unique_id "aeqF9QDSgrbLEZbkqD6iYQAAAIA"]
[Fri Apr 24 04:50:05.643316 2026] [:error] [pid 19200:tid 19228] [client 20.215.57.60:42864] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aeqF_TQ--M3-tsKAnhF1owAAANQ"]
[Fri Apr 24 04:50:06.240634 2026] [:error] [pid 19200:tid 19232] [client 20.215.57.60:5504] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aeqF_jQ--M3-tsKAnhF1pQAAANg"]
[Fri Apr 24 04:50:06.950097 2026] [:error] [pid 19102:tid 19164] [client 20.215.57.60:62283] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aeqF_gDSgrbLEZbkqD6iggAAAIA"]
[Fri Apr 24 04:50:07.615403 2026] [:error] [pid 19102:tid 19168] [client 20.215.57.60:51740] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "aeqF_wDSgrbLEZbkqD6ihQAAAIQ"]
[Fri Apr 24 04:50:08.393933 2026] [:error] [pid 19200:tid 19214] [client 20.215.57.60:41921] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aeqGADQ--M3-tsKAnhF1rgAAAMY"]
[Fri Apr 24 04:50:08.968106 2026] [:error] [pid 19200:tid 19209] [client 20.215.57.60:45770] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aeqGADQ--M3-tsKAnhF1tQAAAME"]
[Fri Apr 24 04:50:09.549696 2026] [:error] [pid 52129:tid 52138] [client 20.215.57.60:24066] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aeqGAeKCZKf8_u2LKiApGgAAAQU"]
[Fri Apr 24 04:50:10.211322 2026] [:error] [pid 52129:tid 52137] [client 20.215.57.60:42831] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "aeqGAuKCZKf8_u2LKiApHgAAAQQ"]
[Fri Apr 24 04:50:10.869944 2026] [:error] [pid 19102:tid 19170] [client 20.215.57.60:41981] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ew.php"] [unique_id "aeqGAgDSgrbLEZbkqD6ikAAAAIY"]
[Fri Apr 24 04:50:11.526669 2026] [:error] [pid 19102:tid 19182] [client 20.215.57.60:5230] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ew.php"] [unique_id "aeqGAwDSgrbLEZbkqD6ilQAAAJI"]
[Fri Apr 24 04:50:12.117925 2026] [:error] [pid 52129:tid 52153] [client 20.215.57.60:5891] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ew.php"] [unique_id "aeqGBOKCZKf8_u2LKiApJwAAARQ"]
[Fri Apr 24 04:50:12.820689 2026] [:error] [pid 52129:tid 52145] [client 20.215.57.60:5312] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ew.php"] [unique_id "aeqGBOKCZKf8_u2LKiApMgAAAQw"]
[Fri Apr 24 04:50:13.469396 2026] [:error] [pid 19102:tid 19178] [client 20.215.57.60:46455] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/485.php"] [unique_id "aeqGBQDSgrbLEZbkqD6imwAAAI4"]
[Fri Apr 24 04:50:14.156922 2026] [:error] [pid 19102:tid 19171] [client 20.215.57.60:5612] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/485.php"] [unique_id "aeqGBgDSgrbLEZbkqD6ioAAAAIc"]
[Fri Apr 24 04:50:14.817761 2026] [:error] [pid 19200:tid 19217] [client 20.215.57.60:45125] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/485.php"] [unique_id "aeqGBjQ--M3-tsKAnhF10gAAAMk"]
[Fri Apr 24 04:50:15.361585 2026] [:error] [pid 19200:tid 19222] [client 20.215.57.60:64647] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/485.php"] [unique_id "aeqGBzQ--M3-tsKAnhF10wAAAM4"]
[Fri Apr 24 04:50:15.961017 2026] [:error] [pid 19200:tid 19213] [client 20.215.57.60:35693] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/drykl.php"] [unique_id "aeqGBzQ--M3-tsKAnhF11wAAAMU"]
[Fri Apr 24 04:50:16.627437 2026] [:error] [pid 52129:tid 52147] [client 20.215.57.60:55993] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/drykl.php"] [unique_id "aeqGCOKCZKf8_u2LKiApPwAAAQ4"]
[Fri Apr 24 04:50:17.313622 2026] [:error] [pid 19102:tid 19187] [client 20.215.57.60:46401] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/drykl.php"] [unique_id "aeqGCQDSgrbLEZbkqD6iqQAAAJc"]
[Fri Apr 24 04:50:17.916286 2026] [:error] [pid 19102:tid 19175] [client 20.215.57.60:45166] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/drykl.php"] [unique_id "aeqGCQDSgrbLEZbkqD6irwAAAIs"]
[Fri Apr 24 04:50:18.591159 2026] [:error] [pid 52129:tid 52150] [client 20.215.57.60:55995] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "aeqGCuKCZKf8_u2LKiApRgAAARE"]
[Fri Apr 24 04:50:19.293350 2026] [:error] [pid 19200:tid 19209] [client 20.215.57.60:55975] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "aeqGCzQ--M3-tsKAnhF17AAAAME"]
[Fri Apr 24 04:50:19.855501 2026] [:error] [pid 19200:tid 19221] [client 20.215.57.60:44019] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "aeqGCzQ--M3-tsKAnhF18AAAAM0"]
[Fri Apr 24 04:50:20.418249 2026] [:error] [pid 19101:tid 19161] [client 20.215.57.60:25695] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "aeqGDGAHj9bEvrTgbO24GwAAAFg"]
[Fri Apr 24 04:50:21.090619 2026] [:error] [pid 19200:tid 19229] [client 20.215.57.60:55956] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/hypo.php"] [unique_id "aeqGDTQ--M3-tsKAnhF1_gAAANU"]
[Fri Apr 24 04:50:21.705253 2026] [:error] [pid 19102:tid 19184] [client 20.215.57.60:21627] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/hypo.php"] [unique_id "aeqGDQDSgrbLEZbkqD6iuQAAAJQ"]
[Fri Apr 24 04:50:22.291543 2026] [:error] [pid 19102:tid 19178] [client 20.215.57.60:5739] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/hypo.php"] [unique_id "aeqGDgDSgrbLEZbkqD6iugAAAI4"]
[Fri Apr 24 04:50:22.948778 2026] [:error] [pid 19200:tid 19227] [client 20.215.57.60:39982] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/hypo.php"] [unique_id "aeqGDjQ--M3-tsKAnhF2FQAAANM"]
[Fri Apr 24 04:50:23.701405 2026] [:error] [pid 19101:tid 19151] [client 20.215.57.60:43975] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/file18.php"] [unique_id "aeqGD2AHj9bEvrTgbO24JgAAAE4"]
[Fri Apr 24 04:50:24.376383 2026] [:error] [pid 19100:tid 19111] [client 20.215.57.60:5731] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/file18.php"] [unique_id "aeqGELF_hzQs4Cqbiff0EAAAAAI"]
[Fri Apr 24 04:50:24.980223 2026] [:error] [pid 19102:tid 19179] [client 20.215.57.60:61286] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/file18.php"] [unique_id "aeqGEADSgrbLEZbkqD6iwQAAAI8"]
[Fri Apr 24 04:50:25.519312 2026] [:error] [pid 19100:tid 19115] [client 20.215.57.60:20531] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/file18.php"] [unique_id "aeqGEbF_hzQs4Cqbiff0EwAAAAY"]
[Fri Apr 24 04:50:26.112668 2026] [:error] [pid 19102:tid 19173] [client 20.215.57.60:21529] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "aeqGEgDSgrbLEZbkqD6ixwAAAIk"]
[Fri Apr 24 04:50:26.802945 2026] [:error] [pid 19102:tid 19170] [client 20.215.57.60:32064] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "aeqGEgDSgrbLEZbkqD6izQAAAIY"]
[Fri Apr 24 04:50:27.554073 2026] [:error] [pid 19102:tid 19179] [client 20.215.57.60:25688] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "aeqGEwDSgrbLEZbkqD6i0gAAAI8"]
[Fri Apr 24 04:50:28.146263 2026] [:error] [pid 19200:tid 19222] [client 20.215.57.60:5695] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "aeqGFDQ--M3-tsKAnhF2MAAAAM4"]
[Fri Apr 24 04:50:28.851987 2026] [:error] [pid 19200:tid 19213] [client 20.215.57.60:49862] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aeqGFDQ--M3-tsKAnhF2NAAAAMU"]
[Fri Apr 24 04:50:29.499999 2026] [:error] [pid 52129:tid 52152] [client 20.215.57.60:5724] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aeqGFeKCZKf8_u2LKiApZwAAARM"]
[Fri Apr 24 04:50:30.122432 2026] [:error] [pid 19200:tid 19228] [client 20.215.57.60:49910] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aeqGFjQ--M3-tsKAnhF2PQAAANQ"]
[Fri Apr 24 04:50:30.846534 2026] [:error] [pid 19100:tid 19123] [client 20.215.57.60:49915] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "aeqGFrF_hzQs4Cqbiff0FgAAAA0"]
[Fri Apr 24 04:50:31.455761 2026] [:error] [pid 19100:tid 19122] [client 20.215.57.60:32118] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aeqGF7F_hzQs4Cqbiff0FwAAAAw"]
[Fri Apr 24 04:50:32.050095 2026] [:error] [pid 52129:tid 52156] [client 20.215.57.60:20500] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aeqGGOKCZKf8_u2LKiApbgAAARc"]
[Fri Apr 24 04:50:32.642000 2026] [:error] [pid 52129:tid 52155] [client 20.215.57.60:29568] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aeqGGOKCZKf8_u2LKiApcgAAARY"]
[Fri Apr 24 04:50:33.345714 2026] [:error] [pid 52129:tid 52146] [client 20.215.57.60:27154] [client 20.215.57.60] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "aeqGGeKCZKf8_u2LKiApdwAAAQ0"]
[Fri Apr 24 10:33:14.336359 2026] [:error] [pid 17719:tid 17744] [client 4.232.90.249:57655] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aerWasTZ9gzEyL1BkPrH5gAAAJE"]
[Fri Apr 24 10:33:15.258222 2026] [:error] [pid 17808:tid 17832] [client 4.232.90.249:10125] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aerWa-arbOEFI8qshvI9FAAAAFY"]
[Fri Apr 24 10:33:16.183460 2026] [:error] [pid 22114:tid 22137] [client 4.232.90.249:9789] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aerWbIAuWGz3WlMQjodq7wAAARQ"]
[Fri Apr 24 10:33:17.837495 2026] [:error] [pid 17721:tid 17804] [client 4.232.90.249:10135] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/166.php"] [unique_id "aerWbeFXXkLeyDnfk_973AAAABc"]
[Fri Apr 24 10:33:23.381696 2026] [:error] [pid 22114:tid 22117] [client 4.232.90.249:9757] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/term.php"] [unique_id "aerWc4AuWGz3WlMQjodq-gAAAQA"]
[Fri Apr 24 10:33:24.985520 2026] [:error] [pid 17808:tid 17825] [client 4.232.90.249:9784] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/term.php"] [unique_id "aerWdOarbOEFI8qshvI9IAAAAE8"]
[Fri Apr 24 10:33:26.119443 2026] [:error] [pid 17721:tid 17785] [client 4.232.90.249:9775] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/term.php"] [unique_id "aerWduFXXkLeyDnfk_974AAAAAQ"]
[Fri Apr 24 10:33:27.857063 2026] [:error] [pid 22114:tid 22126] [client 4.232.90.249:57650] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/term.php"] [unique_id "aerWd4AuWGz3WlMQjodrBgAAAQk"]
[Fri Apr 24 10:33:32.405223 2026] [:error] [pid 22114:tid 22129] [client 4.232.90.249:9750] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aerWfIAuWGz3WlMQjodrEQAAAQw"]
[Fri Apr 24 10:33:33.508451 2026] [:error] [pid 22114:tid 22141] [client 4.232.90.249:57631] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aerWfYAuWGz3WlMQjodrFQAAARg"]
[Fri Apr 24 10:33:36.458567 2026] [:error] [pid 17720:tid 17759] [client 4.232.90.249:9761] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aerWgOhlUs6BS3Ng7_WpdgAAAMU"]
[Fri Apr 24 10:33:37.769266 2026] [:error] [pid 17721:tid 17799] [client 4.232.90.249:9600] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "aerWgeFXXkLeyDnfk_975QAAABI"]
[Fri Apr 24 10:33:38.329337 2026] [:error] [pid 17808:tid 17823] [client 4.232.90.249:10067] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "aerWguarbOEFI8qshvI9KAAAAE0"]
[Fri Apr 24 10:33:39.270710 2026] [:error] [pid 22114:tid 22129] [client 4.232.90.249:57653] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "aerWg4AuWGz3WlMQjodrIwAAAQw"]
[Fri Apr 24 10:33:39.890772 2026] [:error] [pid 17720:tid 17776] [client 4.232.90.249:10077] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "aerWg-hlUs6BS3Ng7_WpgwAAANY"]
[Fri Apr 24 10:33:40.613895 2026] [:error] [pid 17720:tid 17773] [client 4.232.90.249:9782] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tt.php"] [unique_id "aerWhOhlUs6BS3Ng7_WphwAAANM"]
[Fri Apr 24 10:33:41.517504 2026] [:error] [pid 17720:tid 17776] [client 4.232.90.249:10092] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aerWhehlUs6BS3Ng7_WpjQAAANY"]
[Fri Apr 24 10:33:42.469358 2026] [:error] [pid 17720:tid 17775] [client 4.232.90.249:10072] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aerWhuhlUs6BS3Ng7_WpkQAAANU"]
[Fri Apr 24 10:33:43.281919 2026] [:error] [pid 22114:tid 22128] [client 4.232.90.249:9753] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aerWh4AuWGz3WlMQjodrJQAAAQs"]
[Fri Apr 24 10:33:43.972064 2026] [:error] [pid 22114:tid 22127] [client 4.232.90.249:9759] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "aerWh4AuWGz3WlMQjodrKAAAAQo"]
[Fri Apr 24 10:33:44.836781 2026] [:error] [pid 17720:tid 17770] [client 4.232.90.249:10061] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aerWiOhlUs6BS3Ng7_WpmQAAANA"]
[Fri Apr 24 10:33:46.274161 2026] [:error] [pid 17719:tid 17730] [client 4.232.90.249:10104] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aerWisTZ9gzEyL1BkPrIAgAAAIM"]
[Fri Apr 24 10:33:48.215268 2026] [:error] [pid 22114:tid 22126] [client 4.232.90.249:10064] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aerWjIAuWGz3WlMQjodrNwAAAQk"]
[Fri Apr 24 10:33:49.299666 2026] [:error] [pid 17721:tid 17798] [client 4.232.90.249:9771] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "aerWjeFXXkLeyDnfk_976QAAABE"]
[Fri Apr 24 10:33:49.803226 2026] [:error] [pid 17720:tid 17764] [client 4.232.90.249:10062] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aerWjehlUs6BS3Ng7_WpqAAAAMo"]
[Fri Apr 24 10:33:50.480443 2026] [:error] [pid 17720:tid 17758] [client 4.232.90.249:10142] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aerWjuhlUs6BS3Ng7_WpqgAAAMQ"]
[Fri Apr 24 10:33:51.067869 2026] [:error] [pid 17721:tid 17782] [client 4.232.90.249:10093] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aerWj-FXXkLeyDnfk_977AAAAAE"]
[Fri Apr 24 10:33:51.734389 2026] [:error] [pid 17721:tid 17800] [client 4.232.90.249:10087] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "aerWj-FXXkLeyDnfk_977gAAABM"]
[Fri Apr 24 10:33:52.460294 2026] [:error] [pid 22114:tid 22117] [client 4.232.90.249:9745] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "aerWkIAuWGz3WlMQjodrPgAAAQA"]
[Fri Apr 24 10:33:53.414048 2026] [:error] [pid 17720:tid 17770] [client 4.232.90.249:57623] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "aerWkehlUs6BS3Ng7_WpsQAAANA"]
[Fri Apr 24 10:33:54.962112 2026] [:error] [pid 17720:tid 17762] [client 4.232.90.249:10119] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "aerWkuhlUs6BS3Ng7_WptQAAAMg"]
[Fri Apr 24 10:33:55.966447 2026] [:error] [pid 17719:tid 17732] [client 4.232.90.249:10126] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "aerWk8TZ9gzEyL1BkPrICwAAAIU"]
[Fri Apr 24 10:33:57.526600 2026] [:error] [pid 17720:tid 17778] [client 4.232.90.249:10088] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog-header.php"] [unique_id "aerWlehlUs6BS3Ng7_WpxAAAANg"]
[Fri Apr 24 10:34:01.342343 2026] [:error] [pid 17808:tid 17821] [client 4.232.90.249:10147] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog-header.php"] [unique_id "aerWmearbOEFI8qshvI9NAAAAEs"]
[Fri Apr 24 10:34:02.413933 2026] [:error] [pid 22114:tid 22129] [client 4.232.90.249:57632] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog-header.php"] [unique_id "aerWmoAuWGz3WlMQjodrRwAAAQw"]
[Fri Apr 24 10:34:03.676395 2026] [:error] [pid 17720:tid 17767] [client 4.232.90.249:10065] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog-header.php"] [unique_id "aerWm-hlUs6BS3Ng7_Wp2AAAAM0"]
[Fri Apr 24 10:34:04.786475 2026] [:error] [pid 22114:tid 22137] [client 4.232.90.249:10058] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bmi.php"] [unique_id "aerWnIAuWGz3WlMQjodrTQAAARQ"]
[Fri Apr 24 10:34:06.023747 2026] [:error] [pid 17808:tid 17824] [client 4.232.90.249:57642] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bmi.php"] [unique_id "aerWnuarbOEFI8qshvI9NQAAAE4"]
[Fri Apr 24 10:34:09.598046 2026] [:error] [pid 17720:tid 17767] [client 4.232.90.249:57634] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bmi.php"] [unique_id "aerWoehlUs6BS3Ng7_Wp5QAAAM0"]
[Fri Apr 24 10:34:11.503788 2026] [:error] [pid 17720:tid 17778] [client 4.232.90.249:10143] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bmi.php"] [unique_id "aerWo-hlUs6BS3Ng7_Wp8wAAANg"]
[Fri Apr 24 10:34:20.744694 2026] [:error] [pid 22114:tid 22126] [client 4.232.90.249:57648] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws48.php"] [unique_id "aerWrIAuWGz3WlMQjodraQAAAQk"]
[Fri Apr 24 10:34:22.538186 2026] [:error] [pid 17808:tid 17829] [client 4.232.90.249:10164] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws48.php"] [unique_id "aerWruarbOEFI8qshvI9VgAAAFM"]
[Fri Apr 24 10:34:24.147339 2026] [:error] [pid 17808:tid 17832] [client 4.232.90.249:57610] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws48.php"] [unique_id "aerWsOarbOEFI8qshvI9WQAAAFY"]
[Fri Apr 24 10:34:26.162590 2026] [:error] [pid 17808:tid 17822] [client 4.232.90.249:57601] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws48.php"] [unique_id "aerWsuarbOEFI8qshvI9YQAAAEw"]
[Fri Apr 24 10:34:28.358101 2026] [:error] [pid 17720:tid 17763] [client 4.232.90.249:10112] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aerWtOhlUs6BS3Ng7_WqJwAAAMk"]
[Fri Apr 24 10:34:29.131278 2026] [:error] [pid 17720:tid 17759] [client 4.232.90.249:57639] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aerWtehlUs6BS3Ng7_WqLQAAAMU"]
[Fri Apr 24 10:34:29.918167 2026] [:error] [pid 17721:tid 17805] [client 4.232.90.249:10137] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aerWteFXXkLeyDnfk_97_AAAABg"]
[Fri Apr 24 10:34:31.407664 2026] [:error] [pid 17721:tid 17785] [client 4.232.90.249:57638] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "aerWt-FXXkLeyDnfk_98AAAAAAQ"]
[Fri Apr 24 10:34:32.853337 2026] [:error] [pid 17720:tid 17769] [client 4.232.90.249:9767] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "aerWuOhlUs6BS3Ng7_WqPwAAAM8"]
[Fri Apr 24 10:34:34.128754 2026] [:error] [pid 17719:tid 17736] [client 4.232.90.249:10105] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "aerWusTZ9gzEyL1BkPrIMQAAAIk"]
[Fri Apr 24 10:34:35.936781 2026] [:error] [pid 22114:tid 22132] [client 4.232.90.249:9779] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "aerWu4AuWGz3WlMQjodregAAAQ8"]
[Fri Apr 24 10:34:37.938255 2026] [:error] [pid 17720:tid 17772] [client 4.232.90.249:9780] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dass.php"] [unique_id "aerWvehlUs6BS3Ng7_WqSwAAANI"]
[Fri Apr 24 10:34:41.024779 2026] [:error] [pid 17721:tid 17794] [client 4.232.90.249:57635] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aerWweFXXkLeyDnfk_98EQAAAA0"]
[Fri Apr 24 10:34:43.661211 2026] [:error] [pid 17719:tid 17730] [client 4.232.90.249:10156] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aerWw8TZ9gzEyL1BkPrIOgAAAIM"]
[Fri Apr 24 10:34:45.613919 2026] [:error] [pid 17719:tid 17748] [client 4.232.90.249:9650] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aerWxcTZ9gzEyL1BkPrIPwAAAJU"]
[Fri Apr 24 10:34:46.971680 2026] [:error] [pid 17719:tid 17751] [client 4.232.90.249:10054] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-p2r3q9c8k4.php"] [unique_id "aerWxsTZ9gzEyL1BkPrIRQAAAJg"]
[Fri Apr 24 10:34:49.217114 2026] [:error] [pid 17720:tid 17775] [client 4.232.90.249:10127] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aerWyehlUs6BS3Ng7_WqYwAAANU"]
[Fri Apr 24 10:34:51.047800 2026] [:error] [pid 17721:tid 17799] [client 4.232.90.249:10116] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aerWy-FXXkLeyDnfk_98GAAAABI"]
[Fri Apr 24 10:34:52.160921 2026] [:error] [pid 22114:tid 22119] [client 4.232.90.249:57656] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aerWzIAuWGz3WlMQjodrngAAAQI"]
[Fri Apr 24 10:34:53.167182 2026] [:error] [pid 22114:tid 22120] [client 4.232.90.249:10167] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "aerWzYAuWGz3WlMQjodroAAAAQM"]
[Fri Apr 24 10:34:55.450588 2026] [:error] [pid 17808:tid 17831] [client 4.232.90.249:10048] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/eetu.php"] [unique_id "aerWz-arbOEFI8qshvI9egAAAFU"]
[Fri Apr 24 10:34:57.064392 2026] [:error] [pid 17719:tid 17734] [client 4.232.90.249:10172] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/eetu.php"] [unique_id "aerW0cTZ9gzEyL1BkPrIVQAAAIc"]
[Fri Apr 24 10:34:58.424803 2026] [:error] [pid 17720:tid 17768] [client 4.232.90.249:10059] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/eetu.php"] [unique_id "aerW0uhlUs6BS3Ng7_WqcwAAAM4"]
[Fri Apr 24 10:35:01.785819 2026] [:error] [pid 17808:tid 17822] [client 4.232.90.249:10123] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/eetu.php"] [unique_id "aerW1earbOEFI8qshvI9fwAAAEw"]
[Fri Apr 24 10:35:02.813388 2026] [:error] [pid 17719:tid 17749] [client 4.232.90.249:10149] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws66.php"] [unique_id "aerW1sTZ9gzEyL1BkPrIWwAAAJY"]
[Fri Apr 24 10:35:04.328563 2026] [:error] [pid 17720:tid 17755] [client 4.232.90.249:10076] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws66.php"] [unique_id "aerW2OhlUs6BS3Ng7_WqhQAAAME"]
[Fri Apr 24 10:35:05.375275 2026] [:error] [pid 17720:tid 17767] [client 4.232.90.249:10108] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws66.php"] [unique_id "aerW2ehlUs6BS3Ng7_WqigAAAM0"]
[Fri Apr 24 10:35:06.827945 2026] [:error] [pid 22114:tid 22121] [client 4.232.90.249:10139] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws66.php"] [unique_id "aerW2oAuWGz3WlMQjodrqgAAAQQ"]
[Fri Apr 24 10:35:09.041002 2026] [:error] [pid 22114:tid 22136] [client 4.232.90.249:9731] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file61.php"] [unique_id "aerW3YAuWGz3WlMQjodrsAAAARM"]
[Fri Apr 24 10:35:11.535448 2026] [:error] [pid 17721:tid 17801] [client 4.232.90.249:9740] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file61.php"] [unique_id "aerW3-FXXkLeyDnfk_98KwAAABQ"]
[Fri Apr 24 10:35:17.084471 2026] [:error] [pid 17720:tid 17769] [client 4.232.90.249:10071] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file61.php"] [unique_id "aerW5ehlUs6BS3Ng7_WqrAAAAM8"]
[Fri Apr 24 10:35:19.437057 2026] [:error] [pid 17720:tid 17756] [client 4.232.90.249:9617] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file61.php"] [unique_id "aerW5-hlUs6BS3Ng7_WqtAAAAMI"]
[Fri Apr 24 10:35:29.450193 2026] [:error] [pid 17721:tid 17795] [client 4.232.90.249:9728] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aerW8eFXXkLeyDnfk_98TwAAAA4"]
[Fri Apr 24 10:35:30.829113 2026] [:error] [pid 17720:tid 17767] [client 4.232.90.249:10094] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aerW8uhlUs6BS3Ng7_WqyAAAAM0"]
[Fri Apr 24 10:35:32.013256 2026] [:error] [pid 17720:tid 17758] [client 4.232.90.249:9751] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aerW9OhlUs6BS3Ng7_WqywAAAMQ"]
[Fri Apr 24 10:35:33.191330 2026] [:error] [pid 17720:tid 17755] [client 4.232.90.249:10113] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/network/users.php"] [unique_id "aerW9ehlUs6BS3Ng7_Wq0wAAAME"]
[Fri Apr 24 10:35:34.142981 2026] [:error] [pid 17808:tid 17813] [client 4.232.90.249:9927] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/s.php"] [unique_id "aerW9uarbOEFI8qshvI9rQAAAEM"]
[Fri Apr 24 10:35:36.612275 2026] [:error] [pid 17719:tid 17727] [client 4.232.90.249:10153] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/s.php"] [unique_id "aerW-MTZ9gzEyL1BkPrIagAAAIA"]
[Fri Apr 24 10:35:37.188965 2026] [:error] [pid 22114:tid 22124] [client 4.232.90.249:9756] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/s.php"] [unique_id "aerW-YAuWGz3WlMQjodr1AAAAQc"]
[Fri Apr 24 10:35:40.350677 2026] [:error] [pid 17719:tid 17732] [client 4.232.90.249:9768] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/s.php"] [unique_id "aerW_MTZ9gzEyL1BkPrIbAAAAIU"]
[Fri Apr 24 10:35:42.505293 2026] [:error] [pid 22114:tid 22119] [client 4.232.90.249:57618] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tymn.php"] [unique_id "aerW_oAuWGz3WlMQjodr1wAAAQI"]
[Fri Apr 24 10:35:44.018159 2026] [:error] [pid 17808:tid 17826] [client 4.232.90.249:10159] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tymn.php"] [unique_id "aerXAOarbOEFI8qshvI9tgAAAFA"]
[Fri Apr 24 10:35:45.386463 2026] [:error] [pid 17808:tid 17815] [client 4.232.90.249:10132] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tymn.php"] [unique_id "aerXAearbOEFI8qshvI9ugAAAEU"]
[Fri Apr 24 10:35:46.737152 2026] [:error] [pid 22114:tid 22134] [client 4.232.90.249:10081] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tymn.php"] [unique_id "aerXAoAuWGz3WlMQjodr3QAAARE"]
[Fri Apr 24 10:35:47.354828 2026] [:error] [pid 22114:tid 22129] [client 4.232.90.249:57659] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "aerXA4AuWGz3WlMQjodr4wAAAQw"]
[Fri Apr 24 10:35:47.910060 2026] [:error] [pid 17720:tid 17778] [client 4.232.90.249:9781] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "aerXA-hlUs6BS3Ng7_Wq8gAAANg"]
[Fri Apr 24 10:35:48.629507 2026] [:error] [pid 17720:tid 17775] [client 4.232.90.249:9644] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "aerXBOhlUs6BS3Ng7_Wq9QAAANU"]
[Fri Apr 24 10:35:49.295329 2026] [:error] [pid 22114:tid 22128] [client 4.232.90.249:9744] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-links-opml.php"] [unique_id "aerXBYAuWGz3WlMQjodr5QAAAQs"]
[Fri Apr 24 10:35:49.885524 2026] [:error] [pid 17720:tid 17772] [client 4.232.90.249:10097] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "aerXBehlUs6BS3Ng7_Wq_AAAANI"]
[Fri Apr 24 10:35:50.786901 2026] [:error] [pid 17720:tid 17778] [client 4.232.90.249:10161] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "aerXBuhlUs6BS3Ng7_Wq_wAAANg"]
[Fri Apr 24 10:35:51.359171 2026] [:error] [pid 22114:tid 22140] [client 4.232.90.249:9785] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "aerXB4AuWGz3WlMQjodr6wAAARc"]
[Fri Apr 24 10:35:52.017698 2026] [:error] [pid 17720:tid 17756] [client 4.232.90.249:9601] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "aerXCOhlUs6BS3Ng7_WrAwAAAMI"]
[Fri Apr 24 10:35:53.439599 2026] [:error] [pid 17720:tid 17762] [client 4.232.90.249:10107] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aerXCehlUs6BS3Ng7_WrCAAAAMg"]
[Fri Apr 24 10:35:54.678804 2026] [:error] [pid 17720:tid 17773] [client 4.232.90.249:57644] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aerXCuhlUs6BS3Ng7_WrCgAAANM"]
[Fri Apr 24 10:35:55.850216 2026] [:error] [pid 22114:tid 22125] [client 4.232.90.249:10130] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aerXC4AuWGz3WlMQjodr9AAAAQg"]
[Fri Apr 24 10:35:56.855152 2026] [:error] [pid 17720:tid 17774] [client 4.232.90.249:57661] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms.php"] [unique_id "aerXDOhlUs6BS3Ng7_WrEQAAANQ"]
[Fri Apr 24 10:35:58.846348 2026] [:error] [pid 22114:tid 22129] [client 4.232.90.249:57626] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "aerXDoAuWGz3WlMQjodr_QAAAQw"]
[Fri Apr 24 10:35:59.894148 2026] [:error] [pid 17808:tid 17821] [client 4.232.90.249:10118] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "aerXD-arbOEFI8qshvI9xgAAAEs"]
[Fri Apr 24 10:36:02.448155 2026] [:error] [pid 17808:tid 17826] [client 4.232.90.249:9776] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "aerXEuarbOEFI8qshvI9zQAAAFA"]
[Fri Apr 24 10:36:05.789899 2026] [:error] [pid 17719:tid 17734] [client 4.232.90.249:10089] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "aerXFcTZ9gzEyL1BkPrIhgAAAIc"]
[Fri Apr 24 10:36:07.115024 2026] [:error] [pid 17808:tid 17832] [client 4.232.90.249:10100] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-class-atom.php"] [unique_id "aerXF-arbOEFI8qshvI92AAAAFY"]
[Fri Apr 24 10:36:08.772776 2026] [:error] [pid 22114:tid 22129] [client 4.232.90.249:10151] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-class-atom.php"] [unique_id "aerXGIAuWGz3WlMQjodsBwAAAQw"]
[Fri Apr 24 10:36:09.908379 2026] [:error] [pid 17719:tid 17738] [client 4.232.90.249:10122] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-class-atom.php"] [unique_id "aerXGcTZ9gzEyL1BkPrIigAAAIs"]
[Fri Apr 24 10:36:10.715058 2026] [:error] [pid 17719:tid 17728] [client 4.232.90.249:9959] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-class-atom.php"] [unique_id "aerXGsTZ9gzEyL1BkPrIjwAAAIE"]
[Fri Apr 24 10:36:11.785277 2026] [:error] [pid 17719:tid 17744] [client 4.232.90.249:57615] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aerXG8TZ9gzEyL1BkPrImQAAAJE"]
[Fri Apr 24 10:36:12.674637 2026] [:error] [pid 17720:tid 17770] [client 4.232.90.249:10070] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aerXHOhlUs6BS3Ng7_WrMQAAANA"]
[Fri Apr 24 10:36:15.449996 2026] [:error] [pid 17719:tid 17733] [client 4.232.90.249:10225] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aerXH8TZ9gzEyL1BkPrIngAAAIY"]
[Fri Apr 24 10:36:18.267644 2026] [:error] [pid 17720:tid 17771] [client 4.232.90.249:10082] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "aerXIuhlUs6BS3Ng7_WrRgAAANE"]
[Fri Apr 24 10:36:21.503033 2026] [:error] [pid 17720:tid 17756] [client 4.232.90.249:10115] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/press.php"] [unique_id "aerXJehlUs6BS3Ng7_WrUQAAAMI"]
[Fri Apr 24 10:36:23.136102 2026] [:error] [pid 17720:tid 17778] [client 4.232.90.249:9608] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/press.php"] [unique_id "aerXJ-hlUs6BS3Ng7_WrWQAAANg"]
[Fri Apr 24 10:36:25.374407 2026] [:error] [pid 17808:tid 17831] [client 4.232.90.249:9933] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/press.php"] [unique_id "aerXKearbOEFI8qshvI-KAAAAFU"]
[Fri Apr 24 10:36:26.596305 2026] [:error] [pid 17808:tid 17817] [client 4.232.90.249:9649] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/press.php"] [unique_id "aerXKuarbOEFI8qshvI-NAAAAEc"]
[Fri Apr 24 10:36:27.430889 2026] [:error] [pid 17721:tid 17802] [client 4.232.90.249:57606] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/900.php"] [unique_id "aerXK-FXXkLeyDnfk_98lgAAABU"]
[Fri Apr 24 10:36:28.770540 2026] [:error] [pid 22114:tid 22118] [client 4.232.90.249:9760] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/900.php"] [unique_id "aerXLIAuWGz3WlMQjodsIgAAAQE"]
[Fri Apr 24 10:36:36.376386 2026] [:error] [pid 17808:tid 17816] [client 4.232.90.249:9613] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adoms.php"] [unique_id "aerXNOarbOEFI8qshvI-lQAAAEY"]
[Fri Apr 24 10:36:37.471171 2026] [:error] [pid 17721:tid 17802] [client 4.232.90.249:9739] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adoms.php"] [unique_id "aerXNeFXXkLeyDnfk_98oQAAABU"]
[Fri Apr 24 10:36:38.583980 2026] [:error] [pid 17721:tid 17789] [client 4.232.90.249:57619] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adoms.php"] [unique_id "aerXNuFXXkLeyDnfk_98ogAAAAg"]
[Fri Apr 24 10:36:39.679539 2026] [:error] [pid 17721:tid 17787] [client 4.232.90.249:10170] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adoms.php"] [unique_id "aerXN-FXXkLeyDnfk_98qQAAAAY"]
[Fri Apr 24 10:36:40.436647 2026] [:error] [pid 17720:tid 17767] [client 4.232.90.249:57663] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plugin-editor.php"] [unique_id "aerXOOhlUs6BS3Ng7_WrwQAAAM0"]
[Fri Apr 24 10:36:42.534928 2026] [:error] [pid 17720:tid 17763] [client 4.232.90.249:9732] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plugin-editor.php"] [unique_id "aerXOuhlUs6BS3Ng7_Wr5AAAAMk"]
[Fri Apr 24 10:36:43.943098 2026] [:error] [pid 22114:tid 22137] [client 4.232.90.249:10145] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plugin-editor.php"] [unique_id "aerXO4AuWGz3WlMQjodsjgAAARQ"]
[Fri Apr 24 10:36:47.063842 2026] [:error] [pid 17808:tid 17815] [client 4.232.90.249:10095] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/plugin-editor.php"] [unique_id "aerXP-arbOEFI8qshvI-sAAAAEU"]
[Fri Apr 24 10:36:52.604262 2026] [:error] [pid 17719:tid 17741] [client 4.232.90.249:10099] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8573.php"] [unique_id "aerXRMTZ9gzEyL1BkPrI0QAAAI4"]
[Fri Apr 24 10:36:54.227803 2026] [:error] [pid 17720:tid 17777] [client 4.232.90.249:9770] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8573.php"] [unique_id "aerXRuhlUs6BS3Ng7_WsGgAAANc"]
[Fri Apr 24 10:36:55.283697 2026] [:error] [pid 17720:tid 17768] [client 4.232.90.249:9622] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8573.php"] [unique_id "aerXR-hlUs6BS3Ng7_WsIwAAAM4"]
[Fri Apr 24 10:36:57.129865 2026] [:error] [pid 17808:tid 17828] [client 4.232.90.249:10209] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8573.php"] [unique_id "aerXSearbOEFI8qshvI-wAAAAFI"]
[Fri Apr 24 10:36:59.726816 2026] [:error] [pid 17808:tid 17832] [client 4.232.90.249:57662] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/an.php"] [unique_id "aerXS-arbOEFI8qshvI-wQAAAFY"]
[Fri Apr 24 10:37:00.846006 2026] [:error] [pid 22114:tid 22139] [client 4.232.90.249:57621] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/an.php"] [unique_id "aerXTIAuWGz3WlMQjodspgAAARY"]
[Fri Apr 24 10:37:01.896608 2026] [:error] [pid 17720:tid 17777] [client 4.232.90.249:9610] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/an.php"] [unique_id "aerXTehlUs6BS3Ng7_WsQgAAANc"]
[Fri Apr 24 10:37:02.761977 2026] [:error] [pid 17721:tid 17784] [client 4.232.90.249:57605] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/an.php"] [unique_id "aerXTuFXXkLeyDnfk_980gAAAAM"]
[Fri Apr 24 10:37:03.438741 2026] [:error] [pid 17719:tid 17732] [client 4.232.90.249:10073] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/t.php"] [unique_id "aerXT8TZ9gzEyL1BkPrI1wAAAIU"]
[Fri Apr 24 10:37:04.279515 2026] [:error] [pid 22114:tid 22119] [client 4.232.90.249:10060] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/t.php"] [unique_id "aerXUIAuWGz3WlMQjodsrAAAAQI"]
[Fri Apr 24 10:37:05.625880 2026] [:error] [pid 17719:tid 17729] [client 4.232.90.249:10131] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/t.php"] [unique_id "aerXUcTZ9gzEyL1BkPrI3gAAAII"]
[Fri Apr 24 10:37:06.620946 2026] [:error] [pid 22114:tid 22123] [client 4.232.90.249:10231] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/t.php"] [unique_id "aerXUoAuWGz3WlMQjodstAAAAQY"]
[Fri Apr 24 10:37:08.477931 2026] [:error] [pid 17720:tid 17775] [client 4.232.90.249:57652] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aerXVOhlUs6BS3Ng7_WsUgAAANU"]
[Fri Apr 24 10:37:09.975471 2026] [:error] [pid 17721:tid 17792] [client 4.232.90.249:57607] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aerXVeFXXkLeyDnfk_985AAAAAs"]
[Fri Apr 24 10:37:12.051825 2026] [:error] [pid 17719:tid 17737] [client 4.232.90.249:9749] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aerXWMTZ9gzEyL1BkPrI4QAAAIo"]
[Fri Apr 24 10:37:14.104633 2026] [:error] [pid 17719:tid 17734] [client 4.232.90.249:57660] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "aerXWsTZ9gzEyL1BkPrI5QAAAIc"]
[Fri Apr 24 10:37:15.473630 2026] [:error] [pid 17720:tid 17761] [client 4.232.90.249:57657] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/profile.php"] [unique_id "aerXW-hlUs6BS3Ng7_WsYgAAAMc"]
[Fri Apr 24 10:37:16.395699 2026] [:error] [pid 22114:tid 22117] [client 4.232.90.249:57625] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/profile.php"] [unique_id "aerXXIAuWGz3WlMQjodswwAAAQA"]
[Fri Apr 24 10:37:17.650164 2026] [:error] [pid 22114:tid 22120] [client 4.232.90.249:9960] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/profile.php"] [unique_id "aerXXYAuWGz3WlMQjodsyAAAAQM"]
[Fri Apr 24 10:37:18.497699 2026] [:error] [pid 17721:tid 17795] [client 4.232.90.249:57624] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/profile.php"] [unique_id "aerXXuFXXkLeyDnfk_98-QAAAA4"]
[Fri Apr 24 10:37:19.634119 2026] [:error] [pid 17719:tid 17731] [client 4.232.90.249:10177] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gaza.php"] [unique_id "aerXX8TZ9gzEyL1BkPrI7QAAAIQ"]
[Fri Apr 24 10:37:20.526978 2026] [:error] [pid 17719:tid 17738] [client 4.232.90.249:9647] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gaza.php"] [unique_id "aerXYMTZ9gzEyL1BkPrI8QAAAIs"]
[Fri Apr 24 10:37:21.075295 2026] [:error] [pid 17719:tid 17732] [client 4.232.90.249:10075] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gaza.php"] [unique_id "aerXYcTZ9gzEyL1BkPrI8gAAAIU"]
[Fri Apr 24 10:37:21.954292 2026] [:error] [pid 17721:tid 17786] [client 4.232.90.249:9641] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gaza.php"] [unique_id "aerXYeFXXkLeyDnfk_98_gAAAAU"]
[Fri Apr 24 10:37:22.882685 2026] [:error] [pid 17721:tid 17792] [client 4.232.90.249:9778] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aerXYuFXXkLeyDnfk_99AwAAAAs"]
[Fri Apr 24 10:37:24.340955 2026] [:error] [pid 22114:tid 22117] [client 4.232.90.249:10069] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aerXZIAuWGz3WlMQjods2QAAAQA"]
[Fri Apr 24 10:37:25.452151 2026] [:error] [pid 17721:tid 17791] [client 4.232.90.249:57620] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aerXZeFXXkLeyDnfk_99CgAAAAo"]
[Fri Apr 24 10:37:26.540110 2026] [:error] [pid 22114:tid 22123] [client 4.232.90.249:10168] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kj.php"] [unique_id "aerXZoAuWGz3WlMQjods3QAAAQY"]
[Fri Apr 24 10:37:29.999166 2026] [:error] [pid 17720:tid 17772] [client 4.232.90.249:57612] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "aerXaehlUs6BS3Ng7_WsggAAANI"]
[Fri Apr 24 10:37:32.141940 2026] [:error] [pid 22114:tid 22134] [client 4.232.90.249:57603] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "aerXbIAuWGz3WlMQjods5AAAARE"]
[Fri Apr 24 10:37:34.520733 2026] [:error] [pid 17721:tid 17788] [client 4.232.90.249:10051] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aboute.php"] [unique_id "aerXbuFXXkLeyDnfk_99HAAAAAc"]
[Fri Apr 24 10:37:46.695888 2026] [:error] [pid 17720:tid 17770] [client 4.232.90.249:10157] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/retu11.PhP7"] [unique_id "aerXeuhlUs6BS3Ng7_Ws7QAAANA"]
[Fri Apr 24 10:37:51.109739 2026] [:error] [pid 17720:tid 17775] [client 4.232.90.249:9630] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/retu11.PhP7"] [unique_id "aerXf-hlUs6BS3Ng7_Ws9wAAANU"]
[Fri Apr 24 10:37:54.783409 2026] [:error] [pid 17808:tid 17818] [client 4.232.90.249:10158] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/retu11.PhP7"] [unique_id "aerXguarbOEFI8qshvI-9QAAAEg"]
[Fri Apr 24 10:37:55.652479 2026] [:error] [pid 17721:tid 17788] [client 4.232.90.249:9747] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/retu11.PhP7"] [unique_id "aerXg-FXXkLeyDnfk_99OwAAAAc"]
[Fri Apr 24 10:37:56.465656 2026] [:error] [pid 22114:tid 22127] [client 4.232.90.249:10185] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rip.php"] [unique_id "aerXhIAuWGz3WlMQjodtBgAAAQo"]
[Fri Apr 24 10:37:58.913835 2026] [:error] [pid 17808:tid 17819] [client 4.232.90.249:10180] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rip.php"] [unique_id "aerXhuarbOEFI8qshvI-9wAAAEk"]
[Fri Apr 24 10:38:02.357178 2026] [:error] [pid 22114:tid 22128] [client 4.232.90.249:9745] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rip.php"] [unique_id "aerXioAuWGz3WlMQjodtEAAAAQs"]
[Fri Apr 24 10:38:03.593462 2026] [:error] [pid 22114:tid 22122] [client 4.232.90.249:10201] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rip.php"] [unique_id "aerXi4AuWGz3WlMQjodtFQAAAQU"]
[Fri Apr 24 10:38:04.905382 2026] [:error] [pid 22114:tid 22117] [client 4.232.90.249:10056] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aerXjIAuWGz3WlMQjodtGQAAAQA"]
[Fri Apr 24 10:38:06.295355 2026] [:error] [pid 22114:tid 22139] [client 4.232.90.249:9628] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aerXjoAuWGz3WlMQjodtHQAAARY"]
[Fri Apr 24 10:38:07.484941 2026] [:error] [pid 17719:tid 17750] [client 4.232.90.249:9757] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aerXj8TZ9gzEyL1BkPrJMwAAAJc"]
[Fri Apr 24 10:38:08.234108 2026] [:error] [pid 17721:tid 17786] [client 4.232.90.249:10083] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "aerXkOFXXkLeyDnfk_99VgAAAAU"]
[Fri Apr 24 10:38:09.340992 2026] [:error] [pid 17719:tid 17729] [client 4.232.90.249:57640] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zoo.php"] [unique_id "aerXkcTZ9gzEyL1BkPrJPgAAAII"]
[Fri Apr 24 10:38:10.230510 2026] [:error] [pid 17808:tid 17830] [client 4.232.90.249:9752] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zoo.php"] [unique_id "aerXkuarbOEFI8qshvI_GwAAAFQ"]
[Fri Apr 24 10:38:11.292263 2026] [:error] [pid 17720:tid 17772] [client 4.232.90.249:9737] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zoo.php"] [unique_id "aerXk-hlUs6BS3Ng7_WtHQAAANI"]
[Fri Apr 24 10:38:12.753600 2026] [:error] [pid 17721:tid 17799] [client 4.232.90.249:10146] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zoo.php"] [unique_id "aerXlOFXXkLeyDnfk_99XgAAABI"]
[Fri Apr 24 10:38:13.383263 2026] [:error] [pid 17721:tid 17795] [client 4.232.90.249:57637] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admlo.php"] [unique_id "aerXleFXXkLeyDnfk_99YAAAAA4"]
[Fri Apr 24 10:38:14.205535 2026] [:error] [pid 17721:tid 17781] [client 4.232.90.249:10162] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admlo.php"] [unique_id "aerXluFXXkLeyDnfk_99YgAAAAA"]
[Fri Apr 24 10:38:15.140090 2026] [:error] [pid 17721:tid 17798] [client 4.232.90.249:57627] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admlo.php"] [unique_id "aerXl-FXXkLeyDnfk_99ZQAAABE"]
[Fri Apr 24 10:38:16.549868 2026] [:error] [pid 22114:tid 22122] [client 4.232.90.249:57547] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admlo.php"] [unique_id "aerXmIAuWGz3WlMQjodtRgAAAQU"]
[Fri Apr 24 10:38:17.983653 2026] [:error] [pid 17720:tid 17778] [client 4.232.90.249:9771] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gcqoa.php"] [unique_id "aerXmehlUs6BS3Ng7_WtJwAAANg"]
[Fri Apr 24 10:38:19.232442 2026] [:error] [pid 22114:tid 22137] [client 4.232.90.249:10064] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gcqoa.php"] [unique_id "aerXm4AuWGz3WlMQjodtSwAAARQ"]
[Fri Apr 24 10:38:20.390324 2026] [:error] [pid 17808:tid 17814] [client 4.232.90.249:10084] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gcqoa.php"] [unique_id "aerXnOarbOEFI8qshvI_KwAAAEQ"]
[Fri Apr 24 10:38:21.653357 2026] [:error] [pid 22114:tid 22120] [client 4.232.90.249:57642] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gcqoa.php"] [unique_id "aerXnYAuWGz3WlMQjodtUwAAAQM"]
[Fri Apr 24 10:38:22.416616 2026] [:error] [pid 17808:tid 17815] [client 4.232.90.249:9602] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "aerXnuarbOEFI8qshvI_LgAAAEU"]
[Fri Apr 24 10:38:23.609605 2026] [:error] [pid 22114:tid 22137] [client 4.232.90.249:10136] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "aerXn4AuWGz3WlMQjodtWgAAARQ"]
[Fri Apr 24 10:38:24.276424 2026] [:error] [pid 22114:tid 22134] [client 4.232.90.249:10065] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "aerXoIAuWGz3WlMQjodtWwAAARE"]
[Fri Apr 24 10:38:25.438656 2026] [:error] [pid 17808:tid 17822] [client 4.232.90.249:10128] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "aerXoearbOEFI8qshvI_MgAAAEw"]
[Fri Apr 24 10:38:26.192824 2026] [:error] [pid 17721:tid 17801] [client 4.232.90.249:10129] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/b.php"] [unique_id "aerXouFXXkLeyDnfk_99bAAAABQ"]
[Fri Apr 24 10:38:27.179456 2026] [:error] [pid 22114:tid 22130] [client 4.232.90.249:9607] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/b.php"] [unique_id "aerXo4AuWGz3WlMQjodtXwAAAQ0"]
[Fri Apr 24 10:38:28.029956 2026] [:error] [pid 17720:tid 17778] [client 4.232.90.249:57608] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/b.php"] [unique_id "aerXpOhlUs6BS3Ng7_WtQAAAANg"]
[Fri Apr 24 10:38:29.957390 2026] [:error] [pid 22114:tid 22125] [client 4.232.90.249:10237] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/b.php"] [unique_id "aerXpYAuWGz3WlMQjodtYwAAAQg"]
[Fri Apr 24 10:38:30.610029 2026] [:error] [pid 17720:tid 17759] [client 4.232.90.249:9730] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aerXpuhlUs6BS3Ng7_WtTQAAAMU"]
[Fri Apr 24 10:38:31.484277 2026] [:error] [pid 17720:tid 17770] [client 4.232.90.249:10102] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aerXp-hlUs6BS3Ng7_WtUQAAANA"]
[Fri Apr 24 10:38:32.258864 2026] [:error] [pid 17720:tid 17755] [client 4.232.90.249:57655] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aerXqOhlUs6BS3Ng7_WtVgAAAME"]
[Fri Apr 24 10:38:33.870948 2026] [:error] [pid 22114:tid 22130] [client 4.232.90.249:9953] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/grsiuk.php"] [unique_id "aerXqYAuWGz3WlMQjodtawAAAQ0"]
[Fri Apr 24 10:38:34.763772 2026] [:error] [pid 17720:tid 17766] [client 4.232.90.249:10152] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-class-api.php"] [unique_id "aerXquhlUs6BS3Ng7_WtXQAAAMw"]
[Fri Apr 24 10:38:35.627644 2026] [:error] [pid 17808:tid 17832] [client 4.232.90.249:9735] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-class-api.php"] [unique_id "aerXq-arbOEFI8qshvI_RwAAAFY"]
[Fri Apr 24 10:38:36.624834 2026] [:error] [pid 17720:tid 17760] [client 4.232.90.249:10090] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-class-api.php"] [unique_id "aerXrOhlUs6BS3Ng7_WtYAAAAMY"]
[Fri Apr 24 10:38:37.339970 2026] [:error] [pid 17808:tid 17829] [client 4.232.90.249:10121] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-class-api.php"] [unique_id "aerXrearbOEFI8qshvI_TgAAAFM"]
[Fri Apr 24 10:38:38.322493 2026] [:error] [pid 17720:tid 17765] [client 4.232.90.249:10093] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aerXruhlUs6BS3Ng7_WtZAAAAMs"]
[Fri Apr 24 10:38:39.896804 2026] [:error] [pid 17720:tid 17766] [client 4.232.90.249:9729] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aerXr-hlUs6BS3Ng7_WtZwAAAMw"]
[Fri Apr 24 10:38:40.930555 2026] [:error] [pid 17720:tid 17771] [client 4.232.90.249:9762] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aerXsOhlUs6BS3Ng7_WtbQAAANE"]
[Fri Apr 24 10:38:42.330654 2026] [:error] [pid 22114:tid 22126] [client 4.232.90.249:9661] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bolt.php"] [unique_id "aerXsoAuWGz3WlMQjodteQAAAQk"]
[Fri Apr 24 10:38:43.215965 2026] [:error] [pid 17720:tid 17772] [client 4.232.90.249:9662] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aerXs-hlUs6BS3Ng7_WtcwAAANI"]
[Fri Apr 24 10:38:45.642875 2026] [:error] [pid 17721:tid 17783] [client 4.232.90.249:57553] [client 4.232.90.249] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gifclass.php"] [unique_id "aerXteFXXkLeyDnfk_99mAAAAAI"]
[Fri Apr 24 20:36:09.170801 2026] [:error] [pid 17808:tid 17828] [client 160.30.179.124:39190] [client 160.30.179.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env"] [unique_id "aetjuearbOEFI8qshvIzIAAAAFI"]
[Fri Apr 24 21:31:48.924249 2026] [:error] [pid 17719:tid 17749] [client 40.89.191.154:13363] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "aetwxMTZ9gzEyL1BkPqzSgAAAJY"]
[Fri Apr 24 21:31:50.986640 2026] [:error] [pid 17721:tid 17785] [client 40.89.191.154:16316] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "aetwxuFXXkLeyDnfk_9F9QAAAAQ"]
[Fri Apr 24 21:31:53.801740 2026] [:error] [pid 4177:tid 4203] [client 40.89.191.154:38046] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "aetwyX2asKnvdrSe0x4p-AAAAZI"]
[Fri Apr 24 21:31:59.607423 2026] [:error] [pid 17808:tid 17811] [client 40.89.191.154:8680] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/jp.php"] [unique_id "aetwz-arbOEFI8qshvJGVwAAAEE"]
[Fri Apr 24 21:32:04.896019 2026] [:error] [pid 17808:tid 17828] [client 40.89.191.154:42248] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/aevly.php"] [unique_id "aetw1OarbOEFI8qshvJGXgAAAFI"]
[Fri Apr 24 21:32:05.896432 2026] [:error] [pid 4177:tid 4200] [client 40.89.191.154:31071] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/aevly.php"] [unique_id "aetw1X2asKnvdrSe0x4qFwAAAY8"]
[Fri Apr 24 21:32:08.399888 2026] [:error] [pid 22114:tid 22130] [client 40.89.191.154:16270] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/aevly.php"] [unique_id "aetw2IAuWGz3WlMQjof0cwAAAQ0"]
[Fri Apr 24 21:32:10.658458 2026] [:error] [pid 22114:tid 22128] [client 40.89.191.154:12008] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/aevly.php"] [unique_id "aetw2oAuWGz3WlMQjof0eQAAAQs"]
[Fri Apr 24 21:32:11.809138 2026] [:error] [pid 14531:tid 14557] [client 40.89.191.154:42299] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ta0ol.php"] [unique_id "aetw23fLU2gw-6KR-GbTzAAAAVg"]
[Fri Apr 24 21:32:19.583472 2026] [:error] [pid 17719:tid 17750] [client 40.89.191.154:57183] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ta0ol.php"] [unique_id "aetw48TZ9gzEyL1BkPqzZAAAAJc"]
[Fri Apr 24 21:32:20.588133 2026] [:error] [pid 4177:tid 4196] [client 40.89.191.154:41639] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ta0ol.php"] [unique_id "aetw5H2asKnvdrSe0x4qMQAAAYs"]
[Fri Apr 24 21:32:22.669088 2026] [:error] [pid 17719:tid 17748] [client 40.89.191.154:21081] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ta0ol.php"] [unique_id "aetw5sTZ9gzEyL1BkPqzbQAAAJU"]
[Fri Apr 24 21:32:24.148042 2026] [:error] [pid 17721:tid 17782] [client 40.89.191.154:50584] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "aetw6OFXXkLeyDnfk_9GGwAAAAE"]
[Fri Apr 24 21:32:25.198092 2026] [:error] [pid 4177:tid 4186] [client 40.89.191.154:9308] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "aetw6X2asKnvdrSe0x4qNwAAAYE"]
[Fri Apr 24 21:32:28.889394 2026] [:error] [pid 4177:tid 4185] [client 40.89.191.154:2422] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "aetw7H2asKnvdrSe0x4qRgAAAYA"]
[Fri Apr 24 21:32:41.254658 2026] [:error] [pid 17719:tid 17743] [client 40.89.191.154:17854] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ctex1.php"] [unique_id "aetw-cTZ9gzEyL1BkPqziwAAAJA"]
[Fri Apr 24 21:32:48.394074 2026] [:error] [pid 17720:tid 17756] [client 40.89.191.154:42266] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ctex1.php"] [unique_id "aetxAOhlUs6BS3Ng7_W3jAAAAMI"]
[Fri Apr 24 21:32:51.720969 2026] [:error] [pid 4177:tid 4201] [client 40.89.191.154:61982] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ctex1.php"] [unique_id "aetxA32asKnvdrSe0x4qWgAAAZA"]
[Fri Apr 24 21:32:54.558093 2026] [:error] [pid 17719:tid 17746] [client 40.89.191.154:11793] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ctex1.php"] [unique_id "aetxBsTZ9gzEyL1BkPqzkQAAAJM"]
[Fri Apr 24 21:32:58.595185 2026] [:error] [pid 4177:tid 4193] [client 40.89.191.154:8664] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lb.php"] [unique_id "aetxCn2asKnvdrSe0x4qawAAAYg"]
[Fri Apr 24 21:32:59.153133 2026] [:error] [pid 14531:tid 14536] [client 40.89.191.154:2165] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lb.php"] [unique_id "aetxC3fLU2gw-6KR-GbUHAAAAUM"]
[Fri Apr 24 21:33:00.281690 2026] [:error] [pid 22114:tid 22120] [client 40.89.191.154:31470] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lb.php"] [unique_id "aetxDIAuWGz3WlMQjof0mAAAAQM"]
[Fri Apr 24 21:33:01.823005 2026] [:error] [pid 14531:tid 14537] [client 40.89.191.154:3055] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lb.php"] [unique_id "aetxDXfLU2gw-6KR-GbUIAAAAUQ"]
[Fri Apr 24 21:33:03.112339 2026] [:error] [pid 14531:tid 14551] [client 40.89.191.154:42298] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/cilus.php"] [unique_id "aetxD3fLU2gw-6KR-GbUJQAAAVI"]
[Fri Apr 24 21:33:05.496747 2026] [:error] [pid 14531:tid 14538] [client 40.89.191.154:10527] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/cilus.php"] [unique_id "aetxEXfLU2gw-6KR-GbUKQAAAUU"]
[Fri Apr 24 21:33:07.135553 2026] [:error] [pid 4177:tid 4189] [client 40.89.191.154:50605] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/cilus.php"] [unique_id "aetxE32asKnvdrSe0x4qegAAAYQ"]
[Fri Apr 24 21:33:09.256309 2026] [:error] [pid 4177:tid 4202] [client 40.89.191.154:43830] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/cilus.php"] [unique_id "aetxFX2asKnvdrSe0x4qiQAAAZE"]
[Fri Apr 24 21:33:11.677870 2026] [:error] [pid 17720:tid 17763] [client 40.89.191.154:50610] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/mh.php"] [unique_id "aetxF-hlUs6BS3Ng7_W3tgAAAMk"]
[Fri Apr 24 21:33:12.763858 2026] [:error] [pid 17720:tid 17768] [client 40.89.191.154:53870] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/mh.php"] [unique_id "aetxGOhlUs6BS3Ng7_W3vAAAAM4"]
[Fri Apr 24 21:33:19.854127 2026] [:error] [pid 4177:tid 4186] [client 40.89.191.154:13320] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/mh.php"] [unique_id "aetxH32asKnvdrSe0x4qmAAAAYE"]
[Fri Apr 24 21:33:21.933436 2026] [:error] [pid 17720:tid 17772] [client 40.89.191.154:17853] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/mh.php"] [unique_id "aetxIehlUs6BS3Ng7_W3ygAAANI"]
[Fri Apr 24 21:33:28.401642 2026] [:error] [pid 17808:tid 17817] [client 40.89.191.154:42078] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fone1.php"] [unique_id "aetxKOarbOEFI8qshvJGrgAAAEc"]
[Fri Apr 24 21:33:29.915734 2026] [:error] [pid 14531:tid 14550] [client 40.89.191.154:44382] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fone1.php"] [unique_id "aetxKXfLU2gw-6KR-GbUNwAAAVE"]
[Fri Apr 24 21:33:33.566155 2026] [:error] [pid 17721:tid 17803] [client 40.89.191.154:36054] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fone1.php"] [unique_id "aetxLeFXXkLeyDnfk_9GZQAAABY"]
[Fri Apr 24 21:33:35.353736 2026] [:error] [pid 4177:tid 4197] [client 40.89.191.154:47526] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fone1.php"] [unique_id "aetxL32asKnvdrSe0x4q9QAAAYw"]
[Fri Apr 24 21:33:38.608098 2026] [:error] [pid 4177:tid 4207] [client 40.89.191.154:42257] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/auth.php"] [unique_id "aetxMn2asKnvdrSe0x4rAgAAAZY"]
[Fri Apr 24 21:33:48.956433 2026] [:error] [pid 17719:tid 17731] [client 40.89.191.154:37050] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/amwxl.php"] [unique_id "aetxPMTZ9gzEyL1BkPqzvwAAAIQ"]
[Fri Apr 24 21:33:50.348729 2026] [:error] [pid 14531:tid 14556] [client 40.89.191.154:13330] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/amwxl.php"] [unique_id "aetxPnfLU2gw-6KR-GbUYgAAAVc"]
[Fri Apr 24 21:33:57.505215 2026] [:error] [pid 17719:tid 17733] [client 40.89.191.154:38121] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/amwxl.php"] [unique_id "aetxRcTZ9gzEyL1BkPqzwwAAAIY"]
[Fri Apr 24 21:34:02.397841 2026] [:error] [pid 17719:tid 17740] [client 40.89.191.154:50135] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/amwxl.php"] [unique_id "aetxSsTZ9gzEyL1BkPqzygAAAI0"]
[Fri Apr 24 21:34:04.883910 2026] [:error] [pid 4177:tid 4191] [client 40.89.191.154:36505] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "aetxTH2asKnvdrSe0x4rTwAAAYY"]
[Fri Apr 24 21:34:06.261992 2026] [:error] [pid 4177:tid 4202] [client 40.89.191.154:58717] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "aetxTn2asKnvdrSe0x4rWwAAAZE"]
[Fri Apr 24 21:34:08.545688 2026] [:error] [pid 4177:tid 4202] [client 40.89.191.154:61186] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "aetxUH2asKnvdrSe0x4rZAAAAZE"]
[Fri Apr 24 21:34:10.044946 2026] [:error] [pid 4177:tid 4191] [client 40.89.191.154:13315] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "aetxUn2asKnvdrSe0x4rcAAAAYY"]
[Fri Apr 24 21:34:12.237005 2026] [:error] [pid 14531:tid 14555] [client 40.89.191.154:22807] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/userfuns.php"] [unique_id "aetxVHfLU2gw-6KR-GbUeAAAAVY"]
[Fri Apr 24 21:34:14.369522 2026] [:error] [pid 17719:tid 17751] [client 40.89.191.154:17795] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/userfuns.php"] [unique_id "aetxVsTZ9gzEyL1BkPqz0QAAAJg"]
[Fri Apr 24 21:34:15.512561 2026] [:error] [pid 17720:tid 17765] [client 40.89.191.154:47327] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/userfuns.php"] [unique_id "aetxV-hlUs6BS3Ng7_W4PQAAAMs"]
[Fri Apr 24 21:34:16.143682 2026] [:error] [pid 17719:tid 17739] [client 40.89.191.154:40221] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/userfuns.php"] [unique_id "aetxWMTZ9gzEyL1BkPqz1QAAAIw"]
[Fri Apr 24 21:34:17.397101 2026] [:error] [pid 4177:tid 4186] [client 40.89.191.154:22797] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/menu.php"] [unique_id "aetxWX2asKnvdrSe0x4rkQAAAYE"]
[Fri Apr 24 21:34:18.240777 2026] [:error] [pid 17719:tid 17731] [client 40.89.191.154:8691] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/menu.php"] [unique_id "aetxWsTZ9gzEyL1BkPqz2AAAAIQ"]
[Fri Apr 24 21:34:19.898857 2026] [:error] [pid 14531:tid 14555] [client 40.89.191.154:55254] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/menu.php"] [unique_id "aetxW3fLU2gw-6KR-GbUhgAAAVY"]
[Fri Apr 24 21:34:21.587459 2026] [:error] [pid 4177:tid 4198] [client 40.89.191.154:56096] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/menu.php"] [unique_id "aetxXX2asKnvdrSe0x4rowAAAY0"]
[Fri Apr 24 21:34:22.773711 2026] [:error] [pid 4177:tid 4189] [client 40.89.191.154:17842] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aetxXn2asKnvdrSe0x4rpwAAAYQ"]
[Fri Apr 24 21:34:28.231193 2026] [:error] [pid 22114:tid 22132] [client 40.89.191.154:48540] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aetxZIAuWGz3WlMQjof05AAAAQ8"]
[Fri Apr 24 21:34:36.212596 2026] [:error] [pid 17720:tid 17775] [client 40.89.191.154:55238] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "aetxbOhlUs6BS3Ng7_W4SwAAANU"]
[Fri Apr 24 21:34:38.910818 2026] [:error] [pid 17720:tid 17767] [client 40.89.191.154:36500] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "aetxbuhlUs6BS3Ng7_W4UQAAAM0"]
[Fri Apr 24 21:34:41.680275 2026] [:error] [pid 17720:tid 17769] [client 40.89.191.154:35076] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "aetxcehlUs6BS3Ng7_W4VwAAAM8"]
[Fri Apr 24 21:34:43.151375 2026] [:error] [pid 14531:tid 14535] [client 40.89.191.154:55241] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "aetxc3fLU2gw-6KR-GbUkAAAAUI"]
[Fri Apr 24 21:34:44.990144 2026] [:error] [pid 17721:tid 17802] [client 40.89.191.154:48548] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "aetxdOFXXkLeyDnfk_9GrAAAABU"]
[Fri Apr 24 21:34:47.464904 2026] [:error] [pid 22114:tid 22138] [client 40.89.191.154:64861] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/byypas.php"] [unique_id "aetxd4AuWGz3WlMQjof08QAAARU"]
[Fri Apr 24 21:34:55.364077 2026] [:error] [pid 17721:tid 17791] [client 40.89.191.154:2595] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a7.php"] [unique_id "aetxf-FXXkLeyDnfk_9GvwAAAAo"]
[Fri Apr 24 21:34:57.991278 2026] [:error] [pid 14531:tid 14538] [client 40.89.191.154:51173] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a7.php"] [unique_id "aetxgXfLU2gw-6KR-GbUpwAAAUU"]
[Fri Apr 24 21:35:03.426314 2026] [:error] [pid 22114:tid 22141] [client 40.89.191.154:55292] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a7.php"] [unique_id "aetxh4AuWGz3WlMQjof0_gAAARg"]
[Fri Apr 24 21:35:12.978775 2026] [:error] [pid 22114:tid 22119] [client 40.89.191.154:23958] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "aetxkIAuWGz3WlMQjof1DAAAAQI"]
[Fri Apr 24 21:35:14.980447 2026] [:error] [pid 17721:tid 17801] [client 40.89.191.154:39745] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "aetxkuFXXkLeyDnfk_9G4QAAABQ"]
[Fri Apr 24 21:35:15.756438 2026] [:error] [pid 17719:tid 17745] [client 40.89.191.154:56933] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "aetxk8TZ9gzEyL1BkPq0BAAAAJI"]
[Fri Apr 24 21:35:18.075769 2026] [:error] [pid 17719:tid 17741] [client 40.89.191.154:35102] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "aetxlsTZ9gzEyL1BkPq0CwAAAI4"]
[Fri Apr 24 21:35:19.854809 2026] [:error] [pid 17720:tid 17756] [client 40.89.191.154:2594] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "aetxl-hlUs6BS3Ng7_W4hwAAAMI"]
[Fri Apr 24 21:35:21.649223 2026] [:error] [pid 17721:tid 17802] [client 40.89.191.154:57105] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "aetxmeFXXkLeyDnfk_9G4gAAABU"]
[Fri Apr 24 21:35:22.542995 2026] [:error] [pid 17720:tid 17764] [client 40.89.191.154:44063] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "aetxmuhlUs6BS3Ng7_W4jgAAAMo"]
[Fri Apr 24 21:35:23.387556 2026] [:error] [pid 17808:tid 17825] [client 40.89.191.154:55263] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "aetxm-arbOEFI8qshvJHQQAAAE8"]
[Fri Apr 24 21:35:24.067729 2026] [:error] [pid 17808:tid 17821] [client 40.89.191.154:48543] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "aetxnOarbOEFI8qshvJHRQAAAEs"]
[Fri Apr 24 21:35:27.188780 2026] [:error] [pid 17720:tid 17772] [client 40.89.191.154:48572] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "aetxn-hlUs6BS3Ng7_W4mAAAANI"]
[Fri Apr 24 21:35:40.976310 2026] [:error] [pid 4177:tid 4197] [client 40.89.191.154:56942] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/yuzuru1.php"] [unique_id "aetxrH2asKnvdrSe0x4ssgAAAYw"]
[Fri Apr 24 21:35:42.160206 2026] [:error] [pid 4177:tid 4185] [client 40.89.191.154:53314] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/yuzuru1.php"] [unique_id "aetxrn2asKnvdrSe0x4suAAAAYA"]
[Fri Apr 24 21:35:44.228086 2026] [:error] [pid 4177:tid 4198] [client 40.89.191.154:56936] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/yuzuru1.php"] [unique_id "aetxsH2asKnvdrSe0x4svAAAAY0"]
[Fri Apr 24 21:35:46.509478 2026] [:error] [pid 4177:tid 4187] [client 40.89.191.154:7944] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/yuzuru1.php"] [unique_id "aetxsn2asKnvdrSe0x4sxQAAAYI"]
[Fri Apr 24 21:35:47.895693 2026] [:error] [pid 14531:tid 14542] [client 40.89.191.154:46785] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/file61.php"] [unique_id "aetxs3fLU2gw-6KR-GbU1AAAAUk"]
[Fri Apr 24 21:35:48.908446 2026] [:error] [pid 14531:tid 14552] [client 40.89.191.154:7964] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/file61.php"] [unique_id "aetxtHfLU2gw-6KR-GbU1wAAAVM"]
[Fri Apr 24 21:35:49.781690 2026] [:error] [pid 17808:tid 17817] [client 40.89.191.154:47593] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/file61.php"] [unique_id "aetxtearbOEFI8qshvJHYQAAAEc"]
[Fri Apr 24 21:35:51.373813 2026] [:error] [pid 22114:tid 22126] [client 40.89.191.154:46839] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/file61.php"] [unique_id "aetxt4AuWGz3WlMQjof1HAAAAQk"]
[Fri Apr 24 21:36:04.339586 2026] [:error] [pid 17721:tid 17788] [client 40.89.191.154:17812] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aetxxOFXXkLeyDnfk_9G-QAAAAc"]
[Fri Apr 24 21:36:05.629111 2026] [:error] [pid 17721:tid 17801] [client 40.89.191.154:38033] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aetxxeFXXkLeyDnfk_9G-gAAABQ"]
[Fri Apr 24 21:36:09.237211 2026] [:error] [pid 4177:tid 4208] [client 40.89.191.154:45227] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aetxyX2asKnvdrSe0x4tBwAAAZc"]
[Fri Apr 24 21:36:10.165718 2026] [:error] [pid 17721:tid 17786] [client 40.89.191.154:57344] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "aetxyuFXXkLeyDnfk_9G_AAAAAU"]
[Fri Apr 24 21:36:15.190630 2026] [:error] [pid 17720:tid 17762] [client 40.89.191.154:40829] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aetxz-hlUs6BS3Ng7_W4zgAAAMg"]
[Fri Apr 24 21:36:17.059325 2026] [:error] [pid 4177:tid 4199] [client 40.89.191.154:54305] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aetx0X2asKnvdrSe0x4tJwAAAY4"]
[Fri Apr 24 21:36:20.018728 2026] [:error] [pid 14531:tid 14555] [client 40.89.191.154:19992] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aetx1HfLU2gw-6KR-GbU5QAAAVY"]
[Fri Apr 24 21:36:21.331657 2026] [:error] [pid 4177:tid 4186] [client 40.89.191.154:45572] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "aetx1X2asKnvdrSe0x4tPAAAAYE"]
[Fri Apr 24 21:36:28.058698 2026] [:error] [pid 4177:tid 4191] [client 40.89.191.154:42948] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aetx3H2asKnvdrSe0x4tVwAAAYY"]
[Fri Apr 24 21:36:33.508913 2026] [:error] [pid 17719:tid 17743] [client 40.89.191.154:8785] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aetx4cTZ9gzEyL1BkPq0TgAAAJA"]
[Fri Apr 24 21:36:35.717838 2026] [:error] [pid 17720:tid 17762] [client 40.89.191.154:42355] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "aetx4-hlUs6BS3Ng7_W4-wAAAMg"]
[Fri Apr 24 21:36:45.867191 2026] [:error] [pid 17720:tid 17775] [client 40.89.191.154:33202] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/8573.php"] [unique_id "aetx7ehlUs6BS3Ng7_W5CQAAANU"]
[Fri Apr 24 21:36:47.173831 2026] [:error] [pid 17720:tid 17755] [client 40.89.191.154:49543] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/8573.php"] [unique_id "aetx7-hlUs6BS3Ng7_W5EQAAAME"]
[Fri Apr 24 21:36:49.776609 2026] [:error] [pid 17721:tid 17796] [client 40.89.191.154:58211] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/8573.php"] [unique_id "aetx8eFXXkLeyDnfk_9HWAAAAA8"]
[Fri Apr 24 21:36:57.835171 2026] [:error] [pid 17721:tid 17781] [client 40.89.191.154:58680] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "aetx-eFXXkLeyDnfk_9HXAAAAAA"]
[Fri Apr 24 21:36:59.938042 2026] [:error] [pid 17719:tid 17740] [client 40.89.191.154:45141] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "aetx-8TZ9gzEyL1BkPq0VAAAAI0"]
[Fri Apr 24 21:37:10.411088 2026] [:error] [pid 22114:tid 22136] [client 40.89.191.154:8354] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "aetyBoAuWGz3WlMQjof1VAAAARM"]
[Fri Apr 24 21:37:25.079108 2026] [:error] [pid 4177:tid 4197] [client 40.89.191.154:39692] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "aetyFX2asKnvdrSe0x4tvQAAAYw"]
[Fri Apr 24 21:37:25.856991 2026] [:error] [pid 17719:tid 17745] [client 40.89.191.154:34705] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ai.php"] [unique_id "aetyFcTZ9gzEyL1BkPq0aAAAAJI"]
[Fri Apr 24 21:37:27.777343 2026] [:error] [pid 4177:tid 4194] [client 40.89.191.154:47142] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ai.php"] [unique_id "aetyF32asKnvdrSe0x4tvwAAAYk"]
[Fri Apr 24 21:37:29.299243 2026] [:error] [pid 4177:tid 4195] [client 40.89.191.154:3037] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ai.php"] [unique_id "aetyGX2asKnvdrSe0x4twwAAAYo"]
[Fri Apr 24 21:37:31.151909 2026] [:error] [pid 17721:tid 17796] [client 40.89.191.154:34700] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ai.php"] [unique_id "aetyG-FXXkLeyDnfk_9HgQAAAA8"]
[Fri Apr 24 21:37:34.193138 2026] [:error] [pid 22114:tid 22141] [client 40.89.191.154:31404] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "aetyHoAuWGz3WlMQjof1aAAAARg"]
[Fri Apr 24 21:37:36.959115 2026] [:error] [pid 17719:tid 17750] [client 40.89.191.154:35174] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "aetyIMTZ9gzEyL1BkPq0cQAAAJc"]
[Fri Apr 24 21:37:39.981937 2026] [:error] [pid 4177:tid 4196] [client 40.89.191.154:31374] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "aetyI32asKnvdrSe0x4tzwAAAYs"]
[Fri Apr 24 21:37:41.731808 2026] [:error] [pid 17719:tid 17731] [client 40.89.191.154:59039] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "aetyJcTZ9gzEyL1BkPq0fAAAAIQ"]
[Fri Apr 24 21:37:43.297088 2026] [:error] [pid 17721:tid 17783] [client 40.89.191.154:10976] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/term.php"] [unique_id "aetyJ-FXXkLeyDnfk_9HlgAAAAI"]
[Fri Apr 24 21:37:44.394211 2026] [:error] [pid 17721:tid 17788] [client 40.89.191.154:34709] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/term.php"] [unique_id "aetyKOFXXkLeyDnfk_9HmgAAAAc"]
[Fri Apr 24 21:37:48.278722 2026] [:error] [pid 17721:tid 17797] [client 40.89.191.154:42085] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/term.php"] [unique_id "aetyLOFXXkLeyDnfk_9HoAAAABA"]
[Fri Apr 24 21:37:56.031328 2026] [:error] [pid 22114:tid 22133] [client 40.89.191.154:30978] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/term.php"] [unique_id "aetyNIAuWGz3WlMQjof1dgAAARA"]
[Fri Apr 24 21:37:59.466353 2026] [:error] [pid 17719:tid 17749] [client 40.89.191.154:31093] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gk.php"] [unique_id "aetyN8TZ9gzEyL1BkPq0hQAAAJY"]
[Fri Apr 24 21:38:02.952488 2026] [:error] [pid 14531:tid 14549] [client 40.89.191.154:42255] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gk.php"] [unique_id "aetyOnfLU2gw-6KR-GbVbQAAAVA"]
[Fri Apr 24 21:38:04.929650 2026] [:error] [pid 17719:tid 17747] [client 40.89.191.154:12538] [client 40.89.191.154] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gk.php"] [unique_id "aetyPMTZ9gzEyL1BkPq0iQAAAJQ"]
[Sat Apr 25 00:03:01.327188 2026] [authz_core:error] [pid 42852:tid 42869] [client 157.245.36.108:39730] AH01630: client denied by server configuration: /home/measureyourbrand/public_html/measureyourcause.com.au/server-status
[Sat Apr 25 00:03:02.254313 2026] [authz_core:error] [pid 42852:tid 42867] [client 64.227.70.2:47122] AH01630: client denied by server configuration: /home/measureyourbrand/public_html/measureyourcause.com.au/server-status
[Sat Apr 25 00:03:06.744833 2026] [:error] [pid 42792:tid 42834] [client 157.245.36.108:39774] [client 157.245.36.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env"] [unique_id "aeuUOtNi9qR4GtafpfG1JAAAAgw"]
[Sat Apr 25 00:03:07.971197 2026] [:error] [pid 42791:tid 42813] [client 64.227.70.2:47188] [client 64.227.70.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env"] [unique_id "aeuUO7KmN9doraCEWKXOBwAAAdI"]
[Sat Apr 25 00:03:10.748791 2026] [:error] [pid 42792:tid 42827] [client 157.245.36.108:55710] [client 157.245.36.108] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aeuUPtNi9qR4GtafpfG1NAAAAgU"]
[Sat Apr 25 00:03:11.975641 2026] [:error] [pid 42852:tid 42872] [client 64.227.70.2:41760] [client 64.227.70.2] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aeuUPzMEwxhhak_EhMJgqwAAAlE"]
[Sat Apr 25 00:03:16.076569 2026] [:error] [pid 42852:tid 42857] [client 64.227.70.2:41800] [client 64.227.70.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/api/gql"] [unique_id "aeuURDMEwxhhak_EhMJgzwAAAkI"]
[Sat Apr 25 00:03:16.834318 2026] [:error] [pid 42755:tid 42776] [client 64.227.70.2:41814] [client 64.227.70.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/s/4313e2232313e243e2330313/_/;/META-INF/maven/com.atlassian.jira/jira-webapp-dist/pom.properties"] [unique_id "aeuURNH7__k0j6aa603tWAAAAJM"]
[Sat Apr 25 00:03:17.836933 2026] [:error] [pid 42852:tid 42858] [client 64.227.70.2:41828] [client 64.227.70.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/config.json"] [unique_id "aeuURTMEwxhhak_EhMJg2gAAAkM"]
[Sat Apr 25 00:03:18.838268 2026] [:error] [pid 42792:tid 42844] [client 64.227.70.2:41840] [client 64.227.70.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/telescope/requests"] [unique_id "aeuURtNi9qR4GtafpfG1WAAAAhY"]
[Sat Apr 25 00:03:19.834628 2026] [:error] [pid 42852:tid 42874] [client 64.227.70.2:41854] [client 64.227.70.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/php-cgi/php-cgi.exe"] [unique_id "aeuURzMEwxhhak_EhMJg6AAAAlM"]
[Sat Apr 25 00:03:20.837431 2026] [:error] [pid 42792:tid 42826] [client 64.227.70.2:41862] [client 64.227.70.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "aeuUSNNi9qR4GtafpfG1XgAAAgQ"]
[Sat Apr 25 00:03:21.837937 2026] [:error] [pid 42791:tid 42795] [client 64.227.70.2:42362] [client 64.227.70.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/security.txt"] [unique_id "aeuUSbKmN9doraCEWKXOHQAAAcA"]
[Sat Apr 25 00:03:22.836698 2026] [:error] [pid 42792:tid 42839] [client 64.227.70.2:42372] [client 64.227.70.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/actuator/env"] [unique_id "aeuUStNi9qR4GtafpfG1ZgAAAhE"]
[Sat Apr 25 00:03:24.843638 2026] [:error] [pid 42852:tid 42860] [client 64.227.70.2:42376] [client 64.227.70.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/swagger-ui.html"] [unique_id "aeuUTDMEwxhhak_EhMJhAwAAAkU"]
[Sat Apr 25 00:03:25.843249 2026] [:error] [pid 42852:tid 42859] [client 64.227.70.2:42378] [client 64.227.70.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/swagger/index.html"] [unique_id "aeuUTTMEwxhhak_EhMJhCAAAAkQ"]
[Sat Apr 25 00:03:26.843049 2026] [:error] [pid 42791:tid 42815] [client 64.227.70.2:42388] [client 64.227.70.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/swagger/swagger-ui.html"] [unique_id "aeuUTrKmN9doraCEWKXOIwAAAdQ"]
[Sat Apr 25 00:03:27.852327 2026] [:error] [pid 42852:tid 42874] [client 64.227.70.2:42396] [client 64.227.70.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/webjars/swagger-ui/index.html"] [unique_id "aeuUTzMEwxhhak_EhMJhDQAAAlM"]
[Sat Apr 25 00:03:28.846218 2026] [:error] [pid 42852:tid 42873] [client 64.227.70.2:42410] [client 64.227.70.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/swagger.json"] [unique_id "aeuUUDMEwxhhak_EhMJhEAAAAlI"]
[Sat Apr 25 00:03:29.845664 2026] [:error] [pid 42792:tid 42842] [client 64.227.70.2:42424] [client 64.227.70.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/swagger/v1/swagger.json"] [unique_id "aeuUUdNi9qR4GtafpfG1igAAAhQ"]
[Sat Apr 25 00:03:30.841708 2026] [:error] [pid 42791:tid 42795] [client 64.227.70.2:42432] [client 64.227.70.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/v2/api-docs"] [unique_id "aeuUUrKmN9doraCEWKXOKgAAAcA"]
[Sat Apr 25 00:03:31.713673 2026] [:error] [pid 42792:tid 42824] [client 157.245.36.108:48136] [client 157.245.36.108] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||measureyourcause.measureyourbrand.com.au|F|2"] [data ".axd"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/trace.axd"] [unique_id "aeuUU9Ni9qR4GtafpfG1lwAAAgI"]
[Sat Apr 25 00:03:31.848143 2026] [:error] [pid 42791:tid 42813] [client 64.227.70.2:51678] [client 64.227.70.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/v3/api-docs"] [unique_id "aeuUU7KmN9doraCEWKXOMAAAAdI"]
[Sat Apr 25 00:03:32.865041 2026] [:error] [pid 42791:tid 42802] [client 64.227.70.2:51684] [client 64.227.70.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/api-docs/swagger.json"] [unique_id "aeuUVLKmN9doraCEWKXONgAAAcc"]
[Sat Apr 25 00:03:33.942281 2026] [:error] [pid 42791:tid 42797] [client 64.227.70.2:51698] [client 64.227.70.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/api/swagger.json"] [unique_id "aeuUVbKmN9doraCEWKXOPwAAAcI"]
[Sat Apr 25 00:03:34.851470 2026] [:error] [pid 42792:tid 42843] [client 64.227.70.2:51706] [client 64.227.70.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/trace.axd"] [unique_id "aeuUVtNi9qR4GtafpfG1qQAAAhU"]
[Sat Apr 25 00:03:35.854558 2026] [:error] [pid 42791:tid 42816] [client 64.227.70.2:51720] [client 64.227.70.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/@vite/env"] [unique_id "aeuUV7KmN9doraCEWKXOSAAAAdU"]
[Sat Apr 25 00:03:36.851626 2026] [:error] [pid 42755:tid 42765] [client 64.227.70.2:51736] [client 64.227.70.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.vscode/sftp.json"] [unique_id "aeuUWNH7__k0j6aa603tbQAAAIg"]
[Sat Apr 25 00:03:37.959494 2026] [:error] [pid 42852:tid 42876] [client 64.227.70.2:51742] [client 64.227.70.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/"] [unique_id "aeuUWTMEwxhhak_EhMJhJQAAAlU"]
[Sat Apr 25 00:03:38.856311 2026] [:error] [pid 42755:tid 42761] [client 64.227.70.2:51746] [client 64.227.70.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/"] [unique_id "aeuUWtH7__k0j6aa603tcAAAAIQ"]
[Sat Apr 25 00:03:39.849138 2026] [:error] [pid 42852:tid 42855] [client 64.227.70.2:51758] [client 64.227.70.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/debug/default/view"] [unique_id "aeuUWzMEwxhhak_EhMJhMAAAAkA"]
[Sat Apr 25 02:55:51.705389 2026] [:error] [pid 42791:tid 42797] [client 185.213.175.92:41550] [client 185.213.175.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aeu8t7KmN9doraCEWKUGUAAAAcI"]
[Sat Apr 25 02:55:51.705708 2026] [:error] [pid 28786:tid 28803] [client 185.213.175.92:41574] [client 185.213.175.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.git/HEAD"] [unique_id "aeu8t9mKAVQi4GwijepH-AAAAY4"]
[Sat Apr 25 03:37:07.497874 2026] [:error] [pid 40919:tid 40942] [client 23.100.95.109:5474] [client 23.100.95.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws.php"] [unique_id "aevGY0MtsB8Y96nC3cnoKgAAAMg"]
[Sat Apr 25 03:37:07.977748 2026] [:error] [pid 40830:tid 40886] [client 23.100.95.109:6115] [client 23.100.95.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws.php"] [unique_id "aevGY2bs17K4x2MIwqGDjQAAAFg"]
[Sat Apr 25 03:37:08.456769 2026] [:error] [pid 40831:tid 40912] [client 23.100.95.109:5478] [client 23.100.95.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws.php"] [unique_id "aevGZMC1ApXgo_VIxksmnAAAAJc"]
[Sat Apr 25 03:37:08.936429 2026] [:error] [pid 40831:tid 40896] [client 23.100.95.109:6128] [client 23.100.95.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws.php"] [unique_id "aevGZMC1ApXgo_VIxksmnwAAAIc"]
[Sat Apr 25 07:45:53.400509 2026] [:error] [pid 44321:tid 44395] [client 20.89.236.85:1790] [client 20.89.236.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws.php"] [unique_id "aewAsY1b5lV-asWa_Y49nQAAAIw"]
[Sat Apr 25 07:45:53.883508 2026] [:error] [pid 44425:tid 44439] [client 20.89.236.85:1732] [client 20.89.236.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws.php"] [unique_id "aewAsSUl-VlItvY2tR8m0AAAAMw"]
[Sat Apr 25 07:45:54.382475 2026] [:error] [pid 44425:tid 44428] [client 20.89.236.85:4097] [client 20.89.236.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws.php"] [unique_id "aewAsiUl-VlItvY2tR8m0gAAAME"]
[Sat Apr 25 07:45:54.884572 2026] [:error] [pid 44320:tid 44380] [client 20.89.236.85:1081] [client 20.89.236.85] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws.php"] [unique_id "aewAsjmFqSpku_dij8iFlQAAAFg"]
[Sat Apr 25 08:21:02.150038 2026] [:error] [pid 44319:tid 44341] [client 66.163.115.210:54204] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/backend/.env"] [unique_id "aewI7szJPAVLUb2pWtJmVwAAAAw"]
[Sat Apr 25 08:21:02.867634 2026] [:error] [pid 44320:tid 44356] [client 66.163.115.210:34688] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.vault"] [unique_id "aewI7jmFqSpku_dij8iLJAAAAEA"]
[Sat Apr 25 08:21:02.883542 2026] [:error] [pid 46083:tid 46098] [client 66.163.115.210:34620] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.secret"] [unique_id "aewI7jxw_Zq74vWdjmlqYQAAAQs"]
[Sat Apr 25 08:21:03.098618 2026] [:error] [pid 44320:tid 44379] [client 66.163.115.210:39608] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.orig"] [unique_id "aewI7zmFqSpku_dij8iLJwAAAFc"]
[Sat Apr 25 08:21:03.101474 2026] [:error] [pid 44320:tid 44360] [client 66.163.115.210:39736] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.ci"] [unique_id "aewI7zmFqSpku_dij8iLKAAAAEQ"]
[Sat Apr 25 08:21:03.105433 2026] [:error] [pid 44320:tid 44364] [client 66.163.115.210:39774] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.txt"] [unique_id "aewI7zmFqSpku_dij8iLKQAAAEg"]
[Sat Apr 25 08:21:03.200600 2026] [:error] [pid 46083:tid 46111] [client 66.163.115.210:40596] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.preview"] [unique_id "aewI7zxw_Zq74vWdjmlqYwAAARc"]
[Sat Apr 25 08:21:03.305454 2026] [:error] [pid 46083:tid 46105] [client 66.163.115.210:41662] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.demo"] [unique_id "aewI7zxw_Zq74vWdjmlqZAAAARI"]
[Sat Apr 25 08:21:03.400571 2026] [:error] [pid 44320:tid 44376] [client 66.163.115.210:42568] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.toml"] [unique_id "aewI7zmFqSpku_dij8iLKwAAAFQ"]
[Sat Apr 25 08:21:03.507692 2026] [:error] [pid 44321:tid 44396] [client 66.163.115.210:44258] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.default"] [unique_id "aewI741b5lV-asWa_Y5GIgAAAI0"]
[Sat Apr 25 08:21:03.601890 2026] [:error] [pid 44320:tid 44377] [client 66.163.115.210:46036] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.prod"] [unique_id "aewI7zmFqSpku_dij8iLLQAAAFU"]
[Sat Apr 25 08:21:03.705853 2026] [:error] [pid 46083:tid 46112] [client 66.163.115.210:46874] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.sample"] [unique_id "aewI7zxw_Zq74vWdjmlqaAAAARg"]
[Sat Apr 25 08:21:03.801107 2026] [:error] [pid 44320:tid 44375] [client 66.163.115.210:47434] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.live"] [unique_id "aewI7zmFqSpku_dij8iLLgAAAFM"]
[Sat Apr 25 08:21:03.906559 2026] [:error] [pid 44320:tid 44380] [client 66.163.115.210:47900] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.test"] [unique_id "aewI7zmFqSpku_dij8iLLwAAAFg"]
[Sat Apr 25 08:21:04.106561 2026] [:error] [pid 44320:tid 44362] [client 66.163.115.210:50620] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.render"] [unique_id "aewI8DmFqSpku_dij8iLMgAAAEY"]
[Sat Apr 25 08:21:04.142982 2026] [:error] [pid 46083:tid 46094] [client 66.163.115.210:54516] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.development"] [unique_id "aewI8Dxw_Zq74vWdjmlqaQAAAQc"]
[Sat Apr 25 08:21:04.301690 2026] [:error] [pid 46083:tid 46100] [client 66.163.115.210:53404] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.testing"] [unique_id "aewI8Dxw_Zq74vWdjmlqawAAAQ0"]
[Sat Apr 25 08:21:04.400332 2026] [:error] [pid 44320:tid 44369] [client 66.163.115.210:54418] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.xml"] [unique_id "aewI8DmFqSpku_dij8iLMwAAAE0"]
[Sat Apr 25 08:21:04.505436 2026] [:error] [pid 44321:tid 44385] [client 66.163.115.210:58160] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.staging.local"] [unique_id "aewI8I1b5lV-asWa_Y5GJAAAAII"]
[Sat Apr 25 08:21:04.605305 2026] [:error] [pid 46083:tid 46090] [client 66.163.115.210:59822] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.azure"] [unique_id "aewI8Dxw_Zq74vWdjmlqbQAAAQM"]
[Sat Apr 25 08:21:04.700614 2026] [:error] [pid 44321:tid 44397] [client 66.163.115.210:34042] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.release"] [unique_id "aewI8I1b5lV-asWa_Y5GJQAAAI4"]
[Sat Apr 25 08:21:04.800969 2026] [:error] [pid 44320:tid 44360] [client 66.163.115.210:35094] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.1"] [unique_id "aewI8DmFqSpku_dij8iLNQAAAEQ"]
[Sat Apr 25 08:21:04.906333 2026] [:error] [pid 46083:tid 46089] [client 66.163.115.210:35796] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.3"] [unique_id "aewI8Dxw_Zq74vWdjmlqbwAAAQI"]
[Sat Apr 25 08:21:05.000833 2026] [:error] [pid 44321:tid 44400] [client 66.163.115.210:36614] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.2"] [unique_id "aewI8Y1b5lV-asWa_Y5GJgAAAJE"]
[Sat Apr 25 08:21:05.106795 2026] [:error] [pid 44321:tid 44386] [client 66.163.115.210:37274] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.local.php"] [unique_id "aewI8Y1b5lV-asWa_Y5GJwAAAIM"]
[Sat Apr 25 08:21:05.199843 2026] [:error] [pid 44321:tid 44394] [client 66.163.115.210:38126] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.heroku"] [unique_id "aewI8Y1b5lV-asWa_Y5GKAAAAIs"]
[Sat Apr 25 08:21:05.303840 2026] [:error] [pid 44321:tid 44401] [client 66.163.115.210:38748] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.production.local"] [unique_id "aewI8Y1b5lV-asWa_Y5GKgAAAJI"]
[Sat Apr 25 08:21:05.400968 2026] [:error] [pid 46083:tid 46094] [client 66.163.115.210:40328] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env_old"] [unique_id "aewI8Txw_Zq74vWdjmlqcgAAAQc"]
[Sat Apr 25 08:21:05.600040 2026] [:error] [pid 46083:tid 46092] [client 66.163.115.210:41514] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.staging"] [unique_id "aewI8Txw_Zq74vWdjmlqdAAAAQU"]
[Sat Apr 25 08:21:05.706517 2026] [:error] [pid 44425:tid 44434] [client 66.163.115.210:42538] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.development.local"] [unique_id "aewI8SUl-VlItvY2tR8x-wAAAMc"]
[Sat Apr 25 08:21:05.806612 2026] [:error] [pid 44321:tid 44384] [client 66.163.115.210:43096] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env-bak"] [unique_id "aewI8Y1b5lV-asWa_Y5GLAAAAIE"]
[Sat Apr 25 08:21:05.905557 2026] [:error] [pid 44321:tid 44403] [client 66.163.115.210:44660] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.vercel"] [unique_id "aewI8Y1b5lV-asWa_Y5GLQAAAJQ"]
[Sat Apr 25 08:21:06.006517 2026] [:error] [pid 44321:tid 44383] [client 66.163.115.210:46312] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env-backup"] [unique_id "aewI8o1b5lV-asWa_Y5GLwAAAIA"]
[Sat Apr 25 08:21:06.103074 2026] [:error] [pid 46083:tid 46102] [client 66.163.115.210:49558] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.20231201"] [unique_id "aewI8jxw_Zq74vWdjmlqdQAAAQ8"]
[Sat Apr 25 08:21:06.300593 2026] [:error] [pid 44321:tid 44406] [client 66.163.115.210:51908] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.railway"] [unique_id "aewI8o1b5lV-asWa_Y5GMQAAAJc"]
[Sat Apr 25 08:21:06.600513 2026] [:error] [pid 44425:tid 44427] [client 66.163.115.210:54940] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.template"] [unique_id "aewI8iUl-VlItvY2tR8yAgAAAMA"]
[Sat Apr 25 08:21:06.729577 2026] [:error] [pid 44425:tid 44437] [client 66.163.115.210:53454] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.cfg"] [unique_id "aewI8iUl-VlItvY2tR8yAwAAAMo"]
[Sat Apr 25 08:21:06.806393 2026] [:error] [pid 44425:tid 44449] [client 66.163.115.210:60832] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env_backup"] [unique_id "aewI8iUl-VlItvY2tR8yBAAAANY"]
[Sat Apr 25 08:21:07.134993 2026] [:error] [pid 44320:tid 44367] [client 74.248.149.197:10985] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/pinfo.php"] [unique_id "aewI8zmFqSpku_dij8iLPAAAAEs"]
[Sat Apr 25 08:21:07.655809 2026] [:error] [pid 46083:tid 46110] [client 74.248.149.197:20936] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/pinfo.php"] [unique_id "aewI8zxw_Zq74vWdjmlqdwAAARY"]
[Sat Apr 25 08:21:08.169727 2026] [:error] [pid 46083:tid 46097] [client 74.248.149.197:15321] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/pinfo.php"] [unique_id "aewI9Dxw_Zq74vWdjmlqeQAAAQo"]
[Sat Apr 25 08:21:08.682603 2026] [:error] [pid 44425:tid 44431] [client 74.248.149.197:15325] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/pinfo.php"] [unique_id "aewI9CUl-VlItvY2tR8yCAAAAMQ"]
[Sat Apr 25 08:21:09.208004 2026] [:error] [pid 44425:tid 44443] [client 74.248.149.197:10987] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/litespeed.php"] [unique_id "aewI9SUl-VlItvY2tR8yCgAAANA"]
[Sat Apr 25 08:21:09.724677 2026] [:error] [pid 46083:tid 46095] [client 74.248.149.197:21666] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/litespeed.php"] [unique_id "aewI9Txw_Zq74vWdjmlqegAAAQg"]
[Sat Apr 25 08:21:10.238547 2026] [:error] [pid 46083:tid 46101] [client 74.248.149.197:30998] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/litespeed.php"] [unique_id "aewI9jxw_Zq74vWdjmlqfAAAAQ4"]
[Sat Apr 25 08:21:10.748982 2026] [:error] [pid 46083:tid 46098] [client 74.248.149.197:20930] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/litespeed.php"] [unique_id "aewI9jxw_Zq74vWdjmlqfwAAAQs"]
[Sat Apr 25 08:21:11.263062 2026] [:error] [pid 46083:tid 46100] [client 74.248.149.197:10944] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/environments.php"] [unique_id "aewI9zxw_Zq74vWdjmlqgQAAAQ0"]
[Sat Apr 25 08:21:11.773922 2026] [:error] [pid 46083:tid 46109] [client 74.248.149.197:10980] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/environments.php"] [unique_id "aewI9zxw_Zq74vWdjmlqggAAARU"]
[Sat Apr 25 08:21:12.288389 2026] [:error] [pid 44320:tid 44378] [client 74.248.149.197:21646] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/environments.php"] [unique_id "aewI-DmFqSpku_dij8iLQAAAAFY"]
[Sat Apr 25 08:21:12.796683 2026] [:error] [pid 46083:tid 46107] [client 74.248.149.197:11487] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/environments.php"] [unique_id "aewI-Dxw_Zq74vWdjmlqhAAAARM"]
[Sat Apr 25 08:21:13.306520 2026] [:error] [pid 46083:tid 46093] [client 74.248.149.197:15333] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/raf.php"] [unique_id "aewI-Txw_Zq74vWdjmlqiAAAAQY"]
[Sat Apr 25 08:21:13.820425 2026] [:error] [pid 46083:tid 46098] [client 74.248.149.197:21679] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/raf.php"] [unique_id "aewI-Txw_Zq74vWdjmlqjgAAAQs"]
[Sat Apr 25 08:21:14.331696 2026] [:error] [pid 46083:tid 46091] [client 74.248.149.197:21670] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/raf.php"] [unique_id "aewI-jxw_Zq74vWdjmlqkwAAAQQ"]
[Sat Apr 25 08:21:14.842766 2026] [:error] [pid 46083:tid 46095] [client 74.248.149.197:10993] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/raf.php"] [unique_id "aewI-jxw_Zq74vWdjmlqmQAAAQg"]
[Sat Apr 25 08:21:15.355881 2026] [:error] [pid 44320:tid 44358] [client 74.248.149.197:12707] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "aewI-zmFqSpku_dij8iLQgAAAEI"]
[Sat Apr 25 08:21:15.872495 2026] [:error] [pid 46083:tid 46090] [client 74.248.149.197:31004] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "aewI-zxw_Zq74vWdjmlqqAAAAQM"]
[Sat Apr 25 08:21:16.388004 2026] [:error] [pid 46083:tid 46096] [client 74.248.149.197:15345] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "aewI_Dxw_Zq74vWdjmlqsAAAAQk"]
[Sat Apr 25 08:21:16.901230 2026] [:error] [pid 46083:tid 46101] [client 74.248.149.197:15353] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ayk.php"] [unique_id "aewI_Dxw_Zq74vWdjmlqtgAAAQ4"]
[Sat Apr 25 08:21:17.414571 2026] [:error] [pid 44319:tid 44348] [client 74.248.149.197:31014] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/infos.php"] [unique_id "aewI_czJPAVLUb2pWtJmYQAAABM"]
[Sat Apr 25 08:21:17.924467 2026] [:error] [pid 44320:tid 44374] [client 74.248.149.197:15349] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/infos.php"] [unique_id "aewI_TmFqSpku_dij8iLRQAAAFI"]
[Sat Apr 25 08:21:18.435961 2026] [:error] [pid 44320:tid 44376] [client 74.248.149.197:21641] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/infos.php"] [unique_id "aewI_jmFqSpku_dij8iLRgAAAFQ"]
[Sat Apr 25 08:21:18.944885 2026] [:error] [pid 46083:tid 46110] [client 74.248.149.197:21673] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/infos.php"] [unique_id "aewI_jxw_Zq74vWdjmlqwgAAARY"]
[Sat Apr 25 08:21:19.466129 2026] [:error] [pid 44425:tid 44428] [client 74.248.149.197:21652] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aws.php"] [unique_id "aewI_yUl-VlItvY2tR8yFAAAAME"]
[Sat Apr 25 08:21:19.974832 2026] [:error] [pid 46083:tid 46096] [client 74.248.149.197:30983] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aws.php"] [unique_id "aewI_zxw_Zq74vWdjmlqyQAAAQk"]
[Sat Apr 25 08:21:20.490030 2026] [:error] [pid 44320:tid 44377] [client 74.248.149.197:30982] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aws.php"] [unique_id "aewJADmFqSpku_dij8iLRwAAAFU"]
[Sat Apr 25 08:21:20.998839 2026] [:error] [pid 46083:tid 46095] [client 74.248.149.197:21681] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aws.php"] [unique_id "aewJADxw_Zq74vWdjmlq0wAAAQg"]
[Sat Apr 25 08:21:21.514637 2026] [:error] [pid 46083:tid 46087] [client 74.248.149.197:31008] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/embed.php"] [unique_id "aewJATxw_Zq74vWdjmlq1wAAAQA"]
[Sat Apr 25 08:21:22.023318 2026] [:error] [pid 44425:tid 44436] [client 74.248.149.197:21691] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/embed.php"] [unique_id "aewJAiUl-VlItvY2tR8yGAAAAMk"]
[Sat Apr 25 08:21:22.530958 2026] [:error] [pid 44321:tid 44404] [client 74.248.149.197:26486] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/embed.php"] [unique_id "aewJAo1b5lV-asWa_Y5GQAAAAJU"]
[Sat Apr 25 08:21:23.039580 2026] [:error] [pid 44425:tid 44442] [client 74.248.149.197:30442] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/embed.php"] [unique_id "aewJAyUl-VlItvY2tR8yHAAAAM8"]
[Sat Apr 25 08:21:23.555777 2026] [:error] [pid 44425:tid 44433] [client 74.248.149.197:10966] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/stat.php"] [unique_id "aewJAyUl-VlItvY2tR8yHgAAAMY"]
[Sat Apr 25 08:21:24.067446 2026] [:error] [pid 44319:tid 44335] [client 74.248.149.197:26494] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/stat.php"] [unique_id "aewJBMzJPAVLUb2pWtJmYwAAAAY"]
[Sat Apr 25 08:21:24.583827 2026] [:error] [pid 44321:tid 44384] [client 74.248.149.197:21672] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/stat.php"] [unique_id "aewJBI1b5lV-asWa_Y5GSAAAAIE"]
[Sat Apr 25 08:21:25.094838 2026] [:error] [pid 44425:tid 44440] [client 74.248.149.197:21633] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/stat.php"] [unique_id "aewJBSUl-VlItvY2tR8yIwAAAM0"]
[Sat Apr 25 08:21:25.622450 2026] [:error] [pid 46083:tid 46104] [client 74.248.149.197:11496] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/setup.php"] [unique_id "aewJBTxw_Zq74vWdjmlq5gAAARE"]
[Sat Apr 25 08:21:26.131339 2026] [:error] [pid 44425:tid 44437] [client 74.248.149.197:11500] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/setup.php"] [unique_id "aewJBiUl-VlItvY2tR8yJwAAAMo"]
[Sat Apr 25 08:21:26.640729 2026] [:error] [pid 46083:tid 46100] [client 74.248.149.197:26487] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/setup.php"] [unique_id "aewJBjxw_Zq74vWdjmlq6wAAAQ0"]
[Sat Apr 25 08:21:27.152166 2026] [:error] [pid 46083:tid 46096] [client 74.248.149.197:26452] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/setup.php"] [unique_id "aewJBzxw_Zq74vWdjmlq7AAAAQk"]
[Sat Apr 25 08:21:27.667354 2026] [:error] [pid 44425:tid 44439] [client 74.248.149.197:26471] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/development.php"] [unique_id "aewJByUl-VlItvY2tR8yKgAAAMw"]
[Sat Apr 25 08:21:28.184860 2026] [:error] [pid 44319:tid 44343] [client 74.248.149.197:26438] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/development.php"] [unique_id "aewJCMzJPAVLUb2pWtJmZgAAAA4"]
[Sat Apr 25 08:21:28.701318 2026] [:error] [pid 44320:tid 44365] [client 74.248.149.197:31012] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/development.php"] [unique_id "aewJCDmFqSpku_dij8iLTAAAAEk"]
[Sat Apr 25 08:21:29.215134 2026] [:error] [pid 44425:tid 44440] [client 74.248.149.197:30417] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/development.php"] [unique_id "aewJCSUl-VlItvY2tR8yLQAAAM0"]
[Sat Apr 25 08:21:29.738087 2026] [:error] [pid 44320:tid 44364] [client 74.248.149.197:11463] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/environment.php"] [unique_id "aewJCTmFqSpku_dij8iLTwAAAEg"]
[Sat Apr 25 08:21:30.256706 2026] [:error] [pid 44320:tid 44379] [client 74.248.149.197:21664] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/environment.php"] [unique_id "aewJCjmFqSpku_dij8iLUQAAAFc"]
[Sat Apr 25 08:21:30.781426 2026] [:error] [pid 44425:tid 44441] [client 74.248.149.197:21653] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/environment.php"] [unique_id "aewJCiUl-VlItvY2tR8yLwAAAM4"]
[Sat Apr 25 08:21:31.298241 2026] [:error] [pid 44425:tid 44435] [client 74.248.149.197:30427] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/environment.php"] [unique_id "aewJCyUl-VlItvY2tR8yMgAAAMg"]
[Sat Apr 25 08:21:31.814499 2026] [:error] [pid 44320:tid 44367] [client 74.248.149.197:30423] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/db_config.php"] [unique_id "aewJCzmFqSpku_dij8iLVAAAAEs"]
[Sat Apr 25 08:21:32.323418 2026] [:error] [pid 44425:tid 44446] [client 74.248.149.197:26481] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/db_config.php"] [unique_id "aewJDCUl-VlItvY2tR8yNgAAANM"]
[Sat Apr 25 08:21:32.840553 2026] [:error] [pid 44425:tid 44428] [client 74.248.149.197:26844] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/db_config.php"] [unique_id "aewJDCUl-VlItvY2tR8yOgAAAME"]
[Sat Apr 25 08:21:33.353109 2026] [:error] [pid 46083:tid 46109] [client 74.248.149.197:30406] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/db_config.php"] [unique_id "aewJDTxw_Zq74vWdjmlq8wAAARU"]
[Sat Apr 25 08:21:33.865422 2026] [:error] [pid 46083:tid 46087] [client 74.248.149.197:16901] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Get_Site_Info.php"] [unique_id "aewJDTxw_Zq74vWdjmlq9QAAAQA"]
[Sat Apr 25 08:21:34.381017 2026] [:error] [pid 46083:tid 46088] [client 74.248.149.197:30436] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Get_Site_Info.php"] [unique_id "aewJDjxw_Zq74vWdjmlq-AAAAQE"]
[Sat Apr 25 08:21:34.899645 2026] [:error] [pid 44320:tid 44378] [client 74.248.149.197:26476] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Get_Site_Info.php"] [unique_id "aewJDjmFqSpku_dij8iLVwAAAFY"]
[Sat Apr 25 08:21:35.418093 2026] [:error] [pid 44321:tid 44405] [client 74.248.149.197:16896] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Get_Site_Info.php"] [unique_id "aewJD41b5lV-asWa_Y5GTgAAAJY"]
[Sat Apr 25 08:21:35.927436 2026] [:error] [pid 46083:tid 46108] [client 74.248.149.197:16912] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/deploy.php"] [unique_id "aewJDzxw_Zq74vWdjmlq_QAAARQ"]
[Sat Apr 25 08:21:36.439674 2026] [:error] [pid 44320:tid 44360] [client 74.248.149.197:11476] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/deploy.php"] [unique_id "aewJEDmFqSpku_dij8iLWAAAAEQ"]
[Sat Apr 25 08:21:36.950739 2026] [:error] [pid 44320:tid 44376] [client 74.248.149.197:21632] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/deploy.php"] [unique_id "aewJEDmFqSpku_dij8iLWwAAAFQ"]
[Sat Apr 25 08:21:37.465863 2026] [:error] [pid 44319:tid 44349] [client 74.248.149.197:26462] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/deploy.php"] [unique_id "aewJEczJPAVLUb2pWtJmawAAABQ"]
[Sat Apr 25 08:21:37.976346 2026] [:error] [pid 44319:tid 44336] [client 74.248.149.197:11456] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/apis.php"] [unique_id "aewJEczJPAVLUb2pWtJmbAAAAAc"]
[Sat Apr 25 08:21:38.496528 2026] [:error] [pid 46083:tid 46092] [client 74.248.149.197:16903] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/apis.php"] [unique_id "aewJEjxw_Zq74vWdjmlrAwAAAQU"]
[Sat Apr 25 08:21:39.005330 2026] [:error] [pid 44319:tid 44350] [client 74.248.149.197:30429] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/apis.php"] [unique_id "aewJE8zJPAVLUb2pWtJmbgAAABU"]
[Sat Apr 25 08:21:39.517000 2026] [:error] [pid 44319:tid 44341] [client 74.248.149.197:30404] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/apis.php"] [unique_id "aewJE8zJPAVLUb2pWtJmbwAAAAw"]
[Sat Apr 25 08:21:40.030726 2026] [:error] [pid 44425:tid 44435] [client 74.248.149.197:21692] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asdf.php"] [unique_id "aewJFCUl-VlItvY2tR8yQwAAAMg"]
[Sat Apr 25 08:21:40.546108 2026] [:error] [pid 44425:tid 44446] [client 74.248.149.197:31017] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asdf.php"] [unique_id "aewJFCUl-VlItvY2tR8ySAAAANM"]
[Sat Apr 25 08:21:41.056411 2026] [:error] [pid 44321:tid 44407] [client 74.248.149.197:21651] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asdf.php"] [unique_id "aewJFY1b5lV-asWa_Y5GVgAAAJg"]
[Sat Apr 25 08:21:41.569437 2026] [:error] [pid 44320:tid 44368] [client 74.248.149.197:16913] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asdf.php"] [unique_id "aewJFTmFqSpku_dij8iLXwAAAEw"]
[Sat Apr 25 08:21:42.080025 2026] [:error] [pid 44425:tid 44436] [client 74.248.149.197:26829] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1100.php"] [unique_id "aewJFiUl-VlItvY2tR8ySgAAAMk"]
[Sat Apr 25 08:21:42.590363 2026] [:error] [pid 44319:tid 44343] [client 74.248.149.197:11459] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1100.php"] [unique_id "aewJFszJPAVLUb2pWtJmdQAAAA4"]
[Sat Apr 25 08:21:43.099312 2026] [:error] [pid 44425:tid 44428] [client 74.248.149.197:16951] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1100.php"] [unique_id "aewJFyUl-VlItvY2tR8yTAAAAME"]
[Sat Apr 25 08:21:43.609342 2026] [:error] [pid 44319:tid 44340] [client 74.248.149.197:29562] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1100.php"] [unique_id "aewJF8zJPAVLUb2pWtJmdgAAAAs"]
[Sat Apr 25 08:21:44.118803 2026] [:error] [pid 44425:tid 44427] [client 74.248.149.197:29529] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/._info.php"] [unique_id "aewJGCUl-VlItvY2tR8yTQAAAMA"]
[Sat Apr 25 08:21:44.628827 2026] [:error] [pid 44320:tid 44369] [client 74.248.149.197:16951] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/._info.php"] [unique_id "aewJGDmFqSpku_dij8iLYgAAAE0"]
[Sat Apr 25 08:21:45.137888 2026] [:error] [pid 44319:tid 44351] [client 74.248.149.197:21694] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/._info.php"] [unique_id "aewJGczJPAVLUb2pWtJmeQAAABY"]
[Sat Apr 25 08:21:45.653171 2026] [:error] [pid 44319:tid 44348] [client 74.248.149.197:16917] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/._info.php"] [unique_id "aewJGczJPAVLUb2pWtJmfAAAABM"]
[Sat Apr 25 08:21:46.163251 2026] [:error] [pid 44425:tid 44443] [client 74.248.149.197:29532] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/php_flag.php"] [unique_id "aewJGiUl-VlItvY2tR8yUAAAANA"]
[Sat Apr 25 08:21:46.678147 2026] [:error] [pid 44320:tid 44365] [client 74.248.149.197:26854] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/php_flag.php"] [unique_id "aewJGjmFqSpku_dij8iLZAAAAEk"]
[Sat Apr 25 08:21:47.188497 2026] [:error] [pid 44425:tid 44444] [client 74.248.149.197:21693] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/php_flag.php"] [unique_id "aewJGyUl-VlItvY2tR8yUwAAANE"]
[Sat Apr 25 08:21:47.707380 2026] [:error] [pid 44320:tid 44373] [client 74.248.149.197:21683] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/php_flag.php"] [unique_id "aewJGzmFqSpku_dij8iLaAAAAFE"]
[Sat Apr 25 08:21:48.217799 2026] [:error] [pid 46083:tid 46109] [client 74.248.149.197:26832] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/test_info4.php"] [unique_id "aewJHDxw_Zq74vWdjmlrBAAAARU"]
[Sat Apr 25 08:21:48.729488 2026] [:error] [pid 46083:tid 46088] [client 74.248.149.197:29551] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/test_info4.php"] [unique_id "aewJHDxw_Zq74vWdjmlrCgAAAQE"]
[Sat Apr 25 08:21:49.237885 2026] [:error] [pid 46083:tid 46111] [client 74.248.149.197:11479] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/test_info4.php"] [unique_id "aewJHTxw_Zq74vWdjmlrDQAAARc"]
[Sat Apr 25 08:21:49.763658 2026] [:error] [pid 44320:tid 44380] [client 74.248.149.197:23703] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/test_info4.php"] [unique_id "aewJHTmFqSpku_dij8iLbAAAAFg"]
[Sat Apr 25 08:21:50.274579 2026] [:error] [pid 44320:tid 44362] [client 74.248.149.197:10906] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/test_phpinfo2.php"] [unique_id "aewJHjmFqSpku_dij8iLbQAAAEY"]
[Sat Apr 25 08:21:50.792453 2026] [:error] [pid 44425:tid 44440] [client 74.248.149.197:10930] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/test_phpinfo2.php"] [unique_id "aewJHiUl-VlItvY2tR8yWQAAAM0"]
[Sat Apr 25 08:21:51.303713 2026] [:error] [pid 44425:tid 44439] [client 74.248.149.197:44134] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/test_phpinfo2.php"] [unique_id "aewJHyUl-VlItvY2tR8yXAAAAMw"]
[Sat Apr 25 08:21:51.818461 2026] [:error] [pid 44321:tid 44394] [client 74.248.149.197:26846] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/test_phpinfo2.php"] [unique_id "aewJH41b5lV-asWa_Y5GYwAAAIs"]
[Sat Apr 25 08:21:52.337280 2026] [:error] [pid 44319:tid 44339] [client 74.248.149.197:16948] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/HsFPDcD.php"] [unique_id "aewJIMzJPAVLUb2pWtJmgwAAAAo"]
[Sat Apr 25 08:21:52.875613 2026] [:error] [pid 44319:tid 44336] [client 74.248.149.197:10881] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/HsFPDcD.php"] [unique_id "aewJIMzJPAVLUb2pWtJmhgAAAAc"]
[Sat Apr 25 08:21:53.401298 2026] [:error] [pid 44319:tid 44335] [client 74.248.149.197:19458] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/HsFPDcD.php"] [unique_id "aewJIczJPAVLUb2pWtJmiAAAAAY"]
[Sat Apr 25 08:21:53.918452 2026] [:error] [pid 44320:tid 44364] [client 74.248.149.197:10917] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/HsFPDcD.php"] [unique_id "aewJITmFqSpku_dij8iLbwAAAEg"]
[Sat Apr 25 08:21:54.431895 2026] [:error] [pid 46083:tid 46102] [client 74.248.149.197:26872] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/config.inc.php"] [unique_id "aewJIjxw_Zq74vWdjmlrEAAAAQ8"]
[Sat Apr 25 08:21:54.941344 2026] [:error] [pid 44425:tid 44441] [client 74.248.149.197:26823] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/config.inc.php"] [unique_id "aewJIiUl-VlItvY2tR8yYwAAAM4"]
[Sat Apr 25 08:21:55.453133 2026] [:error] [pid 44321:tid 44390] [client 74.248.149.197:29511] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/config.inc.php"] [unique_id "aewJI41b5lV-asWa_Y5GcgAAAIc"]
[Sat Apr 25 08:21:55.961566 2026] [:error] [pid 44425:tid 44439] [client 74.248.149.197:10903] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/config.inc.php"] [unique_id "aewJIyUl-VlItvY2tR8yZwAAAMw"]
[Sat Apr 25 08:21:56.475952 2026] [:error] [pid 46083:tid 46107] [client 74.248.149.197:10886] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/phpversion.php"] [unique_id "aewJJDxw_Zq74vWdjmlrFQAAARM"]
[Sat Apr 25 08:21:56.985534 2026] [:error] [pid 46083:tid 46095] [client 74.248.149.197:26856] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/phpversion.php"] [unique_id "aewJJDxw_Zq74vWdjmlrGQAAAQg"]
[Sat Apr 25 08:21:57.501529 2026] [:error] [pid 44425:tid 44447] [client 74.248.149.197:44110] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/phpversion.php"] [unique_id "aewJJSUl-VlItvY2tR8yaQAAANQ"]
[Sat Apr 25 08:21:58.015798 2026] [:error] [pid 44425:tid 44440] [client 74.248.149.197:16932] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/phpversion.php"] [unique_id "aewJJiUl-VlItvY2tR8yagAAAM0"]
[Sat Apr 25 08:21:58.534670 2026] [:error] [pid 46083:tid 46102] [client 74.248.149.197:26843] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asus.php"] [unique_id "aewJJjxw_Zq74vWdjmlrHQAAAQ8"]
[Sat Apr 25 08:21:59.043050 2026] [:error] [pid 46083:tid 46101] [client 74.248.149.197:10919] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asus.php"] [unique_id "aewJJzxw_Zq74vWdjmlrHgAAAQ4"]
[Sat Apr 25 08:21:59.556780 2026] [:error] [pid 44319:tid 44350] [client 74.248.149.197:26853] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asus.php"] [unique_id "aewJJ8zJPAVLUb2pWtJmjQAAABU"]
[Sat Apr 25 08:22:00.067697 2026] [:error] [pid 44320:tid 44379] [client 74.248.149.197:44142] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/asus.php"] [unique_id "aewJKDmFqSpku_dij8iLcgAAAFc"]
[Sat Apr 25 08:22:00.580062 2026] [:error] [pid 44319:tid 44346] [client 74.248.149.197:29523] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/php_version.php"] [unique_id "aewJKMzJPAVLUb2pWtJmjwAAABE"]
[Sat Apr 25 08:22:01.092069 2026] [:error] [pid 44319:tid 44347] [client 74.248.149.197:29510] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/php_version.php"] [unique_id "aewJKczJPAVLUb2pWtJmkQAAABI"]
[Sat Apr 25 08:22:01.601609 2026] [:error] [pid 44425:tid 44439] [client 74.248.149.197:29546] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/php_version.php"] [unique_id "aewJKSUl-VlItvY2tR8ybgAAAMw"]
[Sat Apr 25 08:22:02.110962 2026] [:error] [pid 44425:tid 44435] [client 74.248.149.197:12750] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/php_version.php"] [unique_id "aewJKiUl-VlItvY2tR8ybwAAAMg"]
[Sat Apr 25 08:22:02.621232 2026] [:error] [pid 44425:tid 44451] [client 74.248.149.197:23721] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abouts.php"] [unique_id "aewJKiUl-VlItvY2tR8ycgAAANg"]
[Sat Apr 25 08:22:03.131618 2026] [:error] [pid 44321:tid 44402] [client 74.248.149.197:23724] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abouts.php"] [unique_id "aewJK41b5lV-asWa_Y5GlQAAAJM"]
[Sat Apr 25 08:22:03.652035 2026] [:error] [pid 46083:tid 46088] [client 74.248.149.197:10931] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abouts.php"] [unique_id "aewJKzxw_Zq74vWdjmlrKgAAAQE"]
[Sat Apr 25 08:22:04.161839 2026] [:error] [pid 44425:tid 44442] [client 74.248.149.197:12764] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abouts.php"] [unique_id "aewJLCUl-VlItvY2tR8ydwAAAM8"]
[Sat Apr 25 08:22:04.670227 2026] [:error] [pid 44425:tid 44427] [client 74.248.149.197:44106] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/profmanage.php"] [unique_id "aewJLCUl-VlItvY2tR8yeAAAAMA"]
[Sat Apr 25 08:22:05.183330 2026] [:error] [pid 46083:tid 46111] [client 74.248.149.197:27336] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/profmanage.php"] [unique_id "aewJLTxw_Zq74vWdjmlrLgAAARc"]
[Sat Apr 25 08:22:05.699232 2026] [:error] [pid 46083:tid 46097] [client 74.248.149.197:19471] [client 74.248.149.197] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/profmanage.php"] [unique_id "aewJLTxw_Zq74vWdjmlrMAAAAQo"]
[Sat Apr 25 13:16:17.401365 2026] [:error] [pid 44320:tid 44371] [client 66.163.115.210:53116] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.backup"] [unique_id "aexOITmFqSpku_dij8i6AQAAAE8"]
[Sat Apr 25 13:16:17.403007 2026] [:error] [pid 44320:tid 44379] [client 66.163.115.210:53186] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.hg/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.hg/store"] [unique_id "aexOITmFqSpku_dij8i6AgAAAFc"]
[Sat Apr 25 13:16:17.404000 2026] [:error] [pid 44321:tid 44385] [client 66.163.115.210:53218] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "aexOIY1b5lV-asWa_Y6HJQAAAII"]
[Sat Apr 25 13:16:17.405882 2026] [:error] [pid 44321:tid 44386] [client 66.163.115.210:53250] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/backend/.env"] [unique_id "aexOIY1b5lV-asWa_Y6HKAAAAIM"]
[Sat Apr 25 13:16:17.410794 2026] [:error] [pid 44321:tid 44388] [client 66.163.115.210:53190] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-config.php"] [unique_id "aexOIY1b5lV-asWa_Y6HKwAAAIU"]
[Sat Apr 25 13:16:17.411385 2026] [:error] [pid 46083:tid 46087] [client 66.163.115.210:53368] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.old"] [unique_id "aexOITxw_Zq74vWdjmnhgwAAAQA"]
[Sat Apr 25 13:16:17.413443 2026] [:error] [pid 46083:tid 46108] [client 66.163.115.210:53436] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env"] [unique_id "aexOITxw_Zq74vWdjmnhhgAAARQ"]
[Sat Apr 25 13:16:17.456319 2026] [:error] [pid 44320:tid 44370] [client 66.163.115.210:53592] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase ".htpasswd" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.htpasswd"] [unique_id "aexOITmFqSpku_dij8i6BwAAAE4"]
[Sat Apr 25 13:16:17.899979 2026] [:error] [pid 44321:tid 44400] [client 66.163.115.210:53602] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.preview"] [unique_id "aexOIY1b5lV-asWa_Y6HMgAAAJE"]
[Sat Apr 25 13:16:17.900494 2026] [:error] [pid 44320:tid 44367] [client 66.163.115.210:53610] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.vault"] [unique_id "aexOITmFqSpku_dij8i6CgAAAEs"]
[Sat Apr 25 13:16:17.902917 2026] [:error] [pid 44321:tid 44387] [client 66.163.115.210:53624] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.qa"] [unique_id "aexOIY1b5lV-asWa_Y6HMwAAAIQ"]
[Sat Apr 25 13:16:17.919868 2026] [:error] [pid 46083:tid 46100] [client 66.163.115.210:59532] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.backup"] [unique_id "aexOITxw_Zq74vWdjmnhjwAAAQ0"]
[Sat Apr 25 13:16:18.091255 2026] [:error] [pid 46083:tid 46104] [client 66.163.115.210:53608] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.development.local"] [unique_id "aexOIjxw_Zq74vWdjmnhkQAAARE"]
[Sat Apr 25 13:16:18.305773 2026] [:error] [pid 44321:tid 44386] [client 66.163.115.210:53604] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.development"] [unique_id "aexOIo1b5lV-asWa_Y6HNAAAAIM"]
[Sat Apr 25 13:16:18.505052 2026] [:error] [pid 46083:tid 46112] [client 66.163.115.210:35496] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.stage"] [unique_id "aexOIjxw_Zq74vWdjmnhlwAAARg"]
[Sat Apr 25 13:16:18.606249 2026] [:error] [pid 44321:tid 44394] [client 66.163.115.210:36320] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.uat"] [unique_id "aexOIo1b5lV-asWa_Y6HNQAAAIs"]
[Sat Apr 25 13:16:18.642130 2026] [:error] [pid 44321:tid 44401] [client 66.163.115.210:36902] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.yml"] [unique_id "aexOIo1b5lV-asWa_Y6HNgAAAJI"]
[Sat Apr 25 13:16:18.711020 2026] [:error] [pid 44321:tid 44403] [client 66.163.115.210:37416] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.xml"] [unique_id "aexOIo1b5lV-asWa_Y6HNwAAAJQ"]
[Sat Apr 25 13:16:18.804763 2026] [:error] [pid 44321:tid 44388] [client 66.163.115.210:38298] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.production.local"] [unique_id "aexOIo1b5lV-asWa_Y6HOAAAAIU"]
[Sat Apr 25 13:16:18.910846 2026] [:error] [pid 44321:tid 44389] [client 66.163.115.210:38848] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.release"] [unique_id "aexOIo1b5lV-asWa_Y6HOgAAAIY"]
[Sat Apr 25 13:16:19.069024 2026] [:error] [pid 44321:tid 44405] [client 66.163.115.210:40198] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.staging"] [unique_id "aexOI41b5lV-asWa_Y6HOwAAAJY"]
[Sat Apr 25 13:16:19.104101 2026] [:error] [pid 44425:tid 44434] [client 66.163.115.210:41064] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.template"] [unique_id "aexOIyUl-VlItvY2tR-GOgAAAMc"]
[Sat Apr 25 13:16:19.125804 2026] [:error] [pid 44425:tid 44441] [client 66.163.115.210:53626] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.test"] [unique_id "aexOIyUl-VlItvY2tR-GOwAAAM4"]
[Sat Apr 25 13:16:19.228458 2026] [:error] [pid 46083:tid 46092] [client 66.163.115.210:42472] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.docker"] [unique_id "aexOIzxw_Zq74vWdjmnhnAAAAQU"]
[Sat Apr 25 13:16:19.352141 2026] [:error] [pid 44319:tid 44330] [client 66.163.115.210:45287] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.hg/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.hg/store"] [unique_id "aexOI8zJPAVLUb2pWtKPHgAAAAE"]
[Sat Apr 25 13:16:19.352971 2026] [:error] [pid 46083:tid 46111] [client 66.163.115.210:45281] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env"] [unique_id "aexOIzxw_Zq74vWdjmnhnQAAARc"]
[Sat Apr 25 13:16:19.353508 2026] [:error] [pid 46083:tid 46100] [client 66.163.115.210:45304] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/backend/.env"] [unique_id "aexOIzxw_Zq74vWdjmnhngAAAQ0"]
[Sat Apr 25 13:16:19.353716 2026] [:error] [pid 46083:tid 46097] [client 66.163.115.210:45310] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.production"] [unique_id "aexOIzxw_Zq74vWdjmnhnwAAAQo"]
[Sat Apr 25 13:16:19.355744 2026] [:error] [pid 46083:tid 46108] [client 66.163.115.210:45336] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-config.php.bak"] [unique_id "aexOIzxw_Zq74vWdjmnhoQAAARQ"]
[Sat Apr 25 13:16:19.358750 2026] [:error] [pid 46083:tid 46100] [client 66.163.115.210:45326] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.measureyourcause.measureyourbrand.com.au|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/config/master.key"] [unique_id "aexOIzxw_Zq74vWdjmnhoAAAAQ0"]
[Sat Apr 25 13:16:19.359521 2026] [:error] [pid 44321:tid 44390] [client 66.163.115.210:45384] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/api/.env"] [unique_id "aexOI41b5lV-asWa_Y6HPAAAAIc"]
[Sat Apr 25 13:16:19.363046 2026] [:error] [pid 44425:tid 44444] [client 66.163.115.210:45426] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.git/objects/"] [unique_id "aexOIyUl-VlItvY2tR-GPAAAANE"]
[Sat Apr 25 13:16:19.363475 2026] [:error] [pid 44321:tid 44400] [client 66.163.115.210:45466] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.svn/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.svn/entries"] [unique_id "aexOI41b5lV-asWa_Y6HPgAAAJE"]
[Sat Apr 25 13:16:19.366190 2026] [:error] [pid 44321:tid 44385] [client 66.163.115.210:45312] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-config.php"] [unique_id "aexOI41b5lV-asWa_Y6HQgAAAII"]
[Sat Apr 25 13:16:19.366778 2026] [:error] [pid 44321:tid 44386] [client 66.163.115.210:45324] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "aexOI41b5lV-asWa_Y6HQwAAAIM"]
[Sat Apr 25 13:16:19.368731 2026] [:error] [pid 44321:tid 44404] [client 66.163.115.210:45360] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.bak"] [unique_id "aexOI41b5lV-asWa_Y6HRQAAAJU"]
[Sat Apr 25 13:16:19.369109 2026] [:error] [pid 44321:tid 44394] [client 66.163.115.210:45338] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env~"] [unique_id "aexOI41b5lV-asWa_Y6HRgAAAIs"]
[Sat Apr 25 13:16:19.369368 2026] [:error] [pid 44321:tid 44404] [client 66.163.115.210:45363] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.backup"] [unique_id "aexOI41b5lV-asWa_Y6HRwAAAJU"]
[Sat Apr 25 13:16:19.370034 2026] [:error] [pid 46083:tid 46101] [client 66.163.115.210:45354] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.git/HEAD"] [unique_id "aexOIzxw_Zq74vWdjmnhpQAAAQ4"]
[Sat Apr 25 13:16:19.510694 2026] [:error] [pid 44321:tid 44402] [client 66.163.115.210:48256] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.secret"] [unique_id "aexOI41b5lV-asWa_Y6HTQAAAJM"]
[Sat Apr 25 13:16:19.806010 2026] [:error] [pid 44321:tid 44387] [client 66.163.115.210:51636] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.save"] [unique_id "aexOI41b5lV-asWa_Y6HTgAAAIQ"]
[Sat Apr 25 13:16:19.958692 2026] [:error] [pid 44321:tid 44404] [client 66.163.115.210:54002] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env"] [unique_id "aexOI41b5lV-asWa_Y6HUgAAAJU"]
[Sat Apr 25 13:16:19.961197 2026] [:error] [pid 44425:tid 44432] [client 66.163.115.210:54014] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.dev"] [unique_id "aexOIyUl-VlItvY2tR-GPgAAAMU"]
[Sat Apr 25 13:16:19.961220 2026] [:error] [pid 44321:tid 44403] [client 66.163.115.210:53990] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.sample"] [unique_id "aexOI41b5lV-asWa_Y6HUwAAAJQ"]
[Sat Apr 25 13:16:19.962201 2026] [:error] [pid 44425:tid 44430] [client 66.163.115.210:53994] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.testing"] [unique_id "aexOIyUl-VlItvY2tR-GPwAAAMM"]
[Sat Apr 25 13:16:19.963103 2026] [:error] [pid 44425:tid 44447] [client 66.163.115.210:54006] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "aexOIyUl-VlItvY2tR-GQAAAANQ"]
[Sat Apr 25 13:16:19.964443 2026] [:error] [pid 44321:tid 44388] [client 66.163.115.210:54012] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.prod"] [unique_id "aexOI41b5lV-asWa_Y6HVAAAAIU"]
[Sat Apr 25 13:16:20.057430 2026] [:error] [pid 44320:tid 44370] [client 66.163.115.210:55278] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.txt"] [unique_id "aexOJDmFqSpku_dij8i6EAAAAE4"]
[Sat Apr 25 13:16:20.104343 2026] [:error] [pid 44321:tid 44399] [client 66.163.115.210:55928] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.netlify"] [unique_id "aexOJI1b5lV-asWa_Y6HVQAAAJA"]
[Sat Apr 25 13:16:20.156560 2026] [:error] [pid 44321:tid 44396] [client 66.163.115.210:56338] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.preview"] [unique_id "aexOJI1b5lV-asWa_Y6HVgAAAI0"]
[Sat Apr 25 13:16:20.204219 2026] [:error] [pid 44319:tid 44349] [client 66.163.115.210:56880] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.default"] [unique_id "aexOJMzJPAVLUb2pWtKPIAAAABQ"]
[Sat Apr 25 13:16:20.256036 2026] [:error] [pid 44321:tid 44405] [client 66.163.115.210:57122] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.uat"] [unique_id "aexOJI1b5lV-asWa_Y6HVwAAAJY"]
[Sat Apr 25 13:16:20.455994 2026] [:error] [pid 44321:tid 44390] [client 66.163.115.210:58864] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.swp"] [unique_id "aexOJI1b5lV-asWa_Y6HWAAAAIc"]
[Sat Apr 25 13:16:20.510839 2026] [:error] [pid 44321:tid 44385] [client 66.163.115.210:59186] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.staging.local"] [unique_id "aexOJI1b5lV-asWa_Y6HWQAAAII"]
[Sat Apr 25 13:16:20.652268 2026] [:error] [pid 44321:tid 44398] [client 66.163.115.210:53758] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.example"] [unique_id "aexOJI1b5lV-asWa_Y6HWgAAAI8"]
[Sat Apr 25 13:16:20.710479 2026] [:error] [pid 44320:tid 44374] [client 66.163.115.210:34892] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.yaml"] [unique_id "aexOJDmFqSpku_dij8i6EQAAAFI"]
[Sat Apr 25 13:16:20.738367 2026] [:error] [pid 46083:tid 46105] [client 66.163.115.210:53176] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.vault"] [unique_id "aexOJDxw_Zq74vWdjmnhtQAAARI"]
[Sat Apr 25 13:16:20.761438 2026] [:error] [pid 44320:tid 44365] [client 66.163.115.210:35612] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.ini"] [unique_id "aexOJDmFqSpku_dij8i6EgAAAEk"]
[Sat Apr 25 13:16:20.855915 2026] [:error] [pid 44320:tid 44368] [client 66.163.115.210:36434] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.staging.local"] [unique_id "aexOJDmFqSpku_dij8i6FAAAAEw"]
[Sat Apr 25 13:16:20.909766 2026] [:error] [pid 44319:tid 44352] [client 66.163.115.210:36642] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.sample"] [unique_id "aexOJMzJPAVLUb2pWtKPIQAAABc"]
[Sat Apr 25 13:16:20.960861 2026] [:error] [pid 44320:tid 44380] [client 66.163.115.210:37150] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.orig"] [unique_id "aexOJDmFqSpku_dij8i6FQAAAFg"]
[Sat Apr 25 13:16:21.012014 2026] [:error] [pid 44319:tid 44343] [client 66.163.115.210:37486] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.0"] [unique_id "aexOJczJPAVLUb2pWtKPIgAAAA4"]
[Sat Apr 25 13:16:21.057869 2026] [:error] [pid 44320:tid 44357] [client 66.163.115.210:38164] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.yaml"] [unique_id "aexOJTmFqSpku_dij8i6FgAAAEE"]
[Sat Apr 25 13:16:21.110915 2026] [:error] [pid 44320:tid 44373] [client 66.163.115.210:38696] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.testing"] [unique_id "aexOJTmFqSpku_dij8i6FwAAAFE"]
[Sat Apr 25 13:16:21.155578 2026] [:error] [pid 44321:tid 44404] [client 66.163.115.210:39268] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.json"] [unique_id "aexOJY1b5lV-asWa_Y6HWwAAAJU"]
[Sat Apr 25 13:16:21.257296 2026] [:error] [pid 46083:tid 46091] [client 66.163.115.210:40050] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.heroku"] [unique_id "aexOJTxw_Zq74vWdjmnhugAAAQQ"]
[Sat Apr 25 13:16:21.305823 2026] [:error] [pid 46083:tid 46088] [client 66.163.115.210:41276] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.k8s"] [unique_id "aexOJTxw_Zq74vWdjmnhuwAAAQE"]
[Sat Apr 25 13:16:21.405180 2026] [:error] [pid 44321:tid 44384] [client 66.163.115.210:41882] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.cfg"] [unique_id "aexOJY1b5lV-asWa_Y6HXAAAAIE"]
[Sat Apr 25 13:16:21.461725 2026] [:error] [pid 46083:tid 46101] [client 66.163.115.210:42100] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.xml"] [unique_id "aexOJTxw_Zq74vWdjmnhvAAAAQ4"]
[Sat Apr 25 13:16:21.505001 2026] [:error] [pid 46083:tid 46098] [client 66.163.115.210:42480] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.3"] [unique_id "aexOJTxw_Zq74vWdjmnhvQAAAQs"]
[Sat Apr 25 13:16:21.562586 2026] [:error] [pid 46083:tid 46109] [client 66.163.115.210:42912] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.aws"] [unique_id "aexOJTxw_Zq74vWdjmnhvwAAARU"]
[Sat Apr 25 13:16:21.610674 2026] [:error] [pid 46083:tid 46089] [client 66.163.115.210:43394] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.bkp"] [unique_id "aexOJTxw_Zq74vWdjmnhwAAAAQI"]
[Sat Apr 25 13:16:21.656214 2026] [:error] [pid 46083:tid 46112] [client 66.163.115.210:43654] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.fly"] [unique_id "aexOJTxw_Zq74vWdjmnhwQAAARg"]
[Sat Apr 25 13:16:21.705276 2026] [:error] [pid 46083:tid 46094] [client 66.163.115.210:44170] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env_backup"] [unique_id "aexOJTxw_Zq74vWdjmnhwgAAAQc"]
[Sat Apr 25 13:16:21.763178 2026] [:error] [pid 46083:tid 46087] [client 66.163.115.210:44408] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.php"] [unique_id "aexOJTxw_Zq74vWdjmnhxAAAAQA"]
[Sat Apr 25 13:16:21.909039 2026] [:error] [pid 46083:tid 46092] [client 66.163.115.210:45758] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.20240601"] [unique_id "aexOJTxw_Zq74vWdjmnhxQAAAQU"]
[Sat Apr 25 13:16:21.960716 2026] [:error] [pid 46083:tid 46111] [client 66.163.115.210:46064] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.conf"] [unique_id "aexOJTxw_Zq74vWdjmnhxgAAARc"]
[Sat Apr 25 13:16:22.006551 2026] [:error] [pid 46083:tid 46108] [client 66.163.115.210:46492] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.20240101"] [unique_id "aexOJjxw_Zq74vWdjmnhxwAAARQ"]
[Sat Apr 25 13:16:22.055944 2026] [:error] [pid 46083:tid 46091] [client 66.163.115.210:46750] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.local.php"] [unique_id "aexOJjxw_Zq74vWdjmnhyAAAAQQ"]
[Sat Apr 25 13:16:22.162123 2026] [:error] [pid 46083:tid 46101] [client 66.163.115.210:48040] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.qa"] [unique_id "aexOJjxw_Zq74vWdjmnhyQAAAQ4"]
[Sat Apr 25 13:16:22.256193 2026] [:error] [pid 44321:tid 44399] [client 66.163.115.210:50884] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.development"] [unique_id "aexOJo1b5lV-asWa_Y6HXQAAAJA"]
[Sat Apr 25 13:16:22.360543 2026] [:error] [pid 44321:tid 44396] [client 66.163.115.210:51600] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.template"] [unique_id "aexOJo1b5lV-asWa_Y6HXgAAAI0"]
[Sat Apr 25 13:16:22.463373 2026] [:error] [pid 44321:tid 44402] [client 66.163.115.210:52216] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.development.local"] [unique_id "aexOJo1b5lV-asWa_Y6HXwAAAJM"]
[Sat Apr 25 13:16:22.559680 2026] [:error] [pid 44321:tid 44391] [client 66.163.115.210:52818] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.production.local"] [unique_id "aexOJo1b5lV-asWa_Y6HYAAAAIg"]
[Sat Apr 25 13:16:22.663312 2026] [:error] [pid 44321:tid 44393] [client 66.163.115.210:53437] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.azure"] [unique_id "aexOJo1b5lV-asWa_Y6HYgAAAIo"]
[Sat Apr 25 13:16:22.862051 2026] [:error] [pid 44425:tid 44450] [client 66.163.115.210:55494] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env~"] [unique_id "aexOJiUl-VlItvY2tR-GQwAAANc"]
[Sat Apr 25 13:16:23.055065 2026] [:error] [pid 46083:tid 46096] [client 66.163.115.210:56672] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env-old"] [unique_id "aexOJzxw_Zq74vWdjmnhywAAAQk"]
[Sat Apr 25 13:16:23.162078 2026] [:error] [pid 44320:tid 44371] [client 66.163.115.210:57240] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env-backup"] [unique_id "aexOJzmFqSpku_dij8i6GAAAAE8"]
[Sat Apr 25 13:16:23.261277 2026] [:error] [pid 46083:tid 46094] [client 66.163.115.210:57792] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.ci"] [unique_id "aexOJzxw_Zq74vWdjmnhzAAAAQc"]
[Sat Apr 25 13:16:23.359201 2026] [:error] [pid 46083:tid 46102] [client 66.163.115.210:58870] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.railway"] [unique_id "aexOJzxw_Zq74vWdjmnhzQAAAQ8"]
[Sat Apr 25 13:16:23.456343 2026] [:error] [pid 46083:tid 46107] [client 66.163.115.210:60038] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.test"] [unique_id "aexOJzxw_Zq74vWdjmnhzgAAARM"]
[Sat Apr 25 13:16:23.562557 2026] [:error] [pid 46083:tid 46095] [client 66.163.115.210:60680] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.copy"] [unique_id "aexOJzxw_Zq74vWdjmnh0AAAAQg"]
[Sat Apr 25 13:16:23.656798 2026] [:error] [pid 46083:tid 46105] [client 66.163.115.210:33948] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env-bak"] [unique_id "aexOJzxw_Zq74vWdjmnh0QAAARI"]
[Sat Apr 25 13:16:23.957515 2026] [:error] [pid 46083:tid 46088] [client 66.163.115.210:36142] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.example"] [unique_id "aexOJzxw_Zq74vWdjmnh0gAAAQE"]
[Sat Apr 25 13:19:35.204360 2026] [:error] [pid 44425:tid 44447] [client 66.163.115.210:32846] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aexO5yUl-VlItvY2tR-G8AAAANQ"]
[Sat Apr 25 13:19:35.210618 2026] [:error] [pid 44320:tid 44364] [client 66.163.115.210:33064] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aexO5zmFqSpku_dij8i6WgAAAEg"]
[Sat Apr 25 13:19:35.211356 2026] [:error] [pid 44425:tid 44429] [client 66.163.115.210:33096] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.git/objects/"] [unique_id "aexO5yUl-VlItvY2tR-G8gAAAMI"]
[Sat Apr 25 13:19:35.211369 2026] [:error] [pid 44320:tid 44364] [client 66.163.115.210:33076] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.hg/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.hg/store"] [unique_id "aexO5zmFqSpku_dij8i6WwAAAEg"]
[Sat Apr 25 13:19:35.211991 2026] [:error] [pid 44425:tid 44437] [client 66.163.115.210:33194] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.bak"] [unique_id "aexO5yUl-VlItvY2tR-G8wAAAMo"]
[Sat Apr 25 13:19:35.212958 2026] [:error] [pid 44425:tid 44434] [client 66.163.115.210:33248] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.backup"] [unique_id "aexO5yUl-VlItvY2tR-G9AAAAMc"]
[Sat Apr 25 13:19:35.213376 2026] [:error] [pid 46083:tid 46090] [client 66.163.115.210:33238] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.old"] [unique_id "aexO5zxw_Zq74vWdjmniiwAAAQM"]
[Sat Apr 25 13:19:35.227124 2026] [:error] [pid 44319:tid 44345] [client 66.163.115.210:33302] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env"] [unique_id "aexO58zJPAVLUb2pWtKPYgAAABA"]
[Sat Apr 25 13:19:35.227199 2026] [:error] [pid 46083:tid 46092] [client 66.163.115.210:33290] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-config.php.bak"] [unique_id "aexO5zxw_Zq74vWdjmnijgAAAQU"]
[Sat Apr 25 13:19:35.228890 2026] [:error] [pid 46083:tid 46107] [client 66.163.115.210:33358] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 2). Match of "pmFromFile userdata_wl_extensions" against "TX:extension" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "27"] [id "210730"] [rev "5"] [msg "COMODO WAF: URL file extension is restricted by policy||www.measureyourcause.measureyourbrand.com.au|F|2"] [data ".key"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/config/master.key"] [unique_id "aexO5zxw_Zq74vWdjmnijwAAARM"]
[Sat Apr 25 13:19:36.150659 2026] [:error] [pid 44425:tid 44436] [client 66.163.115.210:43348] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.dev"] [unique_id "aexO6CUl-VlItvY2tR-G-gAAAMk"]
[Sat Apr 25 13:19:36.311214 2026] [:error] [pid 44319:tid 44335] [client 66.163.115.210:44680] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.stage"] [unique_id "aexO6MzJPAVLUb2pWtKPYwAAAAY"]
[Sat Apr 25 13:19:36.367004 2026] [:error] [pid 46083:tid 46094] [client 66.163.115.210:43258] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.prod"] [unique_id "aexO6Dxw_Zq74vWdjmnimQAAAQc"]
[Sat Apr 25 13:19:36.385735 2026] [:error] [pid 46083:tid 46112] [client 66.163.115.210:38714] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env"] [unique_id "aexO6Dxw_Zq74vWdjmnimgAAARg"]
[Sat Apr 25 13:19:36.417062 2026] [:error] [pid 46083:tid 46096] [client 66.163.115.210:45580] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.ci"] [unique_id "aexO6Dxw_Zq74vWdjmninQAAAQk"]
[Sat Apr 25 13:19:36.517284 2026] [:error] [pid 44319:tid 44350] [client 66.163.115.210:46328] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.qa"] [unique_id "aexO6MzJPAVLUb2pWtKPZAAAABU"]
[Sat Apr 25 13:19:36.611453 2026] [:error] [pid 44321:tid 44403] [client 66.163.115.210:47534] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.json"] [unique_id "aexO6I1b5lV-asWa_Y6H2wAAAJQ"]
[Sat Apr 25 13:19:36.709932 2026] [:error] [pid 44320:tid 44372] [client 66.163.115.210:48654] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.swp"] [unique_id "aexO6DmFqSpku_dij8i6ZQAAAFA"]
[Sat Apr 25 13:19:36.897906 2026] [:error] [pid 46083:tid 46110] [client 66.163.115.210:43264] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.staging"] [unique_id "aexO6Dxw_Zq74vWdjmniqgAAARY"]
[Sat Apr 25 13:19:36.909714 2026] [:error] [pid 44321:tid 44393] [client 66.163.115.210:55980] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.uat"] [unique_id "aexO6I1b5lV-asWa_Y6H4wAAAIo"]
[Sat Apr 25 13:19:37.316953 2026] [:error] [pid 44319:tid 44344] [client 66.163.115.210:59280] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.yaml"] [unique_id "aexO6czJPAVLUb2pWtKPZgAAAA8"]
[Sat Apr 25 13:19:37.511186 2026] [:error] [pid 44319:tid 44339] [client 66.163.115.210:33352] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.testing"] [unique_id "aexO6czJPAVLUb2pWtKPZwAAAAo"]
[Sat Apr 25 13:19:37.616501 2026] [:error] [pid 46083:tid 46108] [client 66.163.115.210:34334] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.orig"] [unique_id "aexO6Txw_Zq74vWdjmniuwAAARQ"]
[Sat Apr 25 13:19:37.815149 2026] [:error] [pid 44319:tid 44351] [client 66.163.115.210:36410] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.test"] [unique_id "aexO6czJPAVLUb2pWtKPaAAAABY"]
[Sat Apr 25 13:19:38.015585 2026] [:error] [pid 44319:tid 44337] [client 66.163.115.210:39436] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.secret"] [unique_id "aexO6szJPAVLUb2pWtKPaQAAAAg"]
[Sat Apr 25 13:19:38.215263 2026] [:error] [pid 44425:tid 44437] [client 66.163.115.210:41050] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.netlify"] [unique_id "aexO6iUl-VlItvY2tR-HDgAAAMo"]
[Sat Apr 25 13:19:38.316716 2026] [:error] [pid 44425:tid 44434] [client 66.163.115.210:42140] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.render"] [unique_id "aexO6iUl-VlItvY2tR-HDwAAAMc"]
[Sat Apr 25 13:19:38.510444 2026] [:error] [pid 44319:tid 44340] [client 66.163.115.210:44566] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.cfg"] [unique_id "aexO6szJPAVLUb2pWtKPagAAAAs"]
[Sat Apr 25 13:19:38.616032 2026] [:error] [pid 44319:tid 44330] [client 66.163.115.210:46022] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.vault"] [unique_id "aexO6szJPAVLUb2pWtKPawAAAAE"]
[Sat Apr 25 13:19:39.123948 2026] [:error] [pid 44425:tid 44449] [client 66.163.115.210:57294] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.encrypted"] [unique_id "aexO6yUl-VlItvY2tR-HEAAAANY"]
[Sat Apr 25 13:19:39.217540 2026] [:error] [pid 46083:tid 46100] [client 66.163.115.210:58054] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.k8s"] [unique_id "aexO6zxw_Zq74vWdjmnivQAAAQ0"]
[Sat Apr 25 13:19:39.411400 2026] [:error] [pid 46083:tid 46094] [client 66.163.115.210:32920] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.txt"] [unique_id "aexO6zxw_Zq74vWdjmnivgAAAQc"]
[Sat Apr 25 13:19:39.512942 2026] [:error] [pid 44321:tid 44392] [client 66.163.115.210:33860] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.vercel"] [unique_id "aexO641b5lV-asWa_Y6H9wAAAIk"]
[Sat Apr 25 13:19:39.931713 2026] [:error] [pid 44425:tid 44435] [client 66.163.115.210:36770] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.ini"] [unique_id "aexO6yUl-VlItvY2tR-HEwAAAMg"]
[Sat Apr 25 13:19:39.944830 2026] [:error] [pid 44425:tid 44440] [client 66.163.115.210:38276] [client 66.163.115.210] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.fly"] [unique_id "aexO6yUl-VlItvY2tR-HFAAAAM0"]
[Sat Apr 25 18:43:22.681855 2026] [:error] [pid 16195:tid 16208] [client 15.237.127.99:56956] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "aeyayjVPLvrpvXaNQOkVJgAAAAo"]
[Sat Apr 25 18:43:23.969197 2026] [:error] [pid 29049:tid 29054] [client 15.237.127.99:57070] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env"] [unique_id "aeyayyfsWHIvmg63qcVkBQAAAQM"]
[Sat Apr 25 18:43:24.971528 2026] [:error] [pid 29049:tid 29075] [client 15.237.127.99:57134] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "aeyazCfsWHIvmg63qcVkCgAAARg"]
[Sat Apr 25 18:43:25.976045 2026] [:error] [pid 16108:tid 16173] [client 15.237.127.99:57182] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.production"] [unique_id "aeyazYbPF4HSQDj6WrljzQAAAMc"]
[Sat Apr 25 18:43:26.976595 2026] [:error] [pid 16106:tid 16126] [client 15.237.127.99:57240] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.staging"] [unique_id "aeyaziGjdEsrWF7e-7MhTQAAAFA"]
[Sat Apr 25 18:43:27.980887 2026] [:error] [pid 16107:tid 16145] [client 15.237.127.99:57280] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.development"] [unique_id "aeyaz9IfF7Hy3tw0sYRofAAAAIg"]
[Sat Apr 25 18:43:28.984626 2026] [:error] [pid 16107:tid 16150] [client 15.237.127.99:57312] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.test"] [unique_id "aeya0NIfF7Hy3tw0sYRogQAAAI0"]
[Sat Apr 25 18:43:29.984846 2026] [:error] [pid 16195:tid 16222] [client 15.237.127.99:57336] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.remote"] [unique_id "aeya0TVPLvrpvXaNQOkVLwAAABg"]
[Sat Apr 25 18:43:30.981939 2026] [:error] [pid 16107:tid 16137] [client 15.237.127.99:57372] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.bak"] [unique_id "aeya0tIfF7Hy3tw0sYRoiQAAAIA"]
[Sat Apr 25 18:43:31.981376 2026] [:error] [pid 16108:tid 16189] [client 15.237.127.99:57404] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.backup"] [unique_id "aeya04bPF4HSQDj6Wrlj0AAAANc"]
[Sat Apr 25 18:43:32.978180 2026] [:error] [pid 16107:tid 16141] [client 15.237.127.99:57428] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.save"] [unique_id "aeya1NIfF7Hy3tw0sYRokQAAAIQ"]
[Sat Apr 25 18:43:33.978280 2026] [:error] [pid 29049:tid 29067] [client 15.237.127.99:57466] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.old"] [unique_id "aeya1SfsWHIvmg63qcVkEwAAARA"]
[Sat Apr 25 18:43:34.987706 2026] [:error] [pid 16195:tid 16212] [client 15.237.127.99:57488] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.sample"] [unique_id "aeya1jVPLvrpvXaNQOkVNgAAAA4"]
[Sat Apr 25 18:43:35.994892 2026] [:error] [pid 16107:tid 16141] [client 15.237.127.99:57562] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.example"] [unique_id "aeya19IfF7Hy3tw0sYRomgAAAIQ"]
[Sat Apr 25 18:43:36.993934 2026] [:error] [pid 29049:tid 29065] [client 15.237.127.99:57638] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.dev"] [unique_id "aeya2CfsWHIvmg63qcVkLQAAAQ4"]
[Sat Apr 25 18:43:37.992738 2026] [:error] [pid 16195:tid 16206] [client 15.237.127.99:57706] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.prod"] [unique_id "aeya2TVPLvrpvXaNQOkVQQAAAAg"]
[Sat Apr 25 18:43:38.990295 2026] [:error] [pid 16108:tid 16166] [client 15.237.127.99:57778] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.stage"] [unique_id "aeya2obPF4HSQDj6Wrlj1wAAAMI"]
[Sat Apr 25 18:43:39.990412 2026] [:error] [pid 16106:tid 16114] [client 15.237.127.99:57868] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.ci"] [unique_id "aeya2yGjdEsrWF7e-7MhWAAAAEQ"]
[Sat Apr 25 18:43:40.997108 2026] [:error] [pid 16108:tid 16169] [client 15.237.127.99:57940] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.docker"] [unique_id "aeya3IbPF4HSQDj6Wrlj2QAAAMU"]
[Sat Apr 25 18:43:41.993150 2026] [:error] [pid 29049:tid 29058] [client 15.237.127.99:57966] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.live"] [unique_id "aeya3SfsWHIvmg63qcVkOwAAAQc"]
[Sat Apr 25 18:43:42.999295 2026] [:error] [pid 29049:tid 29068] [client 15.237.127.99:57988] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.preprod"] [unique_id "aeya3ifsWHIvmg63qcVkPgAAARE"]
[Sat Apr 25 18:43:44.006213 2026] [:error] [pid 29049:tid 29060] [client 15.237.127.99:58024] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.uat"] [unique_id "aeya4CfsWHIvmg63qcVkQgAAAQk"]
[Sat Apr 25 18:43:45.013336 2026] [:error] [pid 16107:tid 16140] [client 15.237.127.99:58060] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.dist"] [unique_id "aeya4dIfF7Hy3tw0sYRopgAAAIM"]
[Sat Apr 25 18:43:46.021346 2026] [:error] [pid 16107:tid 16146] [client 15.237.127.99:58088] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.swp"] [unique_id "aeya4tIfF7Hy3tw0sYRorAAAAIk"]
[Sat Apr 25 18:43:47.029595 2026] [:error] [pid 16195:tid 16198] [client 15.237.127.99:58118] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env~"] [unique_id "aeya4zVPLvrpvXaNQOkVSAAAAAA"]
[Sat Apr 25 18:43:48.037777 2026] [:error] [pid 16195:tid 16206] [client 15.237.127.99:58148] [client 15.237.127.99] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/app/.env"] [unique_id "aeya5DVPLvrpvXaNQOkVTQAAAAg"]
[Sun Apr 26 03:24:50.982331 2026] [:error] [pid 59985:tid 59998] [client 212.47.78.126:62252] [client 212.47.78.126] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/"] [unique_id "ae0VAgF_zDvEhKvyTH4pZgAAAAs"]
[Sun Apr 26 03:24:51.575279 2026] [:error] [pid 59896:tid 59911] [client 212.47.78.126:54195] [client 212.47.78.126] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "ae0VA7LLzhtkd-OXUgCC7AAAAEs"]
[Sun Apr 26 03:24:52.191628 2026] [:error] [pid 59896:tid 59919] [client 212.47.78.126:53201] [client 212.47.78.126] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/media/system/js/core.js"] [unique_id "ae0VBLLLzhtkd-OXUgCC7wAAAFM"]
[Sun Apr 26 03:55:36.830581 2026] [:error] [pid 64178:tid 64391] [client 20.203.174.117:46624] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.dj/index.php"] [unique_id "ae0cODj8Yzmn87N-mdYpbAAAAIo"]
[Sun Apr 26 03:55:41.197034 2026] [:error] [pid 64176:tid 64314] [client 20.203.174.117:62892] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.dj/index.php"] [unique_id "ae0cPTNSdAwEv4BX4YKAsgAAABQ"]
[Sun Apr 26 03:55:49.038516 2026] [:error] [pid 64632:tid 64682] [client 20.203.174.117:54698] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.dj/index.php"] [unique_id "ae0cRQBZcErGHLTsluK9vAAAAMg"]
[Sun Apr 26 03:55:50.340185 2026] [:error] [pid 64176:tid 64303] [client 20.203.174.117:47082] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.dj/index.php"] [unique_id "ae0cRjNSdAwEv4BX4YKAxwAAAAk"]
[Sun Apr 26 03:55:51.307692 2026] [:error] [pid 64176:tid 64309] [client 20.203.174.117:62486] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "ae0cRzNSdAwEv4BX4YKAyAAAAA8"]
[Sun Apr 26 03:55:52.012389 2026] [:error] [pid 64176:tid 64297] [client 20.203.174.117:60554] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "ae0cSDNSdAwEv4BX4YKAzQAAAAQ"]
[Sun Apr 26 03:55:52.656460 2026] [:error] [pid 64177:tid 64364] [client 20.203.174.117:4120] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "ae0cSEdCiRn77Twvcom3sQAAAEs"]
[Sun Apr 26 03:55:53.261277 2026] [:error] [pid 64176:tid 64306] [client 20.203.174.117:57326] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "ae0cSTNSdAwEv4BX4YKA0wAAAAw"]
[Sun Apr 26 03:55:54.167182 2026] [:error] [pid 64176:tid 64305] [client 20.203.174.117:59498] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.tmb/"] [unique_id "ae0cSjNSdAwEv4BX4YKA2AAAAAs"]
[Sun Apr 26 03:55:54.829380 2026] [:error] [pid 64176:tid 64315] [client 20.203.174.117:52511] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.tmb/"] [unique_id "ae0cSjNSdAwEv4BX4YKA2wAAABU"]
[Sun Apr 26 03:55:55.459079 2026] [:error] [pid 64177:tid 64366] [client 20.203.174.117:57312] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.tmb/"] [unique_id "ae0cS0dCiRn77Twvcom3sgAAAE0"]
[Sun Apr 26 03:55:56.209307 2026] [:error] [pid 64178:tid 64394] [client 20.203.174.117:4394] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.tmb/"] [unique_id "ae0cTDj8Yzmn87N-mdYplgAAAI0"]
[Sun Apr 26 03:55:56.758027 2026] [:error] [pid 64178:tid 64382] [client 20.203.174.117:56880] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.admin.php"] [unique_id "ae0cTDj8Yzmn87N-mdYpmAAAAII"]
[Sun Apr 26 03:55:57.620909 2026] [:error] [pid 64178:tid 64380] [client 20.203.174.117:47551] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.admin.php"] [unique_id "ae0cTTj8Yzmn87N-mdYpoQAAAIA"]
[Sun Apr 26 03:55:58.528896 2026] [:error] [pid 64177:tid 64361] [client 20.203.174.117:47518] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.admin.php"] [unique_id "ae0cTkdCiRn77Twvcom3uAAAAEg"]
[Sun Apr 26 03:55:59.217556 2026] [:error] [pid 64176:tid 64305] [client 20.203.174.117:52984] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.admin.php"] [unique_id "ae0cTzNSdAwEv4BX4YKA4AAAAAs"]
[Sun Apr 26 03:55:59.776535 2026] [:error] [pid 64177:tid 64353] [client 20.203.174.117:47549] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/sw.php"] [unique_id "ae0cT0dCiRn77Twvcom3wAAAAEA"]
[Sun Apr 26 03:56:00.364624 2026] [:error] [pid 64178:tid 64399] [client 20.203.174.117:47515] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/sw.php"] [unique_id "ae0cUDj8Yzmn87N-mdYpsAAAAJI"]
[Sun Apr 26 03:56:01.018160 2026] [:error] [pid 64177:tid 64377] [client 20.203.174.117:59510] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/sw.php"] [unique_id "ae0cUUdCiRn77Twvcom3ygAAAFg"]
[Sun Apr 26 03:56:01.731526 2026] [:error] [pid 64178:tid 64405] [client 20.203.174.117:4367] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/sw.php"] [unique_id "ae0cUTj8Yzmn87N-mdYptQAAAJg"]
[Sun Apr 26 03:56:02.360675 2026] [:error] [pid 64178:tid 64385] [client 20.203.174.117:63829] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/vuln.php"] [unique_id "ae0cUjj8Yzmn87N-mdYpugAAAIU"]
[Sun Apr 26 03:56:02.980902 2026] [:error] [pid 64177:tid 64363] [client 20.203.174.117:52495] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/vuln.php"] [unique_id "ae0cUkdCiRn77Twvcom3zQAAAEo"]
[Sun Apr 26 03:56:03.604681 2026] [:error] [pid 64176:tid 64306] [client 20.203.174.117:63843] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/vuln.php"] [unique_id "ae0cUzNSdAwEv4BX4YKA5wAAAAw"]
[Sun Apr 26 03:56:04.197702 2026] [:error] [pid 64632:tid 64682] [client 20.203.174.117:55035] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/vuln.php"] [unique_id "ae0cVABZcErGHLTsluK96AAAAMg"]
[Sun Apr 26 03:56:05.031518 2026] [:error] [pid 64178:tid 64393] [client 20.203.174.117:4354] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-temp.php"] [unique_id "ae0cVTj8Yzmn87N-mdYpywAAAIw"]
[Sun Apr 26 03:56:05.692050 2026] [:error] [pid 64178:tid 64403] [client 20.203.174.117:4375] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-temp.php"] [unique_id "ae0cVTj8Yzmn87N-mdYpzgAAAJY"]
[Sun Apr 26 03:56:06.332303 2026] [:error] [pid 64177:tid 64375] [client 20.203.174.117:59487] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-temp.php"] [unique_id "ae0cVkdCiRn77Twvcom32AAAAFY"]
[Sun Apr 26 03:56:07.015315 2026] [:error] [pid 64632:tid 64680] [client 20.203.174.117:52533] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-temp.php"] [unique_id "ae0cVwBZcErGHLTsluK98gAAAMY"]
[Sun Apr 26 03:56:07.518151 2026] [:error] [pid 64632:tid 64696] [client 20.203.174.117:52991] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/sxdfrt.php"] [unique_id "ae0cVwBZcErGHLTsluK99gAAANU"]
[Sun Apr 26 03:56:08.101655 2026] [:error] [pid 64177:tid 64356] [client 20.203.174.117:52983] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/sxdfrt.php"] [unique_id "ae0cWEdCiRn77Twvcom32wAAAEM"]
[Sun Apr 26 03:56:08.633274 2026] [:error] [pid 64178:tid 64384] [client 20.203.174.117:50795] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/sxdfrt.php"] [unique_id "ae0cWDj8Yzmn87N-mdYp3QAAAIQ"]
[Sun Apr 26 03:56:09.235050 2026] [:error] [pid 64632:tid 64697] [client 20.203.174.117:52932] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/sxdfrt.php"] [unique_id "ae0cWQBZcErGHLTsluK99wAAANY"]
[Sun Apr 26 03:56:09.779682 2026] [:error] [pid 64632:tid 64684] [client 20.203.174.117:62496] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "ae0cWQBZcErGHLTsluK9-AAAAMo"]
[Sun Apr 26 03:56:10.523828 2026] [:error] [pid 64632:tid 64679] [client 20.203.174.117:59495] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "ae0cWgBZcErGHLTsluK9_AAAAMU"]
[Sun Apr 26 03:56:11.686689 2026] [:error] [pid 64632:tid 64678] [client 20.203.174.117:52163] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "ae0cWwBZcErGHLTsluK-AAAAAMQ"]
[Sun Apr 26 03:56:12.222533 2026] [:error] [pid 64176:tid 64304] [client 20.203.174.117:52967] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "ae0cXDNSdAwEv4BX4YKA8wAAAAo"]
[Sun Apr 26 03:56:12.799484 2026] [:error] [pid 64176:tid 64295] [client 20.203.174.117:4149] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "ae0cXDNSdAwEv4BX4YKA9AAAAAI"]
[Sun Apr 26 03:56:13.394394 2026] [:error] [pid 64176:tid 64307] [client 20.203.174.117:59460] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "ae0cXTNSdAwEv4BX4YKA-AAAAA0"]
[Sun Apr 26 03:56:14.276994 2026] [:error] [pid 64177:tid 64357] [client 20.203.174.117:51362] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "ae0cXkdCiRn77Twvcom36gAAAEQ"]
[Sun Apr 26 03:56:14.813132 2026] [:error] [pid 64632:tid 64679] [client 20.203.174.117:52964] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "ae0cXgBZcErGHLTsluK-DQAAAMU"]
[Sun Apr 26 03:56:15.403638 2026] [:error] [pid 64178:tid 64381] [client 20.203.174.117:62473] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/class-bda.php"] [unique_id "ae0cXzj8Yzmn87N-mdYp9gAAAIE"]
[Sun Apr 26 03:56:16.072448 2026] [:error] [pid 64632:tid 64680] [client 20.203.174.117:63841] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/class-bda.php"] [unique_id "ae0cYABZcErGHLTsluK-EQAAAMY"]
[Sun Apr 26 03:56:16.654063 2026] [:error] [pid 64177:tid 64372] [client 20.203.174.117:52493] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/class-bda.php"] [unique_id "ae0cYEdCiRn77Twvcom36wAAAFM"]
[Sun Apr 26 03:56:17.166319 2026] [:error] [pid 64632:tid 64676] [client 20.203.174.117:58655] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/class-bda.php"] [unique_id "ae0cYQBZcErGHLTsluK-GAAAAMI"]
[Sun Apr 26 03:56:17.783178 2026] [:error] [pid 64632:tid 64679] [client 20.203.174.117:4379] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bhm.php"] [unique_id "ae0cYQBZcErGHLTsluK-HAAAAMU"]
[Sun Apr 26 03:56:18.350316 2026] [:error] [pid 64632:tid 64690] [client 20.203.174.117:56873] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bhm.php"] [unique_id "ae0cYgBZcErGHLTsluK-HwAAAM8"]
[Sun Apr 26 03:56:18.899009 2026] [:error] [pid 64178:tid 64402] [client 20.203.174.117:51336] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bhm.php"] [unique_id "ae0cYjj8Yzmn87N-mdYqBQAAAJU"]
[Sun Apr 26 03:56:19.471652 2026] [:error] [pid 64632:tid 64680] [client 20.203.174.117:52521] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bhm.php"] [unique_id "ae0cYwBZcErGHLTsluK-IwAAAMY"]
[Sun Apr 26 03:56:20.143505 2026] [:error] [pid 64177:tid 64375] [client 20.203.174.117:4150] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xmu.php"] [unique_id "ae0cZEdCiRn77Twvcom37wAAAFY"]
[Sun Apr 26 03:56:20.687031 2026] [:error] [pid 64178:tid 64391] [client 20.203.174.117:61055] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xmu.php"] [unique_id "ae0cZDj8Yzmn87N-mdYqDAAAAIo"]
[Sun Apr 26 03:56:21.249244 2026] [:error] [pid 64177:tid 64353] [client 20.203.174.117:52489] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xmu.php"] [unique_id "ae0cZUdCiRn77Twvcom38gAAAEA"]
[Sun Apr 26 03:56:21.837168 2026] [:error] [pid 64178:tid 64384] [client 20.203.174.117:4105] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xmu.php"] [unique_id "ae0cZTj8Yzmn87N-mdYqEQAAAIQ"]
[Sun Apr 26 03:56:22.339474 2026] [:error] [pid 64177:tid 64355] [client 20.203.174.117:52985] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ref.php"] [unique_id "ae0cZkdCiRn77Twvcom39wAAAEI"]
[Sun Apr 26 03:56:22.873441 2026] [:error] [pid 64632:tid 64698] [client 20.203.174.117:51675] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ref.php"] [unique_id "ae0cZgBZcErGHLTsluK-KwAAANc"]
[Sun Apr 26 03:56:23.420548 2026] [:error] [pid 64178:tid 64382] [client 20.203.174.117:4410] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ref.php"] [unique_id "ae0cZzj8Yzmn87N-mdYqGQAAAII"]
[Sun Apr 26 03:56:23.959048 2026] [:error] [pid 64177:tid 64369] [client 20.203.174.117:51333] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ref.php"] [unique_id "ae0cZ0dCiRn77Twvcom3-QAAAFA"]
[Sun Apr 26 03:56:24.477557 2026] [:error] [pid 64177:tid 64376] [client 20.203.174.117:52176] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-xme.php"] [unique_id "ae0caEdCiRn77Twvcom3-gAAAFc"]
[Sun Apr 26 03:56:25.027550 2026] [:error] [pid 64176:tid 64300] [client 20.203.174.117:61015] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-xme.php"] [unique_id "ae0caTNSdAwEv4BX4YKBAgAAAAY"]
[Sun Apr 26 03:56:25.548503 2026] [:error] [pid 64177:tid 64367] [client 20.203.174.117:56836] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-xme.php"] [unique_id "ae0caUdCiRn77Twvcom3_AAAAE4"]
[Sun Apr 26 03:56:26.144834 2026] [:error] [pid 64177:tid 64372] [client 20.203.174.117:52957] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-xme.php"] [unique_id "ae0cakdCiRn77Twvcom4AAAAAFM"]
[Sun Apr 26 03:56:26.711509 2026] [:error] [pid 64176:tid 64313] [client 20.203.174.117:4118] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/adminer.php"] [unique_id "ae0cajNSdAwEv4BX4YKBCwAAABM"]
[Sun Apr 26 03:56:27.281806 2026] [:error] [pid 64632:tid 64691] [client 20.203.174.117:51671] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/adminer.php"] [unique_id "ae0cawBZcErGHLTsluK-MQAAANA"]
[Sun Apr 26 03:56:27.940369 2026] [:error] [pid 64632:tid 64688] [client 20.203.174.117:4392] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/adminer.php"] [unique_id "ae0cawBZcErGHLTsluK-NwAAAM0"]
[Sun Apr 26 03:56:28.435170 2026] [:error] [pid 64632:tid 64675] [client 20.203.174.117:61047] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/adminer.php"] [unique_id "ae0cbABZcErGHLTsluK-OwAAAME"]
[Sun Apr 26 03:56:29.059480 2026] [:error] [pid 64632:tid 64697] [client 20.203.174.117:50783] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ktfow.php"] [unique_id "ae0cbQBZcErGHLTsluK-PgAAANY"]
[Sun Apr 26 03:56:29.701408 2026] [:error] [pid 64176:tid 64318] [client 20.203.174.117:57326] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ktfow.php"] [unique_id "ae0cbTNSdAwEv4BX4YKBEQAAABg"]
[Sun Apr 26 03:56:30.346280 2026] [:error] [pid 64632:tid 64694] [client 20.203.174.117:55020] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ktfow.php"] [unique_id "ae0cbgBZcErGHLTsluK-RQAAANM"]
[Sun Apr 26 03:56:31.074809 2026] [:error] [pid 64178:tid 64393] [client 20.203.174.117:64433] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ktfow.php"] [unique_id "ae0cbzj8Yzmn87N-mdYqPAAAAIw"]
[Sun Apr 26 03:56:31.642048 2026] [:error] [pid 64632:tid 64677] [client 20.203.174.117:50800] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/mode.php"] [unique_id "ae0cbwBZcErGHLTsluK-SAAAAMM"]
[Sun Apr 26 03:56:32.316920 2026] [:error] [pid 64176:tid 64298] [client 20.203.174.117:55079] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/mode.php"] [unique_id "ae0ccDNSdAwEv4BX4YKBGwAAAAU"]
[Sun Apr 26 03:56:32.860299 2026] [:error] [pid 64176:tid 64296] [client 20.203.174.117:54997] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/mode.php"] [unique_id "ae0ccDNSdAwEv4BX4YKBIAAAAAM"]
[Sun Apr 26 03:56:33.431571 2026] [:error] [pid 64632:tid 64682] [client 20.203.174.117:55008] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/mode.php"] [unique_id "ae0ccQBZcErGHLTsluK-SgAAAMg"]
[Sun Apr 26 03:56:34.059079 2026] [:error] [pid 64632:tid 64693] [client 20.203.174.117:51332] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/Xx.php"] [unique_id "ae0ccgBZcErGHLTsluK-TgAAANI"]
[Sun Apr 26 03:56:34.639102 2026] [:error] [pid 64178:tid 64394] [client 20.203.174.117:4127] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/Xx.php"] [unique_id "ae0ccjj8Yzmn87N-mdYqSwAAAI0"]
[Sun Apr 26 03:56:35.280689 2026] [:error] [pid 64632:tid 64695] [client 20.203.174.117:55053] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/Xx.php"] [unique_id "ae0ccwBZcErGHLTsluK-UAAAANQ"]
[Sun Apr 26 03:56:35.846857 2026] [:error] [pid 64178:tid 64390] [client 20.203.174.117:64412] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/Xx.php"] [unique_id "ae0cczj8Yzmn87N-mdYqXAAAAIk"]
[Sun Apr 26 03:56:44.002859 2026] [:error] [pid 64176:tid 64307] [client 20.203.174.117:51655] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "ae0cfDNSdAwEv4BX4YKBRgAAAA0"]
[Sun Apr 26 03:56:44.642934 2026] [:error] [pid 64178:tid 64386] [client 20.203.174.117:55021] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "ae0cfDj8Yzmn87N-mdYqjAAAAIY"]
[Sun Apr 26 03:56:45.283376 2026] [:error] [pid 64178:tid 64380] [client 20.203.174.117:52193] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "ae0cfTj8Yzmn87N-mdYqkgAAAIA"]
[Sun Apr 26 03:56:45.871552 2026] [:error] [pid 64178:tid 64382] [client 20.203.174.117:50755] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "ae0cfTj8Yzmn87N-mdYqmAAAAII"]
[Sun Apr 26 03:56:46.541472 2026] [:error] [pid 64178:tid 64392] [client 20.203.174.117:56893] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "ae0cfjj8Yzmn87N-mdYqnwAAAIs"]
[Sun Apr 26 03:56:47.067380 2026] [:error] [pid 64178:tid 64403] [client 20.203.174.117:64436] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "ae0cfzj8Yzmn87N-mdYqoAAAAJY"]
[Sun Apr 26 03:56:47.682548 2026] [:error] [pid 64177:tid 64359] [client 20.203.174.117:56874] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "ae0cf0dCiRn77Twvcom4UgAAAEY"]
[Sun Apr 26 03:56:48.426543 2026] [:error] [pid 64178:tid 64397] [client 20.203.174.117:28227] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "ae0cgDj8Yzmn87N-mdYqqQAAAJA"]
[Sun Apr 26 03:56:48.970498 2026] [:error] [pid 64178:tid 64399] [client 20.203.174.117:61022] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "ae0cgDj8Yzmn87N-mdYqrAAAAJI"]
[Sun Apr 26 03:56:49.511547 2026] [:error] [pid 64178:tid 64400] [client 20.203.174.117:4107] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "ae0cgTj8Yzmn87N-mdYqrgAAAJM"]
[Sun Apr 26 03:56:50.244628 2026] [:error] [pid 64178:tid 64401] [client 20.203.174.117:52936] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "ae0cgjj8Yzmn87N-mdYqsAAAAJQ"]
[Sun Apr 26 03:56:50.795017 2026] [:error] [pid 64178:tid 64380] [client 20.203.174.117:60630] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "ae0cgjj8Yzmn87N-mdYqswAAAIA"]
[Sun Apr 26 03:56:51.305662 2026] [:error] [pid 64178:tid 64383] [client 20.203.174.117:55006] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "ae0cgzj8Yzmn87N-mdYqtQAAAIM"]
[Sun Apr 26 03:56:52.257602 2026] [:error] [pid 64178:tid 64396] [client 20.203.174.117:64390] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "ae0chDj8Yzmn87N-mdYquwAAAI8"]
[Sun Apr 26 03:56:52.793198 2026] [:error] [pid 64178:tid 64400] [client 20.203.174.117:4124] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "ae0chDj8Yzmn87N-mdYqvgAAAJM"]
[Sun Apr 26 03:56:53.416418 2026] [:error] [pid 64178:tid 64387] [client 20.203.174.117:64415] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "ae0chTj8Yzmn87N-mdYqwgAAAIc"]
[Sun Apr 26 03:56:54.077538 2026] [:error] [pid 64178:tid 64381] [client 20.203.174.117:50532] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/13.php"] [unique_id "ae0chjj8Yzmn87N-mdYqxAAAAIE"]
[Sun Apr 26 03:56:54.590625 2026] [:error] [pid 64632:tid 64685] [client 20.203.174.117:50757] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/13.php"] [unique_id "ae0chgBZcErGHLTsluK-cQAAAMs"]
[Sun Apr 26 03:56:55.109757 2026] [:error] [pid 64632:tid 64674] [client 20.203.174.117:51696] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/13.php"] [unique_id "ae0chwBZcErGHLTsluK-cwAAAMA"]
[Sun Apr 26 03:56:55.774519 2026] [:error] [pid 64177:tid 64374] [client 20.203.174.117:50551] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/13.php"] [unique_id "ae0ch0dCiRn77Twvcom4cgAAAFU"]
[Sun Apr 26 03:56:56.419293 2026] [:error] [pid 64176:tid 64301] [client 20.203.174.117:56845] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/11.php"] [unique_id "ae0ciDNSdAwEv4BX4YKBTwAAAAc"]
[Sun Apr 26 03:56:57.092934 2026] [:error] [pid 64176:tid 64305] [client 20.203.174.117:59479] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/11.php"] [unique_id "ae0ciTNSdAwEv4BX4YKBUAAAAAs"]
[Sun Apr 26 03:56:57.718096 2026] [:error] [pid 64176:tid 64315] [client 20.203.174.117:59476] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/11.php"] [unique_id "ae0ciTNSdAwEv4BX4YKBUwAAABU"]
[Sun Apr 26 03:56:58.310665 2026] [:error] [pid 64178:tid 64403] [client 20.203.174.117:62484] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/11.php"] [unique_id "ae0cijj8Yzmn87N-mdYqzAAAAJY"]
[Sun Apr 26 03:56:58.914070 2026] [:error] [pid 64178:tid 64382] [client 20.203.174.117:54996] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/p.php"] [unique_id "ae0cijj8Yzmn87N-mdYq0gAAAII"]
[Sun Apr 26 03:56:59.537420 2026] [:error] [pid 64178:tid 64388] [client 20.203.174.117:52617] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/p.php"] [unique_id "ae0cizj8Yzmn87N-mdYq2AAAAIg"]
[Sun Apr 26 03:57:00.181151 2026] [:error] [pid 64632:tid 64697] [client 20.203.174.117:50760] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/p.php"] [unique_id "ae0cjABZcErGHLTsluK-fQAAANY"]
[Sun Apr 26 03:57:00.724559 2026] [:error] [pid 64632:tid 64690] [client 20.203.174.117:28252] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/p.php"] [unique_id "ae0cjABZcErGHLTsluK-gQAAAM8"]
[Sun Apr 26 03:57:01.393719 2026] [:error] [pid 64632:tid 64691] [client 20.203.174.117:60634] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/"] [unique_id "ae0cjQBZcErGHLTsluK-gwAAANA"]
[Sun Apr 26 03:57:02.215916 2026] [:error] [pid 64176:tid 64316] [client 20.203.174.117:4139] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/"] [unique_id "ae0cjjNSdAwEv4BX4YKBYAAAABY"]
[Sun Apr 26 03:57:02.842248 2026] [:error] [pid 64632:tid 64680] [client 20.203.174.117:54995] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/"] [unique_id "ae0cjgBZcErGHLTsluK-iQAAAMY"]
[Sun Apr 26 03:57:03.560606 2026] [:error] [pid 64632:tid 64690] [client 20.203.174.117:54988] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/"] [unique_id "ae0cjwBZcErGHLTsluK-jgAAAM8"]
[Sun Apr 26 03:57:04.263380 2026] [:error] [pid 64178:tid 64381] [client 20.203.174.117:50537] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "ae0ckDj8Yzmn87N-mdYq7wAAAIE"]
[Sun Apr 26 03:57:05.158802 2026] [:error] [pid 64632:tid 64682] [client 20.203.174.117:50726] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "ae0ckQBZcErGHLTsluK-lwAAAMg"]
[Sun Apr 26 03:57:05.743115 2026] [:error] [pid 64632:tid 64693] [client 20.203.174.117:51928] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "ae0ckQBZcErGHLTsluK-mQAAANI"]
[Sun Apr 26 03:57:06.412704 2026] [:error] [pid 64178:tid 64390] [client 20.203.174.117:56882] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "ae0ckjj8Yzmn87N-mdYq-QAAAIk"]
[Sun Apr 26 03:57:06.964634 2026] [:error] [pid 64178:tid 64383] [client 20.203.174.117:60999] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "ae0ckjj8Yzmn87N-mdYq_AAAAIM"]
[Sun Apr 26 03:57:07.709595 2026] [:error] [pid 64178:tid 64403] [client 20.203.174.117:52632] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "ae0ckzj8Yzmn87N-mdYq_wAAAJY"]
[Sun Apr 26 03:57:08.384375 2026] [:error] [pid 64176:tid 64306] [client 20.203.174.117:52186] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "ae0clDNSdAwEv4BX4YKBeQAAAAw"]
[Sun Apr 26 03:57:09.073611 2026] [:error] [pid 64177:tid 64375] [client 20.203.174.117:57280] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/shell.php"] [unique_id "ae0clUdCiRn77Twvcom4iQAAAFY"]
[Sun Apr 26 03:57:09.695621 2026] [:error] [pid 64177:tid 64355] [client 20.203.174.117:51695] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tea.php"] [unique_id "ae0clUdCiRn77Twvcom4jQAAAEI"]
[Sun Apr 26 03:57:10.499342 2026] [:error] [pid 64632:tid 64678] [client 20.203.174.117:51704] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tea.php"] [unique_id "ae0clgBZcErGHLTsluK-nAAAAMQ"]
[Sun Apr 26 03:57:11.010301 2026] [:error] [pid 64178:tid 64404] [client 20.203.174.117:51941] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tea.php"] [unique_id "ae0clzj8Yzmn87N-mdYrHAAAAJc"]
[Sun Apr 26 03:57:11.671521 2026] [:error] [pid 64178:tid 64394] [client 20.203.174.117:55071] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tea.php"] [unique_id "ae0clzj8Yzmn87N-mdYrJAAAAI0"]
[Sun Apr 26 03:57:12.398173 2026] [:error] [pid 64176:tid 64293] [client 20.203.174.117:60951] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/seo.php"] [unique_id "ae0cmDNSdAwEv4BX4YKBgAAAAAA"]
[Sun Apr 26 03:57:13.017338 2026] [:error] [pid 64632:tid 64689] [client 20.203.174.117:51918] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/seo.php"] [unique_id "ae0cmQBZcErGHLTsluK-ogAAAM4"]
[Sun Apr 26 03:57:13.562617 2026] [:error] [pid 64178:tid 64394] [client 20.203.174.117:51668] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/seo.php"] [unique_id "ae0cmTj8Yzmn87N-mdYrNwAAAI0"]
[Sun Apr 26 03:57:14.111153 2026] [:error] [pid 64178:tid 64381] [client 20.203.174.117:51915] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/seo.php"] [unique_id "ae0cmjj8Yzmn87N-mdYrOgAAAIE"]
[Sun Apr 26 03:57:14.623371 2026] [:error] [pid 64632:tid 64695] [client 20.203.174.117:51960] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/7.php"] [unique_id "ae0cmgBZcErGHLTsluK-qQAAANQ"]
[Sun Apr 26 03:57:15.185116 2026] [:error] [pid 64178:tid 64393] [client 20.203.174.117:50542] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/7.php"] [unique_id "ae0cmzj8Yzmn87N-mdYrQAAAAIw"]
[Sun Apr 26 03:57:15.783378 2026] [:error] [pid 64632:tid 64691] [client 20.203.174.117:28250] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/7.php"] [unique_id "ae0cmwBZcErGHLTsluK-qwAAANA"]
[Sun Apr 26 03:57:16.309340 2026] [:error] [pid 64178:tid 64402] [client 20.203.174.117:60938] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/7.php"] [unique_id "ae0cnDj8Yzmn87N-mdYrSAAAAJU"]
[Sun Apr 26 03:57:16.877696 2026] [:error] [pid 64632:tid 64688] [client 20.203.174.117:51911] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "ae0cnABZcErGHLTsluK-rgAAAM0"]
[Sun Apr 26 03:57:17.574594 2026] [:error] [pid 64178:tid 64393] [client 20.203.174.117:60615] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "ae0cnTj8Yzmn87N-mdYrUwAAAIw"]
[Sun Apr 26 03:57:18.170754 2026] [:error] [pid 64177:tid 64358] [client 20.203.174.117:50778] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "ae0cnkdCiRn77Twvcom4nAAAAEU"]
[Sun Apr 26 03:57:18.776465 2026] [:error] [pid 64177:tid 64364] [client 20.203.174.117:51954] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/8.php"] [unique_id "ae0cnkdCiRn77Twvcom4ngAAAEs"]
[Sun Apr 26 03:57:19.330888 2026] [:error] [pid 64632:tid 64696] [client 20.203.174.117:50530] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "ae0cnwBZcErGHLTsluK-tAAAANU"]
[Sun Apr 26 03:57:19.946193 2026] [:error] [pid 64176:tid 64315] [client 20.203.174.117:28236] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "ae0cnzNSdAwEv4BX4YKBjAAAABU"]
[Sun Apr 26 03:57:20.655377 2026] [:error] [pid 64632:tid 64699] [client 20.203.174.117:52625] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "ae0coABZcErGHLTsluK-vQAAANg"]
[Sun Apr 26 03:57:21.376716 2026] [:error] [pid 64176:tid 64296] [client 20.203.174.117:50754] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "ae0coTNSdAwEv4BX4YKBjgAAAAM"]
[Sun Apr 26 03:57:21.862286 2026] [:error] [pid 64632:tid 64680] [client 20.203.174.117:4490] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "ae0coQBZcErGHLTsluK-yAAAAMY"]
[Sun Apr 26 03:57:22.657309 2026] [:error] [pid 64632:tid 64697] [client 20.203.174.117:64418] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "ae0cogBZcErGHLTsluK-zQAAANY"]
[Sun Apr 26 03:57:23.262723 2026] [:error] [pid 64632:tid 64690] [client 20.203.174.117:50780] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "ae0cowBZcErGHLTsluK-0wAAAM8"]
[Sun Apr 26 03:57:23.774290 2026] [:error] [pid 64177:tid 64377] [client 20.203.174.117:22378] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "ae0co0dCiRn77Twvcom4owAAAFg"]
[Sun Apr 26 03:57:24.657545 2026] [:error] [pid 64178:tid 64396] [client 20.203.174.117:60964] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/3.php"] [unique_id "ae0cpDj8Yzmn87N-mdYriwAAAI8"]
[Sun Apr 26 03:57:25.542151 2026] [:error] [pid 64178:tid 64380] [client 20.203.174.117:55103] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/3.php"] [unique_id "ae0cpTj8Yzmn87N-mdYrmAAAAIA"]
[Sun Apr 26 03:57:26.260691 2026] [:error] [pid 64178:tid 64388] [client 20.203.174.117:64425] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/3.php"] [unique_id "ae0cpjj8Yzmn87N-mdYroQAAAIg"]
[Sun Apr 26 03:57:26.792259 2026] [:error] [pid 64177:tid 64362] [client 20.203.174.117:60652] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/3.php"] [unique_id "ae0cpkdCiRn77Twvcom4sQAAAEk"]
[Sun Apr 26 03:57:27.281495 2026] [:error] [pid 64176:tid 64297] [client 20.203.174.117:60966] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/4.php"] [unique_id "ae0cpzNSdAwEv4BX4YKBlAAAAAQ"]
[Sun Apr 26 03:57:27.906964 2026] [:error] [pid 64178:tid 64395] [client 20.203.174.117:55101] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/4.php"] [unique_id "ae0cpzj8Yzmn87N-mdYrtQAAAI4"]
[Sun Apr 26 03:57:28.441590 2026] [:error] [pid 64178:tid 64402] [client 20.203.174.117:4484] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/4.php"] [unique_id "ae0cqDj8Yzmn87N-mdYrvQAAAJU"]
[Sun Apr 26 03:57:29.009102 2026] [:error] [pid 64178:tid 64388] [client 20.203.174.117:28264] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/4.php"] [unique_id "ae0cqTj8Yzmn87N-mdYrxgAAAIg"]
[Sun Apr 26 03:57:29.503688 2026] [:error] [pid 64177:tid 64372] [client 20.203.174.117:50549] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/5.php"] [unique_id "ae0cqUdCiRn77Twvcom4vAAAAFM"]
[Sun Apr 26 03:57:30.097328 2026] [:error] [pid 64632:tid 64694] [client 20.203.174.117:4568] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/5.php"] [unique_id "ae0cqgBZcErGHLTsluK-4QAAANM"]
[Sun Apr 26 03:57:30.675429 2026] [:error] [pid 64632:tid 64688] [client 20.203.174.117:60936] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/5.php"] [unique_id "ae0cqgBZcErGHLTsluK-5QAAAM0"]
[Sun Apr 26 03:57:31.252631 2026] [:error] [pid 64178:tid 64385] [client 20.203.174.117:53461] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/5.php"] [unique_id "ae0cqzj8Yzmn87N-mdYr4AAAAIU"]
[Sun Apr 26 03:57:31.802483 2026] [:error] [pid 64632:tid 64696] [client 20.203.174.117:57769] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/6.php"] [unique_id "ae0cqwBZcErGHLTsluK-6AAAANU"]
[Sun Apr 26 03:57:32.391281 2026] [:error] [pid 64632:tid 64686] [client 20.203.174.117:52201] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/6.php"] [unique_id "ae0crABZcErGHLTsluK-9AAAAMw"]
[Sun Apr 26 03:57:32.908375 2026] [:error] [pid 64632:tid 64698] [client 20.203.174.117:60655] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/6.php"] [unique_id "ae0crABZcErGHLTsluK_CQAAANc"]
[Sun Apr 26 03:57:33.608519 2026] [:error] [pid 64178:tid 64385] [client 20.203.174.117:59793] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/6.php"] [unique_id "ae0crTj8Yzmn87N-mdYsEAAAAIU"]
[Sun Apr 26 03:57:34.210013 2026] [:error] [pid 64177:tid 64371] [client 20.203.174.117:59832] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/9.php"] [unique_id "ae0crkdCiRn77Twvcom4zAAAAFI"]
[Sun Apr 26 03:57:34.897826 2026] [:error] [pid 64178:tid 64385] [client 20.203.174.117:61805] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/9.php"] [unique_id "ae0crjj8Yzmn87N-mdYsIwAAAIU"]
[Sun Apr 26 03:57:35.665909 2026] [:error] [pid 64178:tid 64402] [client 20.203.174.117:57781] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/9.php"] [unique_id "ae0crzj8Yzmn87N-mdYsLAAAAJU"]
[Sun Apr 26 03:57:36.186416 2026] [:error] [pid 64176:tid 64302] [client 20.203.174.117:50712] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/9.php"] [unique_id "ae0csDNSdAwEv4BX4YKBvwAAAAg"]
[Sun Apr 26 03:57:36.833031 2026] [:error] [pid 64178:tid 64385] [client 20.203.174.117:53447] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/10.php"] [unique_id "ae0csDj8Yzmn87N-mdYsNQAAAIU"]
[Sun Apr 26 03:57:37.429611 2026] [:error] [pid 64178:tid 64402] [client 20.203.174.117:50498] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/10.php"] [unique_id "ae0csTj8Yzmn87N-mdYsPQAAAJU"]
[Sun Apr 26 03:57:38.041544 2026] [:error] [pid 64176:tid 64300] [client 20.203.174.117:4605] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/10.php"] [unique_id "ae0csjNSdAwEv4BX4YKBywAAAAY"]
[Sun Apr 26 03:57:38.731159 2026] [:error] [pid 64178:tid 64382] [client 20.203.174.117:51956] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/10.php"] [unique_id "ae0csjj8Yzmn87N-mdYsSQAAAII"]
[Sun Apr 26 03:57:39.290896 2026] [:error] [pid 64178:tid 64381] [client 20.203.174.117:51933] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/100.php"] [unique_id "ae0cszj8Yzmn87N-mdYsTwAAAIE"]
[Sun Apr 26 03:57:39.826383 2026] [:error] [pid 64632:tid 64699] [client 20.203.174.117:52666] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/100.php"] [unique_id "ae0cswBZcErGHLTsluK_LQAAANg"]
[Sun Apr 26 03:57:40.316087 2026] [:error] [pid 64632:tid 64694] [client 20.203.174.117:50301] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/100.php"] [unique_id "ae0ctABZcErGHLTsluK_MAAAANM"]
[Sun Apr 26 03:57:40.982449 2026] [:error] [pid 64632:tid 64677] [client 20.203.174.117:50287] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/100.php"] [unique_id "ae0ctABZcErGHLTsluK_NAAAAMM"]
[Sun Apr 26 03:57:41.545248 2026] [:error] [pid 64632:tid 64681] [client 20.203.174.117:50736] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/nastar.php"] [unique_id "ae0ctQBZcErGHLTsluK_NwAAAMc"]
[Sun Apr 26 03:57:42.103588 2026] [:error] [pid 64177:tid 64362] [client 20.203.174.117:53499] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/nastar.php"] [unique_id "ae0ctkdCiRn77Twvcom44gAAAEk"]
[Sun Apr 26 03:57:42.644569 2026] [:error] [pid 64177:tid 64364] [client 20.203.174.117:51935] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/nastar.php"] [unique_id "ae0ctkdCiRn77Twvcom44wAAAEs"]
[Sun Apr 26 03:57:50.808869 2026] [:error] [pid 64176:tid 64307] [client 20.203.174.117:53282] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "ae0cvjNSdAwEv4BX4YKCEwAAAA0"]
[Sun Apr 26 03:58:02.756269 2026] [:error] [pid 64632:tid 64689] [client 20.203.174.117:53487] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "ae0cygBZcErGHLTsluK_kAAAAM4"]
[Sun Apr 26 03:58:03.663899 2026] [:error] [pid 64632:tid 64678] [client 20.203.174.117:53467] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "ae0cywBZcErGHLTsluK_mAAAAMQ"]
[Sun Apr 26 03:58:04.314956 2026] [:error] [pid 64632:tid 64675] [client 20.203.174.117:54604] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "ae0czABZcErGHLTsluK_ngAAAME"]
[Sun Apr 26 03:58:04.939657 2026] [:error] [pid 64632:tid 64694] [client 20.203.174.117:4220] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "ae0czABZcErGHLTsluK_pgAAANM"]
[Sun Apr 26 03:58:05.592783 2026] [:error] [pid 64632:tid 64697] [client 20.203.174.117:54075] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "ae0czQBZcErGHLTsluK_sQAAANY"]
[Sun Apr 26 03:58:06.204855 2026] [:error] [pid 64177:tid 64366] [client 20.203.174.117:54623] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "ae0czkdCiRn77Twvcom5AwAAAE0"]
[Sun Apr 26 03:58:06.737859 2026] [:error] [pid 64177:tid 64364] [client 20.203.174.117:57358] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "ae0czkdCiRn77Twvcom5BwAAAEs"]
[Sun Apr 26 03:58:07.332427 2026] [:error] [pid 64177:tid 64369] [client 20.203.174.117:50251] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "ae0cz0dCiRn77Twvcom5DQAAAFA"]
[Sun Apr 26 03:58:07.967301 2026] [:error] [pid 64178:tid 64398] [client 20.203.174.117:54613] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "ae0czzj8Yzmn87N-mdYsmQAAAJE"]
[Sun Apr 26 03:58:08.752438 2026] [:error] [pid 64178:tid 64383] [client 20.203.174.117:49418] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "ae0c0Dj8Yzmn87N-mdYsnAAAAIM"]
[Sun Apr 26 03:58:09.271044 2026] [:error] [pid 64178:tid 64388] [client 20.203.174.117:56340] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "ae0c0Tj8Yzmn87N-mdYsoQAAAIg"]
[Sun Apr 26 03:58:09.867559 2026] [:error] [pid 64632:tid 64698] [client 20.203.174.117:49453] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "ae0c0QBZcErGHLTsluK_vgAAANc"]
[Sun Apr 26 03:58:10.519490 2026] [:error] [pid 64632:tid 64683] [client 20.203.174.117:54061] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "ae0c0gBZcErGHLTsluK_xAAAAMk"]
[Sun Apr 26 03:58:11.098961 2026] [:error] [pid 64632:tid 64678] [client 20.203.174.117:53287] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "ae0c0wBZcErGHLTsluK_yQAAAMQ"]
[Sun Apr 26 03:58:11.614967 2026] [:error] [pid 64632:tid 64681] [client 20.203.174.117:54245] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "ae0c0wBZcErGHLTsluK_zAAAAMc"]
[Sun Apr 26 03:58:12.260718 2026] [:error] [pid 64178:tid 64404] [client 20.203.174.117:50253] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "ae0c1Dj8Yzmn87N-mdYsqgAAAJc"]
[Sun Apr 26 03:58:12.890454 2026] [:error] [pid 64632:tid 64685] [client 20.203.174.117:54037] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "ae0c1ABZcErGHLTsluK_zwAAAMs"]
[Sun Apr 26 03:58:13.497609 2026] [:error] [pid 64178:tid 64387] [client 20.203.174.117:45624] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "ae0c1Tj8Yzmn87N-mdYssgAAAIc"]
[Sun Apr 26 03:58:14.012113 2026] [:error] [pid 64177:tid 64358] [client 20.203.174.117:53293] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "ae0c1kdCiRn77Twvcom5HQAAAEU"]
[Sun Apr 26 03:58:14.661208 2026] [:error] [pid 64177:tid 64360] [client 20.203.174.117:61767] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "ae0c1kdCiRn77Twvcom5HwAAAEc"]
[Sun Apr 26 03:58:15.198015 2026] [:error] [pid 64177:tid 64373] [client 20.203.174.117:57346] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "ae0c10dCiRn77Twvcom5IgAAAFQ"]
[Sun Apr 26 03:58:15.693166 2026] [:error] [pid 64632:tid 64697] [client 20.203.174.117:46386] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "ae0c1wBZcErGHLTsluK_0gAAANY"]
[Sun Apr 26 03:58:16.228429 2026] [:error] [pid 64632:tid 64678] [client 20.203.174.117:57669] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "ae0c2ABZcErGHLTsluK_1gAAAMQ"]
[Sun Apr 26 03:58:16.905319 2026] [:error] [pid 64632:tid 64679] [client 20.203.174.117:54022] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "ae0c2ABZcErGHLTsluK_3AAAAMU"]
[Sun Apr 26 03:58:17.494061 2026] [:error] [pid 64632:tid 64695] [client 20.203.174.117:54646] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "ae0c2QBZcErGHLTsluK_5AAAANQ"]
[Sun Apr 26 03:58:18.118649 2026] [:error] [pid 64177:tid 64359] [client 20.203.174.117:46336] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "ae0c2kdCiRn77Twvcom5JwAAAEY"]
[Sun Apr 26 03:58:18.716897 2026] [:error] [pid 64632:tid 64679] [client 20.203.174.117:45340] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "ae0c2gBZcErGHLTsluK_6gAAAMU"]
[Sun Apr 26 03:58:19.433231 2026] [:error] [pid 64176:tid 64301] [client 20.203.174.117:45582] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/no1.php"] [unique_id "ae0c2zNSdAwEv4BX4YKCWAAAAAc"]
[Sun Apr 26 03:58:19.936280 2026] [:error] [pid 64632:tid 64694] [client 20.203.174.117:54614] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/no1.php"] [unique_id "ae0c2wBZcErGHLTsluK_8wAAANM"]
[Sun Apr 26 03:58:20.503092 2026] [:error] [pid 64632:tid 64678] [client 20.203.174.117:45617] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/no1.php"] [unique_id "ae0c3ABZcErGHLTsluK_9gAAAMQ"]
[Sun Apr 26 03:58:21.248464 2026] [:error] [pid 64177:tid 64358] [client 20.203.174.117:52288] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/no1.php"] [unique_id "ae0c3UdCiRn77Twvcom5LwAAAEU"]
[Sun Apr 26 03:58:21.991439 2026] [:error] [pid 64632:tid 64686] [client 20.203.174.117:46692] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/w2025.php"] [unique_id "ae0c3QBZcErGHLTsluK_-wAAAMw"]
[Sun Apr 26 03:58:22.653570 2026] [:error] [pid 64632:tid 64682] [client 20.203.174.117:54069] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/w2025.php"] [unique_id "ae0c3gBZcErGHLTsluK__QAAAMg"]
[Sun Apr 26 03:58:23.365579 2026] [:error] [pid 64178:tid 64394] [client 20.203.174.117:63788] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/w2025.php"] [unique_id "ae0c3zj8Yzmn87N-mdYswAAAAI0"]
[Sun Apr 26 03:58:24.344084 2026] [:error] [pid 64176:tid 64312] [client 20.203.174.117:47350] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/w2025.php"] [unique_id "ae0c4DNSdAwEv4BX4YKCYwAAABI"]
[Sun Apr 26 03:58:25.093461 2026] [:error] [pid 64178:tid 64381] [client 20.203.174.117:4216] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fvvff.php"] [unique_id "ae0c4Tj8Yzmn87N-mdYsxAAAAIE"]
[Sun Apr 26 03:58:25.739903 2026] [:error] [pid 64177:tid 64377] [client 20.203.174.117:54626] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fvvff.php"] [unique_id "ae0c4UdCiRn77Twvcom5PgAAAFg"]
[Sun Apr 26 03:58:26.272325 2026] [:error] [pid 64176:tid 64310] [client 20.203.174.117:22337] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fvvff.php"] [unique_id "ae0c4jNSdAwEv4BX4YKCaQAAABA"]
[Sun Apr 26 03:58:26.916568 2026] [:error] [pid 64176:tid 64293] [client 20.203.174.117:47325] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fvvff.php"] [unique_id "ae0c4jNSdAwEv4BX4YKCagAAAAA"]
[Sun Apr 26 03:58:27.450712 2026] [:error] [pid 64177:tid 64360] [client 20.203.174.117:57720] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "ae0c40dCiRn77Twvcom5RQAAAEc"]
[Sun Apr 26 03:58:28.035074 2026] [:error] [pid 64176:tid 64296] [client 20.203.174.117:46681] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "ae0c5DNSdAwEv4BX4YKCbQAAAAM"]
[Sun Apr 26 03:58:28.721175 2026] [:error] [pid 64178:tid 64391] [client 20.203.174.117:63777] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "ae0c5Dj8Yzmn87N-mdYszQAAAIo"]
[Sun Apr 26 03:58:29.274030 2026] [:error] [pid 64178:tid 64400] [client 20.203.174.117:58721] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "ae0c5Tj8Yzmn87N-mdYszgAAAJM"]
[Sun Apr 26 03:58:29.871688 2026] [:error] [pid 64177:tid 64371] [client 20.203.174.117:45626] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "ae0c5UdCiRn77Twvcom5TQAAAFI"]
[Sun Apr 26 03:58:30.469623 2026] [:error] [pid 64632:tid 64690] [client 20.203.174.117:57721] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "ae0c5gBZcErGHLTsluLAEgAAAM8"]
[Sun Apr 26 03:58:31.034740 2026] [:error] [pid 64632:tid 64693] [client 20.203.174.117:54030] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "ae0c5wBZcErGHLTsluLAFAAAANI"]
[Sun Apr 26 03:58:31.656808 2026] [:error] [pid 64178:tid 64399] [client 20.203.174.117:46664] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "ae0c5zj8Yzmn87N-mdYs2gAAAJI"]
[Sun Apr 26 03:58:32.433191 2026] [:error] [pid 64632:tid 64675] [client 20.203.174.117:58724] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "ae0c6ABZcErGHLTsluLAFwAAAME"]
[Sun Apr 26 03:58:33.012608 2026] [:error] [pid 64176:tid 64312] [client 20.203.174.117:54068] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "ae0c6TNSdAwEv4BX4YKCcQAAABI"]
[Sun Apr 26 03:58:33.645860 2026] [:error] [pid 64632:tid 64682] [client 20.203.174.117:46683] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "ae0c6QBZcErGHLTsluLAGwAAAMg"]
[Sun Apr 26 03:58:34.376456 2026] [:error] [pid 64176:tid 64314] [client 20.203.174.117:46399] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "ae0c6jNSdAwEv4BX4YKCdAAAABQ"]
[Sun Apr 26 03:58:34.989105 2026] [:error] [pid 64176:tid 64301] [client 20.203.174.117:62128] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "ae0c6jNSdAwEv4BX4YKCdwAAAAc"]
[Sun Apr 26 03:58:35.650850 2026] [:error] [pid 64178:tid 64405] [client 20.203.174.117:46666] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "ae0c6zj8Yzmn87N-mdYs6wAAAJg"]
[Sun Apr 26 03:58:36.306082 2026] [:error] [pid 64176:tid 64311] [client 20.203.174.117:4188] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "ae0c7DNSdAwEv4BX4YKCfgAAABE"]
[Sun Apr 26 03:58:37.245571 2026] [:error] [pid 64178:tid 64402] [client 20.203.174.117:4329] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "ae0c7Tj8Yzmn87N-mdYs8QAAAJU"]
[Sun Apr 26 03:58:37.748594 2026] [:error] [pid 64632:tid 64677] [client 20.203.174.117:62134] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "ae0c7QBZcErGHLTsluLAJgAAAMM"]
[Sun Apr 26 03:58:38.460365 2026] [:error] [pid 64178:tid 64398] [client 20.203.174.117:54049] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "ae0c7jj8Yzmn87N-mdYs9AAAAJE"]
[Sun Apr 26 03:58:39.253188 2026] [:error] [pid 64178:tid 64404] [client 20.203.174.117:50869] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "ae0c7zj8Yzmn87N-mdYs-AAAAJc"]
[Sun Apr 26 03:58:39.946800 2026] [:error] [pid 64178:tid 64394] [client 20.203.174.117:50950] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "ae0c7zj8Yzmn87N-mdYs_AAAAI0"]
[Sun Apr 26 03:58:40.709458 2026] [:error] [pid 64178:tid 64383] [client 20.203.174.117:62131] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "ae0c8Dj8Yzmn87N-mdYtBAAAAIM"]
[Sun Apr 26 03:58:41.221509 2026] [:error] [pid 64176:tid 64305] [client 20.203.174.117:50312] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "ae0c8TNSdAwEv4BX4YKCiQAAAAs"]
[Sun Apr 26 03:58:41.820748 2026] [:error] [pid 64176:tid 64306] [client 20.203.174.117:4342] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "ae0c8TNSdAwEv4BX4YKCiwAAAAw"]
[Sun Apr 26 03:58:42.310581 2026] [:error] [pid 64178:tid 64396] [client 20.203.174.117:50328] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "ae0c8jj8Yzmn87N-mdYtDQAAAI8"]
[Sun Apr 26 03:58:42.962685 2026] [:error] [pid 64178:tid 64388] [client 20.203.174.117:47316] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "ae0c8jj8Yzmn87N-mdYtEQAAAIg"]
[Sun Apr 26 03:58:43.951473 2026] [:error] [pid 64177:tid 64357] [client 20.203.174.117:50971] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "ae0c80dCiRn77Twvcom5ZQAAAEQ"]
[Sun Apr 26 03:58:44.693307 2026] [:error] [pid 64176:tid 64293] [client 20.203.174.117:49463] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "ae0c9DNSdAwEv4BX4YKCjgAAAAA"]
[Sun Apr 26 03:58:45.325959 2026] [:error] [pid 64177:tid 64358] [client 20.203.174.117:46706] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ol.php"] [unique_id "ae0c9UdCiRn77Twvcom5aQAAAEU"]
[Sun Apr 26 03:58:45.936519 2026] [:error] [pid 64632:tid 64695] [client 20.203.174.117:50978] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "ae0c9QBZcErGHLTsluLAVQAAANQ"]
[Sun Apr 26 03:58:46.519064 2026] [:error] [pid 64632:tid 64690] [client 20.203.174.117:58710] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "ae0c9gBZcErGHLTsluLAYAAAAM8"]
[Sun Apr 26 03:58:47.089117 2026] [:error] [pid 64177:tid 64361] [client 20.203.174.117:50870] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "ae0c90dCiRn77Twvcom5bwAAAEg"]
[Sun Apr 26 03:58:47.678845 2026] [:error] [pid 64177:tid 64353] [client 20.203.174.117:4189] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "ae0c90dCiRn77Twvcom5dAAAAEA"]
[Sun Apr 26 03:58:48.470623 2026] [:error] [pid 64176:tid 64309] [client 20.203.174.117:58736] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "ae0c-DNSdAwEv4BX4YKClwAAAA8"]
[Sun Apr 26 03:58:49.009161 2026] [:error] [pid 64178:tid 64401] [client 20.203.174.117:63761] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "ae0c-Tj8Yzmn87N-mdYtIgAAAJQ"]
[Sun Apr 26 03:58:49.585955 2026] [:error] [pid 64176:tid 64305] [client 20.203.174.117:50879] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "ae0c-TNSdAwEv4BX4YKCnQAAAAs"]
[Sun Apr 26 03:58:58.940125 2026] [:error] [pid 64178:tid 64397] [client 20.203.174.117:50340] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "ae0dAjj8Yzmn87N-mdYtbgAAAJA"]
[Sun Apr 26 03:58:59.962512 2026] [:error] [pid 64632:tid 64694] [client 20.203.174.117:62102] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "ae0dAwBZcErGHLTsluLAkwAAANM"]
[Sun Apr 26 03:59:00.706073 2026] [:error] [pid 64632:tid 64676] [client 20.203.174.117:51000] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "ae0dBABZcErGHLTsluLAlwAAAMI"]
[Sun Apr 26 03:59:01.593557 2026] [:error] [pid 64632:tid 64699] [client 20.203.174.117:54042] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "ae0dBQBZcErGHLTsluLAmwAAANg"]
[Sun Apr 26 03:59:03.502714 2026] [:error] [pid 64176:tid 64317] [client 20.203.174.117:4202] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "ae0dBzNSdAwEv4BX4YKCwQAAABc"]
[Sun Apr 26 03:59:04.308506 2026] [:error] [pid 64632:tid 64688] [client 20.203.174.117:62938] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "ae0dCABZcErGHLTsluLArQAAAM0"]
[Sun Apr 26 03:59:05.222698 2026] [:error] [pid 64176:tid 64307] [client 20.203.174.117:58739] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "ae0dCTNSdAwEv4BX4YKCwwAAAA0"]
[Sun Apr 26 03:59:06.170298 2026] [:error] [pid 64632:tid 64692] [client 20.203.174.117:51001] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "ae0dCgBZcErGHLTsluLAtgAAANE"]
[Sun Apr 26 03:59:07.025039 2026] [:error] [pid 64178:tid 64391] [client 20.203.174.117:62924] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "ae0dCzj8Yzmn87N-mdYtjAAAAIo"]
[Sun Apr 26 03:59:08.800021 2026] [:error] [pid 64178:tid 64396] [client 20.203.174.117:54308] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "ae0dDDj8Yzmn87N-mdYtkQAAAI8"]
[Sun Apr 26 03:59:09.393794 2026] [:error] [pid 64176:tid 64310] [client 20.203.174.117:54306] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "ae0dDTNSdAwEv4BX4YKCyQAAABA"]
[Sun Apr 26 03:59:10.315353 2026] [:error] [pid 64632:tid 64677] [client 20.203.174.117:62950] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "ae0dDgBZcErGHLTsluLA1AAAAMM"]
[Sun Apr 26 03:59:12.204675 2026] [:error] [pid 64632:tid 64685] [client 20.203.174.117:46693] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "ae0dEABZcErGHLTsluLA6gAAAMs"]
[Sun Apr 26 03:59:13.113077 2026] [:error] [pid 64632:tid 64678] [client 20.203.174.117:50359] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "ae0dEQBZcErGHLTsluLA8gAAAMQ"]
[Sun Apr 26 03:59:14.537745 2026] [:error] [pid 64177:tid 64362] [client 20.203.174.117:62912] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "ae0dEkdCiRn77Twvcom5lAAAAEk"]
[Sun Apr 26 03:59:16.242705 2026] [:error] [pid 64632:tid 64684] [client 20.203.174.117:54299] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "ae0dFABZcErGHLTsluLBCAAAAMo"]
[Sun Apr 26 03:59:16.922318 2026] [:error] [pid 64632:tid 64696] [client 20.203.174.117:52915] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "ae0dFABZcErGHLTsluLBEgAAANU"]
[Sun Apr 26 03:59:17.981778 2026] [:error] [pid 64632:tid 64676] [client 20.203.174.117:58708] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "ae0dFQBZcErGHLTsluLBGwAAAMI"]
[Sun Apr 26 03:59:18.791427 2026] [:error] [pid 64176:tid 64301] [client 20.203.174.117:50949] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "ae0dFjNSdAwEv4BX4YKCzgAAAAc"]
[Sun Apr 26 03:59:19.943923 2026] [:error] [pid 64176:tid 64315] [client 20.203.174.117:54333] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "ae0dFzNSdAwEv4BX4YKC0wAAABU"]
[Sun Apr 26 03:59:21.044831 2026] [:error] [pid 64177:tid 64354] [client 20.203.174.117:50997] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "ae0dGUdCiRn77Twvcom5oQAAAEE"]
[Sun Apr 26 03:59:21.935136 2026] [:error] [pid 64178:tid 64403] [client 20.203.174.117:62114] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "ae0dGTj8Yzmn87N-mdYtrQAAAJY"]
[Sun Apr 26 03:59:23.517142 2026] [:error] [pid 64177:tid 64370] [client 20.203.174.117:50356] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "ae0dG0dCiRn77Twvcom5sAAAAFE"]
[Sun Apr 26 03:59:24.664319 2026] [:error] [pid 64177:tid 64368] [client 20.203.174.117:50339] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "ae0dHEdCiRn77Twvcom5ugAAAE8"]
[Sun Apr 26 03:59:26.095995 2026] [:error] [pid 64177:tid 64376] [client 20.203.174.117:50858] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "ae0dHkdCiRn77Twvcom5wQAAAFc"]
[Sun Apr 26 03:59:26.783615 2026] [:error] [pid 64177:tid 64361] [client 20.203.174.117:45323] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "ae0dHkdCiRn77Twvcom5xgAAAEg"]
[Sun Apr 26 03:59:27.607913 2026] [:error] [pid 64177:tid 64364] [client 20.203.174.117:64906] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "ae0dH0dCiRn77Twvcom5yAAAAEs"]
[Sun Apr 26 03:59:28.785792 2026] [:error] [pid 64176:tid 64297] [client 20.203.174.117:48542] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "ae0dIDNSdAwEv4BX4YKC8AAAAAQ"]
[Sun Apr 26 03:59:29.719701 2026] [:error] [pid 64632:tid 64698] [client 20.203.174.117:55778] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "ae0dIQBZcErGHLTsluLBQAAAANc"]
[Sun Apr 26 03:59:30.422727 2026] [:error] [pid 64177:tid 64377] [client 20.203.174.117:48404] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "ae0dIkdCiRn77Twvcom5zwAAAFg"]
[Sun Apr 26 03:59:31.549718 2026] [:error] [pid 64177:tid 64367] [client 20.203.174.117:55780] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "ae0dI0dCiRn77Twvcom51QAAAE4"]
[Sun Apr 26 03:59:32.120965 2026] [:error] [pid 64178:tid 64394] [client 20.203.174.117:48401] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "ae0dJDj8Yzmn87N-mdYttwAAAI0"]
[Sun Apr 26 03:59:32.824064 2026] [:error] [pid 64178:tid 64390] [client 20.203.174.117:55805] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/we.php"] [unique_id "ae0dJDj8Yzmn87N-mdYtvwAAAIk"]
[Sun Apr 26 03:59:33.434826 2026] [:error] [pid 64178:tid 64404] [client 20.203.174.117:50460] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/we.php"] [unique_id "ae0dJTj8Yzmn87N-mdYtwQAAAJc"]
[Sun Apr 26 03:59:34.475111 2026] [:error] [pid 64177:tid 64361] [client 20.203.174.117:64904] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/we.php"] [unique_id "ae0dJkdCiRn77Twvcom55QAAAEg"]
[Sun Apr 26 03:59:35.068015 2026] [:error] [pid 64178:tid 64397] [client 20.203.174.117:64941] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/we.php"] [unique_id "ae0dJzj8Yzmn87N-mdYtxQAAAJA"]
[Sun Apr 26 03:59:35.671961 2026] [:error] [pid 64632:tid 64699] [client 20.203.174.117:64923] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "ae0dJwBZcErGHLTsluLBVQAAANg"]
[Sun Apr 26 03:59:36.433571 2026] [:error] [pid 64632:tid 64678] [client 20.203.174.117:52550] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "ae0dKABZcErGHLTsluLBXAAAAMQ"]
[Sun Apr 26 03:59:37.540588 2026] [:error] [pid 64176:tid 64303] [client 20.203.174.117:58108] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "ae0dKTNSdAwEv4BX4YKDAQAAAAk"]
[Sun Apr 26 03:59:38.447062 2026] [:error] [pid 64176:tid 64309] [client 20.203.174.117:4794] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "ae0dKjNSdAwEv4BX4YKDAgAAAA8"]
[Sun Apr 26 03:59:39.333984 2026] [:error] [pid 64177:tid 64373] [client 20.203.174.117:47597] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin1.php"] [unique_id "ae0dK0dCiRn77Twvcom5_wAAAFQ"]
[Sun Apr 26 03:59:40.835855 2026] [:error] [pid 64177:tid 64353] [client 20.203.174.117:46434] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin1.php"] [unique_id "ae0dLEdCiRn77Twvcom6BwAAAEA"]
[Sun Apr 26 03:59:41.593715 2026] [:error] [pid 64177:tid 64360] [client 20.203.174.117:50442] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin1.php"] [unique_id "ae0dLUdCiRn77Twvcom6CgAAAEc"]
[Sun Apr 26 03:59:42.260858 2026] [:error] [pid 64632:tid 64679] [client 20.203.174.117:58708] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin1.php"] [unique_id "ae0dLgBZcErGHLTsluLBdQAAAMU"]
[Sun Apr 26 03:59:43.081340 2026] [:error] [pid 64177:tid 64361] [client 20.203.174.117:49772] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ae0dL0dCiRn77Twvcom6EwAAAEg"]
[Sun Apr 26 03:59:44.073881 2026] [:error] [pid 64632:tid 64675] [client 20.203.174.117:63239] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ae0dMABZcErGHLTsluLBgwAAAME"]
[Sun Apr 26 03:59:44.978054 2026] [:error] [pid 64632:tid 64699] [client 20.203.174.117:50432] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ae0dMABZcErGHLTsluLBjQAAANg"]
[Sun Apr 26 03:59:45.894876 2026] [:error] [pid 64632:tid 64698] [client 20.203.174.117:49247] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "ae0dMQBZcErGHLTsluLBkwAAANc"]
[Sun Apr 26 03:59:47.267921 2026] [:error] [pid 64632:tid 64679] [client 20.203.174.117:51267] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "ae0dMwBZcErGHLTsluLBmgAAAMU"]
[Sun Apr 26 03:59:48.596411 2026] [:error] [pid 64177:tid 64361] [client 20.203.174.117:49685] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "ae0dNEdCiRn77Twvcom6IwAAAEg"]
[Sun Apr 26 03:59:49.165131 2026] [:error] [pid 64632:tid 64684] [client 20.203.174.117:58348] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "ae0dNQBZcErGHLTsluLBpwAAAMo"]
[Sun Apr 26 03:59:49.822292 2026] [:error] [pid 64632:tid 64698] [client 20.203.174.117:58311] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "ae0dNQBZcErGHLTsluLBrQAAANc"]
[Sun Apr 26 03:59:50.665220 2026] [:error] [pid 64176:tid 64294] [client 20.203.174.117:59081] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ae0dNjNSdAwEv4BX4YKDFgAAAAE"]
[Sun Apr 26 03:59:52.184805 2026] [:error] [pid 64178:tid 64397] [client 20.203.174.117:51279] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ae0dODj8Yzmn87N-mdYt9wAAAJA"]
[Sun Apr 26 03:59:53.290248 2026] [:error] [pid 64178:tid 64383] [client 20.203.174.117:59131] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ae0dOTj8Yzmn87N-mdYt_wAAAIM"]
[Sun Apr 26 03:59:53.839473 2026] [:error] [pid 64177:tid 64361] [client 20.203.174.117:59084] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "ae0dOUdCiRn77Twvcom6MwAAAEg"]
[Sun Apr 26 03:59:54.618004 2026] [:error] [pid 64177:tid 64368] [client 20.203.174.117:58362] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/"] [unique_id "ae0dOkdCiRn77Twvcom6NwAAAE8"]
[Sun Apr 26 03:59:55.330596 2026] [:error] [pid 64176:tid 64316] [client 20.203.174.117:59075] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/"] [unique_id "ae0dOzNSdAwEv4BX4YKDGQAAABY"]
[Sun Apr 26 03:59:56.159999 2026] [:error] [pid 64632:tid 64683] [client 20.203.174.117:61387] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/"] [unique_id "ae0dPABZcErGHLTsluLBwQAAAMk"]
[Sun Apr 26 03:59:56.975610 2026] [:error] [pid 64178:tid 64394] [client 20.203.174.117:50611] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/"] [unique_id "ae0dPDj8Yzmn87N-mdYuBgAAAI0"]
[Sun Apr 26 03:59:57.582914 2026] [:error] [pid 64177:tid 64355] [client 20.203.174.117:58309] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "ae0dPUdCiRn77Twvcom6QwAAAEI"]
[Sun Apr 26 04:00:09.715023 2026] [:error] [pid 64176:tid 64293] [client 20.203.174.117:4915] [client 20.203.174.117] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "ae0dSTNSdAwEv4BX4YKDPQAAAAA"]
[Sun Apr 26 04:00:11.504635 2026] [:error] [pid 64177:tid 64353] [client 20.203.174.117:50470] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "ae0dS0dCiRn77Twvcom6dwAAAEA"]
[Sun Apr 26 04:00:12.386736 2026] [:error] [pid 64177:tid 64364] [client 20.203.174.117:55807] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "ae0dTEdCiRn77Twvcom6egAAAEs"]
[Sun Apr 26 04:00:12.962402 2026] [:error] [pid 64632:tid 64678] [client 20.203.174.117:52908] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "ae0dTABZcErGHLTsluLB5QAAAMQ"]
[Sun Apr 26 04:00:13.620166 2026] [:error] [pid 64632:tid 64695] [client 20.203.174.117:48573] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/"] [unique_id "ae0dTQBZcErGHLTsluLB6AAAANQ"]
[Sun Apr 26 04:00:14.378654 2026] [:error] [pid 64632:tid 64679] [client 20.203.174.117:4927] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/k.php"] [unique_id "ae0dTgBZcErGHLTsluLB7QAAAMU"]
[Sun Apr 26 04:00:14.958938 2026] [:error] [pid 64178:tid 64390] [client 20.203.174.117:52781] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/k.php"] [unique_id "ae0dTjj8Yzmn87N-mdYuKAAAAIk"]
[Sun Apr 26 04:00:15.634757 2026] [:error] [pid 64632:tid 64694] [client 20.203.174.117:4983] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/k.php"] [unique_id "ae0dTwBZcErGHLTsluLB_gAAANM"]
[Sun Apr 26 04:00:16.541549 2026] [:error] [pid 64178:tid 64382] [client 20.203.174.117:52888] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/k.php"] [unique_id "ae0dUDj8Yzmn87N-mdYuMwAAAII"]
[Sun Apr 26 04:00:17.134905 2026] [:error] [pid 64177:tid 64357] [client 20.203.174.117:4736] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "ae0dUUdCiRn77Twvcom6kQAAAEQ"]
[Sun Apr 26 04:00:17.811093 2026] [:error] [pid 64632:tid 64694] [client 20.203.174.117:48408] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "ae0dUQBZcErGHLTsluLCEQAAANM"]
[Sun Apr 26 04:00:18.425118 2026] [:error] [pid 64178:tid 64384] [client 20.203.174.117:49245] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "ae0dUjj8Yzmn87N-mdYuPgAAAIQ"]
[Sun Apr 26 04:00:19.256875 2026] [:error] [pid 64632:tid 64694] [client 20.203.174.117:4977] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "ae0dUwBZcErGHLTsluLCIQAAANM"]
[Sun Apr 26 04:00:19.945520 2026] [:error] [pid 64176:tid 64300] [client 20.203.174.117:4985] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "ae0dUzNSdAwEv4BX4YKDggAAAAY"]
[Sun Apr 26 04:00:20.660185 2026] [:error] [pid 64176:tid 64295] [client 20.203.174.117:53216] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "ae0dVDNSdAwEv4BX4YKDhAAAAAI"]
[Sun Apr 26 04:00:21.254614 2026] [:error] [pid 64177:tid 64354] [client 20.203.174.117:48435] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "ae0dVUdCiRn77Twvcom6ogAAAEE"]
[Sun Apr 26 04:00:21.887429 2026] [:error] [pid 64176:tid 64310] [client 20.203.174.117:52793] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "ae0dVTNSdAwEv4BX4YKDiAAAABA"]
[Sun Apr 26 04:00:22.478537 2026] [:error] [pid 64176:tid 64306] [client 20.203.174.117:47269] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/in.php"] [unique_id "ae0dVjNSdAwEv4BX4YKDiwAAAAw"]
[Sun Apr 26 04:00:23.100249 2026] [:error] [pid 64632:tid 64676] [client 20.203.174.117:50457] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/in.php"] [unique_id "ae0dVwBZcErGHLTsluLCLwAAAMI"]
[Sun Apr 26 04:00:23.636489 2026] [:error] [pid 64632:tid 64694] [client 20.203.174.117:52885] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/in.php"] [unique_id "ae0dVwBZcErGHLTsluLCNAAAANM"]
[Sun Apr 26 04:00:24.270087 2026] [:error] [pid 64176:tid 64293] [client 20.203.174.117:50478] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/in.php"] [unique_id "ae0dWDNSdAwEv4BX4YKDkQAAAAA"]
[Sun Apr 26 04:00:25.111919 2026] [:error] [pid 64177:tid 64358] [client 20.203.174.117:48560] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "ae0dWUdCiRn77Twvcom6qgAAAEU"]
[Sun Apr 26 04:00:25.848424 2026] [:error] [pid 64178:tid 64382] [client 20.203.174.117:55774] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "ae0dWTj8Yzmn87N-mdYuTwAAAII"]
[Sun Apr 26 04:00:26.479493 2026] [:error] [pid 64178:tid 64394] [client 20.203.174.117:52924] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "ae0dWjj8Yzmn87N-mdYuUQAAAI0"]
[Sun Apr 26 04:00:27.075300 2026] [:error] [pid 64176:tid 64309] [client 20.203.174.117:4878] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "ae0dWzNSdAwEv4BX4YKDmgAAAA8"]
[Sun Apr 26 04:00:27.625649 2026] [:error] [pid 64177:tid 64370] [client 20.203.174.117:58360] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "ae0dW0dCiRn77Twvcom6rQAAAFE"]
[Sun Apr 26 04:00:28.115997 2026] [:error] [pid 64176:tid 64311] [client 20.203.174.117:48429] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "ae0dXDNSdAwEv4BX4YKDngAAABE"]
[Sun Apr 26 04:00:28.644590 2026] [:error] [pid 64177:tid 64366] [client 20.203.174.117:48434] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "ae0dXEdCiRn77Twvcom6rwAAAE0"]
[Sun Apr 26 04:00:29.217730 2026] [:error] [pid 64177:tid 64372] [client 20.203.174.117:52879] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "ae0dXUdCiRn77Twvcom6tgAAAFM"]
[Sun Apr 26 04:00:29.759931 2026] [:error] [pid 64178:tid 64404] [client 20.203.174.117:52582] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "ae0dXTj8Yzmn87N-mdYuWAAAAJc"]
[Sun Apr 26 04:00:30.287409 2026] [:error] [pid 64632:tid 64691] [client 20.203.174.117:52576] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "ae0dXgBZcErGHLTsluLCQgAAANA"]
[Sun Apr 26 04:00:30.792889 2026] [:error] [pid 64632:tid 64699] [client 20.203.174.117:4770] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "ae0dXgBZcErGHLTsluLCRwAAANg"]
[Sun Apr 26 04:00:31.315730 2026] [:error] [pid 64178:tid 64395] [client 20.203.174.117:53218] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "ae0dXzj8Yzmn87N-mdYuWQAAAI4"]
[Sun Apr 26 04:00:31.827140 2026] [:error] [pid 64177:tid 64366] [client 20.203.174.117:55782] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ae0dX0dCiRn77Twvcom6vgAAAE0"]
[Sun Apr 26 04:00:32.389068 2026] [:error] [pid 64632:tid 64690] [client 20.203.174.117:4934] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ae0dYABZcErGHLTsluLCSwAAAM8"]
[Sun Apr 26 04:00:32.954072 2026] [:error] [pid 64177:tid 64363] [client 20.203.174.117:46424] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ae0dYEdCiRn77Twvcom6wAAAAEo"]
[Sun Apr 26 04:00:33.545941 2026] [:error] [pid 64632:tid 64696] [client 20.203.174.117:4780] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "ae0dYQBZcErGHLTsluLCTwAAANU"]
[Sun Apr 26 04:00:34.119035 2026] [:error] [pid 64632:tid 64682] [client 20.203.174.117:55761] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "ae0dYgBZcErGHLTsluLCUQAAAMg"]
[Sun Apr 26 04:00:34.837718 2026] [:error] [pid 64176:tid 64297] [client 20.203.174.117:47276] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "ae0dYjNSdAwEv4BX4YKDpQAAAAQ"]
[Sun Apr 26 04:00:35.369203 2026] [:error] [pid 64176:tid 64304] [client 20.203.174.117:55744] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "ae0dYzNSdAwEv4BX4YKDpgAAAAo"]
[Sun Apr 26 04:00:35.956390 2026] [:error] [pid 64632:tid 64677] [client 20.203.174.117:52766] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "ae0dYwBZcErGHLTsluLCVAAAAMM"]
[Sun Apr 26 04:00:36.581773 2026] [:error] [pid 64176:tid 64314] [client 20.203.174.117:64944] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/alfashell.php"] [unique_id "ae0dZDNSdAwEv4BX4YKDqgAAABQ"]
[Sun Apr 26 04:00:37.207768 2026] [:error] [pid 64176:tid 64310] [client 20.203.174.117:50481] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/alfashell.php"] [unique_id "ae0dZTNSdAwEv4BX4YKDrAAAABA"]
[Sun Apr 26 04:00:37.785569 2026] [:error] [pid 64632:tid 64690] [client 20.203.174.117:52738] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/alfashell.php"] [unique_id "ae0dZQBZcErGHLTsluLCWQAAAM8"]
[Sun Apr 26 04:00:38.305799 2026] [:error] [pid 64632:tid 64694] [client 20.203.174.117:47272] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/alfashell.php"] [unique_id "ae0dZgBZcErGHLTsluLCXgAAANM"]
[Sun Apr 26 04:00:38.798052 2026] [:error] [pid 64632:tid 64686] [client 20.203.174.117:48432] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "ae0dZgBZcErGHLTsluLCYQAAAMw"]
[Sun Apr 26 04:00:39.389405 2026] [:error] [pid 64632:tid 64681] [client 20.203.174.117:4941] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "ae0dZwBZcErGHLTsluLCZwAAAMc"]
[Sun Apr 26 04:00:40.019061 2026] [:error] [pid 64632:tid 64680] [client 20.203.174.117:49226] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "ae0daABZcErGHLTsluLCaAAAAMY"]
[Sun Apr 26 04:00:40.670816 2026] [:error] [pid 64176:tid 64316] [client 20.203.174.117:64911] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "ae0daDNSdAwEv4BX4YKDrgAAABY"]
[Sun Apr 26 04:00:41.266845 2026] [:error] [pid 64176:tid 64311] [client 20.203.174.117:53186] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "ae0daTNSdAwEv4BX4YKDrwAAABE"]
[Sun Apr 26 04:00:41.815181 2026] [:error] [pid 64632:tid 64684] [client 20.203.174.117:52546] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "ae0daQBZcErGHLTsluLCdQAAAMo"]
[Sun Apr 26 04:00:42.409509 2026] [:error] [pid 64178:tid 64405] [client 20.203.174.117:52917] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "ae0dajj8Yzmn87N-mdYuZgAAAJg"]
[Sun Apr 26 04:00:42.981488 2026] [:error] [pid 64178:tid 64388] [client 20.203.174.117:58070] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "ae0dajj8Yzmn87N-mdYuZwAAAIg"]
[Sun Apr 26 04:00:43.707753 2026] [:error] [pid 64177:tid 64365] [client 20.203.174.117:4864] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "ae0da0dCiRn77Twvcom60QAAAEw"]
[Sun Apr 26 04:00:44.285338 2026] [:error] [pid 64632:tid 64692] [client 20.203.174.117:47263] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "ae0dbABZcErGHLTsluLCfwAAANE"]
[Sun Apr 26 04:00:44.834620 2026] [:error] [pid 64632:tid 64688] [client 20.203.174.117:64932] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "ae0dbABZcErGHLTsluLCgQAAAM0"]
[Sun Apr 26 04:00:45.484451 2026] [:error] [pid 64178:tid 64397] [client 20.203.174.117:52600] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "ae0dbTj8Yzmn87N-mdYuaQAAAJA"]
[Sun Apr 26 04:00:46.143403 2026] [:error] [pid 64178:tid 64382] [client 20.203.174.117:48557] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/g.php"] [unique_id "ae0dbjj8Yzmn87N-mdYuawAAAII"]
[Sun Apr 26 04:00:46.631462 2026] [:error] [pid 64178:tid 64398] [client 20.203.174.117:59078] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/g.php"] [unique_id "ae0dbjj8Yzmn87N-mdYubAAAAJE"]
[Sun Apr 26 04:00:47.132012 2026] [:error] [pid 64177:tid 64356] [client 20.203.174.117:55790] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/g.php"] [unique_id "ae0db0dCiRn77Twvcom62QAAAEM"]
[Sun Apr 26 04:00:47.716741 2026] [:error] [pid 64177:tid 64364] [client 20.203.174.117:47246] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/g.php"] [unique_id "ae0db0dCiRn77Twvcom63AAAAEs"]
[Sun Apr 26 04:00:48.405894 2026] [:error] [pid 64177:tid 64368] [client 20.203.174.117:55772] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "ae0dcEdCiRn77Twvcom63QAAAE8"]
[Sun Apr 26 04:00:49.042678 2026] [:error] [pid 64177:tid 64363] [client 20.203.174.117:55792] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "ae0dcUdCiRn77Twvcom64AAAAEo"]
[Sun Apr 26 04:00:49.765160 2026] [:error] [pid 64177:tid 64365] [client 20.203.174.117:53199] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "ae0dcUdCiRn77Twvcom64wAAAEw"]
[Sun Apr 26 04:00:50.567299 2026] [:error] [pid 64632:tid 64689] [client 20.203.174.117:48445] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "ae0dcgBZcErGHLTsluLChQAAAM4"]
[Sun Apr 26 04:00:51.054876 2026] [:error] [pid 64178:tid 64394] [client 20.203.174.117:52877] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "ae0dczj8Yzmn87N-mdYubgAAAI0"]
[Sun Apr 26 04:00:51.765767 2026] [:error] [pid 64632:tid 64678] [client 20.203.174.117:4923] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "ae0dcwBZcErGHLTsluLChgAAAMQ"]
[Sun Apr 26 04:00:52.294909 2026] [:error] [pid 64176:tid 64297] [client 20.203.174.117:48551] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "ae0ddDNSdAwEv4BX4YKDtQAAAAQ"]
[Sun Apr 26 04:00:52.799491 2026] [:error] [pid 64178:tid 64390] [client 20.203.174.117:53214] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "ae0ddDj8Yzmn87N-mdYucQAAAIk"]
[Sun Apr 26 04:00:53.373211 2026] [:error] [pid 64632:tid 64674] [client 20.203.174.117:48539] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ew.php"] [unique_id "ae0ddQBZcErGHLTsluLCjgAAAMA"]
[Sun Apr 26 04:00:53.892504 2026] [:error] [pid 64177:tid 64369] [client 20.203.174.117:4916] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ew.php"] [unique_id "ae0ddUdCiRn77Twvcom67wAAAFA"]
[Sun Apr 26 04:00:54.809571 2026] [:error] [pid 64178:tid 64383] [client 20.203.174.117:4784] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ew.php"] [unique_id "ae0ddjj8Yzmn87N-mdYucgAAAIM"]
[Sun Apr 26 04:00:55.400746 2026] [:error] [pid 64632:tid 64675] [client 20.203.174.117:49222] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ew.php"] [unique_id "ae0ddwBZcErGHLTsluLClgAAAME"]
[Sun Apr 26 04:00:56.043090 2026] [:error] [pid 64632:tid 64699] [client 20.203.174.117:52548] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "ae0deABZcErGHLTsluLCmAAAANg"]
[Sun Apr 26 04:00:56.611825 2026] [:error] [pid 64632:tid 64681] [client 20.203.174.117:48405] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "ae0deABZcErGHLTsluLCmwAAAMc"]
[Sun Apr 26 04:00:57.205976 2026] [:error] [pid 64177:tid 64368] [client 20.203.174.117:49766] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "ae0deUdCiRn77Twvcom68AAAAE8"]
[Sun Apr 26 04:00:57.717182 2026] [:error] [pid 64176:tid 64307] [client 20.203.174.117:48558] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "ae0deTNSdAwEv4BX4YKDtgAAAA0"]
[Sun Apr 26 04:00:58.227778 2026] [:error] [pid 64632:tid 64685] [client 20.203.174.117:4928] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/hypo.php"] [unique_id "ae0degBZcErGHLTsluLCnwAAAMs"]
[Sun Apr 26 04:00:58.730548 2026] [:error] [pid 64632:tid 64688] [client 20.203.174.117:64920] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/hypo.php"] [unique_id "ae0degBZcErGHLTsluLCogAAAM0"]
[Sun Apr 26 04:00:59.370315 2026] [:error] [pid 64632:tid 64689] [client 20.203.174.117:63232] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/hypo.php"] [unique_id "ae0dewBZcErGHLTsluLCpgAAAM4"]
[Sun Apr 26 04:00:59.980699 2026] [:error] [pid 64632:tid 64695] [client 20.203.174.117:48514] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/hypo.php"] [unique_id "ae0dewBZcErGHLTsluLCqgAAANQ"]
[Sun Apr 26 04:01:00.712025 2026] [:error] [pid 64632:tid 64696] [client 20.203.174.117:64915] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/file18.php"] [unique_id "ae0dfABZcErGHLTsluLCrAAAANU"]
[Sun Apr 26 04:01:01.323497 2026] [:error] [pid 64176:tid 64310] [client 20.203.174.117:55767] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/file18.php"] [unique_id "ae0dfTNSdAwEv4BX4YKDugAAABA"]
[Sun Apr 26 04:01:02.055532 2026] [:error] [pid 64632:tid 64679] [client 20.203.174.117:48431] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/file18.php"] [unique_id "ae0dfgBZcErGHLTsluLCsQAAAMU"]
[Sun Apr 26 04:01:02.622651 2026] [:error] [pid 64176:tid 64316] [client 20.203.174.117:48439] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/file18.php"] [unique_id "ae0dfjNSdAwEv4BX4YKDvQAAABY"]
[Sun Apr 26 04:01:03.317493 2026] [:error] [pid 64632:tid 64688] [client 20.203.174.117:48431] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "ae0dfwBZcErGHLTsluLCswAAAM0"]
[Sun Apr 26 04:01:03.859108 2026] [:error] [pid 64178:tid 64400] [client 20.203.174.117:47237] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "ae0dfzj8Yzmn87N-mdYugwAAAJM"]
[Sun Apr 26 04:01:04.391932 2026] [:error] [pid 64178:tid 64393] [client 20.203.174.117:55806] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "ae0dgDj8Yzmn87N-mdYuhAAAAIw"]
[Sun Apr 26 04:01:04.996575 2026] [:error] [pid 64178:tid 64386] [client 20.203.174.117:48422] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "ae0dgDj8Yzmn87N-mdYuhgAAAIY"]
[Sun Apr 26 04:01:05.636554 2026] [:error] [pid 64178:tid 64391] [client 20.203.174.117:50439] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "ae0dgTj8Yzmn87N-mdYuiwAAAIo"]
[Sun Apr 26 04:01:06.424493 2026] [:error] [pid 64176:tid 64294] [client 20.203.174.117:64931] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "ae0dgjNSdAwEv4BX4YKDwQAAAAE"]
[Sun Apr 26 04:01:07.107117 2026] [:error] [pid 64632:tid 64691] [client 20.203.174.117:4912] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "ae0dgwBZcErGHLTsluLCuAAAANA"]
[Sun Apr 26 04:01:07.686380 2026] [:error] [pid 64178:tid 64405] [client 20.203.174.117:4745] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "ae0dgzj8Yzmn87N-mdYukgAAAJg"]
[Sun Apr 26 04:01:08.317535 2026] [:error] [pid 64178:tid 64386] [client 20.203.174.117:4953] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "ae0dhDj8Yzmn87N-mdYulgAAAIY"]
[Sun Apr 26 04:01:08.862216 2026] [:error] [pid 64177:tid 64365] [client 20.203.174.117:52925] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "ae0dhEdCiRn77Twvcom69AAAAEw"]
[Sun Apr 26 04:01:09.715012 2026] [:error] [pid 64176:tid 64295] [client 20.203.174.117:48521] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "ae0dhTNSdAwEv4BX4YKDxAAAAAI"]
[Sun Apr 26 04:01:10.351645 2026] [:error] [pid 64177:tid 64353] [client 20.203.174.117:4919] [client 20.203.174.117] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "ae0dhkdCiRn77Twvcom69gAAAEA"]
[Sun Apr 26 09:27:00.628966 2026] [:error] [pid 22573:tid 22616] [client 20.216.176.246:59244] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/G-In.php"] [unique_id "ae1p5HB3EmQlD4yKUt9IYAAAAYk"]
[Sun Apr 26 09:27:01.530636 2026] [:error] [pid 22573:tid 22624] [client 20.216.176.246:46791] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/G-In.php"] [unique_id "ae1p5XB3EmQlD4yKUt9IYQAAAZE"]
[Sun Apr 26 09:27:02.191920 2026] [:error] [pid 8491:tid 8510] [client 20.216.176.246:46836] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/G-In.php"] [unique_id "ae1p5iq7I7e6CJooQM25_wAAAMs"]
[Sun Apr 26 09:27:02.855730 2026] [:error] [pid 22573:tid 22630] [client 20.216.176.246:3441] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/G-In.php"] [unique_id "ae1p5nB3EmQlD4yKUt9IZwAAAZc"]
[Sun Apr 26 09:27:03.551499 2026] [:error] [pid 8390:tid 8470] [client 20.216.176.246:56712] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aj11.php"] [unique_id "ae1p54GPtFK_i9p5yxReFAAAAJM"]
[Sun Apr 26 09:27:04.124983 2026] [:error] [pid 8390:tid 8465] [client 20.216.176.246:56744] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aj11.php"] [unique_id "ae1p6IGPtFK_i9p5yxReGgAAAI4"]
[Sun Apr 26 09:27:04.876288 2026] [:error] [pid 8390:tid 8452] [client 20.216.176.246:37835] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aj11.php"] [unique_id "ae1p6IGPtFK_i9p5yxReHgAAAIE"]
[Sun Apr 26 09:27:05.797461 2026] [:error] [pid 8390:tid 8475] [client 20.216.176.246:39738] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aj11.php"] [unique_id "ae1p6YGPtFK_i9p5yxReHwAAAJg"]
[Sun Apr 26 09:27:06.751119 2026] [:error] [pid 8390:tid 8472] [client 20.216.176.246:39734] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tires.php"] [unique_id "ae1p6oGPtFK_i9p5yxReJAAAAJU"]
[Sun Apr 26 09:27:07.781726 2026] [:error] [pid 22572:tid 22585] [client 20.216.176.246:46843] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tires.php"] [unique_id "ae1p69XOViWCFU-pZzCTQwAAAUc"]
[Sun Apr 26 09:27:08.769033 2026] [:error] [pid 8390:tid 8472] [client 20.216.176.246:46272] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tires.php"] [unique_id "ae1p7IGPtFK_i9p5yxReNAAAAJU"]
[Sun Apr 26 09:27:09.579962 2026] [:error] [pid 8390:tid 8458] [client 20.216.176.246:60410] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tires.php"] [unique_id "ae1p7YGPtFK_i9p5yxReOAAAAIc"]
[Sun Apr 26 09:27:10.438505 2026] [:error] [pid 22572:tid 22597] [client 20.216.176.246:54329] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xroot.php"] [unique_id "ae1p7tXOViWCFU-pZzCTTAAAAVM"]
[Sun Apr 26 09:27:11.894961 2026] [:error] [pid 22573:tid 22607] [client 20.216.176.246:58404] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xroot.php"] [unique_id "ae1p73B3EmQlD4yKUt9IegAAAYE"]
[Sun Apr 26 09:27:14.159987 2026] [:error] [pid 13137:tid 13157] [client 20.216.176.246:39707] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xroot.php"] [unique_id "ae1p8t0RB4J0o4h5neH_twAAAhA"]
[Sun Apr 26 09:27:17.274701 2026] [:error] [pid 22573:tid 22629] [client 20.216.176.246:46816] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xroot.php"] [unique_id "ae1p9XB3EmQlD4yKUt9IjgAAAZY"]
[Sun Apr 26 09:27:18.643433 2026] [:error] [pid 8383:tid 8412] [client 20.216.176.246:37887] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tea.php"] [unique_id "ae1p9tFa2S3EsATMdWPZKAAAAA8"]
[Sun Apr 26 09:27:20.680329 2026] [:error] [pid 22573:tid 22630] [client 20.216.176.246:3424] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tea.php"] [unique_id "ae1p-HB3EmQlD4yKUt9InAAAAZc"]
[Sun Apr 26 09:27:21.869298 2026] [:error] [pid 8385:tid 8428] [client 20.216.176.246:54316] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tea.php"] [unique_id "ae1p-TOy7_J84Wx3-oyCagAAAEQ"]
[Sun Apr 26 09:27:22.878282 2026] [:error] [pid 8385:tid 8438] [client 20.216.176.246:39767] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tea.php"] [unique_id "ae1p-jOy7_J84Wx3-oyCawAAAE4"]
[Sun Apr 26 09:27:23.549137 2026] [:error] [pid 22572:tid 22580] [client 20.216.176.246:58378] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uwu.php"] [unique_id "ae1p-9XOViWCFU-pZzCTYQAAAUI"]
[Sun Apr 26 09:27:24.112637 2026] [:error] [pid 16515:tid 16528] [client 20.216.176.246:56752] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uwu.php"] [unique_id "ae1p_FtDrUmgHSvpuLzgXAAAAko"]
[Sun Apr 26 09:27:24.810338 2026] [:error] [pid 13197:tid 13256] [client 20.216.176.246:57828] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uwu.php"] [unique_id "ae1p_N3kktFKdSxTrBuf2AAAAtg"]
[Sun Apr 26 09:27:25.720722 2026] [:error] [pid 8383:tid 8408] [client 20.216.176.246:60381] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uwu.php"] [unique_id "ae1p_dFa2S3EsATMdWPZKwAAAAs"]
[Sun Apr 26 09:27:27.383835 2026] [:error] [pid 13137:tid 13153] [client 20.216.176.246:52919] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aios-bootstrap.php"] [unique_id "ae1p_90RB4J0o4h5neH_xwAAAgw"]
[Sun Apr 26 09:27:29.306289 2026] [:error] [pid 16574:tid 16643] [client 20.216.176.246:3423] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aios-bootstrap.php"] [unique_id "ae1qAX5MsX8wRQr99nYG1wAAA1g"]
[Sun Apr 26 09:27:31.431015 2026] [:error] [pid 8385:tid 8447] [client 20.216.176.246:54280] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aios-bootstrap.php"] [unique_id "ae1qAzOy7_J84Wx3-oyCeAAAAFc"]
[Sun Apr 26 09:27:33.471577 2026] [:error] [pid 13137:tid 13140] [client 20.216.176.246:3431] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aios-bootstrap.php"] [unique_id "ae1qBd0RB4J0o4h5neH_zQAAAgA"]
[Sun Apr 26 09:27:34.220372 2026] [:error] [pid 8385:tid 8439] [client 20.216.176.246:39793] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/one.php"] [unique_id "ae1qBjOy7_J84Wx3-oyCfgAAAE8"]
[Sun Apr 26 09:27:35.180528 2026] [:error] [pid 8390:tid 8466] [client 20.216.176.246:56751] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/one.php"] [unique_id "ae1qB4GPtFK_i9p5yxReUwAAAI8"]
[Sun Apr 26 09:27:36.378104 2026] [:error] [pid 8390:tid 8469] [client 20.216.176.246:39698] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/one.php"] [unique_id "ae1qCIGPtFK_i9p5yxReVwAAAJI"]
[Sun Apr 26 09:27:37.649776 2026] [:error] [pid 22572:tid 22592] [client 20.216.176.246:58405] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/one.php"] [unique_id "ae1qCdXOViWCFU-pZzCTfgAAAU4"]
[Sun Apr 26 09:27:39.497053 2026] [:error] [pid 8390:tid 8454] [client 20.216.176.246:46831] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/006.php"] [unique_id "ae1qC4GPtFK_i9p5yxReWQAAAIM"]
[Sun Apr 26 09:27:41.307944 2026] [:error] [pid 8390:tid 8472] [client 20.216.176.246:37836] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/006.php"] [unique_id "ae1qDYGPtFK_i9p5yxReXAAAAJU"]
[Sun Apr 26 09:27:42.423544 2026] [:error] [pid 22572:tid 22600] [client 20.216.176.246:52878] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/006.php"] [unique_id "ae1qDtXOViWCFU-pZzCThwAAAVY"]
[Sun Apr 26 09:27:43.366270 2026] [:error] [pid 13137:tid 13153] [client 20.216.176.246:59261] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/006.php"] [unique_id "ae1qD90RB4J0o4h5neH_4wAAAgw"]
[Sun Apr 26 09:27:43.953927 2026] [:error] [pid 8390:tid 8458] [client 20.216.176.246:58371] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kikikoko.php"] [unique_id "ae1qD4GPtFK_i9p5yxReYQAAAIc"]
[Sun Apr 26 09:27:44.648687 2026] [:error] [pid 16515:tid 16537] [client 20.216.176.246:59201] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kikikoko.php"] [unique_id "ae1qEFtDrUmgHSvpuLzgaAAAAlM"]
[Sun Apr 26 09:27:45.445443 2026] [:error] [pid 8385:tid 8438] [client 20.216.176.246:3419] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kikikoko.php"] [unique_id "ae1qETOy7_J84Wx3-oyCiAAAAE4"]
[Sun Apr 26 09:27:46.089717 2026] [:error] [pid 22572:tid 22600] [client 20.216.176.246:59202] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kikikoko.php"] [unique_id "ae1qEtXOViWCFU-pZzCTkAAAAVY"]
[Sun Apr 26 09:27:46.833967 2026] [:error] [pid 8390:tid 8464] [client 20.216.176.246:39720] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2026w.php"] [unique_id "ae1qEoGPtFK_i9p5yxReawAAAI0"]
[Sun Apr 26 09:27:47.460595 2026] [:error] [pid 8385:tid 8445] [client 20.216.176.246:46829] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2026w.php"] [unique_id "ae1qEzOy7_J84Wx3-oyCkgAAAFU"]
[Sun Apr 26 09:27:48.206157 2026] [:error] [pid 22572:tid 22594] [client 20.216.176.246:39807] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2026w.php"] [unique_id "ae1qFNXOViWCFU-pZzCTkQAAAVA"]
[Sun Apr 26 09:27:48.847025 2026] [:error] [pid 22572:tid 22592] [client 20.216.176.246:59258] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2026w.php"] [unique_id "ae1qFNXOViWCFU-pZzCTkgAAAU4"]
[Sun Apr 26 09:27:49.543582 2026] [:error] [pid 8390:tid 8461] [client 20.216.176.246:46813] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/11.php"] [unique_id "ae1qFYGPtFK_i9p5yxRefgAAAIo"]
[Sun Apr 26 09:27:50.351526 2026] [:error] [pid 13137:tid 13156] [client 20.216.176.246:3400] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/11.php"] [unique_id "ae1qFt0RB4J0o4h5neH_6wAAAg8"]
[Sun Apr 26 09:27:51.050930 2026] [:error] [pid 8390:tid 8468] [client 20.216.176.246:3706] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/11.php"] [unique_id "ae1qF4GPtFK_i9p5yxRehwAAAJE"]
[Sun Apr 26 09:27:51.894745 2026] [:error] [pid 22572:tid 22598] [client 20.216.176.246:37872] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/11.php"] [unique_id "ae1qF9XOViWCFU-pZzCTmQAAAVQ"]
[Sun Apr 26 09:27:52.990378 2026] [:error] [pid 8390:tid 8466] [client 20.216.176.246:57821] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amxloxxr.php"] [unique_id "ae1qGIGPtFK_i9p5yxRejQAAAI8"]
[Sun Apr 26 09:27:54.137085 2026] [:error] [pid 22573:tid 22606] [client 20.216.176.246:46819] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amxloxxr.php"] [unique_id "ae1qGnB3EmQlD4yKUt9I1AAAAYA"]
[Sun Apr 26 09:27:55.133525 2026] [:error] [pid 22573:tid 22608] [client 20.216.176.246:46329] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amxloxxr.php"] [unique_id "ae1qG3B3EmQlD4yKUt9I3AAAAYI"]
[Sun Apr 26 09:27:56.653215 2026] [:error] [pid 8390:tid 8472] [client 20.216.176.246:39711] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amxloxxr.php"] [unique_id "ae1qHIGPtFK_i9p5yxReowAAAJU"]
[Sun Apr 26 09:27:57.395324 2026] [:error] [pid 8390:tid 8463] [client 20.216.176.246:52906] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/qhupyoon.php"] [unique_id "ae1qHYGPtFK_i9p5yxRerQAAAIw"]
[Sun Apr 26 09:27:57.989607 2026] [:error] [pid 13197:tid 13255] [client 20.216.176.246:54290] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/qhupyoon.php"] [unique_id "ae1qHd3kktFKdSxTrBuf8QAAAtc"]
[Sun Apr 26 09:27:58.625727 2026] [:error] [pid 22573:tid 22619] [client 20.216.176.246:3414] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/qhupyoon.php"] [unique_id "ae1qHnB3EmQlD4yKUt9I4QAAAYw"]
[Sun Apr 26 09:27:59.567911 2026] [:error] [pid 8385:tid 8434] [client 20.216.176.246:60355] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/qhupyoon.php"] [unique_id "ae1qHzOy7_J84Wx3-oyCowAAAEo"]
[Sun Apr 26 09:28:08.837102 2026] [:error] [pid 16515:tid 16520] [client 20.216.176.246:58385] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wpxl.php"] [unique_id "ae1qKFtDrUmgHSvpuLzgiQAAAkI"]
[Sun Apr 26 09:28:11.318352 2026] [:error] [pid 22572:tid 22597] [client 20.216.176.246:3446] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wpxl.php"] [unique_id "ae1qK9XOViWCFU-pZzCTwgAAAVM"]
[Sun Apr 26 09:28:12.915289 2026] [:error] [pid 22573:tid 22625] [client 20.216.176.246:39742] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wpxl.php"] [unique_id "ae1qLHB3EmQlD4yKUt9I-QAAAZI"]
[Sun Apr 26 09:28:15.580552 2026] [:error] [pid 13197:tid 13233] [client 20.216.176.246:52881] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wpxl.php"] [unique_id "ae1qL93kktFKdSxTrBugBwAAAsI"]
[Sun Apr 26 09:28:16.757423 2026] [:error] [pid 8383:tid 8398] [client 20.216.176.246:52921] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admlo.php"] [unique_id "ae1qMNFa2S3EsATMdWPZSAAAAAE"]
[Sun Apr 26 09:28:19.388802 2026] [:error] [pid 13137:tid 13162] [client 20.216.176.246:46299] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admlo.php"] [unique_id "ae1qM90RB4J0o4h5neEADwAAAhU"]
[Sun Apr 26 09:28:20.210172 2026] [:error] [pid 13197:tid 13246] [client 20.216.176.246:46846] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admlo.php"] [unique_id "ae1qNN3kktFKdSxTrBugHAAAAs4"]
[Sun Apr 26 09:28:21.686983 2026] [:error] [pid 16515:tid 16541] [client 20.216.176.246:54323] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admlo.php"] [unique_id "ae1qNVtDrUmgHSvpuLzgnAAAAlc"]
[Sun Apr 26 09:28:23.293375 2026] [:error] [pid 8491:tid 8503] [client 20.216.176.246:54283] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f5.php"] [unique_id "ae1qNyq7I7e6CJooQM26KAAAAMQ"]
[Sun Apr 26 09:28:25.012957 2026] [:error] [pid 8385:tid 8440] [client 20.216.176.246:3701] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f5.php"] [unique_id "ae1qOTOy7_J84Wx3-oyCwAAAAFA"]
[Sun Apr 26 09:28:26.791269 2026] [:error] [pid 8390:tid 8451] [client 20.216.176.246:52907] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f5.php"] [unique_id "ae1qOoGPtFK_i9p5yxRe5AAAAIA"]
[Sun Apr 26 09:28:29.934967 2026] [:error] [pid 8390:tid 8466] [client 20.216.176.246:39739] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f5.php"] [unique_id "ae1qPYGPtFK_i9p5yxRe7AAAAI8"]
[Sun Apr 26 09:28:31.607297 2026] [:error] [pid 8390:tid 8459] [client 20.216.176.246:49586] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ptanf.php"] [unique_id "ae1qP4GPtFK_i9p5yxRe9QAAAIg"]
[Sun Apr 26 09:28:32.735705 2026] [:error] [pid 16515:tid 16537] [client 20.216.176.246:3444] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ptanf.php"] [unique_id "ae1qQFtDrUmgHSvpuLzgrgAAAlM"]
[Sun Apr 26 09:28:33.692228 2026] [:error] [pid 8390:tid 8471] [client 20.216.176.246:37875] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ptanf.php"] [unique_id "ae1qQYGPtFK_i9p5yxRe-gAAAJQ"]
[Sun Apr 26 09:28:34.922796 2026] [:error] [pid 16515:tid 16540] [client 20.216.176.246:52876] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ptanf.php"] [unique_id "ae1qQltDrUmgHSvpuLzgswAAAlY"]
[Sun Apr 26 09:28:35.924833 2026] [:error] [pid 16515:tid 16525] [client 20.216.176.246:57840] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ctex1.php"] [unique_id "ae1qQ1tDrUmgHSvpuLzgtAAAAkc"]
[Sun Apr 26 09:28:37.606429 2026] [:error] [pid 22573:tid 22607] [client 20.216.176.246:54297] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ctex1.php"] [unique_id "ae1qRXB3EmQlD4yKUt9I_wAAAYE"]
[Sun Apr 26 09:28:39.088328 2026] [:error] [pid 8390:tid 8464] [client 20.216.176.246:39740] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ctex1.php"] [unique_id "ae1qR4GPtFK_i9p5yxRe_gAAAI0"]
[Sun Apr 26 09:28:40.102223 2026] [:error] [pid 13137:tid 13165] [client 20.216.176.246:46804] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ctex1.php"] [unique_id "ae1qSN0RB4J0o4h5neEAagAAAhg"]
[Sun Apr 26 09:28:40.961120 2026] [:error] [pid 16515:tid 16529] [client 20.216.176.246:52870] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gelio1.php"] [unique_id "ae1qSFtDrUmgHSvpuLzgugAAAks"]
[Sun Apr 26 09:28:41.862373 2026] [:error] [pid 8390:tid 8455] [client 20.216.176.246:3653] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gelio1.php"] [unique_id "ae1qSYGPtFK_i9p5yxRfBwAAAIQ"]
[Sun Apr 26 09:28:42.702200 2026] [:error] [pid 13137:tid 13155] [client 20.216.176.246:52916] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gelio1.php"] [unique_id "ae1qSt0RB4J0o4h5neEAeQAAAg4"]
[Sun Apr 26 09:28:43.312946 2026] [:error] [pid 13137:tid 13154] [client 20.216.176.246:51676] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gelio1.php"] [unique_id "ae1qS90RB4J0o4h5neEAgAAAAg0"]
[Sun Apr 26 09:28:44.556342 2026] [:error] [pid 13197:tid 13232] [client 20.216.176.246:49557] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "ae1qTN3kktFKdSxTrBugQgAAAsE"]
[Sun Apr 26 09:28:45.359291 2026] [:error] [pid 8390:tid 8474] [client 20.216.176.246:56735] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "ae1qTYGPtFK_i9p5yxRfDAAAAJc"]
[Sun Apr 26 09:28:45.956094 2026] [:error] [pid 8491:tid 8518] [client 20.216.176.246:41140] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "ae1qTSq7I7e6CJooQM26PgAAANM"]
[Sun Apr 26 09:28:46.881186 2026] [:error] [pid 16515:tid 16528] [client 20.216.176.246:46820] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "ae1qTltDrUmgHSvpuLzgyQAAAko"]
[Sun Apr 26 09:28:47.570685 2026] [:error] [pid 16515:tid 16540] [client 20.216.176.246:9453] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/w.php"] [unique_id "ae1qT1tDrUmgHSvpuLzgzgAAAlY"]
[Sun Apr 26 09:28:48.534473 2026] [:error] [pid 13137:tid 13146] [client 20.216.176.246:57826] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/w.php"] [unique_id "ae1qUN0RB4J0o4h5neEAlAAAAgY"]
[Sun Apr 26 09:28:49.427945 2026] [:error] [pid 8383:tid 8420] [client 20.216.176.246:46789] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/w.php"] [unique_id "ae1qUdFa2S3EsATMdWPZWgAAABc"]
[Sun Apr 26 09:28:50.254224 2026] [:error] [pid 8390:tid 8461] [client 20.216.176.246:49557] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/w.php"] [unique_id "ae1qUoGPtFK_i9p5yxRfGwAAAIo"]
[Sun Apr 26 09:28:51.395532 2026] [:error] [pid 8491:tid 8521] [client 20.216.176.246:45022] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/axe.php"] [unique_id "ae1qUyq7I7e6CJooQM26SQAAANY"]
[Sun Apr 26 09:28:53.119917 2026] [:error] [pid 16515:tid 16528] [client 20.216.176.246:7216] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/axe.php"] [unique_id "ae1qVVtDrUmgHSvpuLzg1AAAAko"]
[Sun Apr 26 09:28:53.994786 2026] [:error] [pid 16574:tid 16643] [client 20.216.176.246:9448] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/axe.php"] [unique_id "ae1qVX5MsX8wRQr99nYHDwAAA1g"]
[Sun Apr 26 09:28:54.817432 2026] [:error] [pid 13137:tid 13144] [client 20.216.176.246:9461] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/axe.php"] [unique_id "ae1qVt0RB4J0o4h5neEAsAAAAgQ"]
[Sun Apr 26 09:28:55.597107 2026] [:error] [pid 8491:tid 8517] [client 20.216.176.246:49544] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/index0.php"] [unique_id "ae1qVyq7I7e6CJooQM26VgAAANI"]
[Sun Apr 26 09:28:56.442170 2026] [:error] [pid 16515:tid 16534] [client 20.216.176.246:51326] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/index0.php"] [unique_id "ae1qWFtDrUmgHSvpuLzg2QAAAlA"]
[Sun Apr 26 09:28:57.412297 2026] [:error] [pid 16515:tid 16519] [client 20.216.176.246:7182] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/index0.php"] [unique_id "ae1qWVtDrUmgHSvpuLzg2wAAAkE"]
[Sun Apr 26 09:28:58.194738 2026] [:error] [pid 8491:tid 8509] [client 20.216.176.246:39257] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/index0.php"] [unique_id "ae1qWiq7I7e6CJooQM26XwAAAMo"]
[Sun Apr 26 09:28:58.818630 2026] [:error] [pid 8491:tid 8503] [client 20.216.176.246:37012] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-01ul.php"] [unique_id "ae1qWiq7I7e6CJooQM26YAAAAMQ"]
[Sun Apr 26 09:28:59.713408 2026] [:error] [pid 13197:tid 13248] [client 20.216.176.246:54661] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-01ul.php"] [unique_id "ae1qW93kktFKdSxTrBugSwAAAtA"]
[Sun Apr 26 09:29:00.473580 2026] [:error] [pid 8390:tid 8459] [client 20.216.176.246:9462] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-01ul.php"] [unique_id "ae1qXIGPtFK_i9p5yxRfKwAAAIg"]
[Sun Apr 26 09:29:01.101571 2026] [:error] [pid 8390:tid 8474] [client 20.216.176.246:37004] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-01ul.php"] [unique_id "ae1qXYGPtFK_i9p5yxRfMAAAAJc"]
[Sun Apr 26 09:29:01.670532 2026] [:error] [pid 8491:tid 8509] [client 20.216.176.246:41129] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/e3.php"] [unique_id "ae1qXSq7I7e6CJooQM26ZwAAAMo"]
[Sun Apr 26 09:29:02.270317 2026] [:error] [pid 13197:tid 13247] [client 20.216.176.246:51318] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/e3.php"] [unique_id "ae1qXt3kktFKdSxTrBugTQAAAs8"]
[Sun Apr 26 09:29:02.911517 2026] [:error] [pid 13137:tid 13160] [client 20.216.176.246:61025] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/e3.php"] [unique_id "ae1qXt0RB4J0o4h5neEA1gAAAhM"]
[Sun Apr 26 09:29:03.545904 2026] [:error] [pid 8390:tid 8463] [client 20.216.176.246:7221] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/e3.php"] [unique_id "ae1qX4GPtFK_i9p5yxRfMwAAAIw"]
[Sun Apr 26 09:29:04.531003 2026] [:error] [pid 8491:tid 8512] [client 20.216.176.246:56019] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fkohd.php"] [unique_id "ae1qYCq7I7e6CJooQM26bwAAAM0"]
[Sun Apr 26 09:29:05.203418 2026] [:error] [pid 13197:tid 13244] [client 20.216.176.246:35609] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fkohd.php"] [unique_id "ae1qYd3kktFKdSxTrBugTwAAAsw"]
[Sun Apr 26 09:29:05.928139 2026] [:error] [pid 16515:tid 16530] [client 20.216.176.246:35604] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fkohd.php"] [unique_id "ae1qYVtDrUmgHSvpuLzg6AAAAkw"]
[Sun Apr 26 09:29:07.003206 2026] [:error] [pid 8390:tid 8458] [client 20.216.176.246:44345] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fkohd.php"] [unique_id "ae1qY4GPtFK_i9p5yxRfPQAAAIc"]
[Sun Apr 26 09:29:16.196115 2026] [:error] [pid 8390:tid 8467] [client 20.216.176.246:35614] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-zx.php"] [unique_id "ae1qbIGPtFK_i9p5yxRfeQAAAJA"]
[Sun Apr 26 09:29:16.947406 2026] [:error] [pid 13197:tid 13250] [client 20.216.176.246:63800] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-zx.php"] [unique_id "ae1qbN3kktFKdSxTrBugUwAAAtI"]
[Sun Apr 26 09:29:17.650928 2026] [:error] [pid 22573:tid 22623] [client 20.216.176.246:43691] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-zx.php"] [unique_id "ae1qbXB3EmQlD4yKUt9JLAAAAZA"]
[Sun Apr 26 09:29:18.454593 2026] [:error] [pid 8390:tid 8459] [client 20.216.176.246:63798] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-zx.php"] [unique_id "ae1qboGPtFK_i9p5yxRffgAAAIg"]
[Sun Apr 26 09:29:20.018610 2026] [:error] [pid 13137:tid 13160] [client 20.216.176.246:32714] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/000.php"] [unique_id "ae1qcN0RB4J0o4h5neEA_QAAAhM"]
[Sun Apr 26 09:29:22.954971 2026] [:error] [pid 22573:tid 22630] [client 20.216.176.246:41801] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/000.php"] [unique_id "ae1qcnB3EmQlD4yKUt9JMgAAAZc"]
[Sun Apr 26 09:29:24.062992 2026] [:error] [pid 16574:tid 16637] [client 20.216.176.246:11187] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/000.php"] [unique_id "ae1qdH5MsX8wRQr99nYHKwAAA1U"]
[Sun Apr 26 09:29:25.110453 2026] [:error] [pid 22573:tid 22607] [client 20.216.176.246:46329] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/000.php"] [unique_id "ae1qdXB3EmQlD4yKUt9JNwAAAYE"]
[Sun Apr 26 09:29:26.767300 2026] [:error] [pid 22572:tid 22589] [client 20.216.176.246:3832] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mar.php"] [unique_id "ae1qdtXOViWCFU-pZzCUFwAAAUs"]
[Sun Apr 26 09:29:28.783518 2026] [:error] [pid 13137:tid 13153] [client 20.216.176.246:63853] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mar.php"] [unique_id "ae1qeN0RB4J0o4h5neEBCgAAAgw"]
[Sun Apr 26 09:29:32.073908 2026] [:error] [pid 22573:tid 22615] [client 20.216.176.246:54732] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mar.php"] [unique_id "ae1qfHB3EmQlD4yKUt9JUwAAAYg"]
[Sun Apr 26 09:29:34.201107 2026] [:error] [pid 8383:tid 8403] [client 20.216.176.246:37796] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mar.php"] [unique_id "ae1qftFa2S3EsATMdWPZZQAAAAY"]
[Sun Apr 26 09:29:37.366313 2026] [:error] [pid 13197:tid 13248] [client 20.216.176.246:54770] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/iov.php"] [unique_id "ae1qgd3kktFKdSxTrBugaAAAAtA"]
[Sun Apr 26 09:29:43.227460 2026] [:error] [pid 8383:tid 8420] [client 20.216.176.246:40320] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/iov.php"] [unique_id "ae1qh9Fa2S3EsATMdWPZaQAAABc"]
[Sun Apr 26 09:29:47.333704 2026] [:error] [pid 22572:tid 22584] [client 20.216.176.246:3604] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/iov.php"] [unique_id "ae1qi9XOViWCFU-pZzCUOgAAAUY"]
[Sun Apr 26 09:29:50.885387 2026] [:error] [pid 8383:tid 8399] [client 20.216.176.246:8561] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jodohghi.php"] [unique_id "ae1qjtFa2S3EsATMdWPZdAAAAAI"]
[Sun Apr 26 09:29:53.109108 2026] [:error] [pid 8390:tid 8468] [client 20.216.176.246:32001] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jodohghi.php"] [unique_id "ae1qkYGPtFK_i9p5yxRfpwAAAJE"]
[Sun Apr 26 09:29:54.353859 2026] [:error] [pid 8390:tid 8462] [client 20.216.176.246:48270] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jodohghi.php"] [unique_id "ae1qkoGPtFK_i9p5yxRfsQAAAIs"]
[Sun Apr 26 09:29:56.215264 2026] [:error] [pid 8390:tid 8466] [client 20.216.176.246:54133] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jodohghi.php"] [unique_id "ae1qlIGPtFK_i9p5yxRfuwAAAI8"]
[Sun Apr 26 09:29:58.274064 2026] [:error] [pid 8385:tid 8430] [client 20.216.176.246:54094] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rendi59.php"] [unique_id "ae1qljOy7_J84Wx3-oyDBQAAAEY"]
[Sun Apr 26 09:30:00.853003 2026] [:error] [pid 22572:tid 22596] [client 20.216.176.246:48279] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rendi59.php"] [unique_id "ae1qmNXOViWCFU-pZzCUZAAAAVI"]
[Sun Apr 26 09:30:02.683368 2026] [:error] [pid 13197:tid 13235] [client 20.216.176.246:41204] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rendi59.php"] [unique_id "ae1qmt3kktFKdSxTrBuggQAAAsQ"]
[Sun Apr 26 09:30:05.394265 2026] [:error] [pid 8390:tid 8463] [client 20.216.176.246:15924] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rendi59.php"] [unique_id "ae1qnYGPtFK_i9p5yxRfzQAAAIw"]
[Sun Apr 26 09:30:06.360731 2026] [:error] [pid 8390:tid 8458] [client 20.216.176.246:41158] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rivasqup.php"] [unique_id "ae1qnoGPtFK_i9p5yxRf0gAAAIc"]
[Sun Apr 26 09:30:07.232368 2026] [:error] [pid 8390:tid 8465] [client 20.216.176.246:52826] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rivasqup.php"] [unique_id "ae1qn4GPtFK_i9p5yxRf2QAAAI4"]
[Sun Apr 26 09:30:08.071547 2026] [:error] [pid 8390:tid 8471] [client 20.216.176.246:37119] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rivasqup.php"] [unique_id "ae1qoIGPtFK_i9p5yxRf4wAAAJQ"]
[Sun Apr 26 09:30:09.348188 2026] [:error] [pid 8390:tid 8472] [client 20.216.176.246:54116] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/rivasqup.php"] [unique_id "ae1qoYGPtFK_i9p5yxRf6wAAAJU"]
[Sun Apr 26 09:30:10.246106 2026] [:error] [pid 22572:tid 22595] [client 20.216.176.246:65142] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mga.php"] [unique_id "ae1qotXOViWCFU-pZzCUhgAAAVE"]
[Sun Apr 26 09:30:11.482990 2026] [:error] [pid 13137:tid 13161] [client 20.216.176.246:19084] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mga.php"] [unique_id "ae1qo90RB4J0o4h5neEBVwAAAhQ"]
[Sun Apr 26 09:30:13.024666 2026] [:error] [pid 8390:tid 8459] [client 20.216.176.246:38420] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mga.php"] [unique_id "ae1qpYGPtFK_i9p5yxRf_gAAAIg"]
[Sun Apr 26 09:30:14.320902 2026] [:error] [pid 8390:tid 8452] [client 20.216.176.246:61455] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mga.php"] [unique_id "ae1qpoGPtFK_i9p5yxRgCAAAAIE"]
[Sun Apr 26 09:30:22.683302 2026] [:error] [pid 8390:tid 8454] [client 20.216.176.246:60930] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lov.php"] [unique_id "ae1qroGPtFK_i9p5yxRgPgAAAIM"]
[Sun Apr 26 09:30:25.102643 2026] [:error] [pid 16515:tid 16531] [client 20.216.176.246:48296] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lov.php"] [unique_id "ae1qsVtDrUmgHSvpuLzhHwAAAk0"]
[Sun Apr 26 09:30:27.304413 2026] [:error] [pid 8390:tid 8454] [client 20.216.176.246:15154] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lov.php"] [unique_id "ae1qs4GPtFK_i9p5yxRgTQAAAIM"]
[Sun Apr 26 09:30:31.004701 2026] [:error] [pid 22573:tid 22620] [client 20.216.176.246:41190] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lov.php"] [unique_id "ae1qt3B3EmQlD4yKUt9JjgAAAY0"]
[Sun Apr 26 09:30:34.018201 2026] [:error] [pid 13137:tid 13147] [client 20.216.176.246:61465] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/knw.php"] [unique_id "ae1qut0RB4J0o4h5neEBbAAAAgc"]
[Sun Apr 26 09:30:35.736316 2026] [:error] [pid 8390:tid 8468] [client 20.216.176.246:61481] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/knw.php"] [unique_id "ae1qu4GPtFK_i9p5yxRgegAAAJE"]
[Sun Apr 26 09:30:36.899588 2026] [:error] [pid 13137:tid 13143] [client 20.216.176.246:46222] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/knw.php"] [unique_id "ae1qvN0RB4J0o4h5neEBbgAAAgM"]
[Sun Apr 26 09:30:38.003199 2026] [:error] [pid 8390:tid 8458] [client 20.216.176.246:52802] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/knw.php"] [unique_id "ae1qvoGPtFK_i9p5yxRgiQAAAIc"]
[Sun Apr 26 09:30:39.504384 2026] [:error] [pid 8491:tid 8516] [client 20.216.176.246:52833] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "ae1qvyq7I7e6CJooQM26ygAAANE"]
[Sun Apr 26 09:30:40.610711 2026] [:error] [pid 16515:tid 16540] [client 20.216.176.246:29694] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "ae1qwFtDrUmgHSvpuLzhLAAAAlY"]
[Sun Apr 26 09:30:42.497902 2026] [:error] [pid 8390:tid 8470] [client 20.216.176.246:46265] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "ae1qwoGPtFK_i9p5yxRglQAAAJM"]
[Sun Apr 26 09:30:44.799177 2026] [:error] [pid 8390:tid 8465] [client 20.216.176.246:61443] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "ae1qxIGPtFK_i9p5yxRgnwAAAI4"]
[Sun Apr 26 09:30:47.123409 2026] [:error] [pid 13137:tid 13159] [client 20.216.176.246:46225] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jlex.php"] [unique_id "ae1qx90RB4J0o4h5neEBgAAAAhI"]
[Sun Apr 26 09:30:48.159339 2026] [:error] [pid 8390:tid 8453] [client 20.216.176.246:48295] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jlex.php"] [unique_id "ae1qyIGPtFK_i9p5yxRgqwAAAII"]
[Sun Apr 26 09:30:48.840648 2026] [:error] [pid 13137:tid 13157] [client 20.216.176.246:54094] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jlex.php"] [unique_id "ae1qyN0RB4J0o4h5neEBggAAAhA"]
[Sun Apr 26 09:30:49.590669 2026] [:error] [pid 8390:tid 8473] [client 20.216.176.246:52855] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jlex.php"] [unique_id "ae1qyYGPtFK_i9p5yxRgsgAAAJY"]
[Sun Apr 26 09:30:52.376989 2026] [:error] [pid 8390:tid 8474] [client 20.216.176.246:63837] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-k7djufwez2.php"] [unique_id "ae1qzIGPtFK_i9p5yxRgvgAAAJc"]
[Sun Apr 26 09:30:55.012286 2026] [:error] [pid 22573:tid 22615] [client 20.216.176.246:38426] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-k7djufwez2.php"] [unique_id "ae1qz3B3EmQlD4yKUt9JtgAAAYg"]
[Sun Apr 26 09:30:56.289839 2026] [:error] [pid 8385:tid 8447] [client 20.216.176.246:52839] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-k7djufwez2.php"] [unique_id "ae1q0DOy7_J84Wx3-oyDRgAAAFc"]
[Sun Apr 26 09:30:58.042774 2026] [:error] [pid 16515:tid 16539] [client 20.216.176.246:46208] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-k7djufwez2.php"] [unique_id "ae1q0ltDrUmgHSvpuLzhOwAAAlU"]
[Sun Apr 26 09:30:59.152828 2026] [:error] [pid 8390:tid 8459] [client 20.216.176.246:48315] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-tiroto.php"] [unique_id "ae1q04GPtFK_i9p5yxRgwgAAAIg"]
[Sun Apr 26 09:31:00.472784 2026] [:error] [pid 8383:tid 8398] [client 20.216.176.246:19128] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-tiroto.php"] [unique_id "ae1q1NFa2S3EsATMdWPZlwAAAAE"]
[Sun Apr 26 09:31:01.415633 2026] [:error] [pid 8390:tid 8456] [client 20.216.176.246:65141] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-tiroto.php"] [unique_id "ae1q1YGPtFK_i9p5yxRgyQAAAIU"]
[Sun Apr 26 09:31:03.336242 2026] [:error] [pid 22572:tid 22601] [client 20.216.176.246:38427] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-tiroto.php"] [unique_id "ae1q19XOViWCFU-pZzCU7wAAAVc"]
[Sun Apr 26 09:31:05.391116 2026] [:error] [pid 8491:tid 8511] [client 20.216.176.246:8560] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/son.php"] [unique_id "ae1q2Sq7I7e6CJooQM26zAAAAMw"]
[Sun Apr 26 09:31:06.932879 2026] [:error] [pid 8385:tid 8439] [client 20.216.176.246:61500] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/son.php"] [unique_id "ae1q2jOy7_J84Wx3-oyDXQAAAE8"]
[Sun Apr 26 09:31:08.180605 2026] [:error] [pid 13137:tid 13160] [client 20.216.176.246:46232] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/son.php"] [unique_id "ae1q3N0RB4J0o4h5neEBnAAAAhM"]
[Sun Apr 26 09:31:10.088885 2026] [:error] [pid 16515:tid 16529] [client 20.216.176.246:51609] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/son.php"] [unique_id "ae1q3ltDrUmgHSvpuLzhQwAAAks"]
[Sun Apr 26 09:31:11.560641 2026] [:error] [pid 16515:tid 16532] [client 20.216.176.246:38400] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/99.php"] [unique_id "ae1q31tDrUmgHSvpuLzhSAAAAk4"]
[Sun Apr 26 09:31:13.042436 2026] [:error] [pid 8390:tid 8469] [client 20.216.176.246:38423] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/99.php"] [unique_id "ae1q4YGPtFK_i9p5yxRg6gAAAJI"]
[Sun Apr 26 09:31:14.537719 2026] [:error] [pid 16515:tid 16521] [client 20.216.176.246:54122] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/99.php"] [unique_id "ae1q4ltDrUmgHSvpuLzhUQAAAkM"]
[Sun Apr 26 09:31:16.452911 2026] [:error] [pid 8385:tid 8426] [client 20.216.176.246:29692] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/99.php"] [unique_id "ae1q5DOy7_J84Wx3-oyDZgAAAEI"]
[Sun Apr 26 09:31:17.406001 2026] [:error] [pid 8390:tid 8461] [client 20.216.176.246:19135] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "ae1q5YGPtFK_i9p5yxRg7QAAAIo"]
[Sun Apr 26 09:31:19.251977 2026] [:error] [pid 8390:tid 8474] [client 20.216.176.246:3604] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "ae1q54GPtFK_i9p5yxRg9AAAAJc"]
[Sun Apr 26 09:31:20.319811 2026] [:error] [pid 8385:tid 8438] [client 20.216.176.246:46253] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "ae1q6DOy7_J84Wx3-oyDcQAAAE4"]
[Sun Apr 26 09:31:21.512802 2026] [:error] [pid 8385:tid 8433] [client 20.216.176.246:51613] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "ae1q6TOy7_J84Wx3-oyDdwAAAEk"]
[Sun Apr 26 09:31:29.151076 2026] [:error] [pid 8383:tid 8404] [client 20.216.176.246:51622] [client 20.216.176.246] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/options.php"] [unique_id "ae1q8dFa2S3EsATMdWPZpgAAAAc"]
[Sun Apr 26 09:31:34.838817 2026] [:error] [pid 22572:tid 22588] [client 20.216.176.246:65099] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bpxrn.php"] [unique_id "ae1q9tXOViWCFU-pZzCVPwAAAUo"]
[Sun Apr 26 09:31:36.294037 2026] [:error] [pid 13137:tid 13152] [client 20.216.176.246:15887] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bpxrn.php"] [unique_id "ae1q-N0RB4J0o4h5neEBtQAAAgs"]
[Sun Apr 26 09:31:37.512207 2026] [:error] [pid 13137:tid 13161] [client 20.216.176.246:37109] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bpxrn.php"] [unique_id "ae1q-d0RB4J0o4h5neEBtwAAAhQ"]
[Sun Apr 26 09:31:39.174314 2026] [:error] [pid 8385:tid 8433] [client 20.216.176.246:8513] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bpxrn.php"] [unique_id "ae1q-zOy7_J84Wx3-oyDsgAAAEk"]
[Sun Apr 26 09:31:39.846986 2026] [:error] [pid 8385:tid 8443] [client 20.216.176.246:32642] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "ae1q-zOy7_J84Wx3-oyDtAAAAFM"]
[Sun Apr 26 09:31:41.067280 2026] [:error] [pid 13137:tid 13155] [client 20.216.176.246:15900] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "ae1q_d0RB4J0o4h5neEBvAAAAg4"]
[Sun Apr 26 09:31:42.515689 2026] [:error] [pid 22573:tid 22628] [client 20.216.176.246:65112] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "ae1q_nB3EmQlD4yKUt9J5QAAAZU"]
[Sun Apr 26 09:31:43.304691 2026] [:error] [pid 8390:tid 8454] [client 20.216.176.246:60956] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "ae1q_4GPtFK_i9p5yxRhGQAAAIM"]
[Sun Apr 26 09:31:44.595852 2026] [:error] [pid 8385:tid 8424] [client 20.216.176.246:15919] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws37.php"] [unique_id "ae1rADOy7_J84Wx3-oyDuQAAAEA"]
[Sun Apr 26 09:31:45.222177 2026] [:error] [pid 8491:tid 8520] [client 20.216.176.246:32651] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws37.php"] [unique_id "ae1rASq7I7e6CJooQM27DQAAANU"]
[Sun Apr 26 09:31:46.087196 2026] [:error] [pid 8390:tid 8467] [client 20.216.176.246:32703] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws37.php"] [unique_id "ae1rAoGPtFK_i9p5yxRhHQAAAJA"]
[Sun Apr 26 09:31:47.507957 2026] [:error] [pid 8390:tid 8460] [client 20.216.176.246:32664] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws37.php"] [unique_id "ae1rA4GPtFK_i9p5yxRhIgAAAIk"]
[Sun Apr 26 09:31:51.890729 2026] [:error] [pid 16574:tid 16635] [client 20.216.176.246:3245] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sky.php"] [unique_id "ae1rB35MsX8wRQr99nYIOQAAA1Q"]
[Sun Apr 26 09:31:53.549849 2026] [:error] [pid 13137:tid 13157] [client 20.216.176.246:32645] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sky.php"] [unique_id "ae1rCd0RB4J0o4h5neEB0gAAAhA"]
[Sun Apr 26 09:31:54.364504 2026] [:error] [pid 13137:tid 13148] [client 20.216.176.246:65139] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sky.php"] [unique_id "ae1rCt0RB4J0o4h5neEB2QAAAgg"]
[Sun Apr 26 09:31:56.625398 2026] [:error] [pid 8390:tid 8468] [client 20.216.176.246:46260] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sky.php"] [unique_id "ae1rDIGPtFK_i9p5yxRhRQAAAJE"]
[Sun Apr 26 09:31:58.791709 2026] [:error] [pid 8390:tid 8467] [client 20.216.176.246:51606] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bojcdooq.php"] [unique_id "ae1rDoGPtFK_i9p5yxRhUgAAAJA"]
[Sun Apr 26 09:32:02.444144 2026] [:error] [pid 13137:tid 13155] [client 20.216.176.246:51599] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bojcdooq.php"] [unique_id "ae1rEt0RB4J0o4h5neEB6wAAAg4"]
[Sun Apr 26 09:32:04.366590 2026] [:error] [pid 16515:tid 16521] [client 20.216.176.246:43025] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bojcdooq.php"] [unique_id "ae1rFFtDrUmgHSvpuLzhdwAAAkM"]
[Sun Apr 26 09:32:06.134210 2026] [:error] [pid 22573:tid 22627] [client 20.216.176.246:15889] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bojcdooq.php"] [unique_id "ae1rFnB3EmQlD4yKUt9J-gAAAZQ"]
[Sun Apr 26 09:32:07.414740 2026] [:error] [pid 8390:tid 8451] [client 20.216.176.246:42488] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zdd.php"] [unique_id "ae1rF4GPtFK_i9p5yxRhcQAAAIA"]
[Sun Apr 26 09:32:08.387345 2026] [:error] [pid 13137:tid 13165] [client 20.216.176.246:49355] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zdd.php"] [unique_id "ae1rGN0RB4J0o4h5neEB8wAAAhg"]
[Sun Apr 26 09:32:08.946658 2026] [:error] [pid 8390:tid 8464] [client 20.216.176.246:16510] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zdd.php"] [unique_id "ae1rGIGPtFK_i9p5yxRhdQAAAI0"]
[Sun Apr 26 09:32:09.673071 2026] [:error] [pid 8390:tid 8461] [client 20.216.176.246:3232] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zdd.php"] [unique_id "ae1rGYGPtFK_i9p5yxRheQAAAIo"]
[Sun Apr 26 09:32:10.342186 2026] [:error] [pid 8390:tid 8460] [client 20.216.176.246:3220] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/133.php"] [unique_id "ae1rGoGPtFK_i9p5yxRhfAAAAIk"]
[Sun Apr 26 09:32:11.820616 2026] [:error] [pid 8390:tid 8459] [client 20.216.176.246:16496] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/133.php"] [unique_id "ae1rG4GPtFK_i9p5yxRhgwAAAIg"]
[Sun Apr 26 09:32:12.774868 2026] [:error] [pid 8390:tid 8454] [client 20.216.176.246:15895] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/133.php"] [unique_id "ae1rHIGPtFK_i9p5yxRhiQAAAIM"]
[Sun Apr 26 09:32:14.467416 2026] [:error] [pid 13137:tid 13149] [client 20.216.176.246:3218] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/133.php"] [unique_id "ae1rHt0RB4J0o4h5neEB9wAAAgk"]
[Sun Apr 26 09:32:16.088192 2026] [:error] [pid 8390:tid 8468] [client 20.216.176.246:16480] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jq.php"] [unique_id "ae1rIIGPtFK_i9p5yxRhlAAAAJE"]
[Sun Apr 26 09:32:16.899506 2026] [:error] [pid 16515:tid 16534] [client 20.216.176.246:43070] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jq.php"] [unique_id "ae1rIFtDrUmgHSvpuLzhgQAAAlA"]
[Sun Apr 26 09:32:18.692249 2026] [:error] [pid 22573:tid 22621] [client 20.216.176.246:61444] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jq.php"] [unique_id "ae1rInB3EmQlD4yKUt9KCAAAAY4"]
[Sun Apr 26 09:32:20.207596 2026] [:error] [pid 8385:tid 8439] [client 20.216.176.246:15932] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jq.php"] [unique_id "ae1rJDOy7_J84Wx3-oyDwgAAAE8"]
[Sun Apr 26 09:32:20.939940 2026] [:error] [pid 22572:tid 22585] [client 20.216.176.246:16463] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cro.php"] [unique_id "ae1rJNXOViWCFU-pZzCVUQAAAUc"]
[Sun Apr 26 09:32:22.134111 2026] [:error] [pid 13197:tid 13238] [client 20.216.176.246:3204] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cro.php"] [unique_id "ae1rJt3kktFKdSxTrBuguQAAAsc"]
[Sun Apr 26 09:32:23.429762 2026] [:error] [pid 22573:tid 22610] [client 20.216.176.246:49364] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cro.php"] [unique_id "ae1rJ3B3EmQlD4yKUt9KEAAAAYQ"]
[Sun Apr 26 09:32:25.694508 2026] [:error] [pid 8385:tid 8447] [client 20.216.176.246:21708] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cro.php"] [unique_id "ae1rKTOy7_J84Wx3-oyDzwAAAFc"]
[Sun Apr 26 09:32:27.910127 2026] [:error] [pid 8385:tid 8437] [client 20.216.176.246:32672] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wwx.php"] [unique_id "ae1rKzOy7_J84Wx3-oyD2wAAAE0"]
[Sun Apr 26 09:32:29.846025 2026] [:error] [pid 13137:tid 13162] [client 20.216.176.246:42409] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wwx.php"] [unique_id "ae1rLd0RB4J0o4h5neECBgAAAhU"]
[Sun Apr 26 09:32:31.285654 2026] [:error] [pid 22573:tid 22616] [client 20.216.176.246:3259] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wwx.php"] [unique_id "ae1rL3B3EmQlD4yKUt9KMAAAAYk"]
[Sun Apr 26 09:32:33.007141 2026] [:error] [pid 22573:tid 22625] [client 20.216.176.246:57299] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wwx.php"] [unique_id "ae1rMXB3EmQlD4yKUt9KQQAAAZI"]
[Sun Apr 26 09:32:33.937798 2026] [:error] [pid 13137:tid 13142] [client 20.216.176.246:61608] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/trx24.php"] [unique_id "ae1rMd0RB4J0o4h5neECCwAAAgI"]
[Sun Apr 26 09:32:41.417408 2026] [:error] [pid 22572:tid 22587] [client 20.216.176.246:59763] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sad8210.php"] [unique_id "ae1rOdXOViWCFU-pZzCVewAAAUk"]
[Sun Apr 26 09:32:42.887107 2026] [:error] [pid 22573:tid 22611] [client 20.216.176.246:61617] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sad8210.php"] [unique_id "ae1rOnB3EmQlD4yKUt9KjwAAAYU"]
[Sun Apr 26 09:32:44.664060 2026] [:error] [pid 13197:tid 13234] [client 20.216.176.246:61714] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sad8210.php"] [unique_id "ae1rPN3kktFKdSxTrBugyAAAAsM"]
[Sun Apr 26 09:32:46.862292 2026] [:error] [pid 8385:tid 8432] [client 20.216.176.246:50216] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sad8210.php"] [unique_id "ae1rPjOy7_J84Wx3-oyD6QAAAEg"]
[Sun Apr 26 09:32:51.119959 2026] [:error] [pid 8385:tid 8429] [client 20.216.176.246:29315] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sad8rd1.php"] [unique_id "ae1rQzOy7_J84Wx3-oyD7AAAAEU"]
[Sun Apr 26 09:32:54.738067 2026] [:error] [pid 8385:tid 8445] [client 20.216.176.246:3345] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sad8rd1.php"] [unique_id "ae1rRjOy7_J84Wx3-oyD7QAAAFU"]
[Sun Apr 26 09:32:58.105390 2026] [:error] [pid 8491:tid 8507] [client 20.216.176.246:19562] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sad8rd1.php"] [unique_id "ae1rSiq7I7e6CJooQM27RAAAAMg"]
[Sun Apr 26 09:33:02.004952 2026] [:error] [pid 16574:tid 16611] [client 20.216.176.246:7732] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sad8rd1.php"] [unique_id "ae1rTn5MsX8wRQr99nYIbAAAA0c"]
[Sun Apr 26 09:33:04.460002 2026] [:error] [pid 22573:tid 22621] [client 20.216.176.246:26107] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/saxzgf5.php"] [unique_id "ae1rUHB3EmQlD4yKUt9K1QAAAY4"]
[Sun Apr 26 09:33:16.158580 2026] [:error] [pid 22573:tid 22609] [client 20.216.176.246:40422] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/saxzgf5.php"] [unique_id "ae1rXHB3EmQlD4yKUt9K6QAAAYM"]
[Sun Apr 26 09:33:21.220254 2026] [:error] [pid 8491:tid 8503] [client 20.216.176.246:56803] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/saxzw9t.php"] [unique_id "ae1rYSq7I7e6CJooQM27VwAAAMQ"]
[Sun Apr 26 09:33:22.682087 2026] [:error] [pid 8390:tid 8463] [client 20.216.176.246:40438] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/saxzw9t.php"] [unique_id "ae1rYoGPtFK_i9p5yxRh1AAAAIw"]
[Sun Apr 26 09:33:23.722681 2026] [:error] [pid 8491:tid 8509] [client 20.216.176.246:3984] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/saxzw9t.php"] [unique_id "ae1rYyq7I7e6CJooQM27XAAAAMo"]
[Sun Apr 26 09:33:24.667174 2026] [:error] [pid 16515:tid 16539] [client 20.216.176.246:55301] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/saxzw9t.php"] [unique_id "ae1rZFtDrUmgHSvpuLzhvQAAAlU"]
[Sun Apr 26 09:33:25.878779 2026] [:error] [pid 13137:tid 13140] [client 20.216.176.246:41735] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sder5252u.php"] [unique_id "ae1rZd0RB4J0o4h5neECNwAAAgA"]
[Sun Apr 26 09:33:26.776106 2026] [:error] [pid 8390:tid 8458] [client 20.216.176.246:40434] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sder5252u.php"] [unique_id "ae1rZoGPtFK_i9p5yxRh4AAAAIc"]
[Sun Apr 26 09:33:28.027632 2026] [:error] [pid 13197:tid 13237] [client 20.216.176.246:60336] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sder5252u.php"] [unique_id "ae1raN3kktFKdSxTrBug1QAAAsY"]
[Sun Apr 26 09:33:31.941787 2026] [:error] [pid 16515:tid 16532] [client 20.216.176.246:41731] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sder5252u.php"] [unique_id "ae1ra1tDrUmgHSvpuLzhwgAAAk4"]
[Sun Apr 26 09:33:37.641401 2026] [:error] [pid 16515:tid 16522] [client 20.216.176.246:31389] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sderty5u.php"] [unique_id "ae1rcVtDrUmgHSvpuLzhxQAAAkQ"]
[Sun Apr 26 09:33:40.406750 2026] [:error] [pid 16515:tid 16519] [client 20.216.176.246:3879] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sderty5u.php"] [unique_id "ae1rdFtDrUmgHSvpuLzhxwAAAkE"]
[Sun Apr 26 09:33:49.978648 2026] [:error] [pid 22572:tid 22601] [client 20.216.176.246:53458] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "ae1rfdXOViWCFU-pZzCV2gAAAVc"]
[Sun Apr 26 09:33:51.474697 2026] [:error] [pid 13137:tid 13162] [client 20.216.176.246:53620] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "ae1rf90RB4J0o4h5neECTwAAAhU"]
[Sun Apr 26 09:33:53.265249 2026] [:error] [pid 22572:tid 22585] [client 20.216.176.246:14980] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "ae1rgdXOViWCFU-pZzCV5QAAAUc"]
[Sun Apr 26 09:33:56.846011 2026] [:error] [pid 8385:tid 8434] [client 20.216.176.246:44945] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alpha.php"] [unique_id "ae1rhDOy7_J84Wx3-oyEEwAAAEo"]
[Sun Apr 26 09:33:59.681299 2026] [:error] [pid 16515:tid 16523] [client 20.216.176.246:63274] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bc.php"] [unique_id "ae1rh1tDrUmgHSvpuLzhzAAAAkU"]
[Sun Apr 26 09:34:03.265608 2026] [:error] [pid 8385:tid 8448] [client 20.216.176.246:64472] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bc.php"] [unique_id "ae1rizOy7_J84Wx3-oyEFQAAAFg"]
[Sun Apr 26 09:34:04.935521 2026] [:error] [pid 16574:tid 16613] [client 20.216.176.246:10376] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bc.php"] [unique_id "ae1rjH5MsX8wRQr99nYImAAAA0k"]
[Sun Apr 26 09:34:06.942097 2026] [:error] [pid 8385:tid 8430] [client 20.216.176.246:9718] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bc.php"] [unique_id "ae1rjjOy7_J84Wx3-oyEFwAAAEY"]
[Sun Apr 26 09:34:07.999430 2026] [:error] [pid 8385:tid 8437] [client 20.216.176.246:35662] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/67.php"] [unique_id "ae1rjzOy7_J84Wx3-oyEHAAAAE0"]
[Sun Apr 26 09:34:09.112014 2026] [:error] [pid 13197:tid 13253] [client 20.216.176.246:51302] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/67.php"] [unique_id "ae1rkd3kktFKdSxTrBug5AAAAtU"]
[Sun Apr 26 09:34:10.431685 2026] [:error] [pid 8491:tid 8516] [client 20.216.176.246:59826] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/67.php"] [unique_id "ae1rkiq7I7e6CJooQM27fQAAANE"]
[Sun Apr 26 09:34:12.117653 2026] [:error] [pid 13197:tid 13248] [client 20.216.176.246:64463] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/67.php"] [unique_id "ae1rlN3kktFKdSxTrBug6gAAAtA"]
[Sun Apr 26 09:34:13.772161 2026] [:error] [pid 16574:tid 16606] [client 20.216.176.246:10379] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1mrX.php"] [unique_id "ae1rlX5MsX8wRQr99nYIoAAAA0I"]
[Sun Apr 26 09:34:14.903723 2026] [:error] [pid 8385:tid 8434] [client 20.216.176.246:4084] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1mrX.php"] [unique_id "ae1rljOy7_J84Wx3-oyEIAAAAEo"]
[Sun Apr 26 09:34:15.628473 2026] [:error] [pid 16515:tid 16528] [client 20.216.176.246:63247] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1mrX.php"] [unique_id "ae1rl1tDrUmgHSvpuLzh3QAAAko"]
[Sun Apr 26 09:34:16.597812 2026] [:error] [pid 8385:tid 8447] [client 20.216.176.246:4062] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1mrX.php"] [unique_id "ae1rmDOy7_J84Wx3-oyEIwAAAFc"]
[Sun Apr 26 09:34:17.575364 2026] [:error] [pid 13197:tid 13253] [client 20.216.176.246:59807] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x402.php"] [unique_id "ae1rmd3kktFKdSxTrBug9AAAAtU"]
[Sun Apr 26 09:34:18.265834 2026] [:error] [pid 22572:tid 22589] [client 20.216.176.246:36480] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x402.php"] [unique_id "ae1rmtXOViWCFU-pZzCV8gAAAUs"]
[Sun Apr 26 09:34:19.676249 2026] [:error] [pid 8383:tid 8417] [client 20.216.176.246:64470] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x402.php"] [unique_id "ae1rm9Fa2S3EsATMdWPZ5AAAABQ"]
[Sun Apr 26 09:34:21.807969 2026] [:error] [pid 8390:tid 8454] [client 20.216.176.246:30947] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x402.php"] [unique_id "ae1rnYGPtFK_i9p5yxRh_wAAAIM"]
[Sun Apr 26 09:34:22.748153 2026] [:error] [pid 13137:tid 13160] [client 20.216.176.246:35653] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/485.php"] [unique_id "ae1rnt0RB4J0o4h5neECaQAAAhM"]
[Sun Apr 26 09:34:24.373457 2026] [:error] [pid 22572:tid 22586] [client 20.216.176.246:30916] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/485.php"] [unique_id "ae1roNXOViWCFU-pZzCV_gAAAUg"]
[Sun Apr 26 09:34:29.639517 2026] [:error] [pid 13197:tid 13254] [client 20.216.176.246:51285] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/485.php"] [unique_id "ae1rpd3kktFKdSxTrBug9wAAAtY"]
[Sun Apr 26 09:34:30.802587 2026] [:error] [pid 22572:tid 22581] [client 20.216.176.246:59802] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/485.php"] [unique_id "ae1rptXOViWCFU-pZzCWCQAAAUM"]
[Sun Apr 26 09:34:32.174151 2026] [:error] [pid 22573:tid 22629] [client 20.216.176.246:64412] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/drykl.php"] [unique_id "ae1rqHB3EmQlD4yKUt9LNQAAAZY"]
[Sun Apr 26 09:34:33.732549 2026] [:error] [pid 22572:tid 22591] [client 20.216.176.246:51274] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/drykl.php"] [unique_id "ae1rqdXOViWCFU-pZzCWEgAAAU0"]
[Sun Apr 26 09:34:34.527545 2026] [:error] [pid 22572:tid 22580] [client 20.216.176.246:64426] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/drykl.php"] [unique_id "ae1rqtXOViWCFU-pZzCWFQAAAUI"]
[Sun Apr 26 09:34:35.846789 2026] [:error] [pid 16515:tid 16527] [client 20.216.176.246:54062] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/drykl.php"] [unique_id "ae1rq1tDrUmgHSvpuLzh5QAAAkk"]
[Sun Apr 26 09:34:37.269724 2026] [:error] [pid 22572:tid 22602] [client 20.216.176.246:10370] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "ae1rrdXOViWCFU-pZzCWJAAAAVg"]
[Sun Apr 26 09:34:38.599216 2026] [:error] [pid 22573:tid 22631] [client 20.216.176.246:51313] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "ae1rrnB3EmQlD4yKUt9LPgAAAZg"]
[Sun Apr 26 09:34:39.469586 2026] [:error] [pid 22573:tid 22606] [client 20.216.176.246:63243] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "ae1rr3B3EmQlD4yKUt9LQQAAAYA"]
[Sun Apr 26 09:34:40.404353 2026] [:error] [pid 8390:tid 8471] [client 20.216.176.246:35700] [client 20.216.176.246] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xxx.php"] [unique_id "ae1rsIGPtFK_i9p5yxRiFQAAAJQ"]
[Sun Apr 26 12:04:47.237803 2026] [:error] [pid 22572:tid 22595] [client 54.178.182.219:43852] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "ae2O39XOViWCFU-pZzDDHwAAAVE"]
[Sun Apr 26 12:04:47.964656 2026] [:error] [pid 16515:tid 16541] [client 54.178.182.219:43888] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env"] [unique_id "ae2O31tDrUmgHSvpuLz8mgAAAlc"]
[Sun Apr 26 12:04:48.519590 2026] [:error] [pid 13137:tid 13164] [client 54.178.182.219:43910] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "ae2O4N0RB4J0o4h5neEjwAAAAhc"]
[Sun Apr 26 12:04:49.083167 2026] [:error] [pid 22573:tid 22615] [client 54.178.182.219:43940] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.production"] [unique_id "ae2O4XB3EmQlD4yKUt-C6wAAAYg"]
[Sun Apr 26 12:04:49.639540 2026] [:error] [pid 16515:tid 16537] [client 54.178.182.219:43976] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.staging"] [unique_id "ae2O4VtDrUmgHSvpuLz8ngAAAlM"]
[Sun Apr 26 12:04:50.195582 2026] [:error] [pid 22572:tid 22594] [client 54.178.182.219:44000] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.development"] [unique_id "ae2O4tXOViWCFU-pZzDDKAAAAVA"]
[Sun Apr 26 12:04:50.763914 2026] [:error] [pid 22572:tid 22593] [client 54.178.182.219:44188] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.test"] [unique_id "ae2O4tXOViWCFU-pZzDDLAAAAU8"]
[Sun Apr 26 12:04:51.321079 2026] [:error] [pid 22572:tid 22579] [client 54.178.182.219:44212] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.remote"] [unique_id "ae2O49XOViWCFU-pZzDDMAAAAUE"]
[Sun Apr 26 12:04:51.877984 2026] [:error] [pid 8383:tid 8410] [client 54.178.182.219:44236] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.bak"] [unique_id "ae2O49Fa2S3EsATMdWPoKQAAAA0"]
[Sun Apr 26 12:04:52.444558 2026] [:error] [pid 16574:tid 16613] [client 54.178.182.219:44256] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.backup"] [unique_id "ae2O5H5MsX8wRQr99nYUJQAAA0k"]
[Sun Apr 26 12:04:53.003160 2026] [:error] [pid 13137:tid 13141] [client 54.178.182.219:44276] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.save"] [unique_id "ae2O5d0RB4J0o4h5neEjxgAAAgE"]
[Sun Apr 26 12:04:53.577336 2026] [:error] [pid 22573:tid 22620] [client 54.178.182.219:44308] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.old"] [unique_id "ae2O5XB3EmQlD4yKUt-C_AAAAY0"]
[Sun Apr 26 12:04:54.146418 2026] [:error] [pid 22573:tid 22606] [client 54.178.182.219:44332] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.sample"] [unique_id "ae2O5nB3EmQlD4yKUt-DAwAAAYA"]
[Sun Apr 26 12:04:54.706517 2026] [:error] [pid 16574:tid 16621] [client 54.178.182.219:44362] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.example"] [unique_id "ae2O5n5MsX8wRQr99nYUJgAAA00"]
[Sun Apr 26 12:04:55.264803 2026] [:error] [pid 13137:tid 13153] [client 54.178.182.219:44390] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.dev"] [unique_id "ae2O590RB4J0o4h5neEjxwAAAgw"]
[Sun Apr 26 12:04:55.833099 2026] [:error] [pid 8383:tid 8397] [client 54.178.182.219:44418] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.prod"] [unique_id "ae2O59Fa2S3EsATMdWPoKwAAAAA"]
[Sun Apr 26 12:04:56.388897 2026] [:error] [pid 8390:tid 8457] [client 54.178.182.219:44462] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.stage"] [unique_id "ae2O6IGPtFK_i9p5yxSx7wAAAIY"]
[Sun Apr 26 12:04:56.947022 2026] [:error] [pid 8491:tid 8506] [client 54.178.182.219:44488] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.ci"] [unique_id "ae2O6Cq7I7e6CJooQM3PrgAAAMc"]
[Sun Apr 26 12:04:57.505990 2026] [:error] [pid 16515:tid 16542] [client 54.178.182.219:44498] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.docker"] [unique_id "ae2O6VtDrUmgHSvpuLz8qwAAAlg"]
[Sun Apr 26 12:04:58.061085 2026] [:error] [pid 16574:tid 16610] [client 54.178.182.219:44518] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.live"] [unique_id "ae2O6n5MsX8wRQr99nYUKQAAA0Y"]
[Sun Apr 26 12:04:58.621074 2026] [:error] [pid 8383:tid 8414] [client 54.178.182.219:44544] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.preprod"] [unique_id "ae2O6tFa2S3EsATMdWPoMAAAABE"]
[Sun Apr 26 12:04:59.190040 2026] [:error] [pid 8383:tid 8416] [client 54.178.182.219:44566] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.uat"] [unique_id "ae2O69Fa2S3EsATMdWPoMgAAABM"]
[Sun Apr 26 12:04:59.756780 2026] [:error] [pid 13137:tid 13160] [client 54.178.182.219:44586] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.dist"] [unique_id "ae2O690RB4J0o4h5neEjzAAAAhM"]
[Sun Apr 26 12:05:00.314381 2026] [:error] [pid 22572:tid 22591] [client 54.178.182.219:44630] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.swp"] [unique_id "ae2O7NXOViWCFU-pZzDDNQAAAU0"]
[Sun Apr 26 12:05:00.871613 2026] [:error] [pid 13197:tid 13242] [client 54.178.182.219:41282] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env~"] [unique_id "ae2O7N3kktFKdSxTrBuw-QAAAss"]
[Sun Apr 26 12:05:01.430852 2026] [:error] [pid 8491:tid 8516] [client 54.178.182.219:41324] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/app/.env"] [unique_id "ae2O7Sq7I7e6CJooQM3PsAAAANE"]
[Sun Apr 26 12:05:02.062765 2026] [:error] [pid 22572:tid 22580] [client 54.178.182.219:41336] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/apps/.env"] [unique_id "ae2O7tXOViWCFU-pZzDDOwAAAUI"]
[Sun Apr 26 12:05:02.623716 2026] [:error] [pid 22573:tid 22627] [client 54.178.182.219:41362] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/api/.env"] [unique_id "ae2O7nB3EmQlD4yKUt-DJQAAAZQ"]
[Sun Apr 26 12:05:03.189582 2026] [:error] [pid 22572:tid 22581] [client 54.178.182.219:41388] [client 54.178.182.219] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/web/.env"] [unique_id "ae2O79XOViWCFU-pZzDDPQAAAUM"]
[Sun Apr 26 12:49:05.002371 2026] [:error] [pid 8491:tid 8512] [client 138.197.147.193:49190] [client 138.197.147.193] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.197.147.193, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "ae2ZQSq7I7e6CJooQM3VFQAAAM0"]
[Sun Apr 26 12:49:05.891112 2026] [:error] [pid 22573:tid 22627] [client 138.197.147.193:49792] [client 138.197.147.193] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 138.197.147.193, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "ae2ZQXB3EmQlD4yKUt-PhwAAAZQ"]
[Sun Apr 26 15:02:48.369550 2026] [:error] [pid 13137:tid 13142] [client 20.205.203.30:9021] [client 20.205.203.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "ae24mN0RB4J0o4h5neFEkwAAAgI"]
[Sun Apr 26 15:02:48.370665 2026] [:error] [pid 8390:tid 8472] [client 20.205.203.30:9023] [client 20.205.203.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "ae24mIGPtFK_i9p5yxT2hwAAAJU"]
[Sun Apr 26 15:02:48.728574 2026] [:error] [pid 8390:tid 8463] [client 20.205.203.30:8748] [client 20.205.203.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "ae24mIGPtFK_i9p5yxT2kgAAAIw"]
[Sun Apr 26 15:02:48.753948 2026] [:error] [pid 22573:tid 22629] [client 20.205.203.30:12712] [client 20.205.203.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "ae24mHB3EmQlD4yKUt-0IAAAAZY"]
[Sun Apr 26 15:02:49.096129 2026] [:error] [pid 8390:tid 8470] [client 20.205.203.30:2248] [client 20.205.203.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "ae24mYGPtFK_i9p5yxT2ogAAAJM"]
[Sun Apr 26 15:02:49.162549 2026] [:error] [pid 13137:tid 13143] [client 20.205.203.30:9003] [client 20.205.203.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "ae24md0RB4J0o4h5neFEnQAAAgM"]
[Sun Apr 26 15:02:49.468496 2026] [:error] [pid 22572:tid 22596] [client 20.205.203.30:11177] [client 20.205.203.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "ae24mdXOViWCFU-pZzDrfQAAAVI"]
[Sun Apr 26 15:02:49.524685 2026] [:error] [pid 22573:tid 22616] [client 20.205.203.30:2286] [client 20.205.203.30] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "ae24mXB3EmQlD4yKUt-0IgAAAYk"]
[Sun Apr 26 19:08:06.024157 2026] [:error] [pid 8390:tid 8458] [client 176.65.132.42:59588] [client 176.65.132.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env"] [unique_id "ae3yFoGPtFK_i9p5yxRHDAAAAIc"]
[Mon Apr 27 00:49:33.912684 2026] [:error] [pid 8390:tid 8468] [client 20.92.73.174:8495] [client 20.92.73.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws.php"] [unique_id "ae5CHYGPtFK_i9p5yxS7RgAAAJE"]
[Mon Apr 27 00:49:33.997554 2026] [:error] [pid 22573:tid 22619] [client 20.92.73.174:8476] [client 20.92.73.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws.php"] [unique_id "ae5CHXB3EmQlD4yKUt8y3gAAAYw"]
[Mon Apr 27 00:49:34.066485 2026] [:error] [pid 8491:tid 8516] [client 20.92.73.174:4936] [client 20.92.73.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws.php"] [unique_id "ae5CHiq7I7e6CJooQM0r5AAAANE"]
[Mon Apr 27 00:49:34.128636 2026] [:error] [pid 8491:tid 8506] [client 20.92.73.174:8453] [client 20.92.73.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ws.php"] [unique_id "ae5CHiq7I7e6CJooQM0r5QAAAMc"]
[Mon Apr 27 07:52:49.777193 2026] [:error] [pid 50861:tid 50877] [client 158.158.32.79:56535] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/elp.php"] [unique_id "ae6lUWCmVQOCiCZfqR5fVAAAAAw"]
[Mon Apr 27 07:52:51.392444 2026] [:error] [pid 50861:tid 50865] [client 158.158.32.79:57294] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/elp.php"] [unique_id "ae6lU2CmVQOCiCZfqR5fYwAAAAA"]
[Mon Apr 27 07:52:55.022186 2026] [:error] [pid 50951:tid 50974] [client 158.158.32.79:42796] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/elp.php"] [unique_id "ae6lV12pquA9BEfFXTgZhwAAAVU"]
[Mon Apr 27 07:52:56.415719 2026] [:error] [pid 50861:tid 50878] [client 158.158.32.79:39726] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/elp.php"] [unique_id "ae6lWGCmVQOCiCZfqR5fcAAAAA0"]
[Mon Apr 27 07:52:59.419297 2026] [:error] [pid 50951:tid 50956] [client 158.158.32.79:42757] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zc-243.php"] [unique_id "ae6lW12pquA9BEfFXTgZmQAAAUM"]
[Mon Apr 27 07:53:02.721732 2026] [:error] [pid 50862:tid 50914] [client 158.158.32.79:54039] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zc-243.php"] [unique_id "ae6lXktKr9IOeW7InlW_lwAAAJY"]
[Mon Apr 27 07:53:05.636389 2026] [:error] [pid 50863:tid 50920] [client 158.158.32.79:5971] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zc-243.php"] [unique_id "ae6lYXPaUAmshuFrBc8r7QAAAME"]
[Mon Apr 27 07:53:07.309864 2026] [:error] [pid 50951:tid 50968] [client 158.158.32.79:37079] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zc-243.php"] [unique_id "ae6lY12pquA9BEfFXTgZqAAAAU8"]
[Mon Apr 27 07:53:09.656690 2026] [:error] [pid 50863:tid 50924] [client 158.158.32.79:56573] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bkyac.php"] [unique_id "ae6lZXPaUAmshuFrBc8r_QAAAMU"]
[Mon Apr 27 07:53:11.647059 2026] [:error] [pid 50862:tid 50902] [client 158.158.32.79:54747] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bkyac.php"] [unique_id "ae6lZ0tKr9IOeW7InlW_ygAAAIo"]
[Mon Apr 27 07:53:12.839503 2026] [:error] [pid 50861:tid 50881] [client 158.158.32.79:54074] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bkyac.php"] [unique_id "ae6laGCmVQOCiCZfqR5flAAAABA"]
[Mon Apr 27 07:53:13.823215 2026] [:error] [pid 50951:tid 50966] [client 158.158.32.79:42800] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bkyac.php"] [unique_id "ae6laV2pquA9BEfFXTgZtwAAAU0"]
[Mon Apr 27 07:53:15.500064 2026] [:error] [pid 50951:tid 50960] [client 158.158.32.79:5994] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wziar1.php"] [unique_id "ae6la12pquA9BEfFXTgZuwAAAUc"]
[Mon Apr 27 07:53:16.647439 2026] [:error] [pid 50951:tid 50973] [client 158.158.32.79:25651] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wziar1.php"] [unique_id "ae6lbF2pquA9BEfFXTgZvgAAAVQ"]
[Mon Apr 27 07:53:17.686758 2026] [:error] [pid 50951:tid 50971] [client 158.158.32.79:42784] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wziar1.php"] [unique_id "ae6lbV2pquA9BEfFXTgZwwAAAVI"]
[Mon Apr 27 07:53:19.430895 2026] [:error] [pid 50862:tid 50898] [client 158.158.32.79:26338] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wziar1.php"] [unique_id "ae6lb0tKr9IOeW7InlW_zAAAAIY"]
[Mon Apr 27 07:53:20.531114 2026] [:error] [pid 50951:tid 50973] [client 158.158.32.79:58523] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "ae6lcF2pquA9BEfFXTgZxwAAAVQ"]
[Mon Apr 27 07:53:21.909250 2026] [:error] [pid 50862:tid 50904] [client 158.158.32.79:42802] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "ae6lcUtKr9IOeW7InlW_2QAAAIw"]
[Mon Apr 27 07:53:22.733723 2026] [:error] [pid 50951:tid 50976] [client 158.158.32.79:42789] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "ae6lcl2pquA9BEfFXTgZzwAAAVc"]
[Mon Apr 27 07:53:23.920382 2026] [:error] [pid 50951:tid 50963] [client 158.158.32.79:56571] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/oLEzRVqmJJPFSucdefault.php"] [unique_id "ae6lc12pquA9BEfFXTgZ1wAAAUo"]
[Mon Apr 27 07:53:24.853197 2026] [:error] [pid 50951:tid 50969] [client 158.158.32.79:58547] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/7logs.php"] [unique_id "ae6ldF2pquA9BEfFXTgZ3gAAAVA"]
[Mon Apr 27 07:53:25.747184 2026] [:error] [pid 50863:tid 50926] [client 158.158.32.79:6092] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/7logs.php"] [unique_id "ae6ldXPaUAmshuFrBc8sEAAAAMc"]
[Mon Apr 27 07:53:26.781529 2026] [:error] [pid 50951:tid 50966] [client 158.158.32.79:6121] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/7logs.php"] [unique_id "ae6ldl2pquA9BEfFXTgZ4wAAAU0"]
[Mon Apr 27 07:53:27.494616 2026] [:error] [pid 50951:tid 50964] [client 158.158.32.79:56551] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/7logs.php"] [unique_id "ae6ld12pquA9BEfFXTgZ5QAAAUs"]
[Mon Apr 27 07:53:28.627050 2026] [:error] [pid 50863:tid 50919] [client 158.158.32.79:25662] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "ae6leHPaUAmshuFrBc8sEwAAAMA"]
[Mon Apr 27 07:53:29.318206 2026] [:error] [pid 50951:tid 50973] [client 158.158.32.79:26325] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "ae6leV2pquA9BEfFXTgZ6gAAAVQ"]
[Mon Apr 27 07:53:29.900983 2026] [:error] [pid 50951:tid 50970] [client 158.158.32.79:6112] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "ae6leV2pquA9BEfFXTgZ7gAAAVE"]
[Mon Apr 27 07:53:30.630294 2026] [:error] [pid 50951:tid 50975] [client 158.158.32.79:5952] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/n3yUmQ6Q9xwQ8ocdefault.php"] [unique_id "ae6lel2pquA9BEfFXTgZ8wAAAVY"]
[Mon Apr 27 07:53:31.481168 2026] [:error] [pid 50861:tid 50885] [client 158.158.32.79:58505] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/as.php"] [unique_id "ae6le2CmVQOCiCZfqR5fnQAAABQ"]
[Mon Apr 27 07:53:32.480649 2026] [:error] [pid 50951:tid 50959] [client 158.158.32.79:54052] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/as.php"] [unique_id "ae6lfF2pquA9BEfFXTgaBwAAAUY"]
[Mon Apr 27 07:53:35.799173 2026] [:error] [pid 50951:tid 50953] [client 158.158.32.79:26315] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/as.php"] [unique_id "ae6lf12pquA9BEfFXTgaGAAAAUA"]
[Mon Apr 27 07:53:38.683887 2026] [:error] [pid 50863:tid 50931] [client 158.158.32.79:54778] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/as.php"] [unique_id "ae6lgnPaUAmshuFrBc8sIQAAAMw"]
[Mon Apr 27 07:53:43.691455 2026] [:error] [pid 50862:tid 50899] [client 158.158.32.79:6002] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ctex1.php"] [unique_id "ae6lh0tKr9IOeW7InlW_6QAAAIc"]
[Mon Apr 27 07:53:45.955571 2026] [:error] [pid 50951:tid 50971] [client 158.158.32.79:5742] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ctex1.php"] [unique_id "ae6liV2pquA9BEfFXTgaQgAAAVI"]
[Mon Apr 27 07:53:48.289443 2026] [:error] [pid 50862:tid 50911] [client 158.158.32.79:53492] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ctex1.php"] [unique_id "ae6ljEtKr9IOeW7InlW_8gAAAJM"]
[Mon Apr 27 07:53:58.582525 2026] [:error] [pid 50951:tid 50966] [client 158.158.32.79:30702] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ae6lll2pquA9BEfFXTgarAAAAU0"]
[Mon Apr 27 07:53:59.578859 2026] [:error] [pid 50863:tid 50926] [client 158.158.32.79:60769] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ae6ll3PaUAmshuFrBc8sLgAAAMc"]
[Mon Apr 27 07:54:01.207727 2026] [:error] [pid 50951:tid 50956] [client 158.158.32.79:23354] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ae6lmV2pquA9BEfFXTgarwAAAUM"]
[Mon Apr 27 07:54:05.368888 2026] [:error] [pid 50951:tid 50974] [client 158.158.32.79:52956] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/mI35rZhMg1zJ1vuXdefault.php"] [unique_id "ae6lnV2pquA9BEfFXTgavAAAAVU"]
[Mon Apr 27 07:54:07.614181 2026] [:error] [pid 50951:tid 50972] [client 158.158.32.79:6023] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bfil.php"] [unique_id "ae6ln12pquA9BEfFXTgavgAAAVM"]
[Mon Apr 27 07:54:08.158843 2026] [:error] [pid 50951:tid 50973] [client 158.158.32.79:32638] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bfil.php"] [unique_id "ae6loF2pquA9BEfFXTgawAAAAVQ"]
[Mon Apr 27 07:54:09.178053 2026] [:error] [pid 50951:tid 50967] [client 158.158.32.79:37784] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bfil.php"] [unique_id "ae6loV2pquA9BEfFXTgawgAAAU4"]
[Mon Apr 27 07:54:10.225789 2026] [:error] [pid 50951:tid 50970] [client 158.158.32.79:6017] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bfil.php"] [unique_id "ae6lol2pquA9BEfFXTgaxgAAAVE"]
[Mon Apr 27 07:54:12.435078 2026] [:error] [pid 50951:tid 50962] [client 158.158.32.79:60700] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abrand.php"] [unique_id "ae6lpF2pquA9BEfFXTgaygAAAUk"]
[Mon Apr 27 07:54:13.400393 2026] [:error] [pid 50863:tid 50938] [client 158.158.32.79:60720] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abrand.php"] [unique_id "ae6lpXPaUAmshuFrBc8sPgAAANM"]
[Mon Apr 27 07:54:15.453446 2026] [:error] [pid 50863:tid 50927] [client 158.158.32.79:37780] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abrand.php"] [unique_id "ae6lp3PaUAmshuFrBc8sQgAAAMg"]
[Mon Apr 27 07:54:17.474041 2026] [:error] [pid 50863:tid 50919] [client 158.158.32.79:60685] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abrand.php"] [unique_id "ae6lqXPaUAmshuFrBc8sRQAAAMA"]
[Mon Apr 27 07:54:18.646544 2026] [:error] [pid 50951:tid 50972] [client 158.158.32.79:24060] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "ae6lql2pquA9BEfFXTgazgAAAVM"]
[Mon Apr 27 07:54:20.108508 2026] [:error] [pid 50951:tid 50962] [client 158.158.32.79:60690] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "ae6lrF2pquA9BEfFXTga0AAAAUk"]
[Mon Apr 27 07:54:20.805930 2026] [:error] [pid 50861:tid 50873] [client 158.158.32.79:27488] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "ae6lrGCmVQOCiCZfqR5f1QAAAAg"]
[Mon Apr 27 07:54:21.521195 2026] [:error] [pid 50863:tid 50927] [client 158.158.32.79:40278] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amax.php"] [unique_id "ae6lrXPaUAmshuFrBc8sSwAAAMg"]
[Mon Apr 27 07:54:22.858686 2026] [:error] [pid 50863:tid 50942] [client 158.158.32.79:61391] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amwxl.php"] [unique_id "ae6lrnPaUAmshuFrBc8sTwAAANc"]
[Mon Apr 27 07:54:24.295647 2026] [:error] [pid 50951:tid 50971] [client 158.158.32.79:57843] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amwxl.php"] [unique_id "ae6lsF2pquA9BEfFXTga2QAAAVI"]
[Mon Apr 27 07:54:25.488777 2026] [:error] [pid 50862:tid 50897] [client 158.158.32.79:37125] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amwxl.php"] [unique_id "ae6lsUtKr9IOeW7InlXADAAAAIU"]
[Mon Apr 27 07:54:27.419745 2026] [:error] [pid 50862:tid 50898] [client 158.158.32.79:57836] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amwxl.php"] [unique_id "ae6ls0tKr9IOeW7InlXAEQAAAIY"]
[Mon Apr 27 07:54:29.806735 2026] [:error] [pid 50951:tid 50970] [client 158.158.32.79:52165] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "ae6ltV2pquA9BEfFXTga3wAAAVE"]
[Mon Apr 27 07:54:31.716305 2026] [:error] [pid 50951:tid 50977] [client 158.158.32.79:23736] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "ae6lt12pquA9BEfFXTga5gAAAVg"]
[Mon Apr 27 07:54:33.573803 2026] [:error] [pid 50951:tid 50961] [client 158.158.32.79:24808] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "ae6luV2pquA9BEfFXTga7gAAAUg"]
[Mon Apr 27 07:54:36.874691 2026] [:error] [pid 50863:tid 50939] [client 158.158.32.79:40772] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wmore1.php"] [unique_id "ae6lvHPaUAmshuFrBc8sYAAAANQ"]
[Mon Apr 27 07:54:38.912846 2026] [:error] [pid 50862:tid 50894] [client 158.158.32.79:40821] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/userfuns.php"] [unique_id "ae6lvktKr9IOeW7InlXAIAAAAII"]
[Mon Apr 27 07:54:40.765157 2026] [:error] [pid 50863:tid 50925] [client 158.158.32.79:5814] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/userfuns.php"] [unique_id "ae6lwHPaUAmshuFrBc8sZwAAAMY"]
[Mon Apr 27 07:54:42.474711 2026] [:error] [pid 50862:tid 50904] [client 158.158.32.79:40818] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/userfuns.php"] [unique_id "ae6lwktKr9IOeW7InlXAJAAAAIw"]
[Mon Apr 27 07:54:43.251772 2026] [:error] [pid 50951:tid 50977] [client 158.158.32.79:28799] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/userfuns.php"] [unique_id "ae6lw12pquA9BEfFXTga8wAAAVg"]
[Mon Apr 27 07:54:44.627547 2026] [:error] [pid 50863:tid 50926] [client 158.158.32.79:24802] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/menu.php"] [unique_id "ae6lxHPaUAmshuFrBc8sagAAAMc"]
[Mon Apr 27 07:54:46.136462 2026] [:error] [pid 50951:tid 50957] [client 158.158.32.79:28764] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/menu.php"] [unique_id "ae6lxl2pquA9BEfFXTga-QAAAUQ"]
[Mon Apr 27 07:54:47.508522 2026] [:error] [pid 50863:tid 50934] [client 158.158.32.79:28763] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/menu.php"] [unique_id "ae6lx3PaUAmshuFrBc8sbAAAAM8"]
[Mon Apr 27 07:54:49.625400 2026] [:error] [pid 50862:tid 50898] [client 158.158.32.79:5612] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/menu.php"] [unique_id "ae6lyUtKr9IOeW7InlXANwAAAIY"]
[Mon Apr 27 07:54:50.463725 2026] [:error] [pid 50862:tid 50895] [client 158.158.32.79:5795] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "ae6lyktKr9IOeW7InlXAOAAAAIM"]
[Mon Apr 27 07:54:51.304043 2026] [:error] [pid 50951:tid 50956] [client 158.158.32.79:22806] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "ae6ly12pquA9BEfFXTgbAQAAAUM"]
[Mon Apr 27 07:54:52.343957 2026] [:error] [pid 50861:tid 50881] [client 158.158.32.79:40793] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "ae6lzGCmVQOCiCZfqR5f8AAAABA"]
[Mon Apr 27 07:54:53.662711 2026] [:error] [pid 50951:tid 50974] [client 158.158.32.79:31417] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "ae6lzV2pquA9BEfFXTgbCwAAAVU"]
[Mon Apr 27 07:54:55.155888 2026] [:error] [pid 50951:tid 50957] [client 158.158.32.79:5664] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/saorix1.php"] [unique_id "ae6lz12pquA9BEfFXTgbEQAAAUQ"]
[Mon Apr 27 07:55:07.337422 2026] [:error] [pid 50862:tid 50899] [client 158.158.32.79:59836] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sa.php7"] [unique_id "ae6l20tKr9IOeW7InlXAVwAAAIc"]
[Mon Apr 27 07:55:13.154739 2026] [:error] [pid 50861:tid 50889] [client 158.158.32.79:26975] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sa.php7"] [unique_id "ae6l4WCmVQOCiCZfqR5gDgAAABg"]
[Mon Apr 27 07:55:16.083061 2026] [:error] [pid 50861:tid 50866] [client 158.158.32.79:26970] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sa.php7"] [unique_id "ae6l5GCmVQOCiCZfqR5gEgAAAAE"]
[Mon Apr 27 07:55:20.001623 2026] [:error] [pid 50951:tid 50955] [client 158.158.32.79:31312] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sa.php7"] [unique_id "ae6l6F2pquA9BEfFXTgbMQAAAUI"]
[Mon Apr 27 07:55:22.507975 2026] [:error] [pid 50861:tid 50880] [client 158.158.32.79:5605] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a7.php"] [unique_id "ae6l6mCmVQOCiCZfqR5gFwAAAA8"]
[Mon Apr 27 07:55:23.663162 2026] [:error] [pid 50863:tid 50943] [client 158.158.32.79:5590] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a7.php"] [unique_id "ae6l63PaUAmshuFrBc8sjAAAANg"]
[Mon Apr 27 07:55:25.076950 2026] [:error] [pid 50863:tid 50922] [client 158.158.32.79:35851] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a7.php"] [unique_id "ae6l7XPaUAmshuFrBc8sjwAAAMM"]
[Mon Apr 27 07:55:26.465826 2026] [:error] [pid 50951:tid 50964] [client 158.158.32.79:5686] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a7.php"] [unique_id "ae6l7l2pquA9BEfFXTgbRgAAAUs"]
[Mon Apr 27 07:55:27.415024 2026] [:error] [pid 50863:tid 50928] [client 158.158.32.79:31306] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "ae6l73PaUAmshuFrBc8skgAAAMk"]
[Mon Apr 27 07:55:28.737181 2026] [:error] [pid 50951:tid 50964] [client 158.158.32.79:26956] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "ae6l8F2pquA9BEfFXTgbTQAAAUs"]
[Mon Apr 27 07:55:29.514836 2026] [:error] [pid 50861:tid 50884] [client 158.158.32.79:57237] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "ae6l8WCmVQOCiCZfqR5gHQAAABM"]
[Mon Apr 27 07:55:31.395052 2026] [:error] [pid 50861:tid 50889] [client 158.158.32.79:59826] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp9.php"] [unique_id "ae6l82CmVQOCiCZfqR5gHgAAABg"]
[Mon Apr 27 07:55:32.569778 2026] [:error] [pid 50951:tid 50971] [client 158.158.32.79:59822] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "ae6l9F2pquA9BEfFXTgbWwAAAVI"]
[Mon Apr 27 07:55:33.470977 2026] [:error] [pid 50863:tid 50939] [client 158.158.32.79:26699] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "ae6l9XPaUAmshuFrBc8smQAAANQ"]
[Mon Apr 27 07:55:35.499759 2026] [:error] [pid 50951:tid 50969] [client 158.158.32.79:59821] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "ae6l912pquA9BEfFXTgbYQAAAVA"]
[Mon Apr 27 07:55:36.706122 2026] [:error] [pid 50862:tid 50905] [client 158.158.32.79:52922] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "ae6l-EtKr9IOeW7InlXAbgAAAI0"]
[Mon Apr 27 07:55:38.006693 2026] [:error] [pid 50862:tid 50892] [client 158.158.32.79:29499] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "ae6l-ktKr9IOeW7InlXAcAAAAIA"]
[Mon Apr 27 07:55:40.249797 2026] [:error] [pid 50863:tid 50925] [client 158.158.32.79:29472] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "ae6l_HPaUAmshuFrBc8spgAAAMY"]
[Mon Apr 27 07:55:41.425109 2026] [:error] [pid 50861:tid 50868] [client 158.158.32.79:52873] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "ae6l_WCmVQOCiCZfqR5gJQAAAAM"]
[Mon Apr 27 07:55:41.948687 2026] [:error] [pid 50862:tid 50896] [client 158.158.32.79:27563] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp5.php"] [unique_id "ae6l_UtKr9IOeW7InlXAcQAAAIQ"]
[Mon Apr 27 07:55:42.853784 2026] [:error] [pid 50861:tid 50882] [client 158.158.32.79:27580] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yuzuru1.php"] [unique_id "ae6l_mCmVQOCiCZfqR5gKgAAABE"]
[Mon Apr 27 07:55:44.894795 2026] [:error] [pid 50861:tid 50878] [client 158.158.32.79:27563] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yuzuru1.php"] [unique_id "ae6mAGCmVQOCiCZfqR5gLwAAAA0"]
[Mon Apr 27 07:55:46.785823 2026] [:error] [pid 50862:tid 50892] [client 158.158.32.79:26959] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yuzuru1.php"] [unique_id "ae6mAktKr9IOeW7InlXAewAAAIA"]
[Mon Apr 27 07:55:48.437455 2026] [:error] [pid 50862:tid 50906] [client 158.158.32.79:26972] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yuzuru1.php"] [unique_id "ae6mBEtKr9IOeW7InlXAfwAAAI4"]
[Mon Apr 27 07:55:54.287736 2026] [:error] [pid 50951:tid 50964] [client 158.158.32.79:53421] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file61.php"] [unique_id "ae6mCl2pquA9BEfFXTgbiAAAAUs"]
[Mon Apr 27 07:55:59.989304 2026] [:error] [pid 50862:tid 50908] [client 158.158.32.79:28006] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file61.php"] [unique_id "ae6mD0tKr9IOeW7InlXAlQAAAJA"]
[Mon Apr 27 07:56:03.100893 2026] [:error] [pid 50861:tid 50879] [client 158.158.32.79:55348] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file61.php"] [unique_id "ae6mE2CmVQOCiCZfqR5gQQAAAA4"]
[Mon Apr 27 07:56:06.760390 2026] [:error] [pid 50862:tid 50910] [client 158.158.32.79:5321] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Cap.php"] [unique_id "ae6mFktKr9IOeW7InlXAnQAAAJI"]
[Mon Apr 27 07:56:18.747620 2026] [:error] [pid 50861:tid 50883] [client 158.158.32.79:37755] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "ae6mImCmVQOCiCZfqR5gZAAAABI"]
[Mon Apr 27 07:56:19.695664 2026] [:error] [pid 50862:tid 50915] [client 158.158.32.79:33328] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "ae6mI0tKr9IOeW7InlXArAAAAJc"]
[Mon Apr 27 07:56:21.178201 2026] [:error] [pid 50863:tid 50929] [client 158.158.32.79:5470] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "ae6mJXPaUAmshuFrBc8s2gAAAMo"]
[Mon Apr 27 07:56:22.455764 2026] [:error] [pid 50863:tid 50941] [client 158.158.32.79:34540] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/motu.php"] [unique_id "ae6mJnPaUAmshuFrBc8s3AAAANY"]
[Mon Apr 27 07:56:23.667842 2026] [:error] [pid 50861:tid 50867] [client 158.158.32.79:33305] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "ae6mJ2CmVQOCiCZfqR5gcwAAAAI"]
[Mon Apr 27 07:56:25.075248 2026] [:error] [pid 50951:tid 50954] [client 158.158.32.79:30780] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "ae6mKV2pquA9BEfFXTgbygAAAUE"]
[Mon Apr 27 07:56:26.842652 2026] [:error] [pid 50951:tid 50965] [client 158.158.32.79:60330] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "ae6mKl2pquA9BEfFXTgbzwAAAUw"]
[Mon Apr 27 07:56:28.349010 2026] [:error] [pid 50951:tid 50977] [client 158.158.32.79:33281] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "ae6mLF2pquA9BEfFXTgb1QAAAVg"]
[Mon Apr 27 07:56:32.372526 2026] [:error] [pid 50863:tid 50942] [client 158.158.32.79:39659] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "ae6mMHPaUAmshuFrBc8s7wAAANc"]
[Mon Apr 27 07:56:34.345830 2026] [:error] [pid 50951:tid 50965] [client 158.158.32.79:37711] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "ae6mMl2pquA9BEfFXTgb7gAAAUw"]
[Mon Apr 27 07:56:37.332193 2026] [:error] [pid 50862:tid 50898] [client 158.158.32.79:34523] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "ae6mNUtKr9IOeW7InlXAugAAAIY"]
[Mon Apr 27 07:56:38.595356 2026] [:error] [pid 50863:tid 50934] [client 158.158.32.79:40889] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "ae6mNnPaUAmshuFrBc8s-QAAAM8"]
[Mon Apr 27 07:56:40.854100 2026] [:error] [pid 50861:tid 50878] [client 158.158.32.79:62073] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8573.php"] [unique_id "ae6mOGCmVQOCiCZfqR5gfQAAAA0"]
[Mon Apr 27 07:56:43.003994 2026] [:error] [pid 50863:tid 50925] [client 158.158.32.79:30722] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8573.php"] [unique_id "ae6mO3PaUAmshuFrBc8tCwAAAMY"]
[Mon Apr 27 07:56:45.800392 2026] [:error] [pid 50951:tid 50968] [client 158.158.32.79:59096] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8573.php"] [unique_id "ae6mPV2pquA9BEfFXTgb_AAAAU8"]
[Mon Apr 27 07:56:50.407874 2026] [:error] [pid 50951:tid 50968] [client 158.158.32.79:34498] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/8573.php"] [unique_id "ae6mQl2pquA9BEfFXTgcCwAAAU8"]
[Mon Apr 27 07:57:03.735135 2026] [:error] [pid 50951:tid 50975] [client 158.158.32.79:30761] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sadcut1.php"] [unique_id "ae6mT12pquA9BEfFXTgcKAAAAVY"]
[Mon Apr 27 07:57:06.441904 2026] [:error] [pid 50863:tid 50933] [client 158.158.32.79:35793] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "ae6mUnPaUAmshuFrBc8tRAAAAM4"]
[Mon Apr 27 07:57:09.310657 2026] [:error] [pid 50863:tid 50940] [client 158.158.32.79:62063] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "ae6mVXPaUAmshuFrBc8tTgAAANU"]
[Mon Apr 27 07:57:13.556442 2026] [:error] [pid 50862:tid 50914] [client 158.158.32.79:35812] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "ae6mWUtKr9IOeW7InlXA-gAAAJY"]
[Mon Apr 27 07:57:17.393694 2026] [:error] [pid 50863:tid 50935] [client 158.158.32.79:5450] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/666.php"] [unique_id "ae6mXXPaUAmshuFrBc8tZgAAANA"]
[Mon Apr 27 07:57:28.884362 2026] [:error] [pid 50862:tid 50898] [client 158.158.32.79:25204] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "ae6maEtKr9IOeW7InlXBLgAAAIY"]
[Mon Apr 27 07:57:29.885688 2026] [:error] [pid 50951:tid 50973] [client 158.158.32.79:5587] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "ae6maV2pquA9BEfFXTgdEwAAAVQ"]
[Mon Apr 27 07:57:30.494978 2026] [:error] [pid 50951:tid 50970] [client 158.158.32.79:52880] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "ae6mal2pquA9BEfFXTgdGQAAAVE"]
[Mon Apr 27 07:57:31.194619 2026] [:error] [pid 50862:tid 50916] [client 158.158.32.79:28741] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/jga.php"] [unique_id "ae6ma0tKr9IOeW7InlXBMAAAAJg"]
[Mon Apr 27 07:57:32.340151 2026] [:error] [pid 50862:tid 50894] [client 158.158.32.79:5574] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/term.php"] [unique_id "ae6mbEtKr9IOeW7InlXBNQAAAII"]
[Mon Apr 27 07:57:33.157760 2026] [:error] [pid 50862:tid 50904] [client 158.158.32.79:22796] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/term.php"] [unique_id "ae6mbUtKr9IOeW7InlXBOQAAAIw"]
[Mon Apr 27 07:57:34.631724 2026] [:error] [pid 50861:tid 50872] [client 158.158.32.79:39017] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/term.php"] [unique_id "ae6mbmCmVQOCiCZfqR5hFAAAAAc"]
[Mon Apr 27 07:57:35.615375 2026] [:error] [pid 50861:tid 50883] [client 158.158.32.79:38425] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/term.php"] [unique_id "ae6mb2CmVQOCiCZfqR5hGAAAABI"]
[Mon Apr 27 07:57:38.652811 2026] [:error] [pid 50863:tid 50927] [client 158.158.32.79:33319] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gk.php"] [unique_id "ae6mcnPaUAmshuFrBc8tkAAAAMg"]
[Mon Apr 27 07:57:41.034595 2026] [:error] [pid 50863:tid 50940] [client 158.158.32.79:22793] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gk.php"] [unique_id "ae6mdXPaUAmshuFrBc8tlAAAANU"]
[Mon Apr 27 07:57:44.883687 2026] [:error] [pid 50863:tid 50923] [client 158.158.32.79:39026] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gk.php"] [unique_id "ae6meHPaUAmshuFrBc8toQAAAMQ"]
[Mon Apr 27 07:57:51.452491 2026] [:error] [pid 50862:tid 50915] [client 158.158.32.79:37096] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gk.php"] [unique_id "ae6mf0tKr9IOeW7InlXBUgAAAJc"]
[Mon Apr 27 07:57:52.584670 2026] [:error] [pid 50861:tid 50887] [client 158.158.32.79:29410] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmu.php"] [unique_id "ae6mgGCmVQOCiCZfqR5hLwAAABY"]
[Mon Apr 27 07:57:55.708037 2026] [:error] [pid 50862:tid 50901] [client 158.158.32.79:22838] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmu.php"] [unique_id "ae6mg0tKr9IOeW7InlXBVwAAAIk"]
[Mon Apr 27 07:57:58.726658 2026] [:error] [pid 50863:tid 50941] [client 158.158.32.79:38993] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmu.php"] [unique_id "ae6mhnPaUAmshuFrBc8twAAAANY"]
[Mon Apr 27 07:57:59.682548 2026] [:error] [pid 50862:tid 50907] [client 158.158.32.79:22797] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmu.php"] [unique_id "ae6mh0tKr9IOeW7InlXBaQAAAI8"]
[Mon Apr 27 07:58:01.472078 2026] [:error] [pid 50862:tid 50901] [client 158.158.32.79:38410] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sd.php"] [unique_id "ae6miUtKr9IOeW7InlXBbQAAAIk"]
[Mon Apr 27 07:58:03.944660 2026] [:error] [pid 50951:tid 50957] [client 158.158.32.79:28743] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sd.php"] [unique_id "ae6mi12pquA9BEfFXTgdOgAAAUQ"]
[Mon Apr 27 07:58:05.512524 2026] [:error] [pid 50951:tid 50953] [client 158.158.32.79:37062] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sd.php"] [unique_id "ae6mjV2pquA9BEfFXTgdQgAAAUA"]
[Mon Apr 27 07:58:08.069310 2026] [:error] [pid 50951:tid 50957] [client 158.158.32.79:31366] [client 158.158.32.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sd.php"] [unique_id "ae6mkF2pquA9BEfFXTgdSQAAAUQ"]
[Mon Apr 27 11:15:51.054098 2026] [autoindex:error] [pid 10926:tid 10928] [client 20.92.73.174:4723] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive
[Mon Apr 27 11:15:51.097800 2026] [proxy_fcgi:error] [pid 10926:tid 10942] [client 20.92.73.174:4723] AH01071: Got error 'Primary script unknown'
[Mon Apr 27 11:15:51.148291 2026] [autoindex:error] [pid 10926:tid 10943] [client 20.92.73.174:4723] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/pki-validation/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive
[Mon Apr 27 11:15:51.413599 2026] [:error] [pid 10926:tid 10935] [client 20.92.73.174:4723] [client 20.92.73.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/403.php"] [unique_id "ae7U585JVz6UQRubscMy2wAAAYc"]
[Mon Apr 27 11:15:51.503135 2026] [:error] [pid 10926:tid 10939] [client 20.92.73.174:4712] [client 20.92.73.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/403.php"] [unique_id "ae7U585JVz6UQRubscMy3AAAAYs"]
[Mon Apr 27 11:15:51.569279 2026] [:error] [pid 10926:tid 10936] [client 20.92.73.174:4695] [client 20.92.73.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/403.php"] [unique_id "ae7U585JVz6UQRubscMy3QAAAYg"]
[Mon Apr 27 11:15:51.633865 2026] [:error] [pid 7056:tid 7080] [client 20.92.73.174:4673] [client 20.92.73.174] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/403.php"] [unique_id "ae7U5yaiHlvwyvjHbeuXNQAAARU"]
[Tue Apr 28 05:08:36.937153 2026] [:error] [pid 56602:tid 56616] [client 192.210.193.248:59196] [client 192.210.193.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "ae_QVPCwhMxzNW_lZSwdTAAAAQw"]
[Tue Apr 28 05:08:36.937741 2026] [:error] [pid 56602:tid 56620] [client 192.210.193.248:59194] [client 192.210.193.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/backend/.env"] [unique_id "ae_QVPCwhMxzNW_lZSwdTQAAARA"]
[Tue Apr 28 05:08:37.333526 2026] [:error] [pid 56602:tid 56609] [client 192.210.193.248:59096] [client 192.210.193.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.development"] [unique_id "ae_QVfCwhMxzNW_lZSwdTgAAAQU"]
[Tue Apr 28 05:08:37.333804 2026] [:error] [pid 56602:tid 56622] [client 192.210.193.248:59090] [client 192.210.193.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.production"] [unique_id "ae_QVfCwhMxzNW_lZSwdTwAAARI"]
[Tue Apr 28 05:08:37.334072 2026] [:error] [pid 56602:tid 56619] [client 192.210.193.248:59062] [client 192.210.193.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.bak"] [unique_id "ae_QVfCwhMxzNW_lZSwdUAAAAQ8"]
[Tue Apr 28 05:08:37.334087 2026] [:error] [pid 56602:tid 56610] [client 192.210.193.248:59078] [client 192.210.193.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "ae_QVfCwhMxzNW_lZSwdUQAAAQY"]
[Tue Apr 28 05:08:37.426319 2026] [:error] [pid 14577:tid 14596] [client 192.210.193.248:40210] [client 192.210.193.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env"] [unique_id "ae_QVSzBH-jwzlgiBdGqJgAAAAo"]
[Tue Apr 28 05:08:37.434373 2026] [:error] [pid 56602:tid 56611] [client 192.210.193.248:59140] [client 192.210.193.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/app/.env"] [unique_id "ae_QVfCwhMxzNW_lZSwdUgAAAQc"]
[Tue Apr 28 05:08:37.434842 2026] [:error] [pid 14579:tid 14660] [client 192.210.193.248:59166] [client 192.210.193.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin/.env"] [unique_id "ae_QVRrUiOG83qKKuuDkXQAAAJQ"]
[Tue Apr 28 05:08:38.126634 2026] [:error] [pid 14579:tid 14646] [client 192.210.193.248:59154] [client 192.210.193.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/api/.env"] [unique_id "ae_QVhrUiOG83qKKuuDkXwAAAIY"]
[Tue Apr 28 05:08:38.126634 2026] [:error] [pid 14578:tid 14615] [client 192.210.193.248:59138] [client 192.210.193.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.example"] [unique_id "ae_QVungo3AwIJgfSHH2OAAAAEI"]
[Tue Apr 28 05:08:38.333886 2026] [:error] [pid 56602:tid 56616] [client 192.210.193.248:59182] [client 192.210.193.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.old"] [unique_id "ae_QVvCwhMxzNW_lZSwdVgAAAQw"]
[Tue Apr 28 05:08:38.834029 2026] [:error] [pid 56602:tid 56606] [client 192.210.193.248:59120] [client 192.210.193.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.backup"] [unique_id "ae_QVvCwhMxzNW_lZSwdWAAAAQI"]
[Tue Apr 28 05:08:39.238676 2026] [:error] [pid 14577:tid 14588] [client 192.210.193.248:59134] [client 192.210.193.248] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.production.bak"] [unique_id "ae_QVyzBH-jwzlgiBdGqJwAAAAI"]
[Tue Apr 28 11:02:09.726801 2026] [:error] [pid 33775:tid 33803] [client 13.75.199.23:9060] [client 13.75.199.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "afAjMZsYOcoQrq88YbXttgAAANg"]
[Tue Apr 28 11:02:09.821153 2026] [:error] [pid 33776:tid 33815] [client 13.75.199.23:9086] [client 13.75.199.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "afAjMV-bEJ2CKP3iKADfTwAAAEc"]
[Tue Apr 28 11:02:09.881589 2026] [:error] [pid 33776:tid 33813] [client 13.75.199.23:11794] [client 13.75.199.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "afAjMV-bEJ2CKP3iKADfUAAAAEU"]
[Tue Apr 28 11:02:09.944328 2026] [:error] [pid 33776:tid 33832] [client 13.75.199.23:11836] [client 13.75.199.23] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "afAjMV-bEJ2CKP3iKADfUQAAAFg"]
[Tue Apr 28 12:25:01.449645 2026] [:error] [pid 33864:tid 33866] [client 20.100.183.137:20491] [client 20.100.183.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws.php"] [unique_id "afA2nTXchLGZ4QggCsnN6AAAAIA"]
[Tue Apr 28 12:25:02.499466 2026] [:error] [pid 33777:tid 33858] [client 20.100.183.137:20188] [client 20.100.183.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws.php"] [unique_id "afA2nrXUCFWqmordGGIcOgAAARc"]
[Tue Apr 28 12:25:03.556230 2026] [:error] [pid 33777:tid 33849] [client 20.100.183.137:17941] [client 20.100.183.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws.php"] [unique_id "afA2n7XUCFWqmordGGIcRgAAAQ4"]
[Tue Apr 28 12:25:04.627676 2026] [:error] [pid 33777:tid 33859] [client 20.100.183.137:24509] [client 20.100.183.137] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws.php"] [unique_id "afA2oLXUCFWqmordGGIcaQAAARg"]
[Tue Apr 28 17:31:35.937456 2026] [:error] [pid 33864:tid 33886] [client 51.13.187.146:42580] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/crgio.php"] [unique_id "afB-dzXchLGZ4QggCskDXgAAAJQ"]
[Tue Apr 28 17:31:37.658731 2026] [:error] [pid 2741:tid 2760] [client 51.13.187.146:51699] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/crgio.php"] [unique_id "afB-efp92FeOz1h6ILzFVAAAAU4"]
[Tue Apr 28 17:31:39.218471 2026] [:error] [pid 33777:tid 33844] [client 51.13.187.146:42583] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/crgio.php"] [unique_id "afB-e7XUCFWqmordGGKgVQAAAQk"]
[Tue Apr 28 17:31:41.810319 2026] [:error] [pid 2741:tid 2758] [client 51.13.187.146:42593] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/crgio.php"] [unique_id "afB-ffp92FeOz1h6ILzFZQAAAUw"]
[Tue Apr 28 17:31:45.228297 2026] [:error] [pid 33776:tid 33819] [client 51.13.187.146:38747] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/geforce.php"] [unique_id "afB-gV-bEJ2CKP3iKAAaGAAAAEs"]
[Tue Apr 28 17:31:46.248495 2026] [:error] [pid 33777:tid 33850] [client 51.13.187.146:36551] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/geforce.php"] [unique_id "afB-grXUCFWqmordGGKghwAAAQ8"]
[Tue Apr 28 17:31:47.987168 2026] [:error] [pid 2741:tid 2766] [client 51.13.187.146:36558] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/geforce.php"] [unique_id "afB-g_p92FeOz1h6ILzFagAAAVQ"]
[Tue Apr 28 17:31:51.014925 2026] [:error] [pid 33777:tid 33835] [client 51.13.187.146:42599] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/geforce.php"] [unique_id "afB-h7XUCFWqmordGGKgigAAAQA"]
[Tue Apr 28 17:31:52.999169 2026] [:error] [pid 33775:tid 33781] [client 51.13.187.146:38777] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-load.php"] [unique_id "afB-iJsYOcoQrq88YbUbSAAAAMI"]
[Tue Apr 28 17:31:53.743859 2026] [:error] [pid 2741:tid 2755] [client 51.13.187.146:48973] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-load.php"] [unique_id "afB-ifp92FeOz1h6ILzFbwAAAUk"]
[Tue Apr 28 17:31:54.438624 2026] [:error] [pid 50889:tid 50897] [client 51.13.187.146:50472] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-load.php"] [unique_id "afB-iozszBr00txEzGgg1QAAAAU"]
[Tue Apr 28 17:31:55.258507 2026] [:error] [pid 2741:tid 2765] [client 51.13.187.146:49000] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-load.php"] [unique_id "afB-i_p92FeOz1h6ILzFcwAAAVM"]
[Tue Apr 28 17:31:56.137899 2026] [:error] [pid 33777:tid 33854] [client 51.13.187.146:38743] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/77.php"] [unique_id "afB-jLXUCFWqmordGGKglAAAARM"]
[Tue Apr 28 17:31:56.803532 2026] [:error] [pid 33864:tid 33889] [client 51.13.187.146:50467] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/77.php"] [unique_id "afB-jDXchLGZ4QggCskDcwAAAJc"]
[Tue Apr 28 17:31:57.591132 2026] [:error] [pid 33777:tid 33840] [client 51.13.187.146:42608] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/77.php"] [unique_id "afB-jbXUCFWqmordGGKgmQAAAQU"]
[Tue Apr 28 17:31:58.192978 2026] [:error] [pid 33777:tid 33845] [client 51.13.187.146:50465] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/77.php"] [unique_id "afB-jrXUCFWqmordGGKgmgAAAQo"]
[Tue Apr 28 17:31:58.906403 2026] [:error] [pid 50889:tid 50906] [client 51.13.187.146:50448] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.sghb.php"] [unique_id "afB-jozszBr00txEzGgg1wAAAA4"]
[Tue Apr 28 17:31:59.774712 2026] [:error] [pid 33776:tid 33818] [client 51.13.187.146:32904] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.sghb.php"] [unique_id "afB-j1-bEJ2CKP3iKAAaGgAAAEo"]
[Tue Apr 28 17:32:01.615157 2026] [:error] [pid 33777:tid 33854] [client 51.13.187.146:55335] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.sghb.php"] [unique_id "afB-kbXUCFWqmordGGKgnwAAARM"]
[Tue Apr 28 17:32:02.763766 2026] [:error] [pid 33775:tid 33780] [client 51.13.187.146:46253] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.sghb.php"] [unique_id "afB-kpsYOcoQrq88YbUbSQAAAME"]
[Tue Apr 28 17:32:04.442945 2026] [:error] [pid 33775:tid 33785] [client 51.13.187.146:46205] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zoko.php"] [unique_id "afB-lJsYOcoQrq88YbUbSgAAAMY"]
[Tue Apr 28 17:32:05.575610 2026] [:error] [pid 50889:tid 50898] [client 51.13.187.146:53720] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zoko.php"] [unique_id "afB-lYzszBr00txEzGgg3gAAAAY"]
[Tue Apr 28 17:32:06.982818 2026] [:error] [pid 2741:tid 2753] [client 51.13.187.146:54446] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zoko.php"] [unique_id "afB-lvp92FeOz1h6ILzFigAAAUc"]
[Tue Apr 28 17:32:10.691055 2026] [:error] [pid 2741:tid 2747] [client 51.13.187.146:54458] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/zoko.php"] [unique_id "afB-mvp92FeOz1h6ILzFlgAAAUE"]
[Tue Apr 28 17:32:11.641884 2026] [:error] [pid 33864:tid 33882] [client 51.13.187.146:57514] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/solo1.php"] [unique_id "afB-mzXchLGZ4QggCskDegAAAJA"]
[Tue Apr 28 17:32:12.588543 2026] [:error] [pid 33864:tid 33877] [client 51.13.187.146:46925] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/solo1.php"] [unique_id "afB-nDXchLGZ4QggCskDfAAAAIs"]
[Tue Apr 28 17:32:14.396201 2026] [:error] [pid 33775:tid 33796] [client 51.13.187.146:11548] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/solo1.php"] [unique_id "afB-npsYOcoQrq88YbUbTwAAANE"]
[Tue Apr 28 17:32:15.974026 2026] [:error] [pid 33864:tid 33871] [client 51.13.187.146:11523] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/solo1.php"] [unique_id "afB-nzXchLGZ4QggCskDfwAAAIU"]
[Tue Apr 28 17:32:18.519360 2026] [:error] [pid 50889:tid 50895] [client 51.13.187.146:34033] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/locales.php"] [unique_id "afB-oozszBr00txEzGgg4gAAAAM"]
[Tue Apr 28 17:32:20.883537 2026] [:error] [pid 2741:tid 2753] [client 51.13.187.146:11603] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/locales.php"] [unique_id "afB-pPp92FeOz1h6ILzFowAAAUc"]
[Tue Apr 28 17:32:21.854771 2026] [:error] [pid 50889:tid 50909] [client 51.13.187.146:56870] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/locales.php"] [unique_id "afB-pYzszBr00txEzGgg4wAAABE"]
[Tue Apr 28 17:32:32.425715 2026] [:error] [pid 50889:tid 50897] [client 51.13.187.146:37214] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "afB-sIzszBr00txEzGgg7QAAAAU"]
[Tue Apr 28 17:32:33.913110 2026] [:error] [pid 33777:tid 33851] [client 51.13.187.146:12075] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bgymj.php"] [unique_id "afB-sbXUCFWqmordGGKg9gAAARA"]
[Tue Apr 28 17:32:43.379307 2026] [:error] [pid 2741:tid 2759] [client 51.13.187.146:50394] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-temp.php"] [unique_id "afB-u_p92FeOz1h6ILzFvQAAAU0"]
[Tue Apr 28 17:32:44.778199 2026] [:error] [pid 33777:tid 33855] [client 51.13.187.146:37207] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-temp.php"] [unique_id "afB-vLXUCFWqmordGGKhCAAAARQ"]
[Tue Apr 28 17:32:45.976177 2026] [:error] [pid 33777:tid 33847] [client 51.13.187.146:41230] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-temp.php"] [unique_id "afB-vbXUCFWqmordGGKhDAAAAQw"]
[Tue Apr 28 17:32:49.068489 2026] [:error] [pid 33776:tid 33827] [client 51.13.187.146:41228] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-temp.php"] [unique_id "afB-wV-bEJ2CKP3iKAAaLAAAAFM"]
[Tue Apr 28 17:32:50.490023 2026] [:error] [pid 33777:tid 33853] [client 51.13.187.146:50418] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "afB-wrXUCFWqmordGGKhEQAAARI"]
[Tue Apr 28 17:32:52.101407 2026] [:error] [pid 33777:tid 33839] [client 51.13.187.146:12140] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "afB-xLXUCFWqmordGGKhFAAAAQQ"]
[Tue Apr 28 17:32:53.975700 2026] [:error] [pid 50889:tid 50899] [client 51.13.187.146:32363] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "afB-xYzszBr00txEzGgg-AAAAAc"]
[Tue Apr 28 17:32:55.727394 2026] [:error] [pid 33864:tid 33887] [client 51.13.187.146:41248] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "afB-xzXchLGZ4QggCskDmgAAAJU"]
[Tue Apr 28 17:33:02.882030 2026] [:error] [pid 33777:tid 33852] [client 51.13.187.146:11369] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "afB-zrXUCFWqmordGGKhZAAAARE"]
[Tue Apr 28 17:33:03.800000 2026] [:error] [pid 33775:tid 33796] [client 51.13.187.146:50429] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "afB-z5sYOcoQrq88YbUbWQAAANE"]
[Tue Apr 28 17:33:07.076947 2026] [:error] [pid 33777:tid 33843] [client 51.13.187.146:41261] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "afB-07XUCFWqmordGGKhZwAAAQg"]
[Tue Apr 28 17:33:15.120339 2026] [:error] [pid 33864:tid 33869] [client 51.13.187.146:54941] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class-bda.php"] [unique_id "afB-2zXchLGZ4QggCskDxAAAAIM"]
[Tue Apr 28 17:33:16.653063 2026] [:error] [pid 2741:tid 2761] [client 51.13.187.146:50401] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class-bda.php"] [unique_id "afB-3Pp92FeOz1h6ILzFwQAAAU8"]
[Tue Apr 28 17:33:18.237642 2026] [:error] [pid 33864:tid 33882] [client 51.13.187.146:32380] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class-bda.php"] [unique_id "afB-3jXchLGZ4QggCskDxQAAAJA"]
[Tue Apr 28 17:33:19.239447 2026] [:error] [pid 2741:tid 2762] [client 51.13.187.146:50390] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class-bda.php"] [unique_id "afB-3_p92FeOz1h6ILzFwgAAAVA"]
[Tue Apr 28 17:33:21.258371 2026] [:error] [pid 2741:tid 2746] [client 51.13.187.146:54928] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bhm.php"] [unique_id "afB-4fp92FeOz1h6ILzFxAAAAUA"]
[Tue Apr 28 17:33:22.651889 2026] [:error] [pid 50889:tid 50897] [client 51.13.187.146:12153] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bhm.php"] [unique_id "afB-4ozszBr00txEzGghMQAAAAU"]
[Tue Apr 28 17:33:24.573341 2026] [:error] [pid 33776:tid 33829] [client 51.13.187.146:12131] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bhm.php"] [unique_id "afB-5F-bEJ2CKP3iKAAaMwAAAFU"]
[Tue Apr 28 17:33:33.961400 2026] [:error] [pid 33864:tid 33877] [client 51.13.187.146:11350] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bhm.php"] [unique_id "afB-7TXchLGZ4QggCskDxgAAAIs"]
[Tue Apr 28 17:33:39.076923 2026] [:error] [pid 33777:tid 33841] [client 51.13.187.146:32379] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmu.php"] [unique_id "afB-87XUCFWqmordGGKhdQAAAQY"]
[Tue Apr 28 17:33:41.659187 2026] [:error] [pid 33777:tid 33857] [client 51.13.187.146:11373] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmu.php"] [unique_id "afB-9bXUCFWqmordGGKhegAAARY"]
[Tue Apr 28 17:33:52.312167 2026] [:error] [pid 50889:tid 50895] [client 51.13.187.146:32381] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/puc.php"] [unique_id "afB_AIzszBr00txEzGghRwAAAAM"]
[Tue Apr 28 17:33:54.174009 2026] [:error] [pid 2741:tid 2766] [client 51.13.187.146:50426] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/puc.php"] [unique_id "afB_Avp92FeOz1h6ILzF2wAAAVQ"]
[Tue Apr 28 17:33:57.338528 2026] [:error] [pid 2741:tid 2757] [client 51.13.187.146:54918] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/puc.php"] [unique_id "afB_Bfp92FeOz1h6ILzF3wAAAUs"]
[Tue Apr 28 17:33:59.508440 2026] [:error] [pid 33777:tid 33845] [client 51.13.187.146:41243] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/puc.php"] [unique_id "afB_B7XUCFWqmordGGKhhAAAAQo"]
[Tue Apr 28 17:34:00.968064 2026] [:error] [pid 2741:tid 2750] [client 51.13.187.146:41278] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "afB_CPp92FeOz1h6ILzF4AAAAUQ"]
[Tue Apr 28 17:34:01.875416 2026] [:error] [pid 33777:tid 33848] [client 51.13.187.146:11355] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "afB_CbXUCFWqmordGGKhhQAAAQ0"]
[Tue Apr 28 17:34:02.822325 2026] [:error] [pid 2741:tid 2755] [client 51.13.187.146:11371] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "afB_Cvp92FeOz1h6ILzF5QAAAUk"]
[Tue Apr 28 17:34:03.457388 2026] [:error] [pid 2741:tid 2751] [client 51.13.187.146:54920] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "afB_C_p92FeOz1h6ILzF6AAAAUU"]
[Tue Apr 28 17:34:04.110414 2026] [:error] [pid 2741:tid 2761] [client 51.13.187.146:11383] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ewp.php"] [unique_id "afB_DPp92FeOz1h6ILzF6QAAAU8"]
[Tue Apr 28 17:34:04.802117 2026] [:error] [pid 2741:tid 2747] [client 51.13.187.146:50422] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ewp.php"] [unique_id "afB_DPp92FeOz1h6ILzF6gAAAUE"]
[Tue Apr 28 17:34:05.934357 2026] [:error] [pid 2741:tid 2757] [client 51.13.187.146:32349] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ewp.php"] [unique_id "afB_Dfp92FeOz1h6ILzF7QAAAUs"]
[Tue Apr 28 17:34:06.798436 2026] [:error] [pid 2741:tid 2753] [client 51.13.187.146:11344] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ewp.php"] [unique_id "afB_Dvp92FeOz1h6ILzF7wAAAUc"]
[Tue Apr 28 17:34:07.630575 2026] [:error] [pid 33777:tid 33841] [client 51.13.187.146:12082] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "afB_D7XUCFWqmordGGKhiQAAAQY"]
[Tue Apr 28 17:34:08.505344 2026] [:error] [pid 2741:tid 2759] [client 51.13.187.146:12129] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "afB_EPp92FeOz1h6ILzF8wAAAU0"]
[Tue Apr 28 17:34:09.164854 2026] [:error] [pid 33864:tid 33881] [client 51.13.187.146:50414] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "afB_ETXchLGZ4QggCskDzAAAAI8"]
[Tue Apr 28 17:34:09.762807 2026] [:error] [pid 33776:tid 33827] [client 51.13.187.146:11358] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "afB_EV-bEJ2CKP3iKAAaNwAAAFM"]
[Tue Apr 28 17:34:10.484406 2026] [:error] [pid 33864:tid 33888] [client 51.13.187.146:50374] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "afB_EjXchLGZ4QggCskDzQAAAJY"]
[Tue Apr 28 17:34:11.125426 2026] [:error] [pid 33776:tid 33828] [client 51.13.187.146:12045] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "afB_E1-bEJ2CKP3iKAAaOAAAAFQ"]
[Tue Apr 28 17:34:11.706662 2026] [:error] [pid 33777:tid 33846] [client 51.13.187.146:12119] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "afB_E7XUCFWqmordGGKhjgAAAQs"]
[Tue Apr 28 17:34:12.724864 2026] [:error] [pid 33775:tid 33799] [client 51.13.187.146:58042] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "afB_FJsYOcoQrq88YbUbfQAAANQ"]
[Tue Apr 28 17:34:13.507560 2026] [:error] [pid 33777:tid 33848] [client 51.13.187.146:12071] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "afB_FbXUCFWqmordGGKhkQAAAQ0"]
[Tue Apr 28 17:34:14.393446 2026] [:error] [pid 33777:tid 33837] [client 51.13.187.146:12046] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "afB_FrXUCFWqmordGGKhkgAAAQI"]
[Tue Apr 28 17:34:15.279653 2026] [:error] [pid 33775:tid 33796] [client 51.13.187.146:11372] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "afB_F5sYOcoQrq88YbUbfwAAANE"]
[Tue Apr 28 17:34:16.116263 2026] [:error] [pid 50889:tid 50910] [client 51.13.187.146:54959] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "afB_GIzszBr00txEzGghSgAAABI"]
[Tue Apr 28 17:34:17.030628 2026] [:error] [pid 33775:tid 33797] [client 51.13.187.146:58029] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "afB_GZsYOcoQrq88YbUbgAAAANI"]
[Tue Apr 28 17:34:17.859918 2026] [:error] [pid 50889:tid 50913] [client 51.13.187.146:32342] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "afB_GYzszBr00txEzGghTgAAABU"]
[Tue Apr 28 17:34:18.504361 2026] [:error] [pid 33864:tid 33880] [client 51.13.187.146:11328] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "afB_GjXchLGZ4QggCskDzwAAAI4"]
[Tue Apr 28 17:34:19.659733 2026] [:error] [pid 33775:tid 33787] [client 51.13.187.146:12069] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "afB_G5sYOcoQrq88YbUbgQAAAMg"]
[Tue Apr 28 17:34:20.622124 2026] [:error] [pid 33775:tid 33779] [client 51.13.187.146:50398] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "afB_HJsYOcoQrq88YbUbggAAAMA"]
[Tue Apr 28 17:34:23.211478 2026] [:error] [pid 33775:tid 33800] [client 51.13.187.146:32372] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "afB_H5sYOcoQrq88YbUbgwAAANU"]
[Tue Apr 28 17:34:24.322139 2026] [:error] [pid 33775:tid 33788] [client 51.13.187.146:12139] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "afB_IJsYOcoQrq88YbUbhAAAAMk"]
[Tue Apr 28 17:34:25.585299 2026] [:error] [pid 33775:tid 33798] [client 51.13.187.146:50385] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "afB_IZsYOcoQrq88YbUbhwAAANM"]
[Tue Apr 28 17:34:26.488111 2026] [:error] [pid 2741:tid 2749] [client 51.13.187.146:41273] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/13.php"] [unique_id "afB_Ivp92FeOz1h6ILzF-QAAAUM"]
[Tue Apr 28 17:34:27.318888 2026] [:error] [pid 33775:tid 33801] [client 51.13.187.146:47612] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/13.php"] [unique_id "afB_I5sYOcoQrq88YbUbiQAAANY"]
[Tue Apr 28 17:34:28.035282 2026] [:error] [pid 33775:tid 33782] [client 51.13.187.146:12148] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/13.php"] [unique_id "afB_JJsYOcoQrq88YbUbigAAAMM"]
[Tue Apr 28 17:34:29.298092 2026] [:error] [pid 33777:tid 33847] [client 51.13.187.146:50430] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/13.php"] [unique_id "afB_JbXUCFWqmordGGKhmAAAAQw"]
[Tue Apr 28 17:34:31.361351 2026] [:error] [pid 2741:tid 2763] [client 51.13.187.146:41262] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tews.php"] [unique_id "afB_J_p92FeOz1h6ILzF_gAAAVE"]
[Tue Apr 28 17:34:32.515802 2026] [:error] [pid 2741:tid 2748] [client 51.13.187.146:32335] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tews.php"] [unique_id "afB_KPp92FeOz1h6ILzGAAAAAUI"]
[Tue Apr 28 17:34:34.124147 2026] [:error] [pid 33777:tid 33835] [client 51.13.187.146:11726] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tews.php"] [unique_id "afB_KrXUCFWqmordGGKhogAAAQA"]
[Tue Apr 28 17:34:35.243583 2026] [:error] [pid 33776:tid 33824] [client 51.13.187.146:32337] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tews.php"] [unique_id "afB_K1-bEJ2CKP3iKAAaPAAAAFA"]
[Tue Apr 28 17:34:36.602394 2026] [:error] [pid 33775:tid 33796] [client 51.13.187.146:11329] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/moshou.php"] [unique_id "afB_LJsYOcoQrq88YbUbjgAAANE"]
[Tue Apr 28 17:34:37.242188 2026] [:error] [pid 33775:tid 33787] [client 51.13.187.146:12068] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/moshou.php"] [unique_id "afB_LZsYOcoQrq88YbUbkAAAAMg"]
[Tue Apr 28 17:34:38.660898 2026] [:error] [pid 33776:tid 33820] [client 51.13.187.146:11364] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/moshou.php"] [unique_id "afB_Ll-bEJ2CKP3iKAAaPQAAAEw"]
[Tue Apr 28 17:34:39.676583 2026] [:error] [pid 33777:tid 33847] [client 51.13.187.146:32374] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/moshou.php"] [unique_id "afB_L7XUCFWqmordGGKhpQAAAQw"]
[Tue Apr 28 17:34:40.596609 2026] [:error] [pid 33777:tid 33839] [client 51.13.187.146:12032] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xeaq.php"] [unique_id "afB_MLXUCFWqmordGGKhpwAAAQQ"]
[Tue Apr 28 17:34:42.126481 2026] [:error] [pid 33775:tid 33783] [client 51.13.187.146:12117] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xeaq.php"] [unique_id "afB_MpsYOcoQrq88YbUbkgAAAMQ"]
[Tue Apr 28 17:34:44.269120 2026] [:error] [pid 33775:tid 33794] [client 51.13.187.146:11363] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xeaq.php"] [unique_id "afB_NJsYOcoQrq88YbUblAAAAM8"]
[Tue Apr 28 17:34:45.373841 2026] [:error] [pid 33777:tid 33843] [client 51.13.187.146:32324] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xeaq.php"] [unique_id "afB_NbXUCFWqmordGGKhqQAAAQg"]
[Tue Apr 28 17:34:46.697215 2026] [:error] [pid 33777:tid 33859] [client 51.13.187.146:12116] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/up2.php"] [unique_id "afB_NrXUCFWqmordGGKhqgAAARg"]
[Tue Apr 28 17:34:47.533454 2026] [:error] [pid 33775:tid 33784] [client 51.13.187.146:12148] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/up2.php"] [unique_id "afB_N5sYOcoQrq88YbUblQAAAMU"]
[Tue Apr 28 17:34:48.186356 2026] [:error] [pid 33777:tid 33835] [client 51.13.187.146:41266] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/up2.php"] [unique_id "afB_OLXUCFWqmordGGKhqwAAAQA"]
[Tue Apr 28 17:34:48.939328 2026] [:error] [pid 33775:tid 33781] [client 51.13.187.146:54930] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/up2.php"] [unique_id "afB_OJsYOcoQrq88YbUblgAAAMI"]
[Tue Apr 28 17:34:49.693877 2026] [:error] [pid 33777:tid 33841] [client 51.13.187.146:58012] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/11.php"] [unique_id "afB_ObXUCFWqmordGGKhrwAAAQY"]
[Tue Apr 28 17:34:50.295710 2026] [:error] [pid 2741:tid 2761] [client 51.13.187.146:50372] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/11.php"] [unique_id "afB_Ovp92FeOz1h6ILzGDwAAAU8"]
[Tue Apr 28 17:34:51.535464 2026] [:error] [pid 33775:tid 33786] [client 51.13.187.146:41226] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/11.php"] [unique_id "afB_O5sYOcoQrq88YbUblwAAAMc"]
[Tue Apr 28 17:35:00.854234 2026] [:error] [pid 33864:tid 33867] [client 51.13.187.146:54914] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/4.php"] [unique_id "afB_RDXchLGZ4QggCskD7wAAAIE"]
[Tue Apr 28 17:35:01.996683 2026] [:error] [pid 33777:tid 33856] [client 51.13.187.146:12108] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/4.php"] [unique_id "afB_RbXUCFWqmordGGKhsAAAARU"]
[Tue Apr 28 17:35:03.247627 2026] [:error] [pid 50889:tid 50905] [client 51.13.187.146:37208] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/4.php"] [unique_id "afB_R4zszBr00txEzGghWQAAAA0"]
[Tue Apr 28 17:35:03.945781 2026] [:error] [pid 33777:tid 33847] [client 51.13.187.146:54946] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/4.php"] [unique_id "afB_R7XUCFWqmordGGKhsgAAAQw"]
[Tue Apr 28 17:35:05.335431 2026] [:error] [pid 33776:tid 33831] [client 51.13.187.146:11362] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/5.php"] [unique_id "afB_SV-bEJ2CKP3iKAAaTgAAAFc"]
[Tue Apr 28 17:35:06.145370 2026] [:error] [pid 2741:tid 2753] [client 51.13.187.146:32368] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/5.php"] [unique_id "afB_Svp92FeOz1h6ILzGPwAAAUc"]
[Tue Apr 28 17:35:07.161295 2026] [:error] [pid 50889:tid 50907] [client 51.13.187.146:32338] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/5.php"] [unique_id "afB_S4zszBr00txEzGghXgAAAA8"]
[Tue Apr 28 17:35:07.911970 2026] [:error] [pid 33777:tid 33854] [client 51.13.187.146:12128] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/5.php"] [unique_id "afB_S7XUCFWqmordGGKhtAAAARM"]
[Tue Apr 28 17:35:08.493750 2026] [:error] [pid 33775:tid 33790] [client 51.13.187.146:54960] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/6.php"] [unique_id "afB_TJsYOcoQrq88YbUbnQAAAMs"]
[Tue Apr 28 17:35:09.197403 2026] [:error] [pid 33777:tid 33857] [client 51.13.187.146:41239] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/6.php"] [unique_id "afB_TbXUCFWqmordGGKhtQAAARY"]
[Tue Apr 28 17:35:09.983091 2026] [:error] [pid 50889:tid 50896] [client 51.13.187.146:32359] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/6.php"] [unique_id "afB_TYzszBr00txEzGghXwAAAAQ"]
[Tue Apr 28 17:35:10.694834 2026] [:error] [pid 33775:tid 33779] [client 51.13.187.146:50420] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/6.php"] [unique_id "afB_TpsYOcoQrq88YbUbngAAAMA"]
[Tue Apr 28 17:35:11.689017 2026] [:error] [pid 50889:tid 50894] [client 51.13.187.146:12053] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/9.php"] [unique_id "afB_T4zszBr00txEzGghYAAAAAI"]
[Tue Apr 28 17:35:12.533009 2026] [:error] [pid 33775:tid 33797] [client 51.13.187.146:12065] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/9.php"] [unique_id "afB_UJsYOcoQrq88YbUbnwAAANI"]
[Tue Apr 28 17:35:13.237571 2026] [:error] [pid 50889:tid 50893] [client 51.13.187.146:32382] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/9.php"] [unique_id "afB_UYzszBr00txEzGghYQAAAAE"]
[Tue Apr 28 17:35:14.175292 2026] [:error] [pid 50889:tid 50901] [client 51.13.187.146:32365] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/9.php"] [unique_id "afB_UozszBr00txEzGghYgAAAAk"]
[Tue Apr 28 17:35:14.992065 2026] [:error] [pid 50889:tid 50899] [client 51.13.187.146:32325] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/10.php"] [unique_id "afB_UozszBr00txEzGghYwAAAAc"]
[Tue Apr 28 17:35:16.236103 2026] [:error] [pid 33777:tid 33842] [client 51.13.187.146:41238] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/10.php"] [unique_id "afB_VLXUCFWqmordGGKhtgAAAQc"]
[Tue Apr 28 17:35:19.443290 2026] [:error] [pid 33777:tid 33837] [client 51.13.187.146:11385] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/10.php"] [unique_id "afB_V7XUCFWqmordGGKhuAAAAQI"]
[Tue Apr 28 17:35:21.398830 2026] [:error] [pid 33777:tid 33859] [client 51.13.187.146:37199] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/10.php"] [unique_id "afB_WbXUCFWqmordGGKhuQAAARg"]
[Tue Apr 28 17:35:22.631197 2026] [:error] [pid 33775:tid 33798] [client 51.13.187.146:32347] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/100.php"] [unique_id "afB_WpsYOcoQrq88YbUboQAAANM"]
[Tue Apr 28 17:35:25.144186 2026] [:error] [pid 50889:tid 50907] [client 51.13.187.146:11352] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/100.php"] [unique_id "afB_XYzszBr00txEzGghcwAAAA8"]
[Tue Apr 28 17:35:28.296889 2026] [:error] [pid 2741:tid 2769] [client 51.13.187.146:12066] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/100.php"] [unique_id "afB_YPp92FeOz1h6ILzGRgAAAVc"]
[Tue Apr 28 17:35:29.629693 2026] [:error] [pid 33776:tid 33817] [client 51.13.187.146:11346] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/100.php"] [unique_id "afB_YV-bEJ2CKP3iKAAaVQAAAEk"]
[Tue Apr 28 17:35:30.815945 2026] [:error] [pid 33775:tid 33802] [client 51.13.187.146:41247] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afB_YpsYOcoQrq88YbUbpgAAANc"]
[Tue Apr 28 17:35:32.235909 2026] [:error] [pid 50889:tid 50893] [client 51.13.187.146:54974] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afB_ZIzszBr00txEzGghdgAAAAE"]
[Tue Apr 28 17:35:33.887539 2026] [:error] [pid 2741:tid 2757] [client 51.13.187.146:37201] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afB_Zfp92FeOz1h6ILzGSgAAAUs"]
[Tue Apr 28 17:35:35.043260 2026] [:error] [pid 2741:tid 2765] [client 51.13.187.146:50369] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afB_Z_p92FeOz1h6ILzGTAAAAVM"]
[Tue Apr 28 17:35:36.145370 2026] [:error] [pid 33777:tid 33838] [client 51.13.187.146:12049] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2026w.php"] [unique_id "afB_aLXUCFWqmordGGKhwQAAAQM"]
[Tue Apr 28 17:35:36.829544 2026] [:error] [pid 33776:tid 33825] [client 51.13.187.146:12096] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2026w.php"] [unique_id "afB_aF-bEJ2CKP3iKAAaVwAAAFE"]
[Tue Apr 28 17:35:37.551070 2026] [:error] [pid 33776:tid 33811] [client 51.13.187.146:11729] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2026w.php"] [unique_id "afB_aV-bEJ2CKP3iKAAaWQAAAEM"]
[Tue Apr 28 17:35:38.426330 2026] [:error] [pid 50889:tid 50902] [client 51.13.187.146:58001] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2026w.php"] [unique_id "afB_aozszBr00txEzGghiwAAAAo"]
[Tue Apr 28 17:35:39.374565 2026] [:error] [pid 33864:tid 33878] [client 51.13.187.146:37196] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "afB_azXchLGZ4QggCskEGQAAAIw"]
[Tue Apr 28 17:35:40.763027 2026] [:error] [pid 33864:tid 33885] [client 51.13.187.146:50403] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "afB_bDXchLGZ4QggCskEHAAAAJM"]
[Tue Apr 28 17:35:42.227048 2026] [:error] [pid 33864:tid 33871] [client 51.13.187.146:11353] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "afB_bjXchLGZ4QggCskEHQAAAIU"]
[Tue Apr 28 17:35:43.572163 2026] [:error] [pid 2741:tid 2762] [client 51.13.187.146:50387] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "afB_b_p92FeOz1h6ILzGjwAAAVA"]
[Tue Apr 28 17:35:44.836849 2026] [:error] [pid 2741:tid 2769] [client 51.13.187.146:37212] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "afB_cPp92FeOz1h6ILzGkQAAAVc"]
[Tue Apr 28 17:35:46.149229 2026] [:error] [pid 33777:tid 33856] [client 51.13.187.146:11391] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "afB_crXUCFWqmordGGKhygAAARU"]
[Tue Apr 28 17:35:47.376675 2026] [:error] [pid 50889:tid 50910] [client 51.13.187.146:36558] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "afB_c4zszBr00txEzGghlwAAABI"]
[Tue Apr 28 17:35:48.962689 2026] [:error] [pid 33864:tid 33884] [client 51.13.187.146:32333] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "afB_dDXchLGZ4QggCskEIAAAAJI"]
[Tue Apr 28 17:35:50.681923 2026] [:error] [pid 33777:tid 33842] [client 51.13.187.146:11387] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "afB_drXUCFWqmordGGKh0gAAAQc"]
[Tue Apr 28 17:35:51.590615 2026] [:error] [pid 33777:tid 33849] [client 51.13.187.146:12104] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "afB_d7XUCFWqmordGGKh1wAAAQ4"]
[Tue Apr 28 17:35:52.630103 2026] [:error] [pid 2741:tid 2763] [client 51.13.187.146:11377] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "afB_ePp92FeOz1h6ILzGkwAAAVE"]
[Tue Apr 28 17:35:53.512896 2026] [:error] [pid 2741:tid 2747] [client 51.13.187.146:12114] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "afB_efp92FeOz1h6ILzGlgAAAUE"]
[Tue Apr 28 17:35:54.592748 2026] [:error] [pid 33775:tid 33799] [client 51.13.187.146:32358] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "afB_epsYOcoQrq88YbUbqQAAANQ"]
[Tue Apr 28 17:35:55.371829 2026] [:error] [pid 2741:tid 2756] [client 51.13.187.146:12115] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "afB_e_p92FeOz1h6ILzGmAAAAUo"]
[Tue Apr 28 17:35:56.588222 2026] [:error] [pid 2741:tid 2746] [client 51.13.187.146:37202] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "afB_fPp92FeOz1h6ILzGmQAAAUA"]
[Tue Apr 28 17:35:57.724463 2026] [:error] [pid 2741:tid 2751] [client 51.13.187.146:37187] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "afB_ffp92FeOz1h6ILzGmwAAAUU"]
[Tue Apr 28 17:35:58.987927 2026] [:error] [pid 50889:tid 50902] [client 51.13.187.146:12058] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "afB_fozszBr00txEzGghnAAAAAo"]
[Tue Apr 28 17:36:09.783113 2026] [:error] [pid 33776:tid 33821] [client 51.13.187.146:41241] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "afB_iV-bEJ2CKP3iKAAacAAAAE0"]
[Tue Apr 28 17:36:11.061742 2026] [:error] [pid 50889:tid 50892] [client 51.13.187.146:11376] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "afB_i4zszBr00txEzGghpAAAAAA"]
[Tue Apr 28 17:36:12.130425 2026] [:error] [pid 2741:tid 2760] [client 51.13.187.146:11337] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "afB_jPp92FeOz1h6ILzGngAAAU4"]
[Tue Apr 28 17:36:13.825062 2026] [:error] [pid 33775:tid 33782] [client 51.13.187.146:54921] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "afB_jZsYOcoQrq88YbUbtgAAAMM"]
[Tue Apr 28 17:36:14.456625 2026] [:error] [pid 33776:tid 33812] [client 51.13.187.146:41251] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "afB_jl-bEJ2CKP3iKAAacgAAAEQ"]
[Tue Apr 28 17:36:16.308317 2026] [:error] [pid 33776:tid 33813] [client 51.13.187.146:11775] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "afB_kF-bEJ2CKP3iKAAadAAAAEU"]
[Tue Apr 28 17:36:17.341508 2026] [:error] [pid 33776:tid 33810] [client 51.13.187.146:12127] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "afB_kV-bEJ2CKP3iKAAadQAAAEI"]
[Tue Apr 28 17:36:18.597869 2026] [:error] [pid 33776:tid 33808] [client 51.13.187.146:32348] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a5.php"] [unique_id "afB_kl-bEJ2CKP3iKAAaeAAAAEA"]
[Tue Apr 28 17:36:19.637136 2026] [:error] [pid 33776:tid 33826] [client 51.13.187.146:54915] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "afB_k1-bEJ2CKP3iKAAafAAAAFI"]
[Tue Apr 28 17:36:21.883291 2026] [:error] [pid 33864:tid 33868] [client 51.13.187.146:41269] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "afB_lTXchLGZ4QggCskEJAAAAII"]
[Tue Apr 28 17:36:24.022768 2026] [:error] [pid 50889:tid 50900] [client 51.13.187.146:12130] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "afB_mIzszBr00txEzGghpwAAAAg"]
[Tue Apr 28 17:36:25.466573 2026] [:error] [pid 50889:tid 50898] [client 51.13.187.146:32331] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f6.php"] [unique_id "afB_mYzszBr00txEzGghqAAAAAY"]
[Tue Apr 28 17:36:27.099603 2026] [:error] [pid 33776:tid 33829] [client 51.13.187.146:12157] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "afB_m1-bEJ2CKP3iKAAaigAAAFU"]
[Tue Apr 28 17:36:28.100467 2026] [:error] [pid 50889:tid 50902] [client 51.13.187.146:37206] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "afB_nIzszBr00txEzGghrAAAAAo"]
[Tue Apr 28 17:36:30.220542 2026] [:error] [pid 33864:tid 33867] [client 51.13.187.146:50397] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "afB_njXchLGZ4QggCskEJQAAAIE"]
[Tue Apr 28 17:36:32.265310 2026] [:error] [pid 33776:tid 33811] [client 51.13.187.146:12051] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "afB_oF-bEJ2CKP3iKAAakQAAAEM"]
[Tue Apr 28 17:36:33.210228 2026] [:error] [pid 33776:tid 33828] [client 51.13.187.146:37192] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/style.php"] [unique_id "afB_oV-bEJ2CKP3iKAAaogAAAFQ"]
[Tue Apr 28 17:36:34.094216 2026] [:error] [pid 2741:tid 2754] [client 51.13.187.146:54958] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/style.php"] [unique_id "afB_ovp92FeOz1h6ILzGowAAAUg"]
[Tue Apr 28 17:36:36.011661 2026] [:error] [pid 33776:tid 33820] [client 51.13.187.146:54954] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/style.php"] [unique_id "afB_pF-bEJ2CKP3iKAAapwAAAEw"]
[Tue Apr 28 17:36:37.638954 2026] [:error] [pid 2741:tid 2764] [client 51.13.187.146:11344] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/style.php"] [unique_id "afB_pfp92FeOz1h6ILzGqQAAAVI"]
[Tue Apr 28 17:36:38.412482 2026] [:error] [pid 33777:tid 33851] [client 51.13.187.146:11357] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/av.php"] [unique_id "afB_prXUCFWqmordGGKh3wAAARA"]
[Tue Apr 28 17:36:41.081771 2026] [:error] [pid 33776:tid 33808] [client 51.13.187.146:37200] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/av.php"] [unique_id "afB_qV-bEJ2CKP3iKAAaqgAAAEA"]
[Tue Apr 28 17:36:42.253707 2026] [:error] [pid 33777:tid 33850] [client 51.13.187.146:11915] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/av.php"] [unique_id "afB_qrXUCFWqmordGGKh5QAAAQ8"]
[Tue Apr 28 17:36:43.374384 2026] [:error] [pid 33777:tid 33839] [client 51.13.187.146:12121] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/av.php"] [unique_id "afB_q7XUCFWqmordGGKh7AAAAQQ"]
[Tue Apr 28 17:36:44.213477 2026] [:error] [pid 2741:tid 2755] [client 51.13.187.146:11388] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afB_rPp92FeOz1h6ILzGrgAAAUk"]
[Tue Apr 28 17:36:45.365428 2026] [:error] [pid 33777:tid 33859] [client 51.13.187.146:12090] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afB_rbXUCFWqmordGGKh8QAAARg"]
[Tue Apr 28 17:36:46.533134 2026] [:error] [pid 2741:tid 2756] [client 51.13.187.146:54957] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afB_rvp92FeOz1h6ILzGsQAAAUo"]
[Tue Apr 28 17:36:47.906053 2026] [:error] [pid 33776:tid 33825] [client 51.13.187.146:41254] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afB_r1-bEJ2CKP3iKAAarAAAAFE"]
[Tue Apr 28 17:36:49.017291 2026] [:error] [pid 33776:tid 33814] [client 51.13.187.146:11935] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "afB_sV-bEJ2CKP3iKAAargAAAEY"]
[Tue Apr 28 17:36:50.015734 2026] [:error] [pid 33775:tid 33787] [client 51.13.187.146:37244] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "afB_spsYOcoQrq88YbUb0AAAAMg"]
[Tue Apr 28 17:36:50.771351 2026] [:error] [pid 2741:tid 2760] [client 51.13.187.146:41220] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "afB_svp92FeOz1h6ILzGtQAAAU4"]
[Tue Apr 28 17:36:51.717827 2026] [:error] [pid 2741:tid 2768] [client 51.13.187.146:37219] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "afB_s_p92FeOz1h6ILzGtwAAAVY"]
[Tue Apr 28 17:36:52.572427 2026] [:error] [pid 50889:tid 50910] [client 51.13.187.146:12047] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "afB_tIzszBr00txEzGghxAAAABI"]
[Tue Apr 28 17:36:53.489777 2026] [:error] [pid 33775:tid 33784] [client 51.13.187.146:54913] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "afB_tZsYOcoQrq88YbUb1gAAAMU"]
[Tue Apr 28 17:36:54.320325 2026] [:error] [pid 33776:tid 33815] [client 51.13.187.146:12100] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "afB_tl-bEJ2CKP3iKAAasAAAAEc"]
[Tue Apr 28 17:36:55.477203 2026] [:error] [pid 33777:tid 33838] [client 51.13.187.146:12063] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "afB_t7XUCFWqmordGGKh-QAAAQM"]
[Tue Apr 28 17:36:56.722059 2026] [:error] [pid 33777:tid 33836] [client 51.13.187.146:11361] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afB_uLXUCFWqmordGGKh_QAAAQE"]
[Tue Apr 28 17:37:00.423489 2026] [:error] [pid 33777:tid 33848] [client 51.13.187.146:56841] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afB_vLXUCFWqmordGGKiCAAAAQ0"]
[Tue Apr 28 17:37:04.341510 2026] [:error] [pid 33776:tid 33831] [client 51.13.187.146:33526] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afB_wF-bEJ2CKP3iKAAasgAAAFc"]
[Tue Apr 28 17:37:05.557580 2026] [:error] [pid 2741:tid 2764] [client 51.13.187.146:47558] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afB_wfp92FeOz1h6ILzHAAAAAVI"]
[Tue Apr 28 17:37:06.711753 2026] [:error] [pid 50889:tid 50912] [client 51.13.187.146:12231] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "afB_wozszBr00txEzGgiAgAAABQ"]
[Tue Apr 28 17:37:22.614965 2026] [:error] [pid 33864:tid 33884] [client 51.13.187.146:12035] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "afB_0jXchLGZ4QggCskEUgAAAJI"]
[Tue Apr 28 17:37:24.363913 2026] [:error] [pid 50889:tid 50892] [client 51.13.187.146:39842] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "afB_1IzszBr00txEzGgiCgAAAAA"]
[Tue Apr 28 17:37:26.294073 2026] [:error] [pid 33775:tid 33795] [client 51.13.187.146:12140] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "afB_1psYOcoQrq88YbUb-gAAANA"]
[Tue Apr 28 17:37:27.965032 2026] [:error] [pid 33776:tid 33810] [client 51.13.187.146:45417] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "afB_11-bEJ2CKP3iKAAaxAAAAEI"]
[Tue Apr 28 17:37:29.235107 2026] [:error] [pid 33775:tid 33797] [client 51.13.187.146:11462] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "afB_2ZsYOcoQrq88YbUb_AAAANI"]
[Tue Apr 28 17:37:30.627219 2026] [:error] [pid 2741:tid 2758] [client 51.13.187.146:55800] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "afB_2vp92FeOz1h6ILzHEQAAAUw"]
[Tue Apr 28 17:37:31.499390 2026] [:error] [pid 2741:tid 2759] [client 51.13.187.146:56328] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "afB_2_p92FeOz1h6ILzHEgAAAU0"]
[Tue Apr 28 17:37:32.800079 2026] [:error] [pid 33776:tid 33826] [client 51.13.187.146:49085] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "afB_3F-bEJ2CKP3iKAAaygAAAFI"]
[Tue Apr 28 17:37:34.980260 2026] [:error] [pid 33777:tid 33842] [client 51.13.187.146:61463] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin1.php"] [unique_id "afB_3rXUCFWqmordGGKiiAAAAQc"]
[Tue Apr 28 17:37:39.343874 2026] [:error] [pid 33864:tid 33886] [client 51.13.187.146:46988] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin1.php"] [unique_id "afB_4zXchLGZ4QggCskEXQAAAJQ"]
[Tue Apr 28 17:37:41.582183 2026] [:error] [pid 2741:tid 2754] [client 51.13.187.146:11815] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin1.php"] [unique_id "afB_5fp92FeOz1h6ILzHGQAAAUg"]
[Tue Apr 28 17:37:44.180687 2026] [:error] [pid 50889:tid 50914] [client 51.13.187.146:56402] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin1.php"] [unique_id "afB_6IzszBr00txEzGgiGAAAABY"]
[Tue Apr 28 17:37:46.487730 2026] [:error] [pid 2741:tid 2760] [client 51.13.187.146:47009] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afB_6vp92FeOz1h6ILzHHAAAAU4"]
[Tue Apr 28 17:37:47.521365 2026] [:error] [pid 33775:tid 33787] [client 51.13.187.146:36027] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afB_65sYOcoQrq88YbUcBQAAAMg"]
[Tue Apr 28 17:37:51.323852 2026] [:error] [pid 33777:tid 33851] [client 51.13.187.146:56391] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afB_77XUCFWqmordGGKikQAAARA"]
[Tue Apr 28 17:37:53.683266 2026] [:error] [pid 33775:tid 33785] [client 51.13.187.146:35983] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afB_8ZsYOcoQrq88YbUcDAAAAMY"]
[Tue Apr 28 17:37:54.547398 2026] [:error] [pid 33775:tid 33801] [client 51.13.187.146:42648] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "afB_8psYOcoQrq88YbUcDgAAANY"]
[Tue Apr 28 17:37:55.824196 2026] [:error] [pid 33777:tid 33835] [client 51.13.187.146:45463] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "afB_87XUCFWqmordGGKimwAAAQA"]
[Tue Apr 28 17:37:57.332278 2026] [:error] [pid 33777:tid 33851] [client 51.13.187.146:12022] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "afB_9bXUCFWqmordGGKinQAAARA"]
[Tue Apr 28 17:37:59.568268 2026] [:error] [pid 2741:tid 2765] [client 51.13.187.146:11832] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "afB_9_p92FeOz1h6ILzHJgAAAVM"]
[Tue Apr 28 17:38:00.489954 2026] [:error] [pid 50889:tid 50897] [client 51.13.187.146:36020] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "afB_-IzszBr00txEzGgiKAAAAAU"]
[Tue Apr 28 17:38:01.357172 2026] [:error] [pid 33775:tid 33786] [client 51.13.187.146:12014] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "afB_-ZsYOcoQrq88YbUcEQAAAMc"]
[Tue Apr 28 17:38:02.852679 2026] [:error] [pid 33864:tid 33877] [client 51.13.187.146:12027] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "afB_-jXchLGZ4QggCskEZwAAAIs"]
[Tue Apr 28 17:38:04.262854 2026] [:error] [pid 33864:tid 33885] [client 51.13.187.146:53066] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "afB__DXchLGZ4QggCskEaQAAAJM"]
[Tue Apr 28 17:38:05.324627 2026] [:error] [pid 33777:tid 33835] [client 51.13.187.146:61413] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/"] [unique_id "afB__bXUCFWqmordGGKipQAAAQA"]
[Tue Apr 28 17:38:07.830340 2026] [:error] [pid 33775:tid 33796] [client 51.13.187.146:61434] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/"] [unique_id "afB__5sYOcoQrq88YbUcFQAAANE"]
[Tue Apr 28 17:38:09.108542 2026] [:error] [pid 33775:tid 33791] [client 51.13.187.146:56387] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/"] [unique_id "afCAAZsYOcoQrq88YbUcHAAAAMw"]
[Tue Apr 28 17:38:10.024418 2026] [:error] [pid 33775:tid 33794] [client 51.13.187.146:36005] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/"] [unique_id "afCAApsYOcoQrq88YbUcHQAAAM8"]
[Tue Apr 28 17:38:11.040170 2026] [:error] [pid 2741:tid 2758] [client 51.13.187.146:35970] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "afCAA_p92FeOz1h6ILzHOgAAAUw"]
[Tue Apr 28 17:38:11.948416 2026] [:error] [pid 33775:tid 33792] [client 51.13.187.146:53087] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "afCAA5sYOcoQrq88YbUcHwAAAM0"]
[Tue Apr 28 17:38:13.673583 2026] [:error] [pid 2741:tid 2762] [client 51.13.187.146:36018] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "afCABfp92FeOz1h6ILzHPAAAAVA"]
[Tue Apr 28 17:38:14.390473 2026] [:error] [pid 33864:tid 33876] [client 51.13.187.146:53104] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "afCABjXchLGZ4QggCskEawAAAIo"]
[Tue Apr 28 17:38:17.348410 2026] [:error] [pid 33777:tid 33846] [client 51.13.187.146:61423] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "afCACbXUCFWqmordGGKiqQAAAQs"]
[Tue Apr 28 17:38:18.706975 2026] [:error] [pid 2741:tid 2747] [client 51.13.187.146:61384] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "afCACvp92FeOz1h6ILzHQQAAAUE"]
[Tue Apr 28 17:38:20.514026 2026] [:error] [pid 33864:tid 33879] [client 51.13.187.146:45492] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "afCADDXchLGZ4QggCskEcQAAAI0"]
[Tue Apr 28 17:38:29.800553 2026] [:error] [pid 50889:tid 50900] [client 51.13.187.146:42646] [client 51.13.187.146] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "afCAFYzszBr00txEzGgiPAAAAAg"]
[Tue Apr 28 17:38:35.280297 2026] [:error] [pid 33864:tid 33882] [client 51.13.187.146:42666] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "afCAGzXchLGZ4QggCskEhwAAAJA"]
[Tue Apr 28 17:38:36.445664 2026] [:error] [pid 33777:tid 33856] [client 51.13.187.146:45502] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "afCAHLXUCFWqmordGGKiyAAAARU"]
[Tue Apr 28 17:38:39.149130 2026] [:error] [pid 33777:tid 33853] [client 51.13.187.146:42628] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "afCAH7XUCFWqmordGGKi0AAAARI"]
[Tue Apr 28 17:38:40.636169 2026] [:error] [pid 33776:tid 33815] [client 51.13.187.146:45452] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "afCAIF-bEJ2CKP3iKAAa8AAAAEc"]
[Tue Apr 28 17:38:42.634107 2026] [:error] [pid 50889:tid 50898] [client 51.13.187.146:11833] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/in.php"] [unique_id "afCAIozszBr00txEzGgiUQAAAAY"]
[Tue Apr 28 17:38:44.287941 2026] [:error] [pid 33777:tid 33846] [client 51.13.187.146:53112] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/in.php"] [unique_id "afCAJLXUCFWqmordGGKi0wAAAQs"]
[Tue Apr 28 17:38:46.413271 2026] [:error] [pid 50889:tid 50906] [client 51.13.187.146:56397] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/in.php"] [unique_id "afCAJozszBr00txEzGgiXAAAAA4"]
[Tue Apr 28 17:38:47.288965 2026] [:error] [pid 33777:tid 33853] [client 51.13.187.146:35979] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/in.php"] [unique_id "afCAJ7XUCFWqmordGGKi2AAAARI"]
[Tue Apr 28 17:38:48.837411 2026] [:error] [pid 33775:tid 33796] [client 51.13.187.146:36019] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "afCAKJsYOcoQrq88YbUcMQAAANE"]
[Tue Apr 28 17:38:50.361874 2026] [:error] [pid 2741:tid 2760] [client 51.13.187.146:45440] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "afCAKvp92FeOz1h6ILzHeAAAAU4"]
[Tue Apr 28 17:38:51.654131 2026] [:error] [pid 33864:tid 33890] [client 51.13.187.146:45498] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "afCAKzXchLGZ4QggCskElwAAAJg"]
[Tue Apr 28 17:38:53.867186 2026] [:error] [pid 33777:tid 33848] [client 51.13.187.146:11802] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "afCALbXUCFWqmordGGKi4AAAAQ0"]
[Tue Apr 28 17:38:55.295934 2026] [:error] [pid 33777:tid 33854] [client 51.13.187.146:42675] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afCAL7XUCFWqmordGGKi5QAAARM"]
[Tue Apr 28 17:38:56.417609 2026] [:error] [pid 33864:tid 33873] [client 51.13.187.146:61439] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afCAMDXchLGZ4QggCskEmgAAAIc"]
[Tue Apr 28 17:38:59.346199 2026] [:error] [pid 2741:tid 2765] [client 51.13.187.146:42677] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afCAM_p92FeOz1h6ILzHggAAAVM"]
[Tue Apr 28 17:39:00.413139 2026] [:error] [pid 33777:tid 33849] [client 51.13.187.146:45488] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afCANLXUCFWqmordGGKi6QAAAQ4"]
[Tue Apr 28 17:39:01.718775 2026] [:error] [pid 33864:tid 33882] [client 51.13.187.146:42669] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "afCANTXchLGZ4QggCskEnAAAAJA"]
[Tue Apr 28 17:39:02.524991 2026] [:error] [pid 33777:tid 33839] [client 51.13.187.146:36017] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "afCANrXUCFWqmordGGKi7AAAAQQ"]
[Tue Apr 28 17:39:04.751909 2026] [:error] [pid 33777:tid 33846] [client 51.13.187.146:61383] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "afCAOLXUCFWqmordGGKi7gAAAQs"]
[Tue Apr 28 17:39:05.721216 2026] [:error] [pid 33864:tid 33870] [client 51.13.187.146:42635] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "afCAOTXchLGZ4QggCskEngAAAIQ"]
[Tue Apr 28 17:39:07.184618 2026] [:error] [pid 33776:tid 33828] [client 51.13.187.146:35994] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afCAO1-bEJ2CKP3iKAAbBAAAAFQ"]
[Tue Apr 28 17:39:09.252221 2026] [:error] [pid 2741:tid 2768] [client 51.13.187.146:35975] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afCAPfp92FeOz1h6ILzHiAAAAVY"]
[Tue Apr 28 17:39:11.764776 2026] [:error] [pid 2741:tid 2747] [client 51.13.187.146:11790] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afCAP_p92FeOz1h6ILzHiQAAAUE"]
[Tue Apr 28 17:39:12.594528 2026] [:error] [pid 33776:tid 33815] [client 51.13.187.146:36008] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afCAQF-bEJ2CKP3iKAAbBgAAAEc"]
[Tue Apr 28 17:39:13.495190 2026] [:error] [pid 33777:tid 33854] [client 51.13.187.146:11834] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "afCAQbXUCFWqmordGGKi9QAAARM"]
[Tue Apr 28 17:39:14.639165 2026] [:error] [pid 33775:tid 33780] [client 51.13.187.146:42670] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "afCAQpsYOcoQrq88YbUcNAAAAME"]
[Tue Apr 28 17:39:15.584779 2026] [:error] [pid 33864:tid 33884] [client 51.13.187.146:53069] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "afCAQzXchLGZ4QggCskEnwAAAJI"]
[Tue Apr 28 17:39:16.835397 2026] [:error] [pid 33776:tid 33828] [client 51.13.187.146:45503] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "afCARF-bEJ2CKP3iKAAbCQAAAFQ"]
[Tue Apr 28 17:39:17.844489 2026] [:error] [pid 50889:tid 50902] [client 51.13.187.146:35976] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "afCARYzszBr00txEzGgiegAAAAo"]
[Tue Apr 28 17:39:19.058634 2026] [:error] [pid 33777:tid 33844] [client 51.13.187.146:35998] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "afCAR7XUCFWqmordGGKi9gAAAQk"]
[Tue Apr 28 17:39:20.268980 2026] [:error] [pid 33775:tid 33791] [client 51.13.187.146:45493] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "afCASJsYOcoQrq88YbUcNQAAAMw"]
[Tue Apr 28 17:39:21.308308 2026] [:error] [pid 33864:tid 33888] [client 51.13.187.146:11781] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "afCASTXchLGZ4QggCskEoAAAAJY"]
[Tue Apr 28 17:39:22.688865 2026] [:error] [pid 33777:tid 33839] [client 51.13.187.146:45465] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "afCASrXUCFWqmordGGKi9wAAAQQ"]
[Tue Apr 28 17:39:23.816230 2026] [:error] [pid 33777:tid 33845] [client 51.13.187.146:11788] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "afCAS7XUCFWqmordGGKi-AAAAQo"]
[Tue Apr 28 17:39:25.179805 2026] [:error] [pid 2741:tid 2753] [client 51.13.187.146:56395] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "afCATfp92FeOz1h6ILzHjgAAAUc"]
[Tue Apr 28 17:39:27.967749 2026] [:error] [pid 33776:tid 33812] [client 51.13.187.146:53110] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "afCAT1-bEJ2CKP3iKAAbDQAAAEQ"]
[Tue Apr 28 17:39:30.204702 2026] [:error] [pid 33776:tid 33811] [client 51.13.187.146:45451] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "afCAUl-bEJ2CKP3iKAAbDgAAAEM"]
[Tue Apr 28 17:39:32.945417 2026] [:error] [pid 2741:tid 2762] [client 51.13.187.146:35364] [client 51.13.187.146] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "afCAVPp92FeOz1h6ILzHkwAAAVA"]
[Tue Apr 28 22:04:46.418434 2026] [:error] [pid 33864:tid 33874] [client 34.44.14.79:57219] [client 34.44.14.79] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.44.14.79, incrementing ddos counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "afC-fjXchLGZ4QggCskyxQAAAIg"]
[Tue Apr 28 22:04:49.317996 2026] [:error] [pid 33864:tid 33871] [client 34.44.14.79:57219] [client 34.44.14.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "afC-gTXchLGZ4QggCsky1wAAAIU"]
[Tue Apr 28 22:04:50.278536 2026] [:error] [pid 33777:tid 33835] [client 34.44.14.79:64220] [client 34.44.14.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "afC-grXUCFWqmordGGII4QAAAQA"]
[Tue Apr 28 22:04:51.272848 2026] [:error] [pid 33777:tid 33841] [client 34.44.14.79:63125] [client 34.44.14.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "afC-g7XUCFWqmordGGII5QAAAQY"]
[Tue Apr 28 22:04:52.235751 2026] [:error] [pid 33777:tid 33858] [client 34.44.14.79:53879] [client 34.44.14.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "afC-hLXUCFWqmordGGII7QAAARc"]
[Tue Apr 28 22:04:53.181360 2026] [:error] [pid 33777:tid 33855] [client 34.44.14.79:51443] [client 34.44.14.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "afC-hbXUCFWqmordGGII8QAAARQ"]
[Tue Apr 28 22:04:54.101103 2026] [:error] [pid 33777:tid 33835] [client 34.44.14.79:50377] [client 34.44.14.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "afC-hrXUCFWqmordGGII8wAAAQA"]
[Tue Apr 28 22:04:55.053685 2026] [:error] [pid 33864:tid 33869] [client 34.44.14.79:53130] [client 34.44.14.79] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "afC-hzXchLGZ4QggCsky2AAAAIM"]
[Wed Apr 29 00:14:53.539289 2026] [:error] [pid 33775:tid 33779] [client 35.245.223.208:65228] [client 35.245.223.208] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 35.245.223.208, incrementing ddos counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "afDc_ZsYOcoQrq88YbVIkQAAAMA"]
[Wed Apr 29 00:14:56.907336 2026] [:error] [pid 33775:tid 33788] [client 35.245.223.208:65228] [client 35.245.223.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "afDdAJsYOcoQrq88YbVInAAAAMk"]
[Wed Apr 29 00:14:57.931561 2026] [:error] [pid 50889:tid 50911] [client 35.245.223.208:51224] [client 35.245.223.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "afDdAYzszBr00txEzGh2hwAAABM"]
[Wed Apr 29 00:14:58.992419 2026] [:error] [pid 2741:tid 2765] [client 35.245.223.208:61043] [client 35.245.223.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "afDdAvp92FeOz1h6ILwx-wAAAVM"]
[Wed Apr 29 00:15:00.064003 2026] [:error] [pid 50889:tid 50893] [client 35.245.223.208:59159] [client 35.245.223.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "afDdBIzszBr00txEzGh2qAAAAAE"]
[Wed Apr 29 00:15:01.182159 2026] [:error] [pid 2741:tid 2751] [client 35.245.223.208:63559] [client 35.245.223.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "afDdBfp92FeOz1h6ILwx_gAAAUU"]
[Wed Apr 29 00:15:02.288091 2026] [:error] [pid 33776:tid 33816] [client 35.245.223.208:61240] [client 35.245.223.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "afDdBl-bEJ2CKP3iKABWwQAAAEg"]
[Wed Apr 29 00:15:03.351168 2026] [:error] [pid 2741:tid 2763] [client 35.245.223.208:49697] [client 35.245.223.208] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "afDdB_p92FeOz1h6ILwyAQAAAVE"]
[Wed Apr 29 04:00:58.231472 2026] [:error] [pid 56755:tid 56787] [client 20.12.211.211:9892] [client 20.12.211.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wk/index.php"] [unique_id "afER-vdXjiwtyGfj4lw-hAAAABc"]
[Wed Apr 29 04:01:00.876364 2026] [:error] [pid 56755:tid 56780] [client 20.12.211.211:9995] [client 20.12.211.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wk/index.php"] [unique_id "afER_PdXjiwtyGfj4lw-hgAAABA"]
[Wed Apr 29 04:01:03.835724 2026] [:error] [pid 56863:tid 56884] [client 20.12.211.211:9993] [client 20.12.211.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wk/index.php"] [unique_id "afER_2QQTEnvYCOsiwK9wQAAANM"]
[Wed Apr 29 04:01:07.676895 2026] [:error] [pid 56863:tid 56888] [client 20.12.211.211:9863] [client 20.12.211.211] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wk/index.php"] [unique_id "afESA2QQTEnvYCOsiwK90gAAANc"]
[Wed Apr 29 11:42:09.531062 2026] [:error] [pid 61539:tid 61548] [client 34.38.189.72:48898] [client 34.38.189.72] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "afF-EV3XmLvOLqFtXVEs7wAAAAU"]
[Wed Apr 29 16:12:29.727407 2026] [:error] [pid 45054:tid 45058] [client 165.22.182.122:50928] [client 165.22.182.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.22.182.122, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "afG9bYtL6SUL31r23c-qoQAAAoI"]
[Wed Apr 29 16:12:30.564064 2026] [:error] [pid 45085:tid 45100] [client 165.22.182.122:63847] [client 165.22.182.122] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 165.22.182.122, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-login.php"] [unique_id "afG9btS7eNjgd8gD6Zz5ywAAAs0"]
[Wed Apr 29 23:02:15.625045 2026] [:error] [pid 21137:tid 21183] [client 195.178.110.223:49500] [client 195.178.110.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env"] [unique_id "afIdd_w-HnaioFPIurV0JAAAAA4"]
[Wed Apr 29 23:02:16.585465 2026] [:error] [pid 21137:tid 21192] [client 195.178.110.223:49536] [client 195.178.110.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "afIdePw-HnaioFPIurV0KwAAABc"]
[Wed Apr 29 23:02:17.555473 2026] [:error] [pid 21227:tid 21241] [client 195.178.110.223:49566] [client 195.178.110.223] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "afIdecB3c6U5AGPPsXqfDQAAAMg"]
[Thu Apr 30 00:01:52.334561 2026] [:error] [pid 47618:tid 47625] [client 34.168.249.18:59713] [client 34.168.249.18] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.168.249.18, incrementing ddos counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "afIrcHHYUSxIrhce2OA8MAAAAUQ"]
[Thu Apr 30 00:01:54.764659 2026] [:error] [pid 47618:tid 47640] [client 34.168.249.18:59713] [client 34.168.249.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "afIrcnHYUSxIrhce2OA8PAAAAVM"]
[Thu Apr 30 00:01:55.423193 2026] [:error] [pid 21536:tid 21545] [client 34.168.249.18:64867] [client 34.168.249.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "afIrcyREaVkH9P5H_LQ8PgAAAIc"]
[Thu Apr 30 00:01:56.139969 2026] [:error] [pid 21138:tid 21210] [client 34.168.249.18:60762] [client 34.168.249.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "afIrdJuzwUiyMeUnp30WawAAAQ0"]
[Thu Apr 30 00:01:56.875405 2026] [:error] [pid 21138:tid 21221] [client 34.168.249.18:54441] [client 34.168.249.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "afIrdJuzwUiyMeUnp30WbQAAARg"]
[Thu Apr 30 00:01:57.578097 2026] [:error] [pid 21138:tid 21212] [client 34.168.249.18:55999] [client 34.168.249.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "afIrdZuzwUiyMeUnp30WbwAAAQ8"]
[Thu Apr 30 00:01:58.237583 2026] [:error] [pid 21536:tid 21558] [client 34.168.249.18:64787] [client 34.168.249.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "afIrdiREaVkH9P5H_LQ8QAAAAJQ"]
[Thu Apr 30 00:01:58.935191 2026] [:error] [pid 21138:tid 21202] [client 34.168.249.18:51277] [client 34.168.249.18] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "afIrdpuzwUiyMeUnp30WcQAAAQU"]
[Thu Apr 30 00:44:04.109919 2026] [:error] [pid 21137:tid 21172] [client 20.251.113.2:25518] [client 20.251.113.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "afI1VPw-HnaioFPIurWJPQAAAAM"]
[Thu Apr 30 00:44:05.150924 2026] [:error] [pid 21137:tid 21186] [client 20.251.113.2:24927] [client 20.251.113.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "afI1Vfw-HnaioFPIurWJPwAAABE"]
[Thu Apr 30 00:44:06.204529 2026] [:error] [pid 21136:tid 21148] [client 20.251.113.2:23017] [client 20.251.113.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "afI1VilIfGGQdPVv8_P7egAAAEc"]
[Thu Apr 30 00:44:07.242766 2026] [:error] [pid 21137:tid 21191] [client 20.251.113.2:23067] [client 20.251.113.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "afI1V_w-HnaioFPIurWJRAAAABY"]
[Thu Apr 30 04:22:55.187688 2026] [:error] [pid 18113:tid 18188] [client 4.211.173.68:7632] [client 4.211.173.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "afJon3iIjwsVGkvz5IlI3wAAAIs"]
[Thu Apr 30 04:22:56.134208 2026] [:error] [pid 18111:tid 18139] [client 4.211.173.68:8170] [client 4.211.173.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "afJooGctLbxB7Q1_oK14nwAAABE"]
[Thu Apr 30 04:22:57.198605 2026] [:error] [pid 18113:tid 18180] [client 4.211.173.68:23498] [client 4.211.173.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "afJooXiIjwsVGkvz5IlI4AAAAIM"]
[Thu Apr 30 04:22:58.301032 2026] [:error] [pid 52436:tid 52453] [client 4.211.173.68:7964] [client 4.211.173.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "afJoogLFWPk_P7AfE8fOLgAAAU4"]
[Thu Apr 30 07:40:30.245982 2026] [:error] [pid 18112:tid 18156] [client 20.251.113.2:24634] [client 20.251.113.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/packed.php"] [unique_id "afKW7iUrJv3y8j6Lm1utngAAAEY"]
[Thu Apr 30 07:40:31.288938 2026] [:error] [pid 52436:tid 52461] [client 20.251.113.2:23139] [client 20.251.113.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/packed.php"] [unique_id "afKW7wLFWPk_P7AfE8f7eAAAAVY"]
[Thu Apr 30 07:40:32.336992 2026] [:error] [pid 18113:tid 18181] [client 20.251.113.2:24583] [client 20.251.113.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/packed.php"] [unique_id "afKW8HiIjwsVGkvz5IlfUgAAAIQ"]
[Thu Apr 30 07:40:33.388315 2026] [:error] [pid 18113:tid 18185] [client 20.251.113.2:50007] [client 20.251.113.2] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/packed.php"] [unique_id "afKW8XiIjwsVGkvz5IlfVQAAAIg"]
[Thu Apr 30 10:38:59.895185 2026] [:error] [pid 18111:tid 18146] [client 4.211.173.68:26030] [client 4.211.173.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/packed.php"] [unique_id "afLAw2ctLbxB7Q1_oK3F5gAAABg"]
[Thu Apr 30 10:39:00.903351 2026] [:error] [pid 18111:tid 18126] [client 4.211.173.68:26477] [client 4.211.173.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/packed.php"] [unique_id "afLAxGctLbxB7Q1_oK3F6QAAAAQ"]
[Thu Apr 30 10:39:02.043611 2026] [:error] [pid 52350:tid 52366] [client 4.211.173.68:28029] [client 4.211.173.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/packed.php"] [unique_id "afLAxv1j4GHE9hm7bfduGwAAAQg"]
[Thu Apr 30 10:39:03.178393 2026] [:error] [pid 18111:tid 18124] [client 4.211.173.68:49900] [client 4.211.173.68] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/packed.php"] [unique_id "afLAx2ctLbxB7Q1_oK3F6wAAAAI"]
[Thu Apr 30 16:32:37.298709 2026] [:error] [pid 40003:tid 40013] [client 34.67.174.61:51206] [client 34.67.174.61] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 34.67.174.61, incrementing ddos counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "afMTpTIyJ-Orl-2KA1K9xgAAAMc"]
[Thu Apr 30 16:32:39.920779 2026] [:error] [pid 40003:tid 40030] [client 34.67.174.61:51206] [client 34.67.174.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "afMTpzIyJ-Orl-2KA1K91wAAANg"]
[Thu Apr 30 16:32:40.773354 2026] [:error] [pid 39912:tid 39989] [client 34.67.174.61:57565] [client 34.67.174.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "afMTqK8-s8fTICYp_ct4ogAAAJI"]
[Thu Apr 30 16:32:41.623349 2026] [:error] [pid 39912:tid 39987] [client 34.67.174.61:53607] [client 34.67.174.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "afMTqa8-s8fTICYp_ct4pAAAAJA"]
[Thu Apr 30 16:32:42.472691 2026] [:error] [pid 40003:tid 40012] [client 34.67.174.61:59882] [client 34.67.174.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "afMTqjIyJ-Orl-2KA1K92wAAAMY"]
[Thu Apr 30 16:32:43.348293 2026] [:error] [pid 40003:tid 40009] [client 34.67.174.61:55184] [client 34.67.174.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "afMTqzIyJ-Orl-2KA1K93wAAAMM"]
[Thu Apr 30 16:32:44.153702 2026] [:error] [pid 40003:tid 40026] [client 34.67.174.61:60690] [client 34.67.174.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "afMTrDIyJ-Orl-2KA1K94wAAANQ"]
[Thu Apr 30 16:32:45.013058 2026] [:error] [pid 39911:tid 39953] [client 34.67.174.61:55790] [client 34.67.174.61] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "afMTrf_4a0SsIQsiLSnnwgAAAEk"]
[Thu Apr 30 21:50:11.909398 2026] [:error] [pid 6456:tid 6467] [client 206.189.145.160:61945] [client 206.189.145.160] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 206.189.145.160, incrementing ddos counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "afNeE0OBwsDodnkJK5xySAAAAEk"], referer: https://mdafriesland.nl//wp-login.php
[Thu Apr 30 21:50:13.333169 2026] [:error] [pid 6456:tid 6459] [client 206.189.145.160:61945] [client 206.189.145.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/blog/robots.txt"] [unique_id "afNeFUOBwsDodnkJK5xySwAAAEE"], referer: https://mdafriesland.nl//wp-login.php
[Thu Apr 30 21:50:14.072904 2026] [:error] [pid 5820:tid 5828] [client 206.189.145.160:57634] [client 206.189.145.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/blog/"] [unique_id "afNeFgyrLh3-LgH3Xv9blAAAAAY"], referer: https://mdafriesland.nl//wp-login.php
[Thu Apr 30 21:50:14.808502 2026] [:error] [pid 5732:tid 5767] [client 206.189.145.160:61397] [client 206.189.145.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wordpress/"] [unique_id "afNeFtuJ3iSd5GdjqlhKrwAAAMQ"], referer: https://mdafriesland.nl//wp-login.php
[Thu Apr 30 21:50:15.547204 2026] [:error] [pid 5820:tid 5836] [client 206.189.145.160:52611] [client 206.189.145.160] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp/"] [unique_id "afNeFwyrLh3-LgH3Xv9blgAAAA4"], referer: https://mdafriesland.nl//wp-login.php
[Fri May 01 07:54:51.442764 2026] [:error] [pid 6046:tid 6094] [client 34.40.141.16:45688] [client 34.40.141.16] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "afPry4yBrpmb1HMIbiT5FgAAAYo"]
[Sat May 02 03:58:52.564748 2026] [:error] [pid 53434:tid 53462] [client 35.185.202.124:39408] [client 35.185.202.124] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "afUF_O9BXmRQcbfsxlyzKgAAABM"]
[Sat May 02 04:03:35.738403 2026] [:error] [pid 22846:tid 22857] [client 92.118.39.29:59068] [client 92.118.39.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "afUHF4m1Ms03Mfhp3aaGZwAAAQk"]
[Sat May 02 07:04:56.517280 2026] [:error] [pid 53436:tid 53523] [client 92.118.39.29:46698] [client 92.118.39.29] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "afUxmK9N0xp8fccVM0BxswAAAJg"]
[Sat May 02 23:30:11.789296 2026] [:error] [pid 52012:tid 52084] [client 177.7.52.134:41670] [client 177.7.52.134] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.production"] [unique_id "afYYg0zSWr-8cpS83mjkzwAAA0c"]
[Sun May 03 00:57:52.243812 2026] [:error] [pid 52012:tid 52081] [client 34.24.172.92:38002] [client 34.24.172.92] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "afYtEEzSWr-8cpS83mgM7gAAA0Q"]
[Sun May 03 09:47:00.079548 2026] [:error] [pid 40386:tid 40408] [client 20.43.1.132:36932] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.dj/index.php"] [unique_id "afapFFHJDYRXUf3IbRTrvwAAANQ"]
[Sun May 03 09:47:00.499464 2026] [:error] [pid 40456:tid 40466] [client 20.43.1.132:37535] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.dj/index.php"] [unique_id "afapFDSujTvwdzEkjSfx1AAAAYg"]
[Sun May 03 09:47:00.914063 2026] [:error] [pid 40422:tid 40446] [client 20.43.1.132:37566] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.dj/index.php"] [unique_id "afapFEHBbBLrXh6PBuuqSAAAAVQ"]
[Sun May 03 09:47:01.336637 2026] [:error] [pid 37246:tid 37269] [client 20.43.1.132:37515] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.dj/index.php"] [unique_id "afapFThvYFGNwhnPamqWHwAAARM"]
[Sun May 03 09:47:01.813961 2026] [:error] [pid 40456:tid 40478] [client 20.43.1.132:37527] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afapFTSujTvwdzEkjSfx1wAAAZQ"]
[Sun May 03 09:47:02.227708 2026] [:error] [pid 40456:tid 40477] [client 20.43.1.132:36970] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afapFjSujTvwdzEkjSfx2AAAAZM"]
[Sun May 03 09:47:02.648962 2026] [:error] [pid 40422:tid 40433] [client 20.43.1.132:36936] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afapFkHBbBLrXh6PBuuqSQAAAUc"]
[Sun May 03 09:47:03.101312 2026] [:error] [pid 40456:tid 40462] [client 20.43.1.132:36951] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/audio/"] [unique_id "afapFzSujTvwdzEkjSfx2QAAAYQ"]
[Sun May 03 09:47:03.540741 2026] [:error] [pid 37126:tid 37161] [client 20.43.1.132:36959] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.tmb/"] [unique_id "afapF_R_A42N-LtDyrvp6gAAAAg"]
[Sun May 03 09:47:03.977740 2026] [:error] [pid 40386:tid 40410] [client 20.43.1.132:37530] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.tmb/"] [unique_id "afapF1HJDYRXUf3IbRTrwAAAANY"]
[Sun May 03 09:47:04.403124 2026] [:error] [pid 40456:tid 40461] [client 20.43.1.132:37518] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.tmb/"] [unique_id "afapGDSujTvwdzEkjSfx3QAAAYM"]
[Sun May 03 09:47:04.851454 2026] [:error] [pid 40456:tid 40459] [client 20.43.1.132:37549] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.tmb/"] [unique_id "afapGDSujTvwdzEkjSfx3gAAAYE"]
[Sun May 03 09:47:05.271309 2026] [:error] [pid 40456:tid 40471] [client 20.43.1.132:36938] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.admin.php"] [unique_id "afapGTSujTvwdzEkjSfx4AAAAY0"]
[Sun May 03 09:47:05.688983 2026] [:error] [pid 40456:tid 40463] [client 20.43.1.132:36933] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.admin.php"] [unique_id "afapGTSujTvwdzEkjSfx4QAAAYU"]
[Sun May 03 09:47:06.125789 2026] [:error] [pid 37130:tid 37223] [client 20.43.1.132:36944] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.admin.php"] [unique_id "afapGqIu7bmXKXicRk9D6QAAAIo"]
[Sun May 03 09:47:06.549593 2026] [:error] [pid 37246:tid 37267] [client 20.43.1.132:37542] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.admin.php"] [unique_id "afapGjhvYFGNwhnPamqWIAAAARE"]
[Sun May 03 09:47:06.986532 2026] [:error] [pid 37126:tid 37162] [client 20.43.1.132:37511] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sw.php"] [unique_id "afapGvR_A42N-LtDyrvp6wAAAAk"]
[Sun May 03 09:47:07.402927 2026] [:error] [pid 37130:tid 37236] [client 20.43.1.132:37545] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sw.php"] [unique_id "afapG6Iu7bmXKXicRk9D7AAAAJc"]
[Sun May 03 09:47:07.819626 2026] [:error] [pid 40386:tid 40409] [client 20.43.1.132:37559] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sw.php"] [unique_id "afapG1HJDYRXUf3IbRTrwgAAANU"]
[Sun May 03 09:47:08.239151 2026] [:error] [pid 40456:tid 40477] [client 20.43.1.132:36928] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sw.php"] [unique_id "afapHDSujTvwdzEkjSfx5AAAAZM"]
[Sun May 03 09:47:08.653939 2026] [:error] [pid 40456:tid 40462] [client 20.43.1.132:36943] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vuln.php"] [unique_id "afapHDSujTvwdzEkjSfx5gAAAYQ"]
[Sun May 03 09:47:09.093469 2026] [:error] [pid 37126:tid 37170] [client 20.43.1.132:37547] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vuln.php"] [unique_id "afapHfR_A42N-LtDyrvp7gAAABE"]
[Sun May 03 09:47:09.511347 2026] [:error] [pid 40456:tid 40481] [client 20.43.1.132:36934] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vuln.php"] [unique_id "afapHTSujTvwdzEkjSfx6AAAAZc"]
[Sun May 03 09:47:09.947997 2026] [:error] [pid 37246:tid 37271] [client 20.43.1.132:22474] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/vuln.php"] [unique_id "afapHThvYFGNwhnPamqWIgAAARU"]
[Sun May 03 09:47:10.368615 2026] [:error] [pid 40456:tid 40467] [client 20.43.1.132:36942] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-temp.php"] [unique_id "afapHjSujTvwdzEkjSfx6wAAAYk"]
[Sun May 03 09:47:10.793198 2026] [:error] [pid 40456:tid 40480] [client 20.43.1.132:37534] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-temp.php"] [unique_id "afapHjSujTvwdzEkjSfx7AAAAZY"]
[Sun May 03 09:47:11.228537 2026] [:error] [pid 37246:tid 37250] [client 20.43.1.132:22490] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-temp.php"] [unique_id "afapHzhvYFGNwhnPamqWJAAAAQI"]
[Sun May 03 09:47:11.645819 2026] [:error] [pid 37246:tid 37256] [client 20.43.1.132:37539] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-temp.php"] [unique_id "afapHzhvYFGNwhnPamqWJQAAAQg"]
[Sun May 03 09:47:12.077297 2026] [:error] [pid 40456:tid 40462] [client 20.43.1.132:37504] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sxdfrt.php"] [unique_id "afapIDSujTvwdzEkjSfx8gAAAYQ"]
[Sun May 03 09:47:12.506114 2026] [:error] [pid 40456:tid 40476] [client 20.43.1.132:36949] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sxdfrt.php"] [unique_id "afapIDSujTvwdzEkjSfx8wAAAZI"]
[Sun May 03 09:47:12.940960 2026] [:error] [pid 37127:tid 37195] [client 20.43.1.132:37514] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sxdfrt.php"] [unique_id "afapIP8khJXb5O5aWVXw8wAAAEs"]
[Sun May 03 09:47:13.363886 2026] [:error] [pid 37127:tid 37190] [client 20.43.1.132:36948] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sxdfrt.php"] [unique_id "afapIf8khJXb5O5aWVXw9AAAAEY"]
[Sun May 03 09:47:13.812940 2026] [:error] [pid 40422:tid 40447] [client 20.43.1.132:37521] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "afapIUHBbBLrXh6PBuuqSgAAAVU"]
[Sun May 03 09:47:14.239864 2026] [:error] [pid 40456:tid 40467] [client 20.43.1.132:36978] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "afapIjSujTvwdzEkjSfx9AAAAYk"]
[Sun May 03 09:47:14.663564 2026] [:error] [pid 37246:tid 37249] [client 20.43.1.132:36940] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "afapIjhvYFGNwhnPamqWKAAAAQE"]
[Sun May 03 09:47:15.088773 2026] [:error] [pid 40456:tid 40475] [client 20.43.1.132:36929] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/twentytwentyfive/assets/"] [unique_id "afapIzSujTvwdzEkjSfx9gAAAZE"]
[Sun May 03 09:47:15.512374 2026] [:error] [pid 37130:tid 37213] [client 20.43.1.132:37526] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "afapI6Iu7bmXKXicRk9D7gAAAIA"]
[Sun May 03 09:47:15.949592 2026] [:error] [pid 40422:tid 40445] [client 20.43.1.132:37529] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "afapI0HBbBLrXh6PBuuqTAAAAVM"]
[Sun May 03 09:47:16.385733 2026] [:error] [pid 40422:tid 40437] [client 20.43.1.132:37533] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "afapJEHBbBLrXh6PBuuqTwAAAUs"]
[Sun May 03 09:47:16.812292 2026] [:error] [pid 37246:tid 37252] [client 20.43.1.132:37513] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/buttons/"] [unique_id "afapJDhvYFGNwhnPamqWKQAAAQQ"]
[Sun May 03 09:47:17.248583 2026] [:error] [pid 40422:tid 40430] [client 20.43.1.132:36935] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class-bda.php"] [unique_id "afapJUHBbBLrXh6PBuuqUgAAAUQ"]
[Sun May 03 09:47:17.666354 2026] [:error] [pid 37130:tid 37214] [client 20.43.1.132:36947] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class-bda.php"] [unique_id "afapJaIu7bmXKXicRk9D7wAAAIE"]
[Sun May 03 09:47:18.112594 2026] [:error] [pid 37246:tid 37255] [client 20.43.1.132:22495] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class-bda.php"] [unique_id "afapJjhvYFGNwhnPamqWKwAAAQc"]
[Sun May 03 09:47:18.533999 2026] [:error] [pid 40456:tid 40460] [client 20.43.1.132:37550] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/class-bda.php"] [unique_id "afapJjSujTvwdzEkjSfx-AAAAYI"]
[Sun May 03 09:47:18.955718 2026] [:error] [pid 37130:tid 37228] [client 20.43.1.132:36968] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bhm.php"] [unique_id "afapJqIu7bmXKXicRk9D8AAAAI8"]
[Sun May 03 09:47:19.387769 2026] [:error] [pid 37246:tid 37259] [client 20.43.1.132:37567] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bhm.php"] [unique_id "afapJzhvYFGNwhnPamqWLgAAAQo"]
[Sun May 03 09:47:19.818200 2026] [:error] [pid 40456:tid 40471] [client 20.43.1.132:36981] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bhm.php"] [unique_id "afapJzSujTvwdzEkjSfx-QAAAY0"]
[Sun May 03 09:47:20.257141 2026] [:error] [pid 40456:tid 40474] [client 20.43.1.132:36954] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bhm.php"] [unique_id "afapKDSujTvwdzEkjSfx-gAAAZA"]
[Sun May 03 09:47:20.708305 2026] [:error] [pid 40456:tid 40458] [client 20.43.1.132:36946] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmu.php"] [unique_id "afapKDSujTvwdzEkjSfx-wAAAYA"]
[Sun May 03 09:47:21.129266 2026] [:error] [pid 40456:tid 40472] [client 20.43.1.132:36988] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmu.php"] [unique_id "afapKTSujTvwdzEkjSfx_AAAAY4"]
[Sun May 03 09:47:21.554004 2026] [:error] [pid 37246:tid 37256] [client 20.43.1.132:22472] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmu.php"] [unique_id "afapKThvYFGNwhnPamqWMQAAAQg"]
[Sun May 03 09:47:21.972298 2026] [:error] [pid 37130:tid 37234] [client 20.43.1.132:36931] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmu.php"] [unique_id "afapKaIu7bmXKXicRk9D8QAAAJU"]
[Sun May 03 09:47:22.393111 2026] [:error] [pid 40386:tid 40408] [client 20.43.1.132:36937] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ref.php"] [unique_id "afapKlHJDYRXUf3IbRTrxwAAANQ"]
[Sun May 03 09:47:22.808185 2026] [:error] [pid 37130:tid 37223] [client 20.43.1.132:36973] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ref.php"] [unique_id "afapKqIu7bmXKXicRk9D8wAAAIo"]
[Sun May 03 09:47:23.236513 2026] [:error] [pid 37246:tid 37253] [client 20.43.1.132:37562] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ref.php"] [unique_id "afapKzhvYFGNwhnPamqWNQAAAQU"]
[Sun May 03 09:47:23.652652 2026] [:error] [pid 37246:tid 37248] [client 20.43.1.132:37509] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ref.php"] [unique_id "afapKzhvYFGNwhnPamqWNwAAAQA"]
[Sun May 03 09:47:24.084054 2026] [:error] [pid 37246:tid 37266] [client 20.43.1.132:36930] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-xme.php"] [unique_id "afapLDhvYFGNwhnPamqWOQAAARA"]
[Sun May 03 09:47:24.502061 2026] [:error] [pid 40456:tid 40475] [client 20.43.1.132:36957] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-xme.php"] [unique_id "afapLDSujTvwdzEkjSfx_wAAAZE"]
[Sun May 03 09:47:24.916457 2026] [:error] [pid 37127:tid 37199] [client 20.43.1.132:36939] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-xme.php"] [unique_id "afapLP8khJXb5O5aWVXw-gAAAE4"]
[Sun May 03 09:47:25.339082 2026] [:error] [pid 37127:tid 37191] [client 20.43.1.132:37544] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-xme.php"] [unique_id "afapLf8khJXb5O5aWVXw_AAAAEc"]
[Sun May 03 09:47:25.752062 2026] [:error] [pid 40386:tid 40389] [client 20.43.1.132:36941] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adminer.php"] [unique_id "afapLVHJDYRXUf3IbRTryAAAAME"]
[Sun May 03 09:47:26.200723 2026] [:error] [pid 40456:tid 40465] [client 20.43.1.132:37516] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adminer.php"] [unique_id "afapLjSujTvwdzEkjSfyAQAAAYc"]
[Sun May 03 09:47:26.634145 2026] [:error] [pid 37246:tid 37272] [client 20.43.1.132:37520] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adminer.php"] [unique_id "afapLjhvYFGNwhnPamqWPQAAARY"]
[Sun May 03 09:47:27.058105 2026] [:error] [pid 37246:tid 37267] [client 20.43.1.132:37553] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adminer.php"] [unique_id "afapLzhvYFGNwhnPamqWPwAAARE"]
[Sun May 03 09:47:27.511986 2026] [:error] [pid 37246:tid 37264] [client 20.43.1.132:22513] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ktfow.php"] [unique_id "afapLzhvYFGNwhnPamqWQgAAAQ4"]
[Sun May 03 09:47:27.951614 2026] [:error] [pid 37246:tid 37251] [client 20.43.1.132:22494] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ktfow.php"] [unique_id "afapLzhvYFGNwhnPamqWRAAAAQM"]
[Sun May 03 09:47:28.371584 2026] [:error] [pid 40422:tid 40444] [client 20.43.1.132:22481] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ktfow.php"] [unique_id "afapMEHBbBLrXh6PBuuqVgAAAVI"]
[Sun May 03 09:47:28.788750 2026] [:error] [pid 37126:tid 37166] [client 20.43.1.132:37524] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ktfow.php"] [unique_id "afapMPR_A42N-LtDyrvp9gAAAA0"]
[Sun May 03 09:47:29.207926 2026] [:error] [pid 37130:tid 37236] [client 20.43.1.132:36953] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mode.php"] [unique_id "afapMaIu7bmXKXicRk9D9wAAAJc"]
[Sun May 03 09:47:29.639805 2026] [:error] [pid 37246:tid 37273] [client 20.43.1.132:37517] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mode.php"] [unique_id "afapMThvYFGNwhnPamqWRgAAARc"]
[Sun May 03 09:47:30.074728 2026] [:error] [pid 37246:tid 37267] [client 20.43.1.132:22510] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mode.php"] [unique_id "afapMjhvYFGNwhnPamqWSAAAARE"]
[Sun May 03 09:47:30.527166 2026] [:error] [pid 37246:tid 37257] [client 20.43.1.132:22477] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mode.php"] [unique_id "afapMjhvYFGNwhnPamqWSgAAAQk"]
[Sun May 03 09:47:30.960733 2026] [:error] [pid 40386:tid 40399] [client 20.43.1.132:36956] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Xx.php"] [unique_id "afapMlHJDYRXUf3IbRTryQAAAMs"]
[Sun May 03 09:47:31.387130 2026] [:error] [pid 37130:tid 37229] [client 20.43.1.132:22430] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Xx.php"] [unique_id "afapM6Iu7bmXKXicRk9D-wAAAJA"]
[Sun May 03 09:47:31.820355 2026] [:error] [pid 37130:tid 37235] [client 20.43.1.132:36969] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Xx.php"] [unique_id "afapM6Iu7bmXKXicRk9EBQAAAJY"]
[Sun May 03 09:47:32.303593 2026] [:error] [pid 37246:tid 37253] [client 20.43.1.132:22496] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/Xx.php"] [unique_id "afapNDhvYFGNwhnPamqWcwAAAQU"]
[Sun May 03 09:47:32.731017 2026] [:error] [pid 37246:tid 37268] [client 20.43.1.132:36966] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmini.php"] [unique_id "afapNDhvYFGNwhnPamqWdAAAARI"]
[Sun May 03 09:47:33.159521 2026] [:error] [pid 37246:tid 37249] [client 20.43.1.132:22419] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmini.php"] [unique_id "afapNThvYFGNwhnPamqWeAAAAQE"]
[Sun May 03 09:47:33.671742 2026] [:error] [pid 40422:tid 40435] [client 20.43.1.132:37525] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmini.php"] [unique_id "afapNUHBbBLrXh6PBuuqWwAAAUk"]
[Sun May 03 09:47:34.199214 2026] [:error] [pid 40456:tid 40480] [client 20.43.1.132:37551] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmini.php"] [unique_id "afapNjSujTvwdzEkjSfyBgAAAZY"]
[Sun May 03 09:47:34.757181 2026] [:error] [pid 40422:tid 40441] [client 20.43.1.132:37522] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2468.php"] [unique_id "afapNkHBbBLrXh6PBuuqXgAAAU8"]
[Sun May 03 09:47:35.337451 2026] [:error] [pid 40422:tid 40447] [client 20.43.1.132:22505] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2468.php"] [unique_id "afapN0HBbBLrXh6PBuuqYgAAAVU"]
[Sun May 03 09:47:35.927211 2026] [:error] [pid 40422:tid 40438] [client 20.43.1.132:37507] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2468.php"] [unique_id "afapN0HBbBLrXh6PBuuqZAAAAUw"]
[Sun May 03 09:47:36.594629 2026] [:error] [pid 40422:tid 40445] [client 20.43.1.132:22526] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2468.php"] [unique_id "afapOEHBbBLrXh6PBuuqZgAAAVM"]
[Sun May 03 09:47:37.054069 2026] [:error] [pid 40456:tid 40465] [client 20.43.1.132:37531] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afapOTSujTvwdzEkjSfyDAAAAYc"]
[Sun May 03 09:47:37.512962 2026] [:error] [pid 40422:tid 40437] [client 20.43.1.132:37541] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afapOUHBbBLrXh6PBuuqZwAAAUs"]
[Sun May 03 09:47:38.255221 2026] [:error] [pid 40456:tid 40476] [client 20.43.1.132:36958] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afapOjSujTvwdzEkjSfyEQAAAZI"]
[Sun May 03 09:47:38.819844 2026] [:error] [pid 40422:tid 40428] [client 20.43.1.132:37538] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/index.php"] [unique_id "afapOkHBbBLrXh6PBuuqagAAAUI"]
[Sun May 03 09:47:39.258393 2026] [:error] [pid 37127:tid 37194] [client 20.43.1.132:36964] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "afapO_8khJXb5O5aWVXxAwAAAEo"]
[Sun May 03 09:47:39.696860 2026] [:error] [pid 40422:tid 40429] [client 20.43.1.132:37532] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "afapO0HBbBLrXh6PBuuqbQAAAUM"]
[Sun May 03 09:47:40.123599 2026] [:error] [pid 40422:tid 40432] [client 20.43.1.132:37537] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "afapPEHBbBLrXh6PBuuqcAAAAUY"]
[Sun May 03 09:47:40.570897 2026] [:error] [pid 40386:tid 40391] [client 20.43.1.132:36952] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "afapPFHJDYRXUf3IbRTrzQAAAMM"]
[Sun May 03 09:47:40.994071 2026] [:error] [pid 40422:tid 40444] [client 20.43.1.132:36963] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amdin.php"] [unique_id "afapPEHBbBLrXh6PBuuqcwAAAVI"]
[Sun May 03 09:47:41.432855 2026] [:error] [pid 40422:tid 40428] [client 20.43.1.132:36955] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amdin.php"] [unique_id "afapPUHBbBLrXh6PBuuqdwAAAUI"]
[Sun May 03 09:47:42.004686 2026] [:error] [pid 40422:tid 40434] [client 20.43.1.132:22489] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amdin.php"] [unique_id "afapPkHBbBLrXh6PBuuqeQAAAUg"]
[Sun May 03 09:47:42.442806 2026] [:error] [pid 40422:tid 40446] [client 20.43.1.132:37548] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/amdin.php"] [unique_id "afapPkHBbBLrXh6PBuuqewAAAVQ"]
[Sun May 03 09:47:43.003487 2026] [:error] [pid 40422:tid 40432] [client 20.43.1.132:37565] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/huya.php"] [unique_id "afapP0HBbBLrXh6PBuuqfAAAAUY"]
[Sun May 03 09:47:43.421883 2026] [:error] [pid 37127:tid 37191] [client 20.43.1.132:37554] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/huya.php"] [unique_id "afapP_8khJXb5O5aWVXxCQAAAEc"]
[Sun May 03 09:47:43.913034 2026] [:error] [pid 40456:tid 40461] [client 20.43.1.132:22484] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/huya.php"] [unique_id "afapPzSujTvwdzEkjSfyEwAAAYM"]
[Sun May 03 09:47:44.360008 2026] [:error] [pid 40422:tid 40430] [client 20.43.1.132:37540] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/huya.php"] [unique_id "afapQEHBbBLrXh6PBuuqfgAAAUQ"]
[Sun May 03 09:47:44.808628 2026] [:error] [pid 40422:tid 40448] [client 20.43.1.132:22515] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/puc.php"] [unique_id "afapQEHBbBLrXh6PBuuqgQAAAVY"]
[Sun May 03 09:47:45.231439 2026] [:error] [pid 40386:tid 40405] [client 20.43.1.132:37557] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/puc.php"] [unique_id "afapQVHJDYRXUf3IbRTrzgAAANE"]
[Sun May 03 09:47:45.673503 2026] [:error] [pid 40386:tid 40392] [client 20.43.1.132:22479] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/puc.php"] [unique_id "afapQVHJDYRXUf3IbRTr0AAAAMQ"]
[Sun May 03 09:47:46.097959 2026] [:error] [pid 37246:tid 37266] [client 20.43.1.132:37506] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/puc.php"] [unique_id "afapQjhvYFGNwhnPamqWkwAAARA"]
[Sun May 03 09:47:46.531366 2026] [:error] [pid 40422:tid 40432] [client 20.43.1.132:36945] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "afapQkHBbBLrXh6PBuuqhAAAAUY"]
[Sun May 03 09:47:46.956802 2026] [:error] [pid 40456:tid 40474] [client 20.43.1.132:22424] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "afapQjSujTvwdzEkjSfyGAAAAZA"]
[Sun May 03 09:47:47.377167 2026] [:error] [pid 37246:tid 37250] [client 20.43.1.132:36976] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "afapQzhvYFGNwhnPamqWlQAAAQI"]
[Sun May 03 09:47:47.809786 2026] [:error] [pid 37126:tid 37167] [client 20.43.1.132:36982] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/themes.php"] [unique_id "afapQ_R_A42N-LtDyrvp_gAAAA4"]
[Sun May 03 09:47:48.223533 2026] [:error] [pid 40422:tid 40439] [client 20.43.1.132:22421] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ewp.php"] [unique_id "afapREHBbBLrXh6PBuuqhQAAAU0"]
[Sun May 03 09:47:48.648889 2026] [:error] [pid 37246:tid 37270] [client 20.43.1.132:22408] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ewp.php"] [unique_id "afapRDhvYFGNwhnPamqWmAAAARQ"]
[Sun May 03 09:47:49.075857 2026] [:error] [pid 40386:tid 40397] [client 20.43.1.132:22468] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ewp.php"] [unique_id "afapRVHJDYRXUf3IbRTr0gAAAMk"]
[Sun May 03 09:47:49.489738 2026] [:error] [pid 37126:tid 37170] [client 20.43.1.132:37560] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ewp.php"] [unique_id "afapRfR_A42N-LtDyrvp_wAAABE"]
[Sun May 03 09:47:49.909111 2026] [:error] [pid 37130:tid 37220] [client 20.43.1.132:37555] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kikikoko.php"] [unique_id "afapRaIu7bmXKXicRk9EEAAAAIc"]
[Sun May 03 09:47:50.325004 2026] [:error] [pid 37246:tid 37255] [client 20.43.1.132:22487] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kikikoko.php"] [unique_id "afapRjhvYFGNwhnPamqWnAAAAQc"]
[Sun May 03 09:47:50.741160 2026] [:error] [pid 40422:tid 40437] [client 20.43.1.132:36990] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kikikoko.php"] [unique_id "afapRkHBbBLrXh6PBuuqigAAAUs"]
[Sun May 03 09:47:51.165455 2026] [:error] [pid 40422:tid 40427] [client 20.43.1.132:22508] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/kikikoko.php"] [unique_id "afapR0HBbBLrXh6PBuuqiwAAAUE"]
[Sun May 03 09:47:51.589730 2026] [:error] [pid 40456:tid 40478] [client 20.43.1.132:22357] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "afapRzSujTvwdzEkjSfyHgAAAZQ"]
[Sun May 03 09:47:52.021596 2026] [:error] [pid 37246:tid 37269] [client 20.43.1.132:22402] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "afapSDhvYFGNwhnPamqWoQAAARM"]
[Sun May 03 09:47:52.440261 2026] [:error] [pid 37246:tid 37254] [client 20.43.1.132:22400] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "afapSDhvYFGNwhnPamqWowAAAQY"]
[Sun May 03 09:47:52.863010 2026] [:error] [pid 40386:tid 40394] [client 20.43.1.132:22497] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dx.php"] [unique_id "afapSFHJDYRXUf3IbRTr1gAAAMY"]
[Sun May 03 09:47:53.294574 2026] [:error] [pid 40386:tid 40403] [client 20.43.1.132:22483] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "afapSVHJDYRXUf3IbRTr2AAAAM8"]
[Sun May 03 09:47:53.711817 2026] [:error] [pid 40422:tid 40431] [client 20.43.1.132:36991] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "afapSUHBbBLrXh6PBuuqjwAAAUU"]
[Sun May 03 09:47:54.129391 2026] [:error] [pid 40422:tid 40432] [client 20.43.1.132:22488] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "afapSkHBbBLrXh6PBuuqkQAAAUY"]
[Sun May 03 09:47:54.548286 2026] [:error] [pid 40422:tid 40447] [client 20.43.1.132:22502] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xff.php"] [unique_id "afapSkHBbBLrXh6PBuuqkgAAAVU"]
[Sun May 03 09:47:54.967716 2026] [:error] [pid 37246:tid 37268] [client 20.43.1.132:36950] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "afapSjhvYFGNwhnPamqWqAAAARI"]
[Sun May 03 09:47:55.382610 2026] [:error] [pid 40386:tid 40389] [client 20.43.1.132:36967] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "afapS1HJDYRXUf3IbRTr2gAAAME"]
[Sun May 03 09:47:55.800035 2026] [:error] [pid 37246:tid 37252] [client 20.43.1.132:22411] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "afapSzhvYFGNwhnPamqWqQAAAQQ"]
[Sun May 03 09:47:56.216005 2026] [:error] [pid 37246:tid 37262] [client 20.43.1.132:37552] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lupo.php"] [unique_id "afapTDhvYFGNwhnPamqWqgAAAQw"]
[Sun May 03 09:47:56.640319 2026] [:error] [pid 37127:tid 37207] [client 20.43.1.132:36962] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "afapTP8khJXb5O5aWVXxEwAAAFU"]
[Sun May 03 09:47:57.066152 2026] [:error] [pid 37127:tid 37191] [client 20.43.1.132:22485] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "afapTf8khJXb5O5aWVXxFgAAAEc"]
[Sun May 03 09:47:57.483788 2026] [:error] [pid 37246:tid 37271] [client 20.43.1.132:22523] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "afapTThvYFGNwhnPamqWrAAAARU"]
[Sun May 03 09:47:57.907431 2026] [:error] [pid 40422:tid 40439] [client 20.43.1.132:22504] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/awa.php"] [unique_id "afapTUHBbBLrXh6PBuuqlAAAAU0"]
[Sun May 03 09:47:58.331090 2026] [:error] [pid 37246:tid 37250] [client 20.43.1.132:36972] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "afapTjhvYFGNwhnPamqWrgAAAQI"]
[Sun May 03 09:47:58.775027 2026] [:error] [pid 37246:tid 37248] [client 20.43.1.132:36961] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/popo.php"] [unique_id "afapTjhvYFGNwhnPamqWsAAAAQA"]
[Sun May 03 09:48:04.863179 2026] [:error] [pid 37246:tid 37273] [client 20.43.1.132:37558] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "afapVDhvYFGNwhnPamqWxQAAARc"]
[Sun May 03 09:48:05.280236 2026] [:error] [pid 40422:tid 40446] [client 20.43.1.132:37519] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "afapVUHBbBLrXh6PBuuqnwAAAVQ"]
[Sun May 03 09:48:05.696627 2026] [:error] [pid 40422:tid 40439] [client 20.43.1.132:36980] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "afapVUHBbBLrXh6PBuuqoQAAAU0"]
[Sun May 03 09:48:06.112491 2026] [:error] [pid 40456:tid 40470] [client 20.43.1.132:22417] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1.php"] [unique_id "afapVjSujTvwdzEkjSfyKgAAAYw"]
[Sun May 03 09:48:06.534060 2026] [:error] [pid 40456:tid 40461] [client 20.43.1.132:22524] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "afapVjSujTvwdzEkjSfyKwAAAYM"]
[Sun May 03 09:48:06.952121 2026] [:error] [pid 37130:tid 37232] [client 20.43.1.132:22525] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "afapVqIu7bmXKXicRk9EIQAAAJM"]
[Sun May 03 09:48:07.382642 2026] [:error] [pid 40456:tid 40474] [client 20.43.1.132:22519] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "afapVzSujTvwdzEkjSfyLAAAAZA"]
[Sun May 03 09:48:07.795989 2026] [:error] [pid 40456:tid 40460] [client 20.43.1.132:37563] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2.php"] [unique_id "afapVzSujTvwdzEkjSfyLQAAAYI"]
[Sun May 03 09:48:08.261228 2026] [:error] [pid 40456:tid 40472] [client 20.43.1.132:22444] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/3.php"] [unique_id "afapWDSujTvwdzEkjSfyLgAAAY4"]
[Sun May 03 09:48:08.675950 2026] [:error] [pid 37246:tid 37268] [client 20.43.1.132:22491] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/3.php"] [unique_id "afapWDhvYFGNwhnPamqWzAAAARI"]
[Sun May 03 09:48:09.101466 2026] [:error] [pid 40422:tid 40449] [client 20.43.1.132:22410] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/3.php"] [unique_id "afapWUHBbBLrXh6PBuuqqQAAAVc"]
[Sun May 03 09:48:09.519798 2026] [:error] [pid 37127:tid 37200] [client 20.43.1.132:36987] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/3.php"] [unique_id "afapWf8khJXb5O5aWVXxHwAAAE8"]
[Sun May 03 09:48:09.932837 2026] [:error] [pid 40422:tid 40447] [client 20.43.1.132:36989] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/4.php"] [unique_id "afapWUHBbBLrXh6PBuuqrAAAAVU"]
[Sun May 03 09:48:10.347693 2026] [:error] [pid 40422:tid 40446] [client 20.43.1.132:22341] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/4.php"] [unique_id "afapWkHBbBLrXh6PBuuqrgAAAVQ"]
[Sun May 03 09:48:10.760589 2026] [:error] [pid 40422:tid 40439] [client 20.43.1.132:37536] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/4.php"] [unique_id "afapWkHBbBLrXh6PBuuqrwAAAU0"]
[Sun May 03 09:48:11.173896 2026] [:error] [pid 40422:tid 40429] [client 20.43.1.132:22439] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/4.php"] [unique_id "afapW0HBbBLrXh6PBuuqsQAAAUM"]
[Sun May 03 09:48:11.621246 2026] [:error] [pid 37246:tid 37264] [client 20.43.1.132:36984] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/5.php"] [unique_id "afapWzhvYFGNwhnPamqWzwAAAQ4"]
[Sun May 03 09:48:12.057610 2026] [:error] [pid 37127:tid 37206] [client 20.43.1.132:22478] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/5.php"] [unique_id "afapXP8khJXb5O5aWVXxIwAAAFQ"]
[Sun May 03 09:48:12.474295 2026] [:error] [pid 40422:tid 40448] [client 20.43.1.132:22503] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/5.php"] [unique_id "afapXEHBbBLrXh6PBuuquAAAAVY"]
[Sun May 03 09:48:12.905203 2026] [:error] [pid 37127:tid 37190] [client 20.43.1.132:22473] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/5.php"] [unique_id "afapXP8khJXb5O5aWVXxJgAAAEY"]
[Sun May 03 09:48:13.350087 2026] [:error] [pid 40422:tid 40431] [client 20.43.1.132:22405] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/6.php"] [unique_id "afapXUHBbBLrXh6PBuuqugAAAUU"]
[Sun May 03 09:48:13.764047 2026] [:error] [pid 40422:tid 40432] [client 20.43.1.132:36986] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/6.php"] [unique_id "afapXUHBbBLrXh6PBuuqvQAAAUY"]
[Sun May 03 09:48:14.186471 2026] [:error] [pid 40422:tid 40440] [client 20.43.1.132:22401] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/6.php"] [unique_id "afapXkHBbBLrXh6PBuuqvwAAAU4"]
[Sun May 03 09:48:14.650375 2026] [:error] [pid 40456:tid 40461] [client 20.43.1.132:22480] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/6.php"] [unique_id "afapXjSujTvwdzEkjSfyNAAAAYM"]
[Sun May 03 09:48:15.073802 2026] [:error] [pid 37127:tid 37203] [client 20.43.1.132:37546] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/9.php"] [unique_id "afapX_8khJXb5O5aWVXxKwAAAFI"]
[Sun May 03 09:48:15.490835 2026] [:error] [pid 37130:tid 37231] [client 20.43.1.132:22414] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/9.php"] [unique_id "afapX6Iu7bmXKXicRk9EJgAAAJI"]
[Sun May 03 09:48:15.921550 2026] [:error] [pid 40456:tid 40460] [client 20.43.1.132:22422] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/9.php"] [unique_id "afapXzSujTvwdzEkjSfyNwAAAYI"]
[Sun May 03 09:48:16.337055 2026] [:error] [pid 40422:tid 40442] [client 20.43.1.132:22492] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/9.php"] [unique_id "afapYEHBbBLrXh6PBuuqwQAAAVA"]
[Sun May 03 09:48:16.761188 2026] [:error] [pid 40422:tid 40430] [client 20.43.1.132:22493] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/10.php"] [unique_id "afapYEHBbBLrXh6PBuuqwwAAAUQ"]
[Sun May 03 09:48:17.178523 2026] [:error] [pid 40386:tid 40399] [client 20.43.1.132:37556] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/10.php"] [unique_id "afapYVHJDYRXUf3IbRTr5QAAAMs"]
[Sun May 03 09:48:17.603767 2026] [:error] [pid 40456:tid 40469] [client 20.43.1.132:22467] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/10.php"] [unique_id "afapYTSujTvwdzEkjSfyOwAAAYs"]
[Sun May 03 09:48:18.025809 2026] [:error] [pid 40422:tid 40449] [client 20.43.1.132:22514] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/10.php"] [unique_id "afapYkHBbBLrXh6PBuuqxgAAAVc"]
[Sun May 03 09:48:18.457481 2026] [:error] [pid 40386:tid 40391] [client 20.43.1.132:22482] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/100.php"] [unique_id "afapYlHJDYRXUf3IbRTr5gAAAMM"]
[Sun May 03 09:48:18.877031 2026] [:error] [pid 40422:tid 40439] [client 20.43.1.132:22522] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/100.php"] [unique_id "afapYkHBbBLrXh6PBuuqyQAAAU0"]
[Sun May 03 09:48:19.291568 2026] [:error] [pid 40456:tid 40463] [client 20.43.1.132:22433] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/100.php"] [unique_id "afapYzSujTvwdzEkjSfyPwAAAYU"]
[Sun May 03 09:48:19.744930 2026] [:error] [pid 40422:tid 40429] [client 20.43.1.132:22456] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/100.php"] [unique_id "afapY0HBbBLrXh6PBuuqywAAAUM"]
[Sun May 03 09:48:20.158634 2026] [:error] [pid 40422:tid 40437] [client 20.43.1.132:36975] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afapZEHBbBLrXh6PBuuqzgAAAUs"]
[Sun May 03 09:48:20.593062 2026] [:error] [pid 40422:tid 40442] [client 20.43.1.132:22469] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afapZEHBbBLrXh6PBuuq0AAAAVA"]
[Sun May 03 09:48:21.022333 2026] [:error] [pid 40456:tid 40479] [client 20.43.1.132:22453] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afapZTSujTvwdzEkjSfyQQAAAZU"]
[Sun May 03 09:48:21.461227 2026] [:error] [pid 40422:tid 40430] [client 20.43.1.132:22434] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.well-known/nastar.php"] [unique_id "afapZUHBbBLrXh6PBuuq0gAAAUQ"]
[Sun May 03 09:48:21.914916 2026] [:error] [pid 40422:tid 40431] [client 20.43.1.132:36971] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f35_S.php"] [unique_id "afapZUHBbBLrXh6PBuuq1QAAAUU"]
[Sun May 03 09:48:22.340699 2026] [:error] [pid 37130:tid 37223] [client 20.43.1.132:22351] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f35_S.php"] [unique_id "afapZqIu7bmXKXicRk9EKQAAAIo"]
[Sun May 03 09:48:22.768267 2026] [:error] [pid 37126:tid 37164] [client 20.43.1.132:22441] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f35_S.php"] [unique_id "afapZvR_A42N-LtDyrvqDAAAAAs"]
[Sun May 03 09:48:23.183232 2026] [:error] [pid 37246:tid 37272] [client 20.43.1.132:37561] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/f35_S.php"] [unique_id "afapZzhvYFGNwhnPamqW0gAAARY"]
[Sun May 03 09:48:23.618505 2026] [:error] [pid 37246:tid 37259] [client 20.43.1.132:22409] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2026w.php"] [unique_id "afapZzhvYFGNwhnPamqW1AAAAQo"]
[Sun May 03 09:48:24.037854 2026] [:error] [pid 40456:tid 40460] [client 20.43.1.132:22406] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2026w.php"] [unique_id "afapaDSujTvwdzEkjSfyRAAAAYI"]
[Sun May 03 09:48:24.466875 2026] [:error] [pid 37246:tid 37251] [client 20.43.1.132:22418] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2026w.php"] [unique_id "afapaDhvYFGNwhnPamqW2AAAAQM"]
[Sun May 03 09:48:24.920558 2026] [:error] [pid 37126:tid 37175] [client 20.43.1.132:22376] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/2026w.php"] [unique_id "afapaPR_A42N-LtDyrvqDQAAABY"]
[Sun May 03 09:48:25.333424 2026] [:error] [pid 40386:tid 40406] [client 20.43.1.132:22407] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/111.php"] [unique_id "afapaVHJDYRXUf3IbRTr6QAAANI"]
[Sun May 03 09:48:25.751191 2026] [:error] [pid 40386:tid 40392] [client 20.43.1.132:22445] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/111.php"] [unique_id "afapaVHJDYRXUf3IbRTr6gAAAMQ"]
[Sun May 03 09:48:26.178503 2026] [:error] [pid 40386:tid 40397] [client 20.43.1.132:22412] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/111.php"] [unique_id "afapalHJDYRXUf3IbRTr7AAAAMk"]
[Sun May 03 09:48:26.599162 2026] [:error] [pid 37126:tid 37169] [client 20.43.1.132:22459] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/111.php"] [unique_id "afapavR_A42N-LtDyrvqDwAAABA"]
[Sun May 03 09:48:27.049295 2026] [:error] [pid 40386:tid 40396] [client 20.43.1.132:22506] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp1.php"] [unique_id "afapa1HJDYRXUf3IbRTr7gAAAMg"]
[Sun May 03 09:48:27.473967 2026] [:error] [pid 40456:tid 40463] [client 20.43.1.132:22404] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp1.php"] [unique_id "afapazSujTvwdzEkjSfySwAAAYU"]
[Sun May 03 09:48:27.910646 2026] [:error] [pid 37126:tid 37161] [client 20.43.1.132:36965] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp1.php"] [unique_id "afapa_R_A42N-LtDyrvqEQAAAAg"]
[Sun May 03 09:48:28.339805 2026] [:error] [pid 40456:tid 40477] [client 20.43.1.132:22209] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp1.php"] [unique_id "afapbDSujTvwdzEkjSfyTQAAAZM"]
[Sun May 03 09:48:28.763618 2026] [:error] [pid 40386:tid 40411] [client 20.43.1.132:22425] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "afapbFHJDYRXUf3IbRTr7wAAANc"]
[Sun May 03 09:48:29.189846 2026] [:error] [pid 40456:tid 40468] [client 20.43.1.132:22463] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "afapbTSujTvwdzEkjSfyUwAAAYo"]
[Sun May 03 09:48:29.621994 2026] [:error] [pid 40386:tid 40403] [client 20.43.1.132:22455] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "afapbVHJDYRXUf3IbRTr8QAAAM8"]
[Sun May 03 09:48:30.057850 2026] [:error] [pid 40386:tid 40389] [client 20.43.1.132:22416] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aligk.php"] [unique_id "afapblHJDYRXUf3IbRTr8gAAAME"]
[Sun May 03 09:48:30.473885 2026] [:error] [pid 40456:tid 40467] [client 20.43.1.132:22500] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "afapbjSujTvwdzEkjSfyWAAAAYk"]
[Sun May 03 09:48:30.898115 2026] [:error] [pid 40386:tid 40399] [client 20.43.1.132:36985] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "afapblHJDYRXUf3IbRTr9AAAAMs"]
[Sun May 03 09:48:31.317476 2026] [:error] [pid 37130:tid 37236] [client 20.43.1.132:22507] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "afapb6Iu7bmXKXicRk9ELQAAAJc"]
[Sun May 03 09:48:31.733507 2026] [:error] [pid 37127:tid 37210] [client 20.43.1.132:36979] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/byrgo.php"] [unique_id "afapb_8khJXb5O5aWVXxNAAAAFg"]
[Sun May 03 09:48:32.147473 2026] [:error] [pid 37127:tid 37189] [client 20.43.1.132:22446] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwpg.php"] [unique_id "afapcP8khJXb5O5aWVXxNQAAAEU"]
[Sun May 03 09:48:32.561321 2026] [:error] [pid 40456:tid 40464] [client 20.43.1.132:22499] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwpg.php"] [unique_id "afapcDSujTvwdzEkjSfydwAAAYY"]
[Sun May 03 09:48:32.974967 2026] [:error] [pid 40422:tid 40442] [client 20.43.1.132:22501] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwpg.php"] [unique_id "afapcEHBbBLrXh6PBuuq4QAAAVA"]
[Sun May 03 09:48:33.403875 2026] [:error] [pid 40456:tid 40479] [client 20.43.1.132:22462] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwpg.php"] [unique_id "afapcTSujTvwdzEkjSfyhQAAAZU"]
[Sun May 03 09:48:33.824002 2026] [:error] [pid 37126:tid 37171] [client 20.43.1.132:22413] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "afapcfR_A42N-LtDyrvqEgAAABI"]
[Sun May 03 09:48:34.247959 2026] [:error] [pid 37246:tid 37250] [client 20.43.1.132:22437] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "afapcjhvYFGNwhnPamqW3wAAAQI"]
[Sun May 03 09:48:34.667371 2026] [:error] [pid 37130:tid 37233] [client 20.43.1.132:22442] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "afapcqIu7bmXKXicRk9ENwAAAJQ"]
[Sun May 03 09:48:35.126572 2026] [:error] [pid 37130:tid 37237] [client 20.43.1.132:37564] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ass.php"] [unique_id "afapc6Iu7bmXKXicRk9EOAAAAJg"]
[Sun May 03 09:48:35.538776 2026] [:error] [pid 37246:tid 37270] [client 20.43.1.132:22363] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "afapczhvYFGNwhnPamqW4QAAARQ"]
[Sun May 03 09:48:35.955718 2026] [:error] [pid 40386:tid 40411] [client 20.43.1.132:36974] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "afapc1HJDYRXUf3IbRTsAAAAANc"]
[Sun May 03 09:48:36.372139 2026] [:error] [pid 37246:tid 37268] [client 20.43.1.132:22443] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "afapdDhvYFGNwhnPamqW4gAAARI"]
[Sun May 03 09:48:36.785493 2026] [:error] [pid 37130:tid 37217] [client 20.43.1.132:22348] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "afapdKIu7bmXKXicRk9EOgAAAIQ"]
[Sun May 03 09:48:37.200763 2026] [:error] [pid 37130:tid 37228] [client 20.43.1.132:22359] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "afapdaIu7bmXKXicRk9EPAAAAI8"]
[Sun May 03 09:48:37.616148 2026] [:error] [pid 37127:tid 37206] [client 20.43.1.132:22361] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "afapdf8khJXb5O5aWVXxOAAAAFQ"]
[Sun May 03 09:48:38.040675 2026] [:error] [pid 37127:tid 37198] [client 20.43.1.132:22377] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "afapdv8khJXb5O5aWVXxOgAAAE0"]
[Sun May 03 09:48:38.456722 2026] [:error] [pid 37127:tid 37186] [client 20.43.1.132:36977] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/no18.php"] [unique_id "afapdv8khJXb5O5aWVXxPAAAAEI"]
[Sun May 03 09:48:38.875957 2026] [:error] [pid 40422:tid 40438] [client 20.43.1.132:37543] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "afapdkHBbBLrXh6PBuuq5gAAAUw"]
[Sun May 03 09:48:39.289598 2026] [:error] [pid 40422:tid 40444] [client 20.43.1.132:22356] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "afapd0HBbBLrXh6PBuuq6AAAAVI"]
[Sun May 03 09:48:39.713101 2026] [:error] [pid 40422:tid 40450] [client 20.43.1.132:22305] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "afapd0HBbBLrXh6PBuuq6wAAAVg"]
[Sun May 03 09:48:40.131657 2026] [:error] [pid 40386:tid 40402] [client 20.43.1.132:22275] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fine.php"] [unique_id "afapeFHJDYRXUf3IbRTsAgAAAM4"]
[Sun May 03 09:48:40.549586 2026] [:error] [pid 40456:tid 40479] [client 20.43.1.132:22465] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "afapeDSujTvwdzEkjSfyjgAAAZU"]
[Sun May 03 09:48:40.966890 2026] [:error] [pid 40456:tid 40468] [client 20.43.1.132:22448] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "afapeDSujTvwdzEkjSfykQAAAYo"]
[Sun May 03 09:48:41.377481 2026] [:error] [pid 40456:tid 40462] [client 20.43.1.132:22297] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "afapeTSujTvwdzEkjSfykgAAAYQ"]
[Sun May 03 09:48:41.800385 2026] [:error] [pid 40456:tid 40470] [client 20.43.1.132:22512] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hplfuns.php"] [unique_id "afapeTSujTvwdzEkjSfykwAAAYw"]
[Sun May 03 09:48:42.261981 2026] [:error] [pid 37246:tid 37261] [client 20.43.1.132:37528] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "afapejhvYFGNwhnPamqW5QAAAQs"]
[Sun May 03 09:48:42.691512 2026] [:error] [pid 37246:tid 37269] [client 20.43.1.132:22354] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "afapejhvYFGNwhnPamqW5gAAARM"]
[Sun May 03 09:48:43.110339 2026] [:error] [pid 37246:tid 37271] [client 20.43.1.132:22431] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "afapezhvYFGNwhnPamqW6AAAARU"]
[Sun May 03 09:48:43.541748 2026] [:error] [pid 40386:tid 40404] [client 20.43.1.132:22343] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xa.php"] [unique_id "afape1HJDYRXUf3IbRTsBgAAANA"]
[Sun May 03 09:48:43.957480 2026] [:error] [pid 37127:tid 37203] [client 20.43.1.132:22396] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "afape_8khJXb5O5aWVXxQAAAAFI"]
[Sun May 03 09:48:44.392424 2026] [:error] [pid 37246:tid 37265] [client 20.43.1.132:22283] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "afapfDhvYFGNwhnPamqW6gAAAQ8"]
[Sun May 03 09:48:44.819613 2026] [:error] [pid 37127:tid 37194] [client 20.43.1.132:22486] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "afapfP8khJXb5O5aWVXxQQAAAEo"]
[Sun May 03 09:48:45.234037 2026] [:error] [pid 40386:tid 40392] [client 20.43.1.132:22287] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin.php"] [unique_id "afapfVHJDYRXUf3IbRTsCQAAAMQ"]
[Sun May 03 09:48:45.655461 2026] [:error] [pid 37126:tid 37168] [client 20.43.1.132:22517] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "afapffR_A42N-LtDyrvqFwAAAA8"]
[Sun May 03 09:48:46.072890 2026] [:error] [pid 37246:tid 37268] [client 20.43.1.132:22464] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "afapfjhvYFGNwhnPamqW7gAAARI"]
[Sun May 03 09:48:46.491933 2026] [:error] [pid 37127:tid 37198] [client 20.43.1.132:22449] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "afapfv8khJXb5O5aWVXxQgAAAE0"]
[Sun May 03 09:48:46.921599 2026] [:error] [pid 37127:tid 37184] [client 20.43.1.132:36960] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inege.php"] [unique_id "afapfv8khJXb5O5aWVXxQwAAAEA"]
[Sun May 03 09:48:47.365967 2026] [:error] [pid 37246:tid 37257] [client 20.43.1.132:22498] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "afapfzhvYFGNwhnPamqW8AAAAQk"]
[Sun May 03 09:48:47.785737 2026] [:error] [pid 37127:tid 37207] [client 20.43.1.132:22457] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "afapf_8khJXb5O5aWVXxRwAAAFU"]
[Sun May 03 09:48:48.204114 2026] [:error] [pid 40456:tid 40478] [client 20.43.1.132:22292] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "afapgDSujTvwdzEkjSfylgAAAZQ"]
[Sun May 03 09:48:48.627222 2026] [:error] [pid 40456:tid 40475] [client 20.43.1.132:22285] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "afapgDSujTvwdzEkjSfylwAAAZE"]
[Sun May 03 09:48:49.048024 2026] [:error] [pid 37246:tid 37267] [client 20.43.1.132:22475] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "afapgThvYFGNwhnPamqW8QAAARE"]
[Sun May 03 09:48:49.468605 2026] [:error] [pid 40456:tid 40468] [client 20.43.1.132:22454] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "afapgTSujTvwdzEkjSfymAAAAYo"]
[Sun May 03 09:48:49.885878 2026] [:error] [pid 37246:tid 37273] [client 20.43.1.132:22353] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "afapgThvYFGNwhnPamqW8gAAARc"]
[Sun May 03 09:48:50.302292 2026] [:error] [pid 40422:tid 40439] [client 20.43.1.132:22427] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uuu.php"] [unique_id "afapgkHBbBLrXh6PBuuq7gAAAU0"]
[Sun May 03 09:48:50.716321 2026] [:error] [pid 37126:tid 37159] [client 20.43.1.132:22355] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/no1.php"] [unique_id "afapgvR_A42N-LtDyrvqGgAAAAY"]
[Sun May 03 09:48:51.131548 2026] [:error] [pid 37246:tid 37261] [client 20.43.1.132:22300] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/no1.php"] [unique_id "afapgzhvYFGNwhnPamqW8wAAAQs"]
[Sun May 03 09:48:51.563153 2026] [:error] [pid 37130:tid 37218] [client 20.43.1.132:22518] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/no1.php"] [unique_id "afapg6Iu7bmXKXicRk9EQwAAAIU"]
[Sun May 03 09:48:51.977858 2026] [:error] [pid 37126:tid 37165] [client 20.43.1.132:22367] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/no1.php"] [unique_id "afapg_R_A42N-LtDyrvqGwAAAAw"]
[Sun May 03 09:48:52.397899 2026] [:error] [pid 40456:tid 40462] [client 20.43.1.132:22277] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/w2025.php"] [unique_id "afaphDSujTvwdzEkjSfymwAAAYQ"]
[Sun May 03 09:48:52.821006 2026] [:error] [pid 37130:tid 37237] [client 20.43.1.132:22389] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/w2025.php"] [unique_id "afaphKIu7bmXKXicRk9ERAAAAJg"]
[Sun May 03 09:48:53.242955 2026] [:error] [pid 40422:tid 40434] [client 20.43.1.132:22364] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/w2025.php"] [unique_id "afaphUHBbBLrXh6PBuuq8gAAAUg"]
[Sun May 03 09:48:53.668760 2026] [:error] [pid 37126:tid 37161] [client 20.43.1.132:22383] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/w2025.php"] [unique_id "afaphfR_A42N-LtDyrvqHAAAAAg"]
[Sun May 03 09:48:54.084677 2026] [:error] [pid 37246:tid 37253] [client 20.43.1.132:22372] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fvvff.php"] [unique_id "afaphjhvYFGNwhnPamqW9AAAAQU"]
[Sun May 03 09:48:54.518521 2026] [:error] [pid 37246:tid 37249] [client 20.43.1.132:22511] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fvvff.php"] [unique_id "afaphjhvYFGNwhnPamqW9QAAAQE"]
[Sun May 03 09:48:54.943298 2026] [:error] [pid 37126:tid 37153] [client 20.43.1.132:22440] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fvvff.php"] [unique_id "afaphvR_A42N-LtDyrvqHQAAAAI"]
[Sun May 03 09:48:55.368177 2026] [:error] [pid 40456:tid 40471] [client 20.43.1.132:22460] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fvvff.php"] [unique_id "afaphzSujTvwdzEkjSfynAAAAY0"]
[Sun May 03 09:48:55.797851 2026] [:error] [pid 37130:tid 37220] [client 20.43.1.132:22349] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "afaph6Iu7bmXKXicRk9ERwAAAIc"]
[Sun May 03 09:48:56.215161 2026] [:error] [pid 40456:tid 40482] [client 20.43.1.132:22281] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "afapiDSujTvwdzEkjSfynwAAAZg"]
[Sun May 03 09:48:56.634357 2026] [:error] [pid 40456:tid 40460] [client 20.43.1.132:22520] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "afapiDSujTvwdzEkjSfyogAAAYI"]
[Sun May 03 09:48:57.062617 2026] [:error] [pid 37126:tid 37172] [client 20.43.1.132:22388] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a2.php"] [unique_id "afapifR_A42N-LtDyrvqHgAAABM"]
[Sun May 03 09:48:57.479668 2026] [:error] [pid 37246:tid 37266] [client 20.43.1.132:22294] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "afapiThvYFGNwhnPamqW9wAAARA"]
[Sun May 03 09:48:57.918551 2026] [:error] [pid 37246:tid 37270] [client 20.43.1.132:22358] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "afapiThvYFGNwhnPamqW-AAAARQ"]
[Sun May 03 09:48:58.363548 2026] [:error] [pid 37246:tid 37259] [client 20.43.1.132:22347] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "afapijhvYFGNwhnPamqW-gAAAQo"]
[Sun May 03 09:48:58.784432 2026] [:error] [pid 40456:tid 40479] [client 20.43.1.132:22369] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/edit.php"] [unique_id "afapijSujTvwdzEkjSfyrgAAAZU"]
[Sun May 03 09:48:59.202232 2026] [:error] [pid 37126:tid 37177] [client 20.43.1.132:22366] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "afapi_R_A42N-LtDyrvqIQAAABg"]
[Sun May 03 09:48:59.627163 2026] [:error] [pid 40422:tid 40432] [client 20.43.1.132:22452] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "afapi0HBbBLrXh6PBuuq9gAAAUY"]
[Sun May 03 09:49:00.043760 2026] [:error] [pid 37246:tid 37251] [client 20.43.1.132:22386] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "afapjDhvYFGNwhnPamqW_QAAAQM"]
[Sun May 03 09:49:00.510280 2026] [:error] [pid 37246:tid 37267] [client 20.43.1.132:22391] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ioxi-o.php"] [unique_id "afapjDhvYFGNwhnPamqW_wAAARE"]
[Sun May 03 09:49:00.935980 2026] [:error] [pid 37130:tid 37221] [client 20.43.1.132:22415] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "afapjKIu7bmXKXicRk9ESQAAAIg"]
[Sun May 03 09:49:01.356884 2026] [:error] [pid 40386:tid 40401] [client 20.43.1.132:37505] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "afapjVHJDYRXUf3IbRTsDgAAAM0"]
[Sun May 03 09:49:01.790129 2026] [:error] [pid 40386:tid 40392] [client 20.43.1.132:22370] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "afapjVHJDYRXUf3IbRTsDwAAAMQ"]
[Sun May 03 09:49:02.218988 2026] [:error] [pid 37246:tid 37269] [client 20.43.1.132:22450] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "afapjjhvYFGNwhnPamqXBgAAARM"]
[Sun May 03 09:49:02.655068 2026] [:error] [pid 40386:tid 40400] [client 20.43.1.132:22375] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "afapjlHJDYRXUf3IbRTsEAAAAMw"]
[Sun May 03 09:49:03.081926 2026] [:error] [pid 40386:tid 40397] [client 20.43.1.132:22251] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "afapj1HJDYRXUf3IbRTsEQAAAMk"]
[Sun May 03 09:49:03.537634 2026] [:error] [pid 37246:tid 37248] [client 20.43.1.132:22435] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "afapjzhvYFGNwhnPamqXDgAAAQA"]
[Sun May 03 09:49:03.970321 2026] [:error] [pid 37246:tid 37262] [client 20.43.1.132:22378] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/66.php"] [unique_id "afapjzhvYFGNwhnPamqXEgAAAQw"]
[Sun May 03 09:49:06.360215 2026] [:error] [pid 37246:tid 37269] [client 20.43.1.132:22344] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "afapkjhvYFGNwhnPamqXJgAAARM"]
[Sun May 03 09:49:06.801867 2026] [:error] [pid 37246:tid 37273] [client 20.43.1.132:22218] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "afapkjhvYFGNwhnPamqXJwAAARc"]
[Sun May 03 09:49:07.224354 2026] [:error] [pid 37246:tid 37256] [client 20.43.1.132:22527] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "afapkzhvYFGNwhnPamqXKgAAAQg"]
[Sun May 03 09:49:07.643033 2026] [:error] [pid 37246:tid 37271] [client 20.43.1.132:22458] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/inputs.php"] [unique_id "afapkzhvYFGNwhnPamqXLAAAARU"]
[Sun May 03 09:49:08.066960 2026] [:error] [pid 37246:tid 37267] [client 20.43.1.132:22342] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/style.php"] [unique_id "afaplDhvYFGNwhnPamqXLgAAARE"]
[Sun May 03 09:49:08.492059 2026] [:error] [pid 40422:tid 40449] [client 20.43.1.132:22403] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/style.php"] [unique_id "afaplEHBbBLrXh6PBuurAQAAAVc"]
[Sun May 03 09:49:08.916381 2026] [:error] [pid 37246:tid 37273] [client 20.43.1.132:22436] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/style.php"] [unique_id "afaplDhvYFGNwhnPamqXMgAAARc"]
[Sun May 03 09:49:09.349867 2026] [:error] [pid 37126:tid 37167] [client 20.43.1.132:22222] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/style.php"] [unique_id "afaplfR_A42N-LtDyrvqKQAAAA4"]
[Sun May 03 09:49:09.779569 2026] [:error] [pid 37246:tid 37251] [client 20.43.1.132:22299] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/av.php"] [unique_id "afaplThvYFGNwhnPamqXOgAAAQM"]
[Sun May 03 09:49:10.206514 2026] [:error] [pid 40422:tid 40433] [client 20.43.1.132:22345] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/av.php"] [unique_id "afaplkHBbBLrXh6PBuurBAAAAUc"]
[Sun May 03 09:49:10.624456 2026] [:error] [pid 40422:tid 40443] [client 20.43.1.132:22461] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/av.php"] [unique_id "afaplkHBbBLrXh6PBuurBgAAAVE"]
[Sun May 03 09:49:11.051314 2026] [:error] [pid 37246:tid 37249] [client 20.43.1.132:22352] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/av.php"] [unique_id "afaplzhvYFGNwhnPamqXPQAAAQE"]
[Sun May 03 09:49:11.474708 2026] [:error] [pid 40386:tid 40389] [client 20.43.1.132:22260] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afapl1HJDYRXUf3IbRTsGQAAAME"]
[Sun May 03 09:49:11.932917 2026] [:error] [pid 37246:tid 37250] [client 20.43.1.132:22462] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afaplzhvYFGNwhnPamqXQQAAAQI"]
[Sun May 03 09:49:12.351578 2026] [:error] [pid 37130:tid 37234] [client 20.43.1.132:22381] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afapmKIu7bmXKXicRk9ETAAAAJU"]
[Sun May 03 09:49:12.775353 2026] [:error] [pid 37246:tid 37265] [client 20.43.1.132:22399] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/bolt.php"] [unique_id "afapmDhvYFGNwhnPamqXRQAAAQ8"]
[Sun May 03 09:49:13.199020 2026] [:error] [pid 37127:tid 37206] [client 20.43.1.132:22272] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "afapmf8khJXb5O5aWVXxTAAAAFQ"]
[Sun May 03 09:49:13.613059 2026] [:error] [pid 40422:tid 40426] [client 20.43.1.132:22423] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "afapmUHBbBLrXh6PBuurEgAAAUA"]
[Sun May 03 09:49:14.032882 2026] [:error] [pid 37246:tid 37274] [client 20.43.1.132:22329] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "afapmjhvYFGNwhnPamqXSQAAARg"]
[Sun May 03 09:49:14.461340 2026] [:error] [pid 37246:tid 37257] [client 20.43.1.132:22337] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-act.php"] [unique_id "afapmjhvYFGNwhnPamqXSwAAAQk"]
[Sun May 03 09:49:14.886556 2026] [:error] [pid 40422:tid 40443] [client 20.43.1.132:22304] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "afapmkHBbBLrXh6PBuurGAAAAVE"]
[Sun May 03 09:49:15.320987 2026] [:error] [pid 37246:tid 37262] [client 20.43.1.132:22325] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "afapmzhvYFGNwhnPamqXTgAAAQw"]
[Sun May 03 09:49:15.769047 2026] [:error] [pid 40422:tid 40434] [client 20.43.1.132:22295] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "afapm0HBbBLrXh6PBuurGgAAAUg"]
[Sun May 03 09:49:16.201127 2026] [:error] [pid 37246:tid 37265] [client 20.43.1.132:22362] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aaa.php"] [unique_id "afapnDhvYFGNwhnPamqXUwAAAQ8"]
[Sun May 03 09:49:16.637853 2026] [:error] [pid 40422:tid 40427] [client 20.43.1.132:22429] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "afapnEHBbBLrXh6PBuurHQAAAUE"]
[Sun May 03 09:49:17.070702 2026] [:error] [pid 37130:tid 37235] [client 20.43.1.132:37547] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "afapnaIu7bmXKXicRk9ETgAAAJY"]
[Sun May 03 09:49:17.484341 2026] [:error] [pid 37127:tid 37190] [client 20.43.1.132:22302] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "afapnf8khJXb5O5aWVXxUgAAAEY"]
[Sun May 03 09:49:17.909564 2026] [:error] [pid 40456:tid 40473] [client 20.43.1.132:22392] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/classwithtostring.php"] [unique_id "afapnTSujTvwdzEkjSfyuQAAAY8"]
[Sun May 03 09:49:18.347920 2026] [:error] [pid 37246:tid 37259] [client 20.43.1.132:22147] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afapnjhvYFGNwhnPamqXVgAAAQo"]
[Sun May 03 09:49:18.770148 2026] [:error] [pid 37127:tid 37208] [client 20.43.1.132:22223] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afapnv8khJXb5O5aWVXxVQAAAFY"]
[Sun May 03 09:49:19.190463 2026] [:error] [pid 40422:tid 40437] [client 20.43.1.132:22308] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afapn0HBbBLrXh6PBuurIQAAAUs"]
[Sun May 03 09:49:19.613359 2026] [:error] [pid 37246:tid 37263] [client 20.43.1.132:22310] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/themes/index.php"] [unique_id "afapnzhvYFGNwhnPamqXWAAAAQ0"]
[Sun May 03 09:49:20.044374 2026] [:error] [pid 37130:tid 37214] [client 20.43.1.132:22509] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "afapoKIu7bmXKXicRk9EUAAAAIE"]
[Sun May 03 09:49:20.468815 2026] [:error] [pid 37246:tid 37262] [client 20.43.1.132:22276] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "afapoDhvYFGNwhnPamqXWwAAAQw"]
[Sun May 03 09:49:20.895230 2026] [:error] [pid 37127:tid 37205] [client 20.43.1.132:22315] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "afapoP8khJXb5O5aWVXxWQAAAFM"]
[Sun May 03 09:49:21.340934 2026] [:error] [pid 37246:tid 37261] [client 20.43.1.132:22249] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "afapoThvYFGNwhnPamqXXgAAAQs"]
[Sun May 03 09:49:21.792593 2026] [:error] [pid 37127:tid 37187] [client 20.43.1.132:22293] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "afapof8khJXb5O5aWVXxWwAAAEM"]
[Sun May 03 09:49:22.241371 2026] [:error] [pid 40422:tid 40444] [client 20.43.1.132:22234] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "afapokHBbBLrXh6PBuurJwAAAVI"]
[Sun May 03 09:49:22.669026 2026] [:error] [pid 40422:tid 40429] [client 20.43.1.132:22521] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "afapokHBbBLrXh6PBuurKgAAAUM"]
[Sun May 03 09:49:23.133203 2026] [:error] [pid 40422:tid 40433] [client 20.43.1.132:22374] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-blog.php"] [unique_id "afapo0HBbBLrXh6PBuurLgAAAUc"]
[Sun May 03 09:49:23.566426 2026] [:error] [pid 37246:tid 37251] [client 20.43.1.132:22451] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "afapozhvYFGNwhnPamqXYgAAAQM"]
[Sun May 03 09:49:24.039215 2026] [:error] [pid 40422:tid 40447] [client 20.43.1.132:22360] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "afappEHBbBLrXh6PBuurMQAAAVU"]
[Sun May 03 09:49:24.483380 2026] [:error] [pid 40422:tid 40440] [client 20.43.1.132:22346] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "afappEHBbBLrXh6PBuurMwAAAU4"]
[Sun May 03 09:49:24.912989 2026] [:error] [pid 40422:tid 40444] [client 20.43.1.132:36983] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/"] [unique_id "afappEHBbBLrXh6PBuurNwAAAVI"]
[Sun May 03 09:49:25.357887 2026] [:error] [pid 37246:tid 37259] [client 20.43.1.132:22382] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "afappThvYFGNwhnPamqXYwAAAQo"]
[Sun May 03 09:49:25.784186 2026] [:error] [pid 40386:tid 40393] [client 20.43.1.132:22466] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "afappVHJDYRXUf3IbRTsJAAAAMU"]
[Sun May 03 09:49:26.227449 2026] [:error] [pid 40456:tid 40467] [client 20.43.1.132:22336] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "afappjSujTvwdzEkjSfywQAAAYk"]
[Sun May 03 09:49:26.645020 2026] [:error] [pid 40456:tid 40469] [client 20.43.1.132:22307] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/admin.php"] [unique_id "afappjSujTvwdzEkjSfywwAAAYs"]
[Sun May 03 09:49:27.067434 2026] [:error] [pid 37246:tid 37268] [client 20.43.1.132:22395] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "afappzhvYFGNwhnPamqXaQAAARI"]
[Sun May 03 09:49:27.485976 2026] [:error] [pid 40422:tid 40431] [client 20.43.1.132:22318] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "afapp0HBbBLrXh6PBuurOgAAAUU"]
[Sun May 03 09:49:27.920931 2026] [:error] [pid 40422:tid 40442] [client 20.43.1.132:22331] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "afapp0HBbBLrXh6PBuurPQAAAVA"]
[Sun May 03 09:49:28.370512 2026] [:error] [pid 37127:tid 37195] [client 20.43.1.132:22371] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "afapqP8khJXb5O5aWVXxYAAAAEs"]
[Sun May 03 09:49:28.789812 2026] [:error] [pid 40422:tid 40450] [client 20.43.1.132:22340] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "afapqEHBbBLrXh6PBuurRQAAAVg"]
[Sun May 03 09:49:29.209341 2026] [:error] [pid 40422:tid 40429] [client 20.43.1.132:22280] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "afapqUHBbBLrXh6PBuurSgAAAUM"]
[Sun May 03 09:49:29.623497 2026] [:error] [pid 40422:tid 40437] [client 20.43.1.132:22279] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "afapqUHBbBLrXh6PBuurTQAAAUs"]
[Sun May 03 09:49:30.044038 2026] [:error] [pid 40422:tid 40438] [client 20.43.1.132:22365] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "afapqkHBbBLrXh6PBuurUAAAAUw"]
[Sun May 03 09:49:30.462794 2026] [:error] [pid 40456:tid 40477] [client 20.43.1.132:22380] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "afapqjSujTvwdzEkjSfyxgAAAZM"]
[Sun May 03 09:49:30.877126 2026] [:error] [pid 40422:tid 40427] [client 20.43.1.132:22397] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "afapqkHBbBLrXh6PBuurVQAAAUE"]
[Sun May 03 09:49:31.288542 2026] [:error] [pid 37246:tid 37269] [client 20.43.1.132:22252] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "afapqzhvYFGNwhnPamqXcwAAARM"]
[Sun May 03 09:49:31.707066 2026] [:error] [pid 37126:tid 37172] [client 20.43.1.132:37510] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-edit.php"] [unique_id "afapq_R_A42N-LtDyrvqNAAAABM"]
[Sun May 03 09:49:32.119298 2026] [:error] [pid 37246:tid 37261] [client 20.43.1.132:22393] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "afaprDhvYFGNwhnPamqXdwAAAQs"]
[Sun May 03 09:49:32.530394 2026] [:error] [pid 40456:tid 40462] [client 20.43.1.132:22240] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "afaprDSujTvwdzEkjSfyygAAAYQ"]
[Sun May 03 09:49:32.949607 2026] [:error] [pid 40456:tid 40468] [client 20.43.1.132:22432] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "afaprDSujTvwdzEkjSfyywAAAYo"]
[Sun May 03 09:49:33.366051 2026] [:error] [pid 40456:tid 40481] [client 20.43.1.132:22273] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/222.php"] [unique_id "afaprTSujTvwdzEkjSfyzgAAAZc"]
[Sun May 03 09:49:33.781060 2026] [:error] [pid 40456:tid 40463] [client 20.43.1.132:22246] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "afaprTSujTvwdzEkjSfy0AAAAYU"]
[Sun May 03 09:49:34.232774 2026] [:error] [pid 40422:tid 40446] [client 20.43.1.132:22317] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "afaprkHBbBLrXh6PBuurXQAAAVQ"]
[Sun May 03 09:49:34.653014 2026] [:error] [pid 40422:tid 40443] [client 20.43.1.132:22290] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "afaprkHBbBLrXh6PBuurYAAAAVE"]
[Sun May 03 09:49:35.071687 2026] [:error] [pid 37130:tid 37224] [client 20.43.1.132:22225] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/index.php"] [unique_id "afapr6Iu7bmXKXicRk9EUQAAAIs"]
[Sun May 03 09:49:35.499058 2026] [:error] [pid 40422:tid 40450] [client 20.43.1.132:22316] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "afapr0HBbBLrXh6PBuurZAAAAVg"]
[Sun May 03 09:49:35.917718 2026] [:error] [pid 40456:tid 40464] [client 20.43.1.132:22387] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "afaprzSujTvwdzEkjSfy0gAAAYY"]
[Sun May 03 09:49:36.365313 2026] [:error] [pid 40456:tid 40465] [client 20.43.1.132:22358] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "afapsDSujTvwdzEkjSfy1QAAAYc"]
[Sun May 03 09:49:36.787984 2026] [:error] [pid 40422:tid 40449] [client 20.43.1.132:22350] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fff.php"] [unique_id "afapsEHBbBLrXh6PBuuragAAAVc"]
[Sun May 03 09:49:37.206582 2026] [:error] [pid 40456:tid 40478] [client 20.43.1.132:22495] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "afapsTSujTvwdzEkjSfy2AAAAZQ"]
[Sun May 03 09:49:37.644612 2026] [:error] [pid 40456:tid 40473] [client 20.43.1.132:22338] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "afapsTSujTvwdzEkjSfy2wAAAY8"]
[Sun May 03 09:49:38.059245 2026] [:error] [pid 40456:tid 40470] [client 20.43.1.132:22284] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "afapsjSujTvwdzEkjSfy3gAAAYw"]
[Sun May 03 09:49:38.486966 2026] [:error] [pid 40456:tid 40461] [client 20.43.1.132:22291] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "afapsjSujTvwdzEkjSfy4AAAAYM"]
[Sun May 03 09:49:38.917090 2026] [:error] [pid 40456:tid 40480] [client 20.43.1.132:22210] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/we.php"] [unique_id "afapsjSujTvwdzEkjSfy4gAAAZY"]
[Sun May 03 09:49:39.362507 2026] [:error] [pid 37246:tid 37250] [client 20.43.1.132:22333] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/we.php"] [unique_id "afapszhvYFGNwhnPamqXgQAAAQI"]
[Sun May 03 09:49:39.783761 2026] [:error] [pid 40422:tid 40443] [client 20.43.1.132:22303] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/we.php"] [unique_id "afaps0HBbBLrXh6PBuurcwAAAVE"]
[Sun May 03 09:49:40.206391 2026] [:error] [pid 37126:tid 37174] [client 20.43.1.132:22257] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/we.php"] [unique_id "afaptPR_A42N-LtDyrvqOwAAABU"]
[Sun May 03 09:49:40.674960 2026] [:error] [pid 40422:tid 40434] [client 20.43.1.132:22227] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "afaptEHBbBLrXh6PBuurdgAAAUg"]
[Sun May 03 09:49:41.095178 2026] [:error] [pid 37246:tid 37265] [client 20.43.1.132:22476] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "afaptThvYFGNwhnPamqXhAAAAQ8"]
[Sun May 03 09:49:41.509306 2026] [:error] [pid 40456:tid 40466] [client 20.43.1.132:22250] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "afaptTSujTvwdzEkjSfy5gAAAYg"]
[Sun May 03 09:49:41.948742 2026] [:error] [pid 37246:tid 37248] [client 20.43.1.132:22428] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/makeasmtp.php"] [unique_id "afaptThvYFGNwhnPamqXhgAAAQA"]
[Sun May 03 09:49:42.370450 2026] [:error] [pid 37127:tid 37190] [client 20.43.1.132:22176] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin1.php"] [unique_id "afaptv8khJXb5O5aWVXxbwAAAEY"]
[Sun May 03 09:49:42.796017 2026] [:error] [pid 40456:tid 40477] [client 20.43.1.132:22306] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin1.php"] [unique_id "afaptjSujTvwdzEkjSfy6AAAAZM"]
[Sun May 03 09:49:43.218892 2026] [:error] [pid 37127:tid 37185] [client 20.43.1.132:22238] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin1.php"] [unique_id "afapt_8khJXb5O5aWVXxdQAAAEE"]
[Sun May 03 09:49:43.635747 2026] [:error] [pid 37127:tid 37209] [client 20.43.1.132:22447] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin1.php"] [unique_id "afapt_8khJXb5O5aWVXxeAAAAFc"]
[Sun May 03 09:49:44.069567 2026] [:error] [pid 37126:tid 37157] [client 20.43.1.132:36964] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afapuPR_A42N-LtDyrvqPwAAAAQ"]
[Sun May 03 09:49:44.510421 2026] [:error] [pid 40422:tid 40433] [client 20.43.1.132:22330] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afapuEHBbBLrXh6PBuureQAAAUc"]
[Sun May 03 09:49:44.930293 2026] [:error] [pid 37246:tid 37272] [client 20.43.1.132:22368] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afapuDhvYFGNwhnPamqXjgAAARY"]
[Sun May 03 09:49:45.342942 2026] [:error] [pid 37246:tid 37262] [client 20.43.1.132:22278] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/"] [unique_id "afapuThvYFGNwhnPamqXkQAAAQw"]
[Sun May 03 09:49:45.773071 2026] [:error] [pid 37130:tid 37236] [client 20.43.1.132:22208] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "afapuaIu7bmXKXicRk9EVgAAAJc"]
[Sun May 03 09:49:46.194926 2026] [:error] [pid 40456:tid 40480] [client 20.43.1.132:22167] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "afapujSujTvwdzEkjSfy8QAAAZY"]
[Sun May 03 09:49:46.615400 2026] [:error] [pid 40456:tid 40472] [client 20.43.1.132:22162] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "afapujSujTvwdzEkjSfy9AAAAY4"]
[Sun May 03 09:49:47.037348 2026] [:error] [pid 37127:tid 37202] [client 20.43.1.132:22157] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/BDKR28WP.php"] [unique_id "afapu_8khJXb5O5aWVXxfQAAAFE"]
[Sun May 03 09:49:47.465719 2026] [:error] [pid 40456:tid 40477] [client 20.43.1.132:22226] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "afapuzSujTvwdzEkjSfy-AAAAZM"]
[Sun May 03 09:49:47.881003 2026] [:error] [pid 40456:tid 40473] [client 20.43.1.132:22311] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "afapuzSujTvwdzEkjSfy-gAAAY8"]
[Sun May 03 09:49:48.301048 2026] [:error] [pid 37127:tid 37195] [client 20.43.1.132:22212] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "afapvP8khJXb5O5aWVXxgQAAAEs"]
[Sun May 03 09:49:48.734175 2026] [:error] [pid 37127:tid 37187] [client 20.43.1.132:22339] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/l10n/"] [unique_id "afapvP8khJXb5O5aWVXxgwAAAEM"]
[Sun May 03 09:49:49.149385 2026] [:error] [pid 40422:tid 40436] [client 20.43.1.132:22384] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/"] [unique_id "afapvUHBbBLrXh6PBuurewAAAUo"]
[Sun May 03 09:49:49.563174 2026] [:error] [pid 37126:tid 37169] [client 20.43.1.132:22326] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/"] [unique_id "afapvfR_A42N-LtDyrvqQQAAABA"]
[Sun May 03 09:49:49.992229 2026] [:error] [pid 37127:tid 37207] [client 20.43.1.132:37523] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/"] [unique_id "afapvf8khJXb5O5aWVXxiQAAAFU"]
[Sun May 03 09:49:50.420843 2026] [:error] [pid 40456:tid 40458] [client 20.43.1.132:22502] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/"] [unique_id "afapvjSujTvwdzEkjSfy_QAAAYA"]
[Sun May 03 09:49:50.892512 2026] [:error] [pid 37126:tid 37162] [client 20.43.1.132:22173] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "afapvvR_A42N-LtDyrvqRQAAAAk"]
[Sun May 03 09:49:51.315615 2026] [:error] [pid 40422:tid 40437] [client 20.43.1.132:22171] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "afapv0HBbBLrXh6PBuurgAAAAUs"]
[Sun May 03 09:49:51.739988 2026] [:error] [pid 40386:tid 40395] [client 20.43.1.132:22426] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "afapv1HJDYRXUf3IbRTsKwAAAMc"]
[Sun May 03 09:49:52.182875 2026] [:error] [pid 40422:tid 40446] [client 20.43.1.132:22169] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "afapwEHBbBLrXh6PBuurhwAAAVQ"]
[Sun May 03 09:49:52.601400 2026] [:error] [pid 40386:tid 40388] [client 20.43.1.132:22164] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "afapwFHJDYRXUf3IbRTsMAAAAMA"]
[Sun May 03 09:49:53.024897 2026] [:error] [pid 40422:tid 40443] [client 20.43.1.132:22471] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "afapwUHBbBLrXh6PBuuriAAAAVE"]
[Sun May 03 09:49:53.445756 2026] [:error] [pid 37126:tid 37177] [client 20.43.1.132:22394] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "afapwfR_A42N-LtDyrvqSAAAABg"]
[Sun May 03 09:49:53.870738 2026] [:error] [pid 37127:tid 37202] [client 20.43.1.132:22516] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/fi.php"] [unique_id "afapwf8khJXb5O5aWVXxjAAAAFE"]
[Sun May 03 09:49:54.289526 2026] [:error] [pid 37127:tid 37195] [client 20.43.1.132:22438] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "afapwv8khJXb5O5aWVXxjQAAAEs"]
[Sun May 03 09:49:54.727430 2026] [:error] [pid 37127:tid 37201] [client 20.43.1.132:22191] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "afapwv8khJXb5O5aWVXxkAAAAFA"]
[Sun May 03 09:49:55.142138 2026] [:error] [pid 37127:tid 37210] [client 20.43.1.132:22289] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "afapw_8khJXb5O5aWVXxlQAAAFg"]
[Sun May 03 09:49:55.554517 2026] [:error] [pid 37127:tid 37184] [client 20.43.1.132:22259] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fe5.php"] [unique_id "afapw_8khJXb5O5aWVXxlgAAAEA"]
[Sun May 03 09:49:55.977374 2026] [:error] [pid 40422:tid 40434] [client 20.43.1.132:22323] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "afapw0HBbBLrXh6PBuurjQAAAUg"]
[Sun May 03 09:49:56.397916 2026] [:error] [pid 40386:tid 40411] [client 20.43.1.132:22322] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "afapxFHJDYRXUf3IbRTsNgAAANc"]
[Sun May 03 09:49:56.813866 2026] [:error] [pid 40386:tid 40408] [client 20.43.1.132:22286] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "afapxFHJDYRXUf3IbRTsOAAAANQ"]
[Sun May 03 09:49:57.240548 2026] [:error] [pid 40386:tid 40389] [client 20.43.1.132:22385] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/2021/02/index.php"] [unique_id "afapxVHJDYRXUf3IbRTsOgAAAME"]
[Sun May 03 09:49:57.658535 2026] [:error] [pid 37246:tid 37261] [client 20.43.1.132:22159] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/av.php"] [unique_id "afapxThvYFGNwhnPamqXnAAAAQs"]
[Sun May 03 09:49:58.098494 2026] [:error] [pid 37246:tid 37271] [client 20.43.1.132:22253] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/av.php"] [unique_id "afapxjhvYFGNwhnPamqXnwAAARU"]
[Sun May 03 09:49:58.510721 2026] [:error] [pid 40386:tid 40399] [client 20.43.1.132:22175] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/av.php"] [unique_id "afapxlHJDYRXUf3IbRTsOwAAAMs"]
[Sun May 03 09:49:58.932521 2026] [:error] [pid 37246:tid 37253] [client 20.43.1.132:22211] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/av.php"] [unique_id "afapxjhvYFGNwhnPamqXogAAAQU"]
[Sun May 03 09:49:59.359485 2026] [:error] [pid 40422:tid 40439] [client 20.43.1.132:22270] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "afapx0HBbBLrXh6PBuurkwAAAU0"]
[Sun May 03 09:49:59.778059 2026] [:error] [pid 40422:tid 40440] [client 20.43.1.132:22263] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "afapx0HBbBLrXh6PBuurlQAAAU4"]
[Sun May 03 09:50:00.222279 2026] [:error] [pid 40386:tid 40407] [client 20.43.1.132:22319] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "afapyFHJDYRXUf3IbRTsPQAAANM"]
[Sun May 03 09:50:00.647887 2026] [:error] [pid 37130:tid 37226] [client 20.43.1.132:22288] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/abcd.php"] [unique_id "afapyKIu7bmXKXicRk9EawAAAI0"]
[Sun May 03 09:50:01.070039 2026] [:error] [pid 40422:tid 40434] [client 20.43.1.132:22232] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "afapyUHBbBLrXh6PBuurmwAAAUg"]
[Sun May 03 09:50:01.508200 2026] [:error] [pid 40456:tid 40471] [client 20.43.1.132:22165] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "afapyTSujTvwdzEkjSfzBAAAAY0"]
[Sun May 03 09:50:01.953933 2026] [:error] [pid 37126:tid 37175] [client 20.43.1.132:22274] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "afapyfR_A42N-LtDyrvqTQAAABY"]
[Sun May 03 09:50:02.386290 2026] [:error] [pid 40422:tid 40435] [client 20.43.1.132:22264] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fi.php"] [unique_id "afapykHBbBLrXh6PBuurogAAAUk"]
[Sun May 03 09:50:02.811846 2026] [:error] [pid 40422:tid 40429] [client 20.43.1.132:22309] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "afapykHBbBLrXh6PBuurpAAAAUM"]
[Sun May 03 09:50:03.261390 2026] [:error] [pid 40386:tid 40392] [client 20.43.1.132:22268] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "afapy1HJDYRXUf3IbRTsPwAAAMQ"]
[Sun May 03 09:50:03.680779 2026] [:error] [pid 37130:tid 37217] [client 20.43.1.132:22204] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "afapy6Iu7bmXKXicRk9EcAAAAIQ"]
[Sun May 03 09:50:04.136034 2026] [:error] [pid 40422:tid 40447] [client 20.43.1.132:22025] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/a1.php"] [unique_id "afapzEHBbBLrXh6PBuurqgAAAVU"]
[Sun May 03 09:50:04.565133 2026] [:error] [pid 40456:tid 40463] [client 20.43.1.132:22104] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "afapzDSujTvwdzEkjSfzBwAAAYU"]
[Sun May 03 09:50:05.015096 2026] [:error] [pid 40456:tid 40467] [client 20.43.1.132:22373] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "afapzTSujTvwdzEkjSfzCgAAAYk"]
[Sun May 03 09:50:05.438865 2026] [:error] [pid 37246:tid 37272] [client 20.43.1.132:22235] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "afapzThvYFGNwhnPamqXqQAAARY"]
[Sun May 03 09:50:05.870118 2026] [:error] [pid 40422:tid 40434] [client 20.43.1.132:22420] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/update/f35.php"] [unique_id "afapzUHBbBLrXh6PBuurqwAAAUg"]
[Sun May 03 09:50:06.295525 2026] [:error] [pid 40422:tid 40432] [client 20.43.1.132:22320] [client 20.43.1.132] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Text/Diff/Engine/about.php"] [unique_id "afapzkHBbBLrXh6PBuurrgAAAUY"]
[Sun May 03 09:50:09.106111 2026] [:error] [pid 40422:tid 40434] [client 20.43.1.132:22379] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "afap0UHBbBLrXh6PBuur2AAAAUg"]
[Sun May 03 09:50:09.520008 2026] [:error] [pid 40422:tid 40443] [client 20.43.1.132:22301] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "afap0UHBbBLrXh6PBuur2gAAAVE"]
[Sun May 03 09:50:09.954519 2026] [:error] [pid 40386:tid 40390] [client 20.43.1.132:22224] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "afap0VHJDYRXUf3IbRTsQAAAAMI"]
[Sun May 03 09:50:10.375999 2026] [:error] [pid 37246:tid 37251] [client 20.43.1.132:22242] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dev.php"] [unique_id "afap0jhvYFGNwhnPamqXsQAAAQM"]
[Sun May 03 09:50:10.796338 2026] [:error] [pid 37130:tid 37229] [client 20.43.1.132:22271] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "afap0qIu7bmXKXicRk9EcwAAAJA"]
[Sun May 03 09:50:11.214848 2026] [:error] [pid 37127:tid 37210] [client 20.43.1.132:22398] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "afap0_8khJXb5O5aWVXxoAAAAFg"]
[Sun May 03 09:50:11.631334 2026] [:error] [pid 37246:tid 37266] [client 20.43.1.132:22245] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "afap0zhvYFGNwhnPamqXtQAAARA"]
[Sun May 03 09:50:12.063466 2026] [:error] [pid 40422:tid 40440] [client 20.43.1.132:22205] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bal.php"] [unique_id "afap1EHBbBLrXh6PBuur4QAAAU4"]
[Sun May 03 09:50:12.516465 2026] [:error] [pid 40422:tid 40430] [client 20.43.1.132:22239] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/in.php"] [unique_id "afap1EHBbBLrXh6PBuur5AAAAUQ"]
[Sun May 03 09:50:12.962336 2026] [:error] [pid 40422:tid 40447] [client 20.43.1.132:22221] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/in.php"] [unique_id "afap1EHBbBLrXh6PBuusEwAAAVU"]
[Sun May 03 09:50:13.371735 2026] [:error] [pid 40422:tid 40430] [client 20.43.1.132:22335] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/in.php"] [unique_id "afap1UHBbBLrXh6PBuusPQAAAUQ"]
[Sun May 03 09:50:13.790252 2026] [:error] [pid 37130:tid 37219] [client 20.43.1.132:22261] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/in.php"] [unique_id "afap1aIu7bmXKXicRk9EdQAAAIY"]
[Sun May 03 09:50:14.205823 2026] [:error] [pid 40422:tid 40440] [client 20.43.1.132:22248] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "afap1kHBbBLrXh6PBuusWQAAAU4"]
[Sun May 03 09:50:14.631533 2026] [:error] [pid 40422:tid 40447] [client 20.43.1.132:22296] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "afap1kHBbBLrXh6PBuusZQAAAVU"]
[Sun May 03 09:50:15.048519 2026] [:error] [pid 37246:tid 37271] [client 20.43.1.132:22282] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "afap1zhvYFGNwhnPamqXtwAAARU"]
[Sun May 03 09:50:15.465996 2026] [:error] [pid 40422:tid 40431] [client 20.43.1.132:22203] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gssdd.php"] [unique_id "afap10HBbBLrXh6PBuuscQAAAUU"]
[Sun May 03 09:50:15.884370 2026] [:error] [pid 40422:tid 40449] [client 20.43.1.132:22334] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afap10HBbBLrXh6PBuusdgAAAVc"]
[Sun May 03 09:50:16.296289 2026] [:error] [pid 40422:tid 40445] [client 20.43.1.132:22214] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afap2EHBbBLrXh6PBuusdwAAAVM"]
[Sun May 03 09:50:16.707770 2026] [:error] [pid 40422:tid 40436] [client 20.43.1.132:22229] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afap2EHBbBLrXh6PBuuseAAAAUo"]
[Sun May 03 09:50:17.120598 2026] [:error] [pid 37126:tid 37171] [client 20.43.1.132:22230] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cgi-bin/admin.php"] [unique_id "afap2fR_A42N-LtDyrvqUgAAABI"]
[Sun May 03 09:50:17.534038 2026] [:error] [pid 40386:tid 40405] [client 20.43.1.132:22188] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "afap2VHJDYRXUf3IbRTsQwAAANE"]
[Sun May 03 09:50:17.959635 2026] [:error] [pid 37130:tid 37235] [client 20.43.1.132:22256] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "afap2aIu7bmXKXicRk9EewAAAJY"]
[Sun May 03 09:50:18.380317 2026] [:error] [pid 40456:tid 40463] [client 20.43.1.132:22145] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "afap2jSujTvwdzEkjSfzFgAAAYU"]
[Sun May 03 09:50:18.797078 2026] [:error] [pid 40456:tid 40461] [client 20.43.1.132:22163] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bs1.php"] [unique_id "afap2jSujTvwdzEkjSfzGQAAAYM"]
[Sun May 03 09:50:19.210094 2026] [:error] [pid 37127:tid 37199] [client 20.43.1.132:22160] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afap2_8khJXb5O5aWVXxpgAAAE4"]
[Sun May 03 09:50:19.659036 2026] [:error] [pid 40386:tid 40398] [client 20.43.1.132:22158] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afap21HJDYRXUf3IbRTsRAAAAMo"]
[Sun May 03 09:50:20.071388 2026] [:error] [pid 37127:tid 37205] [client 20.43.1.132:22156] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afap3P8khJXb5O5aWVXxqAAAAFM"]
[Sun May 03 09:50:20.487334 2026] [:error] [pid 37126:tid 37168] [client 20.43.1.132:22105] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/as.php"] [unique_id "afap3PR_A42N-LtDyrvqVQAAAA8"]
[Sun May 03 09:50:20.900849 2026] [:error] [pid 40386:tid 40393] [client 20.43.1.132:22125] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "afap3FHJDYRXUf3IbRTsRQAAAMU"]
[Sun May 03 09:50:21.316280 2026] [:error] [pid 37130:tid 37214] [client 20.43.1.132:22095] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "afap3aIu7bmXKXicRk9EgQAAAIE"]
[Sun May 03 09:50:21.739218 2026] [:error] [pid 37246:tid 37248] [client 20.43.1.132:22179] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "afap3ThvYFGNwhnPamqXugAAAQA"]
[Sun May 03 09:50:22.159195 2026] [:error] [pid 37126:tid 37173] [client 20.43.1.132:22241] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/axx.php"] [unique_id "afap3vR_A42N-LtDyrvqWAAAABQ"]
[Sun May 03 09:50:22.587436 2026] [:error] [pid 37126:tid 37158] [client 20.43.1.132:37512] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alfashell.php"] [unique_id "afap3vR_A42N-LtDyrvqWgAAAAU"]
[Sun May 03 09:50:23.005817 2026] [:error] [pid 37127:tid 37200] [client 20.43.1.132:22267] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alfashell.php"] [unique_id "afap3_8khJXb5O5aWVXxrQAAAE8"]
[Sun May 03 09:50:23.421203 2026] [:error] [pid 40456:tid 40465] [client 20.43.1.132:22390] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alfashell.php"] [unique_id "afap3zSujTvwdzEkjSfzHwAAAYc"]
[Sun May 03 09:50:23.841466 2026] [:error] [pid 40422:tid 40437] [client 20.43.1.132:22327] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alfashell.php"] [unique_id "afap30HBbBLrXh6PBuusfAAAAUs"]
[Sun May 03 09:50:24.260950 2026] [:error] [pid 40422:tid 40429] [client 20.43.1.132:22228] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "afap4EHBbBLrXh6PBuusfwAAAUM"]
[Sun May 03 09:50:24.701855 2026] [:error] [pid 37127:tid 37185] [client 20.43.1.132:22146] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "afap4P8khJXb5O5aWVXxrwAAAEE"]
[Sun May 03 09:50:25.125420 2026] [:error] [pid 40386:tid 40389] [client 20.43.1.132:22103] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "afap4VHJDYRXUf3IbRTsSAAAAME"]
[Sun May 03 09:50:25.562972 2026] [:error] [pid 37130:tid 37219] [client 20.43.1.132:22233] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/gettest.php"] [unique_id "afap4aIu7bmXKXicRk9EggAAAIY"]
[Sun May 03 09:50:25.973407 2026] [:error] [pid 37246:tid 37268] [client 20.43.1.132:22152] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "afap4ThvYFGNwhnPamqXxAAAARI"]
[Sun May 03 09:50:26.389684 2026] [:error] [pid 40456:tid 40465] [client 20.43.1.132:22237] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "afap4jSujTvwdzEkjSfzNQAAAYc"]
[Sun May 03 09:50:26.843130 2026] [:error] [pid 37126:tid 37151] [client 20.43.1.132:22254] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "afap4vR_A42N-LtDyrvqdAAAAAA"]
[Sun May 03 09:50:27.257835 2026] [:error] [pid 37246:tid 37265] [client 20.43.1.132:22220] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/acp.php"] [unique_id "afap4zhvYFGNwhnPamqXyAAAAQ8"]
[Sun May 03 09:50:27.702291 2026] [:error] [pid 40422:tid 40428] [client 20.43.1.132:22262] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "afap40HBbBLrXh6PBuushQAAAUI"]
[Sun May 03 09:50:28.126255 2026] [:error] [pid 40422:tid 40449] [client 20.43.1.132:22184] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "afap5EHBbBLrXh6PBuusiAAAAVc"]
[Sun May 03 09:50:28.540820 2026] [:error] [pid 37246:tid 37273] [client 20.43.1.132:22151] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "afap5DhvYFGNwhnPamqXzAAAARc"]
[Sun May 03 09:50:28.989245 2026] [:error] [pid 37246:tid 37255] [client 20.43.1.132:22086] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file48.php"] [unique_id "afap5DhvYFGNwhnPamqXzwAAAQc"]
[Sun May 03 09:50:29.404496 2026] [:error] [pid 40422:tid 40439] [client 20.43.1.132:22083] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/g.php"] [unique_id "afap5UHBbBLrXh6PBuusjwAAAU0"]
[Sun May 03 09:50:29.837219 2026] [:error] [pid 40422:tid 40429] [client 20.43.1.132:22321] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/g.php"] [unique_id "afap5UHBbBLrXh6PBuuslAAAAUM"]
[Sun May 03 09:50:30.253019 2026] [:error] [pid 40456:tid 40474] [client 20.43.1.132:22172] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/g.php"] [unique_id "afap5jSujTvwdzEkjSfzPgAAAZA"]
[Sun May 03 09:50:30.705349 2026] [:error] [pid 37126:tid 37169] [client 20.43.1.132:22219] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/g.php"] [unique_id "afap5vR_A42N-LtDyrvqegAAABA"]
[Sun May 03 09:50:31.126408 2026] [:error] [pid 40386:tid 40402] [client 20.43.1.132:22231] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "afap51HJDYRXUf3IbRTsdQAAAM4"]
[Sun May 03 09:50:31.549056 2026] [:error] [pid 37246:tid 37265] [client 20.43.1.132:22332] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "afap5zhvYFGNwhnPamqX1QAAAQ8"]
[Sun May 03 09:50:32.021442 2026] [:error] [pid 40422:tid 40442] [client 20.43.1.132:22031] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "afap6EHBbBLrXh6PBuusogAAAVA"]
[Sun May 03 09:50:32.463453 2026] [:error] [pid 40422:tid 40443] [client 20.43.1.132:22168] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/"] [unique_id "afap6EHBbBLrXh6PBuuspQAAAVE"]
[Sun May 03 09:50:32.895207 2026] [:error] [pid 37246:tid 37269] [client 20.43.1.132:22150] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "afap6DhvYFGNwhnPamqX2AAAARM"]
[Sun May 03 09:50:33.314713 2026] [:error] [pid 37246:tid 37248] [client 20.43.1.132:22217] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "afap6ThvYFGNwhnPamqX2gAAAQA"]
[Sun May 03 09:50:33.743149 2026] [:error] [pid 37127:tid 37196] [client 20.43.1.132:22200] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "afap6f8khJXb5O5aWVXx5QAAAEw"]
[Sun May 03 09:50:34.169092 2026] [:error] [pid 40386:tid 40407] [client 20.43.1.132:22467] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/simple.php"] [unique_id "afap6lHJDYRXUf3IbRTseQAAANM"]
[Sun May 03 09:50:34.588011 2026] [:error] [pid 40456:tid 40464] [client 20.43.1.132:22243] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ew.php"] [unique_id "afap6jSujTvwdzEkjSfzRAAAAYY"]
[Sun May 03 09:50:35.006406 2026] [:error] [pid 40386:tid 40395] [client 20.43.1.132:22178] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ew.php"] [unique_id "afap61HJDYRXUf3IbRTsegAAAMc"]
[Sun May 03 09:50:35.420850 2026] [:error] [pid 37127:tid 37185] [client 20.43.1.132:22166] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ew.php"] [unique_id "afap6_8khJXb5O5aWVXx5gAAAEE"]
[Sun May 03 09:50:35.833024 2026] [:error] [pid 40456:tid 40463] [client 20.43.1.132:22265] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ew.php"] [unique_id "afap6zSujTvwdzEkjSfzSgAAAYU"]
[Sun May 03 09:50:36.258953 2026] [:error] [pid 37127:tid 37207] [client 20.43.1.132:22266] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "afap7P8khJXb5O5aWVXx6QAAAFU"]
[Sun May 03 09:50:36.674540 2026] [:error] [pid 40386:tid 40392] [client 20.43.1.132:22313] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "afap7FHJDYRXUf3IbRTsfAAAAMQ"]
[Sun May 03 09:50:37.106788 2026] [:error] [pid 37130:tid 37223] [client 20.43.1.132:22080] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "afap7aIu7bmXKXicRk9EhwAAAIo"]
[Sun May 03 09:50:37.522987 2026] [:error] [pid 37130:tid 37236] [client 20.43.1.132:22194] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file21.php"] [unique_id "afap7aIu7bmXKXicRk9EiQAAAJc"]
[Sun May 03 09:50:37.942508 2026] [:error] [pid 37127:tid 37193] [client 20.43.1.132:22038] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hypo.php"] [unique_id "afap7f8khJXb5O5aWVXx7QAAAEk"]
[Sun May 03 09:50:38.358545 2026] [:error] [pid 37127:tid 37200] [client 20.43.1.132:22314] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hypo.php"] [unique_id "afap7v8khJXb5O5aWVXx7gAAAE8"]
[Sun May 03 09:50:38.783189 2026] [:error] [pid 37127:tid 37196] [client 20.43.1.132:22298] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hypo.php"] [unique_id "afap7v8khJXb5O5aWVXx8AAAAEw"]
[Sun May 03 09:50:39.209628 2026] [:error] [pid 37127:tid 37198] [client 20.43.1.132:22190] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hypo.php"] [unique_id "afap7_8khJXb5O5aWVXx8wAAAE0"]
[Sun May 03 09:50:39.625027 2026] [:error] [pid 40456:tid 40476] [client 20.43.1.132:22287] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file18.php"] [unique_id "afap7zSujTvwdzEkjSfzUgAAAZI"]
[Sun May 03 09:50:40.066145 2026] [:error] [pid 37130:tid 37216] [client 20.43.1.132:22148] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file18.php"] [unique_id "afap8KIu7bmXKXicRk9EjQAAAIM"]
[Sun May 03 09:50:40.487765 2026] [:error] [pid 37127:tid 37185] [client 20.43.1.132:22161] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file18.php"] [unique_id "afap8P8khJXb5O5aWVXx9QAAAEE"]
[Sun May 03 09:50:40.905716 2026] [:error] [pid 40456:tid 40462] [client 20.43.1.132:22185] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file18.php"] [unique_id "afap8DSujTvwdzEkjSfzVgAAAYQ"]
[Sun May 03 09:50:41.318199 2026] [:error] [pid 37127:tid 37203] [client 20.43.1.132:22177] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "afap8f8khJXb5O5aWVXx9wAAAFI"]
[Sun May 03 09:50:41.731780 2026] [:error] [pid 37246:tid 37251] [client 20.43.1.132:22126] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "afap8ThvYFGNwhnPamqX5AAAAQM"]
[Sun May 03 09:50:42.200113 2026] [:error] [pid 40386:tid 40396] [client 20.43.1.132:22244] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "afap8lHJDYRXUf3IbRTsgQAAAMg"]
[Sun May 03 09:50:42.617871 2026] [:error] [pid 37246:tid 37274] [client 20.43.1.132:22213] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xwx1.php"] [unique_id "afap8jhvYFGNwhnPamqX6QAAARg"]
[Sun May 03 09:50:43.035644 2026] [:error] [pid 37127:tid 37206] [client 20.43.1.132:22207] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "afap8_8khJXb5O5aWVXx-gAAAFQ"]
[Sun May 03 09:50:43.462293 2026] [:error] [pid 40386:tid 40411] [client 20.43.1.132:22094] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "afap81HJDYRXUf3IbRTsggAAANc"]
[Sun May 03 09:50:43.874539 2026] [:error] [pid 40456:tid 40461] [client 20.43.1.132:22255] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "afap8zSujTvwdzEkjSfzWAAAAYM"]
[Sun May 03 09:50:44.294684 2026] [:error] [pid 40456:tid 40468] [client 20.43.1.132:22216] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/"] [unique_id "afap9DSujTvwdzEkjSfzWwAAAYo"]
[Sun May 03 09:50:44.708289 2026] [:error] [pid 37246:tid 37259] [client 20.43.1.132:22192] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "afap9DhvYFGNwhnPamqX7gAAAQo"]
[Sun May 03 09:50:45.124264 2026] [:error] [pid 37126:tid 37158] [client 20.43.1.132:22155] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "afap9fR_A42N-LtDyrvqgwAAAAU"]
[Sun May 03 09:50:45.546260 2026] [:error] [pid 37130:tid 37230] [client 20.43.1.132:22417] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "afap9aIu7bmXKXicRk9EkwAAAJE"]
[Sun May 03 09:50:45.962031 2026] [:error] [pid 40422:tid 40433] [client 20.43.1.132:22170] [client 20.43.1.132] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/chosen.php"] [unique_id "afap9UHBbBLrXh6PBuus8QAAAUc"]
[Sun May 03 11:33:25.607581 2026] [:error] [pid 37246:tid 37257] [client 185.198.240.249:40807] [client 185.198.240.249] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "afbCBThvYFGNwhnPamqwrwAAAQk"]
[Mon May 04 03:07:57.734880 2026] [:error] [pid 54535:tid 54540] [client 52.165.198.204:25663] [client 52.165.198.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "afedDfRyz79iR-ntJRI21AAAAgM"]
[Mon May 04 03:07:58.886126 2026] [:error] [pid 54535:tid 54557] [client 52.165.198.204:8886] [client 52.165.198.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "afedDvRyz79iR-ntJRI22QAAAhQ"]
[Mon May 04 03:08:12.231771 2026] [:error] [pid 54535:tid 54560] [client 52.165.198.204:8639] [client 52.165.198.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "afedHPRyz79iR-ntJRI27wAAAhc"]
[Mon May 04 09:50:24.247015 2026] [:error] [pid 12051:tid 12055] [client 20.9.90.138:8559] [client 20.9.90.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aff7YOrVB-w_PyOHK6lcaAAAAUI"]
[Mon May 04 09:50:24.995739 2026] [:error] [pid 12051:tid 12054] [client 20.9.90.138:8867] [client 20.9.90.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aff7YOrVB-w_PyOHK6lcagAAAUE"]
[Mon May 04 09:50:25.746255 2026] [:error] [pid 33186:tid 33192] [client 20.9.90.138:8513] [client 20.9.90.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aff7Ybqlqe0DcmBS9Vzq6gAAAAM"]
[Mon May 04 09:50:26.536671 2026] [:error] [pid 33186:tid 33209] [client 20.9.90.138:8824] [client 20.9.90.138] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/index.php"] [unique_id "aff7Yrqlqe0DcmBS9Vzq9wAAABQ"]
[Mon May 04 14:41:55.579467 2026] [:error] [pid 53160:tid 53192] [client 52.165.198.204:8270] [client 52.165.198.204] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/info.php"] [unique_id "afg_s6NFKJC8NNHHXb48dwAAAQI"]
[Mon May 04 23:51:04.523285 2026] [:error] [pid 61150:tid 61168] [client 20.29.119.89:27448] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/new.php"] [unique_id "afjAaO8QXWVLiwIGVpeoPwAAAU8"]
[Mon May 04 23:51:06.729051 2026] [:error] [pid 61043:tid 61099] [client 20.29.119.89:27440] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/new.php"] [unique_id "afjAap8-LwtfURjiAbDpXAAAAFg"]
[Mon May 04 23:51:11.414901 2026] [:error] [pid 3341:tid 3356] [client 20.29.119.89:27453] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/new.php"] [unique_id "afjAb09o3_LordU0wW6d_AAAAIw"]
[Mon May 04 23:51:14.835067 2026] [:error] [pid 3341:tid 3356] [client 20.29.119.89:27427] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/new.php"] [unique_id "afjAck9o3_LordU0wW6eBAAAAIw"]
[Mon May 04 23:51:19.441672 2026] [:error] [pid 61044:tid 61117] [client 20.29.119.89:27452] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "afjAd0w8w2zZZXI6H1u5uAAAAA8"]
[Mon May 04 23:51:20.361874 2026] [:error] [pid 32471:tid 32477] [client 20.29.119.89:27434] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "afjAeHmjpb9EYq6AqhKRqAAAAQM"]
[Mon May 04 23:51:21.842626 2026] [:error] [pid 3341:tid 3347] [client 20.29.119.89:27588] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "afjAeU9o3_LordU0wW6eGAAAAIM"]
[Mon May 04 23:51:23.058871 2026] [:error] [pid 61150:tid 61175] [client 20.29.119.89:27412] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/aa.php"] [unique_id "afjAe-8QXWVLiwIGVpeoTAAAAVY"]
[Mon May 04 23:51:25.657757 2026] [:error] [pid 3341:tid 3344] [client 20.29.119.89:27595] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/jk.php"] [unique_id "afjAfU9o3_LordU0wW6eJAAAAIA"]
[Mon May 04 23:51:28.760695 2026] [:error] [pid 3341:tid 3364] [client 20.29.119.89:27395] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/jk.php"] [unique_id "afjAgE9o3_LordU0wW6eMwAAAJQ"]
[Mon May 04 23:51:32.163870 2026] [:error] [pid 61044:tid 61125] [client 20.29.119.89:27404] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/jk.php"] [unique_id "afjAhEw8w2zZZXI6H1u5xAAAABc"]
[Mon May 04 23:51:44.004106 2026] [:error] [pid 3341:tid 3353] [client 20.29.119.89:27415] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gcqoa.php"] [unique_id "afjAkE9o3_LordU0wW6eRgAAAIk"]
[Mon May 04 23:51:44.963898 2026] [:error] [pid 61043:tid 61079] [client 20.29.119.89:27403] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gcqoa.php"] [unique_id "afjAkJ8-LwtfURjiAbDpjwAAAEQ"]
[Mon May 04 23:51:48.046103 2026] [:error] [pid 32471:tid 32482] [client 20.29.119.89:27449] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gcqoa.php"] [unique_id "afjAlHmjpb9EYq6AqhKRygAAAQg"]
[Mon May 04 23:51:49.375938 2026] [:error] [pid 3341:tid 3356] [client 20.29.119.89:27430] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gcqoa.php"] [unique_id "afjAlU9o3_LordU0wW6eXQAAAIw"]
[Mon May 04 23:51:50.555699 2026] [:error] [pid 3341:tid 3351] [client 20.29.119.89:27441] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/plugin-editor.php"] [unique_id "afjAlk9o3_LordU0wW6eZQAAAIc"]
[Mon May 04 23:51:51.679301 2026] [:error] [pid 3341:tid 3366] [client 20.29.119.89:27431] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/plugin-editor.php"] [unique_id "afjAl09o3_LordU0wW6ebAAAAJY"]
[Mon May 04 23:51:52.630519 2026] [:error] [pid 61043:tid 61075] [client 20.29.119.89:27611] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/plugin-editor.php"] [unique_id "afjAmJ8-LwtfURjiAbDpnQAAAEA"]
[Mon May 04 23:51:53.971449 2026] [:error] [pid 3341:tid 3348] [client 20.29.119.89:27439] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/plugin-editor.php"] [unique_id "afjAmU9o3_LordU0wW6ecgAAAIQ"]
[Mon May 04 23:51:54.872860 2026] [:error] [pid 3341:tid 3355] [client 20.29.119.89:27584] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/plugin-install.php"] [unique_id "afjAmk9o3_LordU0wW6edQAAAIs"]
[Mon May 04 23:51:59.804488 2026] [:error] [pid 61042:tid 61048] [client 20.29.119.89:27593] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/plugin-install.php"] [unique_id "afjAn0nAPPS1fjubA9RxfAAAAMI"]
[Mon May 04 23:52:01.226813 2026] [:error] [pid 3341:tid 3360] [client 20.29.119.89:27397] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/plugin-install.php"] [unique_id "afjAoU9o3_LordU0wW6ehwAAAJA"]
[Mon May 04 23:52:03.008480 2026] [:error] [pid 61043:tid 61089] [client 20.29.119.89:27540] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/plugin-install.php"] [unique_id "afjAo58-LwtfURjiAbDprgAAAE4"]
[Mon May 04 23:52:12.802778 2026] [:error] [pid 32471:tid 32478] [client 20.29.119.89:27410] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/albin.php"] [unique_id "afjArHmjpb9EYq6AqhKSBAAAAQQ"]
[Mon May 04 23:52:14.151191 2026] [:error] [pid 61042:tid 61066] [client 20.29.119.89:27597] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/albin.php"] [unique_id "afjArknAPPS1fjubA9RxgwAAANQ"]
[Mon May 04 23:52:16.769759 2026] [:error] [pid 61042:tid 61058] [client 20.29.119.89:27600] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/albin.php"] [unique_id "afjAsEnAPPS1fjubA9RxhQAAAMw"]
[Mon May 04 23:52:18.258825 2026] [:error] [pid 3341:tid 3363] [client 20.29.119.89:27418] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/albin.php"] [unique_id "afjAsk9o3_LordU0wW6epgAAAJM"]
[Mon May 04 23:52:20.107850 2026] [:error] [pid 3341:tid 3362] [client 20.29.119.89:27589] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-firewall.php"] [unique_id "afjAtE9o3_LordU0wW6esQAAAJI"]
[Mon May 04 23:52:21.279455 2026] [:error] [pid 3341:tid 3363] [client 20.29.119.89:27435] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-firewall.php"] [unique_id "afjAtU9o3_LordU0wW6euAAAAJM"]
[Mon May 04 23:52:22.755780 2026] [:error] [pid 61044:tid 61121] [client 20.29.119.89:27618] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-firewall.php"] [unique_id "afjAtkw8w2zZZXI6H1u5-gAAABM"]
[Mon May 04 23:52:23.513303 2026] [:error] [pid 61043:tid 61082] [client 20.29.119.89:27433] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-firewall.php"] [unique_id "afjAt58-LwtfURjiAbDpwgAAAEc"]
[Mon May 04 23:52:25.734298 2026] [:error] [pid 61043:tid 61077] [client 20.29.119.89:27614] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/samll.php"] [unique_id "afjAuZ8-LwtfURjiAbDpxAAAAEI"]
[Mon May 04 23:52:27.104329 2026] [:error] [pid 61150:tid 61166] [client 20.29.119.89:27419] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/samll.php"] [unique_id "afjAu-8QXWVLiwIGVpeomAAAAU0"]
[Mon May 04 23:52:32.304719 2026] [:error] [pid 32471:tid 32488] [client 20.29.119.89:27437] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/samll.php"] [unique_id "afjAwHmjpb9EYq6AqhKSLwAAAQ4"]
[Mon May 04 23:52:36.209947 2026] [:error] [pid 61042:tid 61062] [client 20.29.119.89:27645] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/samll.php"] [unique_id "afjAxEnAPPS1fjubA9RxkgAAANA"]
[Mon May 04 23:52:37.717494 2026] [:error] [pid 61042:tid 61048] [client 20.29.119.89:27627] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "afjAxUnAPPS1fjubA9RxlAAAAMI"]
[Mon May 04 23:52:40.763748 2026] [:error] [pid 61042:tid 61046] [client 20.29.119.89:27438] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "afjAyEnAPPS1fjubA9RxmQAAAMA"]
[Mon May 04 23:52:41.834060 2026] [:error] [pid 32471:tid 32488] [client 20.29.119.89:27620] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "afjAyXmjpb9EYq6AqhKSTQAAAQ4"]
[Mon May 04 23:52:42.405840 2026] [:error] [pid 61150:tid 61161] [client 20.29.119.89:27400] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ah25.php"] [unique_id "afjAyu8QXWVLiwIGVpeotQAAAUg"]
[Mon May 04 23:52:43.055750 2026] [:error] [pid 61042:tid 61066] [client 20.29.119.89:27444] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/txets.php"] [unique_id "afjAy0nAPPS1fjubA9RxmgAAANQ"]
[Mon May 04 23:52:44.397840 2026] [:error] [pid 32471:tid 32476] [client 20.29.119.89:27422] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/txets.php"] [unique_id "afjAzHmjpb9EYq6AqhKSVwAAAQI"]
[Mon May 04 23:52:45.543174 2026] [:error] [pid 3341:tid 3344] [client 20.29.119.89:27596] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/txets.php"] [unique_id "afjAzU9o3_LordU0wW6e8QAAAIA"]
[Mon May 04 23:52:47.298993 2026] [:error] [pid 3341:tid 3345] [client 20.29.119.89:27406] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/txets.php"] [unique_id "afjAz09o3_LordU0wW6e-gAAAIE"]
[Mon May 04 23:52:51.453044 2026] [:error] [pid 61150:tid 61160] [client 20.29.119.89:27634] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/aevly.php"] [unique_id "afjA0-8QXWVLiwIGVpeowAAAAUc"]
[Mon May 04 23:52:53.520461 2026] [:error] [pid 61150:tid 61173] [client 20.29.119.89:27413] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/aevly.php"] [unique_id "afjA1e8QXWVLiwIGVpeoxwAAAVQ"]
[Mon May 04 23:52:54.473162 2026] [:error] [pid 61044:tid 61115] [client 20.29.119.89:27598] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/aevly.php"] [unique_id "afjA1kw8w2zZZXI6H1u6EwAAAA0"]
[Mon May 04 23:52:55.665096 2026] [:error] [pid 3341:tid 3359] [client 20.29.119.89:27585] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/aevly.php"] [unique_id "afjA109o3_LordU0wW6fFwAAAI8"]
[Mon May 04 23:52:57.330404 2026] [:error] [pid 3341:tid 3350] [client 20.29.119.89:27599] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tires.php"] [unique_id "afjA2U9o3_LordU0wW6fHQAAAIY"]
[Mon May 04 23:52:59.085106 2026] [:error] [pid 61043:tid 61096] [client 20.29.119.89:27523] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tires.php"] [unique_id "afjA258-LwtfURjiAbDp3gAAAFU"]
[Mon May 04 23:52:59.865701 2026] [:error] [pid 61043:tid 61095] [client 20.29.119.89:27421] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tires.php"] [unique_id "afjA258-LwtfURjiAbDp4QAAAFQ"]
[Mon May 04 23:53:01.226316 2026] [:error] [pid 61150:tid 61170] [client 20.29.119.89:27607] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tires.php"] [unique_id "afjA3e8QXWVLiwIGVpeoywAAAVE"]
[Mon May 04 23:53:04.292755 2026] [:error] [pid 32471:tid 32486] [client 20.29.119.89:27442] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-slss.php"] [unique_id "afjA4Hmjpb9EYq6AqhKSdwAAAQw"]
[Mon May 04 23:53:05.193802 2026] [:error] [pid 3341:tid 3360] [client 20.29.119.89:27396] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-slss.php"] [unique_id "afjA4U9o3_LordU0wW6fNgAAAJA"]
[Mon May 04 23:53:06.742814 2026] [:error] [pid 32471:tid 32496] [client 20.29.119.89:27423] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-slss.php"] [unique_id "afjA4nmjpb9EYq6AqhKSeQAAARY"]
[Mon May 04 23:53:07.640018 2026] [:error] [pid 61150:tid 61168] [client 20.29.119.89:27445] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-slss.php"] [unique_id "afjA4-8QXWVLiwIGVpeozQAAAU8"]
[Mon May 04 23:53:09.781627 2026] [:error] [pid 32471:tid 32489] [client 20.29.119.89:27602] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/file30.php"] [unique_id "afjA5Xmjpb9EYq6AqhKSjAAAAQ8"]
[Mon May 04 23:53:11.899732 2026] [:error] [pid 61150:tid 61155] [client 20.29.119.89:27622] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/file30.php"] [unique_id "afjA5-8QXWVLiwIGVpeo0QAAAUI"]
[Mon May 04 23:53:22.018566 2026] [:error] [pid 32471:tid 32474] [client 20.29.119.89:27586] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/asasx.php"] [unique_id "afjA8nmjpb9EYq6AqhKSpAAAAQA"]
[Mon May 04 23:53:23.802384 2026] [:error] [pid 61044:tid 61123] [client 20.29.119.89:27455] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/asasx.php"] [unique_id "afjA80w8w2zZZXI6H1u6JQAAABU"]
[Mon May 04 23:53:25.435800 2026] [:error] [pid 61042:tid 61057] [client 20.29.119.89:27616] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/asasx.php"] [unique_id "afjA9UnAPPS1fjubA9RxvAAAAMs"]
[Mon May 04 23:53:27.314193 2026] [:error] [pid 61043:tid 61084] [client 20.29.119.89:27626] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/asasx.php"] [unique_id "afjA958-LwtfURjiAbDp-AAAAEk"]
[Mon May 04 23:53:29.049402 2026] [:error] [pid 61043:tid 61086] [client 20.29.119.89:27436] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/db.php"] [unique_id "afjA-Z8-LwtfURjiAbDp-wAAAEs"]
[Mon May 04 23:53:29.846089 2026] [:error] [pid 61042:tid 61046] [client 20.29.119.89:27601] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/db.php"] [unique_id "afjA-UnAPPS1fjubA9RxxgAAAMA"]
[Mon May 04 23:53:31.536222 2026] [:error] [pid 3341:tid 3347] [client 20.29.119.89:27552] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/db.php"] [unique_id "afjA-09o3_LordU0wW6fewAAAIM"]
[Mon May 04 23:53:33.687965 2026] [:error] [pid 61150:tid 61164] [client 20.29.119.89:27646] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/db.php"] [unique_id "afjA_e8QXWVLiwIGVpeo9gAAAUs"]
[Mon May 04 23:53:34.504608 2026] [:error] [pid 32471:tid 32479] [client 20.29.119.89:27548] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xml.php"] [unique_id "afjA_nmjpb9EYq6AqhKSsgAAAQU"]
[Mon May 04 23:53:35.821616 2026] [:error] [pid 3341:tid 3349] [client 20.29.119.89:27522] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xml.php"] [unique_id "afjA_09o3_LordU0wW6fgwAAAIU"]
[Mon May 04 23:53:37.178495 2026] [:error] [pid 3341:tid 3356] [client 20.29.119.89:27394] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xml.php"] [unique_id "afjBAU9o3_LordU0wW6fjgAAAIw"]
[Mon May 04 23:53:37.723587 2026] [:error] [pid 61042:tid 61062] [client 20.29.119.89:27608] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xml.php"] [unique_id "afjBAUnAPPS1fjubA9RxywAAANA"]
[Mon May 04 23:53:40.280449 2026] [:error] [pid 3341:tid 3364] [client 20.29.119.89:27443] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-bonbon.php"] [unique_id "afjBBE9o3_LordU0wW6fmAAAAJQ"]
[Mon May 04 23:53:41.066655 2026] [:error] [pid 3341:tid 3351] [client 20.29.119.89:27542] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-bonbon.php"] [unique_id "afjBBU9o3_LordU0wW6fmgAAAIc"]
[Mon May 04 23:53:42.051381 2026] [:error] [pid 32471:tid 32480] [client 20.29.119.89:27393] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-bonbon.php"] [unique_id "afjBBnmjpb9EYq6AqhKSugAAAQY"]
[Mon May 04 23:53:43.306172 2026] [:error] [pid 61043:tid 61096] [client 20.29.119.89:27399] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-bonbon.php"] [unique_id "afjBB58-LwtfURjiAbDp_wAAAFU"]
[Mon May 04 23:53:44.208865 2026] [:error] [pid 3341:tid 3348] [client 20.29.119.89:27592] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/at.php"] [unique_id "afjBCE9o3_LordU0wW6fowAAAIQ"]
[Mon May 04 23:53:44.983802 2026] [:error] [pid 3341:tid 3366] [client 20.29.119.89:27536] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/at.php"] [unique_id "afjBCE9o3_LordU0wW6fpAAAAJY"]
[Mon May 04 23:53:45.641361 2026] [:error] [pid 61043:tid 61079] [client 20.29.119.89:27625] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/at.php"] [unique_id "afjBCZ8-LwtfURjiAbDqBAAAAEQ"]
[Mon May 04 23:53:46.475374 2026] [:error] [pid 61043:tid 61082] [client 20.29.119.89:27561] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/at.php"] [unique_id "afjBCp8-LwtfURjiAbDqBgAAAEc"]
[Mon May 04 23:53:47.336207 2026] [:error] [pid 61043:tid 61086] [client 20.29.119.89:27631] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "afjBC58-LwtfURjiAbDqCgAAAEs"]
[Mon May 04 23:53:48.020263 2026] [:error] [pid 61044:tid 61114] [client 20.29.119.89:27574] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "afjBDEw8w2zZZXI6H1u6KwAAAAw"]
[Mon May 04 23:53:49.410595 2026] [:error] [pid 61043:tid 61099] [client 20.29.119.89:27470] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "afjBDZ8-LwtfURjiAbDqEAAAAFg"]
[Mon May 04 23:53:52.651013 2026] [:error] [pid 3341:tid 3353] [client 20.29.119.89:27424] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/rithin.php"] [unique_id "afjBEE9o3_LordU0wW6frwAAAIk"]
[Mon May 04 23:53:53.349585 2026] [:error] [pid 3341:tid 3366] [client 20.29.119.89:27639] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bless5.php"] [unique_id "afjBEU9o3_LordU0wW6ftAAAAJY"]
[Mon May 04 23:53:53.933061 2026] [:error] [pid 3341:tid 3359] [client 20.29.119.89:27606] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bless5.php"] [unique_id "afjBEU9o3_LordU0wW6fuAAAAI8"]
[Mon May 04 23:53:54.880067 2026] [:error] [pid 61044:tid 61113] [client 20.29.119.89:27477] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bless5.php"] [unique_id "afjBEkw8w2zZZXI6H1u6NAAAAAs"]
[Mon May 04 23:53:56.877602 2026] [:error] [pid 3341:tid 3364] [client 20.29.119.89:27555] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/bless5.php"] [unique_id "afjBFE9o3_LordU0wW6fvQAAAJQ"]
[Mon May 04 23:53:59.835246 2026] [:error] [pid 61042:tid 61046] [client 20.29.119.89:27630] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wuasr.php"] [unique_id "afjBF0nAPPS1fjubA9Rx1wAAAMA"]
[Mon May 04 23:54:01.328442 2026] [:error] [pid 32471:tid 32495] [client 20.29.119.89:27594] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wuasr.php"] [unique_id "afjBGXmjpb9EYq6AqhKSzAAAARU"]
[Mon May 04 23:54:02.225465 2026] [:error] [pid 32471:tid 32478] [client 20.29.119.89:27425] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wuasr.php"] [unique_id "afjBGnmjpb9EYq6AqhKS0AAAAQQ"]
[Mon May 04 23:54:02.958091 2026] [:error] [pid 61042:tid 61066] [client 20.29.119.89:27553] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wuasr.php"] [unique_id "afjBGknAPPS1fjubA9Rx2QAAANQ"]
[Mon May 04 23:54:06.081912 2026] [:error] [pid 3341:tid 3346] [client 20.29.119.89:27489] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/revealability.php"] [unique_id "afjBHk9o3_LordU0wW6f0QAAAII"]
[Mon May 04 23:54:07.066904 2026] [:error] [pid 61043:tid 61077] [client 20.29.119.89:27541] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/revealability.php"] [unique_id "afjBH58-LwtfURjiAbDqHAAAAEI"]
[Mon May 04 23:54:08.858702 2026] [:error] [pid 3341:tid 3345] [client 20.29.119.89:27636] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/revealability.php"] [unique_id "afjBIE9o3_LordU0wW6f2QAAAIE"]
[Mon May 04 23:54:10.392524 2026] [:error] [pid 61044:tid 61121] [client 20.29.119.89:27534] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/revealability.php"] [unique_id "afjBIkw8w2zZZXI6H1u6PwAAABM"]
[Mon May 04 23:54:11.684266 2026] [:error] [pid 32471:tid 32483] [client 20.29.119.89:27641] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wolv2.php"] [unique_id "afjBI3mjpb9EYq6AqhKS5gAAAQk"]
[Mon May 04 23:54:15.737299 2026] [:error] [pid 3341:tid 3363] [client 20.29.119.89:27520] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wolv2.php"] [unique_id "afjBJ09o3_LordU0wW6f5wAAAJM"]
[Mon May 04 23:54:16.313808 2026] [:error] [pid 32471:tid 32479] [client 20.29.119.89:27590] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wolv2.php"] [unique_id "afjBKHmjpb9EYq6AqhKS7QAAAQU"]
[Mon May 04 23:54:17.053427 2026] [:error] [pid 32471:tid 32478] [client 20.29.119.89:27615] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wolv2.php"] [unique_id "afjBKXmjpb9EYq6AqhKS7gAAAQQ"]
[Mon May 04 23:54:17.742249 2026] [:error] [pid 3341:tid 3359] [client 20.29.119.89:27643] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/iov.php"] [unique_id "afjBKU9o3_LordU0wW6f9AAAAI8"]
[Mon May 04 23:54:18.471978 2026] [:error] [pid 3341:tid 3344] [client 20.29.119.89:27587] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/iov.php"] [unique_id "afjBKk9o3_LordU0wW6f-AAAAIA"]
[Mon May 04 23:54:19.555160 2026] [:error] [pid 61043:tid 61088] [client 20.29.119.89:27544] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/iov.php"] [unique_id "afjBK58-LwtfURjiAbDqLAAAAE0"]
[Mon May 04 23:54:20.811034 2026] [:error] [pid 3341:tid 3361] [client 20.29.119.89:27417] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/iov.php"] [unique_id "afjBLE9o3_LordU0wW6gEAAAAJE"]
[Mon May 04 23:54:28.056918 2026] [:error] [pid 32471:tid 32488] [client 20.29.119.89:27428] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/class-db.php"] [unique_id "afjBNHmjpb9EYq6AqhKTDAAAAQ4"]
[Mon May 04 23:54:30.043672 2026] [:error] [pid 32471:tid 32490] [client 20.29.119.89:27533] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/class-db.php"] [unique_id "afjBNnmjpb9EYq6AqhKTEgAAARA"]
[Mon May 04 23:54:31.633830 2026] [:error] [pid 61150:tid 61165] [client 20.29.119.89:27604] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/class-db.php"] [unique_id "afjBN-8QXWVLiwIGVpepEgAAAUw"]
[Mon May 04 23:54:36.777729 2026] [:error] [pid 61042:tid 61054] [client 20.29.119.89:27543] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/class-db.php"] [unique_id "afjBPEnAPPS1fjubA9Rx6wAAAMg"]
[Mon May 04 23:54:38.462291 2026] [:error] [pid 32471:tid 32494] [client 20.29.119.89:27426] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/domains.php"] [unique_id "afjBPnmjpb9EYq6AqhKTGQAAARQ"]
[Mon May 04 23:54:38.969550 2026] [:error] [pid 61042:tid 61067] [client 20.29.119.89:27617] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/domains.php"] [unique_id "afjBPknAPPS1fjubA9Rx7gAAANU"]
[Mon May 04 23:54:39.837628 2026] [:error] [pid 61044:tid 61116] [client 20.29.119.89:27557] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/domains.php"] [unique_id "afjBP0w8w2zZZXI6H1u6UwAAAA4"]
[Mon May 04 23:54:41.382122 2026] [:error] [pid 61043:tid 61087] [client 20.29.119.89:27411] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/domains.php"] [unique_id "afjBQZ8-LwtfURjiAbDqWAAAAEw"]
[Mon May 04 23:54:43.055341 2026] [:error] [pid 32471:tid 32476] [client 20.29.119.89:27501] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "afjBQ3mjpb9EYq6AqhKTJAAAAQI"]
[Mon May 04 23:54:45.559770 2026] [:error] [pid 32471:tid 32483] [client 20.29.119.89:27532] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "afjBRXmjpb9EYq6AqhKTLQAAAQk"]
[Mon May 04 23:54:47.101420 2026] [:error] [pid 61043:tid 61094] [client 20.29.119.89:27526] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "afjBR58-LwtfURjiAbDqYQAAAFM"]
[Mon May 04 23:54:47.809513 2026] [:error] [pid 3341:tid 3368] [client 20.29.119.89:27628] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "afjBR09o3_LordU0wW6gOQAAAJg"]
[Mon May 04 23:54:51.678977 2026] [:error] [pid 32471:tid 32481] [client 20.29.119.89:27450] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ouh.php"] [unique_id "afjBS3mjpb9EYq6AqhKTMQAAAQc"]
[Mon May 04 23:54:52.896956 2026] [:error] [pid 32471:tid 32478] [client 20.29.119.89:27610] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ouh.php"] [unique_id "afjBTHmjpb9EYq6AqhKTOAAAAQQ"]
[Mon May 04 23:54:53.502999 2026] [:error] [pid 61042:tid 61047] [client 20.29.119.89:27564] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ouh.php"] [unique_id "afjBTUnAPPS1fjubA9Rx-AAAAME"]
[Mon May 04 23:54:54.718496 2026] [:error] [pid 61044:tid 61116] [client 20.29.119.89:27621] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ouh.php"] [unique_id "afjBTkw8w2zZZXI6H1u6YgAAAA4"]
[Mon May 04 23:54:56.289889 2026] [:error] [pid 61044:tid 61123] [client 20.29.119.89:27530] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fone1.php"] [unique_id "afjBUEw8w2zZZXI6H1u6ZQAAABU"]
[Mon May 04 23:54:58.487172 2026] [:error] [pid 61150:tid 61158] [client 20.29.119.89:27432] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fone1.php"] [unique_id "afjBUu8QXWVLiwIGVpepKAAAAUU"]
[Mon May 04 23:54:59.649442 2026] [:error] [pid 3341:tid 3357] [client 20.29.119.89:27638] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fone1.php"] [unique_id "afjBU09o3_LordU0wW6gTAAAAI0"]
[Mon May 04 23:55:02.892292 2026] [:error] [pid 61150:tid 61155] [client 20.29.119.89:27624] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fone1.php"] [unique_id "afjBVu8QXWVLiwIGVpepKwAAAUI"]
[Mon May 04 23:55:05.233741 2026] [:error] [pid 61043:tid 61081] [client 20.29.119.89:27612] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/sko.php"] [unique_id "afjBWZ8-LwtfURjiAbDqbAAAAEY"]
[Mon May 04 23:55:06.148777 2026] [:error] [pid 61044:tid 61103] [client 20.29.119.89:27537] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/sko.php"] [unique_id "afjBWkw8w2zZZXI6H1u6cAAAAAE"]
[Mon May 04 23:55:07.504480 2026] [:error] [pid 61042:tid 61059] [client 20.29.119.89:27578] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/sko.php"] [unique_id "afjBW0nAPPS1fjubA9Rx_QAAAM0"]
[Mon May 04 23:55:09.767365 2026] [:error] [pid 61150:tid 61160] [client 20.29.119.89:27153] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/sko.php"] [unique_id "afjBXe8QXWVLiwIGVpepLwAAAUc"]
[Mon May 04 23:55:10.807527 2026] [:error] [pid 32471:tid 32498] [client 20.29.119.89:27529] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/cilus.php"] [unique_id "afjBXnmjpb9EYq6AqhKTngAAARg"]
[Mon May 04 23:55:13.365773 2026] [:error] [pid 61150:tid 61158] [client 20.29.119.89:27461] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/cilus.php"] [unique_id "afjBYe8QXWVLiwIGVpepMAAAAUU"]
[Mon May 04 23:55:14.609311 2026] [:error] [pid 61150:tid 61153] [client 20.29.119.89:27603] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/cilus.php"] [unique_id "afjBYu8QXWVLiwIGVpepMgAAAUA"]
[Mon May 04 23:55:15.971773 2026] [:error] [pid 61044:tid 61114] [client 20.29.119.89:27629] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/cilus.php"] [unique_id "afjBY0w8w2zZZXI6H1u6dgAAAAw"]
[Mon May 04 23:55:17.180167 2026] [:error] [pid 61043:tid 61077] [client 20.29.119.89:27527] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-cliner.php"] [unique_id "afjBZZ8-LwtfURjiAbDqcwAAAEI"]
[Mon May 04 23:55:17.896097 2026] [:error] [pid 61150:tid 61162] [client 20.29.119.89:27637] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-cliner.php"] [unique_id "afjBZe8QXWVLiwIGVpepNQAAAUk"]
[Mon May 04 23:55:18.902831 2026] [:error] [pid 32471:tid 32489] [client 20.29.119.89:27644] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-cliner.php"] [unique_id "afjBZnmjpb9EYq6AqhKTtwAAAQ8"]
[Mon May 04 23:55:22.162182 2026] [:error] [pid 61044:tid 61120] [client 20.29.119.89:27605] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-cliner.php"] [unique_id "afjBakw8w2zZZXI6H1u6egAAABI"]
[Mon May 04 23:55:24.740632 2026] [:error] [pid 32471:tid 32490] [client 20.29.119.89:27525] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-sx10.php"] [unique_id "afjBbHmjpb9EYq6AqhKTvgAAARA"]
[Mon May 04 23:55:26.678636 2026] [:error] [pid 32471:tid 32475] [client 20.29.119.89:27414] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-sx10.php"] [unique_id "afjBbnmjpb9EYq6AqhKTxAAAAQE"]
[Mon May 04 23:55:46.662640 2026] [:error] [pid 61150:tid 61161] [client 20.29.119.89:27582] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xy.php"] [unique_id "afjBgu8QXWVLiwIGVpepYgAAAUg"]
[Mon May 04 23:55:48.300419 2026] [:error] [pid 3341:tid 3367] [client 20.29.119.89:27447] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xy.php"] [unique_id "afjBhE9o3_LordU0wW6gywAAAJc"]
[Mon May 04 23:55:49.930555 2026] [:error] [pid 3341:tid 3366] [client 20.29.119.89:27545] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xy.php"] [unique_id "afjBhU9o3_LordU0wW6g0wAAAJY"]
[Mon May 04 23:55:51.720481 2026] [:error] [pid 3341:tid 3368] [client 20.29.119.89:27456] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/xy.php"] [unique_id "afjBh09o3_LordU0wW6g2QAAAJg"]
[Mon May 04 23:55:56.455352 2026] [:error] [pid 61044:tid 61124] [client 20.29.119.89:27464] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/opts.php"] [unique_id "afjBjEw8w2zZZXI6H1u6iQAAABY"]
[Mon May 04 23:55:57.372765 2026] [:error] [pid 3341:tid 3362] [client 20.29.119.89:27547] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/opts.php"] [unique_id "afjBjU9o3_LordU0wW6g7AAAAJI"]
[Mon May 04 23:55:58.720501 2026] [:error] [pid 32471:tid 32477] [client 20.29.119.89:27558] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/opts.php"] [unique_id "afjBjnmjpb9EYq6AqhKUHQAAAQM"]
[Mon May 04 23:55:59.512888 2026] [:error] [pid 3341:tid 3360] [client 20.29.119.89:27623] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/opts.php"] [unique_id "afjBj09o3_LordU0wW6g9gAAAJA"]
[Mon May 04 23:56:02.355452 2026] [:error] [pid 32471:tid 32486] [client 20.29.119.89:27431] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/yellow.php"] [unique_id "afjBknmjpb9EYq6AqhKUIAAAAQw"]
[Mon May 04 23:56:04.148431 2026] [:error] [pid 61042:tid 61068] [client 20.29.119.89:27565] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/yellow.php"] [unique_id "afjBlEnAPPS1fjubA9RyDgAAANY"]
[Mon May 04 23:56:05.784531 2026] [:error] [pid 3341:tid 3355] [client 20.29.119.89:27611] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/yellow.php"] [unique_id "afjBlU9o3_LordU0wW6g_wAAAIs"]
[Mon May 04 23:56:06.618584 2026] [:error] [pid 3341:tid 3359] [client 20.29.119.89:27531] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/yellow.php"] [unique_id "afjBlk9o3_LordU0wW6hAgAAAI8"]
[Mon May 04 23:56:07.595393 2026] [:error] [pid 61150:tid 61172] [client 20.29.119.89:27567] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/hook.php"] [unique_id "afjBl-8QXWVLiwIGVpepaQAAAVM"]
[Mon May 04 23:56:10.684558 2026] [:error] [pid 61150:tid 61175] [client 20.29.119.89:27613] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/hook.php"] [unique_id "afjBmu8QXWVLiwIGVpepbAAAAVY"]
[Mon May 04 23:56:11.756064 2026] [:error] [pid 61150:tid 61163] [client 20.29.119.89:27434] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/hook.php"] [unique_id "afjBm-8QXWVLiwIGVpepbQAAAUo"]
[Mon May 04 23:56:12.533506 2026] [:error] [pid 32471:tid 32481] [client 20.29.119.89:27492] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/hook.php"] [unique_id "afjBnHmjpb9EYq6AqhKUKQAAAQc"]
[Mon May 04 23:56:13.445049 2026] [:error] [pid 61042:tid 61050] [client 20.29.119.89:27401] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/racs3.php"] [unique_id "afjBnUnAPPS1fjubA9RyEgAAAMQ"]
[Mon May 04 23:56:14.693133 2026] [:error] [pid 61044:tid 61104] [client 20.29.119.89:27474] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/racs3.php"] [unique_id "afjBnkw8w2zZZXI6H1u6jgAAAAI"]
[Mon May 04 23:56:15.723078 2026] [:error] [pid 3341:tid 3362] [client 20.29.119.89:27528] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/racs3.php"] [unique_id "afjBn09o3_LordU0wW6hFgAAAJI"]
[Mon May 04 23:56:19.433550 2026] [:error] [pid 32471:tid 32490] [client 20.29.119.89:27570] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/racs3.php"] [unique_id "afjBo3mjpb9EYq6AqhKUMQAAARA"]
[Mon May 04 23:56:23.595171 2026] [:error] [pid 32471:tid 32478] [client 20.29.119.89:27405] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/zzkhe.php"] [unique_id "afjBp3mjpb9EYq6AqhKUOAAAAQQ"]
[Mon May 04 23:56:26.652148 2026] [:error] [pid 32471:tid 32478] [client 20.29.119.89:27468] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/zzkhe.php"] [unique_id "afjBqnmjpb9EYq6AqhKUPgAAAQQ"]
[Mon May 04 23:56:31.667643 2026] [:error] [pid 61044:tid 61117] [client 20.29.119.89:27397] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/zzkhe.php"] [unique_id "afjBr0w8w2zZZXI6H1u6kQAAAA8"]
[Mon May 04 23:56:35.546720 2026] [:error] [pid 61043:tid 61081] [client 20.29.119.89:27446] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/samll.php"] [unique_id "afjBs58-LwtfURjiAbDqmwAAAEY"]
[Mon May 04 23:56:41.944106 2026] [:error] [pid 61042:tid 61057] [client 20.29.119.89:27595] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/samll.php"] [unique_id "afjBuUnAPPS1fjubA9RyHwAAAMs"]
[Mon May 04 23:56:42.950232 2026] [:error] [pid 3341:tid 3350] [client 20.29.119.89:27404] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/samll.php"] [unique_id "afjBuk9o3_LordU0wW6hOAAAAIY"]
[Mon May 04 23:56:43.807968 2026] [:error] [pid 32471:tid 32489] [client 20.29.119.89:27546] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/samll.php"] [unique_id "afjBu3mjpb9EYq6AqhKUTgAAAQ8"]
[Mon May 04 23:56:44.748850 2026] [:error] [pid 61043:tid 61081] [client 20.29.119.89:27433] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/mga.php"] [unique_id "afjBvJ8-LwtfURjiAbDqowAAAEY"]
[Mon May 04 23:56:45.758701 2026] [:error] [pid 32471:tid 32497] [client 20.29.119.89:27429] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/mga.php"] [unique_id "afjBvXmjpb9EYq6AqhKUTwAAARc"]
[Mon May 04 23:56:55.890477 2026] [:error] [pid 3341:tid 3351] [client 20.29.119.89:27521] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/yasfu.php"] [unique_id "afjBx09o3_LordU0wW6hUwAAAIc"]
[Mon May 04 23:56:58.229200 2026] [:error] [pid 32471:tid 32492] [client 20.29.119.89:27588] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/yasfu.php"] [unique_id "afjBynmjpb9EYq6AqhKUWgAAARI"]
[Mon May 04 23:57:01.610598 2026] [:error] [pid 32471:tid 32478] [client 20.29.119.89:27454] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/yasfu.php"] [unique_id "afjBzXmjpb9EYq6AqhKUZAAAAQQ"]
[Mon May 04 23:57:03.308511 2026] [:error] [pid 61042:tid 61050] [client 20.29.119.89:27418] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/yasfu.php"] [unique_id "afjBz0nAPPS1fjubA9RyKwAAAMQ"]
[Mon May 04 23:57:04.600943 2026] [:error] [pid 3341:tid 3347] [client 20.29.119.89:27444] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "afjB0E9o3_LordU0wW6hWwAAAIM"]
[Mon May 04 23:57:07.160329 2026] [:error] [pid 32471:tid 32493] [client 20.29.119.89:27596] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "afjB03mjpb9EYq6AqhKUagAAARM"]
[Mon May 04 23:57:10.289728 2026] [:error] [pid 3341:tid 3359] [client 20.29.119.89:27430] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "afjB1k9o3_LordU0wW6hYAAAAI8"]
[Mon May 04 23:57:11.091975 2026] [:error] [pid 61043:tid 61086] [client 20.29.119.89:27483] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/sid3.php"] [unique_id "afjB158-LwtfURjiAbDqugAAAEs"]
[Mon May 04 23:57:11.693113 2026] [:error] [pid 32471:tid 32490] [client 20.29.119.89:27618] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-update.php"] [unique_id "afjB13mjpb9EYq6AqhKUbQAAARA"]
[Mon May 04 23:57:12.677488 2026] [:error] [pid 3341:tid 3344] [client 20.29.119.89:27408] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-update.php"] [unique_id "afjB2E9o3_LordU0wW6hZwAAAIA"]
[Mon May 04 23:57:15.263868 2026] [:error] [pid 61150:tid 61168] [client 20.29.119.89:27438] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-update.php"] [unique_id "afjB2-8QXWVLiwIGVpepnQAAAU8"]
[Mon May 04 23:57:17.442752 2026] [:error] [pid 61150:tid 61174] [client 20.29.119.89:27392] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-update.php"] [unique_id "afjB3e8QXWVLiwIGVpepoAAAAVU"]
[Mon May 04 23:57:19.251790 2026] [:error] [pid 61043:tid 61098] [client 20.29.119.89:27524] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "afjB358-LwtfURjiAbDqvwAAAFc"]
[Mon May 04 23:57:21.083031 2026] [:error] [pid 61043:tid 61078] [client 20.29.119.89:27585] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "afjB4Z8-LwtfURjiAbDqwAAAAEM"]
[Mon May 04 23:57:24.610498 2026] [:error] [pid 3341:tid 3351] [client 20.29.119.89:27442] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "afjB5E9o3_LordU0wW6hegAAAIc"]
[Mon May 04 23:57:26.760275 2026] [:error] [pid 3341:tid 3354] [client 20.29.119.89:27435] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "afjB5k9o3_LordU0wW6hfwAAAIo"]
[Mon May 04 23:57:27.943017 2026] [:error] [pid 3341:tid 3346] [client 20.29.119.89:27453] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "afjB509o3_LordU0wW6hhAAAAII"]
[Mon May 04 23:57:29.684966 2026] [:error] [pid 32471:tid 32497] [client 20.29.119.89:27614] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "afjB6Xmjpb9EYq6AqhKUfQAAARc"]
[Mon May 04 23:57:31.252301 2026] [:error] [pid 32471:tid 32475] [client 20.29.119.89:27427] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "afjB63mjpb9EYq6AqhKUggAAAQE"]
[Mon May 04 23:57:32.909314 2026] [:error] [pid 61043:tid 61096] [client 20.29.119.89:27400] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "afjB7J8-LwtfURjiAbDqxAAAAFU"]
[Mon May 04 23:57:34.602389 2026] [:error] [pid 61044:tid 61115] [client 20.29.119.89:27549] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/shell20211028.php"] [unique_id "afjB7kw8w2zZZXI6H1u6uAAAAA0"]
[Mon May 04 23:57:35.401191 2026] [:error] [pid 32471:tid 32479] [client 20.29.119.89:27599] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/shell20211028.php"] [unique_id "afjB73mjpb9EYq6AqhKUjQAAAQU"]
[Mon May 04 23:57:38.164442 2026] [:error] [pid 32471:tid 32493] [client 20.29.119.89:27600] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/shell20211028.php"] [unique_id "afjB8nmjpb9EYq6AqhKUkgAAARM"]
[Mon May 04 23:57:41.145189 2026] [:error] [pid 3341:tid 3359] [client 20.29.119.89:27439] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/shell20211028.php"] [unique_id "afjB9U9o3_LordU0wW6hkwAAAI8"]
[Mon May 04 23:57:42.665689 2026] [:error] [pid 61044:tid 61119] [client 20.29.119.89:27436] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/clirp.php"] [unique_id "afjB9kw8w2zZZXI6H1u6ugAAABE"]
[Mon May 04 23:57:43.897002 2026] [:error] [pid 3341:tid 3362] [client 20.29.119.89:27496] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/clirp.php"] [unique_id "afjB909o3_LordU0wW6hmAAAAJI"]
[Mon May 04 23:57:45.727142 2026] [:error] [pid 61150:tid 61177] [client 20.29.119.89:27616] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/clirp.php"] [unique_id "afjB-e8QXWVLiwIGVpeprAAAAVg"]
[Mon May 04 23:57:46.408859 2026] [:error] [pid 3341:tid 3357] [client 20.29.119.89:27437] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/clirp.php"] [unique_id "afjB-k9o3_LordU0wW6hmwAAAI0"]
[Mon May 04 23:57:47.456165 2026] [:error] [pid 3341:tid 3360] [client 20.29.119.89:27445] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/rendi59.php"] [unique_id "afjB-09o3_LordU0wW6hngAAAJA"]
[Mon May 04 23:57:48.787119 2026] [:error] [pid 3341:tid 3346] [client 20.29.119.89:27586] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/rendi59.php"] [unique_id "afjB_E9o3_LordU0wW6hogAAAII"]
[Mon May 04 23:57:49.793693 2026] [:error] [pid 61043:tid 61087] [client 20.29.119.89:27559] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/rendi59.php"] [unique_id "afjB_Z8-LwtfURjiAbDqyQAAAEw"]
[Mon May 04 23:57:51.623838 2026] [:error] [pid 32471:tid 32474] [client 20.29.119.89:27635] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/rendi59.php"] [unique_id "afjB_3mjpb9EYq6AqhKUnAAAAQA"]
[Mon May 04 23:57:53.349781 2026] [:error] [pid 32471:tid 32498] [client 20.29.119.89:27647] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "afjCAXmjpb9EYq6AqhKUnwAAARg"]
[Mon May 04 23:57:54.430445 2026] [:error] [pid 32471:tid 32495] [client 20.29.119.89:27584] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/gptsh.php"] [unique_id "afjCAnmjpb9EYq6AqhKUowAAARU"]
[Mon May 04 23:58:04.794826 2026] [:error] [pid 3341:tid 3358] [client 20.29.119.89:27609] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/G-In.php"] [unique_id "afjCDE9o3_LordU0wW6h1QAAAI4"]
[Mon May 04 23:58:06.775510 2026] [:error] [pid 61042:tid 61059] [client 20.29.119.89:27620] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/G-In.php"] [unique_id "afjCDknAPPS1fjubA9RyOQAAAM0"]
[Mon May 04 23:58:08.202003 2026] [:error] [pid 32471:tid 32488] [client 20.29.119.89:27403] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/G-In.php"] [unique_id "afjCEHmjpb9EYq6AqhKUsAAAAQ4"]
[Mon May 04 23:58:09.943729 2026] [:error] [pid 3341:tid 3351] [client 20.29.119.89:27607] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/G-In.php"] [unique_id "afjCEU9o3_LordU0wW6h2QAAAIc"]
[Mon May 04 23:58:11.301284 2026] [:error] [pid 3341:tid 3364] [client 20.29.119.89:27421] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-gr.php"] [unique_id "afjCE09o3_LordU0wW6h2wAAAJQ"]
[Mon May 04 23:58:13.042294 2026] [:error] [pid 3341:tid 3362] [client 20.29.119.89:27601] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-gr.php"] [unique_id "afjCFU9o3_LordU0wW6h4QAAAJI"]
[Mon May 04 23:58:14.729465 2026] [:error] [pid 61043:tid 61091] [client 20.29.119.89:27602] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-gr.php"] [unique_id "afjCFp8-LwtfURjiAbDq2AAAAFA"]
[Mon May 04 23:58:15.477171 2026] [:error] [pid 3341:tid 3350] [client 20.29.119.89:27451] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-gr.php"] [unique_id "afjCF09o3_LordU0wW6h5wAAAIY"]
[Mon May 04 23:58:16.728115 2026] [:error] [pid 61043:tid 61076] [client 20.29.119.89:27625] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/mans.php"] [unique_id "afjCGJ8-LwtfURjiAbDq2QAAAEE"]
[Mon May 04 23:58:17.651381 2026] [:error] [pid 3341:tid 3356] [client 20.29.119.89:27597] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/mans.php"] [unique_id "afjCGU9o3_LordU0wW6h7gAAAIw"]
[Mon May 04 23:58:18.775531 2026] [:error] [pid 61043:tid 61095] [client 20.29.119.89:27443] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/mans.php"] [unique_id "afjCGp8-LwtfURjiAbDq2wAAAFQ"]
[Mon May 04 23:58:19.566701 2026] [:error] [pid 32471:tid 32489] [client 20.29.119.89:27589] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/mans.php"] [unique_id "afjCG3mjpb9EYq6AqhKUtQAAAQ8"]
[Mon May 04 23:58:20.564565 2026] [:error] [pid 32471:tid 32478] [client 20.29.119.89:27575] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-2019.php"] [unique_id "afjCHHmjpb9EYq6AqhKUuQAAAQQ"]
[Mon May 04 23:58:22.798012 2026] [:error] [pid 61043:tid 61087] [client 20.29.119.89:27416] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-2019.php"] [unique_id "afjCHp8-LwtfURjiAbDq3gAAAEw"]
[Mon May 04 23:58:23.895083 2026] [:error] [pid 61043:tid 61086] [client 20.29.119.89:27538] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-2019.php"] [unique_id "afjCH58-LwtfURjiAbDq4QAAAEs"]
[Mon May 04 23:58:25.093745 2026] [:error] [pid 61043:tid 61077] [client 20.29.119.89:27522] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-2019.php"] [unique_id "afjCIZ8-LwtfURjiAbDq5AAAAEI"]
[Mon May 04 23:58:26.392833 2026] [:error] [pid 61150:tid 61174] [client 20.29.119.89:27555] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/file4.php"] [unique_id "afjCIu8QXWVLiwIGVpepwgAAAVU"]
[Mon May 04 23:58:27.391883 2026] [:error] [pid 32471:tid 32486] [client 20.29.119.89:27449] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/file4.php"] [unique_id "afjCI3mjpb9EYq6AqhKU4AAAAQw"]
[Mon May 04 23:58:29.822054 2026] [:error] [pid 3341:tid 3351] [client 20.29.119.89:27639] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/file4.php"] [unique_id "afjCJU9o3_LordU0wW6h_AAAAIc"]
[Mon May 04 23:58:31.046012 2026] [:error] [pid 61150:tid 61166] [client 20.29.119.89:27630] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/file4.php"] [unique_id "afjCJ-8QXWVLiwIGVpep1wAAAU0"]
[Mon May 04 23:58:32.999551 2026] [:error] [pid 61042:tid 61057] [client 20.29.119.89:27633] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-acc.php"] [unique_id "afjCKEnAPPS1fjubA9RyRQAAAMs"]
[Mon May 04 23:58:39.768684 2026] [:error] [pid 61044:tid 61116] [client 20.29.119.89:27422] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-acc.php"] [unique_id "afjCL0w8w2zZZXI6H1u64gAAAA4"]
[Mon May 04 23:58:41.601529 2026] [:error] [pid 61043:tid 61084] [client 20.29.119.89:27593] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-acc.php"] [unique_id "afjCMZ8-LwtfURjiAbDq-wAAAEk"]
[Mon May 04 23:58:42.416651 2026] [:error] [pid 3341:tid 3354] [client 20.29.119.89:27455] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-acc.php"] [unique_id "afjCMk9o3_LordU0wW6iBgAAAIo"]
[Mon May 04 23:58:43.133349 2026] [:error] [pid 3341:tid 3352] [client 20.29.119.89:27395] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-trackback.php"] [unique_id "afjCM09o3_LordU0wW6iCAAAAIg"]
[Mon May 04 23:58:44.799391 2026] [:error] [pid 3341:tid 3348] [client 20.29.119.89:27417] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-trackback.php"] [unique_id "afjCNE9o3_LordU0wW6iJQAAAIQ"]
[Mon May 04 23:58:46.287888 2026] [:error] [pid 3341:tid 3360] [client 20.29.119.89:27535] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-trackback.php"] [unique_id "afjCNk9o3_LordU0wW6iLgAAAJA"]
[Mon May 04 23:58:47.223489 2026] [:error] [pid 32471:tid 32495] [client 20.29.119.89:27574] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-trackback.php"] [unique_id "afjCN3mjpb9EYq6AqhKU7wAAARU"]
[Mon May 04 23:58:47.958123 2026] [:error] [pid 3341:tid 3346] [client 20.29.119.89:27425] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-xx.php"] [unique_id "afjCN09o3_LordU0wW6iMwAAAII"]
[Mon May 04 23:58:52.103581 2026] [:error] [pid 61150:tid 61174] [client 20.29.119.89:27646] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-xx.php"] [unique_id "afjCPO8QXWVLiwIGVpep5QAAAVU"]
[Mon May 04 23:58:53.293449 2026] [:error] [pid 61043:tid 61085] [client 20.29.119.89:27394] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-xx.php"] [unique_id "afjCPZ8-LwtfURjiAbDrIwAAAEo"]
[Mon May 04 23:58:54.220472 2026] [:error] [pid 61042:tid 61052] [client 20.29.119.89:27420] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-xx.php"] [unique_id "afjCPknAPPS1fjubA9RyVgAAAMY"]
[Mon May 04 23:58:55.749862 2026] [:error] [pid 32471:tid 32483] [client 20.29.119.89:27402] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/555.php"] [unique_id "afjCP3mjpb9EYq6AqhKU8wAAAQk"]
[Mon May 04 23:58:57.312655 2026] [:error] [pid 3341:tid 3346] [client 20.29.119.89:27631] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/555.php"] [unique_id "afjCQU9o3_LordU0wW6iTQAAAII"]
[Mon May 04 23:58:59.038987 2026] [:error] [pid 32471:tid 32489] [client 20.29.119.89:27580] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/555.php"] [unique_id "afjCQ3mjpb9EYq6AqhKVBQAAAQ8"]
[Mon May 04 23:58:59.983246 2026] [:error] [pid 61150:tid 61171] [client 20.29.119.89:27410] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/555.php"] [unique_id "afjCQ-8QXWVLiwIGVpep7wAAAVI"]
[Mon May 04 23:59:01.278273 2026] [:error] [pid 61150:tid 61175] [client 20.29.119.89:27640] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-conflg.php"] [unique_id "afjCRe8QXWVLiwIGVpep8wAAAVY"]
[Mon May 04 23:59:03.010025 2026] [:error] [pid 32471:tid 32477] [client 20.29.119.89:27645] [client 20.29.119.89] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-conflg.php"] [unique_id "afjCR3mjpb9EYq6AqhKVDQAAAQM"]
[Tue May 05 01:04:38.220683 2026] [:error] [pid 3341:tid 3348] [client 52.175.121.75:7407] [client 52.175.121.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "afjRpk9o3_LordU0wW68qAAAAIQ"]
[Tue May 05 01:04:38.726724 2026] [:error] [pid 61042:tid 61067] [client 52.175.121.75:5149] [client 52.175.121.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "afjRpknAPPS1fjubA9R8JQAAANU"]
[Tue May 05 01:04:39.221112 2026] [:error] [pid 61150:tid 61171] [client 52.175.121.75:7366] [client 52.175.121.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "afjRp-8QXWVLiwIGVpe1zwAAAVI"]
[Tue May 05 01:04:39.785948 2026] [:error] [pid 61150:tid 61159] [client 52.175.121.75:5152] [client 52.175.121.75] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "afjRp-8QXWVLiwIGVpe10gAAAUY"]
[Tue May 05 05:27:32.086726 2026] [:error] [pid 39072:tid 39116] [client 209.87.169.14:48105] [client 209.87.169.14] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "afkPRPolSHl4aAnrIovaAQAAAEk"]
[Tue May 05 07:44:16.240061 2026] [:error] [pid 39178:tid 39203] [client 45.86.200.109:48693] [client 45.86.200.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "afkvUDaPrgTaiOD_15ui6QAAANc"]
[Tue May 05 07:44:18.695110 2026] [:error] [pid 53856:tid 53879] [client 45.86.200.82:39687] [client 45.86.200.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "afkvUnG_NPOxSH0O9aT-rgAAAU4"]
[Tue May 05 07:44:20.916435 2026] [:error] [pid 39073:tid 39137] [client 45.86.200.100:62271] [client 45.86.200.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "afkvVP0kT1BNjk46BkdgBAAAAIM"]
[Tue May 05 07:44:22.340605 2026] [:error] [pid 53856:tid 53888] [client 45.86.200.54:42601] [client 45.86.200.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "afkvVnG_NPOxSH0O9aT_bwAAAVc"]
[Tue May 05 07:44:24.700433 2026] [:error] [pid 39178:tid 39203] [client 45.86.200.96:50407] [client 45.86.200.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "afkvWDaPrgTaiOD_15uj8gAAANc"]
[Tue May 05 07:44:25.559316 2026] [:error] [pid 53856:tid 53869] [client 45.86.200.55:60583] [client 45.86.200.55] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "afkvWXG_NPOxSH0O9aT__gAAAUQ"]
[Tue May 05 07:44:26.090892 2026] [:error] [pid 39071:tid 39097] [client 45.86.200.75:53347] [client 45.86.200.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "afkvWovmnRMz9gRzix2WVgAAABE"]
[Tue May 05 07:44:26.500437 2026] [:error] [pid 39071:tid 39099] [client 45.86.200.78:27589] [client 45.86.200.78] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/plugins/pwnd/pwnd.php"] [unique_id "afkvWovmnRMz9gRzix2WXAAAABM"]
[Tue May 05 07:44:26.653360 2026] [:error] [pid 53856:tid 53871] [client 45.86.200.60:32371] [client 45.86.200.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "afkvWnG_NPOxSH0O9aQAPAAAAUY"]
[Tue May 05 07:44:27.220647 2026] [:error] [pid 41055:tid 41082] [client 45.86.200.86:34845] [client 45.86.200.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "afkvWyepFwKgA_SKOHgINQAAARg"]
[Tue May 05 07:44:27.778748 2026] [:error] [pid 39071:tid 39100] [client 45.86.200.94:42455] [client 45.86.200.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "afkvW4vmnRMz9gRzix2WeAAAABQ"]
[Tue May 05 07:44:27.941431 2026] [:error] [pid 53856:tid 53865] [client 45.86.200.103:65437] [client 45.86.200.103] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/worksec.php"] [unique_id "afkvW3G_NPOxSH0O9aQAhgAAAUA"]
[Tue May 05 07:44:28.769641 2026] [:error] [pid 39178:tid 39181] [client 45.86.200.111:44289] [client 45.86.200.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "afkvXDaPrgTaiOD_15ukRQAAAME"]
[Tue May 05 07:44:29.879637 2026] [:error] [pid 39071:tid 39097] [client 45.86.200.109:24011] [client 45.86.200.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "afkvXYvmnRMz9gRzix2WsQAAABE"]
[Tue May 05 07:44:30.364503 2026] [:error] [pid 39072:tid 39113] [client 45.86.200.54:26781] [client 45.86.200.54] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tinyfilemanager.php"] [unique_id "afkvXvolSHl4aAnrIosfVgAAAEY"]
[Tue May 05 07:44:31.098847 2026] [:error] [pid 39178:tid 39198] [client 45.86.200.105:55879] [client 45.86.200.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "afkvXzaPrgTaiOD_15ukgAAAANI"]
[Tue May 05 07:44:31.771966 2026] [:error] [pid 39072:tid 39119] [client 45.86.200.81:35927] [client 45.86.200.81] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/index.php"] [unique_id "afkvX_olSHl4aAnrIosffQAAAEw"]
[Tue May 05 07:44:31.976370 2026] [:error] [pid 53856:tid 53886] [client 45.86.200.92:60563] [client 45.86.200.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "afkvX3G_NPOxSH0O9aQBRwAAAVU"]
[Tue May 05 07:44:32.791254 2026] [:error] [pid 39072:tid 39114] [client 45.86.200.99:35039] [client 45.86.200.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "afkvYPolSHl4aAnrIosfnQAAAEc"]
[Tue May 05 07:44:34.103545 2026] [:error] [pid 39178:tid 39196] [client 45.86.200.88:33281] [client 45.86.200.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/dyqvcfqv.php"] [unique_id "afkvYjaPrgTaiOD_15uk4AAAANA"]
[Tue May 05 07:44:35.101284 2026] [:error] [pid 41055:tid 41080] [client 45.86.200.106:30463] [client 45.86.200.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "afkvYyepFwKgA_SKOHgI7wAAARY"]
[Tue May 05 07:44:35.275464 2026] [:error] [pid 53856:tid 53881] [client 45.86.200.56:56269] [client 45.86.200.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/about.php"] [unique_id "afkvY3G_NPOxSH0O9aQBuQAAAVA"]
[Tue May 05 07:44:35.953599 2026] [:error] [pid 39178:tid 39190] [client 45.86.200.88:24609] [client 45.86.200.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/crop/admin.php"] [unique_id "afkvYzaPrgTaiOD_15ulEQAAAMo"]
[Tue May 05 07:44:36.187135 2026] [:error] [pid 39071:tid 39098] [client 45.86.200.101:21881] [client 45.86.200.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "afkvZIvmnRMz9gRzix2XeAAAABI"]
[Tue May 05 07:44:36.796200 2026] [:error] [pid 53856:tid 53870] [client 185.82.72.3:65001] [client 185.82.72.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/wp-conflg.php"] [unique_id "afkvZHG_NPOxSH0O9aQB6gAAAUU"]
[Tue May 05 07:44:37.335305 2026] [:error] [pid 39178:tid 39199] [client 45.86.200.53:47527] [client 45.86.200.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/admin.php"] [unique_id "afkvZTaPrgTaiOD_15ulNQAAANM"]
[Tue May 05 07:44:37.914707 2026] [:error] [pid 53856:tid 53871] [client 45.86.200.111:36569] [client 45.86.200.111] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/widgets/wp-login.php"] [unique_id "afkvZXG_NPOxSH0O9aQCHQAAAUY"]
[Tue May 05 07:44:38.632497 2026] [:error] [pid 53856:tid 53873] [client 45.86.200.52:22183] [client 45.86.200.52] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "afkvZnG_NPOxSH0O9aQCRQAAAUg"]
[Tue May 05 07:44:38.777720 2026] [:error] [pid 39072:tid 39111] [client 45.86.200.56:60251] [client 45.86.200.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/options.php"] [unique_id "afkvZvolSHl4aAnrIosgLwAAAEQ"]
[Tue May 05 07:44:39.928355 2026] [:error] [pid 41055:tid 41070] [client 45.86.200.107:63161] [client 45.86.200.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/(?:tinyfilemanager(?:\\\\.php)?|filemanager\\\\.php|fm\\\\.php|tiny\\\\.php|wp-content/plugins/pwnd/pwnd\\\\.php|wp-includes/(?:block-supports/autoload_classmap\\\\.php|Text/Diff/Engine/wp\\\\.php|blocks/details/about\\\\.php))$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "29"] [id "771002"] [msg "Blocked probe for known bad path/file manager/webshell"] [tag "probes"] [tag "wordpress"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/filemanager.php"] [unique_id "afkvZyepFwKgA_SKOHgJSwAAAQw"]
[Tue May 05 07:44:40.530525 2026] [:error] [pid 53856:tid 53879] [client 45.86.200.79:50331] [client 45.86.200.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "afkvaHG_NPOxSH0O9aQCkgAAAU4"]
[Tue May 05 07:44:41.021852 2026] [:error] [pid 41055:tid 41070] [client 45.86.200.98:55625] [client 45.86.200.98] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/admin.php"] [unique_id "afkvaSepFwKgA_SKOHgJZQAAAQw"]
[Tue May 05 07:44:41.855177 2026] [:error] [pid 53856:tid 53867] [client 45.86.200.90:28903] [client 45.86.200.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/jquery.php"] [unique_id "afkvaXG_NPOxSH0O9aQCvQAAAUI"]
[Tue May 05 07:44:43.321595 2026] [:error] [pid 53856:tid 53871] [client 45.86.200.109:30421] [client 45.86.200.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "afkva3G_NPOxSH0O9aQC_wAAAUY"]
[Tue May 05 07:44:43.819155 2026] [:error] [pid 39073:tid 39144] [client 45.86.200.110:60437] [client 45.86.200.110] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-supports/autoload_classmap.php"] [unique_id "afkva_0kT1BNjk46BkdiGAAAAIo"]
[Tue May 05 07:44:44.136377 2026] [:error] [pid 53856:tid 53888] [client 45.86.200.56:32213] [client 45.86.200.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "afkvbHG_NPOxSH0O9aQDJAAAAVc"]
[Tue May 05 07:44:45.013124 2026] [:error] [pid 53856:tid 53889] [client 45.86.200.51:39837] [client 45.86.200.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "afkvbXG_NPOxSH0O9aQDTQAAAVg"]
[Tue May 05 07:44:45.550013 2026] [:error] [pid 39073:tid 39136] [client 45.86.200.58:62043] [client 45.86.200.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "afkvbf0kT1BNjk46BkdiLwAAAII"]
[Tue May 05 07:44:46.092159 2026] [:error] [pid 53856:tid 53887] [client 45.86.200.76:64921] [client 45.86.200.76] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "afkvbnG_NPOxSH0O9aQDiwAAAVY"]
[Tue May 05 07:44:46.141581 2026] [:error] [pid 39178:tid 39202] [client 45.86.200.53:48491] [client 45.86.200.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/blocks/table/int/tmpl/index.php"] [unique_id "afkvbjaPrgTaiOD_15umFgAAANY"]
[Tue May 05 07:44:47.611002 2026] [:error] [pid 53856:tid 53881] [client 45.86.200.90:24599] [client 45.86.200.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "afkvb3G_NPOxSH0O9aQD2wAAAVA"]
[Tue May 05 07:44:48.116631 2026] [:error] [pid 53856:tid 53886] [client 45.86.200.92:29685] [client 45.86.200.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/suggest.php"] [unique_id "afkvcHG_NPOxSH0O9aQD-AAAAVU"]
[Tue May 05 07:44:48.167828 2026] [:error] [pid 53856:tid 53885] [client 45.86.200.107:25869] [client 45.86.200.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "afkvcHG_NPOxSH0O9aQD_wAAAVQ"]
[Tue May 05 07:44:48.739150 2026] [:error] [pid 53856:tid 53876] [client 45.86.200.105:58629] [client 45.86.200.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "afkvcHG_NPOxSH0O9aQEHAAAAUs"]
[Tue May 05 07:44:49.328440 2026] [:error] [pid 41055:tid 41064] [client 45.86.200.112:29897] [client 45.86.200.112] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/defaults.php"] [unique_id "afkvcSepFwKgA_SKOHgKTgAAAQY"]
[Tue May 05 07:44:50.151168 2026] [:error] [pid 39178:tid 39197] [client 45.86.200.82:38093] [client 45.86.200.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/index.php"] [unique_id "afkvcjaPrgTaiOD_15umlAAAANE"]
[Tue May 05 07:44:51.642279 2026] [:error] [pid 39072:tid 39116] [client 45.86.200.53:26759] [client 45.86.200.53] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/admin.php"] [unique_id "afkvc_olSHl4aAnrIoshggAAAEk"]
[Tue May 05 07:44:51.956246 2026] [:error] [pid 39072:tid 39130] [client 185.82.72.3:41655] [client 185.82.72.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/index.php"] [unique_id "afkvc_olSHl4aAnrIoshjAAAAFc"]
[Tue May 05 07:44:53.890409 2026] [:error] [pid 39072:tid 39108] [client 45.86.200.88:36647] [client 45.86.200.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/theme-compat/about.php"] [unique_id "afkvdfolSHl4aAnrIoshtgAAAEE"]
[Tue May 05 07:44:54.716661 2026] [:error] [pid 39071:tid 39090] [client 45.86.200.77:26137] [client 45.86.200.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/index.php"] [unique_id "afkvdovmnRMz9gRzix2ZSAAAAAo"]
[Tue May 05 07:44:56.427665 2026] [:error] [pid 53856:tid 53869] [client 45.86.200.60:20581] [client 45.86.200.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php/wp-content/x/index.php"] [unique_id "afkveHG_NPOxSH0O9aQF-gAAAUQ"]
[Tue May 05 07:44:58.106600 2026] [:error] [pid 41055:tid 41072] [client 45.86.200.88:65331] [client 45.86.200.88] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/about.php"] [unique_id "afkveiepFwKgA_SKOHgLJgAAAQ4"]
[Tue May 05 07:44:59.542727 2026] [:error] [pid 41055:tid 41082] [client 45.86.200.90:57487] [client 45.86.200.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/info.php"] [unique_id "afkveyepFwKgA_SKOHgLTQAAARg"]
[Tue May 05 07:45:00.107762 2026] [:error] [pid 53856:tid 53869] [client 45.86.200.94:61695] [client 45.86.200.94] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/class.api.php"] [unique_id "afkvfHG_NPOxSH0O9aQGzQAAAUQ"]
[Tue May 05 07:45:00.224802 2026] [:error] [pid 39073:tid 39138] [client 45.86.200.83:38565] [client 45.86.200.83] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.83, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "afkvfP0kT1BNjk46BkdjcgAAAIQ"]
[Tue May 05 07:45:00.665108 2026] [:error] [pid 39073:tid 39139] [client 45.86.200.95:62083] [client 45.86.200.95] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/fonts/index.php"] [unique_id "afkvfP0kT1BNjk46BkdjhQAAAIU"]
[Tue May 05 07:45:03.783683 2026] [:error] [pid 39073:tid 39154] [client 45.86.200.83:38565] [client 45.86.200.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "afkvf_0kT1BNjk46Bkdj9wAAAJQ"]
[Tue May 05 07:45:04.767829 2026] [:error] [pid 41055:tid 41063] [client 45.86.200.109:24661] [client 45.86.200.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/admin.php"] [unique_id "afkvgCepFwKgA_SKOHgMDAAAAQU"]
[Tue May 05 07:45:04.890551 2026] [:error] [pid 39073:tid 39142] [client 45.86.200.96:37615] [client 45.86.200.96] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.96, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "afkvgP0kT1BNjk46BkdkFQAAAIg"]
[Tue May 05 07:45:05.494858 2026] [:error] [pid 39073:tid 39134] [client 45.86.200.96:37615] [client 45.86.200.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/item.php"] [unique_id "afkvgf0kT1BNjk46BkdkKAAAAIA"]
[Tue May 05 07:45:06.213757 2026] [:error] [pid 39073:tid 39144] [client 45.86.200.108:55181] [client 45.86.200.108] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.108, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/js/wp-login.php"] [unique_id "afkvgv0kT1BNjk46BkdkPwAAAIo"]
[Tue May 05 07:45:06.501545 2026] [:error] [pid 39073:tid 39150] [client 45.86.200.108:55181] [client 45.86.200.108] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/install.php"] [unique_id "afkvgv0kT1BNjk46BkdkSAAAAJA"]
[Tue May 05 07:45:08.367897 2026] [:error] [pid 53856:tid 53867] [client 45.86.200.107:46789] [client 45.86.200.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "afkvhHG_NPOxSH0O9aQIfgAAAUI"]
[Tue May 05 07:45:10.261468 2026] [:error] [pid 39071:tid 39081] [client 45.86.200.97:26341] [client 45.86.200.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/about.php"] [unique_id "afkvhovmnRMz9gRzix2atAAAAAE"]
[Tue May 05 07:45:11.240754 2026] [:error] [pid 39071:tid 39092] [client 45.86.200.83:56649] [client 45.86.200.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "afkvh4vmnRMz9gRzix2a0gAAAAw"]
[Tue May 05 07:45:11.361533 2026] [:error] [pid 39071:tid 39088] [client 45.86.200.100:36983] [client 45.86.200.100] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.100, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/user/wp-login.php"] [unique_id "afkvh4vmnRMz9gRzix2a1QAAAAg"]
[Tue May 05 07:45:11.961560 2026] [:error] [pid 39071:tid 39089] [client 45.86.200.100:36983] [client 45.86.200.100] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/item.php"] [unique_id "afkvh4vmnRMz9gRzix2a4QAAAAk"]
[Tue May 05 07:45:12.368876 2026] [:error] [pid 41055:tid 41069] [client 45.86.200.77:23307] [client 45.86.200.77] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "afkviCepFwKgA_SKOHgNDwAAAQs"]
[Tue May 05 07:45:13.852885 2026] [:error] [pid 39071:tid 39104] [client 185.82.72.3:46457] [client 185.82.72.3] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.82.72.3, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "afkviYvmnRMz9gRzix2bIwAAABg"]
[Tue May 05 07:45:14.150646 2026] [:error] [pid 39071:tid 39084] [client 185.82.72.3:46457] [client 185.82.72.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "afkviovmnRMz9gRzix2bKwAAAAQ"]
[Tue May 05 07:45:14.796774 2026] [:error] [pid 53856:tid 53886] [client 45.86.200.58:58747] [client 45.86.200.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/husky301.php"] [unique_id "afkvinG_NPOxSH0O9aQJ0QAAAVU"]
[Tue May 05 07:45:17.712800 2026] [:error] [pid 39071:tid 39093] [client 45.86.200.58:29881] [client 45.86.200.58] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/smilies/index.php"] [unique_id "afkvjYvmnRMz9gRzix2biAAAAA0"]
[Tue May 05 07:45:18.822410 2026] [:error] [pid 53856:tid 53883] [client 45.86.200.84:41059] [client 45.86.200.84] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/classwithtostring.php"] [unique_id "afkvjnG_NPOxSH0O9aQK1QAAAVI"]
[Tue May 05 07:45:19.627773 2026] [:error] [pid 39072:tid 39115] [client 45.86.200.93:42305] [client 45.86.200.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "afkvj_olSHl4aAnrIosjvAAAAEg"]
[Tue May 05 07:45:20.231673 2026] [:error] [pid 39178:tid 39196] [client 185.82.72.3:43927] [client 185.82.72.3] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 185.82.72.3, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/wp-login.php"] [unique_id "afkvkDaPrgTaiOD_15upsAAAANA"]
[Tue May 05 07:45:20.505973 2026] [:error] [pid 39178:tid 39201] [client 185.82.72.3:43927] [client 185.82.72.3] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/rest-api/endpoints/index.php"] [unique_id "afkvkDaPrgTaiOD_15upuwAAANU"]
[Tue May 05 07:45:25.965455 2026] [:error] [pid 39072:tid 39114] [client 45.86.200.106:64647] [client 45.86.200.106] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/style-engine/bypass.php"] [unique_id "afkvlfolSHl4aAnrIoskpQAAAEc"]
[Tue May 05 07:45:26.132305 2026] [:error] [pid 41055:tid 41070] [client 45.86.200.93:45567] [client 45.86.200.93] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.93, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "afkvliepFwKgA_SKOHgOnQAAAQw"]
[Tue May 05 07:45:27.245469 2026] [:error] [pid 41055:tid 41066] [client 45.86.200.93:45567] [client 45.86.200.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "afkvlyepFwKgA_SKOHgOuQAAAQg"]
[Tue May 05 07:45:27.385220 2026] [:error] [pid 39178:tid 39201] [client 45.86.200.98:43685] [client 45.86.200.98] ModSecurity: Warning. Pattern match "/wp-login\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "14"] [id "400003"] [msg "wp-login.php hit from 45.86.200.98, incrementing brute counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/midnight/wp-login.php"] [unique_id "afkvlzaPrgTaiOD_15uqoQAAANU"]
[Tue May 05 07:45:28.128558 2026] [:error] [pid 53856:tid 53875] [client 185.82.72.4:36705] [client 185.82.72.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/infi.php"] [unique_id "afkvmHG_NPOxSH0O9aQMcwAAAUo"]
[Tue May 05 07:45:28.254246 2026] [:error] [pid 39178:tid 39182] [client 45.86.200.98:43685] [client 45.86.200.98] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ms-themes.php"] [unique_id "afkvmDaPrgTaiOD_15uq0AAAAMI"]
[Tue May 05 07:45:29.110427 2026] [:error] [pid 39071:tid 39085] [client 45.86.200.105:22321] [client 45.86.200.105] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/about.php"] [unique_id "afkvmYvmnRMz9gRzix2cmgAAAAU"]
[Tue May 05 07:45:29.244367 2026] [:error] [pid 39071:tid 39089] [client 45.86.200.57:21811] [client 45.86.200.57] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "afkvmYvmnRMz9gRzix2cowAAAAk"]
[Tue May 05 07:45:29.954642 2026] [:error] [pid 39073:tid 39147] [client 45.86.200.86:36005] [client 45.86.200.86] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/infi.php"] [unique_id "afkvmf0kT1BNjk46BkdmxwAAAI0"]
[Tue May 05 07:45:31.070269 2026] [:error] [pid 39178:tid 39182] [client 45.86.200.83:28585] [client 45.86.200.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/index.php"] [unique_id "afkvmzaPrgTaiOD_15urRwAAAMI"]
[Tue May 05 07:45:31.667408 2026] [:error] [pid 39071:tid 39090] [client 45.86.200.107:59735] [client 45.86.200.107] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "afkvm4vmnRMz9gRzix2c7AAAAAo"]
[Tue May 05 07:45:32.431579 2026] [:error] [pid 39073:tid 39143] [client 45.86.200.82:46091] [client 45.86.200.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/about.php"] [unique_id "afkvnP0kT1BNjk46BkdnDgAAAIk"]
[Tue May 05 07:45:32.990067 2026] [:error] [pid 39178:tid 39182] [client 45.86.200.80:21323] [client 45.86.200.80] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/index.php"] [unique_id "afkvnDaPrgTaiOD_15urfwAAAMI"]
[Tue May 05 07:45:34.996383 2026] [:error] [pid 39073:tid 39152] [client 45.86.200.83:49277] [client 45.86.200.83] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/block-patterns/autoload_classmap.php"] [unique_id "afkvnv0kT1BNjk46BkdnVgAAAJI"]
[Tue May 05 07:45:35.799630 2026] [:error] [pid 41055:tid 41078] [client 45.86.200.59:27521] [client 45.86.200.59] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/about.php"] [unique_id "afkvnyepFwKgA_SKOHgPsQAAARQ"]
[Tue May 05 07:45:37.185826 2026] [:error] [pid 39072:tid 39121] [client 45.86.200.75:27073] [client 45.86.200.75] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/edit.php"] [unique_id "afkvofolSHl4aAnrIosmCQAAAE4"]
[Tue May 05 07:45:38.582220 2026] [:error] [pid 39073:tid 39156] [client 45.86.200.87:34341] [client 45.86.200.87] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/wp-work.php"] [unique_id "afkvov0kT1BNjk46BkdnzAAAAJY"]
[Tue May 05 07:45:39.689638 2026] [:error] [pid 39178:tid 39204] [client 45.86.200.92:43819] [client 45.86.200.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/click.php"] [unique_id "afkvozaPrgTaiOD_15usXwAAANg"]
[Tue May 05 07:45:44.316056 2026] [:error] [pid 53856:tid 53869] [client 45.86.200.56:45783] [client 45.86.200.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/random_compat/chosen.php"] [unique_id "afkvqHG_NPOxSH0O9aQPMAAAAUQ"]
[Tue May 05 07:45:46.881355 2026] [:error] [pid 53856:tid 53872] [client 45.86.200.60:44779] [client 45.86.200.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/js/jquery/bypass.php"] [unique_id "afkvqnG_NPOxSH0O9aQPvQAAAUc"]
[Tue May 05 07:45:47.416535 2026] [:error] [pid 39072:tid 39121] [client 45.86.200.92:64911] [client 45.86.200.92] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/xl2023.php"] [unique_id "afkvq_olSHl4aAnrIosnXAAAAE4"]
[Tue May 05 07:45:47.984705 2026] [:error] [pid 53856:tid 53877] [client 45.86.200.56:25213] [client 45.86.200.56] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/certificates/admin.php"] [unique_id "afkvq3G_NPOxSH0O9aQP7gAAAUw"]
[Tue May 05 07:45:48.527341 2026] [:error] [pid 53856:tid 53880] [client 45.86.200.82:45651] [client 45.86.200.82] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/media/dog.php"] [unique_id "afkvrHG_NPOxSH0O9aQQDQAAAU8"]
[Tue May 05 07:45:49.374975 2026] [:error] [pid 39178:tid 39189] [client 45.86.200.79:42105] [client 45.86.200.79] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/SimplePie/applicationd.php"] [unique_id "afkvrTaPrgTaiOD_15utXgAAAMk"]
[Tue May 05 07:45:49.916829 2026] [:error] [pid 53856:tid 53874] [client 45.86.200.101:54029] [client 45.86.200.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/index.php"] [unique_id "afkvrXG_NPOxSH0O9aQQUwAAAUk"]
[Tue May 05 07:45:51.074112 2026] [:error] [pid 41055:tid 41077] [client 45.86.200.73:27881] [client 45.86.200.73] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/index.php"] [unique_id "afkvryepFwKgA_SKOHgRQwAAARM"]
[Tue May 05 07:45:51.677191 2026] [:error] [pid 53856:tid 53866] [client 45.86.200.96:25065] [client 45.86.200.96] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/ID3/index.php"] [unique_id "afkvr3G_NPOxSH0O9aQQpQAAAUE"]
[Tue May 05 07:45:52.320321 2026] [:error] [pid 53856:tid 53871] [client 45.86.200.109:39465] [client 45.86.200.109] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/admin.php"] [unique_id "afkvsHG_NPOxSH0O9aQQzgAAAUY"]
[Tue May 05 07:45:52.893315 2026] [:error] [pid 39072:tid 39123] [client 45.86.200.99:29321] [client 45.86.200.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/IXR/security.php"] [unique_id "afkvsPolSHl4aAnrIosn-wAAAFA"]
[Tue May 05 07:45:53.709033 2026] [:error] [pid 41055:tid 41079] [client 185.82.72.4:53891] [client 185.82.72.4] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/autoload_classmap.php"] [unique_id "afkvsSepFwKgA_SKOHgRkwAAARU"]
[Tue May 05 07:45:54.834878 2026] [:error] [pid 39072:tid 39107] [client 45.86.200.99:41417] [client 45.86.200.99] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/fonts/about.php"] [unique_id "afkvsvolSHl4aAnrIosoPwAAAEA"]
[Tue May 05 07:45:56.514107 2026] [:error] [pid 53856:tid 53884] [client 45.86.200.101:29895] [client 45.86.200.101] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/PHPMailer/about.php"] [unique_id "afkvtHG_NPOxSH0O9aQRnwAAAVM"]
[Tue May 05 07:45:59.105663 2026] [:error] [pid 39072:tid 39128] [client 45.86.200.93:64757] [client 45.86.200.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/assets/file.php"] [unique_id "afkvt_olSHl4aAnrIoso5AAAAFU"]
[Tue May 05 07:46:00.587570 2026] [:error] [pid 41055:tid 41060] [client 45.86.200.60:41945] [client 45.86.200.60] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/customize/dedi1.php"] [unique_id "afkvuCepFwKgA_SKOHgSJQAAAQI"]
[Tue May 05 07:46:01.198065 2026] [:error] [pid 39071:tid 39084] [client 45.86.200.91:39573] [client 45.86.200.91] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/pomo/autoload_classmap.php"] [unique_id "afkvuYvmnRMz9gRzix2gawAAAAQ"]
[Tue May 05 07:46:02.976139 2026] [:error] [pid 39072:tid 39111] [client 45.86.200.97:20833] [client 45.86.200.97] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/images/wp-login.php"] [unique_id "afkvuvolSHl4aAnrIospQgAAAEQ"]
[Tue May 05 07:46:03.800873 2026] [:error] [pid 39178:tid 39204] [client 45.86.200.74:51405] [client 45.86.200.74] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/blog/wp-content/about.php"] [unique_id "afkvuzaPrgTaiOD_15uvcwAAANg"]
[Tue May 05 07:46:04.927677 2026] [proxy_fcgi:error] [pid 39073:tid 39152] [client 45.86.200.93:45419] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:46:05.208321 2026] [proxy_fcgi:error] [pid 39073:tid 39136] [client 45.86.200.93:45419] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:46:05.542425 2026] [proxy_fcgi:error] [pid 39073:tid 39134] [client 45.86.200.93:45419] AH01071: Got error 'Primary script unknown'
[Tue May 05 07:46:06.958437 2026] [:error] [pid 39073:tid 39134] [client 45.86.200.93:45419] [client 45.86.200.93] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/Requests/about.php"] [unique_id "afkvvv0kT1BNjk46BkdriAAAAIA"]
[Tue May 05 07:46:07.506665 2026] [:error] [pid 39072:tid 39109] [client 45.86.200.90:37565] [client 45.86.200.90] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/index.php"] [unique_id "afkvv_olSHl4aAnrIospqwAAAEI"]
[Tue May 05 07:46:08.048165 2026] [:error] [pid 53856:tid 53889] [client 45.86.200.51:42925] [client 45.86.200.51] ModSecurity: Access denied with code 403 (phase 1). Pattern match "^/wp-includes/.*\\\\.php$" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "15"] [id "771001"] [msg "Blocked direct PHP under wp-includes"] [tag "wordpress"] [tag "hardening"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/dist/edit-widgets/about.php"] [unique_id "afkvwHG_NPOxSH0O9aQT-AAAAVg"]
[Tue May 05 07:46:11.021690 2026] [autoindex:error] [pid 39178:tid 39190] [client 45.86.200.56:48653] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:46:48.782620 2026] [autoindex:error] [pid 39072:tid 39128] [client 45.86.200.77:60607] AH01276: Cannot serve directory /usr/local/apache/autossl_tmp/.well-known/acme-challenge/: No matching DirectoryIndex (index.php,index.html.var,index.htm,index.html,index.shtml,index.xhtml,index.wml,index.perl,index.pl,index.plx,index.ppl,index.cgi,index.jsp,index.js,index.jp,index.php4,index.php3,index.phtml,default.htm,default.html,home.htm,index.php5,Default.html,Default.htm,home.html) found, and server-generated directory index forbidden by Options directive
[Tue May 05 07:47:02.819311 2026] [:error] [pid 53856:tid 53883] [client 45.86.200.109:30867] [client 45.86.200.109] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-content/uploads/2025/"] [unique_id "afkv9nG_NPOxSH0O9aQfsgAAAVI"]
[Tue May 05 09:06:59.483065 2026] [:error] [pid 64890:tid 64912] [client 138.91.22.1:3316] [client 138.91.22.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws.php"] [unique_id "aflCsxyNfxBki939l7ePWQAAAZM"]
[Tue May 05 09:06:59.997479 2026] [:error] [pid 39178:tid 39195] [client 138.91.22.1:3286] [client 138.91.22.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws.php"] [unique_id "aflCszaPrgTaiOD_15sUdwAAAM8"]
[Tue May 05 09:07:00.550359 2026] [:error] [pid 39072:tid 39123] [client 138.91.22.1:3271] [client 138.91.22.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws.php"] [unique_id "aflCtPolSHl4aAnrIouh1gAAAFA"]
[Tue May 05 09:07:01.045385 2026] [:error] [pid 39178:tid 39188] [client 138.91.22.1:3301] [client 138.91.22.1] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ws.php"] [unique_id "aflCtTaPrgTaiOD_15sUfQAAAMg"]
[Tue May 05 12:06:32.652628 2026] [:error] [pid 25745:tid 25811] [client 4.204.197.96:33851] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/forbidals.php"] [unique_id "aflsyJsd7hb7vrvCNBncKQAAAMo"]
[Tue May 05 12:06:33.153874 2026] [:error] [pid 25743:tid 25750] [client 4.204.197.96:22341] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/forbidals.php"] [unique_id "aflsyW-PCMRhF5DdUnN7pgAAAAM"]
[Tue May 05 12:06:33.604702 2026] [:error] [pid 25745:tid 25808] [client 4.204.197.96:34410] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/forbidals.php"] [unique_id "aflsyZsd7hb7vrvCNBncKgAAAMc"]
[Tue May 05 12:06:34.077870 2026] [:error] [pid 25744:tid 25782] [client 4.204.197.96:22371] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/forbidals.php"] [unique_id "aflsyiR8IuyzjkW06OOFRQAAAIg"]
[Tue May 05 12:06:34.506806 2026] [:error] [pid 25745:tid 25821] [client 4.204.197.96:34420] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-firewall.php"] [unique_id "aflsypsd7hb7vrvCNBncLQAAANQ"]
[Tue May 05 12:06:34.941206 2026] [:error] [pid 25743:tid 25765] [client 4.204.197.96:44239] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-firewall.php"] [unique_id "aflsym-PCMRhF5DdUnN7qwAAABI"]
[Tue May 05 12:06:35.379504 2026] [:error] [pid 25744:tid 25796] [client 4.204.197.96:34400] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-firewall.php"] [unique_id "aflsyyR8IuyzjkW06OOFSAAAAJY"]
[Tue May 05 12:06:35.810180 2026] [:error] [pid 25743:tid 25747] [client 4.204.197.96:22509] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-firewall.php"] [unique_id "aflsy2-PCMRhF5DdUnN7rgAAAAA"]
[Tue May 05 12:06:36.224338 2026] [:error] [pid 25743:tid 25753] [client 4.204.197.96:62767] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tires.php"] [unique_id "aflszG-PCMRhF5DdUnN7rwAAAAY"]
[Tue May 05 12:06:36.635969 2026] [:error] [pid 25743:tid 25766] [client 4.204.197.96:33841] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tires.php"] [unique_id "aflszG-PCMRhF5DdUnN7sAAAABM"]
[Tue May 05 12:06:37.050182 2026] [:error] [pid 25744:tid 25798] [client 4.204.197.96:44869] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tires.php"] [unique_id "aflszSR8IuyzjkW06OOFTAAAAJg"]
[Tue May 05 12:06:37.462271 2026] [:error] [pid 25744:tid 25780] [client 4.204.197.96:22374] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tires.php"] [unique_id "aflszSR8IuyzjkW06OOFTQAAAIY"]
[Tue May 05 12:06:37.878963 2026] [:error] [pid 25743:tid 25757] [client 4.204.197.96:33816] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shell20211028.php"] [unique_id "aflszW-PCMRhF5DdUnN7tgAAAAo"]
[Tue May 05 12:06:38.294093 2026] [:error] [pid 25744:tid 25797] [client 4.204.197.96:44286] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shell20211028.php"] [unique_id "aflsziR8IuyzjkW06OOFTwAAAJc"]
[Tue May 05 12:06:38.715330 2026] [:error] [pid 25745:tid 25802] [client 4.204.197.96:22508] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shell20211028.php"] [unique_id "aflszpsd7hb7vrvCNBncMgAAAME"]
[Tue May 05 12:06:39.127203 2026] [:error] [pid 25743:tid 25747] [client 4.204.197.96:33852] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shell20211028.php"] [unique_id "aflsz2-PCMRhF5DdUnN7uQAAAAA"]
[Tue May 05 12:06:39.548392 2026] [:error] [pid 25835:tid 25848] [client 4.204.197.96:44913] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wuasr.php"] [unique_id "aflsz1DT5nGJyh1439xcpwAAAQs"]
[Tue May 05 12:06:39.966712 2026] [:error] [pid 25835:tid 25850] [client 4.204.197.96:64128] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wuasr.php"] [unique_id "aflsz1DT5nGJyh1439xcqAAAAQ0"]
[Tue May 05 12:06:40.381340 2026] [:error] [pid 25835:tid 25837] [client 4.204.197.96:44868] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wuasr.php"] [unique_id "afls0FDT5nGJyh1439xcrAAAAQA"]
[Tue May 05 12:06:40.792273 2026] [:error] [pid 25835:tid 25852] [client 4.204.197.96:22385] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wuasr.php"] [unique_id "afls0FDT5nGJyh1439xcrgAAAQ8"]
[Tue May 05 12:06:41.208504 2026] [:error] [pid 25835:tid 25840] [client 4.204.197.96:22380] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1index.php"] [unique_id "afls0VDT5nGJyh1439xcsAAAAQM"]
[Tue May 05 12:06:41.631125 2026] [:error] [pid 25744:tid 25785] [client 4.204.197.96:34379] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1index.php"] [unique_id "afls0SR8IuyzjkW06OOFUgAAAIs"]
[Tue May 05 12:06:42.047774 2026] [:error] [pid 25835:tid 25856] [client 4.204.197.96:64131] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1index.php"] [unique_id "afls0lDT5nGJyh1439xcswAAARM"]
[Tue May 05 12:06:42.460158 2026] [:error] [pid 25835:tid 25851] [client 4.204.197.96:22354] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1index.php"] [unique_id "afls0lDT5nGJyh1439xctgAAAQ4"]
[Tue May 05 12:06:42.880455 2026] [:error] [pid 25745:tid 25805] [client 4.204.197.96:44908] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "afls0psd7hb7vrvCNBncMwAAAMQ"]
[Tue May 05 12:06:43.314059 2026] [:error] [pid 25744:tid 25776] [client 4.204.197.96:62761] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "afls0yR8IuyzjkW06OOFVAAAAII"]
[Tue May 05 12:06:43.736211 2026] [:error] [pid 25744:tid 25796] [client 4.204.197.96:44242] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "afls0yR8IuyzjkW06OOFVQAAAJY"]
[Tue May 05 12:06:44.161923 2026] [:error] [pid 25743:tid 25771] [client 4.204.197.96:44275] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "afls1G-PCMRhF5DdUnN7vQAAABg"]
[Tue May 05 12:06:44.578082 2026] [:error] [pid 25835:tid 25853] [client 4.204.197.96:22467] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/png.php"] [unique_id "afls1FDT5nGJyh1439xcuQAAARA"]
[Tue May 05 12:06:44.998950 2026] [:error] [pid 25835:tid 25846] [client 4.204.197.96:44283] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/png.php"] [unique_id "afls1FDT5nGJyh1439xcuwAAAQk"]
[Tue May 05 12:06:45.423205 2026] [:error] [pid 25835:tid 25844] [client 4.204.197.96:22496] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/png.php"] [unique_id "afls1VDT5nGJyh1439xcvgAAAQc"]
[Tue May 05 12:06:45.833930 2026] [:error] [pid 25835:tid 25840] [client 4.204.197.96:33837] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/png.php"] [unique_id "afls1VDT5nGJyh1439xcwQAAAQM"]
[Tue May 05 12:06:46.252950 2026] [:error] [pid 25835:tid 25838] [client 4.204.197.96:22396] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x.php"] [unique_id "afls1lDT5nGJyh1439xcwgAAAQE"]
[Tue May 05 12:06:46.666398 2026] [:error] [pid 25744:tid 25778] [client 4.204.197.96:44244] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x.php"] [unique_id "afls1iR8IuyzjkW06OOFVwAAAIQ"]
[Tue May 05 12:06:47.083398 2026] [:error] [pid 25744:tid 25787] [client 4.204.197.96:64139] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x.php"] [unique_id "afls1yR8IuyzjkW06OOFWAAAAI0"]
[Tue May 05 12:06:47.498553 2026] [:error] [pid 25835:tid 25837] [client 4.204.197.96:60204] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x.php"] [unique_id "afls11DT5nGJyh1439xcxgAAAQA"]
[Tue May 05 12:06:47.915791 2026] [:error] [pid 25744:tid 25788] [client 4.204.197.96:22393] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yas.php"] [unique_id "afls1yR8IuyzjkW06OOFWgAAAI4"]
[Tue May 05 12:06:48.327827 2026] [:error] [pid 25745:tid 25825] [client 4.204.197.96:60166] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yas.php"] [unique_id "afls2Jsd7hb7vrvCNBncNQAAANg"]
[Tue May 05 12:06:48.756731 2026] [:error] [pid 25835:tid 25856] [client 4.204.197.96:44255] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yas.php"] [unique_id "afls2FDT5nGJyh1439xcyAAAARM"]
[Tue May 05 12:06:49.170478 2026] [:error] [pid 25745:tid 25812] [client 4.204.197.96:22368] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yas.php"] [unique_id "afls2Zsd7hb7vrvCNBncNgAAAMs"]
[Tue May 05 12:06:49.599325 2026] [:error] [pid 25744:tid 25776] [client 4.204.197.96:44260] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dropdown.php"] [unique_id "afls2SR8IuyzjkW06OOFXwAAAII"]
[Tue May 05 12:06:50.016539 2026] [:error] [pid 25835:tid 25859] [client 4.204.197.96:44884] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dropdown.php"] [unique_id "afls2lDT5nGJyh1439xcygAAARY"]
[Tue May 05 12:06:50.428160 2026] [:error] [pid 25744:tid 25791] [client 4.204.197.96:22480] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dropdown.php"] [unique_id "afls2iR8IuyzjkW06OOFYwAAAJE"]
[Tue May 05 12:06:50.843270 2026] [:error] [pid 25744:tid 25787] [client 4.204.197.96:64158] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dropdown.php"] [unique_id "afls2iR8IuyzjkW06OOFZwAAAI0"]
[Tue May 05 12:06:51.260450 2026] [:error] [pid 25745:tid 25820] [client 4.204.197.96:44276] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "afls25sd7hb7vrvCNBncPgAAANM"]
[Tue May 05 12:06:51.674751 2026] [:error] [pid 25745:tid 25803] [client 4.204.197.96:64145] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "afls25sd7hb7vrvCNBncRAAAAMI"]
[Tue May 05 12:06:52.099289 2026] [:error] [pid 25835:tid 25844] [client 4.204.197.96:62760] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "afls3FDT5nGJyh1439xczAAAAQc"]
[Tue May 05 12:06:52.526203 2026] [:error] [pid 25745:tid 25815] [client 4.204.197.96:44226] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "afls3Jsd7hb7vrvCNBncUQAAAM4"]
[Tue May 05 12:06:52.944711 2026] [:error] [pid 25835:tid 25856] [client 4.204.197.96:22507] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fun.php"] [unique_id "afls3FDT5nGJyh1439xczwAAARM"]
[Tue May 05 12:06:53.358305 2026] [:error] [pid 25743:tid 25771] [client 4.204.197.96:34371] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fun.php"] [unique_id "afls3W-PCMRhF5DdUnN73wAAABg"]
[Tue May 05 12:06:53.771113 2026] [:error] [pid 25745:tid 25811] [client 4.204.197.96:33836] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fun.php"] [unique_id "afls3Zsd7hb7vrvCNBncVQAAAMo"]
[Tue May 05 12:06:54.191321 2026] [:error] [pid 25835:tid 25843] [client 4.204.197.96:62756] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fun.php"] [unique_id "afls3lDT5nGJyh1439xc0wAAAQY"]
[Tue May 05 12:06:54.602752 2026] [:error] [pid 25835:tid 25841] [client 4.204.197.96:22513] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "afls3lDT5nGJyh1439xc1gAAAQQ"]
[Tue May 05 12:06:55.022409 2026] [:error] [pid 25744:tid 25786] [client 4.204.197.96:52741] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "afls3yR8IuyzjkW06OOFfgAAAIw"]
[Tue May 05 12:06:55.439359 2026] [:error] [pid 25744:tid 25798] [client 4.204.197.96:44259] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "afls3yR8IuyzjkW06OOFfwAAAJg"]
[Tue May 05 12:06:55.854236 2026] [:error] [pid 25745:tid 25824] [client 4.204.197.96:22503] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "afls35sd7hb7vrvCNBncWQAAANc"]
[Tue May 05 12:06:56.270709 2026] [:error] [pid 25745:tid 25822] [client 4.204.197.96:33838] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "afls4Jsd7hb7vrvCNBncWwAAANU"]
[Tue May 05 12:06:56.683020 2026] [:error] [pid 25745:tid 25807] [client 4.204.197.96:22384] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "afls4Jsd7hb7vrvCNBncXQAAAMY"]
[Tue May 05 12:06:57.095895 2026] [:error] [pid 25743:tid 25758] [client 4.204.197.96:44257] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "afls4W-PCMRhF5DdUnN75QAAAAs"]
[Tue May 05 12:06:57.510951 2026] [:error] [pid 25743:tid 25751] [client 4.204.197.96:22469] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-kd4xalrg7m.php"] [unique_id "afls4W-PCMRhF5DdUnN75wAAAAQ"]
[Tue May 05 12:06:57.921234 2026] [:error] [pid 25743:tid 25752] [client 4.204.197.96:33801] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/333.php"] [unique_id "afls4W-PCMRhF5DdUnN76QAAAAU"]
[Tue May 05 12:06:58.336805 2026] [:error] [pid 25745:tid 25816] [client 4.204.197.96:62773] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/333.php"] [unique_id "afls4psd7hb7vrvCNBncYAAAAM8"]
[Tue May 05 12:06:58.760142 2026] [:error] [pid 25745:tid 25806] [client 4.204.197.96:44904] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/333.php"] [unique_id "afls4psd7hb7vrvCNBncYQAAAMU"]
[Tue May 05 12:06:59.176878 2026] [:error] [pid 25744:tid 25779] [client 4.204.197.96:34417] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/333.php"] [unique_id "afls4yR8IuyzjkW06OOFgAAAAIU"]
[Tue May 05 12:06:59.589379 2026] [:error] [pid 25835:tid 25842] [client 4.204.197.96:44240] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/explorer/index_.php"] [unique_id "afls41DT5nGJyh1439xc3AAAAQU"]
[Tue May 05 12:06:59.999746 2026] [:error] [pid 25743:tid 25763] [client 4.204.197.96:44247] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/explorer/index_.php"] [unique_id "afls42-PCMRhF5DdUnN77AAAABA"]
[Tue May 05 12:07:00.420089 2026] [:error] [pid 25745:tid 25803] [client 4.204.197.96:22477] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/explorer/index_.php"] [unique_id "afls5Jsd7hb7vrvCNBncZAAAAMI"]
[Tue May 05 12:07:00.832063 2026] [:error] [pid 25835:tid 25849] [client 4.204.197.96:62739] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/explorer/index_.php"] [unique_id "afls5FDT5nGJyh1439xc4QAAAQw"]
[Tue May 05 12:07:01.247558 2026] [:error] [pid 25835:tid 25853] [client 4.204.197.96:34415] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ftde.php"] [unique_id "afls5VDT5nGJyh1439xc4wAAARA"]
[Tue May 05 12:07:01.665437 2026] [:error] [pid 25744:tid 25784] [client 4.204.197.96:22518] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ftde.php"] [unique_id "afls5SR8IuyzjkW06OOFggAAAIo"]
[Tue May 05 12:07:02.085794 2026] [:error] [pid 25835:tid 25850] [client 4.204.197.96:34374] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ftde.php"] [unique_id "afls5lDT5nGJyh1439xc5gAAAQ0"]
[Tue May 05 12:07:02.504339 2026] [:error] [pid 25744:tid 25786] [client 4.204.197.96:44892] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ftde.php"] [unique_id "afls5iR8IuyzjkW06OOFgwAAAIw"]
[Tue May 05 12:07:02.917958 2026] [:error] [pid 25835:tid 25859] [client 4.204.197.96:22354] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-trackback.php"] [unique_id "afls5lDT5nGJyh1439xc6wAAARY"]
[Tue May 05 12:07:03.344922 2026] [:error] [pid 25745:tid 25815] [client 4.204.197.96:62754] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-trackback.php"] [unique_id "afls55sd7hb7vrvCNBncawAAAM4"]
[Tue May 05 12:07:03.759166 2026] [:error] [pid 25745:tid 25819] [client 4.204.197.96:44897] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-trackback.php"] [unique_id "afls55sd7hb7vrvCNBnccAAAANI"]
[Tue May 05 12:07:04.171360 2026] [:error] [pid 25744:tid 25791] [client 4.204.197.96:34413] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-trackback.php"] [unique_id "afls6CR8IuyzjkW06OOFhwAAAJE"]
[Tue May 05 12:07:04.593776 2026] [:error] [pid 25745:tid 25804] [client 4.204.197.96:62770] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "afls6Jsd7hb7vrvCNBnccQAAAMM"]
[Tue May 05 12:07:05.010951 2026] [:error] [pid 25835:tid 25860] [client 4.204.197.96:22397] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "afls6VDT5nGJyh1439xc9AAAARc"]
[Tue May 05 12:07:05.428393 2026] [:error] [pid 25835:tid 25855] [client 4.204.197.96:22362] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "afls6VDT5nGJyh1439xc9gAAARI"]
[Tue May 05 12:07:05.843745 2026] [:error] [pid 25835:tid 25853] [client 4.204.197.96:64173] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/css/colors/blue/file.php"] [unique_id "afls6VDT5nGJyh1439xdAQAAARA"]
[Tue May 05 12:07:06.255582 2026] [:error] [pid 25743:tid 25759] [client 4.204.197.96:22348] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/new.php"] [unique_id "afls6m-PCMRhF5DdUnN77gAAAAw"]
[Tue May 05 12:07:06.671570 2026] [:error] [pid 25744:tid 25798] [client 4.204.197.96:33846] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/new.php"] [unique_id "afls6iR8IuyzjkW06OOFoAAAAJg"]
[Tue May 05 12:07:07.086751 2026] [:error] [pid 25835:tid 25858] [client 4.204.197.96:34392] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/new.php"] [unique_id "afls61DT5nGJyh1439xdHQAAARU"]
[Tue May 05 12:07:07.502919 2026] [:error] [pid 25835:tid 25857] [client 4.204.197.96:48997] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/new.php"] [unique_id "afls61DT5nGJyh1439xdJwAAARQ"]
[Tue May 05 12:07:07.916168 2026] [:error] [pid 25835:tid 25841] [client 4.204.197.96:34375] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aevly.php"] [unique_id "afls61DT5nGJyh1439xdLgAAAQQ"]
[Tue May 05 12:07:08.336833 2026] [:error] [pid 25835:tid 25860] [client 4.204.197.96:33811] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aevly.php"] [unique_id "afls7FDT5nGJyh1439xdOwAAARc"]
[Tue May 05 12:07:08.748517 2026] [:error] [pid 25743:tid 25760] [client 4.204.197.96:22392] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aevly.php"] [unique_id "afls7G-PCMRhF5DdUnN77wAAAA0"]
[Tue May 05 12:07:09.160284 2026] [:error] [pid 25744:tid 25791] [client 4.204.197.96:64157] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/aevly.php"] [unique_id "afls7SR8IuyzjkW06OOFtgAAAJE"]
[Tue May 05 12:07:09.572479 2026] [:error] [pid 25743:tid 25765] [client 4.204.197.96:22517] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/app.php"] [unique_id "afls7W-PCMRhF5DdUnN78QAAABI"]
[Tue May 05 12:07:09.985812 2026] [:error] [pid 25745:tid 25807] [client 4.204.197.96:33795] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/app.php"] [unique_id "afls7Zsd7hb7vrvCNBnciAAAAMY"]
[Tue May 05 12:07:10.403447 2026] [:error] [pid 25835:tid 25844] [client 4.204.197.96:44896] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/app.php"] [unique_id "afls7lDT5nGJyh1439xdQgAAAQc"]
[Tue May 05 12:07:10.818255 2026] [:error] [pid 25745:tid 25819] [client 4.204.197.96:44914] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/app.php"] [unique_id "afls7psd7hb7vrvCNBncigAAANI"]
[Tue May 05 12:07:11.230890 2026] [:error] [pid 25745:tid 25820] [client 4.204.197.96:44266] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/txets.php"] [unique_id "afls75sd7hb7vrvCNBncjQAAANM"]
[Tue May 05 12:07:11.647756 2026] [:error] [pid 25745:tid 25818] [client 4.204.197.96:62728] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/txets.php"] [unique_id "afls75sd7hb7vrvCNBncjgAAANE"]
[Tue May 05 12:07:12.064412 2026] [:error] [pid 25835:tid 25845] [client 4.204.197.96:34419] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/txets.php"] [unique_id "afls8FDT5nGJyh1439xdRQAAAQg"]
[Tue May 05 12:07:12.479457 2026] [:error] [pid 25743:tid 25763] [client 4.204.197.96:44243] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/txets.php"] [unique_id "afls8G-PCMRhF5DdUnN78wAAABA"]
[Tue May 05 12:07:12.896186 2026] [:error] [pid 25745:tid 25822] [client 4.204.197.96:22495] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file59.php"] [unique_id "afls8Jsd7hb7vrvCNBnckQAAANU"]
[Tue May 05 12:07:13.311018 2026] [:error] [pid 25745:tid 25805] [client 4.204.197.96:33835] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file59.php"] [unique_id "afls8Zsd7hb7vrvCNBnckgAAAMQ"]
[Tue May 05 12:07:13.733003 2026] [:error] [pid 25743:tid 25771] [client 4.204.197.96:34368] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file59.php"] [unique_id "afls8W-PCMRhF5DdUnN79gAAABg"]
[Tue May 05 12:07:14.145520 2026] [:error] [pid 25743:tid 25755] [client 4.204.197.96:22397] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/file59.php"] [unique_id "afls8m-PCMRhF5DdUnN79wAAAAg"]
[Tue May 05 12:07:14.564670 2026] [:error] [pid 25745:tid 25818] [client 4.204.197.96:62737] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/albin.php"] [unique_id "afls8psd7hb7vrvCNBnclwAAANE"]
[Tue May 05 12:07:14.994385 2026] [:error] [pid 25745:tid 25811] [client 4.204.197.96:44261] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/albin.php"] [unique_id "afls8psd7hb7vrvCNBncmAAAAMo"]
[Tue May 05 12:07:15.410636 2026] [:error] [pid 25745:tid 25803] [client 4.204.197.96:44873] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/albin.php"] [unique_id "afls85sd7hb7vrvCNBncnAAAAMI"]
[Tue May 05 12:07:15.822618 2026] [:error] [pid 25743:tid 25757] [client 4.204.197.96:62769] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/albin.php"] [unique_id "afls82-PCMRhF5DdUnN7-gAAAAo"]
[Tue May 05 12:07:16.235427 2026] [:error] [pid 25743:tid 25751] [client 4.204.197.96:34418] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "afls9G-PCMRhF5DdUnN7-wAAAAQ"]
[Tue May 05 12:07:16.655156 2026] [:error] [pid 25745:tid 25825] [client 4.204.197.96:44256] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "afls9Jsd7hb7vrvCNBncoAAAANg"]
[Tue May 05 12:07:17.067408 2026] [:error] [pid 25745:tid 25809] [client 4.204.197.96:44906] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "afls9Zsd7hb7vrvCNBncoQAAAMg"]
[Tue May 05 12:07:17.485233 2026] [:error] [pid 25835:tid 25846] [client 4.204.197.96:44882] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "afls9VDT5nGJyh1439xdSQAAAQk"]
[Tue May 05 12:07:17.901599 2026] [:error] [pid 25744:tid 25779] [client 4.204.197.96:44284] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-at.php"] [unique_id "afls9SR8IuyzjkW06OOFugAAAIU"]
[Tue May 05 12:07:18.313527 2026] [:error] [pid 25835:tid 25842] [client 4.204.197.96:62724] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-at.php"] [unique_id "afls9lDT5nGJyh1439xdSwAAAQU"]
[Tue May 05 12:07:18.736432 2026] [:error] [pid 25744:tid 25786] [client 4.204.197.96:22524] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-at.php"] [unique_id "afls9iR8IuyzjkW06OOFuwAAAIw"]
[Tue May 05 12:07:19.160305 2026] [:error] [pid 25745:tid 25810] [client 4.204.197.96:34425] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-at.php"] [unique_id "afls95sd7hb7vrvCNBncpgAAAMk"]
[Tue May 05 12:07:19.581216 2026] [:error] [pid 25835:tid 25840] [client 4.204.197.96:33829] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "afls91DT5nGJyh1439xdTQAAAQM"]
[Tue May 05 12:07:19.996495 2026] [:error] [pid 25835:tid 25856] [client 4.204.197.96:22391] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "afls91DT5nGJyh1439xdUAAAARM"]
[Tue May 05 12:07:20.410087 2026] [:error] [pid 25743:tid 25771] [client 4.204.197.96:44910] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "afls-G-PCMRhF5DdUnN7_wAAABg"]
[Tue May 05 12:07:20.823246 2026] [:error] [pid 25745:tid 25818] [client 4.204.197.96:62738] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "afls-Jsd7hb7vrvCNBncqwAAANE"]
[Tue May 05 12:07:21.235327 2026] [:error] [pid 25835:tid 25858] [client 4.204.197.96:22498] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sys.php"] [unique_id "afls-VDT5nGJyh1439xdVQAAARU"]
[Tue May 05 12:07:21.653866 2026] [:error] [pid 25745:tid 25801] [client 4.204.197.96:22511] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sys.php"] [unique_id "afls-Zsd7hb7vrvCNBncrAAAAMA"]
[Tue May 05 12:07:22.086406 2026] [:error] [pid 25835:tid 25841] [client 4.204.197.96:33810] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sys.php"] [unique_id "afls-lDT5nGJyh1439xdVwAAAQQ"]
[Tue May 05 12:07:22.500760 2026] [:error] [pid 25835:tid 25842] [client 4.204.197.96:52767] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sys.php"] [unique_id "afls-lDT5nGJyh1439xdWAAAAQU"]
[Tue May 05 12:07:22.912113 2026] [:error] [pid 25744:tid 25789] [client 4.204.197.96:22343] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "afls-iR8IuyzjkW06OOFwAAAAI8"]
[Tue May 05 12:07:23.327008 2026] [:error] [pid 25835:tid 25851] [client 4.204.197.96:22383] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "afls-1DT5nGJyh1439xdXAAAAQ4"]
[Tue May 05 12:07:23.738973 2026] [:error] [pid 25835:tid 25839] [client 4.204.197.96:34374] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "afls-1DT5nGJyh1439xdXwAAAQI"]
[Tue May 05 12:07:24.151756 2026] [:error] [pid 25744:tid 25793] [client 4.204.197.96:34423] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "afls_CR8IuyzjkW06OOFxAAAAJM"]
[Tue May 05 12:07:24.565197 2026] [:error] [pid 25743:tid 25757] [client 4.204.197.96:22388] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "afls_G-PCMRhF5DdUnN8BQAAAAo"]
[Tue May 05 12:07:24.978081 2026] [:error] [pid 25743:tid 25751] [client 4.204.197.96:58900] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "afls_G-PCMRhF5DdUnN8BgAAAAQ"]
[Tue May 05 12:07:25.397062 2026] [:error] [pid 25743:tid 25770] [client 4.204.197.96:44891] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "afls_W-PCMRhF5DdUnN8BwAAABc"]
[Tue May 05 12:07:25.813860 2026] [:error] [pid 25744:tid 25787] [client 4.204.197.96:22499] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "afls_SR8IuyzjkW06OOF2QAAAI0"]
[Tue May 05 12:07:26.234048 2026] [:error] [pid 25744:tid 25778] [client 4.204.197.96:22336] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/db.php"] [unique_id "afls_iR8IuyzjkW06OOF4gAAAIQ"]
[Tue May 05 12:07:26.647387 2026] [:error] [pid 25835:tid 25858] [client 4.204.197.96:33831] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/db.php"] [unique_id "afls_lDT5nGJyh1439xdYQAAARU"]
[Tue May 05 12:07:27.075090 2026] [:error] [pid 25745:tid 25819] [client 4.204.197.96:64165] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/db.php"] [unique_id "afls_5sd7hb7vrvCNBnctwAAANI"]
[Tue May 05 12:07:27.496807 2026] [:error] [pid 25835:tid 25859] [client 4.204.197.96:21774] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/db.php"] [unique_id "afls_1DT5nGJyh1439xdYgAAARY"]
[Tue May 05 12:07:27.920335 2026] [:error] [pid 25835:tid 25837] [client 4.204.197.96:64188] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/z.php"] [unique_id "afls_1DT5nGJyh1439xdZQAAAQA"]
[Tue May 05 12:07:28.335606 2026] [:error] [pid 25745:tid 25809] [client 4.204.197.96:44228] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/z.php"] [unique_id "afltAJsd7hb7vrvCNBncuAAAAMg"]
[Tue May 05 12:07:28.756042 2026] [:error] [pid 25743:tid 25749] [client 4.204.197.96:34409] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/z.php"] [unique_id "afltAG-PCMRhF5DdUnN8GAAAAAI"]
[Tue May 05 12:07:29.169381 2026] [:error] [pid 25835:tid 25844] [client 4.204.197.96:44282] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/z.php"] [unique_id "afltAVDT5nGJyh1439xdaAAAAQc"]
[Tue May 05 12:07:29.591823 2026] [:error] [pid 25835:tid 25854] [client 4.204.197.96:22491] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "afltAVDT5nGJyh1439xdawAAARE"]
[Tue May 05 12:07:30.003638 2026] [:error] [pid 25835:tid 25855] [client 4.204.197.96:22337] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "afltAlDT5nGJyh1439xdbAAAARI"]
[Tue May 05 12:07:30.422556 2026] [:error] [pid 25745:tid 25813] [client 4.204.197.96:44870] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "afltApsd7hb7vrvCNBncugAAAMw"]
[Tue May 05 12:07:30.837968 2026] [:error] [pid 25745:tid 25810] [client 4.204.197.96:44898] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-the.php"] [unique_id "afltApsd7hb7vrvCNBncuwAAAMk"]
[Tue May 05 12:07:31.279089 2026] [:error] [pid 25835:tid 25845] [client 4.204.197.96:34383] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "afltA1DT5nGJyh1439xdcgAAAQg"]
[Tue May 05 12:07:31.697097 2026] [:error] [pid 25745:tid 25822] [client 4.204.197.96:52769] [client 4.204.197.96] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ok.php"] [unique_id "afltA5sd7hb7vrvCNBncvQAAANU"]
[Tue May 05 12:18:56.477378 2026] [:error] [pid 25743:tid 25765] [client 40.83.75.73:6154] [client 40.83.75.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aflvsG-PCMRhF5DdUnN-YQAAABI"]
[Tue May 05 12:18:56.981017 2026] [:error] [pid 25744:tid 25786] [client 40.83.75.73:6172] [client 40.83.75.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aflvsCR8IuyzjkW06OOI9wAAAIw"]
[Tue May 05 12:18:57.541882 2026] [:error] [pid 54732:tid 54746] [client 40.83.75.73:5947] [client 40.83.75.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aflvsbGgYlDOb3nfuJRlugAAAEw"]
[Tue May 05 12:18:58.064566 2026] [:error] [pid 25743:tid 25771] [client 40.83.75.73:6173] [client 40.83.75.73] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "aflvsm-PCMRhF5DdUnN-YwAAABg"]
[Tue May 05 22:24:22.938046 2026] [:error] [pid 25835:tid 25849] [client 20.89.225.104:1863] [client 20.89.225.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "afn9llDT5nGJyh1439zxxAAAAQw"]
[Tue May 05 22:24:23.479350 2026] [:error] [pid 2324:tid 2343] [client 20.89.225.104:1957] [client 20.89.225.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "afn9l2qe2hrcI52A1HylTwAAAVE"]
[Tue May 05 22:24:24.016270 2026] [:error] [pid 2324:tid 2340] [client 20.89.225.104:1912] [client 20.89.225.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "afn9mGqe2hrcI52A1HylUAAAAU4"]
[Tue May 05 22:24:24.626750 2026] [:error] [pid 2324:tid 2335] [client 20.89.225.104:1162] [client 20.89.225.104] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/adminfuns.php"] [unique_id "afn9mGqe2hrcI52A1HylUwAAAUk"]
[Wed May 06 10:52:04.424316 2026] [:error] [pid 482:tid 495] [client 85.204.70.102:44196] [client 85.204.70.102] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 85.204.70.102, incrementing ddos counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "afqs1Mxs8HOc_nWgOW65kAAAAcs"]
[Wed May 06 10:52:07.231800 2026] [:error] [pid 482:tid 500] [client 85.204.70.102:44196] [client 85.204.70.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp1/wp-includes/wlwmanifest.xml"] [unique_id "afqs18xs8HOc_nWgOW65nAAAAdA"]
[Wed May 06 10:52:08.163766 2026] [:error] [pid 9789:tid 9799] [client 85.204.70.102:56447] [client 85.204.70.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/test/wp-includes/wlwmanifest.xml"] [unique_id "afqs2D_YStPJSCHPkUUs8QAAAEg"]
[Wed May 06 10:52:09.095131 2026] [:error] [pid 9659:tid 9737] [client 85.204.70.102:44210] [client 85.204.70.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/media/wp-includes/wlwmanifest.xml"] [unique_id "afqs2fwJnWjd8JHpBttSyQAAAMM"]
[Wed May 06 10:52:10.034292 2026] [:error] [pid 9659:tid 9754] [client 85.204.70.102:44224] [client 85.204.70.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp2/wp-includes/wlwmanifest.xml"] [unique_id "afqs2vwJnWjd8JHpBttSzQAAANQ"]
[Wed May 06 10:52:10.977498 2026] [:error] [pid 13443:tid 13458] [client 85.204.70.102:51894] [client 85.204.70.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/site/wp-includes/wlwmanifest.xml"] [unique_id "afqs2gCyfZallDmsQrd2UAAAAU0"]
[Wed May 06 10:52:11.916621 2026] [:error] [pid 9659:tid 9747] [client 85.204.70.102:51898] [client 85.204.70.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cms/wp-includes/wlwmanifest.xml"] [unique_id "afqs2_wJnWjd8JHpBttSzgAAAM0"]
[Wed May 06 10:52:12.844099 2026] [:error] [pid 592:tid 620] [client 85.204.70.102:51910] [client 85.204.70.102] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sito/wp-includes/wlwmanifest.xml"] [unique_id "afqs3JiX28mb6xLi2PyCfQAAApU"]
[Thu May 07 22:26:40.492847 2026] [:error] [pid 28098:tid 28105] [client 136.109.180.103:60586] [client 136.109.180.103] ModSecurity: Warning. Pattern match "/xmlrpc\\\\.php" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_Wordpress.conf"] [line "6"] [id "400001"] [msg "xmlrpc.php hit from 136.109.180.103, incrementing ddos counter"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xmlrpc.php"] [unique_id "afyhIMvhwfljlt8trSokIAAAAEU"]
[Thu May 07 22:26:40.778516 2026] [:error] [pid 28098:tid 28120] [client 136.109.180.103:60586] [client 136.109.180.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/"] [unique_id "afyhIMvhwfljlt8trSokJgAAAFQ"]
[Thu May 07 22:26:41.666823 2026] [:error] [pid 15631:tid 15701] [client 136.109.180.103:56928] [client 136.109.180.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/blog/wp-includes/wlwmanifest.xml"] [unique_id "afyhIXvP1GkPUuuLfqVZCAAAAM4"]
[Thu May 07 22:26:42.444024 2026] [:error] [pid 15631:tid 15689] [client 136.109.180.103:54781] [client 136.109.180.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/web/wp-includes/wlwmanifest.xml"] [unique_id "afyhInvP1GkPUuuLfqVZFAAAAMI"]
[Thu May 07 22:26:43.091810 2026] [:error] [pid 15631:tid 15700] [client 136.109.180.103:64186] [client 136.109.180.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wordpress/wp-includes/wlwmanifest.xml"] [unique_id "afyhI3vP1GkPUuuLfqVZGgAAAM0"]
[Thu May 07 22:26:43.833522 2026] [:error] [pid 28098:tid 28105] [client 136.109.180.103:65397] [client 136.109.180.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/website/wp-includes/wlwmanifest.xml"] [unique_id "afyhI8vhwfljlt8trSokOwAAAEU"]
[Thu May 07 22:26:44.627573 2026] [:error] [pid 15631:tid 15711] [client 136.109.180.103:58263] [client 136.109.180.103] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp/wp-includes/wlwmanifest.xml"] [unique_id "afyhJHvP1GkPUuuLfqVZIAAAANg"]
[Thu May 07 23:42:24.592289 2026] [:error] [pid 15715:tid 15726] [client 4.193.137.131:24194] [client 4.193.137.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "afyy4CY4dZsLOttMkcfbDwAAAQk"]
[Thu May 07 23:42:24.946537 2026] [:error] [pid 15630:tid 15664] [client 4.193.137.131:24197] [client 4.193.137.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "afyy4HTithRAi4821qvaCgAAAIQ"]
[Thu May 07 23:42:25.318112 2026] [:error] [pid 12374:tid 12397] [client 4.193.137.131:24206] [client 4.193.137.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "afyy4Ro3QnNcFDMfKt18qgAAAZM"]
[Thu May 07 23:42:25.672164 2026] [:error] [pid 12374:tid 12388] [client 4.193.137.131:24211] [client 4.193.137.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "afyy4Ro3QnNcFDMfKt18rAAAAYo"]
[Fri May 08 00:43:17.469658 2026] [:error] [pid 12374:tid 12384] [client 34.106.134.142:60378] [client 34.106.134.142] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "afzBJRo3QnNcFDMfKt2B1gAAAYY"]
[Fri May 08 02:51:38.841113 2026] [:error] [pid 15631:tid 15703] [client 34.17.81.162:57890] [client 34.17.81.162] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "afzfOnvP1GkPUuuLfqWFUwAAANA"]
[Fri May 08 03:22:37.955380 2026] [:error] [pid 49512:tid 49567] [client 4.193.137.131:14915] [client 4.193.137.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "afzmfbg_uOAHr6IIqFfspwAAAEc"]
[Fri May 08 03:22:38.329224 2026] [:error] [pid 49513:tid 49608] [client 4.193.137.131:15311] [client 4.193.137.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "afzmfsQFkwGlHB-NJyKn6AAAAJU"]
[Fri May 08 03:22:38.681357 2026] [:error] [pid 49614:tid 49626] [client 4.193.137.131:15342] [client 4.193.137.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "afzmfhbAxiusnnjxj1NORAAAAMk"]
[Fri May 08 03:22:39.032532 2026] [:error] [pid 49512:tid 49563] [client 4.193.137.131:15299] [client 4.193.137.131] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/alfa.php"] [unique_id "afzmf7g_uOAHr6IIqFfsqQAAAEM"]
[Fri May 08 09:42:42.344891 2026] [:error] [pid 61356:tid 61398] [client 173.239.214.182:61913] [client 173.239.214.182] ModSecurity: Access denied with code 403 (phase 1). String match "Go-http-client" at REQUEST_HEADERS:User-Agent. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "36"] [id "771003"] [msg "Blocked bad bot user-agent: Go-http-client"] [tag "bad_bot"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-includes/css/buttons.css"] [unique_id "af0_kox3vpB8oWhUq2PDrwAAAco"]
[Fri May 08 14:01:26.416178 2026] [:error] [pid 61355:tid 61362] [client 34.97.1.48:49494] [client 34.97.1.48] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "af18NvkhJTi30CBXmMlIOAAAAYE"]
[Fri May 08 16:45:33.089174 2026] [:error] [pid 51007:tid 51038] [client 20.12.217.215:42826] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-thi.php"] [unique_id "af2irVMagSGstWKyzzXOQAAAABA"]
[Fri May 08 16:45:33.718602 2026] [:error] [pid 61317:tid 61326] [client 20.12.217.215:42840] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-thi.php"] [unique_id "af2irc-fFk_CedOCOYudwQAAAUY"]
[Fri May 08 16:45:34.465866 2026] [:error] [pid 61356:tid 61390] [client 20.12.217.215:42819] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-thi.php"] [unique_id "af2irox3vpB8oWhUq2NJcQAAAcI"]
[Fri May 08 16:45:35.205793 2026] [:error] [pid 51007:tid 51041] [client 20.12.217.215:42942] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-thi.php"] [unique_id "af2ir1MagSGstWKyzzXOQgAAABM"]
[Fri May 08 16:45:36.159416 2026] [:error] [pid 61317:tid 61331] [client 20.12.217.215:42910] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-slss.php"] [unique_id "af2isM-fFk_CedOCOYudxQAAAUs"]
[Fri May 08 16:45:36.710797 2026] [:error] [pid 51007:tid 51023] [client 20.12.217.215:42897] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-slss.php"] [unique_id "af2isFMagSGstWKyzzXORAAAAAE"]
[Fri May 08 16:45:37.241145 2026] [:error] [pid 51008:tid 51068] [client 20.12.217.215:42909] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-slss.php"] [unique_id "af2isXB58C2Y1tgLtuJ7sgAAAFM"]
[Fri May 08 16:45:38.111825 2026] [:error] [pid 34318:tid 34328] [client 20.12.217.215:42885] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-slss.php"] [unique_id "af2issr3guirgJiKhzDBNgAAAQg"]
[Fri May 08 16:45:38.694677 2026] [:error] [pid 61356:tid 61394] [client 20.12.217.215:42841] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-load.php"] [unique_id "af2isox3vpB8oWhUq2NJcwAAAcY"]
[Fri May 08 16:45:39.646724 2026] [:error] [pid 61356:tid 61389] [client 20.12.217.215:42817] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-load.php"] [unique_id "af2is4x3vpB8oWhUq2NJdgAAAcE"]
[Fri May 08 16:45:40.434943 2026] [:error] [pid 51007:tid 51030] [client 20.12.217.215:42888] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-load.php"] [unique_id "af2itFMagSGstWKyzzXORwAAAAg"]
[Fri May 08 16:45:40.953219 2026] [:error] [pid 61356:tid 61391] [client 20.12.217.215:42887] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-load.php"] [unique_id "af2itIx3vpB8oWhUq2NJewAAAcM"]
[Fri May 08 16:45:41.618535 2026] [:error] [pid 61355:tid 61381] [client 20.12.217.215:42912] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ftde.php"] [unique_id "af2itfkhJTi30CBXmMlsdwAAAZQ"]
[Fri May 08 16:45:42.513086 2026] [:error] [pid 51009:tid 51085] [client 20.12.217.215:42833] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ftde.php"] [unique_id "af2ituB0GbUWhxgzX9UDyAAAAIk"]
[Fri May 08 16:45:43.181517 2026] [:error] [pid 61356:tid 61389] [client 20.12.217.215:42919] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ftde.php"] [unique_id "af2it4x3vpB8oWhUq2NJhwAAAcE"]
[Fri May 08 16:45:43.707653 2026] [:error] [pid 61356:tid 61409] [client 20.12.217.215:42900] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ftde.php"] [unique_id "af2it4x3vpB8oWhUq2NJkgAAAdU"]
[Fri May 08 16:45:45.288523 2026] [:error] [pid 61355:tid 61376] [client 20.12.217.215:42882] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tires.php"] [unique_id "af2iufkhJTi30CBXmMlsigAAAY8"]
[Fri May 08 16:45:46.098077 2026] [:error] [pid 61356:tid 61397] [client 20.12.217.215:42936] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tires.php"] [unique_id "af2iuox3vpB8oWhUq2NJngAAAck"]
[Fri May 08 16:45:47.307585 2026] [:error] [pid 61355:tid 61370] [client 20.12.217.215:42821] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tires.php"] [unique_id "af2iu_khJTi30CBXmMlsjAAAAYk"]
[Fri May 08 16:45:48.673845 2026] [:error] [pid 61356:tid 61398] [client 20.12.217.215:42894] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tires.php"] [unique_id "af2ivIx3vpB8oWhUq2NJpAAAAco"]
[Fri May 08 16:45:50.083291 2026] [:error] [pid 61355:tid 61367] [client 20.12.217.215:42927] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "af2ivvkhJTi30CBXmMlslgAAAYY"]
[Fri May 08 16:45:52.085518 2026] [:error] [pid 51008:tid 51065] [client 20.12.217.215:42921] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "af2iwHB58C2Y1tgLtuJ7tQAAAFA"]
[Fri May 08 16:45:53.097336 2026] [:error] [pid 61356:tid 61398] [client 20.12.217.215:42906] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "af2iwYx3vpB8oWhUq2NJpwAAAco"]
[Fri May 08 16:45:56.114824 2026] [:error] [pid 34318:tid 34326] [client 20.12.217.215:42907] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ff1.php"] [unique_id "af2ixMr3guirgJiKhzDBPAAAAQY"]
[Fri May 08 16:45:57.269437 2026] [:error] [pid 51009:tid 51094] [client 20.12.217.215:42923] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "af2ixeB0GbUWhxgzX9UD1wAAAJI"]
[Fri May 08 16:45:59.128662 2026] [:error] [pid 61355:tid 61379] [client 20.12.217.215:42895] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "af2ix_khJTi30CBXmMlsnQAAAZI"]
[Fri May 08 16:46:00.137676 2026] [:error] [pid 51008:tid 51054] [client 20.12.217.215:42830] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "af2iyHB58C2Y1tgLtuJ7vAAAAEU"]
[Fri May 08 16:46:01.110144 2026] [:error] [pid 61356:tid 61393] [client 20.12.217.215:42886] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/bthil.php"] [unique_id "af2iyYx3vpB8oWhUq2NJqwAAAcU"]
[Fri May 08 16:46:03.262872 2026] [:error] [pid 61317:tid 61326] [client 20.12.217.215:42940] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/333.php"] [unique_id "af2iy8-fFk_CedOCOYud3gAAAUY"]
[Fri May 08 16:46:05.009867 2026] [:error] [pid 51009:tid 51088] [client 20.12.217.215:42932] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/333.php"] [unique_id "af2izeB0GbUWhxgzX9UD3QAAAIw"]
[Fri May 08 16:46:06.426083 2026] [:error] [pid 61355:tid 61362] [client 20.12.217.215:42911] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/333.php"] [unique_id "af2izvkhJTi30CBXmMlsowAAAYE"]
[Fri May 08 16:46:07.501372 2026] [:error] [pid 61317:tid 61338] [client 20.12.217.215:42935] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/333.php"] [unique_id "af2iz8-fFk_CedOCOYud5QAAAVI"]
[Fri May 08 16:46:08.698557 2026] [:error] [pid 61317:tid 61335] [client 20.12.217.215:42831] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ccou.php"] [unique_id "af2i0M-fFk_CedOCOYud7QAAAU8"]
[Fri May 08 16:46:09.527975 2026] [:error] [pid 51009:tid 51093] [client 20.12.217.215:42818] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ccou.php"] [unique_id "af2i0eB0GbUWhxgzX9UD4QAAAJE"]
[Fri May 08 16:46:11.394186 2026] [:error] [pid 61355:tid 61375] [client 20.12.217.215:42842] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ccou.php"] [unique_id "af2i0_khJTi30CBXmMlspwAAAY4"]
[Fri May 08 16:46:15.533657 2026] [:error] [pid 51008:tid 51051] [client 20.12.217.215:42836] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/ccou.php"] [unique_id "af2i13B58C2Y1tgLtuJ7ygAAAEI"]
[Fri May 08 16:46:17.187636 2026] [:error] [pid 61356:tid 61394] [client 20.12.217.215:42937] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/albin.php"] [unique_id "af2i2Yx3vpB8oWhUq2NJwwAAAcY"]
[Fri May 08 16:46:20.087349 2026] [:error] [pid 51009:tid 51079] [client 20.12.217.215:23536] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/albin.php"] [unique_id "af2i3OB0GbUWhxgzX9UD5AAAAIM"]
[Fri May 08 16:46:20.674460 2026] [:error] [pid 61355:tid 61368] [client 20.12.217.215:42828] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/albin.php"] [unique_id "af2i3PkhJTi30CBXmMlsuQAAAYc"]
[Fri May 08 16:46:21.928909 2026] [:error] [pid 51008:tid 51072] [client 20.12.217.215:42870] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/albin.php"] [unique_id "af2i3XB58C2Y1tgLtuJ7zQAAAFc"]
[Fri May 08 16:46:23.129959 2026] [:error] [pid 61355:tid 61368] [client 20.12.217.215:42903] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "af2i3_khJTi30CBXmMlswwAAAYc"]
[Fri May 08 16:46:24.124723 2026] [:error] [pid 61356:tid 61407] [client 20.12.217.215:42926] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "af2i4Ix3vpB8oWhUq2NJzwAAAdM"]
[Fri May 08 16:46:27.075544 2026] [:error] [pid 51009:tid 51089] [client 20.12.217.215:42845] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "af2i4-B0GbUWhxgzX9UD5wAAAI0"]
[Fri May 08 16:46:28.206904 2026] [:error] [pid 51009:tid 51098] [client 20.12.217.215:42822] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sbhu.php"] [unique_id "af2i5OB0GbUWhxgzX9UD7AAAAJY"]
[Fri May 08 16:46:29.878252 2026] [:error] [pid 61356:tid 61391] [client 20.12.217.215:42853] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/xda.php"] [unique_id "af2i5Yx3vpB8oWhUq2NJ2gAAAcM"]
[Fri May 08 16:46:40.755916 2026] [:error] [pid 61355:tid 61380] [client 20.12.217.215:42829] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shell20211028.php"] [unique_id "af2i8PkhJTi30CBXmMls4wAAAZM"]
[Fri May 08 16:46:46.051340 2026] [:error] [pid 61317:tid 61335] [client 20.12.217.215:23513] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shell20211028.php"] [unique_id "af2i9s-fFk_CedOCOYud9wAAAU8"]
[Fri May 08 16:46:48.775920 2026] [:error] [pid 61356:tid 61403] [client 20.12.217.215:42915] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shell20211028.php"] [unique_id "af2i-Ix3vpB8oWhUq2NKOQAAAc8"]
[Fri May 08 16:46:50.556584 2026] [:error] [pid 61356:tid 61403] [client 20.12.217.215:42827] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/shell20211028.php"] [unique_id "af2i-ox3vpB8oWhUq2NKSwAAAc8"]
[Fri May 08 16:46:56.317103 2026] [:error] [pid 51009:tid 51076] [client 20.12.217.215:42835] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wuasr.php"] [unique_id "af2jAOB0GbUWhxgzX9UEEgAAAIA"]
[Fri May 08 16:46:58.875501 2026] [:error] [pid 51009:tid 51090] [client 20.12.217.215:42855] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wuasr.php"] [unique_id "af2jAuB0GbUWhxgzX9UEFQAAAI4"]
[Fri May 08 16:47:00.114334 2026] [:error] [pid 61355:tid 61373] [client 20.12.217.215:23504] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wuasr.php"] [unique_id "af2jBPkhJTi30CBXmMls-wAAAYw"]
[Fri May 08 16:47:01.194128 2026] [:error] [pid 61355:tid 61377] [client 20.12.217.215:42832] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wuasr.php"] [unique_id "af2jBfkhJTi30CBXmMltAQAAAZA"]
[Fri May 08 16:47:02.106148 2026] [:error] [pid 51007:tid 51045] [client 20.12.217.215:42939] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1index.php"] [unique_id "af2jBlMagSGstWKyzzXOZQAAABc"]
[Fri May 08 16:47:02.623106 2026] [:error] [pid 61355:tid 61379] [client 20.12.217.215:23537] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1index.php"] [unique_id "af2jBvkhJTi30CBXmMltCAAAAZI"]
[Fri May 08 16:47:03.411760 2026] [:error] [pid 51007:tid 51043] [client 20.12.217.215:42899] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1index.php"] [unique_id "af2jB1MagSGstWKyzzXOZgAAABU"]
[Fri May 08 16:47:04.973374 2026] [:error] [pid 61317:tid 61325] [client 20.12.217.215:42928] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/1index.php"] [unique_id "af2jCM-fFk_CedOCOYueCQAAAUU"]
[Fri May 08 16:47:05.654553 2026] [:error] [pid 51008:tid 51065] [client 20.12.217.215:42941] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/png.php"] [unique_id "af2jCXB58C2Y1tgLtuJ74QAAAFA"]
[Fri May 08 16:47:06.471310 2026] [:error] [pid 61317:tid 61331] [client 20.12.217.215:42916] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/png.php"] [unique_id "af2jCs-fFk_CedOCOYueDgAAAUs"]
[Fri May 08 16:47:10.203637 2026] [:error] [pid 61356:tid 61392] [client 20.12.217.215:23517] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/png.php"] [unique_id "af2jDox3vpB8oWhUq2NKcwAAAcQ"]
[Fri May 08 16:47:11.277020 2026] [:error] [pid 51009:tid 51089] [client 20.12.217.215:23511] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/png.php"] [unique_id "af2jD-B0GbUWhxgzX9UEHgAAAI0"]
[Fri May 08 16:47:13.354067 2026] [:error] [pid 61356:tid 61406] [client 20.12.217.215:23542] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x.php"] [unique_id "af2jEYx3vpB8oWhUq2NKhgAAAdI"]
[Fri May 08 16:47:16.318976 2026] [:error] [pid 61356:tid 61397] [client 20.12.217.215:42905] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x.php"] [unique_id "af2jFIx3vpB8oWhUq2NKkQAAAck"]
[Fri May 08 16:47:18.811963 2026] [:error] [pid 61317:tid 61326] [client 20.12.217.215:42867] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x.php"] [unique_id "af2jFs-fFk_CedOCOYueGwAAAUY"]
[Fri May 08 16:47:20.474914 2026] [:error] [pid 61355:tid 61365] [client 20.12.217.215:23500] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/x.php"] [unique_id "af2jGPkhJTi30CBXmMltDgAAAYQ"]
[Fri May 08 16:47:22.095739 2026] [:error] [pid 61355:tid 61361] [client 20.12.217.215:23533] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yas.php"] [unique_id "af2jGvkhJTi30CBXmMltEwAAAYA"]
[Fri May 08 16:47:23.303429 2026] [:error] [pid 61355:tid 61366] [client 20.12.217.215:42857] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yas.php"] [unique_id "af2jG_khJTi30CBXmMltFQAAAYU"]
[Fri May 08 16:47:25.797615 2026] [:error] [pid 61355:tid 61382] [client 20.12.217.215:42863] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yas.php"] [unique_id "af2jHfkhJTi30CBXmMltGAAAAZU"]
[Fri May 08 16:47:27.470394 2026] [:error] [pid 51008:tid 51066] [client 20.12.217.215:42843] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/yas.php"] [unique_id "af2jH3B58C2Y1tgLtuJ78gAAAFE"]
[Fri May 08 16:47:28.282499 2026] [:error] [pid 34318:tid 34330] [client 20.12.217.215:42850] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dropdown.php"] [unique_id "af2jIMr3guirgJiKhzDBWgAAAQo"]
[Fri May 08 16:47:30.643053 2026] [:error] [pid 61317:tid 61327] [client 20.12.217.215:42943] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dropdown.php"] [unique_id "af2jIs-fFk_CedOCOYueJQAAAUc"]
[Fri May 08 16:47:31.692613 2026] [:error] [pid 51009:tid 51089] [client 20.12.217.215:42839] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dropdown.php"] [unique_id "af2jI-B0GbUWhxgzX9UEMAAAAI0"]
[Fri May 08 16:47:32.684584 2026] [:error] [pid 34318:tid 34339] [client 20.12.217.215:42865] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dropdown.php"] [unique_id "af2jJMr3guirgJiKhzDBXgAAARM"]
[Fri May 08 16:47:33.384947 2026] [:error] [pid 51007:tid 51038] [client 20.12.217.215:42837] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "af2jJVMagSGstWKyzzXOegAAABA"]
[Fri May 08 16:47:34.115078 2026] [:error] [pid 61355:tid 61382] [client 20.12.217.215:42825] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "af2jJvkhJTi30CBXmMltHwAAAZU"]
[Fri May 08 16:47:34.995688 2026] [:error] [pid 61355:tid 61370] [client 20.12.217.215:42864] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "af2jJvkhJTi30CBXmMltIwAAAYk"]
[Fri May 08 16:47:36.041859 2026] [:error] [pid 61356:tid 61405] [client 20.12.217.215:42920] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-access.php"] [unique_id "af2jKIx3vpB8oWhUq2NKpgAAAdE"]
[Fri May 08 16:47:37.258363 2026] [:error] [pid 51007:tid 51025] [client 20.12.217.215:42934] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fun.php"] [unique_id "af2jKVMagSGstWKyzzXOfQAAAAM"]
[Fri May 08 16:47:38.568201 2026] [:error] [pid 51007:tid 51036] [client 20.12.217.215:42878] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/fun.php"] [unique_id "af2jKlMagSGstWKyzzXOfgAAAA4"]
[Fri May 08 16:47:46.912280 2026] [:error] [pid 34318:tid 34326] [client 20.12.217.215:42901] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "af2jMsr3guirgJiKhzDBcAAAAQY"]
[Fri May 08 16:47:49.131670 2026] [:error] [pid 61355:tid 61372] [client 20.12.217.215:42918] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "af2jNfkhJTi30CBXmMltMQAAAYs"]
[Fri May 08 16:47:50.877133 2026] [:error] [pid 61355:tid 61364] [client 20.12.217.215:42877] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "af2jNvkhJTi30CBXmMltNwAAAYM"]
[Fri May 08 16:47:52.154664 2026] [:error] [pid 51008:tid 51054] [client 20.12.217.215:42868] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lala.php"] [unique_id "af2jOHB58C2Y1tgLtuJ7_QAAAEU"]
[Fri May 08 16:47:53.084104 2026] [:error] [pid 51009:tid 51083] [client 20.12.217.215:42931] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-at.php"] [unique_id "af2jOeB0GbUWhxgzX9UEXQAAAIc"]
[Fri May 08 16:47:54.520689 2026] [:error] [pid 61317:tid 61329] [client 20.12.217.215:23518] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-at.php"] [unique_id "af2jOs-fFk_CedOCOYueOQAAAUk"]
[Fri May 08 16:47:56.587512 2026] [:error] [pid 51007:tid 51029] [client 20.12.217.215:42838] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-at.php"] [unique_id "af2jPFMagSGstWKyzzXOhQAAAAc"]
[Fri May 08 16:47:58.713565 2026] [:error] [pid 61355:tid 61371] [client 20.12.217.215:42922] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-at.php"] [unique_id "af2jPvkhJTi30CBXmMltQgAAAYo"]
[Fri May 08 16:47:59.353062 2026] [:error] [pid 61355:tid 61380] [client 20.12.217.215:23502] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "af2jP_khJTi30CBXmMltRQAAAZM"]
[Fri May 08 16:48:00.475177 2026] [:error] [pid 61356:tid 61402] [client 20.12.217.215:42891] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "af2jQIx3vpB8oWhUq2NKsAAAAc4"]
[Fri May 08 16:48:01.347688 2026] [:error] [pid 51008:tid 51066] [client 20.12.217.215:42890] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "af2jQXB58C2Y1tgLtuJ8AQAAAFE"]
[Fri May 08 16:48:03.096823 2026] [:error] [pid 51008:tid 51064] [client 20.12.217.215:23508] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp.php"] [unique_id "af2jQ3B58C2Y1tgLtuJ8BAAAAE8"]
[Fri May 08 16:48:06.145133 2026] [:error] [pid 51113:tid 51121] [client 20.12.217.215:42846] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sys.php"] [unique_id "af2jRkQfs7sWtqkpQIdiVgAAAMY"]
[Fri May 08 16:48:12.072139 2026] [:error] [pid 61355:tid 61383] [client 20.12.217.215:42914] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sys.php"] [unique_id "af2jTPkhJTi30CBXmMltWQAAAZY"]
[Fri May 08 16:48:14.936548 2026] [:error] [pid 51008:tid 51065] [client 20.12.217.215:42872] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sys.php"] [unique_id "af2jTnB58C2Y1tgLtuJ8CQAAAFA"]
[Fri May 08 16:48:17.499120 2026] [:error] [pid 61355:tid 61378] [client 20.12.217.215:42871] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/sys.php"] [unique_id "af2jUfkhJTi30CBXmMltXwAAAZE"]
[Fri May 08 16:48:19.024932 2026] [:error] [pid 61356:tid 61399] [client 20.12.217.215:23429] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "af2jU4x3vpB8oWhUq2NKugAAAcs"]
[Fri May 08 16:48:20.752662 2026] [:error] [pid 51008:tid 51071] [client 20.12.217.215:42898] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "af2jVHB58C2Y1tgLtuJ8DwAAAFY"]
[Fri May 08 16:48:23.069836 2026] [:error] [pid 51009:tid 51091] [client 20.12.217.215:42913] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "af2jV-B0GbUWhxgzX9UEaQAAAI8"]
[Fri May 08 16:48:23.980660 2026] [:error] [pid 51009:tid 51077] [client 20.12.217.215:42873] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/lv.php"] [unique_id "af2jV-B0GbUWhxgzX9UEbAAAAIE"]
[Fri May 08 16:48:26.124664 2026] [:error] [pid 34318:tid 34340] [client 20.12.217.215:23506] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "af2jWsr3guirgJiKhzDBgAAAARQ"]
[Fri May 08 16:48:26.761504 2026] [:error] [pid 34318:tid 34324] [client 20.12.217.215:42904] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "af2jWsr3guirgJiKhzDBgQAAAQQ"]
[Fri May 08 16:48:30.195295 2026] [:error] [pid 61317:tid 61341] [client 20.12.217.215:42930] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "af2jXs-fFk_CedOCOYueYgAAAVU"]
[Fri May 08 16:48:33.683543 2026] [:error] [pid 61355:tid 61369] [client 20.12.217.215:23499] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-good.php"] [unique_id "af2jYfkhJTi30CBXmMltcQAAAYg"]
[Fri May 08 16:48:34.624658 2026] [:error] [pid 51009:tid 51076] [client 20.12.217.215:42917] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/db.php"] [unique_id "af2jYuB0GbUWhxgzX9UEgAAAAIA"]
[Fri May 08 16:48:36.119563 2026] [:error] [pid 61355:tid 61373] [client 20.12.217.215:23539] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/db.php"] [unique_id "af2jZPkhJTi30CBXmMltcwAAAYw"]
[Fri May 08 16:48:37.999693 2026] [:error] [pid 61356:tid 61399] [client 20.12.217.215:23546] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/db.php"] [unique_id "af2jZYx3vpB8oWhUq2NLawAAAcs"]
[Fri May 08 16:48:40.188019 2026] [:error] [pid 61355:tid 61374] [client 20.12.217.215:23434] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/db.php"] [unique_id "af2jaPkhJTi30CBXmMltdgAAAY0"]
[Fri May 08 16:48:42.636157 2026] [:error] [pid 51008:tid 51054] [client 20.12.217.215:23459] [client 20.12.217.215] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/z.php"] [unique_id "af2janB58C2Y1tgLtuJ8GwAAAEU"]
[Sat May 09 00:13:23.679122 2026] [:error] [pid 51113:tid 51116] [client 35.246.53.70:51020] [client 35.246.53.70] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "af4Lo0Qfs7sWtqkpQIeQXQAAAME"]
[Sat May 09 01:17:01.724443 2026] [:error] [pid 51009:tid 51084] [client 13.208.252.11:51986] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "af4ajeB0GbUWhxgzX9WKSQAAAIg"]
[Sat May 09 01:17:02.498768 2026] [:error] [pid 51008:tid 51052] [client 13.208.252.11:52034] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env/.env.local/.env.production/.env.staging/.env.development/.env.test/.env.remote/.env.bak/.env.backup/.env.save/.env.old/.env.sample/.env.example/.env.dev/.env.prod/.env.stage/.env.ci/.env.docker/.env.live/.env.preprod/.env.uat/.env.dist/.env.swp/.env~/.env1/.env2/.env_copy/.env.txt/.env.json/.env.yaml/.env.yml/app/.env/apps/.env/api/.env/web/.env/site/.env/public/.env/admin/.env/backend/.env/server/.env/frontend/.env/src/.env/core/.env/core/app/.env/config/.env/private/.env/application/.env/bootstrap/.env/database/.env/storage/.env/var/www/.env/var/www/html/.env/current/.env/release/.env/releases/.env/shared/.env/deploy/.env/build/.env/dist/.env/public_html/.env/htdocs/.env/www/.env/html/.env/live/.env/prod/.env/dev/.env/staging/.env/opt/.env/laravel/.env/symfony/.env/wordpress/.env/wp/.env/cms/.env/drupal/.env/joomla/.env/magento/.env/shopify/.env/prestashop/.env/codeigniter/.env/cakephp/.env/zend/.env/yii/.env/laravel5/.env/v1/.env/v2/.env/v3/.env/api/v1/.env/api/v2/.env/rest/.env/graphql/.env/gateway/.env/microservice/.env/service/.env/api/v3/.env/api/dev/.env/api/staging/.env/vendor/.env/lib/.env/resources/.env/assets/.env/uploads/.env/internal/.env/tools/.env/scripts/.env/bin/.env/sbin/.env/local/.env/portal/.env/dashboard/.env/panel/.env/crm/.env/erp/.env/shop/.env/store/.env/saas/.env/client/.env/project/.env/admin-panel/.env/control-panel/.env/user-panel/.env/node/.env/express/.env/next/.env/nuxt/.env/nest/.env/react/.env/vue/.env/angular/.env/svelte/.env/vite/.env/backup/.env/backups/.env/old/.env/tmp/.env/temp/.env/lab/.env/cronlab/.env/cron/.env/en/.env/administrator/.env/psnlink/.env/exapi/.env/sitemaps/.env/.env.backup1/.env.backup2/logs/.env/cache/.env/mailer/.env/mail/.env/email/.env/smtp/.env/mailing/.env/notifications/.env/notify/.env/sender/.env/campaign/.env/newsletter/.env/ses/.env/sendgrid/.env/sparkpost/.env/postmark/.env/mailgun/.env/mandrill/.env/mailjet/.env/brevo/.env/transactional/.env/bulk/.env/aws/.env/azure/.env/gcp/.env/cloud/.env/infrastructure/.env/docker/.env/k8s/.env/kubernetes/.env/terraform/.env/ansible/.env/.git/.env/ci/.env/cd/.env/jenkins/.env/gitlab/.env/github/.env/actions/.env/circleci/.env/travis/.env/buildkite/.env/mysql/.env/postgres/.env/mongodb/.env/redis/.env/elasticsearch/.env/rabbitmq/.env/kafka/.env/queue/.env/worker/.env/job/.env/test/.env/qa/.env/preview/.env/beta/.env/uat/.env/stage/.env/development/.env/production/.env/config/app/.env"] [unique_id "af4ajnB58C2Y1tgLtuLUygAAAEM"]
[Sat May 09 01:17:03.802480 2026] [:error] [pid 61356:tid 61394] [client 13.208.252.11:52062] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/i.php"] [unique_id "af4aj4x3vpB8oWhUq2MeQgAAAcY"]
[Sat May 09 01:17:04.383480 2026] [:error] [pid 61356:tid 61397] [client 13.208.252.11:52088] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/pi.php"] [unique_id "af4akIx3vpB8oWhUq2MeRAAAAck"]
[Sat May 09 01:17:04.963939 2026] [:error] [pid 51113:tid 51127] [client 13.208.252.11:57114] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/pinfo.php"] [unique_id "af4akEQfs7sWtqkpQIeYsAAAAMw"]
[Sat May 09 01:17:05.550414 2026] [:error] [pid 51009:tid 51096] [client 13.208.252.11:57166] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/test.php"] [unique_id "af4akeB0GbUWhxgzX9WKVAAAAJQ"]
[Sat May 09 01:17:06.133217 2026] [:error] [pid 61356:tid 61412] [client 13.208.252.11:57228] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/phpinfo"] [unique_id "af4akox3vpB8oWhUq2MeTwAAAdg"]
[Sat May 09 01:17:06.715368 2026] [:error] [pid 61356:tid 61404] [client 13.208.252.11:57280] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/p.php"] [unique_id "af4akox3vpB8oWhUq2MeXAAAAdA"]
[Sat May 09 01:17:07.297259 2026] [:error] [pid 61356:tid 61393] [client 13.208.252.11:57322] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/debug.php"] [unique_id "af4ak4x3vpB8oWhUq2MeZAAAAcU"]
[Sat May 09 01:17:07.878310 2026] [:error] [pid 61317:tid 61343] [client 13.208.252.11:57374] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin/phpinfo.php"] [unique_id "af4ak8-fFk_CedOCOYsGaAAAAVc"]
[Sat May 09 01:17:08.463720 2026] [:error] [pid 61317:tid 61336] [client 13.208.252.11:57434] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/test/phpinfo.php"] [unique_id "af4alM-fFk_CedOCOYsGawAAAVA"]
[Sat May 09 01:17:09.053063 2026] [:error] [pid 61355:tid 61375] [client 13.208.252.11:57474] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/dev/phpinfo.php"] [unique_id "af4alfkhJTi30CBXmMkikwAAAY4"]
[Sat May 09 01:17:09.647063 2026] [:error] [pid 61355:tid 61364] [client 13.208.252.11:57518] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/old/phpinfo.php"] [unique_id "af4alfkhJTi30CBXmMkimAAAAYM"]
[Sat May 09 01:17:10.237292 2026] [:error] [pid 51008:tid 51073] [client 13.208.252.11:57554] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/tmp/phpinfo.php"] [unique_id "af4alnB58C2Y1tgLtuLU3gAAAFg"]
[Sat May 09 01:17:10.826609 2026] [:error] [pid 61355:tid 61376] [client 13.208.252.11:57594] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public/phpinfo.php"] [unique_id "af4alvkhJTi30CBXmMkioQAAAY8"]
[Sat May 09 01:17:11.410016 2026] [:error] [pid 51009:tid 51096] [client 13.208.252.11:57640] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/info"] [unique_id "af4al-B0GbUWhxgzX9WKZQAAAJQ"]
[Sat May 09 01:17:12.003077 2026] [:error] [pid 61355:tid 61380] [client 13.208.252.11:57704] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/php-info.php"] [unique_id "af4amPkhJTi30CBXmMkiqAAAAZM"]
[Sat May 09 01:17:12.587454 2026] [:error] [pid 61355:tid 61367] [client 13.208.252.11:57762] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/phpversion.php"] [unique_id "af4amPkhJTi30CBXmMkirwAAAYY"]
[Sat May 09 01:17:13.168072 2026] [:error] [pid 61355:tid 61384] [client 13.208.252.11:57806] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/_phpinfo.php"] [unique_id "af4amfkhJTi30CBXmMkitQAAAZc"]
[Sat May 09 01:17:13.747519 2026] [:error] [pid 51113:tid 51139] [client 13.208.252.11:57848] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/old_phpinfo.php"] [unique_id "af4amUQfs7sWtqkpQIeYwAAAANg"]
[Sat May 09 01:17:14.329715 2026] [:error] [pid 61355:tid 61367] [client 13.208.252.11:57902] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/server-info.php"] [unique_id "af4amvkhJTi30CBXmMkivAAAAYY"]
[Sat May 09 01:17:14.907503 2026] [:error] [pid 34318:tid 34320] [client 13.208.252.11:52752] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/server-status.php"] [unique_id "af4amsr3guirgJiKhzAAygAAAQA"]
[Sat May 09 01:17:15.489856 2026] [:error] [pid 51008:tid 51062] [client 13.208.252.11:52778] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/_profiler/phpinfo"] [unique_id "af4am3B58C2Y1tgLtuLU7wAAAE0"]
[Sat May 09 01:17:16.069680 2026] [:error] [pid 51113:tid 51121] [client 13.208.252.11:52842] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/_environment"] [unique_id "af4anEQfs7sWtqkpQIeYyQAAAMY"]
[Sat May 09 01:17:16.653005 2026] [:error] [pid 61356:tid 61405] [client 13.208.252.11:52886] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/webroot/index.php/_environment"] [unique_id "af4anIx3vpB8oWhUq2MejAAAAdE"]
[Sat May 09 01:17:17.235499 2026] [:error] [pid 61317:tid 61337] [client 13.208.252.11:52920] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/mail/phpinfo.php"] [unique_id "af4anc-fFk_CedOCOYsGfgAAAVE"]
[Sat May 09 01:17:17.814096 2026] [:error] [pid 61356:tid 61395] [client 13.208.252.11:52982] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/cpanel/phpinfo.php"] [unique_id "af4anYx3vpB8oWhUq2MekQAAAcc"]
[Sat May 09 01:17:18.400995 2026] [:error] [pid 51008:tid 51051] [client 13.208.252.11:53038] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/hosting/phpinfo.php"] [unique_id "af4annB58C2Y1tgLtuLU_wAAAEI"]
[Sat May 09 01:17:18.990004 2026] [:error] [pid 51113:tid 51125] [client 13.208.252.11:53086] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/webmail/phpinfo.php"] [unique_id "af4ankQfs7sWtqkpQIeYzgAAAMo"]
[Sat May 09 01:17:19.584359 2026] [:error] [pid 61355:tid 61379] [client 13.208.252.11:53126] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/smtp/phpinfo.php"] [unique_id "af4an_khJTi30CBXmMki3AAAAZI"]
[Sat May 09 01:17:20.177924 2026] [:error] [pid 61355:tid 61373] [client 13.208.252.11:53160] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/phpinfo.php.bak"] [unique_id "af4aoPkhJTi30CBXmMki5AAAAYw"]
[Sat May 09 01:17:20.769791 2026] [:error] [pid 34318:tid 34320] [client 13.208.252.11:53198] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/phpinfo.php.old"] [unique_id "af4aoMr3guirgJiKhzAA2QAAAQA"]
[Sat May 09 01:17:21.350913 2026] [:error] [pid 51007:tid 51029] [client 13.208.252.11:53250] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/phpinfo.php~"] [unique_id "af4aoVMagSGstWKyzzUWwAAAAAc"]
[Sat May 09 01:17:21.929779 2026] [:error] [pid 61317:tid 61335] [client 13.208.252.11:53282] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/info.php.bak"] [unique_id "af4aoc-fFk_CedOCOYsGiQAAAU8"]
[Sat May 09 01:17:22.516796 2026] [:error] [pid 61356:tid 61393] [client 13.208.252.11:53328] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/phpinfo.php.save"] [unique_id "af4aoox3vpB8oWhUq2MenQAAAcU"]
[Sat May 09 01:17:23.102440 2026] [:error] [pid 51008:tid 51057] [client 13.208.252.11:53370] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/staging/phpinfo.php"] [unique_id "af4ao3B58C2Y1tgLtuLVEQAAAEg"]
[Sat May 09 01:17:23.688189 2026] [:error] [pid 61356:tid 61412] [client 13.208.252.11:53388] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/beta/phpinfo.php"] [unique_id "af4ao4x3vpB8oWhUq2MepQAAAdg"]
[Sat May 09 01:17:24.273453 2026] [:error] [pid 61317:tid 61343] [client 13.208.252.11:53424] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/uat/phpinfo.php"] [unique_id "af4apM-fFk_CedOCOYsGjgAAAVc"]
[Sat May 09 01:17:24.853399 2026] [:error] [pid 61355:tid 61377] [client 13.208.252.11:36730] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/qa/phpinfo.php"] [unique_id "af4apPkhJTi30CBXmMki-AAAAZA"]
[Sat May 09 01:17:25.441282 2026] [:error] [pid 61317:tid 61340] [client 13.208.252.11:36778] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/preview/phpinfo.php"] [unique_id "af4apc-fFk_CedOCOYsGlQAAAVQ"]
[Sat May 09 01:17:26.029431 2026] [:error] [pid 61356:tid 61406] [client 13.208.252.11:36828] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/www/phpinfo.php"] [unique_id "af4apox3vpB8oWhUq2MeswAAAdI"]
[Sat May 09 01:17:26.611596 2026] [:error] [pid 61355:tid 61370] [client 13.208.252.11:36860] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/htdocs/phpinfo.php"] [unique_id "af4apvkhJTi30CBXmMkjBQAAAYk"]
[Sat May 09 01:17:27.190926 2026] [:error] [pid 51113:tid 51133] [client 13.208.252.11:36900] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/public_html/phpinfo.php"] [unique_id "af4ap0Qfs7sWtqkpQIeY1gAAANI"]
[Sat May 09 01:17:27.768905 2026] [:error] [pid 61355:tid 61367] [client 13.208.252.11:36928] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/site/phpinfo.php"] [unique_id "af4ap_khJTi30CBXmMkjDwAAAYY"]
[Sat May 09 01:17:28.350796 2026] [:error] [pid 51113:tid 51138] [client 13.208.252.11:36936] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/docs/phpinfo.php"] [unique_id "af4aqEQfs7sWtqkpQIeY2QAAANc"]
[Sat May 09 01:17:28.970709 2026] [:error] [pid 51008:tid 51049] [client 13.208.252.11:36956] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/phpinfo.php"] [unique_id "af4aqHB58C2Y1tgLtuLVJwAAAEA"]
[Sat May 09 01:17:29.549758 2026] [:error] [pid 61317:tid 61338] [client 13.208.252.11:36974] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/administrator/phpinfo.php"] [unique_id "af4aqc-fFk_CedOCOYsGmQAAAVI"]
[Sat May 09 01:17:30.131798 2026] [:error] [pid 61317:tid 61335] [client 13.208.252.11:36990] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/core/phpinfo.php"] [unique_id "af4aqs-fFk_CedOCOYsGnQAAAU8"]
[Sat May 09 01:17:30.709099 2026] [:error] [pid 61317:tid 61344] [client 13.208.252.11:37012] [client 13.208.252.11] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/includes/phpinfo.php"] [unique_id "af4aqs-fFk_CedOCOYsGnwAAAVg"]
[Sat May 09 02:22:34.265323 2026] [:error] [pid 61356:tid 61400] [client 3.101.153.28:44342] [client 3.101.153.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "af4p6ox3vpB8oWhUq2NCyQAAAcw"]
[Sat May 09 02:22:35.116207 2026] [:error] [pid 51009:tid 51082] [client 3.101.153.28:44392] [client 3.101.153.28] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env/.env.local/.env.production/.env.staging/.env.development/.env.test/.env.remote/.env.bak/.env.backup/.env.save/.env.old/.env.sample/.env.example/.env.dev/.env.prod/.env.stage/.env.ci/.env.docker/.env.live/.env.preprod/.env.uat/.env.dist/.env.swp/.env~/.env1/.env2/.env_copy/.env.txt/.env.json/.env.yaml/.env.yml/app/.env/apps/.env/api/.env/web/.env/site/.env/public/.env/admin/.env/backend/.env/server/.env/frontend/.env/src/.env/core/.env/core/app/.env/config/.env/private/.env/application/.env/bootstrap/.env/database/.env/storage/.env/var/www/.env/var/www/html/.env/current/.env/release/.env/releases/.env/shared/.env/deploy/.env/build/.env/dist/.env/public_html/.env/htdocs/.env/www/.env/html/.env/live/.env/prod/.env/dev/.env/staging/.env/opt/.env/laravel/.env/symfony/.env/wordpress/.env/wp/.env/cms/.env/drupal/.env/joomla/.env/magento/.env/shopify/.env/prestashop/.env/codeigniter/.env/cakephp/.env/zend/.env/yii/.env/laravel5/.env/v1/.env/v2/.env/v3/.env/api/v1/.env/api/v2/.env/rest/.env/graphql/.env/gateway/.env/microservice/.env/service/.env/api/v3/.env/api/dev/.env/api/staging/.env/vendor/.env/lib/.env/resources/.env/assets/.env/uploads/.env/internal/.env/tools/.env/scripts/.env/bin/.env/sbin/.env/local/.env/portal/.env/dashboard/.env/panel/.env/crm/.env/erp/.env/shop/.env/store/.env/saas/.env/client/.env/project/.env/admin-panel/.env/control-panel/.env/user-panel/.env/node/.env/express/.env/next/.env/nuxt/.env/nest/.env/react/.env/vue/.env/angular/.env/svelte/.env/vite/.env/backup/.env/backups/.env/old/.env/tmp/.env/temp/.env/lab/.env/cronlab/.env/cron/.env/en/.env/administrator/.env/psnlink/.env/exapi/.env/sitemaps/.env/.env.backup1/.env.backup2/logs/.env/cache/.env/mailer/.env/mail/.env/email/.env/smtp/.env/mailing/.env/notifications/.env/notify/.env/sender/.env/campaign/.env/newsletter/.env/ses/.env/sendgrid/.env/sparkpost/.env/postmark/.env/mailgun/.env/mandrill/.env/mailjet/.env/brevo/.env/transactional/.env/bulk/.env/aws/.env/azure/.env/gcp/.env/cloud/.env/infrastructure/.env/docker/.env/k8s/.env/kubernetes/.env/terraform/.env/ansible/.env/.git/.env/ci/.env/cd/.env/jenkins/.env/gitlab/.env/github/.env/actions/.env/circleci/.env/travis/.env/buildkite/.env/mysql/.env/postgres/.env/mongodb/.env/redis/.env/elasticsearch/.env/rabbitmq/.env/kafka/.env/queue/.env/worker/.env/job/.env/test/.env/qa/.env/preview/.env/beta/.env/uat/.env/stage/.env/development/.env/production/.env/config/app/.env"] [unique_id "af4p6-B0GbUWhxgzX9WljwAAAIY"]
[Sat May 09 02:22:36.738268 2026] [:error] [pid 61356:tid 61392] [client 3.101.153.28:44430] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/pi.php"] [unique_id "af4p7Ix3vpB8oWhUq2NC6QAAAcQ"]
[Sat May 09 02:22:37.393204 2026] [:error] [pid 61317:tid 61322] [client 3.101.153.28:44470] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/pinfo.php"] [unique_id "af4p7c-fFk_CedOCOYsbVAAAAUI"]
[Sat May 09 02:22:38.053846 2026] [:error] [pid 61355:tid 61367] [client 3.101.153.28:44508] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/test.php"] [unique_id "af4p7vkhJTi30CBXmMlYhwAAAYY"]
[Sat May 09 02:22:38.716642 2026] [:error] [pid 61355:tid 61368] [client 3.101.153.28:44532] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/phpinfo"] [unique_id "af4p7vkhJTi30CBXmMlYjwAAAYc"]
[Sat May 09 02:22:39.369653 2026] [:error] [pid 61317:tid 61332] [client 3.101.153.28:44574] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/p.php"] [unique_id "af4p78-fFk_CedOCOYsbVQAAAUw"]
[Sat May 09 02:22:40.023755 2026] [:error] [pid 51008:tid 51053] [client 3.101.153.28:44610] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/debug.php"] [unique_id "af4p8HB58C2Y1tgLtuLn7AAAAEQ"]
[Sat May 09 02:22:40.673039 2026] [:error] [pid 61317:tid 61344] [client 3.101.153.28:44658] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin/phpinfo.php"] [unique_id "af4p8M-fFk_CedOCOYsbVwAAAVg"]
[Sat May 09 02:22:41.329099 2026] [:error] [pid 51007:tid 51042] [client 3.101.153.28:42524] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/test/phpinfo.php"] [unique_id "af4p8VMagSGstWKyzzUk8AAAABQ"]
[Sat May 09 02:22:41.985386 2026] [:error] [pid 61356:tid 61402] [client 3.101.153.28:42550] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/dev/phpinfo.php"] [unique_id "af4p8Yx3vpB8oWhUq2NC9QAAAc4"]
[Sat May 09 02:22:42.645814 2026] [:error] [pid 51007:tid 51036] [client 3.101.153.28:42600] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/old/phpinfo.php"] [unique_id "af4p8lMagSGstWKyzzUk9gAAAA4"]
[Sat May 09 02:22:43.303002 2026] [:error] [pid 34318:tid 34330] [client 3.101.153.28:42632] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tmp/phpinfo.php"] [unique_id "af4p88r3guirgJiKhzAMZwAAAQo"]
[Sat May 09 02:22:43.978358 2026] [:error] [pid 51008:tid 51064] [client 3.101.153.28:42680] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/public/phpinfo.php"] [unique_id "af4p83B58C2Y1tgLtuLn9AAAAE8"]
[Sat May 09 02:22:44.630391 2026] [:error] [pid 51008:tid 51052] [client 3.101.153.28:42728] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/info"] [unique_id "af4p9HB58C2Y1tgLtuLn9QAAAEM"]
[Sat May 09 02:22:45.278472 2026] [:error] [pid 61356:tid 61398] [client 3.101.153.28:42762] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/php-info.php"] [unique_id "af4p9Yx3vpB8oWhUq2NC_gAAAco"]
[Sat May 09 02:22:45.934587 2026] [:error] [pid 51007:tid 51046] [client 3.101.153.28:42806] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/phpversion.php"] [unique_id "af4p9VMagSGstWKyzzUk_wAAABg"]
[Sat May 09 02:22:46.593574 2026] [:error] [pid 61355:tid 61383] [client 3.101.153.28:42848] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/_phpinfo.php"] [unique_id "af4p9vkhJTi30CBXmMlYnQAAAZY"]
[Sat May 09 02:22:47.250058 2026] [:error] [pid 51009:tid 51097] [client 3.101.153.28:42892] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/old_phpinfo.php"] [unique_id "af4p9-B0GbUWhxgzX9WlqAAAAJU"]
[Sat May 09 02:22:47.899836 2026] [:error] [pid 51008:tid 51066] [client 3.101.153.28:42930] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/server-info.php"] [unique_id "af4p93B58C2Y1tgLtuLn-AAAAFE"]
[Sat May 09 02:22:48.557595 2026] [:error] [pid 51007:tid 51029] [client 3.101.153.28:42976] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/server-status.php"] [unique_id "af4p-FMagSGstWKyzzUlBAAAAAc"]
[Sat May 09 02:22:49.214533 2026] [:error] [pid 51009:tid 51085] [client 3.101.153.28:43022] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/_profiler/phpinfo"] [unique_id "af4p-eB0GbUWhxgzX9WlrAAAAIk"]
[Sat May 09 02:22:49.868540 2026] [:error] [pid 34318:tid 34322] [client 3.101.153.28:43084] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/_environment"] [unique_id "af4p-cr3guirgJiKhzAMcQAAAQI"]
[Sat May 09 02:22:50.515389 2026] [:error] [pid 51009:tid 51094] [client 3.101.153.28:43108] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/webroot/index.php/_environment"] [unique_id "af4p-uB0GbUWhxgzX9WlrwAAAJI"]
[Sat May 09 02:22:51.165209 2026] [:error] [pid 61356:tid 61398] [client 3.101.153.28:49052] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/mail/phpinfo.php"] [unique_id "af4p-4x3vpB8oWhUq2NDCwAAAco"]
[Sat May 09 02:22:51.820881 2026] [:error] [pid 61356:tid 61403] [client 3.101.153.28:49102] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/cpanel/phpinfo.php"] [unique_id "af4p-4x3vpB8oWhUq2NDEAAAAc8"]
[Sat May 09 02:22:52.478232 2026] [:error] [pid 51008:tid 51055] [client 3.101.153.28:49134] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/hosting/phpinfo.php"] [unique_id "af4p_HB58C2Y1tgLtuLn_QAAAEY"]
[Sat May 09 02:22:53.138050 2026] [:error] [pid 34318:tid 34321] [client 3.101.153.28:49178] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/webmail/phpinfo.php"] [unique_id "af4p_cr3guirgJiKhzAMdgAAAQE"]
[Sat May 09 02:22:53.797893 2026] [:error] [pid 51007:tid 51033] [client 3.101.153.28:49224] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/smtp/phpinfo.php"] [unique_id "af4p_VMagSGstWKyzzUlDQAAAAs"]
[Sat May 09 02:22:54.447884 2026] [:error] [pid 51113:tid 51116] [client 3.101.153.28:49256] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/phpinfo.php.bak"] [unique_id "af4p_kQfs7sWtqkpQIehegAAAME"]
[Sat May 09 02:22:55.101743 2026] [:error] [pid 51113:tid 51135] [client 3.101.153.28:49294] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/phpinfo.php.old"] [unique_id "af4p_0Qfs7sWtqkpQIehfwAAANQ"]
[Sat May 09 02:22:55.757712 2026] [:error] [pid 51009:tid 51087] [client 3.101.153.28:49326] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/phpinfo.php~"] [unique_id "af4p_-B0GbUWhxgzX9WltwAAAIs"]
[Sat May 09 02:22:56.412054 2026] [:error] [pid 51009:tid 51085] [client 3.101.153.28:49374] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/info.php.bak"] [unique_id "af4qAOB0GbUWhxgzX9WluwAAAIk"]
[Sat May 09 02:22:57.070583 2026] [:error] [pid 61356:tid 61388] [client 3.101.153.28:49408] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/phpinfo.php.save"] [unique_id "af4qAYx3vpB8oWhUq2NDGAAAAcA"]
[Sat May 09 02:22:57.726252 2026] [:error] [pid 61355:tid 61377] [client 3.101.153.28:49454] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/staging/phpinfo.php"] [unique_id "af4qAfkhJTi30CBXmMlYsQAAAZA"]
[Sat May 09 02:22:58.374470 2026] [:error] [pid 61355:tid 61372] [client 3.101.153.28:49490] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/beta/phpinfo.php"] [unique_id "af4qAvkhJTi30CBXmMlYtQAAAYs"]
[Sat May 09 02:22:59.028027 2026] [:error] [pid 61355:tid 61363] [client 3.101.153.28:49528] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/uat/phpinfo.php"] [unique_id "af4qA_khJTi30CBXmMlYuAAAAYI"]
[Sat May 09 02:22:59.682167 2026] [:error] [pid 51009:tid 51083] [client 3.101.153.28:49586] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/qa/phpinfo.php"] [unique_id "af4qA-B0GbUWhxgzX9WlxgAAAIc"]
[Sat May 09 02:23:00.343527 2026] [:error] [pid 61355:tid 61381] [client 3.101.153.28:49630] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/preview/phpinfo.php"] [unique_id "af4qBPkhJTi30CBXmMlYvAAAAZQ"]
[Sat May 09 02:23:00.999052 2026] [:error] [pid 61355:tid 61364] [client 3.101.153.28:49246] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/www/phpinfo.php"] [unique_id "af4qBPkhJTi30CBXmMlYwAAAAYM"]
[Sat May 09 02:23:01.652884 2026] [:error] [pid 61355:tid 61377] [client 3.101.153.28:49310] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/htdocs/phpinfo.php"] [unique_id "af4qBfkhJTi30CBXmMlYxAAAAZA"]
[Sat May 09 02:23:02.312544 2026] [:error] [pid 61355:tid 61368] [client 3.101.153.28:49354] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/public_html/phpinfo.php"] [unique_id "af4qBvkhJTi30CBXmMlYygAAAYc"]
[Sat May 09 02:23:02.969314 2026] [:error] [pid 61356:tid 61399] [client 3.101.153.28:49380] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/site/phpinfo.php"] [unique_id "af4qBox3vpB8oWhUq2NDIgAAAcs"]
[Sat May 09 02:23:03.620977 2026] [:error] [pid 61356:tid 61394] [client 3.101.153.28:49398] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/docs/phpinfo.php"] [unique_id "af4qB4x3vpB8oWhUq2NDJwAAAcY"]
[Sat May 09 02:23:04.276066 2026] [:error] [pid 61355:tid 61373] [client 3.101.153.28:49420] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wp-admin/phpinfo.php"] [unique_id "af4qCPkhJTi30CBXmMlYzAAAAYw"]
[Sat May 09 02:23:04.928121 2026] [:error] [pid 51009:tid 51098] [client 3.101.153.28:49450] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/administrator/phpinfo.php"] [unique_id "af4qCOB0GbUWhxgzX9Wl0QAAAJY"]
[Sat May 09 02:23:05.589010 2026] [:error] [pid 34318:tid 34333] [client 3.101.153.28:49470] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/core/phpinfo.php"] [unique_id "af4qCcr3guirgJiKhzAMfwAAAQ0"]
[Sat May 09 02:23:06.237665 2026] [:error] [pid 61356:tid 61405] [client 3.101.153.28:49488] [client 3.101.153.28] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/includes/phpinfo.php"] [unique_id "af4qCox3vpB8oWhUq2NDLgAAAdE"]
[Sat May 09 04:03:39.430516 2026] [:error] [pid 9293:tid 9314] [client 13.208.252.11:42634] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "af5Bm5R__qEzV5O6Z2OIDgAAANE"]
[Sat May 09 04:03:40.194387 2026] [:error] [pid 9293:tid 9299] [client 13.208.252.11:42664] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env"] [unique_id "af5BnJR__qEzV5O6Z2OIFAAAAMI"]
[Sat May 09 04:03:40.777047 2026] [:error] [pid 9187:tid 9269] [client 13.208.252.11:42724] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "af5BnBC7An6gkXsRsaG6MwAAAJA"]
[Sat May 09 04:03:41.359787 2026] [:error] [pid 9663:tid 9672] [client 13.208.252.11:42758] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.production"] [unique_id "af5BnZcWIu01SCxbjwuqngAAAQY"]
[Sat May 09 04:03:41.947576 2026] [:error] [pid 9920:tid 9935] [client 13.208.252.11:42806] [client 13.208.252.11] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.staging"] [unique_id "af5BnUxitGYhlzgZb5Y4eAAAAc0"]
[Sat May 09 10:20:20.412915 2026] [:error] [pid 9293:tid 9316] [client 20.151.175.120:60803] [client 20.151.175.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wk/index.php"] [unique_id "af6Z5JR__qEzV5O6Z2M8VAAAANM"]
[Sat May 09 10:20:21.241330 2026] [:error] [pid 9760:tid 9768] [client 20.151.175.120:22098] [client 20.151.175.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wk/index.php"] [unique_id "af6Z5WIkCp-C_fh0s7IlLQAAAUI"]
[Sat May 09 10:20:22.074478 2026] [:error] [pid 9293:tid 9318] [client 20.151.175.120:60830] [client 20.151.175.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wk/index.php"] [unique_id "af6Z5pR__qEzV5O6Z2M8cwAAANU"]
[Sat May 09 10:20:22.901994 2026] [:error] [pid 9663:tid 9669] [client 20.151.175.120:60819] [client 20.151.175.120] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/wk/index.php"] [unique_id "af6Z5pcWIu01SCxbjwsAdgAAAQM"]
[Sat May 09 11:41:59.899539 2026] [:error] [pid 9920:tid 9937] [client 172.212.190.20:6787] [client 172.212.190.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "af6tB0xitGYhlzgZb5ayjQAAAc8"]
[Sat May 09 11:42:00.666028 2026] [:error] [pid 9186:tid 9239] [client 172.212.190.20:43397] [client 172.212.190.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "af6tCBW4eFOEw1mKOgKySwAAAE0"]
[Sat May 09 11:42:02.593985 2026] [:error] [pid 9184:tid 9202] [client 172.212.190.20:53344] [client 172.212.190.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "af6tCojfODqb_i0Fm99_ZgAAAAU"]
[Sat May 09 11:42:03.343113 2026] [:error] [pid 9920:tid 9933] [client 172.212.190.20:46988] [client 172.212.190.20] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "af6tC0xitGYhlzgZb5aylAAAAcs"]
[Sat May 09 17:04:51.905029 2026] [:error] [pid 9187:tid 9262] [client 34.176.250.253:58970] [client 34.176.250.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.docker"] [unique_id "af74sxC7An6gkXsRsaG7LwAAAIk"]
[Sat May 09 17:04:51.926774 2026] [:error] [pid 9187:tid 9270] [client 34.176.250.253:58982] [client 34.176.250.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/app/.env.local"] [unique_id "af74sxC7An6gkXsRsaG7MAAAAJE"]
[Sat May 09 17:04:51.963204 2026] [:error] [pid 9187:tid 9274] [client 34.176.250.253:58998] [client 34.176.250.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env"] [unique_id "af74sxC7An6gkXsRsaG7MQAAAJU"]
[Sat May 09 17:04:52.096002 2026] [:error] [pid 9187:tid 9265] [client 34.176.250.253:59014] [client 34.176.250.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.dev"] [unique_id "af74tBC7An6gkXsRsaG7MgAAAIw"]
[Sat May 09 17:04:52.213948 2026] [:error] [pid 9663:tid 9688] [client 34.176.250.253:59024] [client 34.176.250.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "af74tJcWIu01SCxbjwtFRAAAARY"]
[Sat May 09 17:04:52.214932 2026] [:error] [pid 9663:tid 9671] [client 34.176.250.253:59026] [client 34.176.250.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/admin/.env"] [unique_id "af74tJcWIu01SCxbjwtFRQAAAQU"]
[Sat May 09 17:04:52.218884 2026] [:error] [pid 9187:tid 9268] [client 34.176.250.253:59036] [client 34.176.250.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.dev.local"] [unique_id "af74tBC7An6gkXsRsaG7MwAAAI8"]
[Sat May 09 17:04:52.323607 2026] [:error] [pid 9833:tid 9856] [client 34.176.250.253:59046] [client 34.176.250.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/api/.env"] [unique_id "af74tCM9JmxIS0KGZUCIbAAAAZI"]
[Sat May 09 17:04:52.516884 2026] [:error] [pid 9833:tid 9852] [client 34.176.250.253:59060] [client 34.176.250.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/app/.env"] [unique_id "af74tCM9JmxIS0KGZUCIbQAAAY4"]
[Sat May 09 17:04:52.585185 2026] [:error] [pid 9833:tid 9860] [client 34.176.250.253:59064] [client 34.176.250.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.development.local"] [unique_id "af74tCM9JmxIS0KGZUCIbgAAAZY"]
[Sun May 10 22:56:18.872593 2026] [:error] [pid 16038:tid 16092] [client 34.154.54.22:32794] [client 34.154.54.22] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "agCckk4hf5Tcsfa2scJlYQAAAZg"]
[Sun May 10 23:03:44.004906 2026] [:error] [pid 37030:tid 37048] [client 34.50.62.65:34910] [client 34.50.62.65] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "agCeUJrBzfXWwKkDkdbDRwAAANA"]
[Sun May 10 23:16:07.339662 2026] [:error] [pid 16096:tid 16115] [client 35.221.145.4:58552] [client 35.221.145.4] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "agChN68wyxcrT50p9kvq_gAAAE4"]
[Sun May 10 23:38:34.944727 2026] [:error] [pid 37030:tid 37046] [client 34.175.119.253:33144] [client 34.175.119.253] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "agCmeprBzfXWwKkDkdbKXQAAAM4"]
[Mon May 11 19:19:16.651748 2026] [:error] [pid 4645:tid 4658] [client 176.65.139.168:58786] [client 176.65.139.168] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "measureyourcause.measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "agG7NHy4dxn8-Cx5vOWtjAAAAEo"]
[Mon May 11 19:30:30.165807 2026] [:error] [pid 58750:tid 58762] [client 34.65.211.236:45318] [client 34.65.211.236] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "agG91jBVaNG3wJtPBU-qzwAAAUo"]
[Tue May 12 04:31:43.621797 2026] [:error] [pid 55559:tid 55629] [client 34.32.102.245:45424] [client 34.32.102.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/app/.env.local"] [unique_id "agI8r9j0hVMLJAOI_fwyzwAAAQs"]
[Tue May 12 04:31:43.625578 2026] [:error] [pid 55559:tid 55637] [client 34.32.102.245:45438] [client 34.32.102.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env"] [unique_id "agI8r9j0hVMLJAOI_fwy0AAAARE"]
[Tue May 12 04:31:43.674169 2026] [:error] [pid 55559:tid 55638] [client 34.32.102.245:45448] [client 34.32.102.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.development.local"] [unique_id "agI8r9j0hVMLJAOI_fwy0QAAARI"]
[Tue May 12 04:31:43.756347 2026] [:error] [pid 40061:tid 40068] [client 34.32.102.245:45454] [client 34.32.102.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.dev"] [unique_id "agI8r7ycIKt8hxHMBYt3AQAAAMU"]
[Tue May 12 04:31:43.886586 2026] [:error] [pid 40061:tid 40074] [client 34.32.102.245:45460] [client 34.32.102.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.local"] [unique_id "agI8r7ycIKt8hxHMBYt3AwAAAMs"]
[Tue May 12 04:31:43.914317 2026] [:error] [pid 55559:tid 55632] [client 34.32.102.245:45494] [client 34.32.102.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.docker"] [unique_id "agI8r9j0hVMLJAOI_fwy0wAAAQ0"]
[Tue May 12 04:31:43.914595 2026] [:error] [pid 55559:tid 55634] [client 34.32.102.245:45478] [client 34.32.102.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin/.env"] [unique_id "agI8r9j0hVMLJAOI_fwy1AAAAQ8"]
[Tue May 12 04:31:43.917511 2026] [:error] [pid 40061:tid 40070] [client 34.32.102.245:45472] [client 34.32.102.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.env.dev.local"] [unique_id "agI8r7ycIKt8hxHMBYt3BAAAAMc"]
[Tue May 12 04:31:43.930067 2026] [:error] [pid 40061:tid 40087] [client 34.32.102.245:45500] [client 34.32.102.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/app/.env"] [unique_id "agI8r7ycIKt8hxHMBYt3BQAAANg"]
[Tue May 12 04:31:43.935610 2026] [:error] [pid 40061:tid 40064] [client 34.32.102.245:45508] [client 34.32.102.245] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.env" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/api/.env"] [unique_id "agI8r7ycIKt8hxHMBYt3BgAAAME"]
[Wed May 20 12:01:57.813702 2026] [:error] [pid 41364:tid 41372] [client 103.215.74.60:37966] [client 103.215.74.60] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||www.measureyourcause.measureyourbrand.com.au|F|2"] [data "Multipart parsing error: Multipart: No boundaries found in payload."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/"] [unique_id "ag0yNRKTmyvxtNXrN-h1zwAAAIY"]
[Wed May 20 12:01:57.813813 2026] [:error] [pid 41364:tid 41372] [client 103.215.74.60:37966] [client 103.215.74.60] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 1, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||www.measureyourcause.measureyourbrand.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/"] [unique_id "ag0yNRKTmyvxtNXrN-h1zwAAAIY"]
[Wed May 20 12:01:58.156642 2026] [:error] [pid 41364:tid 41375] [client 103.215.74.60:37966] [client 103.215.74.60] ModSecurity: Warning. Match of "eq 0" against "REQBODY_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "27"] [id "210230"] [rev "2"] [msg "COMODO WAF: The request body could not be parsed. Possibility of an impedance mismatch attack. This is not a false positive.||www.measureyourcause.measureyourbrand.com.au|F|2"] [data "Multipart parsing error: Multipart: No boundaries found in payload."] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/"] [unique_id "ag0yNhKTmyvxtNXrN-h10AAAAIk"]
[Wed May 20 12:01:58.156726 2026] [:error] [pid 41364:tid 41375] [client 103.215.74.60:37966] [client 103.215.74.60] ModSecurity: Access denied with code 403 (phase 2). Match of "eq 0" against "MULTIPART_STRICT_ERROR" required. [file "/usr/local/apache/modsecurity-cwaf/rules/12_HTTP_Protocol.conf"] [line "30"] [id "210240"] [rev "4"] [msg "COMODO WAF: Multipart request body failed strict validation: PE 1, BQ 0, BW 0, DB 1, DA 0, HF 0, LF 0, SM , IQ 0, IH 0, FLE 0||www.measureyourcause.measureyourbrand.com.au|F|2"] [severity "CRITICAL"] [tag "CWAF"] [tag "Protocol"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/"] [unique_id "ag0yNhKTmyvxtNXrN-h10AAAAIk"]
[Wed May 20 14:20:35.170731 2026] [:error] [pid 41364:tid 41390] [client 74.249.157.90:8809] [client 74.249.157.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "ag1SsxKTmyvxtNXrN-iR_gAAAJg"]
[Wed May 20 14:20:35.927419 2026] [:error] [pid 44059:tid 44073] [client 74.249.157.90:22827] [client 74.249.157.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "ag1SsxfFs-oSOOcyjyzLwwAAAQw"]
[Wed May 20 14:20:36.692102 2026] [:error] [pid 41278:tid 41324] [client 74.249.157.90:8873] [client 74.249.157.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "ag1StPWiNKASEfiGdwaV0AAAAE8"]
[Wed May 20 14:20:37.499216 2026] [:error] [pid 44059:tid 44083] [client 74.249.157.90:8851] [client 74.249.157.90] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/about.php"] [unique_id "ag1StRfFs-oSOOcyjyzLxgAAARY"]
[Thu May 21 17:04:26.265634 2026] [autoindex:error] [pid 49879:tid 49940] [client 20.196.211.226:4312] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive
[Thu May 21 17:04:29.659553 2026] [:error] [pid 49879:tid 49939] [client 20.196.211.226:4312] [client 20.196.211.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "ag7KnYVqYDjFSyG2gFpTYwAAAFM"]
[Thu May 21 17:04:30.380143 2026] [:error] [pid 49884:tid 49964] [client 20.196.211.226:4322] [client 20.196.211.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "ag7Knq5MPpsTNNHWS6ilbQAAAJE"]
[Thu May 21 17:04:31.034922 2026] [:error] [pid 49982:tid 49998] [client 20.196.211.226:5051] [client 20.196.211.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "ag7Kn2FwIDa5Tf8O4bbO-QAAAM4"]
[Thu May 21 17:04:31.850503 2026] [:error] [pid 49884:tid 49954] [client 20.196.211.226:5045] [client 20.196.211.226] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "ag7Kn65MPpsTNNHWS6ilcAAAAIc"]
[Thu May 21 23:31:06.092794 2026] [autoindex:error] [pid 9189:tid 9242] [client 20.205.110.7:15361] AH01276: Cannot serve directory /home/measureyourbrand/public_html/measureyourcause.com.au/.well-known/: No matching DirectoryIndex (index.php) found, and server-generated directory index forbidden by Options directive
[Thu May 21 23:31:08.573657 2026] [:error] [pid 9189:tid 9225] [client 20.205.110.7:15361] [client 20.205.110.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "ag8lPJvTDh1NbYizKVzWfQAAAgY"]
[Thu May 21 23:31:09.049462 2026] [:error] [pid 49879:tid 49937] [client 20.205.110.7:15419] [client 20.205.110.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "ag8lPYVqYDjFSyG2gFpyPwAAAFE"]
[Thu May 21 23:31:09.550836 2026] [:error] [pid 9157:tid 9166] [client 20.205.110.7:15373] [client 20.205.110.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "ag8lPcGfHcLNqE8m88Kj3QAAAYc"]
[Thu May 21 23:31:10.118289 2026] [:error] [pid 49982:tid 49995] [client 20.205.110.7:11039] [client 20.205.110.7] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/class-t.api.php"] [unique_id "ag8lPmFwIDa5Tf8O4bYjXwAAAMs"]
[Mon May 25 02:27:55.666878 2026] [:error] [pid 11282:tid 11356] [client 170.64.238.42:48366] [client 170.64.238.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "ahNDK-0bPyN3C7HZ1R_pjgAAANA"]
[Mon May 25 02:27:55.810809 2026] [:error] [pid 11281:tid 11328] [client 170.64.238.42:51390] [client 170.64.238.42] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "/.git/" at REQUEST_URI. [file "/usr/local/apache/modsecurity-cwaf/rules/02_Global_Generic.conf"] [line "117"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/.git/config"] [unique_id "ahNDK5KmC9taWvA91j6__gAAAI8"]
[Mon May 25 02:27:56.174963 2026] [:error] [pid 11280:tid 11294] [client 170.64.238.42:48436] [client 170.64.238.42] ModSecurity: Warning. Match of "pmFromFile userdata_wl_content_type" against "TX:0" required. [file "/usr/local/apache/modsecurity-cwaf/rules/10_HTTP_HTTP.conf"] [line "17"] [id "210710"] [rev "5"] [msg "COMODO WAF: Request content type is not allowed by policy. Please update file userdata_wl_content_type.||www.measureyourcause.measureyourbrand.com.au|F|2"] [data "TX:0=text/plain"] [severity "CRITICAL"] [tag "CWAF"] [tag "HTTP"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"] [unique_id "ahNDLIRn5s7laoSxy1RMVgAAAEk"]
[Mon May 25 02:27:56.259708 2026] [:error] [pid 11282:tid 11345] [client 170.64.238.42:48400] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/plugins/jQuery-File-Upload/server/php/"] [unique_id "ahNDLO0bPyN3C7HZ1R_pkwAAAMU"]
[Mon May 25 02:27:56.274352 2026] [:error] [pid 11282:tid 11340] [client 170.64.238.42:48396] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahNDLO0bPyN3C7HZ1R_plAAAAMA"]
[Mon May 25 02:27:56.274352 2026] [:error] [pid 11280:tid 11304] [client 170.64.238.42:48384] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/plugins/jQuery-File-Upload/server/php/"] [unique_id "ahNDLIRn5s7laoSxy1RMWAAAAFM"]
[Mon May 25 02:27:56.274382 2026] [:error] [pid 11368:tid 11371] [client 170.64.238.42:48420] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/asset_admin/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahNDLIfq_sTmmtTKm1WKYQAAAQE"]
[Mon May 25 02:27:56.280050 2026] [:error] [pid 11280:tid 11296] [client 170.64.238.42:48436] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/app-assets/data/jquery-file-upload/server/php/"] [unique_id "ahNDLIRn5s7laoSxy1RMWQAAAEs"]
[Mon May 25 02:27:56.280568 2026] [:error] [pid 11282:tid 11355] [client 170.64.238.42:48426] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/js/frontend/jquery-file-upload/server/php/"] [unique_id "ahNDLO0bPyN3C7HZ1R_plQAAAM8"]
[Mon May 25 02:27:56.285995 2026] [:error] [pid 11368:tid 11372] [client 170.64.238.42:48404] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fileupload/server/php/"] [unique_id "ahNDLIfq_sTmmtTKm1WKYgAAAQI"]
[Mon May 25 02:27:56.286893 2026] [:error] [pid 11280:tid 11301] [client 170.64.238.42:48382] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/jquery-file-upload/server/php/"] [unique_id "ahNDLIRn5s7laoSxy1RMWgAAAFA"]
[Mon May 25 02:27:56.288648 2026] [:error] [pid 11368:tid 11393] [client 170.64.238.42:48446] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/asset_admin/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahNDLIfq_sTmmtTKm1WKYwAAARc"]
[Mon May 25 02:27:56.289028 2026] [:error] [pid 11368:tid 11380] [client 170.64.238.42:48452] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahNDLIfq_sTmmtTKm1WKZAAAAQo"]
[Mon May 25 02:27:56.319453 2026] [:error] [pid 11282:tid 11342] [client 170.64.238.42:48464] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/plugins/jQuery-File-Upload/server/php/"] [unique_id "ahNDLO0bPyN3C7HZ1R_plgAAAMI"]
[Mon May 25 02:27:56.322016 2026] [:error] [pid 15835:tid 15845] [client 170.64.238.42:48472] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/app-assets/data/jquery-file-upload/server/php/"] [unique_id "ahNDLGWbknYlUM9P0qNYYQAAAAg"]
[Mon May 25 02:27:56.323556 2026] [:error] [pid 15835:tid 15844] [client 170.64.238.42:48476] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/js/frontend/jquery-file-upload/server/php/"] [unique_id "ahNDLGWbknYlUM9P0qNYYgAAAAc"]
[Mon May 25 02:27:56.325739 2026] [:error] [pid 15835:tid 15839] [client 170.64.238.42:48486] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/upload/server/php/"] [unique_id "ahNDLGWbknYlUM9P0qNYYwAAAAI"]
[Mon May 25 02:27:56.327156 2026] [:error] [pid 15835:tid 15858] [client 170.64.238.42:48490] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fileupload/server/php/"] [unique_id "ahNDLGWbknYlUM9P0qNYZAAAABU"]
[Mon May 25 02:27:56.328978 2026] [:error] [pid 15835:tid 15846] [client 170.64.238.42:48498] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/jquery-file-upload/server/php/"] [unique_id "ahNDLGWbknYlUM9P0qNYZQAAAAk"]
[Mon May 25 02:27:56.329543 2026] [:error] [pid 11282:tid 11351] [client 170.64.238.42:48524] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahNDLO0bPyN3C7HZ1R_plwAAAMs"]
[Mon May 25 02:27:56.330412 2026] [:error] [pid 15835:tid 15848] [client 170.64.238.42:48514] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/asset_admin/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahNDLGWbknYlUM9P0qNYZgAAAAs"]
[Mon May 25 02:27:56.346216 2026] [:error] [pid 11368:tid 11390] [client 170.64.238.42:48542] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin/jquery-file-upload/server/php/"] [unique_id "ahNDLIfq_sTmmtTKm1WKZQAAARQ"]
[Mon May 25 02:27:56.346780 2026] [:error] [pid 11368:tid 11385] [client 170.64.238.42:48526] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin/galerie/server/php/"] [unique_id "ahNDLIfq_sTmmtTKm1WKZgAAAQ8"]
[Mon May 25 02:27:56.349655 2026] [:error] [pid 11368:tid 11382] [client 170.64.238.42:48544] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahNDLIfq_sTmmtTKm1WKZwAAAQw"]
[Mon May 25 02:27:56.356381 2026] [:error] [pid 11368:tid 11379] [client 170.64.238.42:48560] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin/server/php/"] [unique_id "ahNDLIfq_sTmmtTKm1WKaAAAAQk"]
[Mon May 25 02:27:56.364558 2026] [:error] [pid 11368:tid 11391] [client 170.64.238.42:48574] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/app-assets/data/jquery-file-upload/server/php/"] [unique_id "ahNDLIfq_sTmmtTKm1WKaQAAARU"]
[Mon May 25 02:27:56.371977 2026] [:error] [pid 11282:tid 11360] [client 170.64.238.42:48604] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/fileupload/server/php/"] [unique_id "ahNDLO0bPyN3C7HZ1R_pmAAAANQ"]
[Mon May 25 02:27:56.373883 2026] [:error] [pid 11368:tid 11377] [client 170.64.238.42:48600] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/upload/server/php/"] [unique_id "ahNDLIfq_sTmmtTKm1WKagAAAQc"]
[Mon May 25 02:27:56.374688 2026] [:error] [pid 11368:tid 11387] [client 170.64.238.42:48584] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/js/frontend/jquery-file-upload/server/php/"] [unique_id "ahNDLIfq_sTmmtTKm1WKawAAARE"]
[Mon May 25 02:27:56.375122 2026] [:error] [pid 11368:tid 11370] [client 170.64.238.42:48610] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/jquery-file-upload/server/php/"] [unique_id "ahNDLIfq_sTmmtTKm1WKbAAAAQA"]
[Mon May 25 02:27:56.389893 2026] [:error] [pid 11368:tid 11387] [client 170.64.238.42:48618] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin/jquery-file-upload/server/php/"] [unique_id "ahNDLIfq_sTmmtTKm1WKbQAAARE"]
[Mon May 25 02:27:56.391109 2026] [:error] [pid 11368:tid 11388] [client 170.64.238.42:48620] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin/galerie/server/php/"] [unique_id "ahNDLIfq_sTmmtTKm1WKbgAAARI"]
[Mon May 25 02:27:56.392059 2026] [:error] [pid 11282:tid 11344] [client 170.64.238.42:48634] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahNDLO0bPyN3C7HZ1R_pmQAAAMQ"]
[Mon May 25 02:27:56.397505 2026] [:error] [pid 11281:tid 11323] [client 170.64.238.42:48644] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin/server/php/"] [unique_id "ahNDLJKmC9taWvA91j7AAAAAAIo"]
[Mon May 25 02:27:56.415803 2026] [:error] [pid 11282:tid 11362] [client 170.64.238.42:48646] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/upload/server/php/"] [unique_id "ahNDLO0bPyN3C7HZ1R_pmgAAANY"]
[Mon May 25 02:27:56.425843 2026] [:error] [pid 11282:tid 11352] [client 170.64.238.42:48660] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/public/server/php/"] [unique_id "ahNDLO0bPyN3C7HZ1R_pmwAAAMw"]
[Mon May 25 02:27:56.432413 2026] [:error] [pid 15835:tid 15859] [client 170.64.238.42:48678] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin/blueimp-jQuery-File-Upload/server/php/"] [unique_id "ahNDLGWbknYlUM9P0qNYZwAAABY"]
[Mon May 25 02:27:56.433536 2026] [:error] [pid 11280:tid 11305] [client 170.64.238.42:48670] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin/galerie/server/php/"] [unique_id "ahNDLIRn5s7laoSxy1RMWwAAAFQ"]
[Mon May 25 02:27:56.436942 2026] [:error] [pid 11280:tid 11285] [client 170.64.238.42:48666] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin/jquery-file-upload/server/php/"] [unique_id "ahNDLIRn5s7laoSxy1RMXAAAAEA"]
[Mon May 25 02:27:56.448091 2026] [:error] [pid 11280:tid 11293] [client 170.64.238.42:48690] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/global/plugins/server/php/"] [unique_id "ahNDLIRn5s7laoSxy1RMXQAAAEg"]
[Mon May 25 02:27:56.450620 2026] [:error] [pid 11368:tid 11389] [client 170.64.238.42:48698] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/libraries/jsupload/server/php/"] [unique_id "ahNDLIfq_sTmmtTKm1WKbwAAARM"]
[Mon May 25 02:27:56.464448 2026] [:error] [pid 15835:tid 15853] [client 170.64.238.42:48700] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin/server/php/"] [unique_id "ahNDLGWbknYlUM9P0qNYaAAAABA"]
[Mon May 25 02:27:56.466630 2026] [:error] [pid 11368:tid 11375] [client 170.64.238.42:48710] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/public/server/php/"] [unique_id "ahNDLIfq_sTmmtTKm1WKcAAAAQU"]
[Mon May 25 02:27:56.477583 2026] [:error] [pid 11280:tid 11290] [client 170.64.238.42:48716] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/plugins/js/server/php/"] [unique_id "ahNDLIRn5s7laoSxy1RMXgAAAEU"]
[Mon May 25 02:27:56.477991 2026] [:error] [pid 11368:tid 11394] [client 170.64.238.42:48730] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/global/plugins/jquery-file-upload/server/php/"] [unique_id "ahNDLIfq_sTmmtTKm1WKcQAAARg"]
[Mon May 25 02:27:56.488616 2026] [:error] [pid 11280:tid 11309] [client 170.64.238.42:48736] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/global/plugins/server/php/"] [unique_id "ahNDLIRn5s7laoSxy1RMXwAAAFg"]
[Mon May 25 02:27:56.494019 2026] [:error] [pid 11368:tid 11376] [client 170.64.238.42:48748] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/libraries/jsupload/server/php/"] [unique_id "ahNDLIfq_sTmmtTKm1WKcgAAAQY"]
[Mon May 25 02:27:56.496830 2026] [:error] [pid 11368:tid 11383] [client 170.64.238.42:48758] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahNDLIfq_sTmmtTKm1WKcwAAAQ0"]
[Mon May 25 02:27:56.508846 2026] [:error] [pid 11282:tid 11354] [client 170.64.238.42:48768] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/public/server/php/"] [unique_id "ahNDLO0bPyN3C7HZ1R_pnQAAAM4"]
[Mon May 25 02:27:56.519803 2026] [:error] [pid 11368:tid 11386] [client 170.64.238.42:48784] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/global/plugins/jquery-file-upload/server/php/"] [unique_id "ahNDLIfq_sTmmtTKm1WKdAAAARA"]
[Mon May 25 02:27:56.521587 2026] [:error] [pid 11282:tid 11349] [client 170.64.238.42:48792] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/plugins/js/server/php/"] [unique_id "ahNDLO0bPyN3C7HZ1R_pngAAAMk"]
[Mon May 25 02:27:56.530199 2026] [:error] [pid 11282:tid 11359] [client 170.64.238.42:48798] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/global/plugins/server/php/"] [unique_id "ahNDLO0bPyN3C7HZ1R_pnwAAANM"]
[Mon May 25 02:27:56.536828 2026] [:error] [pid 11282:tid 11349] [client 170.64.238.42:48812] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/libraries/jsupload/server/php/"] [unique_id "ahNDLO0bPyN3C7HZ1R_poAAAAMk"]
[Mon May 25 02:27:56.538699 2026] [:error] [pid 11281:tid 11314] [client 170.64.238.42:48828] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahNDLJKmC9taWvA91j7AAQAAAIE"]
[Mon May 25 02:27:56.559745 2026] [:error] [pid 11281:tid 11337] [client 170.64.238.42:48840] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahNDLJKmC9taWvA91j7AAgAAAJg"]
[Mon May 25 02:27:56.561558 2026] [:error] [pid 11281:tid 11320] [client 170.64.238.42:48844] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/global/plugins/jquery-file-upload/server/php/"] [unique_id "ahNDLJKmC9taWvA91j7AAwAAAIc"]
[Mon May 25 02:27:56.562469 2026] [:error] [pid 11281:tid 11315] [client 170.64.238.42:48848] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/plugins/js/server/php/"] [unique_id "ahNDLJKmC9taWvA91j7ABAAAAII"]
[Mon May 25 02:27:56.568454 2026] [:error] [pid 11281:tid 11334] [client 170.64.238.42:48862] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/plugins/server/php/"] [unique_id "ahNDLJKmC9taWvA91j7ABQAAAJU"]
[Mon May 25 02:27:56.579847 2026] [:error] [pid 11368:tid 11381] [client 170.64.238.42:48874] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahNDLIfq_sTmmtTKm1WKdQAAAQs"]
[Mon May 25 02:27:56.601829 2026] [:error] [pid 11368:tid 11392] [client 170.64.238.42:48890] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahNDLIfq_sTmmtTKm1WKdgAAARY"]
[Mon May 25 02:27:56.609344 2026] [:error] [pid 11280:tid 11292] [client 170.64.238.42:48906] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/plugins/server/php/"] [unique_id "ahNDLIRn5s7laoSxy1RMYAAAAEc"]
[Mon May 25 02:27:56.642902 2026] [:error] [pid 11280:tid 11303] [client 170.64.238.42:48918] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/plugins/jquery-file-upload/server/php/"] [unique_id "ahNDLIRn5s7laoSxy1RMYQAAAFI"]
[Mon May 25 02:27:56.651471 2026] [:error] [pid 11280:tid 11286] [client 170.64.238.42:48932] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/plugins/server/php/"] [unique_id "ahNDLIRn5s7laoSxy1RMYgAAAEE"]
[Mon May 25 02:27:56.756886 2026] [:error] [pid 11280:tid 11297] [client 170.64.238.42:48936] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/js/kcfinder/upload.php"] [unique_id "ahNDLIRn5s7laoSxy1RMYwAAAEw"]
[Mon May 25 02:27:56.763299 2026] [:error] [pid 11368:tid 11393] [client 170.64.238.42:48952] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/asset/kcfinder/upload.php"] [unique_id "ahNDLIfq_sTmmtTKm1WKdwAAARc"]
[Mon May 25 02:27:56.764410 2026] [:error] [pid 11280:tid 11287] [client 170.64.238.42:48966] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahNDLIRn5s7laoSxy1RMZAAAAEI"]
[Mon May 25 02:27:56.765801 2026] [:error] [pid 11368:tid 11380] [client 170.64.238.42:48982] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/js/server/php/"] [unique_id "ahNDLIfq_sTmmtTKm1WKeAAAAQo"]
[Mon May 25 02:27:56.774709 2026] [:error] [pid 11280:tid 11288] [client 170.64.238.42:48992] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/plugins/server/php/"] [unique_id "ahNDLIRn5s7laoSxy1RMZQAAAEM"]
[Mon May 25 02:27:56.786878 2026] [:error] [pid 11280:tid 11306] [client 170.64.238.42:49000] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/asset/server/php/"] [unique_id "ahNDLIRn5s7laoSxy1RMZgAAAFU"]
[Mon May 25 02:27:56.794841 2026] [:error] [pid 11280:tid 11295] [client 170.64.238.42:49016] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/js/jquery-file-upload/server/php/"] [unique_id "ahNDLIRn5s7laoSxy1RMZwAAAEo"]
[Mon May 25 02:27:56.797801 2026] [:error] [pid 11280:tid 11307] [client 170.64.238.42:49034] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/jquery-file-upload/server/php/"] [unique_id "ahNDLIRn5s7laoSxy1RMaQAAAFY"]
[Mon May 25 02:27:56.798446 2026] [:error] [pid 11280:tid 11291] [client 170.64.238.42:49018] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/js/kcfinder/upload.php"] [unique_id "ahNDLIRn5s7laoSxy1RMaAAAAEY"]
[Mon May 25 02:27:56.805053 2026] [:error] [pid 11368:tid 11390] [client 170.64.238.42:49042] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahNDLIfq_sTmmtTKm1WKeQAAARQ"]
[Mon May 25 02:27:56.805534 2026] [:error] [pid 11280:tid 11300] [client 170.64.238.42:49038] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/asset/kcfinder/upload.php"] [unique_id "ahNDLIRn5s7laoSxy1RMagAAAE8"]
[Mon May 25 02:27:56.806948 2026] [:error] [pid 11280:tid 11302] [client 170.64.238.42:49046] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/js/server/php/"] [unique_id "ahNDLIRn5s7laoSxy1RMawAAAFE"]
[Mon May 25 02:27:56.809999 2026] [:error] [pid 15835:tid 15842] [client 170.64.238.42:49048] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/server/php/"] [unique_id "ahNDLGWbknYlUM9P0qNYaQAAAAU"]
[Mon May 25 02:27:56.816950 2026] [:error] [pid 15835:tid 15855] [client 170.64.238.42:49060] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/plugins/server/php/"] [unique_id "ahNDLGWbknYlUM9P0qNYagAAABI"]
[Mon May 25 02:27:56.827338 2026] [:error] [pid 11280:tid 11294] [client 170.64.238.42:49064] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/asset/server/php/"] [unique_id "ahNDLIRn5s7laoSxy1RMbAAAAEk"]
[Mon May 25 02:27:56.835745 2026] [:error] [pid 11281:tid 11327] [client 170.64.238.42:49068] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/kcfinder/upload.php"] [unique_id "ahNDLJKmC9taWvA91j7ABgAAAI4"]
[Mon May 25 02:27:56.836343 2026] [:error] [pid 11280:tid 11308] [client 170.64.238.42:49082] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/js/jquery-file-upload/server/php/"] [unique_id "ahNDLIRn5s7laoSxy1RMbQAAAFc"]
[Mon May 25 02:27:56.838763 2026] [:error] [pid 11368:tid 11382] [client 170.64.238.42:49086] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/jquery-file-upload/server/php/"] [unique_id "ahNDLIfq_sTmmtTKm1WKegAAAQw"]
[Mon May 25 02:27:56.839460 2026] [:error] [pid 11368:tid 11385] [client 170.64.238.42:49084] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahNDLIfq_sTmmtTKm1WKewAAAQ8"]
[Mon May 25 02:27:56.840155 2026] [:error] [pid 11368:tid 11379] [client 170.64.238.42:49094] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/plugin/server/php/"] [unique_id "ahNDLIfq_sTmmtTKm1WKfAAAAQk"]
[Mon May 25 02:27:56.841381 2026] [:error] [pid 11368:tid 11391] [client 170.64.238.42:49104] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/js/kcfinder/upload.php"] [unique_id "ahNDLIfq_sTmmtTKm1WKfQAAARU"]
[Mon May 25 02:27:56.846773 2026] [:error] [pid 11368:tid 11377] [client 170.64.238.42:49110] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahNDLIfq_sTmmtTKm1WKfgAAAQc"]
[Mon May 25 02:27:56.847589 2026] [:error] [pid 11368:tid 11378] [client 170.64.238.42:49112] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/asset/kcfinder/upload.php"] [unique_id "ahNDLIfq_sTmmtTKm1WKfwAAAQg"]
[Mon May 25 02:27:56.851772 2026] [:error] [pid 11368:tid 11387] [client 170.64.238.42:49130] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/server/php/"] [unique_id "ahNDLIfq_sTmmtTKm1WKgQAAARE"]
[Mon May 25 02:27:56.852326 2026] [:error] [pid 11368:tid 11370] [client 170.64.238.42:49128] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/js/server/php/"] [unique_id "ahNDLIfq_sTmmtTKm1WKgAAAAQA"]
[Mon May 25 02:27:56.856939 2026] [:error] [pid 11280:tid 11299] [client 170.64.238.42:49146] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/plugins/server/php/"] [unique_id "ahNDLIRn5s7laoSxy1RMbgAAAE4"]
[Mon May 25 02:27:56.870012 2026] [:error] [pid 11368:tid 11388] [client 170.64.238.42:49160] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/asset/server/php/"] [unique_id "ahNDLIfq_sTmmtTKm1WKggAAARI"]
[Mon May 25 02:27:56.877139 2026] [:error] [pid 11368:tid 11389] [client 170.64.238.42:49166] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/kcfinder/upload.php"] [unique_id "ahNDLIfq_sTmmtTKm1WKhAAAARM"]
[Mon May 25 02:27:56.878046 2026] [:error] [pid 11280:tid 11289] [client 170.64.238.42:49172] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/js/jquery-file-upload/server/php/"] [unique_id "ahNDLIRn5s7laoSxy1RMcAAAAEQ"]
[Mon May 25 02:27:56.881281 2026] [:error] [pid 11280:tid 11304] [client 170.64.238.42:49188] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/jquery-file-upload/server/php/"] [unique_id "ahNDLIRn5s7laoSxy1RMcQAAAFM"]
[Mon May 25 02:27:56.882218 2026] [:error] [pid 11280:tid 11296] [client 170.64.238.42:49190] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahNDLIRn5s7laoSxy1RMcgAAAEs"]
[Mon May 25 02:27:56.883116 2026] [:error] [pid 11280:tid 11301] [client 170.64.238.42:49204] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/plugin/server/php/"] [unique_id "ahNDLIRn5s7laoSxy1RMcwAAAFA"]
[Mon May 25 02:27:56.894799 2026] [:error] [pid 11280:tid 11285] [client 170.64.238.42:49210] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/server/php/"] [unique_id "ahNDLIRn5s7laoSxy1RMdAAAAEA"]
[Mon May 25 02:27:56.919705 2026] [:error] [pid 11281:tid 11333] [client 170.64.238.42:49226] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/kcfinder/upload.php"] [unique_id "ahNDLJKmC9taWvA91j7ABwAAAJQ"]
[Mon May 25 02:27:56.925679 2026] [:error] [pid 11280:tid 11293] [client 170.64.238.42:49254] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/plugin/server/php/"] [unique_id "ahNDLIRn5s7laoSxy1RMdQAAAEg"]
[Mon May 25 02:27:56.926944 2026] [:error] [pid 11281:tid 11316] [client 170.64.238.42:49240] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/plugins/js/jquery-file-upload/server/php/"] [unique_id "ahNDLJKmC9taWvA91j7ACAAAAIM"]
[Mon May 25 02:27:56.965132 2026] [:error] [pid 11280:tid 11309] [client 170.64.238.42:49260] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "ahNDLIRn5s7laoSxy1RMdgAAAFg"]
[Mon May 25 02:27:56.971639 2026] [:error] [pid 11280:tid 11292] [client 170.64.238.42:49264] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/plugins/kcfinder/upload.php"] [unique_id "ahNDLIRn5s7laoSxy1RMdwAAAEc"]
[Mon May 25 02:27:56.980103 2026] [:error] [pid 11281:tid 11330] [client 170.64.238.42:49272] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ckeditor/kcfinder/upload.php"] [unique_id "ahNDLJKmC9taWvA91j7ACQAAAJE"]
[Mon May 25 02:27:56.997057 2026] [:error] [pid 11281:tid 11325] [client 170.64.238.42:49276] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/js/tinymce/kcfinder/upload.php"] [unique_id "ahNDLJKmC9taWvA91j7ACgAAAIw"]
[Mon May 25 02:27:57.007955 2026] [:error] [pid 11280:tid 11303] [client 170.64.238.42:49298] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "ahNDLYRn5s7laoSxy1RMeAAAAFI"]
[Mon May 25 02:27:57.008481 2026] [:error] [pid 11281:tid 11332] [client 170.64.238.42:49290] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/components/kcfinder/upload.php"] [unique_id "ahNDLZKmC9taWvA91j7ACwAAAJM"]
[Mon May 25 02:27:57.013929 2026] [:error] [pid 11281:tid 11335] [client 170.64.238.42:49326] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/core/scripts/kcfinder/upload.php"] [unique_id "ahNDLZKmC9taWvA91j7ADAAAAJY"]
[Mon May 25 02:27:57.013988 2026] [:error] [pid 11281:tid 11324] [client 170.64.238.42:49314] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/plugins/kcfinder/upload.php"] [unique_id "ahNDLZKmC9taWvA91j7ADQAAAIs"]
[Mon May 25 02:27:57.020080 2026] [:error] [pid 11280:tid 11286] [client 170.64.238.42:49328] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahNDLYRn5s7laoSxy1RMeQAAAEE"]
[Mon May 25 02:27:57.020857 2026] [:error] [pid 11281:tid 11313] [client 170.64.238.42:49336] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lib/kcfinder/upload.php"] [unique_id "ahNDLZKmC9taWvA91j7ADgAAAIA"]
[Mon May 25 02:27:57.021992 2026] [:error] [pid 11281:tid 11318] [client 170.64.238.42:49340] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ckeditor/kcfinder/upload.php"] [unique_id "ahNDLZKmC9taWvA91j7ADwAAAIU"]
[Mon May 25 02:27:57.024711 2026] [:error] [pid 11280:tid 11297] [client 170.64.238.42:49346] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/plugins/kcfinder/upload.php"] [unique_id "ahNDLYRn5s7laoSxy1RMegAAAEw"]
[Mon May 25 02:27:57.029967 2026] [:error] [pid 11280:tid 11287] [client 170.64.238.42:49352] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahNDLYRn5s7laoSxy1RMewAAAEI"]
[Mon May 25 02:27:57.040024 2026] [:error] [pid 11280:tid 11288] [client 170.64.238.42:49366] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/js/tinymce/kcfinder/upload.php"] [unique_id "ahNDLYRn5s7laoSxy1RMfAAAAEM"]
[Mon May 25 02:27:57.050865 2026] [:error] [pid 11281:tid 11326] [client 170.64.238.42:49376] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/js/kcfinder/upload.php"] [unique_id "ahNDLZKmC9taWvA91j7AEAAAAI0"]
[Mon May 25 02:27:57.051707 2026] [:error] [pid 11280:tid 11306] [client 170.64.238.42:49386] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/components/kcfinder/upload.php"] [unique_id "ahNDLYRn5s7laoSxy1RMfQAAAFU"]
[Mon May 25 02:27:57.054977 2026] [:error] [pid 11280:tid 11295] [client 170.64.238.42:49390] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/core/scripts/wysiwyg/kcfinder/upload.php"] [unique_id "ahNDLYRn5s7laoSxy1RMfgAAAEo"]
[Mon May 25 02:27:57.056020 2026] [:error] [pid 15835:tid 15841] [client 170.64.238.42:49396] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/core/scripts/kcfinder/upload.php"] [unique_id "ahNDLWWbknYlUM9P0qNYawAAAAQ"]
[Mon May 25 02:27:57.056778 2026] [:error] [pid 15835:tid 15852] [client 170.64.238.42:49402] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/plugins/kcfinder/upload.php"] [unique_id "ahNDLWWbknYlUM9P0qNYbAAAAA8"]
[Mon May 25 02:27:57.061084 2026] [:error] [pid 15835:tid 15851] [client 170.64.238.42:49410] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahNDLWWbknYlUM9P0qNYbQAAAA4"]
[Mon May 25 02:27:57.062933 2026] [:error] [pid 11368:tid 11375] [client 170.64.238.42:49422] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lib/kcfinder/upload.php"] [unique_id "ahNDLYfq_sTmmtTKm1WKhgAAAQU"]
[Mon May 25 02:27:57.064007 2026] [:error] [pid 15835:tid 15854] [client 170.64.238.42:49436] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ckeditor/kcfinder/upload.php"] [unique_id "ahNDLWWbknYlUM9P0qNYbgAAABE"]
[Mon May 25 02:27:57.066711 2026] [:error] [pid 15835:tid 15837] [client 170.64.238.42:49446] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/plugins/kcfinder/upload.php"] [unique_id "ahNDLWWbknYlUM9P0qNYbwAAAAA"]
[Mon May 25 02:27:57.071855 2026] [:error] [pid 11368:tid 11394] [client 170.64.238.42:49450] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahNDLYfq_sTmmtTKm1WKhwAAARg"]
[Mon May 25 02:27:57.080532 2026] [:error] [pid 15835:tid 15861] [client 170.64.238.42:49462] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/js/tinymce/kcfinder/upload.php"] [unique_id "ahNDLWWbknYlUM9P0qNYcAAAABg"]
[Mon May 25 02:27:57.094551 2026] [:error] [pid 15835:tid 15843] [client 170.64.238.42:49466] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/components/kcfinder/upload.php"] [unique_id "ahNDLWWbknYlUM9P0qNYcQAAAAY"]
[Mon May 25 02:27:57.096718 2026] [:error] [pid 15835:tid 15838] [client 170.64.238.42:49474] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/core/scripts/wysiwyg/kcfinder/upload.php"] [unique_id "ahNDLWWbknYlUM9P0qNYcgAAAAE"]
[Mon May 25 02:27:57.097382 2026] [:error] [pid 15835:tid 15849] [client 170.64.238.42:49486] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/core/scripts/kcfinder/upload.php"] [unique_id "ahNDLWWbknYlUM9P0qNYcwAAAAw"]
[Mon May 25 02:27:57.103646 2026] [:error] [pid 11281:tid 11321] [client 170.64.238.42:49514] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lib/kcfinder/upload.php"] [unique_id "ahNDLZKmC9taWvA91j7AEQAAAIg"]
[Mon May 25 02:27:57.104480 2026] [:error] [pid 15835:tid 15857] [client 170.64.238.42:49502] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahNDLWWbknYlUM9P0qNYdAAAABQ"]
[Mon May 25 02:27:57.109728 2026] [:error] [pid 15835:tid 15843] [client 170.64.238.42:49518] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/plugins/kcfinder/upload.php"] [unique_id "ahNDLWWbknYlUM9P0qNYdQAAAAY"]
[Mon May 25 02:27:57.113310 2026] [:error] [pid 15835:tid 15850] [client 170.64.238.42:49532] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/kcfinder/upload.php"] [unique_id "ahNDLWWbknYlUM9P0qNYdgAAAA0"]
[Mon May 25 02:27:57.118190 2026] [:error] [pid 11281:tid 11317] [client 170.64.238.42:49542] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/libs/kcfinder/upload.php"] [unique_id "ahNDLZKmC9taWvA91j7AEgAAAIQ"]
[Mon May 25 02:27:57.137970 2026] [:error] [pid 11281:tid 11322] [client 170.64.238.42:49548] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/core/scripts/wysiwyg/kcfinder/upload.php"] [unique_id "ahNDLZKmC9taWvA91j7AEwAAAIk"]
[Mon May 25 02:27:57.160448 2026] [:error] [pid 11280:tid 11307] [client 170.64.238.42:49564] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/libs/kcfinder/upload.php"] [unique_id "ahNDLYRn5s7laoSxy1RMfwAAAFY"]
[Mon May 25 02:27:57.169136 2026] [:error] [pid 11281:tid 11319] [client 170.64.238.42:49580] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/jquery/kcfinder/upload.php"] [unique_id "ahNDLZKmC9taWvA91j7AFAAAAIY"]
[Mon May 25 02:27:57.190875 2026] [:error] [pid 11280:tid 11291] [client 170.64.238.42:49594] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/media/kcfinder/upload.php"] [unique_id "ahNDLYRn5s7laoSxy1RMgAAAAEY"]
[Mon May 25 02:27:57.194700 2026] [:error] [pid 11281:tid 11323] [client 170.64.238.42:49610] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin/kcfinder/upload.php"] [unique_id "ahNDLZKmC9taWvA91j7AFQAAAIo"]
[Mon May 25 02:27:57.197682 2026] [:error] [pid 11281:tid 11314] [client 170.64.238.42:49614] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/app/webroot/js/kcfinder/upload.php"] [unique_id "ahNDLZKmC9taWvA91j7AFgAAAIE"]
[Mon May 25 02:27:57.200403 2026] [:error] [pid 11280:tid 11300] [client 170.64.238.42:49616] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahNDLYRn5s7laoSxy1RMgQAAAE8"]
[Mon May 25 02:27:57.201314 2026] [:error] [pid 11281:tid 11337] [client 170.64.238.42:49628] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/libs/kcfinder/upload.php"] [unique_id "ahNDLZKmC9taWvA91j7AFwAAAJg"]
[Mon May 25 02:27:57.209352 2026] [:error] [pid 11281:tid 11320] [client 170.64.238.42:49642] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/jquery/kcfinder/upload.php"] [unique_id "ahNDLZKmC9taWvA91j7AGAAAAIc"]
[Mon May 25 02:27:57.210755 2026] [:error] [pid 11280:tid 11302] [client 170.64.238.42:49638] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin/ckeditor/kcfinder/upload.php"] [unique_id "ahNDLYRn5s7laoSxy1RMggAAAFE"]
[Mon May 25 02:27:57.232951 2026] [:error] [pid 11280:tid 11294] [client 170.64.238.42:49644] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/media/kcfinder/upload.php"] [unique_id "ahNDLYRn5s7laoSxy1RMgwAAAEk"]
[Mon May 25 02:27:57.238444 2026] [:error] [pid 11281:tid 11315] [client 170.64.238.42:49648] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin/kcfinder/upload.php"] [unique_id "ahNDLZKmC9taWvA91j7AGQAAAII"]
[Mon May 25 02:27:57.240724 2026] [:error] [pid 11281:tid 11334] [client 170.64.238.42:49654] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/app/webroot/js/kcfinder/upload.php"] [unique_id "ahNDLZKmC9taWvA91j7AGgAAAJU"]
[Mon May 25 02:27:57.241286 2026] [:error] [pid 11280:tid 11308] [client 170.64.238.42:49660] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahNDLYRn5s7laoSxy1RMhAAAAFc"]
[Mon May 25 02:27:57.248198 2026] [:error] [pid 11280:tid 11305] [client 170.64.238.42:49672] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/application/themes/admin/assets/js/kcfinder/upload.php"] [unique_id "ahNDLYRn5s7laoSxy1RMhQAAAFQ"]
[Mon May 25 02:27:57.250584 2026] [:error] [pid 11280:tid 11294] [client 170.64.238.42:49670] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/app/webroot/kcfinder/upload.php"] [unique_id "ahNDLYRn5s7laoSxy1RMhgAAAEk"]
[Mon May 25 02:27:57.251059 2026] [:error] [pid 15835:tid 15845] [client 170.64.238.42:49688] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/jquery/kcfinder/upload.php"] [unique_id "ahNDLWWbknYlUM9P0qNYdwAAAAg"]
[Mon May 25 02:27:57.253533 2026] [:error] [pid 15835:tid 15844] [client 170.64.238.42:49698] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin/ckeditor/kcfinder/upload.php"] [unique_id "ahNDLWWbknYlUM9P0qNYeAAAAAc"]
[Mon May 25 02:27:57.278180 2026] [:error] [pid 15835:tid 15839] [client 170.64.238.42:49704] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/media/kcfinder/upload.php"] [unique_id "ahNDLWWbknYlUM9P0qNYeQAAAAI"]
[Mon May 25 02:27:57.280377 2026] [:error] [pid 11280:tid 11304] [client 170.64.238.42:49708] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin/kcfinder/upload.php"] [unique_id "ahNDLYRn5s7laoSxy1RMhwAAAFM"]
[Mon May 25 02:27:57.282646 2026] [:error] [pid 15835:tid 15858] [client 170.64.238.42:49722] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin/ckeditor/plugins/kcfinder/upload.php"] [unique_id "ahNDLWWbknYlUM9P0qNYegAAABU"]
[Mon May 25 02:27:57.283305 2026] [:error] [pid 11280:tid 11296] [client 170.64.238.42:49718] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/app/webroot/js/kcfinder/upload.php"] [unique_id "ahNDLYRn5s7laoSxy1RMiAAAAEs"]
[Mon May 25 02:27:57.290590 2026] [:error] [pid 15835:tid 15846] [client 170.64.238.42:49728] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/application/themes/admin/assets/js/kcfinder/upload.php"] [unique_id "ahNDLWWbknYlUM9P0qNYewAAAAk"]
[Mon May 25 02:27:57.293381 2026] [:error] [pid 15835:tid 15848] [client 170.64.238.42:49738] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/app/webroot/kcfinder/upload.php"] [unique_id "ahNDLWWbknYlUM9P0qNYfAAAAAs"]
[Mon May 25 02:27:57.296095 2026] [:error] [pid 11280:tid 11301] [client 170.64.238.42:49744] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin/ckeditor/kcfinder/upload.php"] [unique_id "ahNDLYRn5s7laoSxy1RMiQAAAFA"]
[Mon May 25 02:27:57.333599 2026] [:error] [pid 11280:tid 11293] [client 170.64.238.42:49752] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/app/webroot/kcfinder/upload.php"] [unique_id "ahNDLYRn5s7laoSxy1RMigAAAEg"]
[Mon May 25 02:27:57.334196 2026] [:error] [pid 11280:tid 11285] [client 170.64.238.42:49748] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/application/themes/admin/assets/js/kcfinder/upload.php"] [unique_id "ahNDLYRn5s7laoSxy1RMiwAAAEA"]
[Mon May 25 02:27:57.429913 2026] [:error] [pid 11280:tid 11309] [client 170.64.238.42:49762] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/asset/filemanager/dialog.php"] [unique_id "ahNDLYRn5s7laoSxy1RMjAAAAFg"]
[Mon May 25 02:27:57.433966 2026] [:error] [pid 15835:tid 15859] [client 170.64.238.42:49778] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/plugins/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahNDLWWbknYlUM9P0qNYfgAAABY"]
[Mon May 25 02:27:57.438318 2026] [:error] [pid 15835:tid 15853] [client 170.64.238.42:49780] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin/filemanager/dialog.php"] [unique_id "ahNDLWWbknYlUM9P0qNYfwAAABA"]
[Mon May 25 02:27:57.450275 2026] [:error] [pid 15835:tid 15842] [client 170.64.238.42:49790] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin/js/kcfinder/upload.php"] [unique_id "ahNDLWWbknYlUM9P0qNYgAAAAAU"]
[Mon May 25 02:27:57.457877 2026] [:error] [pid 11280:tid 11303] [client 170.64.238.42:49794] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/scripts/filemanager/dialog.php"] [unique_id "ahNDLYRn5s7laoSxy1RMjQAAAFI"]
[Mon May 25 02:27:57.463579 2026] [:error] [pid 11281:tid 11327] [client 170.64.238.42:49806] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin/core/kcfinder/upload.php"] [unique_id "ahNDLZKmC9taWvA91j7AGwAAAI4"]
[Mon May 25 02:27:57.464683 2026] [:error] [pid 11281:tid 11333] [client 170.64.238.42:49820] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/plugins/filemanager/dialog.php"] [unique_id "ahNDLZKmC9taWvA91j7AHAAAAJQ"]
[Mon May 25 02:27:57.467586 2026] [:error] [pid 11368:tid 11383] [client 170.64.238.42:49828] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/phpformbuilder/plugins/filemanager/dialog.php"] [unique_id "ahNDLYfq_sTmmtTKm1WKiQAAAQ0"]
[Mon May 25 02:27:57.471828 2026] [:error] [pid 11280:tid 11286] [client 170.64.238.42:49832] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/asset/filemanager/dialog.php"] [unique_id "ahNDLYRn5s7laoSxy1RMjgAAAEE"]
[Mon May 25 02:27:57.476451 2026] [:error] [pid 11280:tid 11297] [client 170.64.238.42:49834] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/plugins/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahNDLYRn5s7laoSxy1RMjwAAAEw"]
[Mon May 25 02:27:57.479922 2026] [:error] [pid 11280:tid 11287] [client 170.64.238.42:49846] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/filemanager/dialog.php"] [unique_id "ahNDLYRn5s7laoSxy1RMkAAAAEI"]
[Mon May 25 02:27:57.480815 2026] [:error] [pid 11281:tid 11316] [client 170.64.238.42:49856] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin/filemanager/dialog.php"] [unique_id "ahNDLZKmC9taWvA91j7AHQAAAIM"]
[Mon May 25 02:27:57.483383 2026] [:error] [pid 11281:tid 11330] [client 170.64.238.42:49858] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/scripts/filemanager/dialog.php"] [unique_id "ahNDLZKmC9taWvA91j7AHgAAAJE"]
[Mon May 25 02:27:57.492500 2026] [:error] [pid 11281:tid 11325] [client 170.64.238.42:49860] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin/js/kcfinder/upload.php"] [unique_id "ahNDLZKmC9taWvA91j7AHwAAAIw"]
[Mon May 25 02:27:57.497754 2026] [:error] [pid 11281:tid 11332] [client 170.64.238.42:49876] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/filemanager/dialog.php"] [unique_id "ahNDLZKmC9taWvA91j7AIQAAAJM"]
[Mon May 25 02:27:57.500086 2026] [:error] [pid 11281:tid 11335] [client 170.64.238.42:49888] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/scripts/filemanager/dialog.php"] [unique_id "ahNDLZKmC9taWvA91j7AIgAAAJY"]
[Mon May 25 02:27:57.501081 2026] [:error] [pid 11281:tid 11324] [client 170.64.238.42:49896] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahNDLZKmC9taWvA91j7AIwAAAIs"]
[Mon May 25 02:27:57.505409 2026] [:error] [pid 11281:tid 11313] [client 170.64.238.42:49898] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin/core/kcfinder/upload.php"] [unique_id "ahNDLZKmC9taWvA91j7AJAAAAIA"]
[Mon May 25 02:27:57.507994 2026] [:error] [pid 11280:tid 11288] [client 170.64.238.42:49914] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/plugins/filemanager/dialog.php"] [unique_id "ahNDLYRn5s7laoSxy1RMkQAAAEM"]
[Mon May 25 02:27:57.510449 2026] [:error] [pid 11368:tid 11386] [client 170.64.238.42:49930] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/phpformbuilder/plugins/filemanager/dialog.php"] [unique_id "ahNDLYfq_sTmmtTKm1WKigAAARA"]
[Mon May 25 02:27:57.512709 2026] [:error] [pid 11368:tid 11381] [client 170.64.238.42:49940] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/asset/filemanager/dialog.php"] [unique_id "ahNDLYfq_sTmmtTKm1WKiwAAAQs"]
[Mon May 25 02:27:57.516637 2026] [:error] [pid 11281:tid 11318] [client 170.64.238.42:49956] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/plugins/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahNDLZKmC9taWvA91j7AJQAAAIU"]
[Mon May 25 02:27:57.521376 2026] [:error] [pid 11280:tid 11306] [client 170.64.238.42:49958] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/filemanager/dialog.php"] [unique_id "ahNDLYRn5s7laoSxy1RMkgAAAFU"]
[Mon May 25 02:27:57.523461 2026] [:error] [pid 15835:tid 15855] [client 170.64.238.42:49972] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin/filemanager/dialog.php"] [unique_id "ahNDLWWbknYlUM9P0qNYgQAAABI"]
[Mon May 25 02:27:57.524064 2026] [:error] [pid 15835:tid 15860] [client 170.64.238.42:49988] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/scripts/filemanager/dialog.php"] [unique_id "ahNDLWWbknYlUM9P0qNYggAAABc"]
[Mon May 25 02:27:57.535429 2026] [:error] [pid 15835:tid 15840] [client 170.64.238.42:50000] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin/js/kcfinder/upload.php"] [unique_id "ahNDLWWbknYlUM9P0qNYgwAAAAM"]
[Mon May 25 02:27:57.540181 2026] [:error] [pid 11281:tid 11326] [client 170.64.238.42:50002] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/filemanager/dialog.php"] [unique_id "ahNDLZKmC9taWvA91j7AJgAAAI0"]
[Mon May 25 02:27:57.541851 2026] [:error] [pid 11281:tid 11336] [client 170.64.238.42:50018] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/scripts/filemanager/dialog.php"] [unique_id "ahNDLZKmC9taWvA91j7AJwAAAJc"]
[Mon May 25 02:27:57.542529 2026] [:error] [pid 15835:tid 15841] [client 170.64.238.42:50026] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahNDLWWbknYlUM9P0qNYhAAAAAQ"]
[Mon May 25 02:27:57.547716 2026] [:error] [pid 15835:tid 15851] [client 170.64.238.42:50038] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin/core/kcfinder/upload.php"] [unique_id "ahNDLWWbknYlUM9P0qNYhQAAAA4"]
[Mon May 25 02:27:57.550760 2026] [:error] [pid 15835:tid 15854] [client 170.64.238.42:50052] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/plugins/filemanager/dialog.php"] [unique_id "ahNDLWWbknYlUM9P0qNYhgAAABE"]
[Mon May 25 02:27:57.552783 2026] [:error] [pid 15835:tid 15837] [client 170.64.238.42:50062] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/phpformbuilder/plugins/filemanager/dialog.php"] [unique_id "ahNDLWWbknYlUM9P0qNYhwAAAAA"]
[Mon May 25 02:27:57.564657 2026] [:error] [pid 15835:tid 15861] [client 170.64.238.42:50072] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/filemanager/dialog.php"] [unique_id "ahNDLWWbknYlUM9P0qNYiAAAABg"]
[Mon May 25 02:27:57.565788 2026] [:error] [pid 15835:tid 15847] [client 170.64.238.42:50082] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/scripts/filemanager/dialog.php"] [unique_id "ahNDLWWbknYlUM9P0qNYiQAAAAo"]
[Mon May 25 02:27:57.582087 2026] [:error] [pid 11282:tid 11364] [client 170.64.238.42:50090] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/filemanager/dialog.php"] [unique_id "ahNDLe0bPyN3C7HZ1R_poQAAANg"]
[Mon May 25 02:27:57.585325 2026] [:error] [pid 15835:tid 15838] [client 170.64.238.42:50094] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahNDLWWbknYlUM9P0qNYigAAAAE"]
[Mon May 25 02:27:57.622130 2026] [:error] [pid 11281:tid 11321] [client 170.64.238.42:50104] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/js/tinymce4/plugins/filemanager/dialog.php"] [unique_id "ahNDLZKmC9taWvA91j7AKAAAAIg"]
[Mon May 25 02:27:57.654628 2026] [:error] [pid 15835:tid 15849] [client 170.64.238.42:50110] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahNDLWWbknYlUM9P0qNYiwAAAAw"]
[Mon May 25 02:27:57.654999 2026] [:error] [pid 11282:tid 11341] [client 170.64.238.42:50112] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tinymce/filemanager/dialog.php"] [unique_id "ahNDLe0bPyN3C7HZ1R_powAAAME"]
[Mon May 25 02:27:57.665527 2026] [:error] [pid 15835:tid 15857] [client 170.64.238.42:50128] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/js/tinymce4/plugins/filemanager/dialog.php"] [unique_id "ahNDLWWbknYlUM9P0qNYjAAAABQ"]
[Mon May 25 02:27:57.665876 2026] [:error] [pid 11281:tid 11317] [client 170.64.238.42:50144] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/admin/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahNDLZKmC9taWvA91j7AKQAAAIQ"]
[Mon May 25 02:27:57.698287 2026] [:error] [pid 15835:tid 15843] [client 170.64.238.42:50160] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tinymce/filemanager/dialog.php"] [unique_id "ahNDLWWbknYlUM9P0qNYjQAAAAY"]
[Mon May 25 02:27:57.698733 2026] [:error] [pid 11281:tid 11322] [client 170.64.238.42:50158] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahNDLZKmC9taWvA91j7AKgAAAIk"]
[Mon May 25 02:27:57.705162 2026] [:error] [pid 15835:tid 15845] [client 170.64.238.42:50170] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/admin/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahNDLWWbknYlUM9P0qNYjwAAAAg"]
[Mon May 25 02:27:57.705342 2026] [:error] [pid 15835:tid 15850] [client 170.64.238.42:50168] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/public/scripts/filemanager/dialog.php"] [unique_id "ahNDLWWbknYlUM9P0qNYjgAAAA0"]
[Mon May 25 02:27:57.705914 2026] [:error] [pid 15835:tid 15844] [client 170.64.238.42:50186] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/filemanager/filemanager/dialog.php"] [unique_id "ahNDLWWbknYlUM9P0qNYkAAAAAc"]
[Mon May 25 02:27:57.707203 2026] [:error] [pid 15835:tid 15839] [client 170.64.238.42:50202] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/js/tinymce4/plugins/filemanager/dialog.php"] [unique_id "ahNDLWWbknYlUM9P0qNYkQAAAAI"]
[Mon May 25 02:27:57.708749 2026] [:error] [pid 15835:tid 15858] [client 170.64.238.42:50218] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/admin/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahNDLWWbknYlUM9P0qNYkgAAABU"]
[Mon May 25 02:27:57.709836 2026] [:error] [pid 15835:tid 15846] [client 170.64.238.42:50234] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/media/filemanager/dialog.php"] [unique_id "ahNDLWWbknYlUM9P0qNYkwAAAAk"]
[Mon May 25 02:27:57.714402 2026] [:error] [pid 15835:tid 15848] [client 170.64.238.42:50238] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/cms/tinymce/filemanager/filemanager/dialog.php"] [unique_id "ahNDLWWbknYlUM9P0qNYlAAAAAs"]
[Mon May 25 02:27:57.726204 2026] [:error] [pid 15835:tid 15859] [client 170.64.238.42:50242] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/public/js/libraries/filemanager/dialog.php"] [unique_id "ahNDLWWbknYlUM9P0qNYlQAAABY"]
[Mon May 25 02:27:57.730028 2026] [:error] [pid 15835:tid 15853] [client 170.64.238.42:50252] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/public/filemanager/dialog.php"] [unique_id "ahNDLWWbknYlUM9P0qNYlgAAABA"]
[Mon May 25 02:27:57.740544 2026] [:error] [pid 15835:tid 15842] [client 170.64.238.42:50258] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tinymce/filemanager/dialog.php"] [unique_id "ahNDLWWbknYlUM9P0qNYlwAAAAU"]
[Mon May 25 02:27:57.742439 2026] [:error] [pid 15835:tid 15855] [client 170.64.238.42:50262] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahNDLWWbknYlUM9P0qNYmAAAABI"]
[Mon May 25 02:27:57.746296 2026] [:error] [pid 11281:tid 11328] [client 170.64.238.42:50266] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/admin/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahNDLZKmC9taWvA91j7AKwAAAI8"]
[Mon May 25 02:27:57.748446 2026] [:error] [pid 11281:tid 11331] [client 170.64.238.42:50294] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/filemanager/filemanager/dialog.php"] [unique_id "ahNDLZKmC9taWvA91j7ALAAAAJI"]
[Mon May 25 02:27:57.749771 2026] [:error] [pid 11281:tid 11319] [client 170.64.238.42:50280] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/public/scripts/filemanager/dialog.php"] [unique_id "ahNDLZKmC9taWvA91j7ALQAAAIY"]
[Mon May 25 02:27:57.752573 2026] [:error] [pid 15835:tid 15840] [client 170.64.238.42:50324] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/media/filemanager/dialog.php"] [unique_id "ahNDLWWbknYlUM9P0qNYmgAAAAM"]
[Mon May 25 02:27:57.752592 2026] [:error] [pid 15835:tid 15860] [client 170.64.238.42:50310] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/admin/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahNDLWWbknYlUM9P0qNYmQAAABc"]
[Mon May 25 02:27:57.757245 2026] [:error] [pid 15835:tid 15841] [client 170.64.238.42:50330] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/cms/tinymce/filemanager/filemanager/dialog.php"] [unique_id "ahNDLWWbknYlUM9P0qNYmwAAAAQ"]
[Mon May 25 02:27:57.768635 2026] [:error] [pid 11282:tid 11343] [client 170.64.238.42:50340] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/public/js/libraries/filemanager/dialog.php"] [unique_id "ahNDLe0bPyN3C7HZ1R_ppAAAAMM"]
[Mon May 25 02:27:57.769821 2026] [:error] [pid 11282:tid 11347] [client 170.64.238.42:50354] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/js/fileManager/filemanager/dialog.php"] [unique_id "ahNDLe0bPyN3C7HZ1R_ppQAAAMc"]
[Mon May 25 02:27:57.772299 2026] [:error] [pid 11282:tid 11357] [client 170.64.238.42:50358] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/public/filemanager/dialog.php"] [unique_id "ahNDLe0bPyN3C7HZ1R_ppgAAANE"]
[Mon May 25 02:27:57.787789 2026] [:error] [pid 11282:tid 11350] [client 170.64.238.42:50368] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/admin/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahNDLe0bPyN3C7HZ1R_ppwAAAMo"]
[Mon May 25 02:27:57.788709 2026] [:error] [pid 15835:tid 15851] [client 170.64.238.42:50374] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/filemanager/filemanager/dialog.php"] [unique_id "ahNDLWWbknYlUM9P0qNYnAAAAA4"]
[Mon May 25 02:27:57.793693 2026] [:error] [pid 15835:tid 15854] [client 170.64.238.42:50382] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/public/scripts/filemanager/dialog.php"] [unique_id "ahNDLWWbknYlUM9P0qNYnQAAABE"]
[Mon May 25 02:27:57.794854 2026] [:error] [pid 15835:tid 15837] [client 170.64.238.42:50398] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/media/filemanager/dialog.php"] [unique_id "ahNDLWWbknYlUM9P0qNYngAAAAA"]
[Mon May 25 02:27:57.798553 2026] [:error] [pid 15835:tid 15861] [client 170.64.238.42:50406] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/cms/tinymce/filemanager/filemanager/dialog.php"] [unique_id "ahNDLWWbknYlUM9P0qNYnwAAABg"]
[Mon May 25 02:27:57.809609 2026] [:error] [pid 15835:tid 15837] [client 170.64.238.42:50408] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/public/js/libraries/filemanager/dialog.php"] [unique_id "ahNDLWWbknYlUM9P0qNYoAAAAAA"]
[Mon May 25 02:27:57.810424 2026] [:error] [pid 15835:tid 15838] [client 170.64.238.42:50412] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/js/fileManager/filemanager/dialog.php"] [unique_id "ahNDLWWbknYlUM9P0qNYoQAAAAE"]
[Mon May 25 02:27:57.813014 2026] [:error] [pid 15835:tid 15849] [client 170.64.238.42:50418] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/public/filemanager/dialog.php"] [unique_id "ahNDLWWbknYlUM9P0qNYogAAAAw"]
[Mon May 25 02:27:57.851323 2026] [:error] [pid 11281:tid 11323] [client 170.64.238.42:50422] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lib/filemanager/dialog.php"] [unique_id "ahNDLZKmC9taWvA91j7ALgAAAIo"]
[Mon May 25 02:27:57.852304 2026] [:error] [pid 15835:tid 15857] [client 170.64.238.42:50428] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/js/fileManager/filemanager/dialog.php"] [unique_id "ahNDLWWbknYlUM9P0qNYowAAABQ"]
[Mon May 25 02:27:57.874936 2026] [:error] [pid 15835:tid 15843] [client 170.64.238.42:50444] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/resources/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahNDLWWbknYlUM9P0qNYpAAAAAY"]
[Mon May 25 02:27:57.893217 2026] [:error] [pid 15835:tid 15845] [client 170.64.238.42:50462] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lib/filemanager/dialog.php"] [unique_id "ahNDLWWbknYlUM9P0qNYpQAAAAg"]
[Mon May 25 02:27:57.893985 2026] [:error] [pid 15835:tid 15850] [client 170.64.238.42:50448] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/resources/plugins/tiny_mce/plugins/filemanager/dialog.php"] [unique_id "ahNDLWWbknYlUM9P0qNYpgAAAA0"]
[Mon May 25 02:27:57.912109 2026] [:error] [pid 15835:tid 15844] [client 170.64.238.42:50472] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin/events/lib/external/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahNDLWWbknYlUM9P0qNYpwAAAAc"]
[Mon May 25 02:27:57.916418 2026] [:error] [pid 15835:tid 15839] [client 170.64.238.42:50486] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/resources/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahNDLWWbknYlUM9P0qNYqAAAAAI"]
[Mon May 25 02:27:57.927843 2026] [:error] [pid 11281:tid 11314] [client 170.64.238.42:50494] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahNDLZKmC9taWvA91j7ALwAAAIE"]
[Mon May 25 02:27:57.934666 2026] [:error] [pid 11281:tid 11337] [client 170.64.238.42:50500] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/lib/filemanager/dialog.php"] [unique_id "ahNDLZKmC9taWvA91j7AMAAAAJg"]
[Mon May 25 02:27:57.936299 2026] [:error] [pid 15835:tid 15858] [client 170.64.238.42:50506] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/resources/plugins/tiny_mce/plugins/filemanager/dialog.php"] [unique_id "ahNDLWWbknYlUM9P0qNYqQAAABU"]
[Mon May 25 02:27:57.940709 2026] [:error] [pid 15835:tid 15846] [client 170.64.238.42:50522] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/editor/filemanager/dialog.php"] [unique_id "ahNDLWWbknYlUM9P0qNYqgAAAAk"]
[Mon May 25 02:27:57.953968 2026] [:error] [pid 15835:tid 15848] [client 170.64.238.42:50528] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin/events/lib/external/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahNDLWWbknYlUM9P0qNYqwAAAAs"]
[Mon May 25 02:27:57.958068 2026] [:error] [pid 15835:tid 15859] [client 170.64.238.42:50538] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/resources/js/tinymce/plugins/filemanager/dialog.php"] [unique_id "ahNDLWWbknYlUM9P0qNYrAAAABY"]
[Mon May 25 02:27:57.969722 2026] [:error] [pid 11281:tid 11315] [client 170.64.238.42:50546] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahNDLZKmC9taWvA91j7AMQAAAII"]
[Mon May 25 02:27:57.971292 2026] [:error] [pid 11281:tid 11334] [client 170.64.238.42:50548] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahNDLZKmC9taWvA91j7AMgAAAJU"]
[Mon May 25 02:27:57.977952 2026] [:error] [pid 15835:tid 15853] [client 170.64.238.42:50560] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/resources/plugins/tiny_mce/plugins/filemanager/dialog.php"] [unique_id "ahNDLWWbknYlUM9P0qNYrQAAABA"]
[Mon May 25 02:27:57.982192 2026] [:error] [pid 15835:tid 15842] [client 170.64.238.42:50572] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/editor/filemanager/dialog.php"] [unique_id "ahNDLWWbknYlUM9P0qNYrgAAAAU"]
[Mon May 25 02:27:57.993520 2026] [:error] [pid 11281:tid 11327] [client 170.64.238.42:50578] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin/events/lib/external/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahNDLZKmC9taWvA91j7AMwAAAI4"]
[Mon May 25 02:27:58.011268 2026] [:error] [pid 15835:tid 15855] [client 170.64.238.42:50590] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/assets/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahNDLmWbknYlUM9P0qNYrwAAABI"]
[Mon May 25 02:27:58.011922 2026] [:error] [pid 15835:tid 15840] [client 170.64.238.42:50592] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahNDLmWbknYlUM9P0qNYsAAAAAM"]
[Mon May 25 02:27:58.025143 2026] [:error] [pid 11281:tid 11333] [client 170.64.238.42:50598] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/editor/filemanager/dialog.php"] [unique_id "ahNDLpKmC9taWvA91j7ANAAAAJQ"]
[Mon May 25 02:27:58.054836 2026] [:error] [pid 11280:tid 11291] [client 170.64.238.42:50600] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahNDLoRn5s7laoSxy1RMlgAAAEY"]
[Mon May 25 02:27:58.182124 2026] [:error] [pid 11281:tid 11330] [client 170.64.238.42:50602] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/plugins/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahNDLpKmC9taWvA91j7ANQAAAJE"]
[Mon May 25 02:27:58.183095 2026] [:error] [pid 11281:tid 11325] [client 170.64.238.42:50610] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/cms/vendor/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahNDLpKmC9taWvA91j7ANgAAAIw"]
[Mon May 25 02:27:58.199593 2026] [:error] [pid 11281:tid 11332] [client 170.64.238.42:50626] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahNDLpKmC9taWvA91j7ANwAAAJM"]
[Mon May 25 02:27:58.206699 2026] [:error] [pid 11281:tid 11335] [client 170.64.238.42:50640] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/arquivos/javascript/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahNDLpKmC9taWvA91j7AOAAAAJY"]
[Mon May 25 02:27:58.226394 2026] [:error] [pid 11280:tid 11302] [client 170.64.238.42:50650] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/plugins/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahNDLoRn5s7laoSxy1RMlwAAAFE"]
[Mon May 25 02:27:58.227121 2026] [:error] [pid 11280:tid 11299] [client 170.64.238.42:50660] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/cms/vendor/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahNDLoRn5s7laoSxy1RMmAAAAE4"]
[Mon May 25 02:27:58.242012 2026] [:error] [pid 11281:tid 11313] [client 170.64.238.42:50670] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahNDLpKmC9taWvA91j7AOgAAAIA"]
[Mon May 25 02:27:58.247446 2026] [:error] [pid 11281:tid 11318] [client 170.64.238.42:50684] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/arquivos/javascript/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahNDLpKmC9taWvA91j7AOwAAAIU"]
[Mon May 25 02:27:58.267700 2026] [:error] [pid 11280:tid 11289] [client 170.64.238.42:50688] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/plugins/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahNDLoRn5s7laoSxy1RMmQAAAEQ"]
[Mon May 25 02:27:58.271005 2026] [:error] [pid 11281:tid 11336] [client 170.64.238.42:50692] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/cms/vendor/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahNDLpKmC9taWvA91j7APAAAAJc"]
[Mon May 25 02:27:58.284040 2026] [:error] [pid 11281:tid 11321] [client 170.64.238.42:50694] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/admin/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahNDLpKmC9taWvA91j7APQAAAIg"]
[Mon May 25 02:27:58.287198 2026] [:error] [pid 11281:tid 11329] [client 170.64.238.42:50706] [client 170.64.238.42] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/arquivos/javascript/responsive_filemanager/filemanager/dialog.php"] [unique_id "ahNDLpKmC9taWvA91j7APgAAAJA"]
[Mon May 25 06:58:48.904749 2026] [:error] [pid 9398:tid 9415] [client 20.195.178.143:2831] [client 20.195.178.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "ahOCqOhIu7KstzsCua-zowAAAMs"]
[Mon May 25 06:58:50.160830 2026] [:error] [pid 50423:tid 50434] [client 20.195.178.143:8539] [client 20.195.178.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "ahOCqqJWO7En4nKEQ3g7uwAAAQk"]
[Mon May 25 06:58:51.440636 2026] [:error] [pid 9304:tid 9376] [client 20.195.178.143:8549] [client 20.195.178.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "ahOCq-VEV2qpMC_1UzSRRAAAAI8"]
[Mon May 25 06:58:52.703999 2026] [:error] [pid 9304:tid 9361] [client 20.195.178.143:9105] [client 20.195.178.143] ModSecurity: Access denied with connection close (phase 1). Operator GT matched 10 at IP:wp404_cnt. [file "/usr/local/apache/modsecurity-cwaf/rules/99_Custom_WebShells.conf"] [line "47"] [id "771005"] [msg "Too many 404s in short window (likely scanner)"] [tag "rate_limit"] [tag "probes"] [hostname "www.measureyourcause.measureyourbrand.com.au"] [uri "/randkeyword.PhP7"] [unique_id "ahOCrOVEV2qpMC_1UzSRTAAAAIA"]